last executing test programs: 10.029301535s ago: executing program 2 (id=110): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xfff2, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20040054) 9.658052288s ago: executing program 2 (id=114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\v'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (fail_nth: 10) 8.897193966s ago: executing program 2 (id=117): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x1000, @empty, 0x5}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581260000000000090582020002000000090503"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000000400120061ff80aa431d6d54f606cb91746ac8fffa7bc6c1e3bc7bba60d540154188e51da5a3cd3617c16a8455f5777081a47889dfa43d74baa0eed16835ffba44cfb131c95450f664180f84c12c92b506c06a7932ceaedf7b850cdc825d254b1a871ad1167c5e150f4e9b03c0b99a3255b23bc54cd76b063d15a4aa09fa20c55944c74b527c383e8156695f49a9f8cd1e01df0046f1600567eb7e500ae219d6a24f73082dc400"], 0x64}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0, 0x9c, 0x8, 0xffffffffffffff6c, 0x0}}, 0x10) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r5, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"]) r6 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) shutdown(r3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000a00)="bf6ab12051dc6238cf8cf41dd780a7b48f0b5907a9cc504dcd9b41b2b2cb3d57af387f6707880423fefa1f998269ad32c0754f30b2222cbd29afcffb60a78117d6b592eeabbeaac239702043e558b69dc2e5600cffdaa359429bfc094d7fcfc8f78d1674d65090f8c05501e5e4d064442e26d926396bf0fa42ad2d91fe8c", 0x7e}, {&(0x7f0000000b80)="81e0c3623afccff9e74478ec17761c1d38d69033284db42c08d79f46e641d7948bdf784bc58a6c9686e0f3ba2d0281f7812ffbe172d0a5cbdb447b8b81210dee138c52a80c14cf51741a11efb71845b791eb6c816815a62b1021a651b12d1c8756e0ce2563e3b22966c207847b7c9cc0ab54884e29253a326674700437af9d316875c0f4d30d62", 0x87}, {&(0x7f0000000c40)="62cb1643cd668f928eef138b467cdbe945f2821fc4dc7ee26ff54804c171b11c8c158aefa571c79a25d7d8d80c083a26c5c64957fd06da5aecfe32617cf3c27324da367e2736b8455ddf1ec46464cefd94d735c0e3ae315f200bd3a823aa704d34c30b0c5bba0033e9967d19fb5065c0c7f922aa13ff1953fac86519d51667914cc79ff0e1d4b5b5093ef908a378f9ab52047843acb32ec31cb70c687ac275d9e8269f416b69c3152b2add017797397e7a678d35ec79de5378cd5732ae810032cab3a063eedadb6efd63c977fdfb78a2", 0xd0}, {&(0x7f00000007c0)="4d1d855e55684e8c0667d94bf22b6fba34046235b7fbc0ee3bbe45f3d8934198c5a5207393", 0x25}], 0x4, &(0x7f0000002d80)=[@cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x10, 0x1, 0x1, [r3]}}], 0x50, 0x2040800}}, {{&(0x7f0000002e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000002e80)="e9ad4bc999c2bb92bdabfcbf54dea57c16244172b855dc156bb7e0e3825d5011f313f090c8dfda1517a434d2f70fa579a3b8e31460aad807617c1ddd7a81eb3aa943b472c6efcfb71f11671a4be0eb4489c15e201b86ee99f6035fa6c847cdac0d608cf69b587ad9da7f02970f1f9c7f83a50237fdad52091da78996574ee0732667751bce2476c8a9c588d36fd99f", 0x8f}, {&(0x7f0000002f40)="43c7cfd0762e51f01d9226db78388aefa6d4832e5e3e134ba7aa521c35c48c89a45b46e33b48387d711605f80a3d287270ed7edc", 0x34}, {&(0x7f0000002f80)="8c4c2011112d14c66b9dc437f03347969e7e101b63f34232755121392d6ace6995b626288d611885f5dfd17d674dcdf2fd9367dcedfa5ad04892f2a025c4ddca4002106b9092f4072c59fef85dde739f2626bf352dc7cc1c5790ab35ce8106f26d2e781c01d8b89e28ff696e1b58a86c4a52b5d32ada591a06a7bdefcea83b", 0x7f}, {&(0x7f0000003000)="18551d53216954a4a09d25842dffb25c6e208211ceae67eed484e52c1b0d43ffdc041f0edd1ba6a73cd4cefd4e68e19bcec0fd403255a8f21fbd5c03ba57aaaef170a3400ce3e09c797e04db71899800461862b13220f0f9e9e7426496dbce52a2584e6c5d27c0deaac60edfb80678f452d5cc682a29921edcee", 0x7a}, {&(0x7f0000003080)="6f06d0ef94ad082ee5dcb102d55773ffc4d6203d79fde64193b1bb8ccb70fa20a2b7143dfd3e63f2439531e45ba168dd690badac9526d092bfdb616820c66d6ac21540184d3fdeeea3870e2a5944868cc6868316a9a8223caf1d33eb123320d5cf05d13c7eb4532fc283908a2b6ebbfec1c830fb113b652384708c12bd73a93c66bebfae64655b320a38f117798f9fe09b694b5f5846ac3dceb41e3d6259b842d9fc71b04dc6ff28f3efd9a72961fa98d2ed278239553001f10b36701cafe415f39db393dd6676e3ea38bc52ca95646437758829735b", 0xd6}], 0x5, 0x0, 0x0, 0x804}}, {{&(0x7f0000003240)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000032c0)="e8342c4611577c066113758d061fc7061913a79428d6bde9a84ce16bdc467ab6744e16eca071f786a513a5cab7963c259477ee58897254ea18644209790b409b3afa269b9b5ebf2c7a9d2a913c3d6c6a219e7ab6f0eb3ab36927b3169a41cd5768ffbca7dd15921b7f839a0f75ab68ec0501654483110ecf2af075a58b7557505f455386beb8bf91ea91f6ac2172d1353eb28dde46c67c473ff438f088ed7bbbaddf5fd2cf38", 0xa6}, {&(0x7f0000003380)="e25395fa9bf1ea9e99167a39f804162065f18c49008f519bd4d6d000b2a4a195c24c86788cfbbcf62cea0ccb7e81040f32d4768303bda9b5c593c2f2c84bfc306fc060cdc1d87a1a6263a28985d29eaec09530c3f272e5f41d648acc31f515ef393f24027a337fadb823c1f4198562e312164be57a1e8bdc395020920f18519a64d9acdbd6661d6e888c132b03633b1bd6f8006b2074a6304124847f5a0513c67acd62", 0xa3}, {&(0x7f0000003440)="03b17a1373da7a4d63b488c783d6c3ca32f1a4b5245f1327e9d19d13c64abb169d5d3a3b3a5b3145549f100ec67d30a92ab436fd767fe934923fb703321834b1bd0f1ef3b7ec1aeacac9dba86f3cc1536c9f8912e624f3034bfc5d329b49402f54b81f90ac98cf60c5447d897df7f434c3d7c51c50", 0x75}, {&(0x7f00000034c0)="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", 0xfa}], 0x4, 0x0, 0x0, 0x810}}, {{&(0x7f0000003740)=@abs={0x1}, 0x6e, &(0x7f0000003940)=[{&(0x7f00000037c0)="8edea8514be701c69fde4fe41d489240709862f01c0d6130079f64b95e91705fbc45a32c6b303d2bd3bed361f9b1", 0x2e}, {&(0x7f0000003800)="6dc4324306958451cca2de003ab3fd0f7a968842927e3040ca1f9ff0881cb8ff78398ba230e2fc9c2978ddd610", 0x2d}, {&(0x7f0000003840)}, {&(0x7f0000003880)="2453e5f9a006897874ef95f3c89ce36abc4f7fa950035f3c196d4dd2418592cf01c352fb29e814dc4bd301651616bf6d6f6feb0843c8dea62160a98fe77f0ea46a0ee065016c70343ea89d599601", 0x4e}, {&(0x7f0000003900)="b43c9ace0d6f1713d1d04fe3eb65043868f8c3f76007b68c3a377db51219d430950ea8957c66", 0x26}], 0x5, &(0x7f0000003e00)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r4, 0xffffffffffffffff, r1, r5, r1, r4, r0, r5, r0, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0xa8, 0x1}}], 0x4, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xf8, 0x0, 0xe4}]}, 0x8) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d44f163a6e1268808908540969fef64837c1c98f595e4e6c4d0167879320c7196661e64a8a7a4a0aa159496216536ecba5fb", 0x32}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000000040)="8ab6598c0e736adb59da56cc0eb835cbdccffc94f37652e6", 0x18}, {&(0x7f0000000880)="0817713df84283dcc9e2a06b798929c95636c0842657377b8d98dd77898e21f02f4a367f3e3749c4cfe5dc813707b51dad7823395413e25b90efe109962e00527ed8b9646c3ca9cf5d22483c6a8fc64de6d2805e7cd868c05c240f351cf545c1233a2242a63367a122335d62821a7dacbe7f00b57fa7815e9c568a5c3f04ff8738da57586fc43456994cbeb4be14f43e8d8154bcc69652bfd167be595da7239277712cc17e850563c813f6dfe6b132879ce76093e7cba68a985e1190aab0489a2cff0a231c43b49a3633400933dbd4392902", 0xd2}], 0x4}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x3, 0x2090) sendto$inet(r5, &(0x7f0000000d40)="3d12c01caa0fbe8a17e7b733cef070bf8ae0fc7b2f4845344ef9050e7569ac4ad93240ef643d8aa367e4590166d1de84c0fe5609e91dacca9858a8e959d519e33f3483decd0f415f0fbef54bb07b75537702ffd6baa66916d8b561065b1a248ac64155d39cc4b9900e8ab1bef732fd327c17523cb778dd1805d6c02f43801f3cc37fb346a84c5dd787edbd7728b3aa7cfb219cbe68a16d700b2a212cad740a83b18022366c", 0xa5, 0x0, 0x0, 0x0) 8.431110525s ago: executing program 4 (id=124): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="89000000120081ae08060cdc03007f03000000d0c01c73450d0dc7124b6a4a0000000001ffca1b1f0000000024c00e72f750375ed08aa4abf656331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955f", 0x7a}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210", 0xe}], 0x2}, 0x4000000) 7.875228748s ago: executing program 4 (id=125): r0 = io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xa868, 0x1, 0x20001, 0x3c3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0xb0, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FIB_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}]}}}]}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x40001}, 0x8800) r2 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404355220500000000000109022400010000000009041100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="002005"], 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) 6.948886847s ago: executing program 0 (id=128): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) recvmsg$can_raw(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f00000000c0)=""/35, 0x23}], 0x2}, 0x1021) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000009, 0x12, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000000080)=""/108, 0x86, 0x0, 0x2, 0x2}}, 0x12) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000000000000000008004500002400000000007367907800000300e000000100000000fe9a9078020000000000000028198108166c1369bb49d5002b10a93c49be003604965fe1adcb1a23ec9eb24d7d10e2e86424e9ba6255b4b3c0439cb039ad2677bf96f515216004489af550af4a708b620451a306d63dfc70ea2c785d28fa3d5938282ddda99027a49a35a838d18a16dd4e3f0fdc53c8a58c6d6c2b34f517263cd8d8066c644b54d960a7615600b71ccc01f6cf80deea975e31cfed423303671c5b89f5d9627325e811cc9d9d0bab1065b4edfc48b6a343c8ba7d8e9a10"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x6, 0xb}, {0xffff, 0x7}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10000, 0x6b, 0x4, 0x2, 0x8}, 0x98, 0x1, 0x3, 0x40, 0x800, 0xb, 0x6, 0xf, 0x6, 0x3, {0x5, 0x8000, 0x6, 0x7f, 0x8, 0x401}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) userfaultfd(0x80001) 6.861889481s ago: executing program 0 (id=129): r0 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "37578bbb", {0x3, 0x102, 0x0, 0x9, 0x1000, 0x2, 0xd6}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x2b, 0x80801, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000540)=""/153, &(0x7f0000000080)=0x99) syz_open_dev$char_usb(0xc, 0xb4, 0x8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 6.642043803s ago: executing program 1 (id=130): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r4, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x5, 0x1, 0x208, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0xc}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="251925bd8000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000004) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x3, r7, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000021c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {0x10, 0x1}}, 0x24, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5.467138229s ago: executing program 1 (id=134): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) pipe(&(0x7f0000000200)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r4, &(0x7f0000000200), 0x0}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="251925bd8000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000004) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r7, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000021c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {0x10, 0x1}}, 0x24, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x3) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x44) 5.450802021s ago: executing program 4 (id=135): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="89000000120081ae08060cdc03007f03000000d0c01c73450d0dc7124b6a4a0000000001ffca1b1f0000000024c00e72f750375ed08aa4abf656331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955f", 0x7a}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210", 0xe}], 0x2}, 0x4000000) 5.396165881s ago: executing program 2 (id=136): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001480)=@newspdinfo={0x14, 0x15, 0x1, 0x70bd27, 0x25dfdbfc, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x20040840}, 0x400c000) 5.288993629s ago: executing program 2 (id=137): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgget$private(0x0, 0x8) socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b042a00090582"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) listen(r4, 0x3) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc25c4110, &(0x7f0000000980)={0x0, [[0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0x5], [0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x8000004]], '\x00', [{}, {0x0, 0x40000005}, {0xaf5, 0xaf6}, {0x3fc}, {0x0, 0x5b2c5934}, {0x200}, {0x0, 0x3}, {0x10}, {0x0, 0x8}, {0x4, 0xffffff30}, {0x40000}, {0x0, 0x401}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x104}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb4}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0xe8, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}]}]}, 0x138}}, 0x0) 5.269898193s ago: executing program 4 (id=138): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x20040040) 4.933359561s ago: executing program 4 (id=139): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgget$private(0x0, 0x8) socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b042a00090582"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) listen(r4, 0x3) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc25c4110, &(0x7f0000000980)={0x0, [[0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0x5], [0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x8000004]], '\x00', [{}, {0x0, 0x40000005}, {0xaf5, 0xaf6}, {0x3fc}, {0x0, 0x5b2c5934}, {0x200}, {0x0, 0x3}, {0x10}, {0x0, 0x8}, {0x4, 0xffffff30}, {0x40000}, {0x0, 0x401}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x104}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb4}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0xe8, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}]}]}, 0x138}}, 0x0) 3.26681141s ago: executing program 0 (id=141): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x25, 0x2, 0x44, @empty, @local, 0x23425e9dc2663815, 0x40, 0xf, 0xa}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="c188864840c53d15429d93d72b365b4ac1682619389f5f1355421d6602dda47669642b80a0ff5f87baf8fe22b6c38eda6ce9a48e9dd526ea777fbc59852866fff70495becca732fda759fbc04239bf4c769f44eca2face467a509d9abbbe2502d1420d9ecb3795d651324814dd8787a9b8829c89f8cc68c08a9e99bae2cf2726f542abb0828a811955ad5d12282c14aef534c7b252dbf2d7081a"]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x1, 0x2, 0x1, 0x10000, 0x2dcf0a80, 0x1, {0x3, 0x254, 0x8, 0x1, 0x100, 0x1, 0x3, 0x6, 0x5, 0x2000, 0x8, r5, 0x0, 0x1, 0x6}}, {0x3, 0x5, 0x2, 0x6, '.&'}}]}, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000400)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff, 0x0, r5}, {@in6=@mcast1, 0x0, 0x6c}, @in=@local, {0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x4008}, {0x0, 0x2}, {0x0, 0x3}, 0x0, 0x4000, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2a, 0x70bd2c, 0x70bd28, 0x1}}]}, 0x150}}, 0x10008000) sendmsg$nl_xfrm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000000c0)=@expire={0x124, 0x18, 0x200, 0x70bd2c, 0x25dfdbfc, {{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x4e21, 0x101, 0x4e22, 0x0, 0xa, 0x0, 0x80, 0x0, r1, r5}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x18}, @in=@local, {0x401, 0xfffffffffffffff9, 0x9, 0x8, 0x2, 0x8000, 0x0, 0xffff}, {0xfffffffffffffffe, 0x0, 0xfffffffffffffa60, 0x1}, {0x6, 0x10000, 0x5}, 0x70bd2c, 0x0, 0xa, 0x3, 0x7, 0xc1}, 0xe}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @user_kmaddress={0x2c, 0x13, {@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20040840}, 0x400c000) 3.005240235s ago: executing program 0 (id=142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="070017"], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100040000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.00210559s ago: executing program 3 (id=143): recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000180)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000100)=[{&(0x7f0000001100)=""/69, 0x45}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2, &(0x7f0000000340)=""/53, 0x35}, 0x5}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/37, 0x25}, {&(0x7f00000003c0)=""/160, 0xa0}], 0x2, &(0x7f00000004c0)=""/49, 0x31}, 0x8}, {{&(0x7f0000000500)=@x25, 0x80, &(0x7f0000000700)=[{&(0x7f0000000580)=""/76, 0x4c}, {&(0x7f0000000600)=""/247, 0xf7}], 0x2}, 0x101}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000880)=""/217, 0xd9}, {&(0x7f0000000980)=""/130, 0x82}, {&(0x7f0000000a40)=""/199, 0xc7}, {&(0x7f0000000b40)=""/74, 0x4a}, {&(0x7f0000000bc0)=""/133, 0x85}], 0x7, &(0x7f0000000cc0)=""/71, 0x47}, 0x7f}, {{&(0x7f0000000d40)=@can, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/196, 0xc4}], 0x1, &(0x7f0000000f00)=""/125, 0x7d}, 0x4}, {{&(0x7f0000000f80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001000)=""/232, 0xe8}, {&(0x7f0000001680)=""/71, 0x47}, {&(0x7f0000001180)=""/235, 0xeb}, {&(0x7f0000001280)=""/226, 0xe2}, {&(0x7f0000001380)=""/8, 0x8}, {&(0x7f00000013c0)=""/142, 0x8e}], 0x6, &(0x7f00000014c0)=""/121, 0x79}, 0x28}], 0x6, 0x40000041, &(0x7f0000001640)) openat$zero(0xffffff9c, &(0x7f0000001cc0), 0x2802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendmsg$kcm(r0, &(0x7f0000001c80)={&(0x7f0000000200)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001700)="77f708e9828ac99f22900ccab0a3ee8d79a38b377b4e56bb50e03e6e51c9e136c1ca83dc3b54cc83b07897b6a03977f225e23be6971613819c40e2a7e8e3ab8b70ce0a67f2a72e19098df1a16c352491be6864755775b5c738cf3dcc3e9c5ef46312b2fe717864b504b2ed61d2317fd95854a13039c15c1805c7e4a97769695f599e6938ed5b9ef297755a02d41cd1cde60169086cace841a1c45491395ca8174585a273c9d65bf844efebac301cbb1e39bb1e22b82b705acf80f1ec4189d66a1321d55385222341163e51132d6f8950580ff3308cda0b574bce06e06316dbeef97b2457ec6a1d7382150aa810eb84613fcd53b7ec129a4bb7", 0xf9}, {&(0x7f0000001800)="4995933382eb4591b942caba05e14b8d81ffed9519fb3c1cf081e745569bdd829ff5086756a39440754b7d046ff563cd74196ded78e4c49bfeeab8ac996287331cfbde7b7e900c05fd01d8aee960ba3b50c55a061a60b154850fcee11fb556e7d99b8317a890a46ff21e1fb44cbaf298400a52f3905cf4d5a99edb05b92750e559f957a4204bc10a5771ceb3258feb2787a56278852c8afb17330dd3b1e2e7f938ad7d0f5744d4e48562d1ed20417e5c6c6abed8181b0e6270bba83fec1b0938218a14bfc5c158ab540bb36cb86ee670d20e808c96ed3daad55c9aea55af891e33b2275574a0562e399579b2", 0xec}, {&(0x7f0000001900)="7266674d9f22b6d5a1f0530f62c2e4a7b37349193449ba07951336fe0deb9a7c9cef1fd52231589ebe189952b2e41227f7342c31bac57ce084fcc56fdeb951dd5e37e41036c08b238d9016e2939620a5f9c7244723422f09c3f865a3c616b0153d5760cc81", 0x65}, {&(0x7f0000001980)="385d8afc79ca7af20da91cbfd1fe224933df4eaef1722b80078bc729fcba34c720be48da70948b294462224113be13382f2976228b7d50ddf01fd0eb7d865c3159216af26bf40737d30a3230d2468f937da2454c1760a383532e5c3f3b77bcb92b5a3a2a09bd5e0ebdf8ca5f21ebcb1a7fdad471acf1d97cdc6aa1646d1466f1916db124b9349c185dda3c6ed92b00", 0x8f}, {&(0x7f0000000740)="744e325fafb2", 0x6}, {&(0x7f0000001a40)="800e57dea9", 0x5}], 0x6, &(0x7f0000001ac0)=[{0xd0, 0x10e, 0x3ff, "2a9e784b4c5351ae91d8d02e6852ef67ddbfc18490ce8edc87bd25c589e94306ab23e13bdb68f135255567be7d8ac9b9ad6c5f071dbaadbf32407412d209b1e4e30ff7ae8a64a8a0c8b5e44c8586f096e6f6d693b15af2509d5ed3ea944e6d3b64497a2745025a1607740d97b1d8cd3a3f39b5c694058c4fad1ffc932f7fa04e743c6b3b4d4965f7589d5ed010baf882af3719e122bbee0484f9ecfe4c6a0e93622f5af918dccbae43879965394a32f8e4188c70276cccb78b5defb273e7cc1c2cab4979"}, {0xec, 0x104, 0x200, "a0c41eb5d92bd342bfd5d5c24584b8d57048033b6549481fc49f023cb4f306b5fb3c5e1347001446a8ea0cb815d8532bc32e26ac0ff75cf52291098ee797ae33269a5a208a386e5ae7b362e4ee2d14481332cb74f1483c744d59cca55120d680b0817f7c2630187a5459088f13f22b1fe8e601d8b98f4d133298a7c2b2f4c08786d46307104d484f533cfefe81cf41f82cfa2cd5a19df56eec8c7da90cc5a70bf97de3ccda2a14820e3ca03f517655adbf3bfe25a54d566aade5040cc9f00bc3db05534dcee36a0af120c2a5f353e90246a89dbda8396c0342db5ab880413d9d"}], 0x1bc}, 0x2000c800) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0x13, 0x5, 0x70, 0x0, 0xd, 0xb, 0x0, 0x0, 0x80, 0xa8, '\x00', 0x4, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) 2.90011805s ago: executing program 1 (id=144): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r4, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x5, 0x1, 0x208, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0xc}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="251925bd8000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000004) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x3, r7, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000021c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {0x10, 0x1}}, 0x24, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.829973886s ago: executing program 0 (id=145): r0 = io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xa868, 0x1, 0x20001, 0x3c3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0xb0, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FIB_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}]}}}]}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x40001}, 0x8800) r2 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404355220500000000000109022400010000000009041100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="002005"], 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) 2.510382162s ago: executing program 3 (id=146): unshare(0x26020480) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000001500)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000200)={r1, 0xfffffffffffffffd, 0x4806, 0xc}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x5, 0x10}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x22, 0x4, 0x1, 0x3}, 0x3, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffee6, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0x2710}}, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, 0x0) 2.187639717s ago: executing program 3 (id=147): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty, 0x0, 0x0, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 2.045542033s ago: executing program 3 (id=148): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="89000000120081ae08060cdc03007f03000000d0c01c73450d0dc7124b6a4a0000000001ffca1b1f0000000024c00e72f750375ed08aa4abf656331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955f", 0x7a}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210", 0xe}], 0x2}, 0x4000000) 1.987782103s ago: executing program 3 (id=149): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x391442, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp6\x00') lseek(r8, 0x1000000, 0x0) 1.425229241s ago: executing program 1 (id=150): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x1000, @empty, 0x5}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581260000000000090582020002000000090503"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000000400120061ff80aa431d6d54f606cb91746ac8fffa7bc6c1e3bc7bba60d540154188e51da5a3cd3617c16a8455f5777081a47889dfa43d74baa0eed16835ffba44cfb131c95450f664180f84c12c92b506c06a7932ceaedf7b850cdc825d254b1a871ad1167c5e150f4e9b03c0b99a3255b23bc54cd76b063d15a4aa09fa20c55944c74b527c383e8156695f49a9f8cd1e01df0046f1600567eb7e500ae219d6a24f73082dc400"], 0x64}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0, 0x9c, 0x8, 0xffffffffffffff6c, 0x0}}, 0x10) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r5, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"]) r6 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) shutdown(r3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 810.901468ms ago: executing program 0 (id=152): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x700, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff2}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x7}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x1, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xd}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x16, 0x4) r8 = syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0x20000) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc, 0x2010, r8, 0x10001) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xa5130055f41583e0}, 0x4) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r12 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r12, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r12, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r12, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$TIPC_CONN_TIMEOUT(r12, 0x10f, 0x82, &(0x7f00000002c0)=0x3, 0x4) io_submit(r11, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r10, &(0x7f0000000080)="0d32818e7e6ae0", 0x7}]) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000080)) 651.73679ms ago: executing program 2 (id=153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000a00)="bf6ab12051dc6238cf8cf41dd780a7b48f0b5907a9cc504dcd9b41b2b2cb3d57af387f6707880423fefa1f998269ad32c0754f30b2222cbd29afcffb60a78117d6b592eeabbeaac239702043e558b69dc2e5600cffdaa359429bfc094d7fcfc8f78d1674d65090f8c05501e5e4d064442e26d926396bf0fa42ad2d91fe8c", 0x7e}, {&(0x7f0000000b80)="81e0c3623afccff9e74478ec17761c1d38d69033284db42c08d79f46e641d7948bdf784bc58a6c9686e0f3ba2d0281f7812ffbe172d0a5cbdb447b8b81210dee138c52a80c14cf51741a11efb71845b791eb6c816815a62b1021a651b12d1c8756e0ce2563e3b22966c207847b7c9cc0ab54884e29253a326674700437af9d316875c0f4d30d62", 0x87}, {&(0x7f0000000c40)="62cb1643cd668f928eef138b467cdbe945f2821fc4dc7ee26ff54804c171b11c8c158aefa571c79a25d7d8d80c083a26c5c64957fd06da5aecfe32617cf3c27324da367e2736b8455ddf1ec46464cefd94d735c0e3ae315f200bd3a823aa704d34c30b0c5bba0033e9967d19fb5065c0c7f922aa13ff1953fac86519d51667914cc79ff0e1d4b5b5093ef908a378f9ab52047843acb32ec31cb70c687ac275d9e8269f416b69c3152b2add017797397e7a678d35ec79de5378cd5732ae810032cab3a063eedadb6efd63c977fdfb78a2", 0xd0}, {&(0x7f00000007c0)="4d1d855e55684e8c0667d94bf22b6fba34046235b7fbc0ee3bbe45f3d8934198c5a5207393", 0x25}], 0x4, &(0x7f0000002d80)=[@cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x10, 0x1, 0x1, [r3]}}], 0x50, 0x2040800}}, {{&(0x7f0000002e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000002e80)="e9ad4bc999c2bb92bdabfcbf54dea57c16244172b855dc156bb7e0e3825d5011f313f090c8dfda1517a434d2f70fa579a3b8e31460aad807617c1ddd7a81eb3aa943b472c6efcfb71f11671a4be0eb4489c15e201b86ee99f6035fa6c847cdac0d608cf69b587ad9da7f02970f1f9c7f83a50237fdad52091da78996574ee0732667751bce2476c8a9c588d36fd99f", 0x8f}, {&(0x7f0000002f40)="43c7cfd0762e51f01d9226db78388aefa6d4832e5e3e134ba7aa521c35c48c89a45b46e33b48387d711605f80a3d287270ed7edc", 0x34}, {&(0x7f0000002f80)="8c4c2011112d14c66b9dc437f03347969e7e101b63f34232755121392d6ace6995b626288d611885f5dfd17d674dcdf2fd9367dcedfa5ad04892f2a025c4ddca4002106b9092f4072c59fef85dde739f2626bf352dc7cc1c5790ab35ce8106f26d2e781c01d8b89e28ff696e1b58a86c4a52b5d32ada591a06a7bdefcea83b", 0x7f}, {&(0x7f0000003000)="18551d53216954a4a09d25842dffb25c6e208211ceae67eed484e52c1b0d43ffdc041f0edd1ba6a73cd4cefd4e68e19bcec0fd403255a8f21fbd5c03ba57aaaef170a3400ce3e09c797e04db71899800461862b13220f0f9e9e7426496dbce52a2584e6c5d27c0deaac60edfb80678f452d5cc682a29921edcee", 0x7a}, {&(0x7f0000003080)="6f06d0ef94ad082ee5dcb102d55773ffc4d6203d79fde64193b1bb8ccb70fa20a2b7143dfd3e63f2439531e45ba168dd690badac9526d092bfdb616820c66d6ac21540184d3fdeeea3870e2a5944868cc6868316a9a8223caf1d33eb123320d5cf05d13c7eb4532fc283908a2b6ebbfec1c830fb113b652384708c12bd73a93c66bebfae64655b320a38f117798f9fe09b694b5f5846ac3dceb41e3d6259b842d9fc71b04dc6ff28f3efd9a72961fa98d2ed278239553001f10b36701cafe415f39db393dd6676e3ea38bc52ca95646437758829735b", 0xd6}], 0x5, 0x0, 0x0, 0x804}}, {{&(0x7f0000003240)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000032c0)="e8342c4611577c066113758d061fc7061913a79428d6bde9a84ce16bdc467ab6744e16eca071f786a513a5cab7963c259477ee58897254ea18644209790b409b3afa269b9b5ebf2c7a9d2a913c3d6c6a219e7ab6f0eb3ab36927b3169a41cd5768ffbca7dd15921b7f839a0f75ab68ec0501654483110ecf2af075a58b7557505f455386beb8bf91ea91f6ac2172d1353eb28dde46c67c473ff438f088ed7bbbaddf5fd2cf38", 0xa6}, {&(0x7f0000003380)="e25395fa9bf1ea9e99167a39f804162065f18c49008f519bd4d6d000b2a4a195c24c86788cfbbcf62cea0ccb7e81040f32d4768303bda9b5c593c2f2c84bfc306fc060cdc1d87a1a6263a28985d29eaec09530c3f272e5f41d648acc31f515ef393f24027a337fadb823c1f4198562e312164be57a1e8bdc395020920f18519a64d9acdbd6661d6e888c132b03633b1bd6f8006b2074a6304124847f5a0513c67acd62", 0xa3}, {&(0x7f0000003440)="03b17a1373da7a4d63b488c783d6c3ca32f1a4b5245f1327e9d19d13c64abb169d5d3a3b3a5b3145549f100ec67d30a92ab436fd767fe934923fb703321834b1bd0f1ef3b7ec1aeacac9dba86f3cc1536c9f8912e624f3034bfc5d329b49402f54b81f90ac98cf60c5447d897df7f434c3d7c51c50", 0x75}, {&(0x7f00000034c0)="f52156d50e3b2d1582ef4f68b43677958fd95215161bddf132317e565e68a968d19d62953dc33ffe40996712bac699033f7b40853036aa1c73b4907c4dc984ff9053663b9871acababee0420d6fc181dc541b956c86567c5b17849e0613615481bbddc923d960597e3d885ca66396e4e8f2813ee36ee7a2177deb8c3a589a1f14525858a0bba4a9c9db8e541ed4e6ab72076fc2119bfe08e5e37dec124cb5781ae762a16cea39dc9e3459839ddfb1cfcd036b208ef0cc4718aeb7427dbab53b7ea6844dac55dba563ea1a28f86e9d3d34df781c07d3e59d0ecb835b98f16ac466467f36de5ada82c740b194002d15fa76d73b074cddc17989853", 0xfa}], 0x4, 0x0, 0x0, 0x810}}, {{&(0x7f0000003740)=@abs={0x1}, 0x6e, &(0x7f0000003940)=[{&(0x7f00000037c0)="8edea8514be701c69fde4fe41d489240709862f01c0d6130079f64b95e91705fbc45a32c6b303d2bd3bed361f9b1", 0x2e}, {&(0x7f0000003800)="6dc4324306958451cca2de003ab3fd0f7a968842927e3040ca1f9ff0881cb8ff78398ba230e2fc9c2978ddd610", 0x2d}, {&(0x7f0000003840)}, {&(0x7f0000003880)="2453e5f9a006897874ef95f3c89ce36abc4f7fa950035f3c196d4dd2418592cf01c352fb29e814dc4bd301651616bf6d6f6feb0843c8dea62160a98fe77f0ea46a0ee065016c70343ea89d599601", 0x4e}, {&(0x7f0000003900)="b43c9ace0d6f1713d1d04fe3eb65043868f8c3f76007b68c3a377db51219d430950ea8957c66", 0x26}], 0x5, &(0x7f0000003e00)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r4, 0xffffffffffffffff, r1, r5, r1, r4, r0, r5, r0, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0xa8, 0x1}}], 0x4, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xf8, 0x0, 0xe4}]}, 0x8) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d44f163a6e1268808908540969fef64837c1c98f595e4e6c4d0167879320c7196661e64a8a7a4a0aa159496216536ecba5fb", 0x32}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000000040)="8ab6598c0e736adb59da56cc0eb835cbdccffc94f37652e6", 0x18}, {&(0x7f0000000880)="0817713df84283dcc9e2a06b798929c95636c0842657377b8d98dd77898e21f02f4a367f3e3749c4cfe5dc813707b51dad7823395413e25b90efe109962e00527ed8b9646c3ca9cf5d22483c6a8fc64de6d2805e7cd868c05c240f351cf545c1233a2242a63367a122335d62821a7dacbe7f00b57fa7815e9c568a5c3f04ff8738da57586fc43456994cbeb4be14f43e8d8154bcc69652bfd167be595da7239277712cc17e850563c813f6dfe6b132879ce76093e7cba68a985e1190aab0489a2cff0a231c43b49a3633400933dbd4392902", 0xd2}], 0x4}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x3, 0x2090) sendto$inet(r5, &(0x7f0000000d40)="3d12c01caa0fbe8a17e7b733cef070bf8ae0fc7b2f4845344ef9050e7569ac4ad93240ef643d8aa367e4590166d1de84c0fe5609e91dacca9858a8e959d519e33f3483decd0f415f0fbef54bb07b75537702ffd6baa66916d8b561065b1a248ac64155d39cc4b9900e8ab1bef732fd327c17523cb778dd1805d6c02f43801f3cc37fb346a84c5dd787edbd7728b3aa7cfb219cbe68a16d700b2a212cad740a83b18022366c", 0xa5, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=154): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x2, 0x8, 0xd, 0xe, 0x7e, 0x6, 0x11, 0x0, 0x80206}, {0x806, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xfffffffd, 0x3, 0x7, 0x5, 0x85, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x400000000009}], 0xffdfffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, 0x0, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000484002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x0, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000850) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="2e02000000000000000b27ebb8e2", 0xe, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000180)='./cgroup/../file0\x00') lseek(r5, 0x93, 0x3) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.35' (ED25519) to the list of known hosts. [ 65.576265][ T5809] cgroup: Unknown subsys name 'net' [ 65.727334][ T5809] cgroup: Unknown subsys name 'cpuset' [ 65.736174][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.129787][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.377204][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.386155][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.393346][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.394694][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.402016][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.416147][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.417599][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.425484][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.438430][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.439112][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.446883][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.454517][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.460647][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.467156][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.475022][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.481929][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.489684][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.495008][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.510149][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.510211][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.517462][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.533836][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.542614][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.564305][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.572490][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.930670][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 71.196590][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.203747][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.211734][ T5838] bridge_slave_0: entered allmulticast mode [ 71.218961][ T5838] bridge_slave_0: entered promiscuous mode [ 71.260136][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.267446][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.275001][ T5838] bridge_slave_1: entered allmulticast mode [ 71.282694][ T5838] bridge_slave_1: entered promiscuous mode [ 71.291280][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 71.322522][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 71.423176][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.441208][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 71.476791][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.494063][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.500923][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.543903][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 71.561232][ T5838] team0: Port device team_slave_0 added [ 71.602531][ T5838] team0: Port device team_slave_1 added [ 71.654288][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.661571][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.668810][ T5840] bridge_slave_0: entered allmulticast mode [ 71.675903][ T5840] bridge_slave_0: entered promiscuous mode [ 71.691056][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.698238][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.705762][ T5843] bridge_slave_0: entered allmulticast mode [ 71.712668][ T5843] bridge_slave_0: entered promiscuous mode [ 71.741567][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.748930][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.756286][ T5840] bridge_slave_1: entered allmulticast mode [ 71.763185][ T5840] bridge_slave_1: entered promiscuous mode [ 71.775880][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.783381][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.790784][ T5843] bridge_slave_1: entered allmulticast mode [ 71.797819][ T5843] bridge_slave_1: entered promiscuous mode [ 71.806400][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.813353][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.839445][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.852038][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.859196][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.885431][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.944276][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.951953][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.959204][ T5844] bridge_slave_0: entered allmulticast mode [ 71.966977][ T5844] bridge_slave_0: entered promiscuous mode [ 71.993434][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.005794][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.015145][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.022258][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.029887][ T5844] bridge_slave_1: entered allmulticast mode [ 72.037172][ T5844] bridge_slave_1: entered promiscuous mode [ 72.050466][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.098104][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.155112][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.162271][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.169553][ T5842] bridge_slave_0: entered allmulticast mode [ 72.177296][ T5842] bridge_slave_0: entered promiscuous mode [ 72.190333][ T5838] hsr_slave_0: entered promiscuous mode [ 72.196645][ T5838] hsr_slave_1: entered promiscuous mode [ 72.204696][ T5843] team0: Port device team_slave_0 added [ 72.212843][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.230203][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.237556][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.244919][ T5842] bridge_slave_1: entered allmulticast mode [ 72.251839][ T5842] bridge_slave_1: entered promiscuous mode [ 72.271584][ T5843] team0: Port device team_slave_1 added [ 72.279150][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.290266][ T5840] team0: Port device team_slave_0 added [ 72.333247][ T5840] team0: Port device team_slave_1 added [ 72.341402][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.353346][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.405830][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.412795][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.439679][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.461684][ T5844] team0: Port device team_slave_0 added [ 72.486556][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.493534][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.519676][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.538929][ T5844] team0: Port device team_slave_1 added [ 72.545292][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.552235][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.578406][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.590339][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.597373][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.624260][ T5829] Bluetooth: hci1: command tx timeout [ 72.624753][ T5826] Bluetooth: hci4: command tx timeout [ 72.629901][ T5829] Bluetooth: hci0: command tx timeout [ 72.636366][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.653178][ T5842] team0: Port device team_slave_0 added [ 72.684307][ T5829] Bluetooth: hci2: command tx timeout [ 72.684312][ T5826] Bluetooth: hci3: command tx timeout [ 72.718018][ T5842] team0: Port device team_slave_1 added [ 72.778984][ T5843] hsr_slave_0: entered promiscuous mode [ 72.785308][ T5843] hsr_slave_1: entered promiscuous mode [ 72.791325][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 72.797189][ T5843] Cannot create hsr debugfs directory [ 72.803438][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.810692][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.836892][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.848608][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.855858][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.881981][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.922642][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.929808][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.955923][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.967480][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.974710][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.000830][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.058197][ T5840] hsr_slave_0: entered promiscuous mode [ 73.064613][ T5840] hsr_slave_1: entered promiscuous mode [ 73.070650][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 73.076564][ T5840] Cannot create hsr debugfs directory [ 73.185853][ T5842] hsr_slave_0: entered promiscuous mode [ 73.192325][ T5842] hsr_slave_1: entered promiscuous mode [ 73.198657][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 73.204725][ T5842] Cannot create hsr debugfs directory [ 73.216407][ T5844] hsr_slave_0: entered promiscuous mode [ 73.222817][ T5844] hsr_slave_1: entered promiscuous mode [ 73.229235][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 73.235183][ T5844] Cannot create hsr debugfs directory [ 73.483043][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.526681][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.559273][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.574341][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.710901][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.739732][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.751248][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.762388][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.831355][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.843985][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.868612][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.878379][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.933181][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.975756][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.006976][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.017506][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.085897][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.092762][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.105615][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.130673][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.141789][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.177807][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.208708][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.216044][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.235790][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.243030][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.317754][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.361035][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.377991][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.400251][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.407538][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.422330][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.447105][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.454283][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.502329][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.525791][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.532966][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.555293][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.573762][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.597635][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.604796][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.652891][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.680282][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.687443][ T5826] Bluetooth: hci0: command tx timeout [ 74.695834][ T5826] Bluetooth: hci4: command tx timeout [ 74.695843][ T5829] Bluetooth: hci1: command tx timeout [ 74.726592][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.733735][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.752400][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.765384][ T5829] Bluetooth: hci3: command tx timeout [ 74.770811][ T5829] Bluetooth: hci2: command tx timeout [ 74.780009][ T5838] veth0_vlan: entered promiscuous mode [ 74.797083][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.804231][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.823171][ T5838] veth1_vlan: entered promiscuous mode [ 74.832153][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.839315][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.876793][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.883955][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.930573][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.998839][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.010183][ T5838] veth0_macvtap: entered promiscuous mode [ 75.026502][ T5838] veth1_macvtap: entered promiscuous mode [ 75.085492][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.109911][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.126515][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.136408][ T5843] veth0_vlan: entered promiscuous mode [ 75.157125][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.169683][ T138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.180042][ T138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.204884][ T5843] veth1_vlan: entered promiscuous mode [ 75.215085][ T138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.240251][ T5840] veth0_vlan: entered promiscuous mode [ 75.261327][ T138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.283304][ T5840] veth1_vlan: entered promiscuous mode [ 75.326742][ T5844] veth0_vlan: entered promiscuous mode [ 75.389532][ T5843] veth0_macvtap: entered promiscuous mode [ 75.400092][ T5844] veth1_vlan: entered promiscuous mode [ 75.412345][ T5840] veth0_macvtap: entered promiscuous mode [ 75.429580][ T5843] veth1_macvtap: entered promiscuous mode [ 75.436540][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.447246][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.457162][ T5842] veth0_vlan: entered promiscuous mode [ 75.463321][ T5840] veth1_macvtap: entered promiscuous mode [ 75.509915][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.516496][ T5842] veth1_vlan: entered promiscuous mode [ 75.531778][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.535191][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.561402][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.582702][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.609505][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.627234][ T5842] veth0_macvtap: entered promiscuous mode [ 75.642479][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.666177][ T3555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.681991][ T3555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.699295][ T5844] veth0_macvtap: entered promiscuous mode [ 75.759298][ T5842] veth1_macvtap: entered promiscuous mode [ 75.769713][ T3555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.788071][ T3555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.822384][ T5844] veth1_macvtap: entered promiscuous mode [ 75.868746][ T3555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.883494][ T3555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.906131][ T3555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.939273][ T3555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.004648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.043936][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.096554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.116231][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.127043][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.148910][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.157593][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.351780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.399324][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.411148][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.431216][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.445635][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.460787][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.506049][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.513881][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.525572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.562252][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.575684][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.585653][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.639099][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.664099][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.716566][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.765623][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.769841][ T5829] Bluetooth: hci1: command tx timeout [ 76.777288][ T5826] Bluetooth: hci4: command tx timeout [ 76.780858][ T5829] Bluetooth: hci0: command tx timeout [ 76.844774][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.844844][ T5829] Bluetooth: hci3: command tx timeout [ 76.852111][ T5826] Bluetooth: hci2: command tx timeout [ 77.017589][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.050129][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.375708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.384477][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.400277][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.444238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.505844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.582827][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.595786][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.744625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.755552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.765054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 77.848282][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.861833][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.845032][ T5829] Bluetooth: hci0: command tx timeout [ 78.845293][ T5826] Bluetooth: hci4: command tx timeout [ 78.850476][ T5829] Bluetooth: hci1: command tx timeout [ 78.964406][ T5826] Bluetooth: hci3: command tx timeout [ 78.979983][ T5826] Bluetooth: hci2: command tx timeout [ 79.506619][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.533725][ T5964] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.920136][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 80.065614][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.081063][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 80.220017][ T5956] CUSE: unknown device info "" [ 80.225068][ T5956] CUSE: unknown device info "Ö" [ 80.309368][ T5956] CUSE: unknown device info "" [ 80.317388][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 80.335145][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 80.356153][ T5956] CUSE: unknown device info "ÿÿ" [ 80.366326][ T5956] CUSE: unknown device info "ðÿÿÿ" [ 80.381138][ T5956] CUSE: unknown device info "" [ 80.480287][ T5956] CUSE: unknown device info "" [ 80.485892][ T5956] CUSE: unknown device info "" [ 80.558210][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.584289][ T5956] CUSE: unknown device info "" [ 80.594407][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 80.613324][ T5956] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 80.620094][ T10] usb 3-1: SerialNumber: syz [ 80.754100][ T5956] CUSE: unknown device info "ÿÿÿÿ" [ 80.771696][ T10] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 80.823062][ T5956] CUSE: unknown device info "" [ 80.862645][ T5956] CUSE: unknown device info "€" [ 81.059712][ T5956] CUSE: DEVNAME unspecified [ 81.736092][ T797] cfg80211: failed to load regulatory.db [ 81.824823][ T5899] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.045882][ T5989] bridge_slave_0: default FDB implementation only supports local addresses [ 82.114214][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 82.155887][ T5899] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 82.174144][ T5899] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 82.183571][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.214225][ T846] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.222217][ T5899] usb 5-1: config 0 descriptor?? [ 82.384155][ T846] usb 1-1: Using ep0 maxpacket: 16 [ 82.526709][ T846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.552858][ T797] usb 3-1: USB disconnect, device number 2 [ 82.560830][ T846] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 82.632379][ T846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 82.666616][ T846] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 82.843061][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'. [ 82.852895][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'. [ 83.052933][ T846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.075872][ T846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 83.112267][ T846] usb 1-1: SerialNumber: syz [ 83.509654][ T846] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 83.531293][ T6016] tc_dump_action: action bad kind [ 84.845492][ T5899] usb 5-1: USB disconnect, device number 2 [ 85.933576][ T5811] usb 1-1: USB disconnect, device number 2 [ 86.113871][ T6047] hsr0: entered promiscuous mode [ 86.138382][ T6047] hsr0: entered allmulticast mode [ 86.271725][ T6047] hsr_slave_0: entered allmulticast mode [ 86.315127][ T6047] hsr_slave_1: entered allmulticast mode [ 86.883600][ T6058] syzkaller0: entered promiscuous mode [ 86.889139][ T6058] syzkaller0: entered allmulticast mode [ 86.924472][ T5811] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.943300][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.38'. [ 86.982555][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.38'. [ 87.076261][ T5811] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 87.087837][ T5811] usb 5-1: config 0 has no interface number 0 [ 87.096587][ T5811] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.114114][ T5811] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.124449][ T5811] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 87.133910][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.264824][ T5811] usb 5-1: config 0 descriptor?? [ 87.296136][ T846] IPVS: starting estimator thread 0... [ 87.338001][ T6073] bridge_slave_0: default FDB implementation only supports local addresses [ 87.384919][ T6072] IPVS: using max 40 ests per chain, 96000 per kthread [ 87.744393][ T5811] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 87.768162][ T5811] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 87.782661][ T5811] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 87.791183][ T5811] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 87.798509][ T5811] uclogic 0003:5543:0522.0001: unknown main item tag 0x0 [ 87.816864][ T5811] uclogic 0003:5543:0522.0001: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input17 [ 87.946144][ T5811] usb 5-1: USB disconnect, device number 3 [ 88.367719][ T6082] fido_id[6082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 88.630838][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 88.650917][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 88.925592][ T6103] hsr0: entered promiscuous mode [ 89.010830][ T6103] hsr0: entered allmulticast mode [ 89.038704][ T6103] hsr_slave_0: entered allmulticast mode [ 89.059875][ T6103] hsr_slave_1: entered allmulticast mode [ 89.179250][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 89.188480][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 89.224169][ T846] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.250319][ T6112] bridge_slave_0: default FDB implementation only supports local addresses [ 89.384399][ T846] usb 4-1: Using ep0 maxpacket: 16 [ 89.401368][ T846] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.423603][ T5891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 89.469453][ T846] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 89.503958][ T846] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.559223][ T846] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 89.596570][ T5891] IPVS: starting estimator thread 0... [ 89.640111][ T846] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.687373][ T5923] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.691753][ T846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 89.695066][ T6119] IPVS: using max 34 ests per chain, 81600 per kthread [ 89.760656][ T846] usb 4-1: SerialNumber: syz [ 89.809212][ T846] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 89.953878][ T5923] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.052589][ T5891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 90.105284][ T5923] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 90.116033][ T5923] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.119348][ T846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 90.125408][ T5923] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 90.378834][ T5923] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 90.411496][ T5923] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.421170][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.446993][ T5923] usb 1-1: Product: syz [ 90.461994][ T5923] usb 1-1: Manufacturer: syz [ 90.490936][ T5923] cdc_wdm 1-1:1.0: skipping garbage [ 90.501400][ T5923] cdc_wdm 1-1:1.0: skipping garbage [ 90.553466][ T5923] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 90.570067][ T5923] cdc_wdm 1-1:1.0: Unknown control protocol [ 90.594335][ T797] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.634217][ T846] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.730761][ T5891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 90.736089][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.776894][ T797] usb 2-1: Using ep0 maxpacket: 8 [ 90.785239][ T797] usb 2-1: too many configurations: 10, using maximum allowed: 8 [ 90.815725][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.826505][ T797] usb 2-1: New USB device found, idVendor=00bb, idProduct=0da4, bcdDevice=6a.6b [ 90.827641][ T846] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 90.844183][ T846] usb 5-1: config 0 has no interface number 0 [ 90.845913][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.859019][ T797] usb 2-1: Product: syz [ 90.863195][ T797] usb 2-1: Manufacturer: syz [ 90.868490][ T797] usb 2-1: SerialNumber: syz [ 90.895629][ T797] usb 2-1: config 0 descriptor?? [ 90.934139][ T846] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.001766][ T846] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.036360][ T846] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 91.064129][ T846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.085360][ T846] usb 5-1: config 0 descriptor?? [ 91.260162][ T6143] IPVS: length: 153 != 24 [ 91.285266][ T6143] syzkaller0: entered promiscuous mode [ 91.291146][ T6143] syzkaller0: entered allmulticast mode [ 91.545009][ T846] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 91.563597][ T846] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 91.576846][ T846] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 91.590414][ T846] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 91.604124][ T846] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 91.627530][ T846] uclogic 0003:5543:0522.0002: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input17 [ 91.749020][ T24] usb 5-1: USB disconnect, device number 4 [ 91.798166][ T846] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.986129][ T846] usb 3-1: Using ep0 maxpacket: 16 [ 91.997323][ T846] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.009691][ T846] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 92.021970][ T846] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.032130][ T846] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 92.073777][ T846] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.085125][ T846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 92.095405][ T846] usb 3-1: SerialNumber: syz [ 92.118214][ T846] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 92.217113][ T24] usb 4-1: USB disconnect, device number 2 [ 92.391472][ T6150] bridge_slave_0: default FDB implementation only supports local addresses [ 92.494860][ T5899] IPVS: starting estimator thread 0... [ 92.502470][ T5899] usb 1-1: USB disconnect, device number 3 [ 92.606668][ T6153] IPVS: using max 35 ests per chain, 84000 per kthread [ 92.832006][ T797] usb 2-1: USB disconnect, device number 2 [ 93.104130][ T5923] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.324238][ T5899] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.426314][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 93.447668][ T5923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.551367][ T5923] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 93.585945][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 93.619224][ T5899] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.619590][ T5923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.743856][ T5923] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 93.774438][ T5923] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.787459][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.799493][ T5923] usb 4-1: SerialNumber: syz [ 93.804801][ T5899] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 93.817350][ T5899] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.828052][ T5899] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 93.828645][ T5923] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 93.856279][ T5899] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.868652][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.877701][ T5899] usb 1-1: SerialNumber: syz [ 93.903369][ T5899] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 94.633976][ T24] usb 3-1: USB disconnect, device number 3 [ 94.714432][ T5899] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 94.894162][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 95.027475][ T5899] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.037403][ T5899] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 95.070940][ T5899] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.092309][ T5899] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 95.343471][ T5899] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.353990][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 95.374131][ T5899] usb 5-1: SerialNumber: syz [ 95.425314][ T5899] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 96.357192][ T24] usb 4-1: USB disconnect, device number 3 [ 96.567179][ T5891] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.630656][ T5899] usb 1-1: USB disconnect, device number 4 [ 96.746905][ T5891] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.773656][ T5891] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 96.818808][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.838155][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 96.863378][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 96.888223][ T5891] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.897567][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.906452][ T5891] usb 2-1: Product: syz [ 96.910743][ T5891] usb 2-1: Manufacturer: syz [ 96.925209][ T5891] cdc_wdm 2-1:1.0: skipping garbage [ 96.930509][ T5891] cdc_wdm 2-1:1.0: skipping garbage [ 96.941673][ T5891] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 96.950253][ T5891] cdc_wdm 2-1:1.0: Unknown control protocol [ 96.974549][ T5899] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.016762][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 97.046890][ T6218] Zero length message leads to an empty skb [ 97.066914][ T6218] netlink: 'syz.3.85': attribute type 10 has an invalid length. [ 97.086243][ T3555] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 97.134214][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 97.147671][ T5899] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 97.147792][ T6205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.164115][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.292927][ T5899] usb 1-1: config 0 descriptor?? [ 97.504532][ T6205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.582884][ T5899] as10x_usb: device has been detected [ 97.594993][ T5899] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 97.617192][ T5891] usb 5-1: USB disconnect, device number 5 [ 97.682020][ T6224] FAULT_INJECTION: forcing a failure. [ 97.682020][ T6224] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.724834][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 97.749030][ T5899] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 97.781264][ T6224] CPU: 0 UID: 0 PID: 6224 Comm: syz.3.86 Not tainted syzkaller #0 PREEMPT(full) [ 97.781289][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.781305][ T6224] Call Trace: [ 97.781312][ T6224] [ 97.781319][ T6224] dump_stack_lvl+0xe8/0x150 [ 97.781349][ T6224] should_fail_ex+0x412/0x560 [ 97.781374][ T6224] _copy_from_user+0x2d/0xb0 [ 97.781392][ T6224] kstrtouint_from_user+0xd6/0x180 [ 97.781415][ T6224] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 97.781448][ T6224] proc_fail_nth_write+0x8e/0x210 [ 97.781470][ T6224] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 97.781496][ T6224] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 97.781517][ T6224] vfs_write+0x29a/0xb90 [ 97.781540][ T6224] ? __pfx_vfs_write+0x10/0x10 [ 97.781559][ T6224] ? __fget_files+0x2a/0x420 [ 97.781584][ T6224] ? __fget_files+0x3a0/0x420 [ 97.781604][ T6224] ? __fget_files+0x2a/0x420 [ 97.781632][ T6224] ksys_write+0x150/0x270 [ 97.781652][ T6224] ? __pfx_ksys_write+0x10/0x10 [ 97.781672][ T6224] ? asm_int80_emulation+0x1a/0x20 [ 97.781692][ T6224] do_int80_emulation+0x173/0x4d0 [ 97.781710][ T6224] ? trace_irq_disable+0x3b/0x150 [ 97.781730][ T6224] ? asm_int80_emulation+0x1a/0x20 [ 97.781744][ T6224] ? clear_bhb_loop+0x40/0x90 [ 97.781759][ T6224] ? clear_bhb_loop+0x40/0x90 [ 97.781778][ T6224] asm_int80_emulation+0x1a/0x20 [ 97.781792][ T6224] RIP: 0023:0xf7115cab [ 97.781816][ T6224] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 97.781828][ T6224] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 97.781852][ T6224] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53d65d0 [ 97.781862][ T6224] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.781870][ T6224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.781878][ T6224] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 97.781887][ T6224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.781911][ T6224] [ 98.063665][ T5899] as10x_usb: error during firmware upload part1 [ 98.081221][ T5899] Registered device nBox DVB-T Dongle [ 98.083386][ T5899] usb 1-1: USB disconnect, device number 5 [ 98.112681][ T6230] IPVS: length: 153 != 24 [ 98.156791][ T5899] Unregistered device nBox DVB-T Dongle [ 98.158857][ T5899] as10x_usb: device has been disconnected [ 98.301925][ T5923] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.538739][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 98.555963][ T5923] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 98.570748][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.585109][ T5923] usb 3-1: config 0 descriptor?? [ 98.811008][ T5923] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 98.918627][ T5923] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 98.928194][ T5923] dib0700: firmware download failed at 7 with -22 [ 99.004523][ T5891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 99.034527][ T5899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 99.167043][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 99.171834][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.96'. [ 99.251928][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.96'. [ 99.294112][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.88'. [ 99.413413][ T5923] usb 2-1: USB disconnect, device number 3 [ 99.644666][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 99.656380][ T5891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 99.915479][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 99.924992][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 100.056974][ T797] IPVS: starting estimator thread 0... [ 100.064330][ T5923] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.145524][ T6275] IPVS: using max 57 ests per chain, 136800 per kthread [ 100.235421][ T5923] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 100.243835][ T5923] usb 2-1: config 0 has no interface number 0 [ 100.251206][ T5923] usb 2-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.273220][ T5923] usb 2-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.323531][ T5923] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 100.337942][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.361014][ T5923] usb 2-1: config 0 descriptor?? [ 100.420985][ T6282] trusted_key: syz.3.105 sent an empty control message without MSG_MORE. [ 100.713793][ T6288] netlink: 56 bytes leftover after parsing attributes in process `syz.0.107'. [ 100.794432][ T5923] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 100.803803][ T5923] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 100.825788][ T24] usb 3-1: USB disconnect, device number 4 [ 100.837653][ T6292] netlink: 32 bytes leftover after parsing attributes in process `syz.3.109'. [ 100.843696][ T5923] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 100.879117][ T5923] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 100.897511][ T5923] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 100.921669][ T5923] uclogic 0003:5543:0522.0003: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.1-1/input17 [ 100.949743][ T5891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 101.005067][ T5923] usb 2-1: USB disconnect, device number 4 [ 101.223660][ T6297] fido_id[6297]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 101.507070][ T6309] FAULT_INJECTION: forcing a failure. [ 101.507070][ T6309] name failslab, interval 1, probability 0, space 0, times 1 [ 101.562273][ T6309] CPU: 1 UID: 0 PID: 6309 Comm: syz.2.114 Not tainted syzkaller #0 PREEMPT(full) [ 101.562295][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.562304][ T6309] Call Trace: [ 101.562310][ T6309] [ 101.562318][ T6309] dump_stack_lvl+0xe8/0x150 [ 101.562343][ T6309] should_fail_ex+0x412/0x560 [ 101.562368][ T6309] should_failslab+0xa8/0x100 [ 101.562387][ T6309] ? skb_clone+0x212/0x3a0 [ 101.562404][ T6309] kmem_cache_alloc_noprof+0x87/0x650 [ 101.562426][ T6309] skb_clone+0x212/0x3a0 [ 101.562447][ T6309] __netlink_deliver_tap+0x404/0x850 [ 101.562480][ T6309] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.562502][ T6309] netlink_deliver_tap+0x19c/0x1b0 [ 101.562527][ T6309] netlink_sendskb+0x68/0x140 [ 101.562548][ T6309] netlink_unicast+0x3a3/0x9b0 [ 101.562575][ T6309] ? __pfx_netlink_unicast+0x10/0x10 [ 101.562604][ T6309] nfnetlink_rcv+0x2517/0x27b0 [ 101.562651][ T6309] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 101.562684][ T6309] ? ref_tracker_free+0x693/0x840 [ 101.562728][ T6309] ? __netlink_deliver_tap+0x807/0x850 [ 101.562749][ T6309] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.562785][ T6309] netlink_unicast+0x80f/0x9b0 [ 101.562812][ T6309] ? __pfx_netlink_unicast+0x10/0x10 [ 101.562834][ T6309] ? netlink_sendmsg+0x650/0xb40 [ 101.562853][ T6309] ? skb_put+0x11b/0x210 [ 101.562871][ T6309] netlink_sendmsg+0x813/0xb40 [ 101.562901][ T6309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.562925][ T6309] ? aa_sock_msg_perm+0xf1/0x1b0 [ 101.562947][ T6309] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 101.562967][ T6309] ____sys_sendmsg+0x972/0x9f0 [ 101.562992][ T6309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.563013][ T6309] ? kstrtoull+0x12f/0x1d0 [ 101.563040][ T6309] ___sys_sendmsg+0x2a5/0x360 [ 101.563062][ T6309] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.563082][ T6309] ? get_pid_task+0x20/0x1f0 [ 101.563096][ T6309] ? get_pid_task+0x20/0x1f0 [ 101.563108][ T6309] ? get_pid_task+0x20/0x1f0 [ 101.563143][ T6309] ? __fget_files+0x2a/0x420 [ 101.563164][ T6309] ? __fget_files+0x3a0/0x420 [ 101.563193][ T6309] __sys_sendmsg+0x183/0x260 [ 101.563220][ T6309] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.563256][ T6309] __do_fast_syscall_32+0x20d/0x640 [ 101.563275][ T6309] ? do_fast_syscall_32+0x33/0x70 [ 101.563291][ T6309] ? asm_int80_emulation+0x1a/0x20 [ 101.563306][ T6309] ? do_int80_emulation+0x274/0x4d0 [ 101.563322][ T6309] ? trace_irq_disable+0x3b/0x150 [ 101.563347][ T6309] do_fast_syscall_32+0x33/0x70 [ 101.563365][ T6309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.563383][ T6309] RIP: 0023:0xf703ef6c [ 101.563398][ T6309] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 101.563409][ T6309] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 101.563426][ T6309] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 101.563437][ T6309] RDX: 0000000024000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.563446][ T6309] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.563455][ T6309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 101.563463][ T6309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.563488][ T6309] [ 101.929922][ T5899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 102.284309][ T6317] netlink: 32 bytes leftover after parsing attributes in process `syz.4.118'. [ 102.514115][ T5891] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.980332][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 102.991419][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 103.024083][ T5891] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.038795][ T5891] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 103.076557][ T5891] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 103.096933][ T6338] netlink: 'syz.3.120': attribute type 10 has an invalid length. [ 103.132489][ T5891] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 103.164699][ T5891] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.186343][ T6343] netlink: 'syz.3.120': attribute type 10 has an invalid length. [ 103.203853][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.312311][ T6338] team0: Port device netdevsim0 added [ 103.325912][ T6343] team0: Port device netdevsim0 removed [ 103.342520][ T6343] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 103.397299][ T5891] usb 3-1: SerialNumber: syz [ 103.450626][ T6342] xt_CT: No such helper "pptp" [ 103.492974][ T3555] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 103.525974][ T5891] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 103.867642][ T5899] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.081054][ T5899] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 104.092084][ T5899] usb 5-1: config 0 has no interface number 0 [ 104.107885][ T5899] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.128313][ T5891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.139264][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.160964][ T5899] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.189484][ T5899] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 104.210777][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.242939][ T5899] usb 5-1: config 0 descriptor?? [ 104.534176][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.543662][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 104.564577][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 104.686294][ T5899] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 104.695473][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.768506][ T3555] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.780756][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.974240][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.984713][ T5891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.999509][ T5899] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 105.013155][ T5899] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 105.022676][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.044123][ T5899] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 105.051308][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 105.062856][ T5899] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 105.072722][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 105.100359][ T5899] uclogic 0003:5543:0522.0004: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input17 [ 105.133895][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.146290][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.163125][ T5899] usb 5-1: USB disconnect, device number 6 [ 105.175368][ T10] usb 1-1: Product: syz [ 105.202649][ T10] usb 1-1: Manufacturer: syz [ 105.234954][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 105.243682][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 105.258298][ T6365] fido_id[6365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 105.278332][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 105.284731][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 105.409494][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 105.446910][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.458988][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.527158][ T797] usb 3-1: USB disconnect, device number 5 [ 105.610183][ T6373] ipvlan2: entered allmulticast mode [ 105.617902][ T6373] dummy0: entered allmulticast mode [ 105.828013][ T6391] IPVS: length: 153 != 24 [ 106.051131][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 106.084376][ T797] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.324112][ T797] usb 3-1: Using ep0 maxpacket: 32 [ 106.361961][ T797] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 106.370261][ T797] usb 3-1: config 0 has no interface number 0 [ 106.392107][ T797] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 106.414209][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.537683][ T797] usb 3-1: config 0 interface 89 has no altsetting 0 [ 106.638347][ T797] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 106.650602][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.691495][ T3555] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 106.705942][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 106.714054][ T797] usb 3-1: Product: syz [ 106.730491][ T797] usb 3-1: Manufacturer: syz [ 106.745623][ T797] usb 3-1: SerialNumber: syz [ 106.763400][ T797] usb 3-1: config 0 descriptor?? [ 106.774458][ T797] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 106.785174][ T797] em28xx 3-1:0.89: Video interface 89 found: [ 106.954245][ T24] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 106.981827][ T24] usb 5-1: config 0 has no interface number 0 [ 107.005986][ T24] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.022712][ T24] usb 5-1: config 0 interface 89 has no altsetting 0 [ 107.042419][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 107.051604][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.060481][ T24] usb 5-1: Product: syz [ 107.065875][ T24] usb 5-1: Manufacturer: syz [ 107.073385][ T24] usb 5-1: SerialNumber: syz [ 107.089433][ T24] usb 5-1: config 0 descriptor?? [ 107.103809][ T24] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 107.114662][ T24] em28xx 5-1:0.89: Video interface 89 found: [ 107.600687][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 107.653186][ T5923] usb 1-1: USB disconnect, device number 6 [ 107.967544][ T797] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 108.000678][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 108.011621][ T5924] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 108.053544][ T6407] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.142'. [ 108.195143][ T24] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 108.494300][ T5923] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 108.610049][ T138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 108.636817][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 108.650108][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 108.656463][ T5923] usb 1-1: config 0 has an invalid interface number: 17 but max is 0 [ 108.734513][ T5923] usb 1-1: config 0 has no interface number 0 [ 108.788713][ T5923] usb 1-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.820309][ T5923] usb 1-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.855116][ T5923] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 108.897782][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.948931][ T5923] usb 1-1: config 0 descriptor?? [ 109.247381][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.258833][ T138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.379497][ T5923] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 109.387780][ T5923] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 109.402628][ T5923] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 109.423747][ T5923] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 109.442403][ T5923] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 109.471850][ T5923] uclogic 0003:5543:0522.0005: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.0-1/input17 [ 109.485350][ T797] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 109.503511][ T797] em28xx 3-1:0.89: board has no eeprom [ 109.574135][ T797] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 109.585658][ T797] em28xx 3-1:0.89: analog set to bulk mode. [ 109.602038][ T5923] usb 1-1: USB disconnect, device number 7 [ 109.612982][ T29] em28xx 3-1:0.89: Registering V4L2 extension [ 109.645404][ T24] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 109.653636][ T24] em28xx 5-1:0.89: board has no eeprom [ 109.723639][ T29] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 109.737770][ T24] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 109.754861][ T24] em28xx 5-1:0.89: analog set to bulk mode. [ 109.761627][ T29] em28xx 3-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 109.775230][ T29] em28xx 3-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 109.792970][ T29] em28xx 3-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 109.805890][ T29] em28xx 3-1:0.89: Config register raw data: 0xfffffffb [ 109.904847][ T29] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 109.915321][ T29] em28xx 3-1:0.89: No AC97 audio processor [ 109.938360][ T29] usb 3-1: Decoder not found [ 109.944629][ T29] em28xx 3-1:0.89: failed to create media graph [ 109.951689][ T29] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 109.959002][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.002920][ T29] em28xx 3-1:0.89: Registering snapshot button... [ 110.023142][ T29] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input25 [ 110.059211][ T29] em28xx 3-1:0.89: Remote control support is not available for this card. [ 110.079472][ T797] em28xx 5-1:0.89: Registering V4L2 extension [ 110.134117][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.152102][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 110.166998][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.194727][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 110.206291][ T797] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 110.220113][ T797] em28xx 5-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 110.234927][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 110.267410][ T29] usb 3-1: USB disconnect, device number 6 [ 110.282183][ T29] em28xx 3-1:0.89: Disconnecting em28xx [ 110.301856][ T797] em28xx 5-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 110.306959][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.332054][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 110.350428][ T797] em28xx 5-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 110.368565][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.371207][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 110.378324][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 110.397867][ T6437] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.152' sets config #0 [ 110.407816][ T797] em28xx 5-1:0.89: Config register raw data: 0xfffffffb [ 110.415176][ T24] usb 2-1: SerialNumber: syz [ 110.420103][ T797] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 110.428041][ T797] em28xx 5-1:0.89: No AC97 audio processor [ 110.460609][ T797] usb 5-1: Decoder not found [ 110.469607][ T797] em28xx 5-1:0.89: failed to create media graph [ 110.469613][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.469656][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 110.483221][ T797] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 110.555077][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 110.584518][ T3555] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 110.612132][ T5915] usb 5-1: USB disconnect, device number 7 [ 110.822797][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 110.837382][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.847633][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.883087][ T24] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 110.895362][ T5915] em28xx 5-1:0.89: Disconnecting em28xx [ 110.961063][ T10] usb 4-1: Product: syz [ 110.979702][ T10] usb 4-1: Manufacturer: syz [ 111.002290][ T797] em28xx 5-1:0.89: Registering snapshot button... [ 111.002717][ T6443] ================================================================== [ 111.016804][ T6443] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 111.024162][ T6443] Read of size 8 at addr ffff888032078748 by task v4l_id/6443 [ 111.031614][ T6443] [ 111.033922][ T6443] CPU: 0 UID: 0 PID: 6443 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 111.033933][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.033940][ T6443] Call Trace: [ 111.033946][ T6443] [ 111.033951][ T6443] dump_stack_lvl+0xe8/0x150 [ 111.033967][ T6443] print_report+0xba/0x230 [ 111.033978][ T6443] ? v4l2_fh_open+0xac/0x420 [ 111.033990][ T6443] kasan_report+0x117/0x150 [ 111.034002][ T6443] ? v4l2_fh_open+0xac/0x420 [ 111.034019][ T6443] v4l2_fh_open+0xac/0x420 [ 111.034034][ T6443] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.034052][ T6443] em28xx_v4l2_open+0x157/0x9a0 [ 111.034067][ T6443] ? do_raw_spin_lock+0x12b/0x2f0 [ 111.034078][ T6443] v4l2_open+0x1bf/0x3a0 [ 111.034096][ T6443] chrdev_open+0x4cd/0x5e0 [ 111.034107][ T6443] ? __pfx_chrdev_open+0x10/0x10 [ 111.034117][ T6443] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 111.034128][ T6443] ? __pfx_chrdev_open+0x10/0x10 [ 111.034137][ T6443] do_dentry_open+0x785/0x14e0 [ 111.034152][ T6443] vfs_open+0x3b/0x340 [ 111.034164][ T6443] ? path_openat+0x2df0/0x3860 [ 111.034174][ T6443] path_openat+0x2e08/0x3860 [ 111.034185][ T6443] ? __pfx_stack_trace_save+0x10/0x10 [ 111.034195][ T6443] ? stack_depot_save_flags+0x33/0x810 [ 111.034210][ T6443] ? __pfx_path_openat+0x10/0x10 [ 111.034218][ T6443] ? __x64_sys_openat+0x138/0x170 [ 111.034230][ T6443] ? do_syscall_64+0x14d/0xf80 [ 111.034239][ T6443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.034249][ T6443] ? __lock_acquire+0x6b5/0x2cf0 [ 111.034262][ T6443] do_file_open+0x23e/0x4a0 [ 111.034272][ T6443] ? __pfx_do_file_open+0x10/0x10 [ 111.034285][ T6443] ? _raw_spin_unlock+0x28/0x50 [ 111.034292][ T6443] ? alloc_fd+0x64b/0x6c0 [ 111.034306][ T6443] do_sys_openat2+0x113/0x200 [ 111.034318][ T6443] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.034331][ T6443] ? exc_page_fault+0x6a/0xc0 [ 111.034340][ T6443] ? do_user_addr_fault+0xc6f/0x1340 [ 111.034352][ T6443] __x64_sys_openat+0x138/0x170 [ 111.034366][ T6443] do_syscall_64+0x14d/0xf80 [ 111.034375][ T6443] ? trace_irq_disable+0x3b/0x150 [ 111.034388][ T6443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.034397][ T6443] ? clear_bhb_loop+0x40/0x90 [ 111.034406][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.034415][ T6443] RIP: 0033:0x7fd327aa7407 [ 111.034425][ T6443] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 111.034433][ T6443] RSP: 002b:00007fffe0af6240 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 111.034443][ T6443] RAX: ffffffffffffffda RBX: 00007fd328146880 RCX: 00007fd327aa7407 [ 111.034450][ T6443] RDX: 0000000000000000 RSI: 00007fffe0af7f1d RDI: ffffffffffffff9c [ 111.034456][ T6443] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 111.034461][ T6443] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 111.034466][ T6443] R13: 00007fffe0af6490 R14: 00007fd32824b000 R15: 0000558fb71de4d8 [ 111.034476][ T6443] [ 111.034479][ T6443] [ 111.328087][ T6443] Allocated by task 797: [ 111.332306][ T6443] kasan_save_track+0x3e/0x80 [ 111.336962][ T6443] __kasan_kmalloc+0x93/0xb0 [ 111.341529][ T6443] __kmalloc_cache_noprof+0x31c/0x660 [ 111.346879][ T6443] em28xx_v4l2_init+0x10b/0x2e70 [ 111.351812][ T6443] em28xx_init_extension+0x120/0x1c0 [ 111.357090][ T6443] process_scheduled_works+0xb6e/0x18c0 [ 111.362618][ T6443] worker_thread+0xa53/0xfc0 [ 111.367195][ T6443] kthread+0x388/0x470 [ 111.371240][ T6443] ret_from_fork+0x51e/0xb90 [ 111.375815][ T6443] ret_from_fork_asm+0x1a/0x30 [ 111.380567][ T6443] [ 111.382869][ T6443] Freed by task 797: [ 111.386737][ T6443] kasan_save_track+0x3e/0x80 [ 111.391404][ T6443] kasan_save_free_info+0x46/0x50 [ 111.396422][ T6443] __kasan_slab_free+0x5c/0x80 [ 111.401190][ T6443] kfree+0x1c1/0x630 [ 111.405078][ T6443] em28xx_v4l2_init+0x1683/0x2e70 [ 111.410102][ T6443] em28xx_init_extension+0x120/0x1c0 [ 111.415378][ T6443] process_scheduled_works+0xb6e/0x18c0 [ 111.420927][ T6443] worker_thread+0xa53/0xfc0 [ 111.425502][ T6443] kthread+0x388/0x470 [ 111.429547][ T6443] ret_from_fork+0x51e/0xb90 [ 111.434128][ T6443] ret_from_fork_asm+0x1a/0x30 [ 111.438897][ T6443] [ 111.441213][ T6443] The buggy address belongs to the object at ffff888032078000 [ 111.441213][ T6443] which belongs to the cache kmalloc-8k of size 8192 [ 111.455248][ T6443] The buggy address is located 1864 bytes inside of [ 111.455248][ T6443] freed 8192-byte region [ffff888032078000, ffff88803207a000) [ 111.469231][ T6443] [ 111.471540][ T6443] The buggy address belongs to the physical page: [ 111.477951][ T6443] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32078 [ 111.486707][ T6443] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 111.495193][ T6443] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 111.502739][ T6443] page_type: f5(slab) [ 111.506705][ T6443] raw: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 111.515270][ T6443] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 111.523920][ T6443] head: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 111.532568][ T6443] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 111.541215][ T6443] head: 00fff00000000003 ffffea0000c81e01 00000000ffffffff 00000000ffffffff [ 111.549863][ T6443] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 111.558508][ T6443] page dumped because: kasan: bad access detected [ 111.564910][ T6443] page_owner tracks the page as allocated [ 111.570639][ T6443] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15839348866, free_ts 0 [ 111.590328][ T6443] post_alloc_hook+0x231/0x280 [ 111.595085][ T6443] get_page_from_freelist+0x24dc/0x2580 [ 111.600637][ T6443] __alloc_frozen_pages_noprof+0x18d/0x380 [ 111.606433][ T6443] allocate_slab+0x77/0x660 [ 111.610920][ T6443] refill_objects+0x331/0x3c0 [ 111.615617][ T6443] __pcs_replace_empty_main+0x2e6/0x730 [ 111.621144][ T6443] __kmalloc_noprof+0x474/0x760 [ 111.625971][ T6443] ops_init+0x7b/0x5c0 [ 111.630016][ T6443] register_pernet_operations+0x343/0x830 [ 111.635738][ T6443] register_pernet_subsys+0x28/0x40 [ 111.640925][ T6443] xfrm6_tunnel_init+0xc7/0x1b0 [ 111.645771][ T6443] do_one_initcall+0x250/0x8d0 [ 111.650512][ T6443] do_initcall_level+0x104/0x190 [ 111.655425][ T6443] do_initcalls+0x59/0xa0 [ 111.659736][ T6443] kernel_init_freeable+0x2a6/0x3e0 [ 111.664910][ T6443] kernel_init+0x1d/0x1d0 [ 111.669216][ T6443] page_owner free stack trace missing [ 111.674598][ T6443] [ 111.676901][ T6443] Memory state around the buggy address: [ 111.682509][ T6443] ffff888032078600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.691864][ T6443] ffff888032078680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.700012][ T6443] >ffff888032078700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.708061][ T6443] ^ [ 111.714456][ T6443] ffff888032078780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.722495][ T6443] ffff888032078800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.730532][ T6443] ================================================================== [ 111.759824][ T3555] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 111.774470][ T797] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input26 [ 111.775354][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 111.791615][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 111.836794][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 111.842742][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 111.870664][ T797] em28xx 5-1:0.89: Remote control support is not available for this card. [ 111.930356][ T29] em28xx 3-1:0.89: Closing input extension [ 111.940837][ T29] em28xx 3-1:0.89: Deregistering snapshot button [ 111.964674][ T6443] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 111.971919][ T6443] CPU: 0 UID: 0 PID: 6443 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 111.980859][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.990916][ T6443] Call Trace: [ 111.994193][ T6443] [ 111.997116][ T6443] vpanic+0x56c/0xa60 [ 112.001093][ T6443] ? __pfx_vpanic+0x10/0x10 [ 112.005585][ T6443] panic+0xc5/0xd0 [ 112.009296][ T6443] ? __pfx_panic+0x10/0x10 [ 112.013708][ T6443] ? preempt_schedule_thunk+0x16/0x30 [ 112.019065][ T6443] ? preempt_schedule_thunk+0x16/0x30 [ 112.024421][ T6443] ? v4l2_fh_open+0xac/0x420 [ 112.028999][ T6443] check_panic_on_warn+0x89/0xb0 [ 112.033921][ T6443] ? v4l2_fh_open+0xac/0x420 [ 112.038493][ T6443] end_report+0x73/0x180 [ 112.042721][ T6443] ? v4l2_fh_open+0xac/0x420 [ 112.047297][ T6443] kasan_report+0x128/0x150 [ 112.051783][ T6443] ? v4l2_fh_open+0xac/0x420 [ 112.056368][ T6443] v4l2_fh_open+0xac/0x420 [ 112.060784][ T6443] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.066749][ T6443] em28xx_v4l2_open+0x157/0x9a0 [ 112.071583][ T6443] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.076592][ T6443] v4l2_open+0x1bf/0x3a0 [ 112.080824][ T6443] chrdev_open+0x4cd/0x5e0 [ 112.085225][ T6443] ? __pfx_chrdev_open+0x10/0x10 [ 112.090151][ T6443] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 112.096464][ T6443] ? __pfx_chrdev_open+0x10/0x10 [ 112.101390][ T6443] do_dentry_open+0x785/0x14e0 [ 112.106143][ T6443] vfs_open+0x3b/0x340 [ 112.110200][ T6443] ? path_openat+0x2df0/0x3860 [ 112.114953][ T6443] path_openat+0x2e08/0x3860 [ 112.119528][ T6443] ? __pfx_stack_trace_save+0x10/0x10 [ 112.124896][ T6443] ? stack_depot_save_flags+0x33/0x810 [ 112.130344][ T6443] ? __pfx_path_openat+0x10/0x10 [ 112.135266][ T6443] ? __x64_sys_openat+0x138/0x170 [ 112.140275][ T6443] ? do_syscall_64+0x14d/0xf80 [ 112.145108][ T6443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.151158][ T6443] ? __lock_acquire+0x6b5/0x2cf0 [ 112.156085][ T6443] do_file_open+0x23e/0x4a0 [ 112.160573][ T6443] ? __pfx_do_file_open+0x10/0x10 [ 112.165583][ T6443] ? _raw_spin_unlock+0x28/0x50 [ 112.170416][ T6443] ? alloc_fd+0x64b/0x6c0 [ 112.174736][ T6443] do_sys_openat2+0x113/0x200 [ 112.179401][ T6443] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.184587][ T6443] ? exc_page_fault+0x6a/0xc0 [ 112.189249][ T6443] ? do_user_addr_fault+0xc6f/0x1340 [ 112.194524][ T6443] __x64_sys_openat+0x138/0x170 [ 112.199371][ T6443] do_syscall_64+0x14d/0xf80 [ 112.203945][ T6443] ? trace_irq_disable+0x3b/0x150 [ 112.208964][ T6443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.215014][ T6443] ? clear_bhb_loop+0x40/0x90 [ 112.219676][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.225555][ T6443] RIP: 0033:0x7fd327aa7407 [ 112.229956][ T6443] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 112.249550][ T6443] RSP: 002b:00007fffe0af6240 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 112.257953][ T6443] RAX: ffffffffffffffda RBX: 00007fd328146880 RCX: 00007fd327aa7407 [ 112.265911][ T6443] RDX: 0000000000000000 RSI: 00007fffe0af7f1d RDI: ffffffffffffff9c [ 112.273868][ T6443] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 112.281907][ T6443] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 112.289869][ T6443] R13: 00007fffe0af6490 R14: 00007fd32824b000 R15: 0000558fb71de4d8 [ 112.297832][ T6443] [ 112.301111][ T6443] Kernel Offset: disabled [ 112.305419][ T6443] Rebooting in 86400 seconds..