last executing test programs: 20m39.14897694s ago: executing program 32 (id=960): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r1, &(0x7f0000000040)="240000001e005f0214f6fffffffffff807000000000000000000000008a609000d000000", 0x24) syz_open_dev$vcsu(&(0x7f0000000280), 0x2, 0x14002) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {0xfffffff8}}, './file0\x00'}) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4300) readahead(r6, 0x6, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r9, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) recvmsg(r7, &(0x7f0000000040)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/155, 0x9b}, {&(0x7f0000000300)=""/119, 0x77}], 0x2}, 0x3e22) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$sock(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)='#', 0x1}], 0x1}, 0x20000810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0xa, 0x6, 0x4, 0x1ff}, {0x0, 0x6, 0x2, 0x7}, {0x9, 0xfb, 0x2, 0xc0000000}, {0x7, 0x4, 0x67, 0x3}, {0xae, 0xac, 0x84, 0x2}, {0x7, 0x7f, 0x6, 0x6d}, {0x4, 0x3, 0x2, 0x10}, {0x1, 0x1, 0xb, 0x2a}]}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r12) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4004) sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x38, r10, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x63}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80000000}]}, 0x38}}, 0x880) 19m9.021469542s ago: executing program 5 (id=1437): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) (async) r2 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x80800) syz_open_procfs(0x0, 0x0) memfd_create(0x0, 0x2) (async) memfd_create(0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc880, 0x0, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) syz_usb_control_io$hid(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 19m6.319541355s ago: executing program 5 (id=1447): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x1, 0x7, 0xff, 0x1000, 0xc, 0xf, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x7, 0x40, 0x8, 0x6, 0x3, 0x0, 0x11000, 0x4, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x81, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x85, 0x5, 0x1, 0xb, 0x4, 0x7, 0xd, 0x0, 0x9, 0x8, 0x8, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x3fa, 0xffffffff, 0x6, 0x6, 0x49, 0x80000000, 0xfdffbfff, 0x2, 0xfffffffe, 0x84, 0x100, 0x0, 0x252, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0xff, 0xb, 0x10000002, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x400, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xfffffffd]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x21, {[@global=@item_012={0x0, 0x1, 0x9}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0x0, "06000200"}, @main=@item_4={0x3, 0x0, 0xc, "13c15ed6"}, @main=@item_4={0x3, 0x0, 0xa, "4054f20a"}, @main=@item_012={0x2, 0x0, 0xb, "1fa0"}, @local=@item_4={0x3, 0x2, 0x9, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_012={0x2, 0x0, 0xb, 'Ph'}]}}, 0x0}, 0x0) 19m4.186764211s ago: executing program 5 (id=1459): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xb, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0xb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c8844}, 0x4000001) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x40003e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000300)=r0, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000140), &(0x7f00000002c0)=0x40) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 18m59.43083953s ago: executing program 5 (id=1468): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0xc1205531, &(0x7f0000002680)=""/4078) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 18m59.178878718s ago: executing program 5 (id=1470): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0x154, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private1, @in6=@private0, 0xfffd, 0x714, 0x4e23, 0x5, 0x2, 0x0, 0x0, 0xc}, {@in=@multicast2, 0x4d2, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xc3}, {0xfffffffffffffffc, 0x0, 0x1f, 0x7}, {0x2, 0x2, 0xfffffffe}, 0x70bd2a, 0x3500, 0x2, 0x1, 0x0, 0xa0}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e20, @in6=@remote}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0764fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x34) 18m58.736838005s ago: executing program 5 (id=1472): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffe, 0xffffffff, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x6, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000040)={0x1, 0x3, 0xd1d, 0x2, 0x6, 0x38, 0x7, 0xd58, 0xff, 0x7fff, 0x0, 0x5}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0x7f) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 18m58.369064074s ago: executing program 33 (id=1472): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffe, 0xffffffff, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x6, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000040)={0x1, 0x3, 0xd1d, 0x2, 0x6, 0x38, 0x7, 0xd58, 0xff, 0x7fff, 0x0, 0x5}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0x7f) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 15m31.704033936s ago: executing program 1 (id=2504): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000000) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xfff1}, {0xafabc05531515610, 0xfff3}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000040)='+.\x00', 0xa1000, &(0x7f00000000c0)={@_ha_fsid={[0x9, 0x7f]}, {0x8, 0x5, 0x8435, 0x100000000000000}}, 0x6, &(0x7f0000000100), &(0x7f0000000180)=0x7}) (async, rerun: 32) fsopen(&(0x7f0000000000)='hpfs\x00', 0x1) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) capset(0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$OCFS2_IOC_UNRESVSP(0xffffffffffffffff, 0x40305829, 0x0) (async, rerun: 32) close(0x4) (rerun: 32) 15m31.466282885s ago: executing program 1 (id=2507): r0 = socket(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03080004030e09050e03f7"], 0x0) (async, rerun: 32) getsockopt$sock_cred(r0, 0x1, 0x1c, &(0x7f0000000000)={0x0}, &(0x7f0000000180)=0xc) (rerun: 32) syz_open_procfs(r1, 0x0) 15m28.383730925s ago: executing program 1 (id=2525): r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x3, 0xfffffffd, 0x14, @dev={0xfe, 0x80, '\x00', 0x12}, @remote, 0x700, 0xba08}}) tgkill(r0, r0, 0x11) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x3, 0x8b39, 0x3a, 0x3d}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x4a67, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x5, 0x3b7, 0x3}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1100, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0x5}, {0x0, 0xfff1}, {0x6, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x161, 0x17, "00020000f7fd00"}) r7 = syz_open_pts(r6, 0xc0000) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f00000004c0)) 15m28.242783052s ago: executing program 1 (id=2526): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r4 = socket$igmp(0x2, 0x3, 0x2) syz_clone(0x80900000, &(0x7f0000000180)="05a6f333be3684feea8c6a9725efec17d6a0b15ddbfdc7a536ad480475cb6df9ee6a052fcc62bef3152e2cbaad2d86120328875d440919f1dc0aab2fe5c409c211a455c5725787065414a91ce7892087c3de029482851be239fac8106264f6ba1970d0a6e51983ebf17c37a984fb4f3ab6c369d401b7e9e5efa821d4332b311605e711801ce02d708425a2dc", 0x8c, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340)="17a06a8369f313eb3476c697e8b27b961f9535b574aea9a5f00443ce146d50dd19e534d1b7279ee9397f50a6f3cd9ffe10b26d2754f66fa3eced86d3bc9f853f7759c2781ab0846c4667a07ed47a05149b9ce6abe26ca34b1a9ce2c884c3f11c97dca01136037cb2759c2c155e2dd07cf795314b24404ef92371a016f1d52d590c713eeeec3fb4dec80c9dde9075ff") setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f0000000080), 0x4) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000000)={0x0, 0x200000}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001680)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x7, 0x8, {{0x1b, 0x4, 0x3, 0x37, 0x6c, 0x66, 0x0, 0xee, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0x11, [@remote]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0xdc, 0x0, 0xf, [0xfff, 0xe, 0x6, 0x9, 0x4]}, @generic={0x88, 0x9, "fb57d900a09e6a"}, @timestamp={0x44, 0x20, 0x5, 0x0, 0x3, [0x5, 0x5, 0x5, 0x100, 0x95b, 0x22b3, 0x2]}, @rr={0x7, 0x7, 0x3b, [@rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x438, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x3, 0xa, 0x18, 0xffffffffffffffff}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7ff}]}, &(0x7f0000000440)='GPL\x00', 0x9, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x8, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001780)={0x5, 0x2, 0x2, 0x247}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000017c0)=[r1, r0, r0, r1, r0], &(0x7f0000001800)=[{0x5, 0x3, 0x2, 0xb}, {0x0, 0x3, 0x2, 0x8}, {0x3, 0x5, 0x3, 0x3}, {0x2, 0x2, 0x6, 0x4}, {0x0, 0x4, 0xc, 0x6}, {0x1, 0x1, 0xb, 0x3}], 0x10, 0x344e32df}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a2a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010500000001000000000624fdee7c1b0905810308000300000904010000020d00000904010102020d0000090582"], 0x0) 15m26.449261268s ago: executing program 1 (id=2537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80, 0x1c0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x909, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x7e}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0xd, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x4, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x6, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x44004) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdaff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x3, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c074}, 0x20004810) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000002f0009002abd7000000000000400000045001180e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9"], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0xa0042, 0x10e) copy_file_range(r10, 0x0, r10, &(0x7f0000000040)=0x8, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 15m25.363849674s ago: executing program 1 (id=2541): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x800) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0xf000000, 0x1, 0x800, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa00964, 0x0, '\x00', @p_u16=0x0}}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x301002, 0x0) close(r2) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x28, 0x1, 0x7, 0xffeff038}, {0x6, 0x0, 0x0, 0xfffffffc}]}) (async) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) r5 = syz_open_dev$evdev(&(0x7f0000001080), 0xfffffffffffffffe, 0x420100) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000010c0)=""/13) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd) (async) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) (async) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b240605"], 0x0) 15m25.034213393s ago: executing program 34 (id=2541): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x800) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0xf000000, 0x1, 0x800, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa00964, 0x0, '\x00', @p_u16=0x0}}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x301002, 0x0) close(r2) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x28, 0x1, 0x7, 0xffeff038}, {0x6, 0x0, 0x0, 0xfffffffc}]}) (async) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) r5 = syz_open_dev$evdev(&(0x7f0000001080), 0xfffffffffffffffe, 0x420100) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000010c0)=""/13) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd) (async) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) (async) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b240605"], 0x0) 11m33.139453891s ago: executing program 2 (id=3743): r0 = io_uring_setup(0x7, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x3032, &(0x7f0000000080)={0x0, 0x7011, 0x80, 0x0, 0xfffffffb}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x222080, 0x0, 0x3a}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345}) r6 = mmap$IORING_OFF_PBUF_RING(0x0, 0x0, 0x4, 0x40010, r0, 0x85667e06) syz_ublk_setup_io_uring(0x6853, &(0x7f0000000040)={0x0, 0xc131, 0x2, 0x2, 0x1e4, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r6, r7, &(0x7f0000000180)=@IORING_OP_NOP128={0x3f, 0xc, 0x0, r2, 0x4, 0x1, 0x4, 0x0, 0x1, {0x9}}) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r10, &(0x7f0000000080)=""/1, 0x1) r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x1, 0x0) r13 = openat$cgroup_subtree(r12, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) munlockall() openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_STATS_FD_vm(r8, 0xaece) close_range(r1, 0xffffffffffffffff, 0x0) 11m32.72254779s ago: executing program 2 (id=3744): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000068e000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000080)="c4e1fd7f07c74424020600000048b86d2ab7a5a7d17d0d0f23c00f21f835000000000f23f800000000d30f01146c6cb87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c0c4c2393bfe3500042b0000003045f7b300000000430f21e3421d00d5", 0x6e}], 0x1, 0x48, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex=r3, 0xa, 0x0, 0x895, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0]}, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) fchdir(r5) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PAUSE(r6, 0x40044145, &(0x7f0000000000)=0x2) close(r5) r7 = socket$nl_crypto(0x10, 0x3, 0x15) bind(r7, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socket$nl_generic(0x10, 0x3, 0x10) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r10, 0x0, 0x0, 0x0) 11m32.516172239s ago: executing program 2 (id=3749): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000003c0)={0xd, 0x7f, 0x401}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000240)={0xa81, 0x8, 0x61, {0x4}, 0xfffffff8, 0xfffffffd}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r5, r5}, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c) r6 = dup2(r3, r3) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000400)='{\x00', &(0x7f0000000440)='\x00', 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) 11m31.491123525s ago: executing program 2 (id=3753): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001080)=@delchain={0x34, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x1, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x0) 11m30.587252712s ago: executing program 2 (id=3760): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f00000002c0)="f2", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r1, 0x1) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r3, 0x808, 0x9565, 0x6fa, 0x0, 0xec4}, 0x14) r4 = openat2(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000001c0)={0x40, 0x0, 0x8}, 0x18) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() (async) r7 = getpid() rt_tgsigqueueinfo(r7, r6, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) r8 = syz_clone3(&(0x7f0000001940)={0x40100080, &(0x7f0000000340), &(0x7f0000000180), &(0x7f0000000200), {0x4}, &(0x7f0000000300)=""/17, 0x11, &(0x7f0000000900)=""/4096, &(0x7f0000001900), 0x0, {r4}}, 0x58) (async) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000000)={0x400000100002f, {0x5, 0x2, 0xa303, 0x201, 0x1}}) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0x6, 0x0, 0x0) (async) process_vm_writev(r8, &(0x7f0000001e00)=[{&(0x7f00000019c0)=""/153, 0x99}, {&(0x7f0000001a80)=""/193, 0xc1}, {&(0x7f0000001b80)=""/212, 0xd4}, {&(0x7f0000001c80)=""/243, 0xf3}, {&(0x7f0000001d80)=""/95, 0x5f}], 0x5, &(0x7f0000002440)=[{&(0x7f0000001e80)=""/248, 0xf8}, {&(0x7f0000001f80)=""/203, 0xcb}, {&(0x7f0000002080)=""/243, 0xf3}, {&(0x7f0000002180)=""/80, 0x50}, {&(0x7f0000002200)=""/3, 0x3}, {&(0x7f0000002240)=""/159, 0x9f}, {&(0x7f0000002300)=""/226, 0xe2}, {&(0x7f0000002400)}], 0x8, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000710025042dbd70007f00000007000000", @ANYRES32=r12, @ANYBLOB="100001800c00042fd280080501001400"], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040010) (async) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r14, @ANYRESDEC=r12], 0x44}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={r5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x7, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) mlock(&(0x7f000020c000/0x1000)=nil, 0x1000) 11m30.309116883s ago: executing program 2 (id=3763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800030004000000080004000500"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000140)={0x40, 0x9, 0x1, "a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000180)={0x40, 0x18, 0x1, '$'}, 0x0, 0x0}) syz_usb_control_io$uac1(r4, &(0x7f00000003c0)={0x14, &(0x7f0000000000)={0x40, 0x21, 0x50, {0x50, 0x5, "b067e35882160db6c96d31621f0617d4c5a344da077c0a25f394429c34b1cbe3dcc4347d864ab772237fd3967c37039e27b07f8257dd8d87953572b2a53bf27431b16ac54246e9cb7df32ea1ca63"}}, &(0x7f00000002c0)={0x0, 0x3, 0xaf, @string={0xaf, 0x3, "7e451ee01b1ebf44e53813c9fb4db355951132cbdd5482d7569db35f6c604ce0c179e82190324d296190285d3b255aa53ae5bf9393d3232040085b25efbe3e5be7285ea503fdc24085c5291c78a7f0ee3ca90037d74d8ca90368dd507f4ecc61eb4b94422f82641d4903cda71e915971dc87d4e14b5490030a39d183002bf0d3f650c3c9fa35c362669686e821443275ae0d69120620bc827c707896e21563a422b2526eb9d919609ae9834abf"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000480)={0x40, 0x12, 0x39, "b326dc0802eddcb3499d6ddde3323539f28bd69affd15e4f69b79cb4f9dd6a4334032543b743fba04a7ccda830f978f573150734dfce3891b2"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000005c0)={0x20, 0x81, 0x2, "1619"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "ac00"}, &(0x7f00000006c0)={0x20, 0x83, 0x1, "b5"}, &(0x7f0000000700)={0x20, 0x84, 0x3, "1fab43"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "7e3dae"}}) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000d00), 0x2, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$setown(r5, 0x8, r6) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x9, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r7, 0x40106439, &(0x7f0000000240)={0x1, r8}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11m29.882030109s ago: executing program 35 (id=3763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800030004000000080004000500"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000140)={0x40, 0x9, 0x1, "a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000180)={0x40, 0x18, 0x1, '$'}, 0x0, 0x0}) syz_usb_control_io$uac1(r4, &(0x7f00000003c0)={0x14, &(0x7f0000000000)={0x40, 0x21, 0x50, {0x50, 0x5, "b067e35882160db6c96d31621f0617d4c5a344da077c0a25f394429c34b1cbe3dcc4347d864ab772237fd3967c37039e27b07f8257dd8d87953572b2a53bf27431b16ac54246e9cb7df32ea1ca63"}}, &(0x7f00000002c0)={0x0, 0x3, 0xaf, @string={0xaf, 0x3, "7e451ee01b1ebf44e53813c9fb4db355951132cbdd5482d7569db35f6c604ce0c179e82190324d296190285d3b255aa53ae5bf9393d3232040085b25efbe3e5be7285ea503fdc24085c5291c78a7f0ee3ca90037d74d8ca90368dd507f4ecc61eb4b94422f82641d4903cda71e915971dc87d4e14b5490030a39d183002bf0d3f650c3c9fa35c362669686e821443275ae0d69120620bc827c707896e21563a422b2526eb9d919609ae9834abf"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000480)={0x40, 0x12, 0x39, "b326dc0802eddcb3499d6ddde3323539f28bd69affd15e4f69b79cb4f9dd6a4334032543b743fba04a7ccda830f978f573150734dfce3891b2"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000005c0)={0x20, 0x81, 0x2, "1619"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "ac00"}, &(0x7f00000006c0)={0x20, 0x83, 0x1, "b5"}, &(0x7f0000000700)={0x20, 0x84, 0x3, "1fab43"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "7e3dae"}}) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000d00), 0x2, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$setown(r5, 0x8, r6) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x9, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r7, 0x40106439, &(0x7f0000000240)={0x1, r8}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m28.576229746s ago: executing program 7 (id=4452): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000107, 0x0, 0x8}]}) r1 = io_uring_setup(0x6caa, &(0x7f00000013c0)={0x0, 0x1069fa, 0x1000, 0x13, 0x318}) io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f0000000080), 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0x6}, {0x3}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000104000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000008c403001c0012800b00010067726574617000000c0002800600020020200000140003"], 0x50}, 0x1, 0x0, 0x0, 0x484c}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f000009ff40)='net/ip6_mr_vif\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x40000011}) epoll_pwait(r4, &(0x7f0000002100)=[{}], 0x1, 0x1a83, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x77359400}, {r5, r6+60000000}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x8}, {0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f0000000540)=0xfff) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f0000000100)={0x9, 0x4, 0x0, 0x1, 0x8001}) write$ppp(r7, &(0x7f00000001c0)="000200e5d60010", 0x7) 9m28.354429182s ago: executing program 7 (id=4453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/14, 0xe}, 0x100}], 0x1, 0x60, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x8, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4f26c, 0x4000}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x10000, 0x3ff}}]}]}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x48090) 9m28.21890823s ago: executing program 7 (id=4455): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000e00)='nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000f00)='lo', 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r0, &(0x7f0000000180)=""/145, 0x91) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000140)={&(0x7f00002c5000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000, 0x2}) 9m27.77848088s ago: executing program 7 (id=4458): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f911, 0x5, '\x00', @p_u16=&(0x7f00000001c0)=0x3}}) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000002c0)={0x8000000c}) (async) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) close(r1) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) (async) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x58, 0x12) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240)={0x400, 0xffff0832, 0x800, 0x0, 0xffffff94}, 0x14) (async, rerun: 64) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) (rerun: 64) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0d, &(0x7f0000000040)) r9 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r10 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) (async) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0x9, 0x8}, {0x3, 0xf040946f7f515fa8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}], 0x40) (async) ppoll(&(0x7f0000000080)=[{r8, 0x1206}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 9m27.623409571s ago: executing program 7 (id=4459): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a310000000005000100070000003c000780060b04404e2100f47309c04ef1a658440c000180080001400a0101010c00028008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ftruncate(r0, 0xfffffffe) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0xe, 0x9, 0x3, 0x7, 0x21, 0x6, 0xfe}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3a) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x3, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m27.477128267s ago: executing program 7 (id=4461): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000040)={0xeb, 0xbcb8, 0x1, 0x4, 0x3, [0x8c32, 0x7514, 0x0, 0x10000]}) syz_emit_ethernet(0x1aa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea01703c0020010000000000000000000000000002ff0200000000000000000000000000012b0a0101"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x11, 0x83, 0x20000a2e, 0x80401000, 0xe, 0x4, 0x1000001, 0xb1, 0xb000001}}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty, 0x4}, 0x1c) r3 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x82d7f) ioctl$NILFS_IOCTL_GET_VINFO(r3, 0x6f2d, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0x4000000000000fff, 0x5) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "51edef7214e4ff93", "42635001e90003a25f49631e467e1074", "6bbc39e1", "e01cf9ab6c03e72d"}, 0x28) r5 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x568, 0xd0, 0x3a8, 0xd0, 0x1c0, 0xd0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, &(0x7f0000000200), {[{{@ipv6={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xffffffff, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xffffffff], 'bridge0\x00', 'gretap0\x00', {0xff}, {0xff}, 0x62, 0x7, 0x0, 0x60}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@loopback, 0x21, 0x12, 0x8d4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xff, 0xff000000, 0xff000000], [0x0, 0xff000000, 0xff, 0xffffff00], 'bridge0\x00', 'bond_slave_1\x00', {}, {}, 0x73, 0x99, 0x1, 0x40}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@loopback, 0xb, 0x11, 0x4}}}, {{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x3e}, [0xff, 0xffffffff, 0xff, 0xffffffff], [0xff000000, 0x0, 0xffffffff], 'syzkaller1\x00', 'gretap0\x00', {}, {}, 0x84, 0x7, 0x0, 0xd}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@empty, 0x38, 0x10, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000480)=@urb_type_control={0x2, {0x0, 0x1}, 0x3, 0x44, &(0x7f00000001c0)={0x20, 0x3, 0x17, 0x1}, 0x8, 0x1d, 0x3, 0x0, 0x4bf, 0x404, 0x0}) preadv2(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/65, 0x41}, {&(0x7f00000000c0)=""/157, 0x9d}], 0x2, 0x2, 0x800003fd, 0x5) 9m24.782994773s ago: executing program 8 (id=4478): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = epoll_create(0x401) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) fcntl$notify(r0, 0x402, 0x74b36ae8d0024e5c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000d1420002dbd7000fcdbdf2508000100010000000800010000000000fb4b308a32ddf801339ccc62327a95b7870e75b87da0d18c198b"], 0x20}}, 0x8884) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) getdents64(r4, 0x0, 0x0) 9m24.086422142s ago: executing program 8 (id=4481): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb48}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xbbd}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xe000, {0x8, 0x7ff, 0x0, 0xb9d4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x24008080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x2}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) syz_open_dev$vim2m(&(0x7f00000004c0), 0x7, 0x2) r3 = syz_usb_connect$uac3(0x6, 0x10d, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfb, 0x3, 0x1, 0x3, 0x40, 0x9, {0x8, 0xb, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf, 0x2, 0x7, 0x4, "b5f9"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x3, 0x8, 0x0, "d7f726d56eaf8bce"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xff, 0x2, 0x7, 0x7, "", "dc0a"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0x6, "6cf97707"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x3, 0xe, 0x3, {0xa, 0x25, 0x25, 0xb, 0x8, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x0, 0x9, "bc4a"}, @as_header={0x17, 0x24, 0x1, 0xa, 0x28, 0xa, 0x3, 0x4, 0x0, 0xb447, 0x3}, @as_header={0x17, 0x24, 0x1, 0xf5, 0x101, 0x7, 0x0, 0x1, 0x1, 0x3, 0xff}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x2, 0x1, 0x3, "8a68d28fa471"}, @as_header={0x17, 0x24, 0x1, 0x3, 0x34a, 0xf7, 0x1, 0xd8, 0x3, 0x9, 0xf8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x5, 0x2, {0xa, 0x25, 0x25, 0x81, 0x6, 0x80}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x250, 0x7, 0x3, 0xff, 0x40, 0x1}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x447}}, {0xb, &(0x7f0000000700)=@string={0xb, 0x3, "ccc51031169cc82793"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x804}}]}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000007c0)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000940)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/59, 0x3b, 0x0, &(0x7f0000000840)=""/238, 0xee}, &(0x7f0000000980)=0x40) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000d00)={0x2c, &(0x7f00000009c0)={0x0, 0x31, 0x100, {0x100, 0x24, "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"}}, &(0x7f0000000b00)={0x0, 0x3, 0xbe, @string={0xbe, 0x3, "bbeff15a7c9652ea6a7de159c368c04312a5a5d8ad27a57bba31d4de6c2d6cce5aa0255eb666c92c68a5c91452bfea08da45b17d419bc65b85d66371d79ad4c1d6883358df589a823e23d20253982ae0c76c8784e35f508dc3eaba8200d2c1cbc9d5ed50f9f260d2d1b69c4d9dd52dfcd3637f96a26cf9fcf72813dd846a519133d9e16b014359278ccc32a13015412542e92d8082628caef6742d26e23d820ddea59c8d1d05728480524573e284cfb4272ba6c3dd6239624ff2cbe8"}}, &(0x7f0000000c00)={0x0, 0xf, 0x60, {0x5, 0xf, 0x60, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "90741c4f2c1b440ad8f0a17e2d8183e0"}, @ptm_cap={0x3}, @generic={0x41, 0x10, 0x2, "87e30fd8c218044635666a7d3619885a13f8ff9951f61f6f4f313c870457b012c9206ae29366606d2ef297030a65b8c90629c52f2e0c4d6bb313cb671ba7"}]}}, &(0x7f0000000c80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x9, 0x63, "3526dcc8", "ed702551"}}, &(0x7f0000000cc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x3, 0x0, 0x4, 0xc0, 0x4, 0x3}}}, &(0x7f00000011c0)={0x84, &(0x7f0000000d40)={0x40, 0x15, 0x9a, "234e81ef026d4fc5183f2c9f1824bb008a9e7d6036814befbf52c118485dc203f227b9f672288497a1640133bcbc202fe44ecaae0bbed3390ff8b70a950979ed10d75bedf97e8c90325d0fea62b943aaea4ab5f0fc2569388e62e7116adec785b1ad134da1b54ecabb53e97f23863e50cea55692f0f2224ab7c2a1a7023dbf436bfd16fca1513b8e33dccafeb489e6af33a8694ff5074458b022"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x1c00, 0x1}}, &(0x7f0000000f00)={0x40, 0x7, 0x2, 0xa44}, &(0x7f0000000f40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000f80)={0x40, 0xb, 0x2, "51bc"}, &(0x7f0000000fc0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001000)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001040)={0x40, 0x17, 0x6, @random="49bea43ce4a8"}, &(0x7f0000001080)={0x40, 0x19, 0x2, "8138"}, &(0x7f00000010c0)={0x40, 0x1a, 0x2, 0xac}, &(0x7f0000001100)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001140)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001180)={0x40, 0x21, 0x1, 0x5}}) r5 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000001280)=""/55, &(0x7f00000012c0)=0x37) gettid() sendmsg$sock(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001300)=@rc={0x1f, @any, 0x6}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001380)="038e35db8e98c540d40cd0c481e0825a72e071aa2ca495cc2965605ae34de14fe516e347ad190f03eea3e0f31aeb4c49c9c80bd49f1ad4567edffd782c685007", 0x40}, {&(0x7f00000013c0)="544d071d18058739cf804d9fcbdc48dd81974fe7c51e120291f12a5b4cc3116c0bb842c1f0e84f23c99247f206a974e4bb8ff4cc944bcc1219937dbd3c50c3ea66015823efa377adc15645ad7babbc78a0dcd7e3ffdfaa732d00", 0x5a}, {&(0x7f0000001440)="03fd2fef3fc10c60c16f2516ebd0a4dd9176f9cdaa2bd32e7cac360aed478861237cd1bf099c16bb91ccbb3f05460309035d9fa2708dfffdb00f72c24605f8648865a622a1c65c619d6871736d588b9fb2d113d2900f097e72154b275b9a7189167322727064bb7c03ada4ed61480659a8dac195e845d86120aee498667777447dc16160ad9af35be46992ff720809e2d98394447d2e64ffc24164f83c77ad4f3cf1810147c89f6bf7e2e03034e88880eb0f7d095f0bda5727fd3f43658ac68ddbb4a4cb7a15db78f87c22edf3aa6d05370ec75d07deacfa7e4a363533710f77b857", 0xe2}, {&(0x7f0000001540)="444296509fb6913c1abb0d0bf5197c56f37a6da6661955c49405f0e6a8d375422e137232bc7472e289634a15ac667fe547066411e4f7190859bd85aed8155d25222773255135dbd688181eca069d8a6f826b0ceac473e2669de1e7c08b", 0x5d}], 0x4, &(0x7f0000001600)=[@txtime={{0x18, 0x1, 0x3d, 0x74}}], 0x18}, 0x4000) r6 = syz_open_dev$sndpcmc(&(0x7f0000001680), 0x7, 0x10000) read$snddsp(r6, &(0x7f00000016c0)=""/32, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000001980)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001940)={&(0x7f0000001740)={0x1fc, 0x2, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, @CTA_EXPECT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x5c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x8}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0xc811}, 0x20000000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001a00), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000001b80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xe4, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1c, 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x16}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r6, 0xc06c4124, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}]}, 0x1c}}, 0x8001) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x28, r1, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x26}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x18440000}, 0xc, &(0x7f0000002a80)={&(0x7f0000001f00)={0xb54, r1, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x1c}}}}, [@NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff95, 0x6, 0x3, 0x0, 0xee, 0xfd, 0xfeff, 0xa]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x3}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd6c, 0x8001, 0x4, 0x1ff, 0x10, 0x8, 0x0, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x3}, {0x0, 0xa}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x6}, {0x1, 0x4}, {0x6, 0x9}, {}, {0x0, 0x4}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x5, 0x2}, {0x2, 0x7}, {0x5, 0x7}, {0x6, 0x5}, {0x4, 0x4}, {0x5, 0x2}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x4, 0x4}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x27, 0x3, 0x6740, 0x3405, 0x9, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0xa89, 0x4, 0x10, 0x5, 0xe6, 0x5, 0xfffa]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x2, 0x3, 0x6b, 0x1, 0x100, 0x234]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffae, 0xc, 0x9, 0x5, 0x3ff, 0x3, 0xfff, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x34, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x3, 0x9, 0x7, 0x8, 0x4, 0xe, 0xd3]}}]}]}, @NL80211_ATTR_TX_RATES={0x2d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x5}, {0x0, 0x2}, {0x5}, {0x1, 0x3}, {0x5, 0xa}, {0x4, 0x9}, {0x2, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x3}, {0x3, 0x9}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x6}, {0x7, 0x1}, {0x1, 0x3}, {0x6}, {0x7}, {0x3, 0x6}, {0x2, 0x9}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0xa}, {0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2005, 0x400, 0x7fff, 0x0, 0x1, 0x3, 0xf585, 0x6]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x9, 0x101, 0x9, 0x34, 0x7, 0xaeb8, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x4928, 0x4, 0xe, 0x9, 0x7, 0x472]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x4, 0x8001, 0x7, 0x5, 0x91, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x5, 0xfb9, 0x2b9, 0x3, 0x9, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfff, 0x10, 0x5, 0x1, 0x5, 0x2, 0x5]}}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xa, 0x101, 0x6d03, 0x3, 0x7, 0x77cc, 0xfffd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x6, 0xb32, 0xec, 0x401, 0x0, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0xb, 0x3, 0x2, 0x60, 0x30, 0x12, 0x6c, 0x1, 0x12, 0x9, 0x30, 0x24, 0x1, 0x3, 0x9, 0x16, 0x30, 0x1, 0x5, 0x24, 0x12, 0x2, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x150, 0x9, 0x4, 0x7, 0x1ff, 0x7f, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x81, 0x1, 0x6, 0x7ff, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4e75, 0x8, 0xff5d, 0x9, 0x8, 0x5, 0xe, 0x5]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1}, {0x1, 0x5}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x7}, {}, {0x0, 0x4}, {0x3}, {0x1, 0x1}, {0x7, 0x8}, {}, {0x5, 0x7}, {0x1, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x3}, {0x3, 0x7}, {0x6, 0x4}, {0x5, 0x2}, {0x7, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0x5}, {0x7, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x5, 0x9}, {0x3, 0x1}, {0x7, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x2, 0x4}, {0x6, 0x9}, {0x7, 0x1}, {0x5, 0x7}, {0x6, 0x8}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x3}, {0x3, 0x8}, {0x3, 0x9}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x6}, {0x7, 0x6}, {0x4, 0x5}, {0x6, 0xa}, {0x4, 0x1}, {0x7, 0x2}, {0x0, 0x4}, {0x2, 0x5}, {0x6}, {0x0, 0x7}, {0x5, 0x9}, {0x5, 0x7}, {0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x1, 0x5}, {0x6}, {0x5, 0x1}, {0x6, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa34, 0x61, 0x7, 0x6e4f, 0x4, 0x6, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xffff, 0x2, 0x6, 0x8, 0x7, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x2, 0x2, 0x8000, 0x6, 0x65, 0x1000]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xf, 0x3, 0x0, 0x2, 0xf, 0x1000, 0xfff8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0xa}, {0x1, 0x7}, {0x4, 0x5}, {0x7, 0x1}, {0x4, 0x2}, {0x7, 0xa}, {0x6, 0x1}, {0x7, 0xa}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0xa}, {0x6, 0x2}, {0x5, 0x1}, {0x2, 0x1}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x4ab, 0xc58, 0x9, 0x1, 0x200, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xd7d, 0x101, 0x5, 0x86, 0x5, 0xfff, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0x1}, {0x7}, {0x7, 0xa}, {0x6, 0x5}, {0x4, 0x7}, {0x6, 0x8}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x5}, {0x2, 0x2}, {0x4}, {0x2, 0x1}, {0x3, 0x4}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0x7}, {0x5, 0x9}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0x6}, {0x0, 0x5}, {0x1, 0x6}, {0x0, 0x2}, {0x7, 0x7}, {0x2, 0x9}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x9}, {0x0, 0x3}, {0x7, 0x8}, {0x6, 0x5}, {0x0, 0x1}, {0x2}, {0x7, 0x4}, {0x1, 0x9}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x6}, {0x7, 0x5}, {0x4, 0x9}, {0x3, 0x4}, {0x4, 0x4}, {0x7, 0xa}, {0x4, 0x7}, {0x3, 0x2}, {0x7, 0x6}, {0x5, 0x7}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4820, 0x1, 0x1, 0x7, 0x3, 0xd6e]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6bdc, 0xf5, 0x3, 0x5, 0x7, 0x10, 0x9, 0xd42]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x2, 0x7}, {0x7, 0xa}, {0x4, 0x7}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x7}, {0x1, 0x8}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0x9}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x6}, {0x5}, {0x0, 0x3}, {}, {0x0, 0x6}, {}, {0x4, 0xa}, {0x4, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x1}, {0x1, 0x3}, {0x7, 0x2}, {0x4, 0x6}, {0x2, 0x8}, {0x1}, {0x6, 0x4}, {0x6, 0x1}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x1, 0x3}, {0x3, 0x7}, {0x5}, {0x2}, {0x0, 0xa}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0x3}, {0x6, 0x6}, {0x4, 0x3}, {0x5, 0x6}, {0x6, 0x2}, {0x3, 0xa}, {0x0, 0x6}, {0x1, 0x7}, {0x1}, {0x1, 0x2}, {0x5, 0x4}, {0x4}, {0x1, 0x5}, {0x7, 0x6}, {0x6, 0xa}, {0x6, 0x4}, {0x1, 0xa}, {0x5, 0x9}, {0x0, 0x3}, {0x2, 0x9}, {0x0, 0x7}, {0x1, 0x8}, {0x5, 0x2}, {0x7, 0x8}, {0x0, 0x6}, {0x3}, {0x5, 0xa}, {0x4, 0x5}, {0x0, 0x7}, {0x4, 0x5}, {0x4, 0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x1, 0x7}, {0x2, 0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0xa}, {0x5, 0x2}, {0x3, 0x9}, {0x3}, {0x3, 0x6}, {0x5, 0xa}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x2, 0x3}, {0x4}]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xd, 0x2, 0x800, 0x9, 0x9, 0x8, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x7}, {0x7, 0x4}, {0x1, 0x7}, {0x6, 0x4}, {0x2, 0x1}, {0x1, 0x3}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcb1c, 0x7, 0x9, 0xe, 0xdf, 0x5, 0x5, 0x8]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x7f, 0x53, 0x16, 0x9, 0x18, 0x143d7aa28769a6b7, 0x16, 0x1b, 0x6, 0x18, 0x1, 0x9, 0x1, 0x48, 0x12, 0x1b, 0x3, 0x16, 0xb, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x5, 0xba4c32a8d7689ae2, 0x4, 0xb, 0x18, 0x48, 0xb, 0x1, 0x18, 0xc, 0x24, 0x36, 0x18, 0x6, 0xb, 0x30, 0x9, 0x1b, 0xb, 0x24]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1f0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1}, {0x0, 0x8}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x6}, {0x5, 0x8}, {0x7, 0x8}, {0x4, 0x5}, {0x5, 0x4}, {0x1, 0x4}, {0x3, 0x3}, {0x3, 0x8}, {0x6, 0x8}, {0x4, 0x2}, {0x0, 0xa}, {0x2, 0x4}, {0x4, 0x8}, {0x5, 0x3}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x9}, {0x4, 0x19}, {0x3, 0x8}, {0x0, 0x8}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x1}, {0x3, 0x9}, {0x2, 0x5}, {0x2, 0x8}, {0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x1}, {0x2, 0x7}, {0x2, 0x4}, {0x5, 0x5}, {0x5, 0x5}, {0x4, 0x4}, {0x5, 0x1}, {0x4, 0x5}, {0x7, 0x5}, {0x7, 0x7}, {0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9ba, 0xfff, 0xafa, 0xfffa, 0x9, 0x6, 0xe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3, 0x8}, {0x5, 0x4}, {0x1, 0x3}, {0x6, 0x4}, {0x1, 0x8}, {0x4, 0x1}, {0x0, 0x6}, {0x6, 0x1}, {0x1}, {0x7, 0x3}, {0x7, 0x7}, {0x7, 0xa}, {0x7, 0x3}, {0x6, 0x8}, {0x4}, {}, {0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x5}, {0x2}, {0x2, 0x6}, {0x0, 0x6}, {0x4, 0x1}, {0x1, 0x6}, {0x6}, {0x5, 0x9}, {0x3, 0x8}, {0x1, 0x7}, {0x6, 0x5}, {0x5, 0x5}, {0x5, 0x8}, {0x6, 0x8}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0xa}, {0x7, 0x5}, {0x2, 0xa}, {0x7, 0x3}, {0x6, 0x6}, {0x4, 0x9}, {0x0, 0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x7}, {0x2, 0x3}, {0x7, 0x9}, {0x5, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x4}, {0x5, 0x5}, {0x5, 0x5}, {0x6, 0x2}, {0x6, 0x6}, {0x4, 0x4}, {0x7, 0x3}, {0x2, 0x6}, {0x4, 0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x4e8, 0x6, 0x975e, 0x6ed, 0x81, 0x4, 0x1]}}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3a, 0x48, 0x1b, 0x12, 0xb, 0x12, 0x16, 0x36, 0x12, 0x5, 0x3, 0x21, 0x60, 0x6, 0x6c, 0x12, 0x1b, 0x1, 0x6c, 0x0, 0x3a, 0x1, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2c, 0x2, 0x8, 0xfff2, 0x1, 0xf9e7, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbe, 0x3, 0x8, 0xfff7, 0x3, 0xd6e, 0x8, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x6}, {0x1, 0x4}, {0x0, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x1b, 0x1, 0x4, 0x6, 0x18, 0xb, 0x6, 0x30, 0x48, 0x0, 0x6, 0x4, 0x16, 0x2, 0x4, 0x59, 0x36, 0x5, 0x6c, 0xb, 0xc, 0x4, 0x60, 0x6, 0x6c]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5c, 0x0, 0x30, 0x24, 0x30, 0x4, 0x1b, 0x18, 0x60, 0xa, 0x5, 0x48]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x9, 0x2, 0x1, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x1, 0x8, 0x0, 0x9, 0x0, 0x1, 0x9]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x3}, {0x3, 0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x3}, {0x5, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x4, 0x6}, {0x4}, {0x4, 0x9}, {0x7}, {0x4, 0x6}, {0x7, 0x7}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x2}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xb, 0x1ff, 0x7, 0x12d, 0x5, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x9, 0x6, 0x0, 0x0, 0xce, 0x0, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x18c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfd64, 0x7, 0x3, 0x5, 0x8, 0xfffc, 0x7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0xb, 0x1a9f57b4a8465da5, 0x1, 0x30]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6}, {0x3, 0x3}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x6}, {0x6, 0x5}, {0x6, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x3, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x2, 0x2}, {0x3, 0x8}, {0x3, 0x3}, {0x2}, {0x5, 0x2}, {0x1, 0x6}, {0x3}, {0x6, 0x7}, {0x2, 0x7}, {0x7, 0x4}, {0x7}, {0x4, 0x8}, {0x7, 0x5}, {0x6, 0x1}, {0x6, 0x8}, {0x4, 0x8}, {0x3, 0x1}, {0x4, 0x9}, {0x6, 0xa}, {0x0, 0x7}, {0x4, 0x2}, {0x0, 0x9}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x0, 0x4}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x4}, {0x3}, {0x2, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xaa8, 0x3, 0x9, 0x3, 0x5, 0x4, 0x48d3]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb08, 0x23eb, 0xb, 0x6, 0x10, 0xd8f, 0x1, 0x7fff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x80, 0x8, 0xfffe, 0x10, 0x9, 0x61]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x0, 0x29d3, 0x4, 0x6, 0x1, 0x7b, 0xb01]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0xc, 0x9, 0x6, 0x30, 0x12, 0x36, 0xc, 0xb, 0x6, 0x16, 0x6c, 0x48, 0x48, 0x18, 0x2, 0x1, 0x5, 0x1, 0x2, 0x30, 0x36, 0x36, 0x48, 0x1b]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x5, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x1}, {0x0, 0x4}, {0x1, 0x6}, {0x7, 0x8}, {0x2, 0x1}, {}, {0x0, 0x6}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x4}, {0x6, 0xa}, {0x2, 0x4}, {0x5, 0x3}, {0x3, 0x8}, {0x1}, {0x6, 0x8}, {0x2, 0x4}, {0x2, 0x8}, {0x5, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x7}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x4}, {0x4, 0x5}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x7}, {0x1, 0x9}, {0x7, 0x6}, {0x7}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x5}, {0x7, 0x9}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x3a00, 0x0, 0x571, 0x9, 0x3, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x3}, {0x5}, {0x6, 0x3}, {0x2, 0x8}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0xa}, {0x4, 0x9}, {0x4, 0x6}, {0x6, 0x4}, {0x2, 0x7}, {0x7, 0x6}, {0x4, 0x8}, {}, {0x1, 0x9}, {0x2, 0x8}, {0x3, 0xa}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xdbda, 0x3, 0xc000, 0x48, 0x0, 0x3, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xa, 0x1, 0xfff, 0x8000, 0x10, 0x80, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0xf, 0x9d, 0x8, 0x2c, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x8}, {0x3}, {0x2, 0x6}, {0x4, 0x1}, {0x6, 0x2}, {0x6, 0x9}, {0x3, 0x8}, {0x2, 0x9}, {0x6, 0x4}, {0x2}, {0x4, 0x8}, {0x3, 0x6}, {0x5, 0xa}, {0x0, 0x6}, {0x7, 0x8}, {0x7, 0x6}, {0x7, 0x5}, {0x6, 0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x1, 0x6}, {0x5, 0x2}, {0x3, 0x1}, {0x6, 0x7}, {0x7, 0xa}, {0x5, 0x2}, {0x2, 0x3}, {0x5, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x6, 0x4}, {0x6, 0x2}, {0x6, 0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x2, 0x6}, {0x2, 0x5}, {0x6}, {0x0, 0x8}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x3, 0x7}, {0x2}, {0x0, 0x4}, {0x4, 0x5}, {0x6, 0x3}, {0x5, 0xa}, {0x7, 0x4}, {0x0, 0x3}, {0x0, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0xb, 0x1, 0xf, 0x2, 0x8001, 0xfff]}}]}]}, @NL80211_ATTR_TX_RATES={0x11c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0x18, 0x3, 0x12, 0x18, 0x36, 0x6, 0x4]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xfd46001ebb5f856d, 0x5, 0x30, 0x30, 0x25, 0x30, 0x12, 0x9, 0x12, 0x12, 0x36, 0xc, 0x12, 0x6, 0xb, 0x6c, 0x4, 0x2d, 0x18, 0x30, 0x36, 0x4, 0x18, 0x6, 0x48, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x85, 0xfffa, 0x2, 0x401, 0x1, 0x35e5, 0x7, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {0x6, 0x7}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x3, 0x7}, {0x1, 0x1}, {0x3, 0x5}, {0x1, 0x8}, {0x3, 0x1}, {0x6, 0x2}, {0x7, 0xa}, {0x0, 0x8}, {0x6, 0x9}, {0x0, 0x1}, {0x1, 0x4}, {0x3}, {0x1, 0x4}, {0x7, 0x2}, {0x2, 0xa}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa7, 0x1, 0x2, 0x0, 0x100, 0x5, 0x747c, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x354, 0x7fff, 0x3, 0x7, 0x4, 0x8, 0x5, 0xfff8]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0xb, 0x6, 0x3, 0x30, 0xc, 0x30, 0x16, 0x5, 0x12, 0xb, 0x18, 0x1b, 0x3, 0x9, 0x3, 0x9, 0x60, 0x6, 0x2, 0xc, 0x0, 0x8, 0x36, 0x24, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x7, 0x7, 0x8, 0x6, 0x4, 0x5]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xdf46, 0xffff, 0x10c1, 0x6, 0x8, 0x2, 0x7, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9c, 0x2, 0x80, 0x8, 0x3, 0x1, 0x1]}}]}]}]}, 0xb54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20000890) 9m23.491485499s ago: executing program 8 (id=4484): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002300)=@base={0x1f, 0x0, 0x1, 0x26, 0x470, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x3, 0x70000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="0f013b9a004800004600c4e193d04436e966b846008ee80f21c40f2204c4c3697c6500d336f01964740a0fc71cbc0f011b", 0x31}], 0x1, 0x11, 0x0, 0x0) geteuid() syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6}]}) ioctl$TUNGETVNETLE(r5, 0x40107446, &(0x7f0000000180)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10d503, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) write$cgroup_type(r7, &(0x7f0000000280), 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$TCFLSH(r4, 0x540b, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 9m22.954918965s ago: executing program 8 (id=4487): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FE_DISEQC_SEND_BURST(r2, 0x6f41, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0xfff, 0x1, 0x10000, 0x2, 0x8, 0x5, 0x8}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r3, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000300)={r4, 0xfffc, 0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x8001) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000480)) ioctl$KVM_RUN(r1, 0xae80, 0x0) rt_sigtimedwait(&(0x7f00000004c0)={[0x7a]}, &(0x7f0000000500), &(0x7f0000000580)={0x77359400}, 0x8) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000005c0)={'wg1\x00', 0x101}) splice(r1, &(0x7f0000000600)=0x9, r2, &(0x7f0000000640)=0x7f, 0x8, 0x7) r6 = openat(r1, &(0x7f0000000680)='./file0\x00', 0x400, 0x0) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f00000006c0)={0x3, 0x0, @vsb={0x14}}) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {0x1ff}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f0000000740)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}, 0x7a03}, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x4e22, 0x6, @mcast2, 0x80000000}, @in6={0xa, 0x4e24, 0x6e, @remote, 0x80000000}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x0, @private2, 0x8}, @in={0x2, 0x4e20, @multicast2}], 0xcc) vmsplice(r0, &(0x7f0000000980)=[{&(0x7f0000000840)="c403b068599c6dd61568eb725e9ac3ebfadc59550b72468a61b2d94eacff0164abc101947945d6bbd8b9b2a5aac9854f7c4524f781210576b7e811378d05c1913e6135312e9dc8f3203b11a7d74762b33f7958481d0ff76127c15fbc277b8033f1104679d2a7e2873188e0cfbceb9b06cfa59ef2e9447bd98f6caa00125ba2e475a25b762f7044d006f0f0bb9491f7d6d29a55995c604a93e65b31a6dd27fada8e0494542f1be64415b13fbf27b4afdf22cd4d6eee", 0xb5}, {&(0x7f0000000900)="6d6c4dd1b63b0ed15c1be3ef5935cde40562f2b6509e05d3172305573fa05035c8ea830cac9f2f12b97711019eb9fbe8954e4f907894052748da4321a5cf3c5dac1b34a3d1023a689450d0", 0x4b}], 0x2, 0x5) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000009c0)={0x3}) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000004, 0x50, r7, 0x96b79000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1404000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r8, 0x729, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r9 = pidfd_getfd(r7, r0, 0x0) quotactl_fd$Q_GETQUOTA(r9, 0x0, r5, &(0x7f0000000b40)) r10 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000bc0)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$FITRIM(r10, 0xc0185879, &(0x7f0000000c00)={0x6, 0x15bd8295, 0x3}) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, r5, &(0x7f0000000c40)) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000d00)=@overlay={0x7f, 0x0, 0x4, 0x2, 0x6, {0x0, 0x2710}, {0x1, 0x8, 0x9, 0x0, 0xff, 0x8, "59e71054"}, 0x1, 0x3, {}, 0x9}) 9m22.042313036s ago: executing program 8 (id=4494): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket(0x400000000010, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x6) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400002}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) io_setup(0xfffffffa, &(0x7f0000000300)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000080)=ANY=[@ANYRES16=r5], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, r5, 0x8, &(0x7f00000000c0)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10}, 0x10}, 0x94) 9m21.929957831s ago: executing program 8 (id=4498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x1, 0x180, 0x2000000000000004, 0x10, 0xed, 0x50, 0x7fffffffffffe, 0x2, 0x0, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0xa5, 0xbdb], 0x40000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x4, 0x0, 0x0, @tick=0x1f4, {0x8}, {0x3}, @raw32={[0x2604, 0x2]}}], 0x1c) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x24008050) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r6, 0x80045503, 0x0) 9m12.423037917s ago: executing program 36 (id=4461): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000040)={0xeb, 0xbcb8, 0x1, 0x4, 0x3, [0x8c32, 0x7514, 0x0, 0x10000]}) syz_emit_ethernet(0x1aa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea01703c0020010000000000000000000000000002ff0200000000000000000000000000012b0a0101"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x11, 0x83, 0x20000a2e, 0x80401000, 0xe, 0x4, 0x1000001, 0xb1, 0xb000001}}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty, 0x4}, 0x1c) r3 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x82d7f) ioctl$NILFS_IOCTL_GET_VINFO(r3, 0x6f2d, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0x4000000000000fff, 0x5) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "51edef7214e4ff93", "42635001e90003a25f49631e467e1074", "6bbc39e1", "e01cf9ab6c03e72d"}, 0x28) r5 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x568, 0xd0, 0x3a8, 0xd0, 0x1c0, 0xd0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, &(0x7f0000000200), {[{{@ipv6={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xffffffff, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xffffffff], 'bridge0\x00', 'gretap0\x00', {0xff}, {0xff}, 0x62, 0x7, 0x0, 0x60}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@loopback, 0x21, 0x12, 0x8d4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xff, 0xff000000, 0xff000000], [0x0, 0xff000000, 0xff, 0xffffff00], 'bridge0\x00', 'bond_slave_1\x00', {}, {}, 0x73, 0x99, 0x1, 0x40}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@loopback, 0xb, 0x11, 0x4}}}, {{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x3e}, [0xff, 0xffffffff, 0xff, 0xffffffff], [0xff000000, 0x0, 0xffffffff], 'syzkaller1\x00', 'gretap0\x00', {}, {}, 0x84, 0x7, 0x0, 0xd}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@empty, 0x38, 0x10, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000480)=@urb_type_control={0x2, {0x0, 0x1}, 0x3, 0x44, &(0x7f00000001c0)={0x20, 0x3, 0x17, 0x1}, 0x8, 0x1d, 0x3, 0x0, 0x4bf, 0x404, 0x0}) preadv2(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/65, 0x41}, {&(0x7f00000000c0)=""/157, 0x9d}], 0x2, 0x2, 0x800003fd, 0x5) 9m6.286300585s ago: executing program 37 (id=4498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x1, 0x180, 0x2000000000000004, 0x10, 0xed, 0x50, 0x7fffffffffffe, 0x2, 0x0, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0xa5, 0xbdb], 0x40000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x4, 0x0, 0x0, @tick=0x1f4, {0x8}, {0x3}, @raw32={[0x2604, 0x2]}}], 0x1c) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x24008050) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r6, 0x80045503, 0x0) 7.448873284s ago: executing program 6 (id=7063): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0290203bedcade422b8b2f161ae92b1f97d40288"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x4, 0x58, 0x0, 0xfffe, 0x0, 0x2f, 0x0, @empty, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558, 0xffffffffffffff8f}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x1}, 0xfffff788, {0xfffffffc}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x5}}}}}}}}, 0x0) 6.801127202s ago: executing program 6 (id=7066): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r2, &(0x7f0000004e80)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)="407e49fe96231316ac7899219aaa1559a6e777302de5809573d662b22c7deee03c6484128e55774afa64ffec0057f704808fc14ad8ce2d5b03ebb53f37d880144d5cdbf7f90803654dd07b6493e47157a413b311f7d6845db4bb30", 0x5b}], 0x1}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f00000006c0)="2b9ce22f07baf3512aa44d559dbbb15a76a0aea0720057565fb53d9fb19896a26cb6d1ffa98dc5d753f59d75d5492b2441b7ed2cec99", 0x36}, {&(0x7f0000000700)="21742f63e0bdd06d7d07cfd730c0c95e51ced753e2cbc4e6", 0x18}, {&(0x7f0000000740)="66dd6baabfcf45fcf5ed4d62f074bd91d063c515760472194af27cd322f2dcb61cf8eab2bf3e054ebd79e9c78b16a2332f46e2b85d651644bae2b8f93528ec5ea3645325d2e3bdad3c46945ffc4ac157ef8074d84c244d76d5bea6705a434791ffeb1823b9bc47dcc07aa4ca383fd368b9d7f8580f0062121e1208601f1155a35651d89045a74967c29a504080d78ec86df72a23123748d8575cac5cb8223db8ecb1ebf2345a3865d33c5f9e80d5048d4ddf0513f4780c26cb38b7373469f1be2efc6de83b8729f6bbcaea93d0f468ee1ea229c86bd3", 0xd6}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="80298d07e918cfc42a8732ebb444cf39f8e9dcc1c7de3021736828b7a0dc8a523d205ca3f2d90cf62e99f37c46b9f530c3b2c31464a7338f0b46011f88a7605d130cc9eef2616a99d041870ba977842ee451422a37894c137d1d9a6104", 0x5d}, {&(0x7f0000003540)="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", 0x1000}, {&(0x7f0000004540)="7f5da1fa39f132f6bee3c27210833fa7400e10aa50bfc5bfdefe34dca23c61d80610c3af9a78316a9e2539f398bf0f50b30a9b63a89bf4e3623a3e63c85ce6d4702d0ecbf6f63e0c323c94e8be0fd7a344346208d45a4d924e459c624ea146e22048691424c6eca320709d45013e29554286bc5b79c14d", 0x77}, {&(0x7f00000045c0)="bf5c2563fddd690d46b3a0a8d2bac99fa69bed43f8eb60b2821ed6dba2d4e31885ba8b3361e17eb5a897c19b9e3066c298af4ddfd8a91f4291be8b34d02c203419df0c2cdee7ce7686d040e3049f6c2722b6f3a78064b7d72d5c4cf0051d54efb104aadec1ca302d830364", 0x6b}, {&(0x7f0000004640)="ae06ab3ac1a238d95afaa1432ebb6ebc913a6ba08fde56ce2f8663e407604692dbf6308c04bdf485233101b639f549d45b1c0198f00ab471e87273f1c42dac104cc9adf0885da697e063d84cfa92802bd1188a9300963b4e69d07930810f8099826682153caaff4706dcc5", 0x6b}], 0xa}}, {{0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000004980)="a189322c", 0x4}], 0x1}}], 0x4, 0x2000c044) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x4800, 0x55047}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xfff7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.79912654s ago: executing program 6 (id=7069): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x5c, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x4, 0x3, 0x2, 0x9, 0x1}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) (async) r3 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0xa1, 0x0, 0x0, '\x00', @private2, @private0}}}}}}, 0x0) (async) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000300)={0x20, 0x9, 0x2, '$8'}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, &(0x7f0000000340)) (async) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x5b) (async) read$watch_queue(r6, &(0x7f00000001c0)=""/24, 0x18) (async) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x1000000) keyctl$revoke(0x3, r5) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) (async) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000040)=0x9) (async) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETOFFLOAD(r9, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$TUNSETLINK(r9, 0x400454cd, 0x6) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f00000013c0)={[{}]}) 5.685699393s ago: executing program 4 (id=7078): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x4400c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbc7254100a851b42c0000", @ANYRES32=r2, @ANYBLOB="e3a776420831c76ce2efcb93a863db58b2df8d21ecb19b3fe50423e60d5ab9150cc8fed113f9a61831bd6654605eac0d5bad4f1ef1887edc0da57c920dc44084737acd31a6c8dfff5c1347a1766f64b328ddbb14"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40) (async) capset(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x3, 0x210ffff, 0xd, 0xba5, 0x3}) r3 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) (async) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa}, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r4, r4, 0x0, 0x4800000009) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x120083, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5416, &(0x7f0000000000)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet(r6, &(0x7f0000006740)=[{{0x0, 0x31, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000080)={0x0, 0x37, &(0x7f0000000100)={&(0x7f0000000580)={0x2ac, 0x14, 0x1, 0x0, 0x1, {0x1}, [@INET_DIAG_REQ_BYTECODE={0xb3, 0x1, "7d8d468b6679a2f7a4bab4d9457fff6911dca93983c2cf619fe6eb9577bacbccdb5b3a0496e642e75de955dfc249ca14fecefb5c32d27e6fc56a8088d2548098c516ad2a54fd14544c223cfb4a1fc38c59a7a7f0c7d7856b5d167c3544f12096c3583ec7524a0e5965c4dae3a6a6bb0d8c338f3068a959b9c09b3a0c7ca005eedd018743c51ba1f4aa951532fd362d5266b9ff53f624a816253f2de253749332029a37d4854f95a8f76fc2f1ed3ff7"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "c87383b8e0f28c13c75e1ed27b994062f6f8ddbf52f4624fddd8fa6c2aa16f8e9512a2110806150bcbc94b516059db35a5e69939c9187d36074f49e61d4c1ad88138975ab627fe11643d88bfa8c937e9c0c567374bde57908377981d09f52e9f2ca7c5072343e0ec8864facca93e67d345b45affc185846c934d9a490d9fd0c2f8122c7f8797f94b8a0876fe900d9e317ff97a4fbf5dc7512b56b8174d89784497fe90ea0e11eb370f6a09c583bcdb42c60c755793baf804fef9e7951cafcb972187f4495d2489504d225f63fb32f1e3277a077d496348fd06bd07bf387cc6b9"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "e5da4eeb59b8b3e760705940775478f18acb8c7e4d7a3f32c782a1251cc8f07d5c84ddac5b5c16719bd5799f776e2608859fc295a8a8743ed07a99ce067885eda5af5704728966a53fae597b46f662ceee5a445e5d013408d01e3dd7ae051bb8e311de6a2aa198fdda3cc433d3d73fba4ae41ebff79dcc70c809fdb96c80680944abf0e124a578b7454c90b526a215c8bf72fa4ca47e40230c997a0d945a5cd5cd26e302b14e71ea5be5e217d7f2d570c2120915ce46573235a460cd66bb98c450df59dad4455ed8eff2e78ea24a9fe8576b36787ce66ebd409d1227ac5b422831b3d0cbd443d02046b2da09e4dd9e3de6d21a62202d5f5765"}]}, 0x2ac}}, 0x0) (async) socket$inet6(0xa, 0x3, 0x7) 5.162837108s ago: executing program 9 (id=7079): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000180)={0x18, 0x14, 0x1, 0x70bd27, 0x0, {0x1e}, [@generic="f3b52030"]}, 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00001800000000000000f98f91e56dca979845c6dc23da7160c4fb", @ANYRES32=0x0, @ANYBLOB="a4290400000000001400350076657468305f766972745f776966690008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x8000) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x78a5, 0x2901}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x1800, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) (async) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000880)={0x1, 0x0, 0x8, 0x1d, 0x1c, &(0x7f0000000480)}) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004010}, 0x44000001) 4.969033501s ago: executing program 9 (id=7080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xfffffdd4, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) 4.766631124s ago: executing program 4 (id=7081): r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x44000) fallocate(r0, 0x20, 0x200000000000000, 0xffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000000, 0x204031, 0xffffffffffffffff, 0xec77a000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'netdevsim0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r4, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000c40)={&(0x7f0000000140)=0xa, 0x9790, &(0x7f0000000900)=[{}, {}, {}, {}], &(0x7f0000000c00)}) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x83) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001700)='ns/pid_for_children\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, 0x0) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f00000000c0)) ioctl$HIDIOCSFEATURE(r7, 0xc0404806, &(0x7f0000000040)) syz_usb_connect$midi(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000083596108040000102030109022d00010105400009040000020103367f09050a0b24000f010009050c"], 0x0) write$UHID_SET_REPORT_REPLY(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) 4.765728658s ago: executing program 9 (id=7082): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xd7, r0, 0x3}, 0xc) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280040, 0x0) (async, rerun: 32) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x7, 0x8}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f00000000c0)="6b9cbd6a99ffede23cd631818dcab865f6d071f75fa6fa1af904e6e24b61733490318221af7b5759d6304d47464e908097f03ea3fdb737a8337ab2a2c22a21c1cf8dbecf76858ab05a27d7d237e0ddc1e748a55bc56386a48f56baf24388c647c1726a74948f65f3271026cea6e31897d1099b5cb5553f292d628c080123ff7268078a906e10fd52b21ac3a844696a1ad7abc75fcf983ac8d3ec237317f01d9e6349b4e7ed63a9d024842e9228f12fd9d9580bb925f41ed297bad032b92fb48e85a7803d6cb48f776834e159d1bbb9543aabb8f59ed68c80cca24e855f9b92b7e7a0c97ef98c97f70e64", &(0x7f00000001c0)=""/10, &(0x7f0000000200)="c8bc987d7351e63b64fbc07e27cb52b421fe66ec1c6e527f50052bcb", &(0x7f0000000240)="441e69a30ab5fa6e17c93984dcd7c82b23a896ca2fd557de2460d0a000403898912f5473235507fbd921722ff009cf5e243816c9f2b00439596737ca20ca4991770d42625e95526307541415f41cce9bfb97f36acca3b49812174dd93eebb059026a268acac25130a82fbb02", 0x8, r1}, 0x38) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000340)={@remote, r0}, 0x14) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x8001, 0x8, 0x9, 0xef}, {0x5, 0x2, 0x9, 0x9}, {0x6, 0x8, 0x50, 0x1}, {0x40, 0x2f, 0x8, 0x79}]}, 0x10) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%pB \x00'}, 0x20) (rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x22, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xea1, 0x0, 0x0, 0x0, 0xd4}, @generic={0x6, 0x5, 0x9, 0x6, 0x78}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x2, 0xcc, &(0x7f0000000580)=""/204, 0x40f00, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x4, 0x3270d8e3, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000780)=[r3], &(0x7f00000007c0)=[{0x2, 0x4, 0x2, 0x5}, {0x4, 0x3, 0xa, 0xb}, {0x4, 0x1, 0x3, 0x7}, {0x0, 0x2, 0xe, 0x9}, {0x5, 0x4, 0xa, 0xa}, {0x5, 0x3, 0x5, 0x2}], 0x10, 0x81}, 0x94) (async) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$FE_READ_SIGNAL_STRENGTH(r5, 0x80026f47, &(0x7f0000000940)) (async, rerun: 32) r6 = syz_open_dev$dri(&(0x7f0000000980), 0x401, 0x20080) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000a00)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000000a40)={0x0, 0x0, r5}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01864c2, &(0x7f0000000a80)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01864c2, &(0x7f0000000ac0)={0x0, 0x1, r5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000b00)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r6, 0xc01864cb, &(0x7f0000000bc0)={&(0x7f0000000b40)=[r7, r8, r9, r10, r11, r12], &(0x7f0000000b80)=[0x9, 0x1], 0x6}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d00)={@fallback=r4, 0x2e, 0x0, 0x8142, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0], 0x0}, 0x40) (async) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0xb9}, @alu={0x4, 0x0, 0x8, 0x0, 0x7, 0x4, 0x8}, @call={0x85, 0x0, 0x0, 0x20}, @alu={0x7, 0x1, 0x2, 0x9, 0x7, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', r0, 0x1a, r5, 0x8, &(0x7f0000000ec0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000f00)={0x2, 0x3, 0x9, 0x9}, 0x10, 0x19c4a, r4, 0x8, 0x0, &(0x7f0000000f40)=[{0x4, 0x1, 0x0, 0xd05111af19d981b0}, {0x0, 0x3, 0x3, 0x5}, {0x4, 0x2, 0x0, 0xb}, {0x1, 0x2, 0xe, 0x8}, {0x4, 0x4, 0x5, 0x7}, {0x5, 0x1, 0xd, 0x4}, {0x2, 0x4, 0x1, 0x3}, {0x3, 0x1, 0x3, 0x8}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d40)={@cgroup=r5, r5, 0x2e, 0x2, r4, @void, @value=r15, @void, @void, r14}, 0x20) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001140)={'syztnl2\x00', &(0x7f0000001080)={'sit0\x00', r0, 0x10, 0x80, 0x6, 0xffff23a0, {{0x1d, 0x4, 0x0, 0x7, 0x74, 0x67, 0x0, 0xfb, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, {[@end, @cipso={0x86, 0x35, 0x2, [{0x5, 0xd, "84125170cc39f66b2d13c6"}, {0x7, 0x2}, {0x0, 0xb, "4f3f3c7daab623d015"}, {0x1, 0x4, "9c09"}, {0x5, 0xd, "b888a4a9a1c314a9b4bf29"}, {0x1, 0x2}, {0x0, 0x2}]}, @rr={0x7, 0x1b, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @loopback, @multicast1, @remote]}, @timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0x7, [{@private=0xa010101, 0x3}]}, @end, @noop]}}}}}) (async, rerun: 32) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000001200)={&(0x7f0000001180)=[{0x7, 0x0, 0x0, {0x81, 0x6}}, {0x9, 0x2, 0x0, {0x9, 0x0, 0x1}}, {0x9, 0x1, 0x0, {0x7418, 0x80000001}}], 0x3, 0x20, 0xe, 0xddda}) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r13, 0x80e85411, &(0x7f0000001240)) (async) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000001340)='wlan1\x00') (async) connect$inet6(r13, &(0x7f0000001380)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) (async, rerun: 32) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r16, 0x6, 0x16, &(0x7f00000013c0)=[@window={0x3, 0x400, 0xfe01}, @mss={0x2, 0x7ff}, @sack_perm], 0x3) 4.684304066s ago: executing program 9 (id=7083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r3, &(0x7f000000a4c0)={0x2020}, 0xa5) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r6 = socket$inet6(0xa, 0x805, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be", 0x9}], 0x1}], 0x1, 0x40800) getsockopt$bt_hci(r6, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xd}, {0xfff2, 0x92dd770fada490ca}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x0, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x0, 0xb}, 0x5, 0x38, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc000000", @ANYBLOB="bf272ec722db8966c3c77863a8307975b0fbd54fea28530cd7630ae42e99a048296c771b59131e8dc6646d0c0f4e47a281a5db35f2a3cad1461f95b3c5dcba9ee73c506fcfbf19fcbbbfa33ba477ecbef9d4370519bf33380b4e", @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x77}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) 4.330494477s ago: executing program 3 (id=7085): r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname(r0, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd, 0x50}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "da2034fefe67c7921001019c8fcd3139"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048850}, 0x40100) syz_emit_ethernet(0x9df, &(0x7f0000000800)={@local, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x9a9, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x3000000, [{0x3, 0xa, "a78ce540aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0a0b000000be27df3e34066d42c60a5c15b37ada6eb0d2a053d25628546e3026b0fbc15084dbaf736b41d5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x0, 0xc5, "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"}]}}}}}}, 0x0) 4.18728704s ago: executing program 3 (id=7086): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008c410cf8a0000000000650d022400010000f000817bfd910903001700092108000c01222800090581032000000bfe"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB=' \b)'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008c410cf8a0000000000650d022400010000f000817bfd910903001700092108000c01222800090581032000000bfe"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB=' \b)'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 4.003083469s ago: executing program 9 (id=7087): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2b, 'io'}, {0x2b, 'net'}]}, 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000520003022dbd7000fcdbdf2502"], 0x2c}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.884826231s ago: executing program 6 (id=7088): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0290203bedcade422b8b2f161ae92b1f"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x4, 0x58, 0x0, 0xfffe, 0x0, 0x2f, 0x0, @empty, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558, 0xffffffffffffff8f}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x1}, 0xfffff788, {0xfffffffc}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x5}}}}}}}}, 0x0) 3.808613604s ago: executing program 6 (id=7090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002301004034020000170000005c00068012000300000102030405060708090a0b0c0d00004400040067636d286165d5fbe42b5004c128e873290000000000000000000000000000000000000000000000001c000000bf6e3d7de774fc79872f0b8fa15bf788c9914c"], 0x70}}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x716, 0x6, 0xff, 0x880, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x4}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfe000/0x400000)=nil) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000402f17ea040000000000010902db2af72400010078deb4fffead2c3d030002000921fd7f000122e7000905810389bb2d483ce523eaa944a636"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8, 0x1000b, 0x80000000000030, 0x2000000007f, 0x4, 0x9, 0xfffffffffffffff8, 0x5, 0x2, 0x7, 0x1, 0x3, 0x7, 0x3, 0x1], 0x1, 0x80002}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x46, 0x0, 0x1, [@typed={0x14, 0x11c, 0x0, 0x0, @ipv6=@private1}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x24008800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, 0x0, 0x0) sendmmsg$unix(r10, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = syz_io_uring_setup(0x28b5, &(0x7f0000000480)={0x0, 0xf6dd, 0x1000, 0x0, 0x51}, &(0x7f0000000140)=0x0, 0x0, 0x0) syz_io_uring_submit(r12, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_NOP128={0x3f, 0x48, 0x0, 0xffffffffffffffff, 0x2, 0x8001, 0x4, 0x0, 0x0, {0x86}}) io_uring_enter(r11, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) 3.467278425s ago: executing program 0 (id=7091): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = eventfd(0x5ef) userfaultfd(0x80001) socket$l2tp(0x2, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r5 = socket$inet(0x2, 0x80001, 0x84) syz_io_uring_setup(0x35b5, &(0x7f0000000140)={0x0, 0xa555, 0x200, 0x1, 0x282, 0x0, r4}, &(0x7f0000000200), &(0x7f0000000240), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xd000, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000100)={0xffff1000, 0x20f000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000140)={0xffff1000, 0x7000}) r6 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000c00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffc, 0xffffffff, 0x40000003, 0xffffffff, 0xffffffff, 0xfffffffe], [0xffffefff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0x1000, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac4c, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1008, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000280)={0x1, 0x81, 0x95, 0x1, 0x200, 0x8000000000000000, 0x1, 0x9, 0x4, 0x8, 0x936, 0x4}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f00000001c0)={0x4, "77fc2c97826ac7d02b2b72570543afc5311870f59a7f035856c6868212356d1e000bbef1f4653eb973954355161c508b8e293b6ef9216de2b95d2a20cb95aabf", {0x6c5f, 0x7}}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0x80984120, &(0x7f0000000080)) 2.906991613s ago: executing program 4 (id=7092): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'pimreg\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x10}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0xc001) setsockopt(0xffffffffffffffff, 0x3, 0x9, &(0x7f0000000140)="e0845d52d178b337622987fb7d8b87bea73fa7c682b0b306988cfbce96f92fb5930b69d6e0aa94772a0a33e03e58c64449dcdd4ebbb9c8e4834320e8de39746c0416f045ac883fd6b49d7ef7f6459d09351384b9d5095342bc4fdb00f757342a0c431620109adf1e5e3dc8963df4b6ad82a54c8ad6ce452a826f7993e91726a44af68c950b71509ebc485ec7b4f760087eb5597bc1b5848349937b533fb6fdeccf80237ee278ddb64c0bc65daee7c9918f", 0xb1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)=0x400001) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000240)=0xfffffffd) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d000100ec000009040000032eb47d000905f9ffffff0000000905a51ba7d4ed42ba18400b5e5629e4198effdcedf1384a051a70adcfa4ff64a47d69f584bd43848ad96b1c1cc4eebb4e764647b3d224d2eb6dc222940b00d851caa6861dc36062ac5a73b74a4e7b52a7ec763a20f55a189fb73aa006bed15c7b10471c5ff1b6cffbad9e8b345798cbf164a0a8b5ad81d1caa9e3d1c20ba6ea95d8ae12d4f83cdf7d0700556df9f9581147dfaa7ab85289d037c1eb9cd527"], 0x0) 2.906387394s ago: executing program 9 (id=7093): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000540)) r1 = semget$private(0x0, 0x4, 0x4) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) (async) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000440)={{0x2, 0xee00, r2, r3, r4, 0x80, 0x7}, 0x533a, 0xd5c, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000080)={0x0, @meta={0x54505356, 0xf4b83c9, 0xc4bb, 0xe663, 0xc55c324}}) (async) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000100)={0x18, 0xc00000, "c8df28c35a6a3184ac0000000002000000000004a2508492", {0x40000203, 0x9d37}, 0x6b1e}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) (async, rerun: 32) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d6000000000009050202"], 0x0) (rerun: 32) r7 = syz_open_dev$I2C(&(0x7f0000000500), 0x0, 0x20000) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r8, 0x0) unshare(0x400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000200)={0x57, 0x2, 0x7, 0x0}) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.618208702s ago: executing program 0 (id=7094): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x8}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x7, 0x7ff, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000ff7f000000000000000000001811", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000005400000083000000bf0900000000000055090100000000009500000000000000d509040001000000bf91000000000000b7020000010000007500000000000010bf2000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r13 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_IRQFD(r15, 0x4020ae76, &(0x7f0000000240)={r13, 0x7, 0x3}) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r8, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0000000004e5050000000000000001000000d5060000000000c87cb05f369b2e4ad893000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x16, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xad10, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@jmp={0x5, 0x1, 0x7, 0x3, 0x3, 0xfffffffffffffffe, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @ldst={0x2, 0x0, 0x1, 0x2, 0xa, 0x98, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2e}, @jmp={0x5, 0x0, 0x2, 0xb, 0x5, 0xffffffffffffffe6, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41100, 0x54, '\x00', r10, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0x1, 0xc0f2, 0x3ff}, 0x10, 0xffffffffffffffff, r9, 0x7, &(0x7f0000000640)=[r8, r13, 0x1, r16], &(0x7f0000000680)=[{0x1, 0x1, 0x9, 0x7}, {0x3, 0x5, 0xf, 0x2}, {0x4, 0x5, 0x6, 0xc}, {0x4, 0x1, 0x0, 0x8}, {0x2, 0x5, 0x8, 0xa}, {0x1, 0x2, 0x4, 0x3}, {0x5, 0x0, 0x8, 0x8}], 0x10, 0x8000}, 0x94) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRESOCT=r0], 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r17 = socket(0x1, 0x5, 0x0) close(r17) r18 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r18, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r18, 0x0) epoll_create1(0x80000) 2.140955576s ago: executing program 3 (id=7095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x8000, 0x4, 0x3, 0x10, 0xfffffffb, 0xe8b, 0x8, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.764182124s ago: executing program 3 (id=7096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x3c, r1, 0x603, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x808}, 0x10) syz_usb_connect$uac3(0x5, 0x93, &(0x7f0000000240)=ANY=[@ANYBLOB="12011003000000404406218040000102030109028100030154c00f080bac5d010130040900000000010130000a8f827ab60081000000132403060104060503b30a0000f7ff05000100090401"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) 1.642374693s ago: executing program 0 (id=7097): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getpid() bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000), &(0x7f0000000040)={'L+', 0x5}, 0x16, 0x0) sendto$inet6(r1, &(0x7f0000000240)='.', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.512223229s ago: executing program 0 (id=7098): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5bbf010053020000240012800b00010062726964676500001400028005ff002500010000005f06a34f2a15094f"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x3b, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0xc, 0x3, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff2, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x40, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x8, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x1, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x0, 0x2, 0x15c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x1, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) unshare(0x100000) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040200010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00b9d3"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac2(r4, &(0x7f0000000380)={0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="000e8900000089116bcb89e61f264c653ae3d6cda7c66f0c36d6947eb8f7408c49ce9ca0ff9dbe24c26260cf2aa617cf51db41b2e22ce8377eb49da1e068df36763b68d2a372bf757dc6e4e29d362e0410426d9d83268a24ed8ee7fcfea5183e2807c8838bd9b40ceaac331fda522d2f57eb96ed8bd7cc8a46ec7f74b2f1cc2548f76d512748df3e6838a779c37dae"], &(0x7f00000002c0)=ANY=[@ANYBLOB="0003a0000000a00350a4d88225326e169055d7fc950e96fda43c9fe4902cb02cb244a6ca06286d25120e53f387870e4cea57499788a8ee7b7b77e9dde1fb0a4d5c9c119116a715d1787def18b57c912811c255f97772da2ab2aa0b763cb5ce24fbb4796a47ed7326ff6099f0aac0f7237974be7cd64a558f8e128c1218e7e9db7c71c88063a567e46157ba12a30a45d6b1157bdafaebbac3"]}, &(0x7f0000000680)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000540)={0x20, 0x81, 0x3, "2be23d"}, &(0x7f0000000580)={0x20, 0x82, 0x1, "a9"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, "a23b"}, &(0x7f0000000600)={0x20, 0x84, 0x1, "ff"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "574593"}}) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x541}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) (async) set_mempolicy(0x0, &(0x7f0000000140)=0x1, 0x5) (async) ppoll(&(0x7f0000000300)=[{r2, 0x8018}, {0xffffffffffffffff, 0xa200}], 0x20000000000000b7, 0x0, 0x0, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xffff}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x40) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8802, 0x0) (async) close_range(r8, 0xffffffffffffffff, 0x0) 1.207168761s ago: executing program 0 (id=7099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x8000, 0x4, 0x3, 0x10, 0xfffffffb, 0xe8b, 0x8, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (fail_nth: 2) 1.123828283s ago: executing program 4 (id=7100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0290203bedcade422b8b2f161ae9"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x4, 0x58, 0x0, 0xfffe, 0x0, 0x2f, 0x0, @empty, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558, 0xffffffffffffff8f}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x1}, 0xfffff788, {0xfffffffc}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x5}}}}}}}}, 0x0) 1.033285811s ago: executing program 4 (id=7101): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd30, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x2c}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x20000007d, 0x81) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000400)={0x40, 0x3, 0x4, 0x9, 0x1, 0xb, &(0x7f0000000340)="92"}) 934.92456ms ago: executing program 4 (id=7102): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc042, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xfff3}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008001100010000001400030067656e65766531"], 0x50}}, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0xfffffff9}, 0x1c) r5 = syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000040)=0x7, 0x4) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000200)=')&\x00', &(0x7f0000000240)="7d1921bedbff3b04d633090f52bbb99ebd89a055a5394a8066e486cb212a388951043aacb73e6b8e159a1d2931d78ee04cb5ea38ab0181", 0x37) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) rmdir(&(0x7f0000000040)='./control\x00') syz_usb_ep_read(r5, 0x3, 0xa, &(0x7f0000000000)=""/10) 912.798929ms ago: executing program 0 (id=7103): r0 = socket(0x11, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000200)=0x3df, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0xfffffffffffffffd, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) r5 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x7fff, &(0x7f0000000240)) ptrace$setregset(0x4205, r5, 0x1, &(0x7f00000001c0)={&(0x7f0000002bc0)="023e540000530c0648444f138d9c176b04f0f91de6b9fe593adb984dcb636b3f", 0x20}) sendmsg$netlink(r0, 0x0, 0x20040041) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) r6 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb, 0x2, 0x20, 0x0, 0x0, 0x7f}, {0x9, 0x5, 0x0, 0x2, 0x0, 0x2, 0x0, 0x6}, {0x9, 0x5, 0xe, 0x3, 0x20, 0x2, 0xd, 0xf3}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r6, &(0x7f0000000580)={0x14, &(0x7f0000000400)={0x0, 0x11, 0xad, {0xad, 0xc, "a8e330d6844f0eff9b2d67b3a467da4da0184e44988db587e2a283c570f971f176185ba9815dd972671fa36f4ecb21baa4712638108332b635ce074f87ff98e9d283735d5b11fe31857be0c34afe3859baf4294c4cde589a9208b9e7fb35e74cf32ed2b264df18ed849158c572324c514131a0b58df84725ad7d7bd33551ad7f113c20386706dc0479c292e8c69bf324d937d02b46d8420cd97523b7012e68a3b9f5de42baaacf8b684049"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}}, &(0x7f0000000d40)={0x1c, &(0x7f0000000880)={0x0, 0x3, 0x1, "c7"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000d00)=ANY=[@ANYBLOB="210031dc140000"]}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) futex(0x0, 0x80, 0x1, &(0x7f0000000080), 0x0, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r8, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, 0x0) 679.589613ms ago: executing program 6 (id=7104): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x6, &(0x7f00002b8000/0x4000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) read$FUSE(r2, &(0x7f0000002980)={0x2020}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 246.964867ms ago: executing program 3 (id=7105): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x67, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x10, 0x5, 0x0, 0x6, {[@eol, @mptcp=@mp_join={0x1e, 0x3}, @exp_fastopen={0xfe, 0xd, 0xf989, "8b8d0f7c60dde53649"}, @exp_fastopen={0xfe, 0xe, 0xf989, "406b097afa4e647e892e"}, @exp_fastopen={0xfe, 0x4}, @generic={0x0, 0x10, "31b2f61dcd2bc6221635ed87c95b"}, @timestamp={0x8, 0xa, 0x0, 0x7}, @timestamp={0x8, 0xa, 0x1, 0xd78e}, @mss={0x2, 0x4, 0x1}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r3, r8, &(0x7f0000000540)={0x0, 0x1aa5, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0xfffffffd, 0x69, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x0, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x1, 0x3, 0x0, 0x0, r3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xd3d, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x2, {0x2, 0xff}}, 0x18) 0s ago: executing program 3 (id=7106): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e23, 0x0, 0x3, 0x8000, 0x2, 0x0, 0x0, 0x88}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x40, 0x0, 0x0, 0x2}, 0xe73, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x2, @in6=@private2, 0x3507, 0x1, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x80}, 0x1c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$xdp(0x2c, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000300), 0x4) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000340)=""/177, &(0x7f0000000480)=0xb1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) (async) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="88cd00043d2ab4200203010400000000000000fd730b78000000d8318b33eb7a42f24ff0554cf1b7bf04246f3b1d98ab", @ANYRES64=r4, @ANYRESHEX=r1], 0x0) kernel console output (not intermixed with test programs): 728.892573][T10944] usb 4-1: USB disconnect, device number 104 [ 1729.039055][T28840] usb 10-1: Invalid ep0 maxpacket: 32 [ 1729.045062][T28840] usb usb10-port1: attempt power cycle [ 1729.399397][T28840] usb 10-1: new low-speed USB device number 64 using dummy_hcd [ 1729.429771][T28840] usb 10-1: Invalid ep0 maxpacket: 32 [ 1729.559077][T28840] usb 10-1: new low-speed USB device number 65 using dummy_hcd [ 1729.589655][T28840] usb 10-1: Invalid ep0 maxpacket: 32 [ 1729.595295][T28840] usb usb10-port1: unable to enumerate USB device [ 1729.689460][ T24] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1729.809265][T28860] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1729.816988][T10944] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1729.850378][ T24] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1729.863219][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.873607][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1729.885394][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1729.896560][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1729.908517][ T24] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1729.916879][ T24] usb 4-1: Product: syz [ 1729.921187][ T24] usb 4-1: Manufacturer: syz [ 1729.925805][ T24] usb 4-1: SerialNumber: syz [ 1729.932892][ T24] usb 4-1: config 0 descriptor?? [ 1729.970732][T28860] usb 1-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=8b.8e [ 1729.983362][T10944] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1729.995133][T28860] usb 1-1: config 4 has an invalid interface number: 15 but max is 0 [ 1730.001948][ T24] rc_core: IR keymap rc-imon-rsc not found [ 1730.005601][T10944] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1730.010104][ T24] Registered IR keymap rc-empty [ 1730.022998][T28860] usb 1-1: config 4 has no interface number 0 [ 1730.030393][T28860] usb 1-1: config 4 interface 15 has no altsetting 0 [ 1730.030944][ T24] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1730.037209][T10944] usb 5-1: config 220 has an invalid descriptor of length 110, skipping remainder of the config [ 1730.050178][ T24] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input161 [ 1730.058601][T10944] usb 5-1: config 220 has no interface number 2 [ 1730.075373][T10944] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1730.089882][ T24] imon_raw 4-1:0.0: probe with driver imon_raw failed with error -90 [ 1730.098562][T10944] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1730.106688][T10944] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1730.114586][T10944] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1730.122085][T28860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.130434][T28860] usb 1-1: Product: syz [ 1730.134579][T28860] usb 1-1: Manufacturer: syz [ 1730.139690][T28860] usb 1-1: SerialNumber: syz [ 1730.151349][T10944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.155533][T32167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.164339][T10944] usb 5-1: Product: syz [ 1730.175464][T32167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.186062][T10944] usb 5-1: Manufacturer: syz [ 1730.198801][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.206513][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.222595][T10944] usb 5-1: SerialNumber: syz [ 1730.242185][ T24] usb 4-1: USB disconnect, device number 105 [ 1730.378205][T32171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.387385][T32171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.443083][T10944] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1730.450953][T10944] uvcvideo 5-1:220.0: No valid video chain found. [ 1730.458125][T10944] usb 5-1: selecting invalid altsetting 0 [ 1730.473010][T10944] usb 5-1: selecting invalid altsetting 0 [ 1730.478885][T10944] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1730.500429][T10944] usb 5-1: USB disconnect, device number 114 [ 1731.201036][ T24] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1731.434415][T32189] gre0: Caught tx_queue_len zero misconfig [ 1731.617189][T32193] fuse: fd is not a fuse device [ 1731.624164][T32191] fuse: Bad value for 'rootmode' [ 1731.632745][T32191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6734'. [ 1731.759877][T10944] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1731.921050][T10944] usb 10-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1731.932183][T10944] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.943108][T10944] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1731.953941][T10944] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 1731.964464][T10944] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1731.981661][T10944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.002656][T10944] usb 10-1: probing VID:PID(0424:012C) [ 1732.013180][T10944] usb 10-1: vub300 testing BULK IN EndPoint(0) 81 [ 1732.020670][T10944] usb 10-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1732.027228][T10944] usb 10-1: vub300 testing BULK IN EndPoint(2) 83 [ 1732.036658][T10944] usb 10-1: Could not find two sets of bulk-in/out endpoint pairs [ 1732.081959][T10944] vub300 10-1:1.0: probe with driver vub300 failed with error -22 [ 1732.216339][T28840] usb 10-1: USB disconnect, device number 66 [ 1732.539671][T24481] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1732.642253][T28860] gspca_main: touptek-2.14.0 probing 0547:6801 [ 1732.686212][T28860] usb 1-1: USB disconnect, device number 122 [ 1733.293163][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 1733.293179][ T29] audit: type=1326 audit(1786895683.296:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32220 comm="syz.4.6742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1733.348940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1733.374759][ T29] audit: type=1326 audit(1786895683.336:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32220 comm="syz.4.6742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1733.442119][ T29] audit: type=1326 audit(1786895683.336:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32220 comm="syz.4.6742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1733.540583][ T29] audit: type=1326 audit(1786895683.336:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32220 comm="syz.4.6742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1733.635020][ T29] audit: type=1326 audit(1786895683.336:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32220 comm="syz.4.6742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1733.698247][ T29] audit: type=1326 audit(1786895683.336:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32220 comm="syz.4.6742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1733.751053][T32233] loop4: detected capacity change from 0 to 7 [ 1733.759558][T32233] Dev loop4: unable to read RDB block 7 [ 1733.765259][T32233] loop4: unable to read partition table [ 1733.777069][T32233] loop4: partition table beyond EOD, truncated [ 1733.826834][T32233] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1733.857277][ T29] audit: type=1326 audit(1786895683.336:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32220 comm="syz.4.6742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1733.925316][ T29] audit: type=1326 audit(1786895683.336:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32220 comm="syz.4.6742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1734.036520][ T29] audit: type=1326 audit(1786895683.336:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32220 comm="syz.4.6742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1734.120392][ T29] audit: type=1326 audit(1786895683.336:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32220 comm="syz.4.6742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1734.213674][T32240] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1734.614077][ T4979] Dev loop4: unable to read RDB block 7 [ 1734.618255][T32243] fuse: Unknown parameter '' [ 1734.620038][ T4979] loop4: unable to read partition table [ 1734.620280][ T4979] loop4: partition table beyond EOD, truncated [ 1734.641858][T32253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6747'. [ 1734.739328][ T4979] Dev loop4: unable to read RDB block 7 [ 1734.757619][ T4979] loop4: unable to read partition table [ 1734.770416][ T4979] loop4: partition table beyond EOD, truncated [ 1734.856786][T32262] gretap0: entered promiscuous mode [ 1734.862590][T32262] macsec3: entered allmulticast mode [ 1734.867906][T32262] gretap0: entered allmulticast mode [ 1734.880351][T32262] gretap0: left allmulticast mode [ 1734.886311][T32262] gretap0: left promiscuous mode [ 1735.019590][T10944] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1735.180133][T10944] usb 5-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1735.190638][T10944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.201522][T10944] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1735.212552][T10944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.221346][T10944] usb 5-1: Product: syz [ 1735.225541][T10944] usb 5-1: Manufacturer: syz [ 1735.230846][T10944] usb 5-1: SerialNumber: syz [ 1735.680356][T32260] bond4: (slave syz_tun): Releasing active interface [ 1735.801719][T32260] bond0: (slave ip6gretap0): Releasing backup interface [ 1735.896964][T32260] team0: left allmulticast mode [ 1735.906723][T32260] team_slave_0: left allmulticast mode [ 1735.912791][T32260] team_slave_1: left allmulticast mode [ 1735.925161][T32260] team0: left promiscuous mode [ 1735.931314][T32260] team_slave_0: left promiscuous mode [ 1735.937035][T32260] team_slave_1: left promiscuous mode [ 1735.943679][T32260] bridge0: port 4(team0) entered disabled state [ 1736.025152][T32260] bridge_slave_0: left allmulticast mode [ 1736.031126][T32260] bridge_slave_0: left promiscuous mode [ 1736.037085][T32260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.081877][T32260] bridge_slave_1: left allmulticast mode [ 1736.087792][T32260] bridge_slave_1: left promiscuous mode [ 1736.094582][T32260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.139851][T32260] vlan3: left promiscuous mode [ 1736.144745][T32260] geneve0: left promiscuous mode [ 1736.150501][T32260] geneve0: entered promiscuous mode [ 1736.199873][T32260] bond0: (slave bond_slave_0): Releasing backup interface [ 1736.280723][T32260] team0: Port device team_slave_0 removed [ 1736.374803][T32260] team0: Port device team_slave_1 removed [ 1736.405582][T32260] vlan3: left allmulticast mode [ 1736.413603][T32260] geneve0: left allmulticast mode [ 1736.425752][T32260] bridge0: port 3(vlan3) entered disabled state [ 1736.481042][T32260] geneve0: left promiscuous mode [ 1736.565857][T32260] team0: Port device bridge2 removed [ 1736.647656][T32268] team0: Port device xfrm0 added [ 1736.678703][T28860] usb 5-1: USB disconnect, device number 116 [ 1736.989825][T10944] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1737.151149][T10944] usb 10-1: Using ep0 maxpacket: 8 [ 1737.165619][T10944] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1737.182811][T10944] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1737.204012][T10944] usb 10-1: config 0 has an invalid interface number: 88 but max is 0 [ 1737.215837][T10944] usb 10-1: config 0 has no interface number 0 [ 1737.222577][T10944] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1737.234445][T10944] usb 10-1: config 0 interface 88 has no altsetting 0 [ 1737.244547][T10944] usb 10-1: string descriptor 0 read error: -22 [ 1737.251462][T10944] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1737.262109][T10944] usb 10-1: config 0 descriptor?? [ 1737.275226][T10944] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.88/input/input162 [ 1737.662541][T32291] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6757'. [ 1737.800568][T32288] bond4: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1737.850410][T32288] bond4: entered allmulticast mode [ 1737.924324][T32292] bridge2: entered promiscuous mode [ 1737.931744][T23295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1737.956050][T23295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1737.965950][T23295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1737.984497][T23295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1737.991819][T24481] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1738.001222][T23295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1738.023791][T32292] bridge2: entered allmulticast mode [ 1738.038404][T32292] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1738.094673][T20241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1738.112775][T20241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1738.127517][T20241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1738.136795][T20241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1738.144665][T20241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1738.239754][T24481] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1738.251763][T24481] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1738.264927][T24481] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1738.275198][T24481] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1738.291648][T24481] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1738.305958][T24481] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.316676][T24481] usb 4-1: Product: syz [ 1738.322481][T24481] usb 4-1: Manufacturer: syz [ 1738.327334][T24481] usb 4-1: SerialNumber: syz [ 1738.336187][T24481] usb 4-1: config 0 descriptor?? [ 1738.679913][T22725] tipc: Resetting bearer [ 1738.774951][T24481] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1738.794267][T24481] usb 4-1: USB disconnect, device number 107 [ 1738.806830][T22725] tipc: Disabling bearer [ 1739.153999][T32301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.161717][T32301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.170155][T32301] bridge_slave_0: entered allmulticast mode [ 1739.177092][T32301] bridge_slave_0: entered promiscuous mode [ 1739.185397][T32301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.193612][T32301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.201417][T32301] bridge_slave_1: entered allmulticast mode [ 1739.209972][T32301] bridge_slave_1: entered promiscuous mode [ 1739.242294][T32301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.257300][T32301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.361794][T32301] team0: Port device team_slave_0 added [ 1739.371740][T32301] team0: Port device team_slave_1 added [ 1739.433018][T32301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.446166][T32301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.474119][T32301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.487746][T32301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.495303][T32301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.527461][T32301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1739.606788][T32301] hsr_slave_0: entered promiscuous mode [ 1739.621080][T32301] hsr_slave_1: entered promiscuous mode [ 1739.628334][T32301] debugfs: 'hsr0' already exists in 'hsr' [ 1739.634978][T32301] Cannot create hsr debugfs directory [ 1740.066389][T10944] usb 10-1: USB disconnect, device number 67 [ 1740.271346][T20241] Bluetooth: hci1: command tx timeout [ 1740.302701][T32301] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1740.316482][T32301] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.403366][T32301] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1741.439072][T32301] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.681580][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1741.681596][ T29] audit: type=1326 audit(1786895691.686:5655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32347 comm="syz.3.6772" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f155419e0d9 code=0x0 [ 1741.772469][T32301] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1741.783147][T32301] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.794444][T10944] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1741.859784][T24481] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1741.944285][T10944] usb 10-1: Using ep0 maxpacket: 16 [ 1741.965588][T10944] usb 10-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1741.981898][T10944] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 1741.990909][T10944] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.001805][T10944] usb 10-1: config 0 has no interface number 0 [ 1742.010703][T10944] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.012548][T24481] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1742.019301][T10944] usb 10-1: Product: syz [ 1742.033051][T10944] usb 10-1: Manufacturer: syz [ 1742.037824][T10944] usb 10-1: SerialNumber: syz [ 1742.043360][T24481] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1742.060729][T10944] usb 10-1: config 0 descriptor?? [ 1742.074951][T24481] usb 5-1: Product: syz [ 1742.081981][T24481] usb 5-1: SerialNumber: syz [ 1742.089927][T24481] usb 5-1: config 0 descriptor?? [ 1742.268696][T10944] uvcvideo 10-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 1742.283342][T10944] uvcvideo 10-1:0.105: No valid video chain found. [ 1742.350087][T20241] Bluetooth: hci1: command tx timeout [ 1742.385119][T32301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1742.423803][T32301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1742.431605][T32301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1742.451666][T32301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1742.459649][T32301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1742.474156][T10944] usb 10-1: USB disconnect, device number 68 [ 1742.493888][T32301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1742.503717][T32301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1742.525237][T32301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1742.637913][T32301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1742.667428][T32301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1742.682654][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.689773][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1742.715038][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.724294][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1742.850079][ T29] audit: type=1800 audit(1786895692.846:5656): pid=32360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6775" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1742.922548][T32301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1743.057679][T28859] usb 5-1: USB disconnect, device number 117 [ 1743.071215][T32301] veth0_vlan: entered promiscuous mode [ 1743.159951][T32301] veth1_vlan: entered promiscuous mode [ 1743.232308][T32301] veth0_macvtap: entered promiscuous mode [ 1743.254167][T32381] bridge_slave_0: Caught tx_queue_len zero misconfig [ 1743.309845][T32301] veth1_macvtap: entered promiscuous mode [ 1743.355273][T32301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1743.387424][T32301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1743.440228][T12865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.516862][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.547972][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.670819][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.809869][ T24] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1743.945274][T15005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1743.974763][T15005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.030484][ T24] usb 4-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00 [ 1744.065672][ T8506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1744.066428][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.088589][ T8506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.109538][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1744.131052][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1744.159556][ T5695] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1744.176595][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.188214][ T24] usb 4-1: config 0 descriptor?? [ 1744.338268][ T5695] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1744.378759][ T5695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1744.391256][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.404611][ T5695] usb 5-1: config 0 descriptor?? [ 1744.423097][T32391] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1744.435308][T20241] Bluetooth: hci1: command tx timeout [ 1744.486831][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 1744.497393][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1744.522317][ T24] usb 4-1: USB disconnect, device number 108 [ 1744.864324][ T5695] hid (null): global environment stack underflow [ 1744.884086][ T5695] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1744.893421][ T5695] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1744.901676][ T5695] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1744.908671][ T5695] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1744.917787][ T5695] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1744.930773][ T5695] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1744.937598][ T5695] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1744.945754][ T5695] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1744.949036][T28840] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1744.953821][ T5695] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1744.967990][ T5695] asus 0003:0B05:1ABE.0076: unknown main item tag 0x0 [ 1744.970774][T32405] openvswitch: netlink: Flow actions attr not present in new flow. [ 1744.980883][ T5695] asus 0003:0B05:1ABE.0076: unexpected long global item [ 1744.992231][ T5695] asus 0003:0B05:1ABE.0076: Asus hid parse failed: -22 [ 1744.999811][ T5695] asus 0003:0B05:1ABE.0076: probe with driver asus failed with error -22 [ 1745.064569][T21618] usb 5-1: USB disconnect, device number 118 [ 1745.089749][T28840] usb 1-1: device descriptor read/64, error -71 [ 1745.100917][T32405] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1745.167858][T32409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1745.210197][T32405] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1745.289870][ T5695] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1745.339300][T28840] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1745.443336][ T5695] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1745.457297][ T5695] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1745.468709][ T5695] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 30208, setting to 64 [ 1745.481436][ T5695] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1745.489419][T28840] usb 1-1: device descriptor read/64, error -71 [ 1745.497752][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.510139][ T5695] usb 4-1: Product: syz [ 1745.514338][ T5695] usb 4-1: Manufacturer: syz [ 1745.520904][ T5695] usb 4-1: SerialNumber: syz [ 1745.532332][ T5695] usb-storage 4-1:1.0: USB Mass Storage device detected [ 1745.546615][ T5695] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1745.563970][ T5695] scsi host1: usb-storage 4-1:1.0 [ 1745.630660][T28840] usb usb1-port1: attempt power cycle [ 1745.663159][T32419] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1745.677064][T32419] block device autoloading is deprecated and will be removed. [ 1745.779772][ T24] usb 4-1: USB disconnect, device number 109 [ 1746.009734][T28840] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1746.051033][T28840] usb 1-1: device descriptor read/8, error -71 [ 1746.299126][T28840] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1746.377681][T28840] usb 1-1: device descriptor read/8, error -71 [ 1746.438732][T32434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6795'. [ 1746.453021][T32434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6795'. [ 1746.473211][T32434] netlink: 'syz.4.6795': attribute type 14 has an invalid length. [ 1746.486530][T32434] netlink: 'syz.4.6795': attribute type 12 has an invalid length. [ 1746.509370][T28840] usb usb1-port1: unable to enumerate USB device [ 1746.511526][T20241] Bluetooth: hci1: command tx timeout [ 1747.119336][T28840] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1747.279170][T28840] usb 5-1: Using ep0 maxpacket: 8 [ 1747.288051][T28840] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1747.296519][T28840] usb 5-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=29.5c [ 1747.326416][T28840] usb 5-1: config 7 has an invalid interface number: 171 but max is 0 [ 1747.339210][T28840] usb 5-1: config 7 has no interface number 0 [ 1747.350723][T28840] usb 5-1: config 7 interface 171 has no altsetting 0 [ 1747.362105][T28840] usb 5-1: string descriptor 0 read error: -22 [ 1747.378840][T28840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.409769][T28840] gspca_main: spca505-2.14.0 probing 041e:401d [ 1747.608679][T32442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1747.625232][T32442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1747.769731][ T24] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1747.855749][T28840] gspca_spca505: reg write: error -71 [ 1747.883040][T28840] spca505 5-1:7.171: probe with driver spca505 failed with error -5 [ 1747.910756][T28840] usb 5-1: USB disconnect, device number 119 [ 1747.932909][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1747.951451][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.965411][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1747.980219][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1747.988358][ T24] usb 4-1: SerialNumber: syz [ 1748.050434][T28860] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1748.212258][ T24] usb 4-1: 0:2 : does not exist [ 1748.213362][T28860] usb 1-1: Using ep0 maxpacket: 32 [ 1748.231191][T28860] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1748.247872][T28860] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1748.262970][T28860] usb 1-1: config 0 has no interface number 0 [ 1748.278518][ T24] usb 4-1: USB disconnect, device number 110 [ 1748.281590][T28860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.303527][T28860] usb 1-1: Product: syz [ 1748.314106][T28860] usb 1-1: Manufacturer: syz [ 1748.327621][ T9189] udevd[9189]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1748.328570][T28860] usb 1-1: SerialNumber: syz [ 1748.378434][T28860] usb 1-1: config 0 descriptor?? [ 1748.396771][T28860] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1748.603451][T28860] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1748.628679][T28860] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1748.844320][T32451] libceph: resolve ' [ 1748.844320][T32451] -&fYǝa2i [ 1748.844320][T32451] .?&*&' (ret=-3): failed [ 1748.929923][T32461] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1748.986380][T32461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6804'. [ 1749.025060][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1749.025632][T28840] usb 1-1: USB disconnect, device number 127 [ 1749.081817][T32464] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6806'. [ 1749.101203][T32464] bond_slave_0: Caught tx_queue_len zero misconfig [ 1749.108585][T28840] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1749.201628][T28840] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1749.266448][T28840] quatech2 1-1:0.51: device disconnected [ 1749.379266][T24481] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1749.556518][T28860] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1749.569045][ T24] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1749.580286][T24481] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1749.632359][T32478] bridge3: entered promiscuous mode [ 1749.654532][T24481] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 1749.678747][T24481] usb 10-1: config 0 has no interface number 0 [ 1749.724854][T24481] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.755612][T24481] usb 10-1: Product: syz [ 1749.769472][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1749.772722][T28860] usb 5-1: Using ep0 maxpacket: 32 [ 1749.781207][T24481] usb 10-1: Manufacturer: syz [ 1749.798420][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1749.808709][T28860] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1749.819758][T24481] usb 10-1: SerialNumber: syz [ 1749.836290][ T24] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1749.864669][T24481] usb 10-1: config 0 descriptor?? [ 1749.865824][T28860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.907019][ T24] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1749.924746][ T24] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1749.925484][T28860] usb 5-1: config 0 descriptor?? [ 1749.948523][T32482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6811'. [ 1749.959651][ T24] usb 4-1: Manufacturer: ᰅ [ 1749.959671][ T24] usb 4-1: SerialNumber: 뗍삍뎧ꮸ꠆⃌룹돺㷬㸢훫㺣泱꒑ﶮ隣褪䐴ਟ꒟౮䙇똢ŷ렌䦲骖燇錻発쬜픘녞㈐Ҁ࡜獃羍꿂ꚟ틼韊ସ컊軞ᆙꄠ￸͒笺坞颃蠂맧鷋㺬ి썳㊹‾퓼ﭲ뢱Ᏽ缬碌㛫瓚ਈ缃䟵痣戹冧窴精봌볃䨶髳幧ꯑ⹰褣㠻쑸箰ᷮ變㘭覿갹ꤢช୏婞핕 [ 1750.003091][T32482] netlink: 43 bytes leftover after parsing attributes in process `syz.6.6811'. [ 1750.038874][T28860] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1750.199368][T32471] syz_tun: entered allmulticast mode [ 1750.261279][T32485] IPv6: A: Disabled Multicast RS [ 1750.282369][T32470] syz_tun: left allmulticast mode [ 1750.315720][T32475] tipc: Started in network mode [ 1750.335774][T32475] tipc: Node identity 1000001, cluster identity 4711 [ 1750.361887][T24481] uvcvideo 10-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1750.365582][T32475] tipc: Node number set to 16777217 [ 1750.404283][T24481] uvcvideo 10-1:0.64: No valid video chain found. [ 1750.457677][T32473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1750.485442][T24481] usb 10-1: USB disconnect, device number 69 [ 1750.506665][T32475] tipc: Enabled bearer , priority 1 [ 1750.532630][T32473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1750.570022][T32492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6808'. [ 1750.588443][T28860] gspca_sq930x: ucbus_write failed -71 [ 1750.597999][T28860] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1750.601609][T32492] netlink: 'syz.3.6808': attribute type 2 has an invalid length. [ 1750.634591][T32492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6808'. [ 1750.642552][T28860] usb 5-1: USB disconnect, device number 120 [ 1750.813960][T32474] tipc: Resetting bearer [ 1751.010792][T32474] tipc: Disabling bearer [ 1751.207900][ T24] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1751.278059][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1751.336394][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1751.368032][ T24] usb 4-1: media controller created [ 1751.421274][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1751.496481][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 1751.625757][ T24] usb 4-1: USB disconnect, device number 111 [ 1751.879979][T28859] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1752.019432][T28859] usb 1-1: device descriptor read/64, error -71 [ 1752.289539][T28859] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1752.439711][T28859] usb 1-1: device descriptor read/64, error -71 [ 1752.449322][ T24] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1752.560005][T28859] usb usb1-port1: attempt power cycle [ 1752.619608][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1752.628053][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1752.644017][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.664755][ T24] usb 4-1: Product: syz [ 1752.676988][ T24] usb 4-1: Manufacturer: syz [ 1752.687943][ T24] usb 4-1: SerialNumber: syz [ 1752.712148][ T24] usb 4-1: config 0 descriptor?? [ 1752.727249][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1752.900527][T28859] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1752.920998][T28859] usb 1-1: device descriptor read/8, error -71 [ 1753.159564][T28859] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1753.181370][T28859] usb 1-1: device descriptor read/8, error -71 [ 1753.292267][T28859] usb usb1-port1: unable to enumerate USB device [ 1753.399718][T28840] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1753.562990][T28840] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1753.575104][T28840] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1753.584008][T28840] usb 5-1: config 0 has no interface number 0 [ 1753.593849][T28840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.603041][T28840] usb 5-1: Product: syz [ 1753.607367][T28840] usb 5-1: Manufacturer: syz [ 1753.613299][T28840] usb 5-1: SerialNumber: syz [ 1753.622283][T28840] usb 5-1: config 0 descriptor?? [ 1753.987249][T28840] uvcvideo 5-1:0.64: Found Unit with invalid ID 0 [ 1753.994355][T28840] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1754.002646][T28840] uvcvideo 5-1:0.64: No valid video chain found. [ 1754.018595][T28840] usb 5-1: USB disconnect, device number 121 [ 1754.109297][ T24] gspca_sonixj: i2c_w8 err -71 [ 1754.129945][ T5695] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1754.152123][ T24] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1754.163032][ T24] usb 4-1: USB disconnect, device number 112 [ 1754.280271][ T5695] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1754.291591][ T5695] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 1754.300582][ T5695] usb 10-1: config 0 has no interface number 0 [ 1754.308632][ T5695] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.317302][ T5695] usb 10-1: Product: syz [ 1754.322147][ T5695] usb 10-1: Manufacturer: syz [ 1754.326828][ T5695] usb 10-1: SerialNumber: syz [ 1754.334410][ T5695] usb 10-1: config 0 descriptor?? [ 1754.469086][ T24] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 1754.543526][T32533] syz_tun: entered allmulticast mode [ 1754.550277][T32532] syz_tun: left allmulticast mode [ 1754.563956][ T5695] uvcvideo 10-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1754.571709][ T5695] uvcvideo 10-1:0.64: No valid video chain found. [ 1754.581676][ T5695] usb 10-1: USB disconnect, device number 70 [ 1754.622377][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1754.631680][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 1754.641899][ T24] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1754.652426][ T24] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1754.668159][ T24] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1754.678249][ T24] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.688610][ T24] usb 4-1: config 14 has no interface number 0 [ 1754.694831][ T24] usb 4-1: config 14 has no interface number 1 [ 1754.701875][ T24] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1754.713231][ T24] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1754.730517][ T24] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1754.741875][ T24] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1754.754396][ T24] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1754.761709][ T24] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1754.771263][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.780018][ T24] usb 4-1: Product: syz [ 1754.784499][ T24] usb 4-1: Manufacturer: syz [ 1754.790047][ T24] usb 4-1: SerialNumber: syz [ 1755.017784][ T24] legousbtower 4-1:14.57: interrupt endpoints not found [ 1755.214119][T32551] x_tables: duplicate entry at hook 4 [ 1755.217833][ T24] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1755.245735][ T24] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1755.289145][T28840] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1755.306212][ T24] usb 4-1: USB disconnect, device number 113 [ 1755.395572][ T24] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1755.470269][T28840] usb 5-1: Using ep0 maxpacket: 16 [ 1755.476125][T28840] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1755.492698][T28840] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1755.501255][T28840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.511864][T28840] usb 5-1: config 0 has no interface number 0 [ 1755.520990][T28840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.529345][T28840] usb 5-1: Product: syz [ 1755.533606][T28840] usb 5-1: Manufacturer: syz [ 1755.538280][T28840] usb 5-1: SerialNumber: syz [ 1755.551697][T28840] usb 5-1: config 0 descriptor?? [ 1755.570454][T28840] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 1755.578173][T28840] uvcvideo 5-1:0.105: No valid video chain found. [ 1755.679828][ T5695] usb 10-1: new full-speed USB device number 71 using dummy_hcd [ 1755.774476][ T24] usb 5-1: USB disconnect, device number 122 [ 1755.807119][T32562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6835'. [ 1755.831772][ T5695] usb 10-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 1755.845074][ T5695] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 1755.859964][ T5695] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1755.874097][ T5695] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1755.890823][T28859] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1755.912556][ T5695] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.922300][ T5695] usb 10-1: Product: syz [ 1755.926593][ T5695] usb 10-1: Manufacturer: syz [ 1755.935347][ T5695] usb 10-1: SerialNumber: syz [ 1755.938033][T32565] libceph: resolve 'c' (ret=-3): failed [ 1755.958309][T32565] netlink: 'syz.6.6836': attribute type 21 has an invalid length. [ 1756.070386][T28859] usb 4-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice= 0.00 [ 1756.085377][T28859] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1756.099789][T28859] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1756.119656][T28859] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1756.146659][T28859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.167504][ T5695] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1756.188349][T32560] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1756.200122][T32560] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1756.212118][T32560] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1756.214565][ T5695] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1756.232722][T32570] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1756.348634][ T5695] usb 10-1: USB disconnect, device number 71 [ 1756.462588][ T9189] udevd[9189]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1756.661312][T28859] mxuport 4-1:1.0: mxuport_recv_ctrl_urb - short read (1 / 4) [ 1756.677823][T28859] mxuport 4-1:1.0: probe with driver mxuport failed with error -5 [ 1756.864718][ T24] usb 4-1: USB disconnect, device number 114 [ 1757.113544][T32583] syz_tun: entered allmulticast mode [ 1757.147931][T32582] syz_tun: left allmulticast mode [ 1757.334764][ T29] audit: type=1326 audit(1786895707.336:5657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32589 comm="syz.4.6843" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1757.363328][ T29] audit: type=1326 audit(1786895707.356:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32589 comm="syz.4.6843" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1757.434931][ T29] audit: type=1326 audit(1786895707.366:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32589 comm="syz.4.6843" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1757.526355][ T29] audit: type=1326 audit(1786895707.366:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32589 comm="syz.4.6843" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1757.590407][T32597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6844'. [ 1757.658004][ T29] audit: type=1326 audit(1786895707.366:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32589 comm="syz.4.6843" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1757.756722][T32597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6844'. [ 1757.777009][ T29] audit: type=1326 audit(1786895707.416:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32589 comm="syz.4.6843" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1757.851680][ T29] audit: type=1326 audit(1786895707.426:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32589 comm="syz.4.6843" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1757.938209][ T29] audit: type=1326 audit(1786895707.426:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32589 comm="syz.4.6843" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1758.013994][ T29] audit: type=1326 audit(1786895707.426:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32589 comm="syz.4.6843" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1758.090533][ T29] audit: type=1326 audit(1786895707.426:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32589 comm="syz.4.6843" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab0d9e0d9 code=0x7ffc0000 [ 1758.243757][T32605] libceph: resolve 'c' (ret=-3): failed [ 1758.261470][T32605] netlink: 'syz.4.6847': attribute type 21 has an invalid length. [ 1758.499511][T32615] syz_tun: entered allmulticast mode [ 1758.512588][T32614] syz_tun: left allmulticast mode [ 1758.660460][T32624] Invalid argument reading file caps for ./file0 [ 1758.739852][T21618] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1758.899444][T21618] usb 5-1: Using ep0 maxpacket: 8 [ 1758.905258][T21618] usb 5-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 1758.917386][T21618] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1758.930763][T21618] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 64, changing to 10 [ 1758.942569][T21618] usb 5-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 13 [ 1758.956847][T21618] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1758.964523][T21618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.976735][T21618] usb 5-1: config 0 descriptor?? [ 1759.059530][T28859] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1759.129314][ T24] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1759.210518][T28859] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1759.221911][T28859] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.232751][T28859] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1759.246657][T28859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.289249][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1759.295476][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1759.306304][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.317388][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1759.327266][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1759.340389][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.349947][ T5695] usb 10-1: new low-speed USB device number 72 using dummy_hcd [ 1759.359140][ T24] usb 4-1: config 0 descriptor?? [ 1759.388732][T21618] hid_parser_main: 386 callbacks suppressed [ 1759.388752][T21618] hid_mf 0003:0079:1803.0077: unknown main item tag 0x0 [ 1759.412287][T21618] hid_mf 0003:0079:1803.0077: hidraw0: USB HID v0.04 Device [HID 0079:1803] on usb-dummy_hcd.4-1/input0 [ 1759.424019][T21618] hid_mf 0003:0079:1803.0077: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 1759.524747][ T5695] usb 10-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1759.538645][ T5695] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.550168][ T5695] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.563050][ T5695] usb 10-1: config 0 descriptor?? [ 1759.596721][T28840] usb 5-1: USB disconnect, device number 123 [ 1759.702968][T28859] ttusb_dec_send_command: result bulk message failed: error -71 [ 1759.721349][T28859] ttusb-dec 1-1:1.0: probe with driver ttusb-dec failed with error -71 [ 1759.738279][T28859] usb 1-1: USB disconnect, device number 6 [ 1759.784595][T32640] syz.9.6860: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1759.796728][ T24] microsoft 0003:045E:07DA.0078: item fetching failed at offset 6/34 [ 1759.826393][T32640] CPU: 1 UID: 0 PID: 32640 Comm: syz.9.6860 Tainted: G L syzkaller #0 PREEMPT(full) [ 1759.826421][T32640] Tainted: [L]=SOFTLOCKUP [ 1759.826428][T32640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1759.826439][T32640] Call Trace: [ 1759.826446][T32640] [ 1759.826454][T32640] dump_stack_lvl+0xe8/0x150 [ 1759.826485][T32640] warn_alloc+0x24c/0x270 [ 1759.826510][T32640] ? stack_depot_save_flags+0x33/0x800 [ 1759.826537][T32640] ? __pfx_warn_alloc+0x10/0x10 [ 1759.826561][T32640] ? kasan_save_track+0x3e/0x80 [ 1759.826583][T32640] ? __kasan_kmalloc+0x93/0xb0 [ 1759.826609][T32640] ? xsk_setsockopt+0x52a/0x960 [ 1759.826623][T32640] ? do_sock_setsockopt+0x17c/0x1b0 [ 1759.826644][T32640] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1759.826665][T32640] ? do_syscall_64+0x174/0x580 [ 1759.826685][T32640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.826713][T32640] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1759.826767][T32640] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1759.826794][T32640] ? __kasan_kmalloc+0x93/0xb0 [ 1759.826819][T32640] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1759.826843][T32640] ? __kmalloc_cache_noprof+0x150/0x660 [ 1759.826870][T32640] vmalloc_user_noprof+0xad/0xe0 [ 1759.826893][T32640] ? xskq_create+0xbf/0x170 [ 1759.826914][T32640] xskq_create+0xbf/0x170 [ 1759.826937][T32640] xsk_init_queue+0x8a/0xe0 [ 1759.826957][T32640] xsk_setsockopt+0x52a/0x960 [ 1759.826974][T32640] ? __fget_files+0x2a/0x420 [ 1759.826998][T32640] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1759.827017][T32640] ? __pfx_aa_sk_perm+0x10/0x10 [ 1759.827049][T32640] ? aa_sock_opt_perm+0xff/0x1a0 [ 1759.827072][T32640] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1759.827091][T32640] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1759.827111][T32640] do_sock_setsockopt+0x17c/0x1b0 [ 1759.827137][T32640] __x64_sys_setsockopt+0x13d/0x1b0 [ 1759.827159][T32640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.827179][T32640] do_syscall_64+0x174/0x580 [ 1759.827201][T32640] ? trace_irq_disable+0x3b/0x140 [ 1759.827224][T32640] ? clear_bhb_loop+0x70/0xc0 [ 1759.827246][T32640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.827265][T32640] RIP: 0033:0x7f40db59e0d9 [ 1759.827282][T32640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1759.827309][T32640] RSP: 002b:00007f40dc3d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1759.827329][T32640] RAX: ffffffffffffffda RBX: 00007f40db825fa0 RCX: 00007f40db59e0d9 [ 1759.827344][T32640] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1759.827357][T32640] RBP: 00007f40db635024 R08: 0000000000000029 R09: 0000000000000000 [ 1759.827369][T32640] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1759.827381][T32640] R13: 00007f40db826038 R14: 00007f40db825fa0 R15: 00007f40db94fa48 [ 1759.827410][T32640] [ 1759.827441][T32640] Mem-Info: [ 1759.942393][T32651] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6860'. [ 1759.949630][ T24] microsoft 0003:045E:07DA.0078: parse failed [ 1759.975838][T32640] active_anon:9758 inactive_anon:5614 isolated_anon:0 [ 1759.975838][T32640] active_file:1179 inactive_file:21495 isolated_file:0 [ 1759.975838][T32640] unevictable:0 dirty:222 writeback:0 [ 1759.975838][T32640] slab_reclaimable:10526 slab_unreclaimable:126566 [ 1759.975838][T32640] mapped:30900 shmem:6623 pagetables:2317 [ 1759.975838][T32640] sec_pagetables:0 bounce:0 [ 1759.975838][T32640] kernel_misc_reclaimable:0 [ 1759.975838][T32640] free:1269138 free_pcp:14706 free_cma:0 [ 1759.993297][ T24] microsoft 0003:045E:07DA.0078: probe with driver microsoft failed with error -22 [ 1760.001424][ T24] usb 4-1: USB disconnect, device number 115 [ 1760.018861][T32640] Node 0 active_anon:39032kB inactive_anon:22456kB active_file:4716kB inactive_file:85812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123584kB dirty:884kB writeback:0kB shmem:26492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:17372kB pagetables:9016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1760.258302][T32640] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1760.310000][T32640] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1760.352381][T32659] syz_tun: entered allmulticast mode [ 1760.380569][T32640] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 1760.419556][T32640] Node 0 DMA32 free:1126436kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39232kB inactive_anon:22456kB active_file:4716kB inactive_file:85812kB unevictable:0kB writepending:884kB zspages:2848kB present:3129332kB managed:2548488kB mlocked:0kB bounce:0kB free_pcp:42132kB local_pcp:23232kB free_cma:0kB [ 1760.492789][T32640] lowmem_reserve[]: 0 0 0 0 0 [ 1760.500855][T32640] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1760.627588][T32640] lowmem_reserve[]: 0 0 0 0 0 [ 1760.697325][T32640] Node 1 Normal free:3935056kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:168kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15488kB local_pcp:3868kB free_cma:0kB [ 1760.787077][T32670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1760.804877][T32640] lowmem_reserve[]: 0 0 0 0 0 [ 1760.818210][T32640] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1760.832600][T32640] Node 0 DMA32: 2905*4kB (UME) 2499*8kB (UME) 828*16kB (UME) 789*32kB (UME) 481*64kB (UM) 208*128kB (UM) 97*256kB (UME) 43*512kB (UME) 47*1024kB (UME) 4*2048kB (UM) 219*4096kB (UM) = 1127708kB [ 1760.894945][T32640] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1760.916459][T32640] Node 1 Normal: 6*4kB (M) 7*8kB (UM) 5*16kB (UM) 11*32kB (UM) 12*64kB (UM) 5*128kB (UM) 3*256kB (UM) 1*512kB (U) 4*1024kB (UM) 2*2048kB (UM) 958*4096kB (M) = 3935360kB [ 1760.934983][T32640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1760.947374][T32640] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 1760.957782][T32640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1760.970678][T32640] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1760.981965][T32640] 29305 total pagecache pages [ 1760.986746][T32640] 14 pages in swap cache [ 1760.994410][T32640] Free swap = 81468kB [ 1760.998593][T32640] Total swap = 124996kB [ 1761.008543][T32640] 2097051 pages RAM [ 1761.015777][T32640] 0 pages HighMem/MovableOnly [ 1761.021021][T32640] 428250 pages reserved [ 1761.025278][T32640] 0 pages cma reserved [ 1761.059587][T28859] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1761.137588][ T5695] usb 10-1: string descriptor 0 read error: -71 [ 1761.157884][ T5695] cypress_m8 10-1:0.0: DeLorme Earthmate USB converter detected [ 1761.176929][ T5695] earthmate ttyUSB0: required endpoint is missing [ 1761.199496][T28859] usb 4-1: device descriptor read/64, error -71 [ 1761.206127][ T5695] usb 10-1: USB disconnect, device number 72 [ 1761.286145][ T5695] cypress_m8 10-1:0.0: device disconnected [ 1761.440232][T28859] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1761.590256][T28859] usb 4-1: device descriptor read/64, error -71 [ 1761.703508][T28859] usb usb4-port1: attempt power cycle [ 1761.959609][T21618] usb 10-1: new full-speed USB device number 73 using dummy_hcd [ 1762.009458][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1762.059345][T28859] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 1762.080594][T28859] usb 4-1: device descriptor read/8, error -71 [ 1762.122263][T21618] usb 10-1: not running at top speed; connect to a high speed hub [ 1762.131539][T21618] usb 10-1: New USB device found, idVendor=0471, idProduct=2126, bcdDevice=ce.3e [ 1762.142244][T21618] usb 10-1: config 2 has an invalid interface number: 31 but max is 1 [ 1762.150864][T21618] usb 10-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 1762.160696][T21618] usb 10-1: config 2 has an invalid interface number: 209 but max is 1 [ 1762.169470][T21618] usb 10-1: config 2 has no interface number 0 [ 1762.169996][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1762.175753][T21618] usb 10-1: config 2 has no interface number 1 [ 1762.183434][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1762.187543][T21618] usb 10-1: config 2 interface 31 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1762.206507][ T24] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1762.207526][T21618] usb 10-1: config 2 interface 31 altsetting 8 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1762.217365][ T24] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 1762.228776][T21618] usb 10-1: config 2 interface 31 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1762.239729][ T24] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.252709][T21618] usb 10-1: config 2 interface 31 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1762.260673][ T24] usb 1-1: config 4 has no interface number 0 [ 1762.270101][T21618] usb 10-1: config 2 interface 209 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1762.278765][ T24] usb 1-1: string descriptor 0 read error: -22 [ 1762.288535][T21618] usb 10-1: config 2 interface 209 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1762.293817][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.304640][T21618] usb 10-1: config 2 interface 209 altsetting 3 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1762.323790][ T24] uvcvideo 1-1:4.147: Found multiple Units with ID 6 [ 1762.323843][ T24] uvcvideo 1-1:4.147: Found UVC 0.02 device (04f2:b746) [ 1762.325133][ T24] uvcvideo 1-1:4.147: No streaming interface found for terminal 32774. [ 1762.331673][T28859] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 1762.360752][T21618] usb 10-1: config 2 interface 209 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 1762.372606][T21618] usb 10-1: config 2 interface 209 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1762.383992][T21618] usb 10-1: config 2 interface 209 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1762.397350][T28859] usb 4-1: device descriptor read/8, error -71 [ 1762.404281][T21618] usb 10-1: config 2 interface 209 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 1762.415869][T21618] usb 10-1: config 2 interface 209 altsetting 3 endpoint 0x7 has invalid maxpacket 2031, setting to 64 [ 1762.427342][T21618] usb 10-1: config 2 interface 209 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1762.440383][T21618] usb 10-1: config 2 interface 209 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1762.451751][T21618] usb 10-1: config 2 interface 209 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 1762.463877][T21618] usb 10-1: config 2 interface 31 has no altsetting 0 [ 1762.472823][T21618] usb 10-1: config 2 interface 209 has no altsetting 0 [ 1762.487977][T21618] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.496775][T21618] usb 10-1: Product: Ё [ 1762.503185][T21618] usb 10-1: Manufacturer: ᰢ㵋톰氏໽❆鲺❉杔鰔秲텇䠏᚟㻂짇譾僲抦㪑綦臑ꓝサ׷࣡稥㤄芶Ａ贉轌兣祲緘臼큝㧫哠搿玺咾ႛ阊꛽ [ 1762.523019][T28859] usb usb4-port1: unable to enumerate USB device [ 1762.546054][T32682] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1762.548281][ T24] usb 1-1: USB disconnect, device number 7 [ 1763.234753][T32703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6877'. [ 1763.361127][T32709] tipc: Started in network mode [ 1763.367591][T32709] tipc: Node identity , cluster identity 4711 [ 1763.374477][T32709] tipc: Failed to obtain node identity [ 1763.382578][T32709] tipc: Enabling of bearer rejected, failed to enable media [ 1763.577473][T32712] netlink: 'syz.4.6879': attribute type 39 has an invalid length. [ 1764.131990][T28859] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1764.290350][T28859] usb 4-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 1764.303796][T28859] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.321874][T28859] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1764.340007][T28859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.352121][T28859] usb 4-1: Product: syz [ 1764.359714][T28859] usb 4-1: Manufacturer: syz [ 1764.366749][T28859] usb 4-1: SerialNumber: syz [ 1764.409379][ T46] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1764.571572][ T46] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1764.598508][ T46] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1764.623672][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1764.631052][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.648562][ T46] usb 5-1: config 0 descriptor?? [ 1764.697992][T28859] usb 4-1: 0:1 : does not exist [ 1764.715021][T28859] usb 4-1: unit 5 not found! [ 1764.867046][T21618] usb 10-1: USB disconnect, device number 73 [ 1764.921534][T28859] usb 4-1: USB disconnect, device number 120 [ 1764.979885][T32729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6883'. [ 1764.997340][T15367] udevd[15367]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1765.122325][T32729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6883'. [ 1765.200115][T32738] syz_tun: entered allmulticast mode [ 1765.208479][ T46] prodikeys 0003:041E:2801.0079: unknown main item tag 0x0 [ 1765.231494][ T46] prodikeys 0003:041E:2801.0079: unknown main item tag 0x0 [ 1765.254821][ T46] prodikeys 0003:041E:2801.0079: unknown main item tag 0x0 [ 1765.273989][ T46] prodikeys 0003:041E:2801.0079: unknown main item tag 0x0 [ 1765.294196][ T46] prodikeys 0003:041E:2801.0079: unknown main item tag 0x0 [ 1765.312392][ T46] prodikeys 0003:041E:2801.0079: unknown main item tag 0x0 [ 1765.335498][ T46] prodikeys 0003:041E:2801.0079: unknown main item tag 0x0 [ 1765.354734][ T46] prodikeys 0003:041E:2801.0079: unknown main item tag 0x0 [ 1765.377267][ T46] prodikeys 0003:041E:2801.0079: unknown main item tag 0x0 [ 1765.401125][ T46] prodikeys 0003:041E:2801.0079: unknown main item tag 0x0 [ 1765.430041][ T46] prodikeys 0003:041E:2801.0079: hidraw0: USB HID v0.06 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0 [ 1765.472036][ T46] usb 5-1: USB disconnect, device number 124 [ 1765.606600][T32753] fido_id[32753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1765.689670][T28859] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1765.852637][T28859] usb 1-1: not running at top speed; connect to a high speed hub [ 1765.862526][T28859] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1765.875931][T28859] usb 1-1: config index 0 descriptor too short (expected 161, got 153) [ 1765.885153][T28859] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1765.896005][T28859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.937669][T28859] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1766.039117][ T46] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1766.212412][ T46] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1766.222848][ T46] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1766.232508][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.243243][ T46] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1766.252502][ T46] usb 4-1: config 1 has no interface number 1 [ 1766.258639][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1766.271941][ T46] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1766.287489][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.292486][ T5695] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1766.296309][ T46] usb 4-1: Product: syz [ 1766.307887][ T46] usb 4-1: Manufacturer: syz [ 1766.312764][ T46] usb 4-1: SerialNumber: syz [ 1766.480253][ T5695] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1766.491195][ T5695] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.504540][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.514199][ T5695] usb 5-1: Product: syz [ 1766.518455][ T5695] usb 5-1: Manufacturer: syz [ 1766.523955][ T5695] usb 5-1: SerialNumber: syz [ 1766.537071][ T46] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1766.551068][ T46] usb 4-1: MIDIStreaming interface descriptor not found [ 1766.609855][ T46] usb 4-1: USB disconnect, device number 121 [ 1766.647206][T28859] gspca_spca501: reg write: error -110 [ 1766.663671][T28859] spca501 1-1:1.0: Reg write failed for 0x05,0x22,0x04 [ 1766.674045][T28859] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 1766.684626][T28859] uvcvideo 1-1:1.0: Found UVC 1.00 device (0000:0000) [ 1766.693933][T28859] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1766.705468][T28859] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 1766.709054][ T24] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1766.715901][T28859] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 1766.732276][T28859] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -5 [ 1766.911057][ T24] usb 10-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1766.921394][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.933845][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.942121][ T24] usb 10-1: Product: syz [ 1766.946405][ T24] usb 10-1: Manufacturer: syz [ 1766.951458][ T24] usb 10-1: SerialNumber: syz [ 1766.958451][ T24] usb 10-1: config 0 descriptor?? [ 1766.970349][ T24] ims_pcu 10-1:0.0: Missing CDC union descriptor [ 1766.976746][ T24] ims_pcu 10-1:0.0: probe with driver ims_pcu failed with error -22 [ 1767.169595][ T306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1767.179781][ T306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1767.191486][ T24] usb 10-1: USB disconnect, device number 74 [ 1767.500690][ T24] usb 1-1: USB disconnect, device number 8 [ 1768.039960][ T24] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1768.063647][ T330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6902'. [ 1768.231471][ T24] usb 10-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1768.242445][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.257402][ T24] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1768.271918][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.277775][ T335] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1768.409668][ T342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6904'. [ 1768.433783][ T342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6904'. [ 1768.649173][ T350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1768.673444][ T353] autofs4:pid:353:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(254.1), cmd(0xc0189371) [ 1768.694128][ T350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1768.701434][ T353] autofs4:pid:353:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371) [ 1768.730539][ T350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1768.849997][T28859] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1769.000720][ T24] ttusb_dec_send_command: command bulk message failed: error -71 [ 1769.009832][T28859] usb 4-1: Using ep0 maxpacket: 16 [ 1769.015487][ T24] ttusb-dec 10-1:1.0: probe with driver ttusb-dec failed with error -71 [ 1769.028245][ T24] usb 10-1: USB disconnect, device number 75 [ 1769.035369][T28859] usb 4-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 1769.073436][T28859] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 1769.085976][T28859] usb 4-1: config 0 has no interface number 0 [ 1769.097257][ T5695] usb 5-1: unit 8 not found! [ 1769.103242][T28859] usb 4-1: config 0 interface 66 has no altsetting 0 [ 1769.111166][ T5695] usb 5-1: unit 6 not found! [ 1769.124988][T28859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.136249][T28859] usb 4-1: Product: syz [ 1769.143327][T28859] usb 4-1: Manufacturer: syz [ 1769.169688][T28859] usb 4-1: SerialNumber: syz [ 1769.180592][T28859] usb 4-1: config 0 descriptor?? [ 1769.187470][ T5695] usb 5-1: USB disconnect, device number 125 [ 1769.859621][ T5695] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1769.899565][T28860] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1770.009857][ T5695] usb 10-1: Using ep0 maxpacket: 32 [ 1770.016570][ T5695] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1770.027654][ T5695] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1770.041544][ T5695] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1770.050285][ T5695] usb 10-1: Product: syz [ 1770.054545][ T5695] usb 10-1: Manufacturer: syz [ 1770.059772][T28860] usb 5-1: Using ep0 maxpacket: 16 [ 1770.064944][ T5695] usb 10-1: SerialNumber: syz [ 1770.071242][T28860] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1770.082949][ T5695] usb 10-1: config 0 descriptor?? [ 1770.088054][T28860] usb 5-1: config 0 has no interfaces? [ 1770.094142][T28860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.103967][ T364] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1770.122310][T28860] usb 5-1: config 0 descriptor?? [ 1770.362889][ T360] geneve0: entered promiscuous mode [ 1770.372438][T28860] usb 5-1: USB disconnect, device number 126 [ 1770.441702][ T24] usb 10-1: USB disconnect, device number 76 [ 1770.819200][ T24] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1770.983188][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1770.997941][ T24] usb 10-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 1771.009875][ T24] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1771.026922][ T24] usb 10-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1771.064307][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1771.082499][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.115002][ T24] usb 10-1: config 0 descriptor?? [ 1771.588105][ T384] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6914'. [ 1771.610820][ T384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.636533][ T384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.725641][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 1771.733135][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1771.757389][ T24] usb 10-1: USB disconnect, device number 77 [ 1771.904365][T28859] usb 4-1: selecting invalid altsetting 3 [ 1771.911466][T28859] comedi comedi5: could not set alternate setting 3 in high speed [ 1771.924876][T28859] usbduxsigma 4-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 1771.942095][T28859] usbduxsigma 4-1:0.66: probe with driver usbduxsigma failed with error -22 [ 1771.954488][T28859] usb 4-1: USB disconnect, device number 122 [ 1772.322763][T28859] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 1772.480740][T28859] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1772.502261][T28859] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1772.534368][T28859] usb 4-1: config 0 has no interface number 0 [ 1772.542464][T28859] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1772.556549][T28859] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1772.572221][T28859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.594400][T28859] usb 4-1: Product: syz [ 1772.598694][T28859] usb 4-1: Manufacturer: syz [ 1772.604047][T28859] usb 4-1: SerialNumber: syz [ 1772.620284][T28859] usb 4-1: config 0 descriptor?? [ 1772.830863][T28859] radio-si470x 4-1:0.35: this is not a si470x device. [ 1772.873580][T28859] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 1772.898209][T28859] usb 4-1: USB disconnect, device number 123 [ 1773.506257][ T422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1774.003774][ T386] Set syz1 is full, maxelem 65536 reached [ 1774.232758][ T441] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6928'. [ 1774.243992][ T440] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6929'. [ 1774.377280][ T440] tap0: tun_chr_ioctl cmd 1074025675 [ 1774.405247][ T440] tap0: persist disabled [ 1774.572276][ T440] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20001 [ 1774.780867][ T24] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1774.942753][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1774.952399][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1774.972058][ T24] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 1774.987065][ T24] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 1774.996484][ T24] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1775.010774][ T24] usb 5-1: config 129 has no interface number 0 [ 1775.028019][ T24] usb 5-1: config 129 has no interface number 1 [ 1775.039064][ T24] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1775.068734][ T24] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1775.096304][ T24] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1775.129126][ T24] usb 5-1: config 129 interface 135 has no altsetting 0 [ 1775.136554][ T24] usb 5-1: config 129 interface 5 has no altsetting 0 [ 1775.146947][ T24] usb 5-1: string descriptor 0 read error: -22 [ 1775.154510][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.216010][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1775.242686][ T24] usb 5-1: MIDIStreaming interface descriptor not found [ 1775.488282][ T24] usb 5-1: USB disconnect, device number 127 [ 1775.822701][ T480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6940'. [ 1775.871107][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1775.871123][ T29] audit: type=1326 audit(1786895725.876:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=481 comm="syz.0.6941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe87039e0d9 code=0x0 [ 1775.919689][ T5695] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1776.082808][ T5695] usb 10-1: Using ep0 maxpacket: 16 [ 1776.095576][ T5695] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1776.125112][ T5695] usb 10-1: config 0 has an invalid interface number: 68 but max is 0 [ 1776.134765][ T29] audit: type=1800 audit(1786895726.146:5689): pid=492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6944" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2697 res=0 errno=0 [ 1776.136889][ T5695] usb 10-1: config 0 has no interface number 0 [ 1776.201538][ T5695] usb 10-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1776.205854][ T492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1776.223289][ T5695] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.234894][ T5695] usb 10-1: Product: syz [ 1776.243350][ T5695] usb 10-1: Manufacturer: syz [ 1776.260596][ T5695] usb 10-1: SerialNumber: syz [ 1776.281391][ T5695] usb 10-1: config 0 descriptor?? [ 1776.316554][ T5695] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1776.526831][ T9606] usb 10-1: Failed to submit usb control message: -71 [ 1776.527126][ T24] usb 10-1: USB disconnect, device number 78 [ 1776.551295][ T9606] usb 10-1: unable to send the bmi data to the device: -71 [ 1776.587707][ T9606] usb 10-1: unable to get target info from device [ 1776.612393][ T9606] usb 10-1: could not get target info (-71) [ 1776.635410][ T9606] usb 10-1: could not probe fw (-71) [ 1776.729078][T24481] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1776.889050][T24481] usb 5-1: Using ep0 maxpacket: 8 [ 1776.895658][T24481] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1776.919692][T24481] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1776.936338][T24481] usb 5-1: config 0 has no interface number 0 [ 1776.956603][T24481] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1776.978484][T24481] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1777.002490][T24481] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1777.028134][T24481] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1777.076053][T24481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.106269][T24481] usb 5-1: config 0 descriptor?? [ 1777.158153][T24481] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1777.323191][ T504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6946'. [ 1777.590020][ T5695] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 1777.760361][ T5695] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1777.857993][ T5695] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.919685][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.993514][ T5695] usb 1-1: config 0 descriptor?? [ 1778.560871][ T24] usb 5-1: USB disconnect, device number 2 [ 1778.598698][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1779.599030][T24481] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1779.800699][T24481] usb 5-1: Using ep0 maxpacket: 32 [ 1779.807230][T24481] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1779.821801][T24481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.847102][T24481] usb 5-1: config 0 descriptor?? [ 1779.872360][T24481] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1780.642872][ T5695] usb 1-1: string descriptor 0 read error: -71 [ 1780.666458][ T5695] cypress_m8 1-1:0.0: DeLorme Earthmate USB converter detected [ 1780.707198][ T5695] earthmate ttyUSB0: required endpoint is missing [ 1780.735193][ T5695] usb 1-1: USB disconnect, device number 9 [ 1780.760407][ T5695] cypress_m8 1-1:0.0: device disconnected [ 1781.269508][ T24] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 1781.270679][ T569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6963'. [ 1781.324634][ T569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6963'. [ 1781.421628][ T24] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1781.451086][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.461910][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.474155][ T24] usb 1-1: config 0 descriptor?? [ 1781.593609][ T576] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6964'. [ 1782.159432][T24481] gspca_vc032x: reg_r err -110 [ 1782.167735][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.203642][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.217152][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.229390][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.244195][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.277679][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.296626][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.298733][ T588] netlink: 'syz.3.6968': attribute type 11 has an invalid length. [ 1782.327898][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.341179][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.361152][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.380899][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.394182][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.409402][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.424319][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.444371][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.459412][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.478530][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.507693][T24481] gspca_vc032x: I2c Bus Busy Wait 00 [ 1782.560652][T24481] gspca_vc032x: Unknown sensor... [ 1782.580683][ T590] xt_hashlimit: size too large, truncated to 1048576 [ 1782.588716][T24481] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1782.619987][ T590] xt_hashlimit: invalid rate [ 1782.828318][ T593] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 1782.905991][ T5695] usb 5-1: USB disconnect, device number 3 [ 1783.159148][T24481] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1783.331602][T24481] usb 10-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1783.350139][T24481] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.371961][T24481] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.385144][T24481] usb 10-1: Product: syz [ 1783.392453][T24481] usb 10-1: Manufacturer: syz [ 1783.398465][T24481] usb 10-1: SerialNumber: syz [ 1783.420756][T24481] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1784.091284][ T24] usb 1-1: string descriptor 0 read error: -71 [ 1784.137654][T24481] gspca_mr97310a: reg write [19] error -110 [ 1784.176244][ T24] cypress_m8 1-1:0.0: DeLorme Earthmate USB converter detected [ 1784.184091][T24481] mr97310a 10-1:1.0: probe with driver mr97310a failed with error -110 [ 1784.258289][ T24] earthmate ttyUSB0: required endpoint is missing [ 1784.289576][T24481] usb 10-1: USB disconnect, device number 79 [ 1784.325056][ T24] usb 1-1: USB disconnect, device number 10 [ 1784.374204][ T24] cypress_m8 1-1:0.0: device disconnected [ 1784.648702][ T29] audit: type=1800 audit(1786895734.646:5690): pid=643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6977" name="blkio.bfq.time_recursive" dev="tmpfs" ino=248 res=0 errno=0 [ 1784.890278][ T623] veth1_macvtap: entered promiscuous mode [ 1784.896047][ T623] veth1_macvtap: entered allmulticast mode [ 1785.154769][ T623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1785.313776][ T623] macsec2: left promiscuous mode [ 1785.400782][ T623] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1785.420324][ T8506] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1785.439883][ T658] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6980'. [ 1785.458737][ T658] netlink: 13 bytes leftover after parsing attributes in process `syz.4.6980'. [ 1785.493511][ T658] netlink: 13 bytes leftover after parsing attributes in process `syz.4.6980'. [ 1785.612049][T11592] ip6_tunnel: A xmit: Local address not yet configured! [ 1785.630243][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.638851][ T664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.646166][ T664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1785.656470][T11592] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1785.669795][T11592] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1785.692615][T11592] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1785.751808][T14997] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1785.771451][ T24] openvswitch: cpu_id mismatch with handler threads [ 1785.859425][T24481] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1785.919292][T28840] openvswitch: cpu_id mismatch with handler threads [ 1786.029390][ T24] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1786.083291][T24481] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1786.094250][T24481] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1786.106427][T24481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1786.122372][T24481] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1786.149946][T24481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.188624][T24481] usb 1-1: config 0 descriptor?? [ 1786.210838][ T24] usb 4-1: device descriptor read/64, error -71 [ 1786.459277][ T24] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1786.602351][T24481] ath6kl: Failed to submit usb control message: -71 [ 1786.625865][T24481] ath6kl: unable to send the bmi data to the device: -71 [ 1786.634685][ T24] usb 4-1: device descriptor read/64, error -71 [ 1786.651940][T24481] ath6kl: Unable to send get target info: -71 [ 1786.666039][T24481] ath6kl: Failed to init ath6kl core: -71 [ 1786.694678][T24481] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1786.716612][T24481] usb 1-1: USB disconnect, device number 11 [ 1786.772625][ T24] usb usb4-port1: attempt power cycle [ 1786.833304][T26577] openvswitch: cpu_id mismatch with handler threads [ 1786.835326][T26577] openvswitch: cpu_id mismatch with handler threads [ 1786.849940][ T720] veth1_to_hsr: entered allmulticast mode [ 1786.865431][ T720] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 1787.062751][ T29] audit: type=1800 audit(1786895737.066:5691): pid=725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6998" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1561 res=0 errno=0 [ 1787.150015][ T24] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1787.189545][T28840] openvswitch: cpu_id mismatch with handler threads [ 1787.195197][ T24] usb 4-1: device descriptor read/8, error -71 [ 1787.405676][ T731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1787.493355][ T24] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1787.539630][ T24] usb 4-1: device descriptor read/8, error -71 [ 1787.649523][ T24] usb usb4-port1: unable to enumerate USB device [ 1788.644490][ T762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7005'. [ 1788.671279][ T762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7005'. [ 1789.055169][ T772] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7009'. [ 1789.077643][ T772] tipc: Resetting bearer [ 1789.170813][ T772] tipc: Disabling bearer [ 1789.219779][ T5695] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1789.330122][T28840] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1789.380291][ T5695] usb 4-1: Using ep0 maxpacket: 8 [ 1789.406426][ T5695] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1789.431707][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.449457][ T5695] usb 4-1: Product: syz [ 1789.454152][ T5695] usb 4-1: Manufacturer: syz [ 1789.458792][ T5695] usb 4-1: SerialNumber: syz [ 1789.477173][ T5695] usb 4-1: config 0 descriptor?? [ 1789.494544][ T5695] gspca_main: se401-2.14.0 probing 047d:5003 [ 1789.509969][T28840] usb 5-1: Using ep0 maxpacket: 16 [ 1789.521159][T28840] usb 5-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 1789.536186][T28840] usb 5-1: config 3 has an invalid interface number: 231 but max is 0 [ 1789.544960][T28840] usb 5-1: config 3 has no interface number 0 [ 1789.551327][T28840] usb 5-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1789.562926][T28840] usb 5-1: config 3 interface 231 has no altsetting 0 [ 1789.571807][T28840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.581679][T28840] usb 5-1: Product: syz [ 1789.585885][T28840] usb 5-1: Manufacturer: syz [ 1789.590996][T28840] usb 5-1: SerialNumber: syz [ 1789.759540][T28860] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1789.803819][ T769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7007'. [ 1789.895017][ T5695] gspca_se401: ExtraFeatures: 255 [ 1789.904182][ T5695] gspca_se401: Frame size: 0x0 1/16th janggu [ 1789.915747][T28860] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1789.927663][ T5695] gspca_se401: Frame size: 28929x0 bayer [ 1789.947654][ T5695] gspca_se401: Frame size: 0x0 1/16th janggu [ 1789.953994][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1789.974195][T28860] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.985427][ T5695] gspca_se401: Frame size: 0x0 1/16th janggu [ 1789.995824][T28860] usb 10-1: config 0 descriptor?? [ 1790.003374][ T5695] gspca_se401: Frame size: 0x0 1/16th janggu [ 1790.022296][ T5695] gspca_se401: Frame size: 0x0 1/16th janggu [ 1790.029312][ C0] ip6_tunnel: A xmit: Local address not yet configured! [ 1790.112222][ T5695] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input166 [ 1790.137819][ T5695] usb 4-1: USB disconnect, device number 2 [ 1790.604269][T28840] kvaser_usb 5-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 1790.655624][T28840] usb 5-1: USB disconnect, device number 4 [ 1790.829656][ C1] openvswitch: cpu_id mismatch with handler threads [ 1791.360530][T28840] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1791.552228][T28840] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1791.570184][T28840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.587119][T28840] usb 4-1: Product: syz [ 1791.591549][T28840] usb 4-1: Manufacturer: syz [ 1791.596175][T28840] usb 4-1: SerialNumber: syz [ 1791.635186][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.639044][T24481] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1791.642243][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.688164][ T800] netlink: 208 bytes leftover after parsing attributes in process `syz.6.7018'. [ 1792.058209][T28859] usb 4-1: USB disconnect, device number 3 [ 1792.531410][T28860] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1792.550994][T28860] [drm:udl_init] *ERROR* Selecting channel failed [ 1792.655197][T28860] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 1792.681253][T28860] [drm] Initialized udl on minor 1 [ 1792.687762][T28860] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1792.708433][T28860] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1792.727526][ T5695] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1792.750151][T24481] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1792.753173][T28860] usb 10-1: USB disconnect, device number 80 [ 1792.780122][T24481] ath9k_htc: Failed to initialize the device [ 1792.786602][ T5695] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1792.808252][T28859] usb 4-1: ath9k_htc: USB layer deinitialized [ 1793.005063][ T825] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1793.379123][T24481] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1793.390352][ T834] loop4: detected capacity change from 0 to 7623 [ 1793.549690][T24481] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1793.561468][T24481] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.574543][T24481] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1793.593398][T24481] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1793.609459][T24481] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.641799][T24481] usb 4-1: config 0 descriptor?? [ 1793.858729][ T844] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7031'. [ 1794.074402][T24481] plantronics 0003:047F:FFFF.007A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1794.273366][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1794.339851][ T828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7026'. [ 1794.439498][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1794.445165][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1794.458112][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1794.470717][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.481704][ T24] usb 5-1: config 0 descriptor?? [ 1794.696568][ T24] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1794.955410][ T863] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7037'. [ 1795.059146][ T24] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1795.221988][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1795.230674][ T24] usb 10-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1795.253659][ T24] usb 10-1: config 129 has an invalid interface number: 135 but max is 0 [ 1795.262751][ T24] usb 10-1: config 129 has an invalid interface number: 5 but max is 0 [ 1795.271392][ T24] usb 10-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1795.283986][ T24] usb 10-1: config 129 has no interface number 0 [ 1795.290763][ T24] usb 10-1: config 129 has no interface number 1 [ 1795.297189][ T24] usb 10-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1795.323866][ T24] usb 10-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1795.352332][ T24] usb 10-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1795.370762][ T24] usb 10-1: config 129 interface 135 has no altsetting 0 [ 1795.417513][ T24] usb 10-1: config 129 interface 5 has no altsetting 0 [ 1795.430032][ T24] usb 10-1: string descriptor 0 read error: -22 [ 1795.436603][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.474864][ T24] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1795.487284][ T24] usb 10-1: MIDIStreaming interface descriptor not found [ 1795.520867][ T880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1795.675283][ T24] usb 5-1: USB disconnect, device number 5 [ 1795.970447][T21618] usb 10-1: USB disconnect, device number 81 [ 1796.075117][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1796.259672][ T24] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1796.283138][ T24] usb 5-1: config 1 has an invalid interface number: 13 but max is 0 [ 1796.301389][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.313777][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1796.325585][ T24] usb 5-1: config 1 has no interface number 1 [ 1796.349004][ T24] usb 5-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 1796.360825][ T24] usb 5-1: config 1 interface 13 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1796.389599][ T24] usb 5-1: config 1 interface 13 has no altsetting 0 [ 1796.402136][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.413908][ T24] usb 5-1: Product: syz [ 1796.418079][ T24] usb 5-1: Manufacturer: syz [ 1796.419633][T28860] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 1796.423181][ T24] usb 5-1: SerialNumber: syz [ 1796.447318][ T24] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1796.466435][ T24] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1796.489865][ T24] scsi host1: usb-storage 5-1:1.0 [ 1796.506489][ T24] usb-storage 5-1:1.13: USB Mass Storage device detected [ 1796.525580][ T24] usb-storage 5-1:1.13: Quirks match for vid 174c pid 55aa: 400000 [ 1796.616353][T28860] usb 4-1: device descriptor read/64, error -71 [ 1796.658224][ T24] usb 5-1: USB disconnect, device number 6 [ 1796.869932][T28860] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 1797.000258][T28860] usb 4-1: device descriptor read/64, error -71 [ 1797.059597][T28840] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1797.222070][T28840] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1797.239327][T28860] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 1797.260772][T28840] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.276057][T28860] usb 4-1: device descriptor read/8, error -71 [ 1797.286895][T28840] usb 10-1: Product: syz [ 1797.299808][T28840] usb 10-1: Manufacturer: syz [ 1797.307907][T28840] usb 10-1: SerialNumber: syz [ 1797.519935][T28860] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 1797.529560][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1797.560570][T28860] usb 4-1: device descriptor read/8, error -71 [ 1797.588799][T28840] rtl8150 10-1:1.0: couldn't reset the device [ 1797.597276][T28840] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 1797.616901][T28840] usb 10-1: USB disconnect, device number 82 [ 1797.676548][T28859] usb 4-1: USB disconnect, device number 4 [ 1797.690138][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1797.701308][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1797.725697][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1797.735945][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1797.748029][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.756321][ T24] usb 5-1: Product: 쮿澽Ꜷ瘬঍칢셤ㇷ [ 1797.763765][ T24] usb 5-1: Manufacturer: ꄧ꺌승뷴⁁㟒낮鍶൫宫睶尠孠嬛⮣并럃紩࡬豄깫蔆潁뙾骊೜㋟愄⇻૛粝傿撧ၤ♪⨔梩찹귯婏᧣ࢦ㿕ጅ頙籄ᵍᕰ쵹凇짴䗟陸앸荖컫窝뤂囆ട၌넔쁹斧汭즔尯䞆ⴇ糅턘宄꘣ᒥ⺘荜霰㩸⸛ʜ䀫诫勋평쀚옕鹍礏⤥ໄ厗貒筊豔앭⹚낊ἷ㭊䆧蕒儉䴇⮊ᢊ箙껞寋⶘娙ꄾ [ 1797.800442][ T24] usb 5-1: SerialNumber: 㤣⏴䟔髯蠼孖옉푒胰˫嵴螮⟱㒑愯済쫔놭嬀⾀ṿ忿ꆤ煃噘흿憟岣鬒䃫巧勹㢠湎㝳ἀ凞熐㑵ൊꀇ쾣੡嫑 [ 1797.839594][T28859] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1797.950604][T28860] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1797.979718][T28859] usb 4-1: device descriptor read/64, error -71 [ 1798.082566][ T24] cdc_ncm 5-1:1.0: bind() failure [ 1798.097459][ T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1798.107054][ T24] cdc_ncm 5-1:1.1: bind() failure [ 1798.113152][T28860] usb 1-1: Using ep0 maxpacket: 16 [ 1798.119173][ T24] usb 5-1: USB disconnect, device number 7 [ 1798.126182][T28860] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=27.0a [ 1798.138634][T28860] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 1798.151416][T28860] usb 1-1: config 0 has no interface number 0 [ 1798.157656][T28860] usb 1-1: config 0 interface 246 altsetting 249 bulk endpoint 0x9 has invalid maxpacket 1023 [ 1798.171054][T28860] usb 1-1: config 0 interface 246 has no altsetting 0 [ 1798.185811][T28860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.196576][T28860] usb 1-1: Product: syz [ 1798.201428][T28860] usb 1-1: Manufacturer: syz [ 1798.206030][T28860] usb 1-1: SerialNumber: syz [ 1798.213989][T28860] usb 1-1: config 0 descriptor?? [ 1798.220066][ T911] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1798.229524][T28859] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1798.339322][T21618] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1798.360092][T28859] usb 4-1: device descriptor read/64, error -71 [ 1798.470047][T28859] usb usb4-port1: attempt power cycle [ 1798.491216][T21618] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1798.504619][T28860] usb 1-1: USB disconnect, device number 12 [ 1798.511504][T21618] usb 10-1: New USB device found, idVendor=e4b7, idProduct=cda2, bcdDevice= 0.01 [ 1798.528535][T21618] usb 10-1: config 3 has an invalid interface number: 86 but max is 0 [ 1798.540693][T21618] usb 10-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.552743][T21618] usb 10-1: config 3 has no interface number 0 [ 1798.559548][T21618] usb 10-1: config 3 interface 86 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1798.573632][T21618] usb 10-1: config 3 interface 86 has no altsetting 0 [ 1798.581752][T21618] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1798.591643][T21618] usb 10-1: SerialNumber: syz [ 1798.669153][ C0] ip6_tunnel: A xmit: Local address not yet configured! [ 1798.676340][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1798.703719][ T917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7052'. [ 1798.807620][T21618] rndis_host 10-1:3.86: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1798.818444][T28859] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1798.842903][T21618] usb 10-1: USB disconnect, device number 83 [ 1798.855300][T28859] usb 4-1: device descriptor read/8, error -71 [ 1798.887615][ T920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7053'. [ 1799.109422][T28859] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1799.140815][T28859] usb 4-1: device descriptor read/8, error -71 [ 1799.249949][T28859] usb usb4-port1: unable to enumerate USB device [ 1799.309124][ C1] openvswitch: cpu_id mismatch with handler threads [ 1799.513513][ T934] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7056'. [ 1799.703394][ T955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1799.826789][ T957] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7060'. [ 1799.995646][ T962] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1800.444979][ T984] xt_hashlimit: size too large, truncated to 1048576 [ 1800.622362][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1800.809752][ T24] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1800.834091][ T24] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1800.852648][ T24] usb 1-1: config 1 has no interface number 0 [ 1800.874741][ T24] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1800.888028][ T24] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1800.898762][ T24] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1800.923528][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.934981][ T24] usb 1-1: Product: syz [ 1800.941211][ T24] usb 1-1: Manufacturer: syz [ 1800.947052][ T24] usb 1-1: SerialNumber: syz [ 1800.966089][ T955] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1801.284410][ T955] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1801.370655][ T1004] syzkaller0: entered promiscuous mode [ 1801.536826][ T24] usb 1-1: Incompatible driver and firmware versions [ 1801.621836][ T1007] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7072'. [ 1801.790090][T28859] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1801.949478][T28859] usb 4-1: Using ep0 maxpacket: 8 [ 1801.960911][T28859] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1801.977539][T28859] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1802.010020][T28859] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1802.020846][T28859] usb 4-1: string descriptor 0 read error: -22 [ 1802.030033][T28859] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1802.084713][T28859] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1802.184063][T28859] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1802.227820][T28859] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1802.244466][T28859] usb 4-1: media controller created [ 1802.271938][T28859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1802.376404][T28859] zl10353_read_register: readreg error (reg=127, ret==0) [ 1802.417689][ T1033] netlink: 'syz.9.7079': attribute type 1 has an invalid length. [ 1802.495295][T28859] usb 4-1: USB disconnect, device number 9 [ 1802.507637][ T1033] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1802.598553][ T1042] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 1802.813516][T28840] usb 1-1: USB disconnect, device number 13 [ 1802.945837][ T1051] tipc: Enabled bearer , priority 0 [ 1802.962138][ T1051] syzkaller0: entered promiscuous mode [ 1802.971564][ T1051] syzkaller0: entered allmulticast mode [ 1803.031016][ T1057] FAULT_INJECTION: forcing a failure. [ 1803.031016][ T1057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1803.044466][ T1057] CPU: 1 UID: 0 PID: 1057 Comm: syz.0.7084 Tainted: G L syzkaller #0 PREEMPT(full) [ 1803.044492][ T1057] Tainted: [L]=SOFTLOCKUP [ 1803.044499][ T1057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1803.044509][ T1057] Call Trace: [ 1803.044517][ T1057] [ 1803.044524][ T1057] dump_stack_lvl+0xe8/0x150 [ 1803.044554][ T1057] should_fail_ex+0x40c/0x560 [ 1803.044581][ T1057] _copy_from_user+0x2d/0xb0 [ 1803.044607][ T1057] ___sys_sendmsg+0x1c6/0x360 [ 1803.044639][ T1057] ? __lock_acquire+0x683/0x2cf0 [ 1803.044665][ T1057] ? __pfx____sys_sendmsg+0x10/0x10 [ 1803.044716][ T1057] ? __fget_files+0x2a/0x420 [ 1803.044738][ T1057] ? __fget_files+0x3a2/0x420 [ 1803.044768][ T1057] __x64_sys_sendmsg+0x1b1/0x290 [ 1803.044791][ T1057] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1803.044827][ T1057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.044847][ T1057] do_syscall_64+0x174/0x580 [ 1803.044866][ T1057] ? trace_irq_disable+0x3b/0x140 [ 1803.044888][ T1057] ? clear_bhb_loop+0x70/0xc0 [ 1803.044915][ T1057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.044933][ T1057] RIP: 0033:0x7fe87039e0d9 [ 1803.044950][ T1057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1803.044964][ T1057] RSP: 002b:00007fe8711bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1803.044984][ T1057] RAX: ffffffffffffffda RBX: 00007fe870625fa0 RCX: 00007fe87039e0d9 [ 1803.044997][ T1057] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000004 [ 1803.045009][ T1057] RBP: 00007fe8711bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1803.045020][ T1057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1803.045031][ T1057] R13: 00007fe870626038 R14: 00007fe870625fa0 R15: 00007fe87074fa48 [ 1803.045059][ T1057] [ 1803.240564][ T1050] tipc: Resetting bearer [ 1803.344250][ T1050] tipc: Disabling bearer [ 1803.379527][T28859] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1803.529517][T28859] usb 5-1: Using ep0 maxpacket: 8 [ 1803.535262][T28859] usb 5-1: New USB device found, idVendor=9635, idProduct=8010, bcdDevice= 0.40 [ 1803.539778][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1803.558784][T28859] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.580905][T28859] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1803.593687][T28859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.604469][T28859] usb 5-1: Product: syz [ 1803.608785][T28859] usb 5-1: Manufacturer: syz [ 1803.630077][T28859] usb 5-1: SerialNumber: syz [ 1803.729463][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1803.741640][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1803.765826][ T24] usb 4-1: too many configurations: 101, using maximum allowed: 8 [ 1803.788347][ T24] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1803.819192][ T24] usb 4-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 1803.849842][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1803.856697][T28859] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1803.884433][ T24] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1803.891695][T28859] usb 5-1: MIDIStreaming interface descriptor not found [ 1803.911019][ T24] usb 4-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 1803.941419][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1803.959446][ T24] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1803.999171][ T24] usb 4-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 1804.015674][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1804.043038][ T24] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1804.059449][ T24] usb 4-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 1804.069909][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1804.080325][ T24] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1804.090360][T28859] usb 5-1: USB disconnect, device number 8 [ 1804.097280][ T24] usb 4-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 1804.125991][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1804.143762][ T24] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1804.154325][ T24] usb 4-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 1804.165183][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1804.190122][ T24] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1804.202699][ T24] usb 4-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 1804.215397][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1804.228599][ T24] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1804.237830][ T24] usb 4-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 1804.252376][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1804.275771][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.303329][ T24] usb 4-1: config 0 descriptor?? [ 1804.859541][ T5695] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1804.995476][ T1100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7094'. [ 1804.999911][T28859] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1805.016920][ T1100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7094'. [ 1805.057731][ T5695] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1805.080013][ T5695] usb 5-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 1805.099896][ T5695] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1805.125123][ T5695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1805.162520][ T5695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1805.186727][T28859] usb 10-1: device descriptor read/64, error -71 [ 1805.205634][ T5695] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 1805.228210][ T5695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 54439, setting to 64 [ 1805.234270][ T1102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.268080][ T5695] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1805.275741][ T1102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.326019][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.340739][T28840] usb 4-1: USB disconnect, device number 10 [ 1805.341780][ T5695] usb 5-1: Product: syz [ 1805.367244][ T5695] usb 5-1: Manufacturer: syz [ 1805.388263][ T5695] usb 5-1: SerialNumber: syz [ 1805.411032][ T5695] usb 5-1: config 0 descriptor?? [ 1805.426947][ T1091] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1805.439227][ T1091] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1805.457493][T28859] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1805.629597][T28859] usb 10-1: device descriptor read/64, error -71 [ 1805.655982][ T5695] ati_remote 5-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 1805.676304][ T5695] usb 5-1: USB disconnect, device number 9 [ 1805.743390][T28859] usb usb10-port1: attempt power cycle [ 1806.007032][ T1111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7098'. [ 1806.022351][ T1111] bridge1: entered allmulticast mode [ 1806.049086][T28840] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1806.074398][ T1116] FAULT_INJECTION: forcing a failure. [ 1806.074398][ T1116] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.088355][ T1116] CPU: 0 UID: 0 PID: 1116 Comm: syz.0.7099 Tainted: G L syzkaller #0 PREEMPT(full) [ 1806.088371][ T1116] Tainted: [L]=SOFTLOCKUP [ 1806.088375][ T1116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1806.088381][ T1116] Call Trace: [ 1806.088385][ T1116] [ 1806.088390][ T1116] dump_stack_lvl+0xe8/0x150 [ 1806.088408][ T1116] should_fail_ex+0x40c/0x560 [ 1806.088423][ T1116] should_failslab+0xa8/0x100 [ 1806.088439][ T1116] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1806.088451][ T1116] ? local_lock_release+0x9c/0x160 [ 1806.088461][ T1116] ? __alloc_skb+0x1d7/0x7a0 [ 1806.088470][ T1116] ? __alloc_skb+0x1d7/0x7a0 [ 1806.088482][ T1116] __alloc_skb+0x1d7/0x7a0 [ 1806.088494][ T1116] netlink_sendmsg+0x5d4/0xb40 [ 1806.088510][ T1116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1806.088523][ T1116] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1806.088536][ T1116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1806.088547][ T1116] sock_sendmsg_nosec+0x13a/0x180 [ 1806.088562][ T1116] ____sys_sendmsg+0x54e/0x850 [ 1806.088576][ T1116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1806.088591][ T1116] ? import_iovec+0x73/0xa0 [ 1806.088608][ T1116] ___sys_sendmsg+0x2a5/0x360 [ 1806.088618][ T1116] ? __lock_acquire+0x683/0x2cf0 [ 1806.088633][ T1116] ? __pfx____sys_sendmsg+0x10/0x10 [ 1806.088668][ T1116] ? __fget_files+0x2a/0x420 [ 1806.088689][ T1116] ? __fget_files+0x3a2/0x420 [ 1806.088716][ T1116] __x64_sys_sendmsg+0x1b1/0x290 [ 1806.088748][ T1116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1806.088783][ T1116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1806.088795][ T1116] do_syscall_64+0x174/0x580 [ 1806.088812][ T1116] ? trace_irq_disable+0x3b/0x140 [ 1806.088832][ T1116] ? clear_bhb_loop+0x70/0xc0 [ 1806.088852][ T1116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1806.088870][ T1116] RIP: 0033:0x7fe87039e0d9 [ 1806.088886][ T1116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1806.088904][ T1116] RSP: 002b:00007fe8711bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1806.088922][ T1116] RAX: ffffffffffffffda RBX: 00007fe870625fa0 RCX: 00007fe87039e0d9 [ 1806.088934][ T1116] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000004 [ 1806.088953][ T1116] RBP: 00007fe8711bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1806.088963][ T1116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1806.088973][ T1116] R13: 00007fe870626038 R14: 00007fe870625fa0 R15: 00007fe87074fa48 [ 1806.088999][ T1116] [ 1806.351950][T28840] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1806.359992][T28840] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1806.397698][T28859] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1806.406441][T28840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.417050][T28840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1806.420458][T28859] usb 10-1: device descriptor read/8, error -71 [ 1806.433147][T28840] usb 4-1: config 1 has no interface number 0 [ 1806.455921][T28840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.464265][T28840] usb 4-1: Product: syz [ 1806.470959][T28840] usb 4-1: Manufacturer: syz [ 1806.477108][T28840] usb 4-1: SerialNumber: syz [ 1806.616966][ T1124] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 1806.670414][T28859] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 1806.699966][T28859] usb 10-1: device descriptor read/8, error -71 [ 1806.701970][T28840] usb 4-1: selecting invalid altsetting 1 [ 1806.712105][T28840] snd-usb-us122l 4-1:1.1: usb_set_interface error [ 1806.718808][T28840] snd-usb-us122l 4-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1806.731759][T28840] usb 4-1: USB disconnect, device number 11 [ 1806.809013][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1806.811625][T28859] usb usb10-port1: unable to enumerate USB device [ 1806.889328][T28860] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1806.980928][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1807.003534][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1807.021032][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1807.029169][ T24] usb 5-1: Product: syz [ 1807.033404][ T24] usb 5-1: Manufacturer: syz [ 1807.050423][T28860] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1807.063489][T28860] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1807.073441][T28860] usb 1-1: config 1 has no interface number 0 [ 1807.080794][T28860] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32 [ 1807.092499][T28860] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1807.107334][T28860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.116606][T28860] usb 1-1: Product: syz [ 1807.125288][T28860] usb 1-1: Manufacturer: syz [ 1807.132806][T28860] usb 1-1: SerialNumber: syz [ 1807.145413][ T1124] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1807.158745][T28860] usb 1-1: Expected 3 endpoints, found: 2 [ 1807.292078][ T24] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input167 [ 1807.348565][ T24] usb 5-1: USB disconnect, device number 10 [ 1807.564583][ T1134] ================================================================== [ 1807.572675][ T1134] BUG: KASAN: slab-use-after-free in __vb2_queue_cancel+0xd83/0xde0 [ 1807.580652][ T1134] Read of size 4 at addr ffff8880335b6aa8 by task v4l_id/1134 [ 1807.588094][ T1134] [ 1807.590407][ T1134] CPU: 1 UID: 0 PID: 1134 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1807.590428][ T1134] Tainted: [L]=SOFTLOCKUP [ 1807.590433][ T1134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1807.590442][ T1134] Call Trace: [ 1807.590449][ T1134] [ 1807.590455][ T1134] dump_stack_lvl+0xe8/0x150 [ 1807.590476][ T1134] print_address_description+0x55/0x1e0 [ 1807.590494][ T1134] ? __vb2_queue_cancel+0xd83/0xde0 [ 1807.590509][ T1134] print_report+0x58/0x70 [ 1807.590524][ T1134] kasan_report+0x117/0x150 [ 1807.590543][ T1134] ? __vb2_queue_cancel+0xd83/0xde0 [ 1807.590560][ T1134] __vb2_queue_cancel+0xd83/0xde0 [ 1807.590576][ T1134] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 1807.590593][ T1134] vb2_core_queue_release+0x2f/0x150 [ 1807.590610][ T1134] vb2_fop_release+0x16e/0x200 [ 1807.590626][ T1134] v4l2_release+0x22c/0x350 [ 1807.590643][ T1134] ? __pfx_v4l2_release+0x10/0x10 [ 1807.590657][ T1134] __fput+0x418/0xa50 [ 1807.590676][ T1134] fput_close_sync+0x11f/0x240 [ 1807.590691][ T1134] ? __pfx_fput_close_sync+0x10/0x10 [ 1807.590709][ T1134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.590724][ T1134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.590737][ T1134] __x64_sys_close+0x7e/0x110 [ 1807.590754][ T1134] do_syscall_64+0x174/0x580 [ 1807.590769][ T1134] ? clear_bhb_loop+0x70/0xc0 [ 1807.590785][ T1134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.590798][ T1134] RIP: 0033:0x7fb0610a7407 [ 1807.590810][ T1134] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1807.590823][ T1134] RSP: 002b:00007fff1112ea00 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 1807.590837][ T1134] RAX: ffffffffffffffda RBX: 00007fb061836880 RCX: 00007fb0610a7407 [ 1807.590848][ T1134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1807.590856][ T1134] RBP: 00007fb0618366e8 R08: 0000000000000000 R09: 0000000000000000 [ 1807.590865][ T1134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1807.590873][ T1134] R13: 00007fff1112ec30 R14: 00007fb06199d000 R15: 00005625c7d014d8 [ 1807.590889][ T1134] [ 1807.590895][ T1134] [ 1807.803948][ T1134] Allocated by task 24: [ 1807.808091][ T1134] kasan_save_track+0x3e/0x80 [ 1807.812756][ T1134] __kasan_kmalloc+0x93/0xb0 [ 1807.817333][ T1134] __kmalloc_cache_noprof+0x32d/0x660 [ 1807.822691][ T1134] sur40_probe+0x16c/0xfa0 [ 1807.827095][ T1134] usb_probe_interface+0x653/0xc60 [ 1807.832187][ T1134] really_probe+0x254/0xae0 [ 1807.836672][ T1134] __driver_probe_device+0x1e8/0x360 [ 1807.841941][ T1134] driver_probe_device+0x4f/0x240 [ 1807.846949][ T1134] __device_attach_driver+0x270/0x410 [ 1807.852305][ T1134] bus_for_each_drv+0x258/0x2f0 [ 1807.857142][ T1134] __device_attach+0x2c4/0x450 [ 1807.861891][ T1134] device_initial_probe+0xa1/0xd0 [ 1807.866897][ T1134] bus_probe_device+0x12a/0x220 [ 1807.871734][ T1134] device_add+0x7d7/0xb80 [ 1807.876050][ T1134] usb_set_configuration+0x1ad8/0x2180 [ 1807.881504][ T1134] usb_generic_driver_probe+0x8d/0x150 [ 1807.886951][ T1134] usb_probe_device+0x1c3/0x3b0 [ 1807.891786][ T1134] really_probe+0x254/0xae0 [ 1807.896276][ T1134] __driver_probe_device+0x1e8/0x360 [ 1807.901544][ T1134] driver_probe_device+0x4f/0x240 [ 1807.906555][ T1134] __device_attach_driver+0x270/0x410 [ 1807.911941][ T1134] bus_for_each_drv+0x258/0x2f0 [ 1807.916781][ T1134] __device_attach+0x2c4/0x450 [ 1807.921526][ T1134] device_initial_probe+0xa1/0xd0 [ 1807.926534][ T1134] bus_probe_device+0x12a/0x220 [ 1807.931370][ T1134] device_add+0x7d7/0xb80 [ 1807.935679][ T1134] usb_new_device+0x9aa/0x1690 [ 1807.940428][ T1134] hub_event+0x28e8/0x4d30 [ 1807.944830][ T1134] process_scheduled_works+0xa8e/0x14e0 [ 1807.950360][ T1134] worker_thread+0xa47/0xfb0 [ 1807.954935][ T1134] kthread+0x388/0x470 [ 1807.958990][ T1134] ret_from_fork+0x514/0xb70 [ 1807.963577][ T1134] ret_from_fork_asm+0x1a/0x30 [ 1807.968330][ T1134] [ 1807.970641][ T1134] Freed by task 24: [ 1807.974425][ T1134] kasan_save_track+0x3e/0x80 [ 1807.979089][ T1134] kasan_save_free_info+0x40/0x50 [ 1807.984103][ T1134] __kasan_slab_free+0x5c/0x80 [ 1807.988849][ T1134] kfree+0x1c5/0x640 [ 1807.992727][ T1134] sur40_disconnect+0xaf/0x140 [ 1807.997474][ T1134] usb_unbind_interface+0x295/0x9f0 [ 1808.002652][ T1134] device_release_driver_internal+0x4f5/0x880 [ 1808.008719][ T1134] bus_remove_device+0x444/0x560 [ 1808.013669][ T1134] device_del+0x524/0x8f0 [ 1808.017985][ T1134] usb_disable_device+0x3d4/0x8d0 [ 1808.022997][ T1134] usb_disconnect+0x346/0x9a0 [ 1808.027662][ T1134] hub_event+0x1bbb/0x4d30 [ 1808.032068][ T1134] process_scheduled_works+0xa8e/0x14e0 [ 1808.037595][ T1134] worker_thread+0xa47/0xfb0 [ 1808.042168][ T1134] kthread+0x388/0x470 [ 1808.046224][ T1134] ret_from_fork+0x514/0xb70 [ 1808.050798][ T1134] ret_from_fork_asm+0x1a/0x30 [ 1808.055548][ T1134] [ 1808.057859][ T1134] The buggy address belongs to the object at ffff8880335b6000 [ 1808.057859][ T1134] which belongs to the cache kmalloc-4k of size 4096 [ 1808.071894][ T1134] The buggy address is located 2728 bytes inside of [ 1808.071894][ T1134] freed 4096-byte region [ffff8880335b6000, ffff8880335b7000) [ 1808.085846][ T1134] [ 1808.088154][ T1134] The buggy address belongs to the physical page: [ 1808.094542][ T1134] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880335b4000 pfn:0x335b0 [ 1808.104653][ T1134] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1808.113142][ T1134] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1808.121627][ T1134] page_type: f5(slab) [ 1808.125595][ T1134] raw: 00fff00000000240 ffff88801b002140 ffffea0001eb6010 ffffea0001157c10 [ 1808.134161][ T1134] raw: ffff8880335b4000 0000000800040003 00000000f5000000 0000000000000000 [ 1808.142728][ T1134] head: 00fff00000000240 ffff88801b002140 ffffea0001eb6010 ffffea0001157c10 [ 1808.151382][ T1134] head: ffff8880335b4000 0000000800040003 00000000f5000000 0000000000000000 [ 1808.160035][ T1134] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1808.168693][ T1134] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1808.177339][ T1134] page dumped because: kasan: bad access detected [ 1808.183739][ T1134] page_owner tracks the page as allocated [ 1808.189439][ T1134] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17987, tgid 17983 (syz.7.3146), ts 1002256689613, free_ts 1002087457343 [ 1808.209580][ T1134] post_alloc_hook+0x1f9/0x250 [ 1808.214341][ T1134] get_page_from_freelist+0x21fa/0x2270 [ 1808.219871][ T1134] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1808.225662][ T1134] allocate_slab+0x79/0x5e0 [ 1808.230145][ T1134] refill_objects+0x2d5/0x350 [ 1808.234803][ T1134] __pcs_replace_empty_main+0x2bf/0x6b0 [ 1808.240336][ T1134] __kmalloc_cache_noprof+0x3a7/0x660 [ 1808.245691][ T1134] kobject_uevent_env+0x289/0x9e0 [ 1808.250704][ T1134] device_del+0x74d/0x8f0 [ 1808.255017][ T1134] nfc_remove_device+0xa7/0xc0 [ 1808.259769][ T1134] virtual_ncidev_close+0x56/0x90 [ 1808.264776][ T1134] __fput+0x418/0xa50 [ 1808.268741][ T1134] task_work_run+0x1d9/0x270 [ 1808.273315][ T1134] do_exit+0x73a/0x2360 [ 1808.277457][ T1134] do_group_exit+0x22d/0x2f0 [ 1808.282033][ T1134] get_signal+0x121b/0x12c0 [ 1808.286523][ T1134] page last free pid 17980 tgid 17979 stack trace: [ 1808.293001][ T1134] __free_frozen_pages+0xc1e/0xd10 [ 1808.298098][ T1134] __slab_free+0x274/0x2c0 [ 1808.302505][ T1134] qlist_free_all+0x99/0x100 [ 1808.307098][ T1134] kasan_quarantine_reduce+0x148/0x160 [ 1808.312547][ T1134] __kasan_slab_alloc+0x22/0x80 [ 1808.317393][ T1134] __kmalloc_node_track_caller_noprof+0x461/0x730 [ 1808.323800][ T1134] memdup_user+0x2b/0xd0 [ 1808.328038][ T1134] kvm_arch_vm_ioctl+0x86b/0x1a10 [ 1808.333059][ T1134] kvm_vm_ioctl+0x8f7/0xd30 [ 1808.337553][ T1134] __se_sys_ioctl+0xfc/0x170 [ 1808.342126][ T1134] do_syscall_64+0x174/0x580 [ 1808.346703][ T1134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.352582][ T1134] [ 1808.354894][ T1134] Memory state around the buggy address: [ 1808.360515][ T1134] ffff8880335b6980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1808.368565][ T1134] ffff8880335b6a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1808.376611][ T1134] >ffff8880335b6a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1808.384654][ T1134] ^ [ 1808.390008][ T1134] ffff8880335b6b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1808.398062][ T1134] ffff8880335b6b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1808.406107][ T1134] ================================================================== [ 1808.466994][ T1140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1808.529670][ T1134] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1808.536908][ T1134] CPU: 1 UID: 0 PID: 1134 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1808.547407][ T1134] Tainted: [L]=SOFTLOCKUP [ 1808.551712][ T1134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1808.561755][ T1134] Call Trace: [ 1808.565026][ T1134] [ 1808.567936][ T1134] vpanic+0x56c/0xa60 [ 1808.571909][ T1134] ? __pfx_vpanic+0x10/0x10 [ 1808.576399][ T1134] panic+0xc5/0xd0 [ 1808.580107][ T1134] ? __pfx_panic+0x10/0x10 [ 1808.584506][ T1134] ? preempt_schedule_thunk+0x16/0x40 [ 1808.589857][ T1134] ? __vb2_queue_cancel+0xd83/0xde0 [ 1808.595063][ T1134] ? preempt_schedule_thunk+0x16/0x40 [ 1808.600414][ T1134] ? __vb2_queue_cancel+0xd83/0xde0 [ 1808.605593][ T1134] check_panic_on_warn+0x89/0xb0 [ 1808.610519][ T1134] ? __vb2_queue_cancel+0xd83/0xde0 [ 1808.615699][ T1134] end_report+0x73/0x170 [ 1808.619926][ T1134] ? __vb2_queue_cancel+0xd83/0xde0 [ 1808.625104][ T1134] kasan_report+0x128/0x150 [ 1808.629592][ T1134] ? __vb2_queue_cancel+0xd83/0xde0 [ 1808.634772][ T1134] __vb2_queue_cancel+0xd83/0xde0 [ 1808.639781][ T1134] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 1808.645152][ T1134] vb2_core_queue_release+0x2f/0x150 [ 1808.650424][ T1134] vb2_fop_release+0x16e/0x200 [ 1808.655171][ T1134] v4l2_release+0x22c/0x350 [ 1808.659658][ T1134] ? __pfx_v4l2_release+0x10/0x10 [ 1808.664663][ T1134] __fput+0x418/0xa50 [ 1808.668623][ T1134] fput_close_sync+0x11f/0x240 [ 1808.673368][ T1134] ? __pfx_fput_close_sync+0x10/0x10 [ 1808.678637][ T1134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.684681][ T1134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.690729][ T1134] __x64_sys_close+0x7e/0x110 [ 1808.695395][ T1134] do_syscall_64+0x174/0x580 [ 1808.699971][ T1134] ? clear_bhb_loop+0x70/0xc0 [ 1808.704640][ T1134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.710509][ T1134] RIP: 0033:0x7fb0610a7407 [ 1808.714905][ T1134] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1808.734493][ T1134] RSP: 002b:00007fff1112ea00 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 1808.742885][ T1134] RAX: ffffffffffffffda RBX: 00007fb061836880 RCX: 00007fb0610a7407 [ 1808.750839][ T1134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1808.758795][ T1134] RBP: 00007fb0618366e8 R08: 0000000000000000 R09: 0000000000000000 [ 1808.766744][ T1134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1808.774695][ T1134] R13: 00007fff1112ec30 R14: 00007fb06199d000 R15: 00005625c7d014d8 [ 1808.782652][ T1134] [ 1808.785929][ T1134] Kernel Offset: disabled [ 1808.790260][ T1134] Rebooting in 86400 seconds..