last executing test programs: 6m45.746495055s ago: executing program 2 (id=419): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)="0200", 0x2}, {&(0x7f00000025c0)="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", 0xffe}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x19, 0x0, &(0x7f0000000000)="e300806700006c278b8717bd86dde148f0631b43d67983233d", 0x0, 0x402010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x50) r1 = fanotify_init(0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r1, 0x101, 0x8000011, r2, 0x0) preadv2(r2, 0x0, 0x0, 0x0, 0x97, 0x10) r3 = syz_io_uring_setup(0x691, &(0x7f0000000400)={0x0, 0x2007866, 0x3380, 0x4, 0x40024e, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x30a, &(0x7f0000000680)={0x0, 0x80334c, 0x400, 0x2, 0x3d3, 0x0, r3}, &(0x7f0000000240)=0x0, &(0x7f0000000300)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x20, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x40, 0x185100, 0x12345}) io_uring_enter(r3, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x85) 6m44.937570725s ago: executing program 2 (id=421): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 6m44.632764949s ago: executing program 2 (id=422): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="000000000021010028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="6224000af6530000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000080)={{@any, 0xda37}, 0x6, 0x7ff, 0x7, 0x8, 0x0, 0x1ff, 0x1, 0x8000000000000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ffd, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) getdents64(r3, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) socket$inet(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x9667}, 0x8) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r5, 0x0, 0x3, 0x0) 6m43.665486463s ago: executing program 2 (id=427): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x400000000000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 6m42.548903473s ago: executing program 2 (id=432): r0 = syz_open_procfs(0x0, &(0x7f00000036c0)='pagemap\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xc, 0x4, 0x7ffcfffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) open_by_handle_at(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="08000000000000000200000000000000"], 0x571102) memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000580)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 6m42.344519866s ago: executing program 2 (id=433): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="a1ab00000000020000003200000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x400, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x11, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x5, 0x0, 0x10000000000, 0x83, 0xffffffffffffffff, 0x0, 0x6}, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000002080045b9a6132a8d54e000002000200000002f907800000000e00000012001800b000c07bc6c5f62900980000021"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0xfffffffffffffe91, 0x5, 0x8, 0x5, 0xfffffffe, 0x7, 0x0, 0x3ff, 0x9, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r8, 0x200000000114, 0x271e, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) 6m41.299031023s ago: executing program 32 (id=433): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="a1ab00000000020000003200000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x400, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x11, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x5, 0x0, 0x10000000000, 0x83, 0xffffffffffffffff, 0x0, 0x6}, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000002080045b9a6132a8d54e000002000200000002f907800000000e00000012001800b000c07bc6c5f62900980000021"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0xfffffffffffffe91, 0x5, 0x8, 0x5, 0xfffffffe, 0x7, 0x0, 0x3ff, 0x9, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r8, 0x200000000114, 0x271e, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) 1m48.529049867s ago: executing program 5 (id=1396): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000f2441dc5ed"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd(0xa) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000100)=0xfff, 0x0, 0x4) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000000c0)={0x32}, 0x8) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) syz_usb_connect$midi(0x0, 0x3b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x1, 0xff, 0xc0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x5, [], [{{0x9, 0x5, 0x6, 0xefbaf08cc1bdf8f7, 0x400, 0x5, 0x7b, 0x2, {0xe, 0x25, 0x1, 0xa, "b431120e9918233ba121"}}}]}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 1m45.371023369s ago: executing program 5 (id=1405): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x20180, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fremovexattr(0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200000000000500040001000000050003"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x104) socket(0x6, 0xa, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x1, 0x6, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x1c}, 0x10) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a00010026bd700000001e670000000cc5436e59bbdacbe0f1595c91fee6d04d9e"], 0x1c}}, 0x0) 1m43.882219053s ago: executing program 5 (id=1411): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4c20, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x20000010304, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, {0x2, 0x4ea0, @private=0xa010101}}) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x6, 0x40) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x140980001, 0x0, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae", 0x40}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x2c}}, 0x20044000) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0xfec0ffffffffffff, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r7, 0x0, 0x0}, 0x20) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r8 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x8000000, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) 1m43.549520938s ago: executing program 5 (id=1412): syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x0, 0x84, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x71, 0xf2, {0x7, 0x25, 0x1, 0x4, 0x3, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0xcdd934d246555470, 0x0, 0x4, 0x2, {0x7, 0x25, 0x1, 0x4, 0x4, 0xff}}}}}}}}]}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a3000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 1m42.077052444s ago: executing program 5 (id=1417): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x5, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x48091}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003"], 0x50}}, 0x4008050) write$UHID_INPUT(r2, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000001440)={0x0, 0x7, 0x0, &(0x7f0000001040)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000001300)=[{}], 0x3, 0x0, &(0x7f0000001380)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000001400)=[{}]}) 1m41.719119627s ago: executing program 5 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) sendto$inet(r1, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000200)=0x6) read$dsp(r3, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) r4 = semget$private(0x0, 0x7, 0x85) semop(r4, &(0x7f0000000240)=[{0x1, 0xce92, 0x1000}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400080) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unshare(0x26020480) mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x2000, 0x4, 0x0) umount2(0x0, 0x3) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m26.173671693s ago: executing program 33 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) sendto$inet(r1, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000200)=0x6) read$dsp(r3, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) r4 = semget$private(0x0, 0x7, 0x85) semop(r4, &(0x7f0000000240)=[{0x1, 0xce92, 0x1000}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400080) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unshare(0x26020480) mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x2000, 0x4, 0x0) umount2(0x0, 0x3) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 57.008594689s ago: executing program 4 (id=1558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) r3 = epoll_create(0x401) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f00000000c0)=0x8) r5 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000004c0)={0x4}) socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00', &(0x7f0000000080)=@ethtool_gfeatures}) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x2, 0x16, 0x0, r7}, &(0x7f0000000080), &(0x7f0000000000)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000040)={0xc, r9}) ioctl$XFS_IOC_ERROR_CLEARALL(r8, 0x40085875) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x10) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 56.836483209s ago: executing program 4 (id=1559): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000000140)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x6}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000140), 0x0, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000140), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000100)={0x0, 0x34524742, 0x500, 0x3c0, 0x0, @discrete={0x1ff, 0xf}}) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000100)={0x0, 0x34524742, 0x500, 0x3c0, 0x0, @discrete={0x1ff, 0xf}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x91) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) (async) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) madvise(&(0x7f0000106000/0x3000)=nil, 0x3000, 0xd) mmap$IORING_OFF_SQES(&(0x7f0000a0b000/0x4000)=nil, 0x4000, 0x5, 0x10010, r4, 0x10000000) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000a0b000/0x4000)=nil, 0x4000, 0x5, 0x10010, r4, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001a00010028bd700000008000022010000000000700100000080003", @ANYRES32], 0x34}}, 0xea5bc50b619dd77e) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) (async) r9 = fsmount(r7, 0x0, 0x0) syz_clone3(&(0x7f0000001000)={0x321a08000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000041424002bbd7000ffdbdf2508000100010000000800010002000000080001000200000008000100010010000800210002"], 0x38}, 0x1, 0x0, 0x0, 0x40041}, 0x4e70955f5338ef5f) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}) 56.630331525s ago: executing program 4 (id=1561): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="080005020000", &(0x7f0000001200)=""/4115, 0x0, 0x10, 0x1, 0x0}) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) socket(0x2b, 0x80801, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x1, 0x7, 0x80000001, 0x37f, 0xfffffffffffffe00, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x48850, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) (async) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f0000000040)=[{0x0, 0x7}], 0x1, 0x0) semop(r6, &(0x7f00000000c0)=[{0x0, 0x0, 0x800}], 0x1) (async) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r8 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000140)={0x2, 0x0, 0x0, r8}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r10 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000080)={0x10000000}) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) tkill(r11, 0x1f) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) socket(0x1, 0x5, 0xfffffffd) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x703d2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x12021}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x48}}, 0x8001002) 56.306302195s ago: executing program 4 (id=1564): sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x4080) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x6, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private2, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28000000000000002900000002000000", @ANYRESOCT], 0x28}}], 0x1, 0x4040004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x4000011) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 55.278957367s ago: executing program 4 (id=1571): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x1, 0x41, 0x9}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x20034e8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x7d94481) 55.020805799s ago: executing program 4 (id=1575): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f00000005c0)={0x0, 0x53, 0x0}, 0x2400c014) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x23c}, 0x1, 0x0, 0x0, 0x8000}, 0x8991) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0xfffe, 0x0, 0x0, 0x2}, {}, {0x7f}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d3, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000400)={0xfff, 0xffffe0f7}) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000440)={0x5, r7}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r8], 0x0) 54.702356822s ago: executing program 34 (id=1575): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f00000005c0)={0x0, 0x53, 0x0}, 0x2400c014) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x23c}, 0x1, 0x0, 0x0, 0x8000}, 0x8991) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0xfffe, 0x0, 0x0, 0x2}, {}, {0x7f}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d3, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000400)={0xfff, 0xffffe0f7}) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000440)={0x5, r7}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r8], 0x0) 12.524502492s ago: executing program 6 (id=1728): socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r4 = gettid() prctl$PR_MCE_KILL(0x29, 0x1, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000003b00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r4, @ANYBLOB="0800ed00", @ANYRES32=0x0, @ANYBLOB="5fd86d79d8bb59b939489bbf0f90cc99511bb6ad736ee47ea480d71c82d02cbdd54d2b807a57e1a66aa1fc19392875e803336d603e8a5c1ed8e540302aebeea4514a3821d5600aba65dae1dc9fba2267bbb353c184e5027ac96fd802b58e033be7e421eeccd723daa0fe03c49d327971"], 0x10f0}, {&(0x7f0000002300)={0xfc, 0x2b, 0x200, 0x70bd25, 0x25dfdbfd, "", [@generic="c5739c8ce7947d98111cf557716e27808c7180db82dbfb7c4f36ad54bbc1440b215fca887b69baad43c037ecd5e984d8f6e564410b89e287e508ba889d51c257eb1e7fb0c70445caa0b867c22c472b52b0facdffe6e157e071fdc7ac3d3cb06c87d511ed93f989f5a09a418afc749a650b549cced4671f8fdf1220387cfdd44cfede717dd67c4499177e949d50860f450586c798c574441ce2c868b7c3779bf9e60710167f66bc752a3b47371754ac475fe2f6523d5ae693c348a03df4", @nested={0x20, 0x7b, 0x0, 0x1, [@typed={0x8, 0xb9, 0x0, 0x0, @pid=r4}, @typed={0x9, 0xe1, 0x0, 0x0, @str='&$&\'\x00'}, @nested={0x4, 0xf6}, @nested={0x4, 0x46}]}, @nested={0xc, 0xf4, 0x0, 0x1, [@nested={0x4, 0xe1}, @nested={0x4, 0xb3}]}]}, 0xfc}, {&(0x7f0000002400)={0x1034, 0x19, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@generic="c7cfd86eb65910c87528c79e22fd4f0bc327412b985ead479b078a7e344a91dcfd4e7d7a6926d296f96fe15bbe158ec9acde5c0ab7b70c0c68a5bd62ee7364c555f36b428b55411a0d1818ebdc41f9e61af45a1381c4dcaf3b4f76d265f458f7cb5783ad81b60f545d5847870bc13f0a3ec974f3e56cbdf60965b7467b0f42e015d4e69dd9df944ad71c1e4ee017fde64f7ffe543870400d6ad43912c28a3d0cfe51fce19f577761716b11341086037f155a2cf67ed3604533adfa70118b12f28f41cb310aab120aa7aa546a7e8786ad20c04a2c24cbfce201de68b0169b19291c87", @nested={0xf3e, 0x6a, 0x0, 0x1, [@generic="19104f9a78416a1bf85b8f5156e1a018af6bc472ad7049b959b157ccec6d342d5648aa5b4ab1d55ffe237c82606709716a8db0bc95520cf008d3f36068b82387c2628f89044baeb79fb4f77fad806c79e72c8f230ffd81adc4d068e9a919c614bf23f35123e335b217d4c456278dae81bb2ce1ed0d0aba7d497cd97246ff5a634c67255714a146ef677e90c484", @generic="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", @generic="01106573cbb0720498927aa8310552fe7c753d2ea7988aae6763e7e29fd5fa061ea122534b86b6f1afb43137c44695febcff1c2820ef2aa22d411afb6a17b2b95a489eb9fba0bc41f713eb5b9ff7c7671e7ab1cb0490073ecb6436b2b09003797ca190f93434d57f50679e06536b3a01fbd722d0f1844244a60e20c4a8998309bcd3fc896043cf57967ede99cb371d23116c355bf82e668796a8cf1508c8842c621c1a381139186a77976b8dcdeb", @generic="83d2b2024700ed22f9b9876339171febfe48871904cf376e99f2eb8b2b72182dd086e5d69a5361929fcd564474c3427b14", @typed={0x8, 0xfb, 0x0, 0x0, @ipv4=@multicast2}, @generic="a183096f747dc915e858d6d32d09c53a41b5bb911e415a0daba9d7373d9775967543f84d9bd814d7d7e8fed49544a2ff0074e58406a08b1a587a225d8d0a93e931c7c9181804c0cda40d0721f994aa0e3b599d4d967d986790e81bbe8356d99550802e24bb453bc851e9dfc1797164e76746dddcbbb812c08a3899ff2265aa0b5924f5eec9c7ba340e9cea21ba", @nested={0x4, 0x51}, @generic="067a05b078b58bb383d4a95e20dcba6b159a204ef9ac2d17c6f5a54122f3160b0f12cffe01d7fd460d0d2d6d0ad7f3f6b2be91f6f25c65543b9d69e2ca77ba2fd56b188b6701a5aec37b6ac2e1fdebde1ff8a7d9084b797b5dab5a90d0bb1259"]}]}, 0x1034}, {&(0x7f0000003800)=ANY=[@ANYBLOB="cc0000001f00000425bd7000fbdbdf25a80035800400378089d7007a6ac545d59b9917d6e1563759a3babe6c6f7e73cc4912ad902ff0c49edd0500212c6660dc6a6282d0fe2d3e2f5dcb61c3d5d19b2f564f57eaa1f8bbca5537b29a7c21b6f7c8c235e04a22075e3d2c2757277d47966d65cb31669e2617027abf8c045c72598dcae927eda0b1e3b79ab4e95cce51a386eca3f64a946f0400f480040049800400808004003b800842a1ea0fbdc775e7743a34b29324f9806bb1c5b0625d163e690000000000"], 0xcc}, {&(0x7f0000000100)={0x10, 0x36, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x10}, {&(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x1ec}], 0x6, &(0x7f0000004d80)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}], 0x38, 0x4008800}, 0x40c04) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f00000000c0)) lseek(r5, 0x1000000, 0x0) socket$kcm(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000040)={0x54, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x973c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) 11.417769577s ago: executing program 7 (id=1730): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x400000b7}]}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x40004) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010007, 0x0, 0x2000000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 9.376667632s ago: executing program 1 (id=1734): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/exec\x00') (async) exit(0x5ee) preadv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x6, 0x9) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) r5 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) mkdirat(r6, &(0x7f0000000080)='./file0\x00', 0x1a0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xc, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 9.078656841s ago: executing program 1 (id=1735): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xe, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x26, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="ea3ac901f6d126b99bbfedb478f27d7b3cc681db4c01ab1b16ce5096918583341c9b17798a90e4731340fc", @ANYRES64=0x0, @ANYBLOB="e9080f466700006faf135500060000a84ae8c6bda106005d6e"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x408d5) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_bridge\x00', &(0x7f0000000180)=@ethtool_channels={0x1, 0x580, 0x7, 0x2e7, 0x47b4, 0x6, 0x1, 0x3, 0x4}}) 7.81284602s ago: executing program 6 (id=1737): msgget$private(0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) sched_setattr(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x42000, 0x10) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x80001, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000c091}, 0x50) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x74, 0x0, 0xfffffffffffffffc) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 7.757550777s ago: executing program 1 (id=1738): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8]}}) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0x38}, {0x0}], 0x2}, 0x881) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00000000000000ffffffffffffefff00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 7.727415323s ago: executing program 7 (id=1739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) unshare(0xa000200) r3 = semget$private(0x0, 0x3, 0x0) semtimedop(r3, &(0x7f0000000340)=[{0x0, 0x2, 0x1800}, {0x2, 0x89, 0x800}], 0x2, 0x0) unshare(0x20060400) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) 7.083336032s ago: executing program 1 (id=1743): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}, @TCA_FQ_CODEL_FLOWS={0x63, 0x5, 0x1}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8001}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400}, 0x10) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040190401000000000000010902240001000000fa29cac7875c7a9da0a02dc701000000000000000000"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c80000000102050000000000000000000a0000005c0001802c00018014000300fe80000000000000000000000000003b14000400ff0200000000000000000000000000012c00018014000300fc01000000000000000000000000000014000400fe8000000000000000000000000000000800094000000005500001800c000280050001003a00000006000340000300000c00028005000100840000002c000a114d54cc86407b3500dffe0180c4ff0300fe88000000000000000000000000010114000400fe800000"], 0xc8}, 0x1, 0x0, 0x0, 0x10008040}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000500)=@multiplanar_overlay={0x6, 0x8, 0x4, 0x4, 0xfffffffa, {}, {0x3, 0x1, 0x5, 0x3, 0xd5, 0xde, "ef8ef56d"}, 0x3c, 0x3, {0x0}, 0x7ff}) 6.798747581s ago: executing program 0 (id=1744): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5.617369517s ago: executing program 3 (id=1745): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r1 = io_uring_setup(0x7ec2, &(0x7f0000000440)={0x0, 0xeb80, 0x0, 0x3, 0x2b8}) io_uring_enter(r1, 0x28e6, 0xc56a, 0x48, &(0x7f00000004c0)={[0x100]}, 0x8) (async) io_uring_enter(r1, 0x28e6, 0xc56a, 0x48, &(0x7f00000004c0)={[0x100]}, 0x8) syz_usb_connect$uac2(0x1, 0xf6, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000408c0d030140000103010902e4000301800002080b0100010220a309040000000101200009240103000b3d003c0d24070204000300000200020007240c070803150d240b780871367375e614cf8a13240d040000010000000000000300020003ffffffffffffff7f200009040101010102200006240201038406240201048011240202ff7f09008093fc9090182bba9b01000000000000000000030900000003102401060900050200000505000000080a240202ff000300fa06090501090800ff02070825018300f8ff0904020000010220000904020101010220000905820900040004f5082501022b570600212b07a339028b782917ed236252398c85d02a2e1cc3d077df6d39aa9ae809f312ca528fc99a57894ef8809411313c30ea685b8c8ab7bf147aa93d72590c38d60246f2d036cffa2456e7f766368f44df180f6f2782300d6fe765a7c96bb0f44128fa2bf2c10680a57b82aa7195d7c0f592ce4c000b4be6a00f8f767143b08b949f5e029642b22a8f469e237228973984a2843a98eb4afe0f2e1882db15a542f3dee0a2676f53b2c6ed4d1c9beeb948049930e13c6d6f84532428ffa334c9cf82b700"], &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xf8, 0xfa, 0xa, 0x10, 0x81}, 0xaa, &(0x7f00000001c0)={0x5, 0xf, 0xaa, 0x4, [@generic={0x77, 0x10, 0x4, "34c0b596cbbe4f4d6740def2776d0bad6590ac3fbf5d289456d19950111c1601f68b528b20b2e86e6c734ce7ec9ef6b2f7a940f43c1380eb2d985fb810e575788b3002464e40b3ab65098e89ce10bf7e984839ce0b5b67afb11f9707b0ee29add0e0817092753ac18930b985e900e3a5c6e9cea0"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x3a2, 0xf0f, 0x3, [0x7272336781170fd2, 0xc0, 0xc000, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6b, 0x3, 0x0, 0x0, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x5, 0x8}]}, 0x2, [{0x4e, &(0x7f0000000080)=@string={0x4e, 0x3, "c6e0dce1377f55dd3ba58cb5ddcc79542beb4d6324aaea37b018ec0f40c8c0957f14830626a22f3f7b7e3c227a2aae642b7338649a1eab0e054001f5cf910757b4d94ad144c391c32ae09c98"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xa8f1}}]}) r2 = socket$inet(0x2, 0x6, 0x0) r3 = socket$kcm(0x29, 0x7, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)='pimreg0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)='pimreg0\x00', 0x10) getsockopt$inet_opts(r2, 0x0, 0x19, &(0x7f0000000180)=""/3, &(0x7f0000000400)=0x3) syz_emit_ethernet(0x7c, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd600406ee00462f00fe800000000000000000000000000021ff020000000000000000000000000001042065580000000000000000100000000100000000000000080022eb00000000200080100200000000000008000100000800655800"/124], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.330433753s ago: executing program 0 (id=1746): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6ec0, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0xd7) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2a, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r8 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) 5.330122903s ago: executing program 3 (id=1747): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000580)={0xef0, "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"}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x40, 0x8, 0x1, "d4"}, 0x0, 0x0, 0x0, 0x0}) 4.555592014s ago: executing program 6 (id=1748): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000140)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x60}, {&(0x7f0000000000)="f966", 0x2}], 0x3}}], 0x1, 0x20040845) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56041, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0x10, 0xf}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0xfffffffffffffece}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=@newqdisc={0x64, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x2c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xfffffffffffffffb}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0x3}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) close_range(r2, 0xffffffffffffffff, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000300), &(0x7f0000000600)) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 4.459920467s ago: executing program 7 (id=1749): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x16, 0xffe0}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x100007, 0x81, 0x2, 0xb, 0x12, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x150}}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, 0x0) r5 = syz_usb_connect(0x0, 0x12, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r6, 0x0, 0x17, 0x0, &(0x7f0000003680)) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x10) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, &(0x7f0000000240)=ANY=[]) close(r8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) 4.265277812s ago: executing program 0 (id=1750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_VM_TYPES(r1, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0xad, 0x1, 0xc, 0x0, 0xafa, 0x8, 0x8, 0x7, 0x8, 0x5, 0x2, 0x0, 0x0, 0x3, 0x3ff, 0x4, 0x37, 0x3b, 0x0, '\x00', 0x0, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xfe, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0xc, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x5}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0xa, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x8, 0x23, 0xf3, '\x00', 0x40}, {0x7, 0x6, 0x4}]}}) 4.264390165s ago: executing program 6 (id=1751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xc, 0x84, 0x2, 0xfffd, 0x7, 0x9, 0x4, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x6, 0x6, 0x9, 0x500000}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000400)={0x9, &(0x7f0000000380)=[{0x5, 0xd, 0x9, 0x9}, {0x22, 0x5, 0x9, 0xffffffff}, {0x9, 0x8, 0x5, 0x3}, {0x7, 0x6, 0x5, 0x7}, {0x4, 0x41, 0xbe, 0xf}, {0xa, 0x4, 0x21, 0x8}, {0x2, 0x0, 0x3, 0x5}, {0xa5b, 0x46, 0xff, 0x82}, {0xfff8, 0x5, 0xb3, 0x9}]}) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x5c, r6, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6f18}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) 3.946510995s ago: executing program 6 (id=1752): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a20000000000a01030000000000000000010000060900010073797a300000000040000000030a01020000000000000000011300000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048044000180090001007866726d000000003400028008000240000000050500030001000000080001400000000d080004"], 0xf8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000380), 0x3, 0x2) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0x40}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, r8, 0x1000) r9 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87ac3ae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) recvmmsg(r9, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 3.842441534s ago: executing program 0 (id=1753): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) dup2(r1, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffdad, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {0x1, 0x10}, {0x7, 0xffff}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2], 0x48) r7 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x8985, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060709050ae5"], 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0xa3d, 0x0, 0x44b1fe34c95a035b, 0x0, 0xffffffffffffffd6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@gettaction={0xec, 0x32, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x25, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r12, r10, &(0x7f00000000c0)=0x8b, 0x100000500) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="741000002100100027bd7000fddbdf2500000000000000000000ffffac1e0001fe8000000000000000000000000000bb4e2100004e200000", @ANYRES32=r13, @ANYRES32=r14, @ANYRESOCT=r6], 0x1074}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) 3.580569987s ago: executing program 1 (id=1754): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xd, 0x10, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_usb_connect(0x3, 0x73, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x84, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4b, 0x6, "1d73dab073110756e3ee47f65f486559fe514159cdd3a39dee48020aaba13a6cae0a13b925e9ea27a731046f20d48f1297bc406ce2a83e5c640fd4e88a7d8f95e9386ba6aec1fe"}]}, @NFT_MSG_DELSETELEM={0x43d4, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x439c, 0x3, 0x0, 0x1, [{0x41c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x100, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x26}]}}}, {0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x22c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x95, 0x1, "99ebf154850382f93bb5e1acab494a2b2d3f6e50211f41082e1341f96b4f5a5bcdbc40f395e6ad83cbd923963bfd845522d390d9d895fb7af688b7a1bf6073e28b6f3cf7c630b103a02e5a527cc3230ca085f3b771cd7cdf094b167a92a1a810b0a3ef64080d229dd98df8c84620d276ef9e0d0501263b60108cdcf84209cbebc67d9176cbd47ca10fa9807c31f8f001f5"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "470995a976b3ec10895054e0cf67f2a4167678359029a3177168a779d131a693e0e279865f0590c066beef2bb2ead9b7fb7d7dceba3f40e4f958173f22"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x23, 0x1, "22f5328c7b9db99a12a176b25954e7daae2f1610c321b58fa75a9dd085262c"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_USERDATA={0xaa, 0x6, 0x1, 0x0, "259dd6a1849aa5cfe9b06ab8f0a3a9c233d0802bbd65a08d9e83418ed64bdccf0c005bfb25ab0ec666c4ae20cd21901cd40a9dfee6c0b6a96dfc5b764dd332d9bf99fd63877ab74971fcc4214b4c815d28546f7494daf9df54529cb7b5a6c223135afe83745c39292bafd136e2ae223c7cb980b183dd9f998177a475bbd79a2b4ace08e445775f509b501c59636b0202116f3226dbe37e4a915e3af78a62d7f60301fd6c14f7"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, {0x24d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x314, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xab, 0x1, "a76c10adb37176c95dbce4aa566b725488fe3aa0bba91c7979d3e70062cee3decd2466a42a21a6542d0d2b5bd80570846f0b79dd8f9d695a77e5e58a1e9ebdc4aadba3abd606df758c63fbfa6e9488b062f7f691e2419c4703bebfce3bddc5e8c074ec2abb8d06ef36453653a40c523c9b6428e6119e251e827656a98a9b6f2f58d7e4bc603c64c247c031d1689d8f18af2c2ea47529cd3118aca9f4e4092ca9037437616cc279"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffb}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "30e8741fe39f537f627c9d252cce98342c42aa1762267d49156c778ae47ba1732fc76cb2112494df2819d542c306bf16eed5f5974bf9d06545db6d748a0a175420d5f8700f35828fbcf1b550fcc2939a2b17abfa9bd74583e054e08f24d2009c0d2d5f1db340fc811294b833dd97212ec8c4a49987f0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x3d, 0x1, "45d0dc728a8b49ecce7b3763da939c6d0f446d92ce3114ad0ebfeff785c4f00988a4291f4628d28728a15cc32df127444ff4d5d191d0630d5d"}, @NFTA_DATA_VALUE={0x2e, 0x1, "130b27dce2a11fa8c3d3acc81bc59a4c51ef03d2c85ffb1ccb3f605303e32d21df4361cd2da30183bb0e"}, @NFTA_DATA_VALUE={0x53, 0x1, "f8089e60705fbefc499079f68a3d29788d154e5e753dc7cc399178470b558273ebd04c08b1177ebea1e50eed88543f186d74f6f972c7a6fa8a11f45318a0037d0f4cf0c85f9ccf67940a80ae15eefc"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000003}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x2158, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xba, 0x1, "60bc842f52020229bdb324798f22673f432ff696d984f5c64561d1cad3e3d5ea2260cfebdf8b6aecdeb0edda6dba6bcfbe23ac43ad0967b315499ebcba274ed817627f53202e37c52a56409c89b6b9432f34c9970866dd8de52fd2a283b2dcb8fd857a6a782538358d185a2a21460664cb7818912a9ff894051e7c6835bd5047cbaa3232d2d38470a6b30eb45f3c655b5077fa12274fac70a207d70ca270ea0ff1c900cfc61bbdb5611ec01ca078c849ade303c3ecc5"}, @NFTA_DATA_VALUE={0x36, 0x1, "c14d393f7b97755e83adf129485596248ccb52e741f7b82d20d039a96eaf00a85236d70cd2e3900cd8f6e26f0cd7df576dec"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb, 0x1, "5e7daee5b601f2"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xf8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_USERDATA={0x23, 0x6, 0x1, 0x0, "99aead62c16678eaccd40c5ae16e4d8ca86480db502c96791a193d3e369add"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x33c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xbc, 0x6, 0x1, 0x0, "9cf43146285d866729fe27b3d66c1d2f9ac13024421e2e35106920a71644696cca690d8a717851e432f769b27033da6d9d1995bce9153f720b66880013ed8c621286f0794952c79c0e87f55fc037612f6a4f4ba6edc5cb1a4ecd142602b39c9b9473e804e687218b7baea1af914effabf4ab535a31d9da6ff8fcfef79bbc29682948c73c0e0e1ca92795e69b8e88d33469dc3cf65630d435d2cac7915582b0133bd30093f15e7917708252980c9f0f830f96bb105deb08e1"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x214, 0xb, 0x0, 0x1, [{0x17c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x16c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0x84, 0x3, "13caf6b65d17ca188ee2de5a54044caa1c0a33dcc68ab68caeeb88d1ab12a1e214e061069f89093c3d7c8864446a11f38edbe37c835515998b2be0b95b94e7c8c25ca807cb826e273701d5fec7f60346e1b1d3dbe056f81c37c6e7fbd253c2ac294124b27ab1781a08928924d6c7bdfb0db8f2cb5e2437093b3d6883fc99391a"}, @NFTA_MATCH_NAME={0xb, 0x1, 'string\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xa, 0x1, 'realm\x00'}, @NFTA_MATCH_INFO={0x92, 0x3, "000136a18c4881080f180a9d5ed433fa268daa8232a7135390772a72ce1df4b323ede6004203fa65ce9e288ad6b78c5381f575e9cfafeb349b908d0faba45d92d1beec225109d3663723bd67adee3542c8317b757531ecdce45913fdf6bc7454f547744f10854d812422489652be506415a188c20b698e3ec7c2c5ca47ea3676cc82eb9e461473dbc73d2eb68bbf"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x54, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6b}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x31}]}}}, @NFTA_SET_ELEM_USERDATA={0x3c, 0x6, 0x1, 0x0, "ac38a6db274ec43fa7e832922b4a3813cda65a0eccfb3ffa31694cd2b2463be258127fbe88ab49ab04b7a376af95ae09f748558838d3c928"}]}, {0x12a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x5c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "c1d4ffb33c82a32aac706dc035639f29c4d2d89166fa5dc4a44fbb5b7fb2035f79218823348ea1d3d763fb8c6a4a4f083f2bd992f7fe077eeecf4e21a5b02768eb3a7e5ba3f837e6eb8c2d10079f6916b925"}]}, @NFTA_SET_ELEM_DATA={0x1234, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "489ac9c5731c4ca3e36fb0f1aadbcc4e2d3019ab54b3f8460e741aeed1d3ec379955863c193b971568aeee495e42e14724505024c6262ed1da413601a9b32ba14f4c972f26dddfbb59404e0768d56e15686b115fcc0a143845e6486603784aace2f1ba69285b742048f11a19819ac900b05b9a6fa059f1224b1a998f07483e674ba8acf8e7650a594208a9ab48556d95429e73d1874b6bcf2a03e3d40ecc9f54807ead4772ae86900a3759cf0d70a153339ad67b20ad421f4b5e767a7cb45784b981ca3423e84a4a5057ab14c5e467a5ea925b15b983358cbb90ccda1a62"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x4cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xf0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe6, 0x1, "2be1c1f94fd57e826c39eedd30c5884406d2d603a243eeb7843be9209b7e2dbb4b55dc8315f6e010d0d7921e8fb213e7ac560a5b74e67a8f3227b5635b9493f2549bcb6818cbd02c306366aa99100e630f97f66f079db9f54e9bdf25b4ac1d0050841a9f2153c16428216230e9e9fa4ac0246758d3f68e9f2d707ee804cc968740fd4892807a625666089e844c65d55dc712097d45eb132d0c42522a56bda082a9ea9fa4966e6f8b1ad83573db3de0bcdc3d320ac99453622c1c6cf65fc82b1b3467f1d56d846e8d5f2653a42ba8023cba8ff223dca924c9620396c495c3136a0162"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c8, 0xb, 0x0, 0x1, [{0x398, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x384, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x268, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa3, 0x1, "81de06cc5b613099cf2ca6e7f739fbb26d6f17018cad3e26a9f68fbaf75677ed1f54b27d49a8c21a66206666570c6fe4d72cc966b1e4d2d541ca98ce708950c506cec505c5e44b9b08356fbb8a3f715793758c5e6e9d4c05065731bc008cb8e31ea93b7b9099ac86f390e9a040a2227b150ebebb7cbc19726e4217319a907ad7c21780a1df829599a31851ade4e36dafb69ed7939f90977851f120873e0b13"}, @NFTA_DATA_VALUE={0xb, 0x1, "ea82f7843e28d0"}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VALUE={0xa3, 0x1, "e0f1ff21f71d1e6385cebecc1b005f148c5750c2626503a9a80240482391220e4407f5a0399e54de80400261bb60adc970d41aa1892f3063d57f1d3d0893d6fed967b0f3452e38bda9f7e8fc70623892ac32e03af5a89ae43874a254c16c12197476d982f5b3d9423acba016c429b09da84d8eda8d08cffb8981919081c1969978db2a556c3762abae1797e5251acf7c0134a097511da551634bf7f9b0fe82"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_IMMEDIATE_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x66, 0x1, "56c2d9c2d87085906744e127847925d382e9c237bf41de9adc7d8798bd7986fb9968f4fdf57d806a19c0e90313b8a7e820474e1e81c28d36dfdaf45bf14542c2c53a29c83b43d22c08a4fa0f7d59f55ea6d8c30dd4e1c7c8f5e90b00d4f0c11bd3e0"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x42, 0x1, "ede77773ce265ec5ceb9bd175d20a6197a2ca7308c40ef4e95781067404998c5756958308c09bad967007e6ad847c75d786d5ef3aa32d4162150abe53ee5"}]}]}}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x10}]}}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x1c4, 0x6, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4305}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_RULE_EXPRESSIONS={0x9c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xb3, 0x7, 0x1, 0x0, "a585985e05e1d288ffc1d17772c35353e010bfd4d360807ccfe777c6059f32feb6a75baf09482bbd6bf9a4717728815ab1a4a0dac2bca419ee07f7d6d7e9385d6338df8a1295acec99b3029305a4b93860cc98bb0a94e341f1888d98e09505fff2701544f812871f625f13dfdb43719889f54fe817375e13926825301d40225241753177f232a3da4dd8f06b42068ef6dd215b9fd43f2fe91061f8ceed3af4103f385da2d48c6bedc80dbb48b1578a"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x5c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x44, 0x8, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x4798}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/28], 0x50) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f0000000200)={0xb9, 0x9}) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1ce}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r9 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r9, 0x0, r10, 0x0, 0xf3e, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r12, &(0x7f0000000040), 0x8) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.280164148s ago: executing program 3 (id=1755): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x42000, 0x10) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x80001, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x62, 0x5, 0x3f0, 0x248, 0xa8, 0xffffffff, 0x248, 0x150, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @local, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @multicast1, @rand_addr=0x64010101, @gre_key, @icmp_id}}}}, {{@ip={@multicast2, @loopback, 0xffffffff, 0xffffffff, 'veth1_to_bridge\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x6c, 0x2}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @rand_addr=0x64010100, @loopback, @gre_key=0x2, @gre_key=0x7}}}}, {{@ip={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 'lo\x00', 'wg1\x00', {0xff}, {}, 0xaa, 0x2, 0x169ed6ff8f602177}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x2, 0x1, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv4=@rand_addr=0x64010101, @ipv4=@loopback, @icmp_id=0x65, @gre_key=0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c091}, 0x50) 2.665697012s ago: executing program 3 (id=1756): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x641, 0x4800003e, r7, 0x0) fanotify_mark(r8, 0x2d, 0x8001801, r6, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdff, {0x0, 0x0, 0x0, r5, {0x5, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020084) 1.570271584s ago: executing program 0 (id=1757): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xf, 0x4, 0xff, 0xe}, {0xfffb, 0x1, 0x7, 0x10000}]}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="61b5961ac5dea8fbf38bc45111021fe41a8df1e81ff5b8e88167c9fd97c8fd6bdcd2ffdc5bdbe5e81ee480", 0x2b) (async) r2 = fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = dup2(r0, r0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000100)) (async) r4 = syz_io_uring_setup(0x3b59, &(0x7f0000000140)={0x0, 0xc6d2, 0x800, 0x1, 0x246, 0x0, r3}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_setup(0x3708, &(0x7f0000000240)={0x0, 0x7601, 0x400, 0x2, 0x24b, 0x0, r4}) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="80f169048c9b4afc95c0de5dd0ba0da59dfe91360ceda7edf165cecc96251e90c68abc981bfd14fb1c4da0d37d73a4827a5612ffc897e04b9f0d956248acc7e6fb152b2c82297a5318455753c30bc69e36cecdd898dfcfaadb547196d977010b3a76fe3992a0e7661df70d34aa6541132f41d30e76d0fa6d36cda120a5c8cd5cf73a2940f22df17f607285e51ab7acaaeac89081a38e43654cb795f20080066d3fe9914ff2c16f51aaac28015b55aefff382835fb80b7f9ae6651601d1a1918a00351e9da18bdf1e49563ff7526bad41175ced022fa318cdb5fdb90a995a2415", 0xe0}, {&(0x7f00000013c0)="f3f1bfc9edfc56745847cbcc07758ba242d79bccabf9ecb6e72a7e895c27b09ae031c1c54eee2760e81cfb0bb5abb73033b62dfcd320b097bbb6091f52de8c0bbe41578211cf3147fd6aa3c9660b89ed44a5e26973a5666720f8ec257c0cee17a102dfe5b6d3c53c99fc88b26262ca115618f013ac38014350439910135b43158a", 0x81}, {&(0x7f0000001480)="9e959fd75672840365dd43fd36a9c5cb5afb1dbf39ee336e7a638c1555fdbbd3119f2c6ee1a1f8cd8178979da74000502959fbdef5b80079c7b84008266fda3a3febfa74b48a3d3889966ed4405cc560bcbbb62c4d90558f54b0b32724af2f", 0x5f}, {&(0x7f0000001500)="cf858f4bf0434fce99f79745465ff4ed71f1332cf84089de81", 0x19}, {&(0x7f0000001540)="4c33e7933b2be873beb963694851c9b55779ffa67c973a27b693e76180e1062c6c8a845f576bbca62fac4bb45c20f961630040f2657c8f155c99883858332083ecca9724fd8b0d1ab6f37d608e2f529857cd1419e3b918b3fbf6ea8016a359ede5dad9a6781c2b9fd911f4f82e87c6d6285e53fb563c598613693354cccf9df162eda96d165f130b503ead11ed792178c6ab5104646c6d7c9115caef9adb1834bdc1e7a79bf13dac93b6e9d0758bddecde07731f348fb68d", 0xb8}, {&(0x7f0000001600)="96a4c41fd0ba54686fb14fa2017e9eb0968519a1063e8516945c914e2b8b48720094a867e0432b7db4c9ebd6b2d268be9584c19df5a99d7813baf02a57184c3b89f8daeac536c5bf6772570cebd9a22b516f03681bfcb17f9f292e2b697a2cf94dfb98448a25a823acce7ef28fd6b68769e5df9a11ab0671e975593c5d38baac81d2f9c28540824a97315dcefac29eb1e4265a62c49cba7f95de0824673fccb821e28221116144c96b8d3b01e47f026c7523587af5b990d3c55d6046aa283539a5930fb8889c774c7b", 0xc9}, {&(0x7f0000001700)}], 0x8, &(0x7f00000017c0)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x6c, 0x6, 0x2, 0x7, 0x0, [@empty, @remote, @private1]}}}, @rthdr={{0x88, 0x29, 0x39, {0x88, 0xe, 0x0, 0xe, 0x0, [@remote, @mcast2, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0xd0}}, {{&(0x7f00000018c0)={0xa, 0x4e24, 0x5, @mcast2, 0xfffffffc}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000001900)="d9bf59c8bb3ca4819c9123259ac5d2269f1aea15601fbb45680f0c64a15a6b5a957243563c9c7a13ddb868a103c267213cf40aeae164d9d91c0f471f2a673a91098fc953f020406e05a52da0888846796a3f08e53570bb89658ac73b4b7d33aab213aef7834dbbc0c77be320a3360073ab38788b61ea4602c863b8776763ec572984e7803df02b311907765674e996c58d701c89dc69b2f7eb54b6ee1a016c1da5847295855a0be512eccb", 0xab}, {&(0x7f00000019c0)="ab6a6e44", 0x4}, {&(0x7f0000001a00)="f15e3c6414d2072f7737f736cb67d5", 0xf}, {&(0x7f0000001a40)="6b3a5bc23bc607f25fafedb71b268f3175b5549fa8721f0e6345eb3efd8ed4a4c9c50ee37abfa2e66ccd88ff0bb6e17e23d92f94e7fae0c09116ff0fed9445c28cb1af6dc10b1d40d689c69d603cda70333829fa02ef3069964670d53f7ecfd10ae8698eab1437e085fb9bb1c86cd0f90b620944b11403560f881c373568952ec4b0cfe1b0dec0ebfb2efe3966cb04db30985cbe7adc118020633075cea59ce31395516369669dec3613ce0f60772376eaeb30f50f19f03198b8365d21ae0eb9c4f458396ffed048ccf13b30eef12666846e773f3003f5bc8f8713b19ed373", 0xdf}, {&(0x7f0000001b40)="e616549ffe27c77f69202c151a39130a792c97c7cae62e8b80a556107b7f993e4894d474a59a8f722c85f8a83d353fb1e483f8746b9b011838892e68a2eb70ce0ae568bc5da40fe911d9740be8da76dee1398697f9be92264684d786382de0fae9748c084ebd9f12119d4154e2547e76da817c85e30657654799323a74363fbf7769c64483d9637356543ccce881d39d237b1fa407e2f0be5b018ee2223bac0f343834d8ca012161b5c8d55c0409319ebbf12e7b286cc5bb87c7f4a36f8577c1bc82583fae38", 0xc6}, {&(0x7f0000001c40)="46d5ed60e24b23a2b504c3d2f882a956244cfcf23754a354d1f9d281126d8dc2213e8688e7d5d43c7764d63861525bbb8e210f32956b2a9b18c7b9496e27cf8ff8e70e8ffc009a8d2162d2d2a8da", 0x4e}, {&(0x7f0000001cc0)="a47ad1db008fee9ad0cec83e9166040b0740577d47fcf6bffb3860fdc41459acc2e8d46e4f46283bf7e10a31287234c165981a99d7c584f9ff6a297a49935ca65ecf17ceec63aaf1e18a42632dd6388d94c9e47591f4ccf1a4033f45f46b79e7", 0x60}, {&(0x7f0000001d40)="4d8ed9381548837742b6441c62bfc26be9eb935f1fdce653e61f4fb154e31170b146e2809d3ac28b74b079be66b770604514db", 0x33}, {&(0x7f0000001d80)="15985b172071a25d1a1e90bae00b7cfc4cbcfff58b58e703cf13a3bea1bcbf7189a9457f90108dc4a4bf6bcab5b14dca3ca458", 0x33}], 0x9}}, {{&(0x7f0000001e80)={0xa, 0x4e23, 0x8, @private1, 0x8}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001ec0)="c234905195225925ea622ec8e916f4d93a69d157445e9d84f1a39251fef78800be09bba8", 0x24}], 0x1}}], 0x3, 0x40005) (async) ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000002000)={0x6, 0x8000}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000002080)={&(0x7f0000003000)={[{&(0x7f0000002040)="2a60bddbd999fe92f0f9b2b389bb79092ad8669042b9ac7171efae7c8e9e0f487eb3d988a1654a9ecfb720f07190524f73ff72", 0x33}]}, 0x1, 0x3}, 0x1) (async) syz_usb_connect$uac3(0x5, 0x12c, &(0x7f00000020c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11a, 0x3, 0x1, 0x64, 0x0, 0x7a, {0x8, 0xb, 0x2, 0x1, 0x1, 0x22, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x1b, 0x8001}, [@extension_unit={0x11, 0x24, 0xa, 0x2, 0x6, [0x3, 0x3, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe, 0x3, 0x91, 0x5, 0x81}, @as_header={0x17, 0x24, 0x1, 0x9, 0x7, 0x401, 0x2, 0x3, 0xff, 0x5, 0x7}, @as_header={0x17, 0x24, 0x1, 0x5, 0x6, 0x5, 0x1001, 0x4, 0xff, 0x3, 0xfd}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x5, 0x2, 0xca, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x7, 0x9, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0xdf, 0x2, "fd917798ae"}]}, {{0x9, 0x5, 0x1, 0x9, 0x418, 0xb, 0x2, 0x0, {0xa, 0x25, 0x25, 0x2, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x2, 0x64, 0x6, "0c166b64f2b0b3"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xfd, 0x4, 0xf, 0x1, "ad", "6a31f3"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x80, 0x5, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x84, 0x4, 0x2, 0x4, "6c8e"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x81, 0x5, 0xc9}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb7, 0x2, 0x8, 0x2, "9da9", '?'}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x4, 0x8, 0x9, {0xa, 0x25, 0x25, 0xa01, 0x3, 0xb038}}}}}}}}]}}, &(0x7f0000002340)={0xa, &(0x7f0000002200)={0xa, 0x6, 0x201, 0x8, 0x7, 0x2, 0x10, 0x9}, 0xb1, &(0x7f0000002240)={0x5, 0xf, 0xb1, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x7, 0xf, 0x8, [0x0, 0xc000]}, @ssp_cap={0xc, 0x10, 0xa, 0xf7, 0x0, 0x7ff0000, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x2c, 0x40, 0x1, 0x1}, @generic={0x81, 0x10, 0x1, "3112aa24d6653a6301987b42b9be4b4c0500b2477ae70b8a05ec51871cd63da791b036a55797ccaee4763aa7974dbbc9f3d0f6128e9e8cc6a1c238ab2875e3ec40b61d3aa7373cbd94ebf57dd29bb49ec7b5979901ae484d4d4f7d307ce1f08fb13a1c634016438d93749e769ae7b81a466ae249d54a21bbc2f51f32c1d4"}]}, 0x1, [{0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x2401}}]}) syz_usb_connect$uac3(0x4, 0xe7, &(0x7f0000002380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x5, 0x80, 0x40, {0x8, 0xb, 0x2, 0x1, 0x1, 0x20, 0x30, 0xa4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x27, 0x7}, [@input_terminal={0x14, 0x24, 0x2, 0x2, 0x204, 0x6, 0xff, 0x5, 0x40, 0xb, 0x5, 0xff}, @processing_unit={0x9, 0x24, 0x9, 0xb, 0x6, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0x64, 0x4, {0xa, 0x25, 0x25, 0x75f0a84a, 0xe, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf, 0xc4, 0x1, 0xfb, 0xf}, @as_header={0x17, 0x24, 0x1, 0x7, 0x5, 0x2, 0x0, 0x10, 0x3, 0x7, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x40, 0x9, 0x7f, 0xc8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xf}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xf8, 0x1, 0x5, 0x2c, "f2b103eba490b2"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x80, 0x38, "bfbd", "9e1a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0xb, 0x1, {0xa, 0x25, 0x25, 0x47c0, 0x5, 0x6}}}}}}}}]}}, &(0x7f0000002580)={0xa, &(0x7f0000002480)={0xa, 0x6, 0x110, 0x4, 0x1, 0x9, 0xff, 0x60}, 0x5, &(0x7f00000024c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000002540)=@lang_id={0x4, 0x3, 0x2c0a}}]}) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000025c0)={0x0, r4, 0x53e, 0x4, 0x7af8e9f0, 0x100000001}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002600), 0x3018c0, 0x0) (async) r6 = accept$inet(r3, &(0x7f0000002640)={0x2, 0x0, @multicast1}, &(0x7f0000002680)=0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000026c0)={{0x1, 0x1, 0x18, r6, {0x1bbba}}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000002700)={0x4, 0x3, 0x80a0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002780), r7) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x18, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc1}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002880)={'vcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f00000028c0)={0x1d, r9}, 0x10, &(0x7f0000002980)={&(0x7f0000002900)=@canfd={{0x3, 0x1, 0x0, 0x1}, 0x28, 0x0, 0x0, 0x0, "9a8194c733c70bbb64d2c159e1c89e6ea38dbaf2c6fd02a5922094b790905ead71868351a3d42667d86ec64c69264b61e88fc5cba6b0407bdba9e6d63ede5938"}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x4004010) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000002a00)=@ccm_128={{0x303}, "d2b78cdca3f6b9ed", "2003921b73a47f4360aed56d985e8d6c", "060cadbc", "251868d4c72bd21d"}, 0x28) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$proc_mixer(r7, &(0x7f0000002a40)=[{'PHONEOUT', @void}, {'LINE', @void}, {'MONITOR', @void}, {'VIDEO', @void}, {'IMIX', @val={' \'', 'Master Playback Switch'}}, {'RECLEV', @void}, {'IGAIN', @void}, {'VOLUME', @val={' \'', 'Capture Volume'}}], 0x89) sendto$isdn(r7, &(0x7f0000002b00)={0x98eb, 0x9, "9b1799081e420f5d18a2bfc7c701bb68f576c38e74100edd4f5e6248f101da5262b1d598f64265be06760936425d5dfc688be93929892b580cca08cb31e3f18df0dc934f014c7c3a2eebb9723453e92accaca6b7e1b28054ee6e7bbde61853843e31fdaadadd73c8defe177d7169e544c9a5dc1893ba2741c8bf38f7326625"}, 0x87, 0x50, &(0x7f0000002bc0)={0x22, 0x6, 0x8, 0x3, 0xe}, 0x6) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000002c00)) 1.405424212s ago: executing program 6 (id=1758): msgget$private(0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) sched_setattr(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x42000, 0x10) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x80001, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000c091}, 0x50) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x74, 0x0, 0xfffffffffffffffc) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.164813717s ago: executing program 7 (id=1759): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xfec00000, 0x600000, 0x8}) 702.936124ms ago: executing program 7 (id=1760): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) (async) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000003740)={0x5, 0xe0, "bfb9ee6e6b16b371a351c98e89c2add41962dd1fe61d3f4c", {0x3ff, 0x1}, 0x1}) (async) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0xff7f, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x88) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffe00, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) getsockopt$inet6_mreq(r3, 0x29, 0x1, 0x0, &(0x7f0000000080)) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={r6, 0x0, 0x101}, 0x8) (async) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0xa) (async) r7 = getpid() ptrace(0x4208, r7) (async) r8 = fsopen(&(0x7f0000000980)='iso9660\x00', 0x1) r9 = fcntl$dupfd(r8, 0x0, r8) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000300)={@dev, @empty, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_getnexthop={0x4c, 0x6a, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NHA_OIF={0x8, 0x5, r11}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, r5}, @NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 576.556705ms ago: executing program 3 (id=1761): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='(\x00', 0x400, &(0x7f0000000040)={@align=0x3, {0x400, 0xc, 0x80000001}}, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x8}) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x3e, "14d1bef98e7d9469a03312138af7a0bf0f5bd287f6ed08e96dc1678bf1e5b2b7e28b5a6159a04e701ca6c894d702370c3f5d70ae172acb99a045a7f93381"}, &(0x7f00000001c0)=0x46) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r1, 0x8001}, &(0x7f0000000240)=0x8) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd2b, 0x1, {0x80, 0x0, 0x14, 0x6, 0xfd, 0x2, 0xff, 0xb, 0x200}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x804) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={r1, 0x5}, 0x8) (async) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) r2 = signalfd(r0, &(0x7f0000000440)={[0x53d1]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x80000001, 0x9, 0x9, 0x8c00, r0, 0x7, '\x00', 0x0, r0, 0x4, 0x4, 0x1, 0xc, @value=r2}, 0x50) (async) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000480)) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @remote}], 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000500), r0) r3 = accept$inet(r2, &(0x7f0000000540)={0x2, 0x0, @broadcast}, &(0x7f0000000580)=0x10) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f00000005c0)={0x7, 0x8, 0x8, 0x200, 0x9}) (async) sendmsg$alg(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="e7b4c97c1319f10985ab835183d36234bfd86083d973", 0x16}, {&(0x7f0000001640)="8b6bfce92aa69065b3a4c6b5f40a24a0984c3125", 0x14}, {&(0x7f0000001680)="e4e5186e6ea8d9f76d65baad2af2d5bd487ab637edd74dba41d7a0b5b40721416ba3ee10eb13499dd068fa1f95a5cac4353026d4eb6f2c998ada61b66872c2421a4d2e447ff87829ac7e14f9660eff84e32e9bc1e5daa6184c65f5eb60a832ce98bde64239af6abec4aa7df0e70161d9cd89924cab69bb477a50e385fd251612", 0x80}, {&(0x7f0000001700)="0ac65b9a481cb21f80f3ba775dc82c034892097ec2db826a79745aacd8abf497f0f569b48040be16b54eec531d51fbd59e31c59111f6ee2bc94ec70d461d4c6cd304ed907f6191dd2c73aa11d1dd2903b2f6cf90253ff4e6ca96df0520240495678c7eec5ee4c06779fc928d64eb22a927017069cf80a0c7ed798e1049707d83a46691323e3a9594e639e77c13af2c6ef96a25e20da2bd37ccd76d9012094fe89aa44c32420e11a1304c084457463824a5544c18a041878a54ed10e2f08639f59813867738abcc111d86a8ad04a2a852dacacb40426ec7a0338a3c44507bdf64b452a79636", 0xe5}, {&(0x7f0000001800)="ab5a6fc4db68539504e45400bc4c974ac749304fecfdbc49", 0x18}, {&(0x7f0000001840)="a350deaaf655ceaabd9d4f687bea31d00d69225457bf8d41e05ce6cf9435e9df0052a4113b62f24467082bdb391be0896b69ad8c94e35a4d0c1d22cb8b", 0x3d}, {&(0x7f0000001880)="bdcf34e4fa5f5c41b941e245c976008a16cd1833118f4e067e39ba364e829ea34a6e2c31d61e00491d3914093bfe428e27559ccd3bf43e340e330f2f7dc629c12568ed76b1976aad0f5c7facc9b7df9de05bd8174a6dda75043bacd45917285691c58f07c34fe2c18477c7d2cbfbb39556b8ed91622504af3c0430a7bbfd18a8562d2cac83737f93a148a32b00ab8c1eab18d1f7fe3661ab2892e9bb17c182a3c3ada72975ca2560fa8dca3217528c9f61d80d9a92cdb27bb0307f566481182ef1d02447b6df6d14f4851d239134b328d72d2a40605ec891ecd7ea7dadfbe3a9f9b9e8374dbdcd8cc5c38b82", 0xec}, {&(0x7f0000001980)="8ff84db899fd9c0a2413ffc6121e72ca", 0x10}], 0x9, 0x0, 0x0, 0x4010}, 0x5) (async) pipe2(&(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r5, {0x2d2}}, './file0\x00'}) r7 = socket$pptp(0x18, 0x1, 0x2) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r6, 0x6f44, 0x401) (async) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) (async) r8 = signalfd4(r7, &(0x7f0000001c40), 0x8, 0x0) (async) r9 = fspick(r2, &(0x7f0000001c80)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r9, 0x3, &(0x7f0000001cc0)='SMC_PNETID\x00', &(0x7f0000001d00)='./file0/file0\x00', r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001d40)) openat$full(0xffffffffffffff9c, &(0x7f0000001d80), 0x210000, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000001dc0)={0x2, 'batadv_slave_0\x00', {0x5}, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000001e40)={&(0x7f0000001e00)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001e80)={0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000001f00)={&(0x7f0000001ec0)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000001fc0)={r10, r11, r12, 0x0, 0x0, 0x6, &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 483.757276ms ago: executing program 3 (id=1762): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x768}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_io_uring_setup(0x118d9, &(0x7f0000000040)={0x0, 0x4345, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r3 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r8, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 364.529297ms ago: executing program 7 (id=1763): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}, @TCA_FQ_CODEL_FLOWS={0x63, 0x5, 0x1}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8001}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400}, 0x10) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040190401000000000000010902240001000000fa29cac7875c7a9da0a02dc701000000000000000000"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c80000000102050000000000000000000a0000005c0001802c00018014000300fe80000000000000000000000000003b14000400ff0200000000000000000000000000012c00018014000300fc01000000000000000000000000000014000400fe8000000000000000000000000000000800094000000005500001800c000280050001003a00000006000340000300000c00028005000100840000002c000a114d54cc86407b3500dffe0180c4ff0300fe88000000000000000000000000010114000400fe800000"], 0xc8}, 0x1, 0x0, 0x0, 0x10008040}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000500)=@multiplanar_overlay={0x6, 0x8, 0x4, 0x4, 0xfffffffa, {}, {0x3, 0x1, 0x5, 0x3, 0xd5, 0xde, "ef8ef56d"}, 0x3c, 0x3, {0x0}, 0x7ff}) 0s ago: executing program 0 (id=1765): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@ipv4_newroute={0xb4, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x90, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x8c, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x88, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x84, 0x3, "8fd498249133df36da6ee26a0cb5e066cc93ceb97a0a6b2de0bd82ffa9cbedc9120835e49ed02221ad4f0227c6a5891da80000000000000000afb3733aca71f72d9a5a1ba439e355a0a184e3cb8256125a995964771b66f17cf2284697e095dbc322d0df13e673132e2542a4f9b34c29123004ea8acc955eacde969eb114a603"}}}}]}, 0xb4}}, 0xa890) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x24d2, &(0x7f0000000040)={0x0, 0xc8e2, 0xc000, 0xfffffffe, 0x20002f5}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xf7}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xd9}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x324, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xc, @mcast2, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x15c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4e1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@ipv4_newroute={0xb4, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x90, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x8c, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x88, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x84, 0x3, "8fd498249133df36da6ee26a0cb5e066cc93ceb97a0a6b2de0bd82ffa9cbedc9120835e49ed02221ad4f0227c6a5891da80000000000000000afb3733aca71f72d9a5a1ba439e355a0a184e3cb8256125a995964771b66f17cf2284697e095dbc322d0df13e673132e2542a4f9b34c29123004ea8acc955eacde969eb114a603"}}}}]}, 0xb4}}, 0xa890) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) io_uring_setup(0x24d2, &(0x7f0000000040)={0x0, 0xc8e2, 0xc000, 0xfffffffe, 0x20002f5}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) (async) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xf7}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xd9}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x324, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xc, @mcast2, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x15c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4e1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000) (async) kernel console output (not intermixed with test programs): :0.0: probe with driver usbhid failed with error -71 [ 497.235947][T14471] udevd[14471]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.589792][ T9] usb 1-1: USB disconnect, device number 91 [ 497.632421][ T796] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 497.802529][ T796] usb 2-1: device descriptor read/64, error -71 [ 498.042353][ T796] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 498.182388][ T796] usb 2-1: device descriptor read/64, error -71 [ 498.298176][ T796] usb usb2-port1: attempt power cycle [ 498.432414][ T9] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 498.644853][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 498.677178][T20013] loop9: detected capacity change from 0 to 7 [ 498.686107][T19979] Dev loop9: unable to read RDB block 7 [ 498.696643][T19979] loop9: unable to read partition table [ 498.704194][T19979] loop9: partition table beyond EOD, truncated [ 498.720683][T20013] Dev loop9: unable to read RDB block 7 [ 498.731352][T20013] loop9: unable to read partition table [ 498.732765][ T796] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 498.750668][T20013] loop9: partition table beyond EOD, truncated [ 498.769470][T20013] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 498.784762][ T796] usb 2-1: device descriptor read/8, error -71 [ 498.804994][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 498.834936][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 498.855917][ T9] usb 6-1: can't read configurations, error -71 [ 499.092343][ T796] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 499.117713][ T796] usb 2-1: device descriptor read/8, error -71 [ 499.233835][ T796] usb usb2-port1: unable to enumerate USB device [ 499.503258][T17996] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 499.752882][T17996] usb 5-1: Using ep0 maxpacket: 16 [ 499.780840][T17996] usb 5-1: unable to get BOS descriptor or descriptor too short [ 499.812513][T17996] usb 5-1: config 7 has an invalid interface descriptor of length 2, skipping [ 499.843871][T17996] usb 5-1: config 7 has an invalid descriptor of length 97, skipping remainder of the config [ 500.023223][T17996] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 500.124656][T17996] usb 5-1: New USB device found, idVendor=12d1, idProduct=0b9f, bcdDevice=5a.df [ 500.136963][T17996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.145418][T17996] usb 5-1: Product: syz [ 500.149727][T17996] usb 5-1: Manufacturer: syz [ 500.160159][T17996] usb 5-1: SerialNumber: syz [ 500.317268][T20068] tipc: Can't bind to reserved service type 0 [ 500.572596][T19993] usb 5-1: USB disconnect, device number 83 [ 500.934326][T19993] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 501.117111][T19993] usb 2-1: unable to get BOS descriptor or descriptor too short [ 501.134758][T19993] usb 2-1: not running at top speed; connect to a high speed hub [ 501.172395][T19993] usb 2-1: config index 0 descriptor too short (expected 6468, got 68) [ 501.182593][T19993] usb 2-1: config 95 has too many interfaces: 67, using maximum allowed: 32 [ 501.191342][T19993] usb 2-1: config 95 has an invalid interface number: 86 but max is 66 [ 501.302565][T19993] usb 2-1: config 95 has an invalid descriptor of length 97, skipping remainder of the config [ 501.313084][T19993] usb 2-1: config 95 has 2 interfaces, different from the descriptor's value: 67 [ 501.322926][T19993] usb 2-1: config 95 has no interface number 1 [ 501.329282][T19993] usb 2-1: config 95 interface 86 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 501.342674][T19993] usb 2-1: config 95 interface 0 has no altsetting 0 [ 501.349499][T19993] usb 2-1: config 95 interface 86 has no altsetting 0 [ 501.557143][T19993] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e003, bcdDevice=be.04 [ 501.621303][T19993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.636436][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.643307][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.713870][T19993] usb 2-1: Product: syz [ 501.718080][T19993] usb 2-1: Manufacturer: ʖ䅧늳î•ä ¯î‘®é™ºèŸªå㗘⣭ꭳ픞潂ࣶ瑸䄴㠤滊ä„佸쬇å¢æ€šï•ïš“沾ɰ뽃툋å¸ç‹¦á®µÐ§ê€é¿´êš¨íŸ—圴컬嵆ࢹê抪Ўç­ê˜ì¼·å‹æ¤á•¦ê’‰ï®‰Ì¾è‘†ë²¼ç“—å•¿á¾– [ 501.777514][T19993] usb 2-1: SerialNumber: syz [ 502.075438][T20084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1420'. [ 502.145402][T19993] usb 2-1: USB disconnect, device number 91 [ 502.786289][T20123] netlink: 'syz.1.1426': attribute type 30 has an invalid length. [ 502.844457][T20123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1426'. [ 503.055652][T20163] netlink: 'syz.0.1427': attribute type 1 has an invalid length. [ 504.412338][T17996] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 504.552334][T17996] usb 4-1: device descriptor read/64, error -71 [ 504.623469][T20166] : entered promiscuous mode [ 504.826963][T17996] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 505.002557][T17996] usb 4-1: device descriptor read/64, error -71 [ 505.143407][T17996] usb usb4-port1: attempt power cycle [ 505.205545][T20201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1432'. [ 505.348560][T20208] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 505.388656][T20208] ALSA: mixer_oss: invalid index 1374389 [ 505.492574][T17996] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 505.527743][T17996] usb 4-1: device descriptor read/8, error -71 [ 505.692330][ T24] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 505.772336][ T1209] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 505.780308][T17996] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 505.819228][T17996] usb 4-1: device descriptor read/8, error -71 [ 505.827214][ T24] usb 1-1: device descriptor read/64, error -71 [ 505.936625][ T1209] usb 2-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 505.948812][T17996] usb usb4-port1: unable to enumerate USB device [ 505.955518][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.989989][ T1209] pwc: Logitech/Cisco VT Camera webcam detected. [ 506.072333][ T24] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 506.185967][ T1209] pwc: Failed to set LED on/off time (-71) [ 506.202391][ T24] usb 1-1: device descriptor read/64, error -71 [ 506.211699][ T1209] pwc: send_video_command error -71 [ 506.220911][ T1209] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 506.229950][ T1209] Philips webcam 2-1:127.0: probe with driver Philips webcam failed with error -71 [ 506.250286][ T1209] usb 2-1: USB disconnect, device number 92 [ 506.312588][ T24] usb usb1-port1: attempt power cycle [ 506.462842][T20249] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1437'. [ 506.672414][ T24] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 506.693680][ T24] usb 1-1: device descriptor read/8, error -71 [ 506.974172][ T24] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 507.020658][ T24] usb 1-1: device descriptor read/8, error -71 [ 507.144110][ T24] usb usb1-port1: unable to enumerate USB device [ 507.432441][ T24] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 507.562747][ T24] usb 5-1: device descriptor read/64, error -71 [ 507.772487][ T796] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 507.802326][ T24] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 507.922349][ T796] usb 2-1: device descriptor read/64, error -71 [ 507.933589][ T24] usb 5-1: device descriptor read/64, error -71 [ 508.042925][ T24] usb usb5-port1: attempt power cycle [ 508.162568][ T796] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 508.303055][ T796] usb 2-1: device descriptor read/64, error -71 [ 508.402424][ T24] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 508.420382][ T796] usb usb2-port1: attempt power cycle [ 508.425520][ T24] usb 5-1: device descriptor read/8, error -71 [ 508.682521][ T24] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 508.704782][ T24] usb 5-1: device descriptor read/8, error -71 [ 508.753835][T20312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'. [ 508.782519][ T796] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 508.803033][ T796] usb 2-1: device descriptor read/8, error -71 [ 508.809908][T20312] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1448'. [ 508.815262][ T24] usb usb5-port1: unable to enumerate USB device [ 509.042408][ T796] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 509.063098][ T796] usb 2-1: device descriptor read/8, error -71 [ 509.072745][T19993] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 509.172932][ T796] usb usb2-port1: unable to enumerate USB device [ 509.222416][T19993] usb 1-1: Using ep0 maxpacket: 8 [ 509.229486][T19993] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 509.240913][T19993] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 509.250104][T19993] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 509.258394][T19993] usb 1-1: Product: syz [ 509.262644][T19993] usb 1-1: Manufacturer: syz [ 509.267292][T19993] usb 1-1: SerialNumber: syz [ 509.483396][T19993] usb 1-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 509.491455][T19993] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 509.499762][T19993] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 509.823094][T19993] usb 1-1: palm_os_3_probe - error -110 getting bytes available request [ 509.831605][T19993] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 509.845278][T19993] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 509.869121][T19993] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 510.285180][T17996] usb 1-1: USB disconnect, device number 96 [ 510.317690][T17996] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 510.487684][T17996] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 510.532765][T17996] visor 1-1:1.0: device disconnected [ 511.662464][T17996] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 511.824174][T17996] usb 2-1: Using ep0 maxpacket: 16 [ 511.834401][T17996] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.845685][T17996] usb 2-1: config 0 has no interfaces? [ 511.865131][T17996] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 511.876404][T17996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.908024][T17996] usb 2-1: config 0 descriptor?? [ 512.002582][T19993] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 512.133216][ T796] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 512.163912][ T9] usb 2-1: USB disconnect, device number 97 [ 512.170262][T19993] usb 5-1: Using ep0 maxpacket: 16 [ 512.190726][T19993] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 512.200241][T19993] usb 5-1: config 1 has no interface number 0 [ 512.216284][T19993] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 512.239157][T19993] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 512.250579][T19993] usb 5-1: config 1 interface 105 has no altsetting 0 [ 512.296490][T19993] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 512.305807][ T796] usb 4-1: Using ep0 maxpacket: 8 [ 512.311523][T19993] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 512.320166][T19993] usb 5-1: Product: syz [ 512.325172][T19993] usb 5-1: Manufacturer: syz [ 512.329851][T19993] usb 5-1: SerialNumber: syz [ 512.333806][T20411] loop9: detected capacity change from 0 to 7 [ 512.341789][T20428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 512.421922][T20411] Dev loop9: unable to read RDB block 7 [ 512.428082][T20411] loop9: unable to read partition table [ 512.435378][T20411] loop9: partition table beyond EOD, truncated [ 512.452476][T20411] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 512.465250][T20406] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 512.473641][T20406] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 512.483528][ T796] usb 4-1: unable to get BOS descriptor or descriptor too short [ 512.497329][ T796] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 512.505842][ T796] usb 4-1: can't read configurations, error -71 [ 513.050753][T20445] netem: change failed [ 513.181124][T20453] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 513.223485][T20453] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 513.437007][T20406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 513.509798][T19993] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 513.535461][T19993] aqc111 5-1:1.105: probe with driver aqc111 failed with error -61 [ 513.842387][T19993] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 513.972373][ T796] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 514.122303][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 514.132342][T19993] usb 4-1: device descriptor read/64, error -71 [ 514.146316][ T796] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 514.163256][ T796] usb 2-1: config 0 has no interface number 0 [ 514.169515][ T796] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.210283][ T796] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.250292][ T796] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 514.273782][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.308649][ T796] usb 2-1: config 0 descriptor?? [ 514.382287][T19993] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 515.044022][T20491] openvswitch: netlink: Missing valid actions attribute. [ 515.051271][T20491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.133993][T19993] usb 4-1: device descriptor read/64, error -71 [ 515.283219][T19993] usb usb4-port1: attempt power cycle [ 515.363463][ T796] uclogic 0003:28BD:0071.0011: pen parameters not found [ 515.477374][ T796] uclogic 0003:28BD:0071.0011: interface is invalid, ignoring [ 515.544269][T20476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.642352][T19993] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 515.690167][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 515.694557][T19993] usb 4-1: device descriptor read/8, error -71 [ 515.705115][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 515.724866][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 515.733382][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 515.744251][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 516.102360][T19993] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 516.112817][ T1209] usb 5-1: USB disconnect, device number 88 [ 516.482710][ T1209] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 516.642322][ T1209] usb 5-1: Using ep0 maxpacket: 8 [ 516.660060][T20523] loop9: detected capacity change from 0 to 7 [ 516.678851][T19979] Dev loop9: unable to read RDB block 7 [ 516.685216][T19979] loop9: unable to read partition table [ 516.691293][T19979] loop9: partition table beyond EOD, truncated [ 516.711270][T20523] Dev loop9: unable to read RDB block 7 [ 516.736303][T20523] loop9: unable to read partition table [ 516.762628][T20523] loop9: partition table beyond EOD, truncated [ 516.795821][T20523] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 516.867042][ T1209] usb 5-1: unable to get BOS descriptor or descriptor too short [ 516.926373][T20506] chnl_net:caif_netlink_parms(): no params data found [ 516.943730][ T1209] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 516.974782][ T1209] usb 5-1: can't read configurations, error -71 [ 517.195796][ T5905] usb 2-1: USB disconnect, device number 98 [ 517.473208][T19993] usb 4-1: device descriptor read/8, error -71 [ 517.614895][T19993] usb usb4-port1: unable to enumerate USB device [ 517.702768][T20663] netlink: 'syz.3.1477': attribute type 27 has an invalid length. [ 517.712087][T20506] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.767470][T14764] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 517.802568][ T51] Bluetooth: hci5: command tx timeout [ 517.806436][ T24] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 517.837109][T20506] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.848993][ T24] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 517.872870][T20506] bridge_slave_0: entered allmulticast mode [ 517.914843][T20506] bridge_slave_0: entered promiscuous mode [ 517.922123][T20672] lo: left allmulticast mode [ 517.930710][T20672] tunl0: left allmulticast mode [ 517.946549][T20672] gre0: left allmulticast mode [ 518.015811][T14764] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.034857][T20672] gretap0: left allmulticast mode [ 518.047716][T14764] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 518.089696][T14764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.104528][T20672] erspan0: left allmulticast mode [ 518.142930][T14764] usb 1-1: config 0 descriptor?? [ 518.151980][T20672] ip_vti0: left allmulticast mode [ 518.180452][T14764] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 518.227776][T20672] ip6_vti0: left allmulticast mode [ 518.263746][T20672] sit0: left allmulticast mode [ 518.321256][T20672] ip6tnl0: left allmulticast mode [ 518.347872][T20672] ip6gre0: left allmulticast mode [ 518.374041][T20672] syz_tun: left allmulticast mode [ 518.382515][T20672] ip6gretap0: left allmulticast mode [ 518.409322][T20672] bridge0: left allmulticast mode [ 518.418013][T20672] vcan0: left allmulticast mode [ 518.424608][T20672] bond0: left allmulticast mode [ 518.531574][T20672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.541352][T20672] team0: left allmulticast mode [ 518.559088][T20672] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.569408][T20672] dummy0: left allmulticast mode [ 518.690177][T20672] nlmon0: left allmulticast mode [ 518.744179][T20672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.781026][T20690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.941810][T20690] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1479'. [ 519.223242][T20663] batadv0: left allmulticast mode [ 519.252476][T20663] vxcan0: left allmulticast mode [ 519.266774][T20663] vxcan1: left allmulticast mode [ 519.292749][T20663] veth0: left allmulticast mode [ 519.322572][T20663] veth1: left allmulticast mode [ 519.342601][T20663] wg0: left allmulticast mode [ 519.369535][T20663] wg1: left allmulticast mode [ 519.377502][T20663] wg2: left allmulticast mode [ 519.387293][T20663] veth0_to_bridge: left allmulticast mode [ 519.399796][T20663] veth1_to_bridge: left allmulticast mode [ 519.415584][T20663] veth0_to_bond: left allmulticast mode [ 519.428589][T20663] bond_slave_0: left allmulticast mode [ 519.449835][T20663] veth1_to_bond: left allmulticast mode [ 519.485262][T20663] bond_slave_1: left allmulticast mode [ 519.553357][T20663] veth0_to_team: left allmulticast mode [ 519.603566][T20663] team_slave_0: left allmulticast mode [ 519.610792][T20663] veth1_to_team: left allmulticast mode [ 519.616863][T20663] team_slave_1: left allmulticast mode [ 519.622734][T20663] veth1_to_batadv: left allmulticast mode [ 519.630339][T20663] batadv_slave_1: left allmulticast mode [ 519.636384][T20663] xfrm0: left allmulticast mode [ 519.641445][T20663] veth0_to_hsr: left allmulticast mode [ 519.647367][T20663] veth1_to_hsr: left allmulticast mode [ 519.653309][T20663] hsr0: left allmulticast mode [ 519.658242][T20663] hsr_slave_0: left allmulticast mode [ 519.663910][T20663] hsr_slave_1: left allmulticast mode [ 519.669487][T20663] veth1_virt_wifi: left allmulticast mode [ 519.675490][T20663] veth0_virt_wifi: left allmulticast mode [ 519.681400][T20663] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 519.690370][T20663] veth1_vlan: left allmulticast mode [ 519.739421][T20663] vlan0: left allmulticast mode [ 519.744816][T20663] vlan1: left allmulticast mode [ 519.763121][T20663] macvlan0: left allmulticast mode [ 519.768606][T20663] macvlan1: left allmulticast mode [ 519.782971][T20663] ipvlan1: left allmulticast mode [ 519.795626][T20663] veth0_vlan: left allmulticast mode [ 519.807914][T20663] veth1_macvtap: left allmulticast mode [ 519.822979][T20663] veth0_macvtap: left allmulticast mode [ 519.862905][T20663] macvtap0: left allmulticast mode [ 519.870411][T20663] macsec0: left allmulticast mode [ 519.876001][T20663] geneve0: left allmulticast mode [ 519.962567][ T9] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 519.988741][T20663] geneve1: left allmulticast mode [ 520.081922][T20663] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 520.096999][T20663] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 520.122046][T20663] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 520.147847][T20663] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 520.167595][T20663] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 520.195070][T20663] hsr1: left promiscuous mode [ 520.222981][T20663] vlan2: left promiscuous mode [ 520.236638][T20663] bond2: left promiscuous mode [ 520.332670][T20663] batadv1: left promiscuous mode [ 520.343462][T20663] vlan2: left allmulticast mode [ 520.358670][T20663] bond2: left allmulticast mode [ 520.363918][T20663] batadv1: left allmulticast mode [ 520.376148][T20506] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.462445][T20506] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.498234][T20506] bridge_slave_1: entered allmulticast mode [ 520.515912][T20506] bridge_slave_1: entered promiscuous mode [ 520.572901][ T5912] usb 1-1: USB disconnect, device number 97 [ 520.774920][T20506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.811379][T20506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.925122][T20506] team0: Port device team_slave_0 added [ 520.948815][T20506] team0: Port device team_slave_1 added [ 521.003307][T20506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.010322][T20506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.040465][T20506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.056425][T20506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.063700][T20506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.090033][T20506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.221182][T20506] hsr_slave_0: entered promiscuous mode [ 521.247407][T20506] hsr_slave_1: entered promiscuous mode [ 521.260451][T20506] debugfs: 'hsr0' already exists in 'hsr' [ 521.273529][T20506] Cannot create hsr debugfs directory [ 521.702602][ T29] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 521.732542][ T5912] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 521.842527][ T29] usb 4-1: device descriptor read/64, error -71 [ 521.902311][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 521.919840][ T5912] usb 1-1: config 0 has no interfaces? [ 521.936805][ T5912] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 521.997801][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.011740][ T5912] usb 1-1: Product: syz [ 522.020238][ T5912] usb 1-1: Manufacturer: syz [ 522.029436][ T5912] usb 1-1: SerialNumber: syz [ 522.090755][ T5912] usb 1-1: config 0 descriptor?? [ 522.113425][ T29] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 522.244018][T20506] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 522.252801][ T29] usb 4-1: device descriptor read/64, error -71 [ 522.269912][T20506] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 522.294162][T20506] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 522.334966][T20506] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 522.362758][ T29] usb usb4-port1: attempt power cycle [ 522.595123][T20506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.644876][T20506] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.668168][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.676316][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.702384][ T29] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 522.739358][ T29] usb 4-1: device descriptor read/8, error -71 [ 522.786011][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.793281][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.901096][T20506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.943333][T20506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.989536][T20506] veth0_vlan: entered promiscuous mode [ 523.003104][ T29] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 523.011253][T20506] veth1_vlan: entered promiscuous mode [ 523.038498][ T29] usb 4-1: device descriptor read/8, error -71 [ 523.096779][T20506] veth0_macvtap: entered promiscuous mode [ 523.109948][T20506] veth1_macvtap: entered promiscuous mode [ 523.153587][ T29] usb usb4-port1: unable to enumerate USB device [ 523.166057][T20506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.196449][T20506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.226391][ T7664] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.239230][ T7664] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.385252][ T63] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.531441][ T63] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.656087][ T7681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.666215][ T7681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.753941][ T7681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.802095][ T7681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.440593][T20993] fuse: Bad value for 'fd' [ 524.480775][ T796] usb 1-1: USB disconnect, device number 98 [ 524.572497][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 524.750484][ T9] usb 2-1: device descriptor read/64, error -71 [ 525.072702][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 525.097090][T21038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.238658][ T9] usb 2-1: device descriptor read/64, error -71 [ 525.383123][ T9] usb usb2-port1: attempt power cycle [ 525.802373][T19993] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 525.882349][ T796] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 525.892502][ T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 525.923008][ T9] usb 2-1: device descriptor read/8, error -71 [ 525.955189][T19993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 525.975303][T19993] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 525.998300][T19993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.018045][T19993] usb 4-1: config 0 descriptor?? [ 526.043767][T19993] smsusb:smsusb_probe: board id=8, interface number 0 [ 526.058081][ T796] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.072017][T19993] smsusb:smsusb_probe: Device initialized with return code -19 [ 526.087200][ T796] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 526.115604][ T796] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 526.129185][ T796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.141031][ T796] usb 7-1: Product: syz [ 526.148078][ T796] usb 7-1: Manufacturer: syz [ 526.154050][ T796] usb 7-1: SerialNumber: syz [ 526.162642][ T9] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 526.183349][ T796] cdc_mbim 7-1:1.0: skipping garbage [ 526.207206][ T9] usb 2-1: device descriptor read/8, error -71 [ 526.323240][ T9] usb usb2-port1: unable to enumerate USB device [ 526.368370][ T29] usb 4-1: USB disconnect, device number 110 [ 526.381452][T21060] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 526.597309][ T796] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 526.604902][ T796] cdc_mbim 7-1:1.0: bind() failure [ 526.618566][ T796] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 526.640439][ T796] cdc_ncm 7-1:1.1: bind() failure [ 526.952931][ T796] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 527.124368][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 527.132450][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.148633][ T796] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 527.160322][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.176589][ T796] usb 4-1: Product: syz [ 527.183208][ T796] usb 4-1: Manufacturer: syz [ 527.191416][ T796] usb 4-1: SerialNumber: syz [ 527.207825][ T796] usb 4-1: config 0 descriptor?? [ 527.383445][ T29] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 527.474084][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 527.474103][ T30] audit: type=1326 audit(1772542908.954:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.1.1509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6be439c799 code=0x0 [ 527.532444][ T29] usb 5-1: device descriptor read/64, error -71 [ 527.782311][ T29] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 527.812338][T14764] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 527.902340][ T9] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 527.922283][ T29] usb 5-1: device descriptor read/64, error -71 [ 527.965683][T14764] usb 2-1: config index 0 descriptor too short (expected 22, got 18) [ 527.974342][T14764] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 527.982742][T14764] usb 2-1: config 0 has no interface number 0 [ 527.989276][T14764] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 528.000791][T14764] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 528.021230][T14764] usb 2-1: config 0 interface 48 has no altsetting 0 [ 528.030533][T14764] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02 [ 528.040881][ T29] usb usb5-port1: attempt power cycle [ 528.047201][T14764] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=3 [ 528.059457][T14764] usb 2-1: Manufacturer: syz [ 528.064371][T14764] usb 2-1: SerialNumber: syz [ 528.076239][T14764] usb 2-1: config 0 descriptor?? [ 528.076716][ T9] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 528.094740][ T9] usb 1-1: config 8 has no interface number 0 [ 528.104674][ T9] usb 1-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 528.137842][ T9] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 528.155283][ T9] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 528.171910][ T9] usb 1-1: config 8 interface 177 has no altsetting 0 [ 528.185743][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 528.203819][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.231223][T21142] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 528.309679][T21137] fuse: Unknown parameter 'f4ÁYL[q@ø&3Bd' [ 528.392349][ T29] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 528.619989][ T29] usb 5-1: device descriptor read/8, error -71 [ 528.692655][T17996] usb 7-1: USB disconnect, device number 2 [ 528.862399][ T29] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 528.894903][ T29] usb 5-1: device descriptor read/8, error -71 [ 529.002438][ T9] usb 1-1: string descriptor 0 read error: -71 [ 529.019044][ T29] usb usb5-port1: unable to enumerate USB device [ 529.025729][ T9] ir_toy 1-1:8.177: required endpoints not found [ 529.056282][ T9] usb 1-1: USB disconnect, device number 99 [ 529.813059][ T9] usb 4-1: USB disconnect, device number 111 [ 530.589801][T14764] ftdi_sio 2-1:0.48: FTDI USB Serial Device converter detected [ 530.625035][T14764] usb 2-1: Detected SIO [ 530.642849][T21209] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1516'. [ 530.667594][T14764] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 530.697975][T14764] usb 2-1: USB disconnect, device number 103 [ 530.724267][T14764] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 530.884982][T14764] ftdi_sio 2-1:0.48: device disconnected [ 530.949634][T21224] fuse: Bad value for 'user_id' [ 530.954876][T21224] fuse: Bad value for 'user_id' [ 531.053764][ T30] audit: type=1326 audit(1772542912.524:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 531.131615][ T30] audit: type=1326 audit(1772542912.524:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 531.185992][ T30] audit: type=1326 audit(1772542912.524:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 531.255896][ T30] audit: type=1326 audit(1772542912.524:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 531.348321][ T30] audit: type=1326 audit(1772542912.524:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 531.459398][ T30] audit: type=1326 audit(1772542912.524:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 531.504540][ T30] audit: type=1326 audit(1772542912.524:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 531.531377][ T30] audit: type=1326 audit(1772542912.594:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 531.624516][ T30] audit: type=1326 audit(1772542912.594:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21218 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 531.731751][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 531.774062][ T796] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 531.926214][T21279] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 531.932818][T21279] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 531.962430][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 531.980282][ T796] usb 4-1: config index 0 descriptor too short (expected 29665, got 202) [ 531.997566][T21246] bond3: option broadcast_neighbor: invalid value (30) [ 532.004969][ T796] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.008010][T21279] vhci_hcd vhci_hcd.0: Device attached [ 532.042358][ T9] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 532.050266][ T796] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.063295][ T796] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 532.074876][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.088519][ T796] usb 4-1: Product: syz [ 532.103985][ T796] usb 4-1: Manufacturer: syz [ 532.115874][ T796] usb 4-1: SerialNumber: syz [ 532.126147][T21246] bond3 (unregistering): Released all slaves [ 532.242309][T14764] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 532.316993][T21280] vhci_hcd: connection reset by peer [ 532.333278][ T7681] vhci_hcd vhci_hcd.4: stop threads [ 532.338866][ T7681] vhci_hcd vhci_hcd.4: release socket [ 532.413079][ T7681] vhci_hcd vhci_hcd.4: disconnect device [ 532.580121][ T796] usb 4-1: 0:2 : does not exist [ 532.617856][ T796] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 532.677685][ T796] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 532.723253][ T796] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 532.889820][ T796] usb 4-1: USB disconnect, device number 112 [ 533.050905][T19979] udevd[19979]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.335578][T17996] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 533.502477][T17996] usb 2-1: Using ep0 maxpacket: 16 [ 533.509793][T17996] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.566930][T17996] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 533.595340][T17996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.611804][T17996] usb 2-1: Product: syz [ 533.646021][T17996] usb 2-1: Manufacturer: syz [ 533.657605][T17996] usb 2-1: SerialNumber: syz [ 533.727898][T17996] usb 2-1: config 0 descriptor?? [ 533.742411][T19993] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 533.891054][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 533.891087][ T30] audit: type=1326 audit(1772542915.324:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21380 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7b2f96517 code=0x7ffc0000 [ 533.922454][T19993] usb 5-1: device descriptor read/64, error -71 [ 533.972897][ T30] audit: type=1326 audit(1772542915.324:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21380 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7b2f3db19 code=0x7ffc0000 [ 534.092186][ T30] audit: type=1326 audit(1772542915.334:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21380 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b2f9c799 code=0x7ffc0000 [ 534.152957][T17996] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 534.160619][ T30] audit: type=1326 audit(1772542915.334:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21380 comm="syz.0.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b2f9c799 code=0x7ffc0000 [ 534.193173][T19993] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 534.310138][T21401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.342808][T19993] usb 5-1: device descriptor read/64, error -71 [ 534.357177][T21401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.372662][T17996] usb 7-1: Using ep0 maxpacket: 32 [ 534.386662][T17996] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 534.412679][T17996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.420747][T17996] usb 7-1: Product: syz [ 534.462607][T19993] usb usb5-port1: attempt power cycle [ 534.542335][ T9] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 534.702681][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 534.710198][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64 [ 534.748815][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 534.766118][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.770778][T17996] usb 7-1: Manufacturer: syz [ 534.789276][ T9] usb 4-1: Product: syz [ 534.799502][ T9] usb 4-1: Manufacturer: syz [ 534.809721][ T9] usb 4-1: SerialNumber: syz [ 534.815049][T19993] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 534.835229][ T9] usb 4-1: config 0 descriptor?? [ 534.864322][T19993] usb 5-1: device descriptor read/8, error -71 [ 534.891636][T17996] usb 7-1: SerialNumber: syz [ 534.901922][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 534.934106][T17996] usb 7-1: config 0 descriptor?? [ 534.946889][T17996] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 535.082152][ T9] usb 4-1: USB disconnect, device number 113 [ 535.101207][ T7668] usb 4-1: Failed to submit usb control message: -71 [ 535.112622][T19993] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 535.138457][ T7668] usb 4-1: unable to send the bmi data to the device: -71 [ 535.155997][T19993] usb 5-1: device descriptor read/8, error -71 [ 535.156768][ T7668] usb 4-1: unable to get target info from device [ 535.183003][ T7668] usb 4-1: could not get target info (-71) [ 535.194709][ T7668] usb 4-1: could not probe fw (-71) [ 535.274288][T19993] usb usb5-port1: unable to enumerate USB device [ 535.613879][T21391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.629704][T21391] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 535.648237][T21391] syz_tun: entered allmulticast mode [ 535.655691][T21387] syz_tun: left allmulticast mode [ 535.668430][T17996] gspca_ov534_9: reg_w failed -71 [ 536.112724][T17996] gspca_ov534_9: Unknown sensor 0000 [ 536.126274][T17996] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 536.209165][T17996] usb 7-1: USB disconnect, device number 3 [ 536.290593][ T29] usb 2-1: USB disconnect, device number 104 [ 536.495029][T21467] pimreg: tun_chr_ioctl cmd 1074025677 [ 536.500857][T21467] pimreg: linktype set to 270 [ 536.547765][T21467] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1535'. [ 537.382393][T14764] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 539.132399][T14764] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 539.275884][T14764] usb 2-1: device descriptor read/64, error -71 [ 539.574069][T14764] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 539.863059][T14764] usb 2-1: device descriptor read/64, error -71 [ 539.940333][T21521] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1543'. [ 539.986819][T21521] bond0 (unregistering): left promiscuous mode [ 539.989152][T14764] usb usb2-port1: attempt power cycle [ 540.007156][T21521] bond_slave_0: left promiscuous mode [ 540.009836][T21524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1543'. [ 540.025575][T21524] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1543'. [ 540.031350][T21521] bond_slave_1: left promiscuous mode [ 540.063931][T21521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.107468][T21521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.132354][ T9] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 540.155184][T21521] bond0 (unregistering): Released all slaves [ 540.288194][ T9] usb 1-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 540.305217][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 540.306153][T21533] loop2: detected capacity change from 0 to 7 [ 540.323353][T21533] Dev loop2: unable to read RDB block 7 [ 540.329128][T21533] loop2: unable to read partition table [ 540.330141][ T9] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 540.344890][T21533] loop2: partition table beyond EOD, truncated [ 540.352909][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.372795][T21533] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 540.392398][T14764] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 540.396845][ T9] usb 1-1: config 0 descriptor?? [ 540.413005][T14764] usb 2-1: device descriptor read/8, error -71 [ 540.792367][T14764] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 540.814773][T14764] usb 2-1: device descriptor read/8, error -71 [ 540.924195][T14764] usb usb2-port1: unable to enumerate USB device [ 541.108055][T21547] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 541.733534][ T9] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 541.902481][ T9] usb 5-1: device descriptor read/64, error -71 [ 542.252810][ T5913] usb 1-1: USB disconnect, device number 101 [ 542.270372][ T9] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 542.315319][T21594] sctp: [Deprecated]: syz.0.1552 (pid 21594) Use of int in max_burst socket option. [ 542.315319][T21594] Use struct sctp_assoc_value instead [ 542.392710][T14764] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 542.412332][ T9] usb 5-1: device descriptor read/64, error -71 [ 542.444697][T21594] xfrm1: entered allmulticast mode [ 542.532349][T14764] usb 7-1: device descriptor read/64, error -71 [ 542.532477][ T9] usb usb5-port1: attempt power cycle [ 542.782329][T14764] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 542.823786][T21613] loop2: detected capacity change from 0 to 7 [ 542.831993][T21613] Dev loop2: unable to read RDB block 7 [ 542.848855][T21613] loop2: unable to read partition table [ 542.856892][T21613] loop2: partition table beyond EOD, truncated [ 542.863419][T21613] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 542.886249][ T5192] Dev loop2: unable to read RDB block 7 [ 542.891962][ T5192] loop2: unable to read partition table [ 542.898348][ T5192] loop2: partition table beyond EOD, truncated [ 542.904717][T19993] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 542.912636][ T9] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 542.932571][T14764] usb 7-1: device descriptor read/64, error -71 [ 542.945008][ T9] usb 5-1: device descriptor read/8, error -71 [ 543.043062][T14764] usb usb7-port1: attempt power cycle [ 543.062638][T19993] usb 2-1: Using ep0 maxpacket: 16 [ 543.075839][T19993] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 543.092400][T19993] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.112065][T19993] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.134949][T19993] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.162316][T19993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.183524][T19993] usb 2-1: Product: syz [ 543.190528][T19993] usb 2-1: Manufacturer: syz [ 543.195557][ T9] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 543.208262][T19993] usb 2-1: SerialNumber: syz [ 543.236131][ T9] usb 5-1: device descriptor read/8, error -71 [ 543.352907][ T9] usb usb5-port1: unable to enumerate USB device [ 543.392389][ T29] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 543.400476][T14764] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 543.425477][T14764] usb 7-1: device descriptor read/8, error -71 [ 543.562351][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 543.569929][ T29] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 543.580698][ T29] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 543.594507][ T29] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 543.619359][ T29] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 543.638096][ T29] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 543.647740][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.655937][ T29] usb 1-1: Product: syz [ 543.660375][ T29] usb 1-1: Manufacturer: syz [ 543.665454][ T29] usb 1-1: SerialNumber: syz [ 543.672619][T14764] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 543.693628][T19993] usb 2-1: 0:2 : does not exist [ 543.728362][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 543.741715][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input48 [ 543.755350][T14764] usb 7-1: device descriptor read/8, error -71 [ 543.862710][T14764] usb usb7-port1: unable to enumerate USB device [ 543.932630][ T29] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 543.941090][ T29] (id 0x00) [ 544.082601][ T29] rc_core: IR keymap rc-imon-pad not found [ 544.088760][ T29] Registered IR keymap rc-empty [ 544.095376][ T29] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 544.106417][ T29] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 544.155821][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 544.199206][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input49 [ 544.250361][ T29] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:102> initialized [ 544.900530][ C1] sd 0:0:1:0: [sda] tag#7580 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 544.911144][ C1] sd 0:0:1:0: [sda] tag#7580 CDB: Read(6) 08 00 05 02 00 00 [ 544.923483][T19993] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 545.156539][T19993] usb 2-1: USB disconnect, device number 109 [ 545.369691][ T30] audit: type=1326 audit(1772542926.844:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21691 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 545.431564][ T30] audit: type=1326 audit(1772542926.884:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21691 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 545.516172][ T30] audit: type=1326 audit(1772542926.884:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21691 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 545.568111][ T30] audit: type=1326 audit(1772542926.884:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21691 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 545.604488][ T30] audit: type=1326 audit(1772542926.884:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21691 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 545.631324][ T30] audit: type=1326 audit(1772542926.884:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21691 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 545.661078][ T30] audit: type=1326 audit(1772542926.884:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21691 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c139c799 code=0x7ffc0000 [ 545.688803][T21707] loop2: detected capacity change from 0 to 7 [ 545.701837][T21707] Dev loop2: unable to read RDB block 7 [ 545.708348][T21707] loop2: unable to read partition table [ 545.713783][T21695] imon:send_packet: packet tx failed (-71) [ 545.726012][ T29] usb 1-1: USB disconnect, device number 102 [ 545.739673][T21707] loop2: partition table beyond EOD, truncated [ 545.749345][T21695] imon:vfd_write: send packet #4 failed [ 545.752668][T21707] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 545.815269][ T30] audit: type=1326 audit(1772542926.884:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21691 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f98c139b607 code=0x7ffc0000 [ 545.851110][ T30] audit: type=1326 audit(1772542926.884:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21691 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f98c139da0a code=0x7ffc0000 [ 545.910254][ T30] audit: type=1326 audit(1772542926.884:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21691 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98c135cfce code=0x7ffc0000 [ 546.043263][T21729] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1568'. [ 546.124383][T21737] netlink: 'syz.3.1569': attribute type 12 has an invalid length. [ 546.142983][T21737] netlink: 'syz.3.1569': attribute type 29 has an invalid length. [ 546.162828][T21737] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1569'. [ 546.280495][T21742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.300409][T21742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.308474][T19993] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 546.425976][T21762] fuse: Unknown parameter 'íû' [ 546.442904][T19993] usb 7-1: device descriptor read/64, error -71 [ 546.585290][ T7668] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.608498][T21772] tap0: tun_chr_ioctl cmd 1074025677 [ 546.622531][T21772] tap0: linktype set to 805 [ 546.702565][T19993] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 546.714171][ T7668] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.858471][ T7668] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.872632][T19993] usb 7-1: device descriptor read/64, error -71 [ 546.888189][T21787] syzkaller0: entered promiscuous mode [ 546.893994][T21787] syzkaller0: entered allmulticast mode [ 546.954468][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 546.966425][ T7668] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.976904][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 546.985498][T19993] usb usb7-port1: attempt power cycle [ 546.991693][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 547.008388][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 547.019268][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 547.027374][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 547.113146][ T9] usb 1-1: device descriptor read/64, error -71 [ 547.342592][T19993] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 547.377061][T19993] usb 7-1: device descriptor read/8, error -71 [ 547.406357][T21846] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1580'. [ 547.493238][ T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 547.531203][ T7668] bridge_slave_1: left allmulticast mode [ 547.597565][ T7668] bridge_slave_1: left promiscuous mode [ 547.605801][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.637514][ T9] usb 1-1: device descriptor read/64, error -71 [ 547.647791][T19993] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 547.651701][ T7668] bridge_slave_0: left allmulticast mode [ 547.683352][T19993] usb 7-1: device descriptor read/8, error -71 [ 547.733261][ T7668] bridge_slave_0: left promiscuous mode [ 547.754316][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.763231][ T9] usb usb1-port1: attempt power cycle [ 547.793084][T19993] usb usb7-port1: unable to enumerate USB device [ 548.025054][ T7668] bond3 (unregistering): (slave ip6gretap2): Releasing backup interface [ 548.113287][ T9] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 548.173270][ T9] usb 1-1: device descriptor read/8, error -71 [ 548.355336][ T7668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.395483][ T7668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.406027][ T7668] bond0 (unregistering): Released all slaves [ 548.412941][ T9] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 548.423587][ T7668] bond1 (unregistering): Released all slaves [ 548.433759][ T9] usb 1-1: device descriptor read/8, error -71 [ 548.491841][ T7668] bond2 (unregistering): Released all slaves [ 548.546964][ T9] usb usb1-port1: unable to enumerate USB device [ 548.553612][ T7668] bond3 (unregistering): Released all slaves [ 548.697984][T21797] chnl_net:caif_netlink_parms(): no params data found [ 549.068642][T21797] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.076080][ T5827] Bluetooth: hci1: command tx timeout [ 549.103639][T14764] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 549.140673][T21797] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.158631][T21797] bridge_slave_0: entered allmulticast mode [ 549.176763][T21797] bridge_slave_0: entered promiscuous mode [ 549.248763][ T7668] hsr_slave_0: left promiscuous mode [ 549.254419][T14764] usb 4-1: device descriptor read/64, error -71 [ 549.265783][ T7668] hsr_slave_1: left promiscuous mode [ 549.273757][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.281731][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.292008][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.303514][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.320408][ T7668] veth1_macvtap: left promiscuous mode [ 549.326227][ T7668] veth0_macvtap: left promiscuous mode [ 549.332037][ T7668] veth1_vlan: left promiscuous mode [ 549.338143][ T7668] veth0_vlan: left promiscuous mode [ 549.454776][ T9] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 549.504925][T14764] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 549.616958][ T9] usb 7-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 549.635117][ T9] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 549.643444][T14764] usb 4-1: device descriptor read/64, error -71 [ 549.651871][ T9] usb 7-1: Product: syz [ 549.659456][ T9] usb 7-1: Manufacturer: syz [ 549.667243][ T9] usb 7-1: SerialNumber: syz [ 549.681168][ T9] usb 7-1: config 0 descriptor?? [ 549.741490][ T7668] team0 (unregistering): Port device team_slave_1 removed [ 549.752724][T14764] usb usb4-port1: attempt power cycle [ 549.770705][ T7668] team0 (unregistering): Port device team_slave_0 removed [ 549.911767][T21797] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.919165][T21797] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.930391][T21797] bridge_slave_1: entered allmulticast mode [ 549.937979][T21797] bridge_slave_1: entered promiscuous mode [ 549.988946][ T9] peak_usb 7-1:0.0: PEAK-System PCAN-Chip USB v135 fw v211.0.0 (1 channels) [ 550.087246][T21797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.118765][T14764] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 550.146666][T21797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.175501][T14764] usb 4-1: device descriptor read/8, error -71 [ 550.199838][ T9] peak_usb 7-1:0.0 can0: sending command failure: -8 [ 550.212052][ T9] peak_usb 7-1:0.0 can0: sending command failure: -8 [ 550.221512][ T9] peak_usb 7-1:0.0 can0: sending command failure: -8 [ 550.385851][T21797] team0: Port device team_slave_0 added [ 550.427068][T21797] team0: Port device team_slave_1 added [ 550.435317][ T9] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -8 [ 550.442558][T14764] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 550.490894][T14764] usb 4-1: device descriptor read/8, error -71 [ 550.593253][T14764] usb usb4-port1: unable to enumerate USB device [ 550.594602][ T5913] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 550.676088][T21797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.676110][T21797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.676139][T21797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.678102][T21797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.678119][T21797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.678147][T21797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.803414][ T5913] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 550.803455][ T5913] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 550.803497][ T5913] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 550.803523][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.809356][T22028] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 550.815288][ T5913] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 550.901871][T21797] hsr_slave_0: entered promiscuous mode [ 550.921358][T21797] hsr_slave_1: entered promiscuous mode [ 550.922110][T21797] debugfs: 'hsr0' already exists in 'hsr' [ 550.922134][T21797] Cannot create hsr debugfs directory [ 551.064732][ T5913] usb 2-1: USB disconnect, device number 110 [ 551.154136][ T5827] Bluetooth: hci1: command tx timeout [ 551.586671][T21797] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 551.601508][T21797] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 551.627175][T21797] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 551.656876][T21797] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 551.860471][T14764] usb 7-1: USB disconnect, device number 12 [ 552.297526][T21797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.486184][T21797] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.582422][T14764] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 552.591580][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.598786][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.687235][T22310] loop2: detected capacity change from 0 to 7 [ 552.705383][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.712606][ T7673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.727815][T22310] Dev loop2: unable to read RDB block 7 [ 552.765448][T22310] loop2: unable to read partition table [ 552.788936][T22310] loop2: partition table beyond EOD, truncated [ 552.803477][T14764] usb 4-1: Using ep0 maxpacket: 16 [ 552.813158][T22310] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 552.833054][T14764] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.850285][T21797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 552.880566][T14764] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.932013][T14764] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 552.965505][T14764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.995080][T14764] usb 4-1: Product: syz [ 552.999352][T14764] usb 4-1: Manufacturer: syz [ 553.024455][T14764] usb 4-1: SerialNumber: syz [ 553.058165][T21797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.233514][ T5827] Bluetooth: hci1: command tx timeout [ 553.555516][T14764] usb 4-1: 0:2 : does not exist [ 553.790214][T21797] veth0_vlan: entered promiscuous mode [ 553.848903][T21797] veth1_vlan: entered promiscuous mode [ 553.957190][T14764] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 553.987062][T21797] veth0_macvtap: entered promiscuous mode [ 554.157547][T21797] veth1_macvtap: entered promiscuous mode [ 554.356075][T21797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.370950][T14764] usb 4-1: USB disconnect, device number 118 [ 554.415895][T21797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.465275][ T63] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.486075][ T63] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.516772][ T63] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.533365][ T63] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.800897][T19979] udevd[19979]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.031691][ T7666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.060660][ T7666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.213928][ T7673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.221885][ T7673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.302804][ T796] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 555.312712][ T5827] Bluetooth: hci1: command tx timeout [ 555.463069][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 555.497486][ T796] usb 4-1: unable to get BOS descriptor or descriptor too short [ 555.536823][ T796] usb 4-1: config 3 has an invalid interface number: 41 but max is 0 [ 555.575322][T22334] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1591'. [ 555.587137][ T796] usb 4-1: config 3 has no interface number 0 [ 555.632912][ T796] usb 4-1: config 3 interface 41 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 555.796185][ T796] usb 4-1: config 3 interface 41 has no altsetting 0 [ 555.814895][ T796] usb 4-1: New USB device found, idVendor=12d1, idProduct=3e5b, bcdDevice=d8.4b [ 555.842737][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.148952][ T796] usb 4-1: Product: syz [ 556.172864][ T796] usb 4-1: Manufacturer: syz [ 556.204862][ T796] usb 4-1: SerialNumber: syz [ 556.474469][ T796] qmi_wwan 4-1:3.41: More than one union descriptor, skipping ... [ 556.493256][ T796] qmi_wwan 4-1:3.41: probe with driver qmi_wwan failed with error -22 [ 556.524454][ T796] usb 4-1: USB disconnect, device number 119 [ 556.582405][T14764] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 556.829653][T14764] usb 7-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 556.859912][T14764] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 556.920469][T14764] usb 7-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 556.955025][T14764] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.965367][T22426] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 556.994927][T14764] usb 7-1: config 0 descriptor?? [ 558.064676][T14764] usb 7-1: can't set config #0, error -71 [ 558.133017][ T796] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 558.151354][T14764] usb 7-1: USB disconnect, device number 13 [ 558.243705][T19993] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 558.294547][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 558.315694][ T796] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 558.333304][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.345272][ T796] usb 2-1: Product: syz [ 558.349498][ T796] usb 2-1: Manufacturer: syz [ 558.383516][ T796] usb 2-1: SerialNumber: syz [ 558.404207][T19993] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 558.413020][T19993] usb 4-1: config 0 has no interface number 0 [ 558.441977][ T796] usb 2-1: config 0 descriptor?? [ 558.461094][T19993] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 558.499147][T19993] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 558.545048][T19993] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 558.566794][T19993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.628660][T19993] usb 4-1: Product: syz [ 558.663839][T19993] usb 4-1: Manufacturer: syz [ 558.684419][T22473] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1607'. [ 558.703863][ T796] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 558.718553][T19993] usb 4-1: SerialNumber: syz [ 558.757925][T19993] usb 4-1: config 0 descriptor?? [ 558.770473][T19993] ums-karma 4-1:0.46: USB Mass Storage device detected [ 558.840703][T19993] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5 [ 558.988947][T14764] usb 4-1: USB disconnect, device number 120 [ 559.341312][ T796] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 559.406078][ T796] usb 2-1: USB disconnect, device number 111 [ 559.441815][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 559.441834][ T30] audit: type=1326 audit(1772542940.914:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.6.1608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45e019c799 code=0x0 [ 560.215242][T22543] loop8: detected capacity change from 0 to 7 [ 560.341819][T22543] Dev loop8: unable to read RDB block 7 [ 560.349929][ T796] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 560.358105][T22543] loop8: unable to read partition table [ 560.389394][T22543] loop8: partition table beyond EOD, truncated [ 560.416251][T22543] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 560.462340][T17996] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 560.534077][ T796] usb 7-1: Using ep0 maxpacket: 8 [ 560.571115][ T796] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 560.783940][T17996] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.796709][T17996] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.810795][T17996] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 560.864555][T17996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 560.903595][T17996] usb 8-1: SerialNumber: syz [ 560.969624][ T796] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 560.989821][ T796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.015270][T17996] usb 8-1: 0:2 : does not exist [ 561.030525][ T796] usb 7-1: Product: syz [ 561.042935][ T796] usb 7-1: Manufacturer: syz [ 561.072962][ T796] usb 7-1: SerialNumber: syz [ 561.104181][ T796] usb 7-1: config 0 descriptor?? [ 561.113173][T22568] FAULT_INJECTION: forcing a failure. [ 561.113173][T22568] name failslab, interval 1, probability 0, space 0, times 0 [ 561.155710][ T796] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 561.160336][T22568] CPU: 1 UID: 0 PID: 22568 Comm: syz.0.1615 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.160431][T22568] Tainted: [L]=SOFTLOCKUP [ 561.160463][T22568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.160502][T22568] Call Trace: [ 561.160525][T22568] [ 561.160548][T22568] dump_stack_lvl+0xe8/0x150 [ 561.160652][T22568] should_fail_ex+0x412/0x560 [ 561.160737][T22568] should_failslab+0xa8/0x100 [ 561.160820][T22568] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 561.160898][T22568] ? __alloc_skb+0x186/0x7d0 [ 561.161107][T22568] ? __alloc_skb+0x1d0/0x7d0 [ 561.161194][T22568] ? __local_bh_enable_ip+0xd0/0x130 [ 561.161316][T22568] __alloc_skb+0x1d0/0x7d0 [ 561.161419][T22568] alloc_skb_with_frags+0xca/0x890 [ 561.161546][T22568] ? __lock_acquire+0x6b5/0x2cf0 [ 561.161625][T22568] ? __lock_acquire+0x6b5/0x2cf0 [ 561.161700][T22568] sock_alloc_send_pskb+0x878/0x990 [ 561.161777][T22568] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 561.161899][T22568] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 561.161970][T22568] ? dev_get_by_index+0x22/0x2e0 [ 561.162060][T22568] ? dev_get_by_index+0x22/0x2e0 [ 561.162135][T22568] packet_sendmsg+0x33e5/0x50f0 [ 561.162231][T22568] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 561.162313][T22568] ? __lock_acquire+0x6b5/0x2cf0 [ 561.162347][T22568] ? __lock_acquire+0x6b5/0x2cf0 [ 561.162390][T22568] ? aa_sk_perm+0x6d5/0x900 [ 561.162412][T22568] ? __pfx_packet_sendmsg+0x10/0x10 [ 561.162457][T22568] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 561.162517][T22568] ? aa_sock_msg_perm+0xf1/0x1b0 [ 561.162570][T22568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.162615][T22568] __sys_sendto+0x709/0x7a0 [ 561.162671][T22568] ? __pfx___sys_sendto+0x10/0x10 [ 561.162698][T22568] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 561.162734][T22568] ? __fget_files+0x3a0/0x420 [ 561.162776][T22568] ? ksys_write+0x242/0x270 [ 561.162801][T22568] ? __pfx_ksys_write+0x10/0x10 [ 561.162828][T22568] __x64_sys_sendto+0xde/0x100 [ 561.162860][T22568] do_syscall_64+0x14d/0xf80 [ 561.162879][T22568] ? trace_irq_disable+0x3b/0x150 [ 561.162908][T22568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.162928][T22568] ? clear_bhb_loop+0x40/0x90 [ 561.162952][T22568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.162972][T22568] RIP: 0033:0x7fc7b2f9c799 [ 561.162992][T22568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.163010][T22568] RSP: 002b:00007fc7b3f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 561.163032][T22568] RAX: ffffffffffffffda RBX: 00007fc7b3215fa0 RCX: 00007fc7b2f9c799 [ 561.163047][T22568] RDX: 000000000000000d RSI: 0000200000000300 RDI: 0000000000000003 [ 561.163061][T22568] RBP: 00007fc7b3f37090 R08: 00002000000000c0 R09: 0000000000000014 [ 561.163074][T22568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.163087][T22568] R13: 00007fc7b3216038 R14: 00007fc7b3215fa0 R15: 00007fc7b333fa48 [ 561.163120][T22568] [ 561.570660][T22573] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1613'. [ 561.614166][T22573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.641532][T22573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.907718][ T30] audit: type=1800 audit(1772542943.384:1545): pid=22580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1618" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 562.261604][ T796] gspca_zc3xx: reg_w_i err -110 [ 562.314556][T22588] loop2: detected capacity change from 0 to 7 [ 562.326901][T14472] Dev loop2: unable to read RDB block 7 [ 562.333534][T14472] loop2: unable to read partition table [ 562.339434][T14472] loop2: partition table beyond EOD, truncated [ 562.391510][T22588] Dev loop2: unable to read RDB block 7 [ 562.522087][T22588] loop2: unable to read partition table [ 562.531855][T22588] loop2: partition table beyond EOD, truncated [ 562.539780][T22588] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 562.862676][T14764] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 562.863778][ T796] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 563.012890][ T796] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 563.046267][T14764] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.058508][T14764] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 563.064674][ T5913] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 563.081805][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.088873][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.104999][ T796] usb 7-1: USB disconnect, device number 14 [ 563.228746][T14764] usb 1-1: config 1 has no interface number 1 [ 563.255842][T14764] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 563.306661][T14764] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 563.333763][T22632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1623'. [ 563.398374][T14764] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 563.416855][T17996] usb 8-1: USB disconnect, device number 2 [ 563.432859][T14764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.435234][T22632] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 563.485788][T14764] usb 1-1: Product: syz [ 563.511725][T14764] usb 1-1: Manufacturer: syz [ 563.541443][T14764] usb 1-1: SerialNumber: syz [ 563.566519][T19979] udevd[19979]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.594700][T22594] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 563.832392][T22594] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 563.846412][T22594] SET target dimension over the limit! [ 564.141135][T14764] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 564.166502][T14764] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 564.302918][T14764] usb 1-1: USB disconnect, device number 107 [ 564.387273][T12773] udevd[12773]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.509344][T22690] FAULT_INJECTION: forcing a failure. [ 564.509344][T22690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.573181][T22690] CPU: 1 UID: 0 PID: 22690 Comm: syz.1.1627 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.573214][T22690] Tainted: [L]=SOFTLOCKUP [ 564.573223][T22690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 564.573236][T22690] Call Trace: [ 564.573245][T22690] [ 564.573255][T22690] dump_stack_lvl+0xe8/0x150 [ 564.573299][T22690] should_fail_ex+0x412/0x560 [ 564.573332][T22690] _copy_from_user+0x2d/0xb0 [ 564.573364][T22690] kstrtouint_from_user+0xd6/0x180 [ 564.573472][T22690] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 564.573517][T22690] proc_fail_nth_write+0x8e/0x210 [ 564.573547][T22690] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 564.573590][T22690] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 564.573621][T22690] vfs_write+0x29a/0xb90 [ 564.573653][T22690] ? __pfx_vfs_write+0x10/0x10 [ 564.573676][T22690] ? __fget_files+0x2a/0x420 [ 564.573710][T22690] ? __fget_files+0x3a0/0x420 [ 564.573739][T22690] ? __fget_files+0x2a/0x420 [ 564.573777][T22690] ksys_write+0x150/0x270 [ 564.573802][T22690] ? __pfx_ksys_write+0x10/0x10 [ 564.573836][T22690] do_syscall_64+0x14d/0xf80 [ 564.573856][T22690] ? trace_irq_disable+0x3b/0x150 [ 564.573886][T22690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.573907][T22690] ? clear_bhb_loop+0x40/0x90 [ 564.573932][T22690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.573954][T22690] RIP: 0033:0x7f6be435cfce [ 564.573973][T22690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 564.573991][T22690] RSP: 002b:00007f6be51d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 564.574014][T22690] RAX: ffffffffffffffda RBX: 00007f6be51d56c0 RCX: 00007f6be435cfce [ 564.574029][T22690] RDX: 0000000000000001 RSI: 00007f6be51d50a0 RDI: 0000000000000005 [ 564.574042][T22690] RBP: 00007f6be51d5090 R08: 0000000000000000 R09: 0000000000000000 [ 564.574055][T22690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.574068][T22690] R13: 00007f6be4616038 R14: 00007f6be4615fa0 R15: 00007f6be473fa48 [ 564.574101][T22690] [ 565.571408][T22721] misc userio: No port type given on /dev/userio [ 565.610162][T22721] misc userio: Begin command sent, but we're already running [ 565.794175][T14764] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 565.942339][ T5912] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 566.103545][ T5912] usb 4-1: device descriptor read/64, error -71 [ 566.262787][ T5913] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 566.343109][ T5912] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 566.427461][ T5913] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.437435][T22759] tipc: Started in network mode [ 566.482839][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.502355][T22759] tipc: Node identity e66f02ac2b28, cluster identity 4711 [ 566.504023][ T5913] usb 1-1: Product: syz [ 566.509931][ T5912] usb 4-1: device descriptor read/64, error -71 [ 566.533410][T22759] tipc: Enabled bearer , priority 0 [ 566.547033][ T5913] usb 1-1: Manufacturer: syz [ 566.549008][T22766] syzkaller0: entered promiscuous mode [ 566.567521][ T5913] usb 1-1: SerialNumber: syz [ 566.572933][T22766] syzkaller0: entered allmulticast mode [ 566.609395][T22759] tipc: Resetting bearer [ 566.639018][T22757] tipc: Resetting bearer [ 566.662381][ T5912] usb usb4-port1: attempt power cycle [ 566.669701][T22757] tipc: Disabling bearer [ 566.866532][T22778] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1642'. [ 566.879919][T22779] syzkaller0: entered promiscuous mode [ 566.886397][T22779] syzkaller0: entered allmulticast mode [ 566.923793][T22779] tipc: Enabled bearer , priority 0 [ 566.995333][T22777] tipc: Resetting bearer [ 567.022425][ T5912] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 567.023555][T22777] tipc: Disabling bearer [ 567.043069][ T5912] usb 4-1: device descriptor read/8, error -71 [ 567.238642][T22792] FAULT_INJECTION: forcing a failure. [ 567.238642][T22792] name failslab, interval 1, probability 0, space 0, times 0 [ 567.270318][T22792] CPU: 1 UID: 0 PID: 22792 Comm: syz.6.1644 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.270353][T22792] Tainted: [L]=SOFTLOCKUP [ 567.270361][T22792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 567.270374][T22792] Call Trace: [ 567.270384][T22792] [ 567.270394][T22792] dump_stack_lvl+0xe8/0x150 [ 567.270430][T22792] should_fail_ex+0x412/0x560 [ 567.270473][T22792] should_failslab+0xa8/0x100 [ 567.270502][T22792] __kmalloc_noprof+0xe8/0x760 [ 567.270526][T22792] ? iovec_from_user+0x87/0x250 [ 567.270562][T22792] iovec_from_user+0x87/0x250 [ 567.270596][T22792] __import_iovec+0x163/0x7e0 [ 567.270630][T22792] ? __asan_memset+0x22/0x50 [ 567.270665][T22792] io_import_rw_buffer+0x453/0x730 [ 567.270816][T22792] ? __pfx_io_import_rw_buffer+0x10/0x10 [ 567.270846][T22792] ? percpu_ref_get_many+0x21/0x1e0 [ 567.270899][T22792] ? percpu_ref_get_many+0x21/0x1e0 [ 567.270937][T22792] io_prep_rwv+0x138/0x440 [ 567.270969][T22792] ? __pfx_io_prep_rwv+0x10/0x10 [ 567.271001][T22792] ? __asan_memset+0x22/0x50 [ 567.271032][T22792] ? blk_start_plug_nr_ios+0x7e/0x1c0 [ 567.271096][T22792] io_submit_sqes+0xb35/0x2370 [ 567.271158][T22792] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 567.271192][T22792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 567.271220][T22792] ? __fget_files+0x3a0/0x420 [ 567.271253][T22792] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 567.271282][T22792] ? fput+0xa0/0xd0 [ 567.271311][T22792] ? ksys_write+0x242/0x270 [ 567.271336][T22792] ? __pfx_ksys_write+0x10/0x10 [ 567.271363][T22792] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 567.271396][T22792] do_syscall_64+0x14d/0xf80 [ 567.271416][T22792] ? trace_irq_disable+0x3b/0x150 [ 567.271445][T22792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.271477][T22792] ? clear_bhb_loop+0x40/0x90 [ 567.271504][T22792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.271525][T22792] RIP: 0033:0x7f45e019c799 [ 567.271545][T22792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.271564][T22792] RSP: 002b:00007f45e1030028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 567.271586][T22792] RAX: ffffffffffffffda RBX: 00007f45e0415fa0 RCX: 00007f45e019c799 [ 567.271608][T22792] RDX: 0000000000002000 RSI: 00000000000847ba RDI: 0000000000000004 [ 567.271621][T22792] RBP: 00007f45e1030090 R08: 0000000000000000 R09: 0000000000000000 [ 567.271633][T22792] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 567.271646][T22792] R13: 00007f45e0416038 R14: 00007f45e0415fa0 R15: 00007f45e053fa48 [ 567.271681][T22792] [ 567.493919][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 567.503531][ T5912] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 567.564888][ T5912] usb 4-1: device descriptor read/8, error -71 [ 567.625347][ T5913] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 567.753052][ T5912] usb usb4-port1: unable to enumerate USB device [ 568.041494][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 568.057751][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 568.076732][ T5913] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 568.101488][ T9] usb 8-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 568.128643][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.143961][ T9] usb 8-1: Product: syz [ 568.154337][ T9] usb 8-1: Manufacturer: syz [ 568.159049][ T9] usb 8-1: SerialNumber: syz [ 568.191132][ T9] usb 8-1: config 0 descriptor?? [ 568.403407][ T9] usb 1-1: USB disconnect, device number 108 [ 568.439568][ T9] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 568.448868][T22793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.449292][T22793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.462753][ T5912] usb 8-1: USB disconnect, device number 4 [ 569.045644][ T9] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 569.224241][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 569.255616][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.427701][ T9] usb 2-1: Product: syz [ 569.441208][ T9] usb 2-1: Manufacturer: syz [ 569.697567][ T9] usb 2-1: SerialNumber: syz [ 569.858150][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 569.884465][T19993] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 570.371278][ T30] audit: type=1326 audit(1772542951.844:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1e99c799 code=0x7ffc0000 [ 570.409654][T22890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1653'. [ 570.429604][ T30] audit: type=1326 audit(1772542951.854:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1e99c799 code=0x7ffc0000 [ 570.529431][ T30] audit: type=1326 audit(1772542951.884:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2c1e99c799 code=0x7ffc0000 [ 570.598214][ T30] audit: type=1326 audit(1772542951.884:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1e99c799 code=0x7ffc0000 [ 570.822310][ T5912] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 570.859440][ T30] audit: type=1326 audit(1772542951.884:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c1e99c799 code=0x7ffc0000 [ 570.950537][ T9] usb 2-1: USB disconnect, device number 113 [ 570.992440][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 571.000688][T19993] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 571.010534][ T30] audit: type=1326 audit(1772542951.884:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1e99c799 code=0x7ffc0000 [ 571.010953][T19993] ath9k_htc: Failed to initialize the device [ 571.071081][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 571.136909][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 571.167813][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 571.205728][ T30] audit: type=1326 audit(1772542951.884:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2c1e99c799 code=0x7ffc0000 [ 571.244612][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 571.273961][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 571.284505][ T30] audit: type=1326 audit(1772542951.884:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1e99c799 code=0x7ffc0000 [ 571.307308][ T30] audit: type=1326 audit(1772542951.884:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2c1e99c799 code=0x7ffc0000 [ 571.343793][ T5912] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 571.353427][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.361950][ T30] audit: type=1326 audit(1772542951.884:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.3.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1e99c799 code=0x7ffc0000 [ 571.395239][ T5912] usb 4-1: Product: syz [ 571.407391][ T5912] usb 4-1: Manufacturer: syz [ 571.465254][ T5912] usb 4-1: SerialNumber: syz [ 571.484926][ T5912] usb 4-1: config 0 descriptor?? [ 571.666552][ T5912] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 571.963896][T22892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.016236][T22892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.932363][T14764] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 573.102730][T14764] usb 2-1: Using ep0 maxpacket: 16 [ 573.129540][T14764] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 573.191263][T14764] usb 2-1: config 0 has no interface number 0 [ 573.230822][T14764] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 573.268114][T14764] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 573.330308][T14764] usb 2-1: config 0 interface 48 has no altsetting 0 [ 573.359078][T14764] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 573.378723][T14764] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 573.397466][T14764] usb 2-1: Product: syz [ 573.401707][T14764] usb 2-1: Manufacturer: syz [ 573.435031][ T5912] usb 4-1: USB disconnect, device number 125 [ 573.492278][T14764] usb 2-1: SerialNumber: syz [ 573.504605][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 573.533328][T14764] usb 2-1: config 0 descriptor?? [ 573.702878][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 573.711049][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 573.738486][ T9] usb 7-1: config 0 has no interface number 0 [ 573.793143][ T9] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 573.839998][ T9] usb 7-1: config 0 interface 1 has no altsetting 0 [ 573.924334][ T9] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 573.947514][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.981231][ T9] usb 7-1: Product: syz [ 574.021958][ T9] usb 7-1: Manufacturer: syz [ 574.034243][ T9] usb 7-1: SerialNumber: syz [ 574.069864][ T9] usb 7-1: config 0 descriptor?? [ 574.103691][T23010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.118733][T14764] usb 2-1: USB disconnect, device number 114 [ 574.148039][T23010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.341884][ T9] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 574.354267][ T5912] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 574.426968][ T9] cx231xx 7-1:0.1: Failed to read PCB config [ 574.456209][ T9] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 574.536496][ T9] usb 7-1: USB disconnect, device number 15 [ 574.830879][T23052] xt_limit: Overflow, try lower: 268435456/134217728 [ 574.922831][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 575.107435][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 575.133121][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 575.174028][ T9] usb 7-1: config 0 has no interface number 0 [ 575.200287][ T9] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 575.235879][ T9] usb 7-1: config 0 interface 1 has no altsetting 0 [ 575.257768][ T9] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 575.292846][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.311199][ T9] usb 7-1: Product: syz [ 575.321368][ T9] usb 7-1: Manufacturer: syz [ 575.332838][ T9] usb 7-1: SerialNumber: syz [ 575.353554][ T9] usb 7-1: config 0 descriptor?? [ 575.661650][ T9] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 575.783044][ T9] cx231xx 7-1:0.1: Failed to read PCB config [ 575.789185][ T796] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 575.797225][ T9] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -110 [ 575.904536][T22968] netlink: 'syz.6.1663': attribute type 1 has an invalid length. [ 575.938272][T22968] netlink: 'syz.6.1663': attribute type 2 has an invalid length. [ 575.947833][ T796] usb 1-1: device descriptor read/64, error -71 [ 576.005800][T22968] netlink: 'syz.6.1663': attribute type 1 has an invalid length. [ 576.040340][T22968] netlink: 'syz.6.1663': attribute type 2 has an invalid length. [ 576.188716][T23108] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1677'. [ 576.215833][ T796] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 576.237514][T23108] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1677'. [ 576.390269][T23108] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1677'. [ 576.405666][ T796] usb 1-1: device descriptor read/64, error -71 [ 576.421244][T23108] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1677'. [ 576.526411][ T796] usb usb1-port1: attempt power cycle [ 576.556850][T23108] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1677'. [ 576.582112][T23108] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1677'. [ 576.636816][T23123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1679'. [ 576.675345][T23113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1675'. [ 576.711128][T23125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.873162][ T796] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 576.933945][ T796] usb 1-1: device descriptor read/8, error -71 [ 577.062856][T19993] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 577.182807][ T796] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 577.203550][ T796] usb 1-1: device descriptor read/8, error -71 [ 577.234449][T19993] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 577.252869][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 577.260723][T19993] usb 4-1: config 0 has no interface number 0 [ 577.271703][T19993] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 577.292804][T19993] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 577.294289][ T5912] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 577.308907][T19993] usb 4-1: config 0 interface 113 has no altsetting 0 [ 577.320425][ T796] usb usb1-port1: unable to enumerate USB device [ 577.347023][T19993] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 577.367062][T19993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.382758][T19993] usb 4-1: Product: syz [ 577.393364][T19993] usb 4-1: Manufacturer: syz [ 577.402827][T19993] usb 4-1: SerialNumber: syz [ 577.419307][T19993] usb 4-1: config 0 descriptor?? [ 577.458202][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.480288][ C0] usb 4-1: NFC: Urb failure (status -71) [ 577.494761][T19993] usb 4-1: NFC: Unable to get FW version [ 577.494761][ T5912] usb 2-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 577.494787][ T5912] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.504217][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.523166][T14764] usb 7-1: USB disconnect, device number 16 [ 577.537326][T19993] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 577.588612][ T9] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 577.592638][ T5912] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 577.599886][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.625603][ T9] usb 8-1: Product: syz [ 577.630077][ T9] usb 8-1: Manufacturer: syz [ 577.654338][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.680706][ T9] usb 8-1: SerialNumber: syz [ 577.696605][ T9] usb 8-1: config 0 descriptor?? [ 577.720434][ T5912] usb 2-1: config 0 descriptor?? [ 577.731658][T23162] loop5: detected capacity change from 0 to 7 [ 578.094992][T23174] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 578.218624][T23185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.268978][T23190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.285228][T23190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.315506][ T5912] usb 8-1: USB disconnect, device number 5 [ 578.400702][T23201] kAFS: unable to lookup cell '(,c¾Ì' [ 578.949701][T23211] binder: 23209:23211 ioctl c0306201 2000000003c0 returned -14 [ 579.230732][T14764] usb 2-1: USB disconnect, device number 115 [ 579.623784][T23225] loop2: detected capacity change from 0 to 7 [ 579.644938][T12590] Dev loop2: unable to read RDB block 7 [ 579.678670][T12590] loop2: unable to read partition table [ 579.699128][T12590] loop2: partition table beyond EOD, truncated [ 579.728270][T23225] Dev loop2: unable to read RDB block 7 [ 579.736008][T23225] loop2: unable to read partition table [ 579.776257][T17996] usb 4-1: USB disconnect, device number 127 [ 579.791898][T23225] loop2: partition table beyond EOD, truncated [ 579.840303][T23225] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 580.021595][T23251] binder: 23244:23251 ioctl c0306201 200000000280 returned -14 [ 580.083050][T14764] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 580.272364][T14764] usb 8-1: Using ep0 maxpacket: 16 [ 580.282347][T17996] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 580.302734][T14764] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 580.312137][T14764] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.362698][T14764] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.417986][T14764] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.469356][T17996] usb 4-1: Using ep0 maxpacket: 16 [ 580.479766][T14764] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.503447][T17996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.522831][T14764] usb 8-1: Product: syz [ 580.529998][T14764] usb 8-1: Manufacturer: syz [ 580.536495][T17996] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 580.550573][T14764] usb 8-1: SerialNumber: syz [ 580.572369][T17996] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 580.596770][ T29] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 580.607550][T17996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.639689][T17996] usb 4-1: config 0 descriptor?? [ 580.762741][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 580.783289][ T29] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.806917][ T29] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.817512][ T29] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 580.831608][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 580.839977][ T29] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 580.850080][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.873754][ T29] usb 1-1: config 0 descriptor?? [ 581.015374][T14764] usb 8-1: 0:2 : does not exist [ 581.033293][T14764] usb 8-1: 1:0: cannot get min/max values for control 4 (id 1) [ 581.076128][T17996] hid_parser_main: 8 callbacks suppressed [ 581.076153][T17996] pantherlord 0003:0810:0002.0012: unknown main item tag 0x0 [ 581.112577][T17996] pantherlord 0003:0810:0002.0012: unknown main item tag 0x0 [ 581.131849][T17996] pantherlord 0003:0810:0002.0012: unknown main item tag 0x0 [ 581.145756][T17996] pantherlord 0003:0810:0002.0012: unknown main item tag 0x0 [ 581.162933][T14764] usb 8-1: USB disconnect, device number 6 [ 581.173556][T17996] pantherlord 0003:0810:0002.0012: unknown main item tag 0x0 [ 581.199995][T17996] pantherlord 0003:0810:0002.0012: unknown main item tag 0x0 [ 581.210859][T19979] udevd[19979]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.237205][T17996] pantherlord 0003:0810:0002.0012: unknown main item tag 0x0 [ 581.251196][T17996] pantherlord 0003:0810:0002.0012: unknown main item tag 0x0 [ 581.261252][T17996] pantherlord 0003:0810:0002.0012: unknown main item tag 0x0 [ 581.273624][T17996] pantherlord 0003:0810:0002.0012: unknown main item tag 0x0 [ 581.297837][T17996] pantherlord 0003:0810:0002.0012: hidraw0: USB HID v0.08 Device [HID 0810:0002] on usb-dummy_hcd.3-1/input0 [ 581.327880][T17996] pantherlord 0003:0810:0002.0012: no output reports found [ 581.350159][ T29] usbhid 1-1:0.0: can't add hid device: -71 [ 581.366518][T17996] usb 4-1: USB disconnect, device number 2 [ 581.374070][ T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 581.416781][ T29] usb 1-1: USB disconnect, device number 113 [ 581.465413][T23334] fido_id[23334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 582.092420][T17996] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 582.122400][ T29] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 582.262524][T17996] usb 7-1: Using ep0 maxpacket: 8 [ 582.353617][T17996] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 582.368581][T23386] loop2: detected capacity change from 0 to 7 [ 582.372432][T17996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.383623][ T29] usb 2-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 582.396624][T23386] Dev loop2: unable to read RDB block 7 [ 582.403769][ T29] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.403806][T23386] loop2: unable to read partition table [ 582.437312][ T29] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 582.449263][T23386] loop2: partition table beyond EOD, truncated [ 582.471675][T23386] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 582.496957][T17996] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 582.510536][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.856172][T17996] input: xirlink-cit as /devices/platform/dummy_hcd.6/usb7/7-1/input/input51 [ 582.890281][ T29] usb 2-1: config 0 descriptor?? [ 583.208482][T19993] usb 7-1: USB disconnect, device number 17 [ 583.362910][ T796] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 583.494446][ T796] usb 8-1: device descriptor read/64, error -71 [ 583.742734][ T796] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 583.882933][ T796] usb 8-1: device descriptor read/64, error -71 [ 583.899053][T23453] macvlan1: entered promiscuous mode [ 583.938502][T23453] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 583.993785][ T796] usb usb8-port1: attempt power cycle [ 584.346194][ T796] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 584.373398][ T796] usb 8-1: device descriptor read/8, error -71 [ 584.434094][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 584.462870][ T5823] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 584.589367][T17996] usb 2-1: USB disconnect, device number 116 [ 584.612941][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 584.619378][ T796] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 584.631240][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 584.647137][ T5823] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 584.663283][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.671675][ T796] usb 8-1: device descriptor read/8, error -71 [ 584.681744][ T5823] usb 1-1: Product: syz [ 584.687468][ T5823] usb 1-1: Manufacturer: syz [ 584.693058][ T5823] usb 1-1: SerialNumber: syz [ 584.718067][ T5823] usb 1-1: config 0 descriptor?? [ 584.736831][ T5823] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 584.749020][ T5823] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 584.783334][ T796] usb usb8-port1: unable to enumerate USB device [ 585.092301][T17996] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 585.252302][T17996] usb 2-1: Using ep0 maxpacket: 16 [ 585.260199][T17996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.271465][T17996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.281365][T17996] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 585.294697][T17996] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 585.305079][T17996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.316411][T17996] usb 2-1: config 0 descriptor?? [ 585.324671][ T796] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 585.340744][ T5823] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 585.492887][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 585.500441][ T796] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 585.515110][ T796] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 585.525350][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.538574][ T796] usb 4-1: config 0 descriptor?? [ 585.559702][ T796] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 585.790295][ T5823] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 585.822896][ T5823] em28xx 1-1:0.0: board has no eeprom [ 585.903005][ T5823] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 585.925818][ T5823] em28xx 1-1:0.0: dvb set to bulk mode. [ 585.954356][ T9] em28xx 1-1:0.0: Binding DVB extension [ 585.959342][T17996] usbhid 2-1:0.0: can't add hid device: -71 [ 585.979812][T17996] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 585.993961][ T5823] usb 1-1: USB disconnect, device number 114 [ 586.012760][T17996] usb 2-1: USB disconnect, device number 117 [ 586.025386][ T5823] em28xx 1-1:0.0: Disconnecting em28xx [ 586.126277][ T9] em28xx 1-1:0.0: Registering input extension [ 586.137615][ T5823] em28xx 1-1:0.0: Closing input extension [ 586.178490][ T5823] em28xx 1-1:0.0: Freeing device [ 586.432146][T23543] openvswitch: netlink: IP tunnel dst address not specified [ 586.516551][T23546] loop2: detected capacity change from 0 to 7 [ 586.525555][T23546] Dev loop2: unable to read RDB block 7 [ 586.531922][T23546] loop2: unable to read partition table [ 586.547420][T23546] loop2: partition table beyond EOD, truncated [ 586.564588][T23546] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 587.012886][ T9] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 587.214630][ T9] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 587.235471][ T9] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 587.257880][ T9] usb 2-1: config 8 has no interface number 0 [ 587.278207][ T9] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 587.317607][ T9] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 587.374329][ T9] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 587.405336][ T9] usb 2-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 587.456799][ T9] usb 2-1: config 8 interface 177 has no altsetting 0 [ 587.479791][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 587.519925][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.559801][T23555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 587.806833][ T9] usb 2-1: string descriptor 0 read error: -71 [ 587.834959][ T9] ir_toy 2-1:8.177: required endpoints not found [ 587.868986][ T9] usb 2-1: USB disconnect, device number 118 [ 588.117975][T17996] usb 4-1: USB disconnect, device number 3 [ 588.239583][T23658] binder: 23653:23658 ioctl c0306201 2000000003c0 returned -14 [ 588.512407][ T5912] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 588.620961][T23676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1726'. [ 588.706061][ T5912] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 588.732269][ T5912] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 588.799110][T23681] loop2: detected capacity change from 0 to 7 [ 588.813225][ T5912] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 588.839232][T23681] Dev loop2: unable to read RDB block 7 [ 588.848450][ T5912] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.862870][T23681] loop2: unable to read partition table [ 588.873218][T23681] loop2: partition table beyond EOD, truncated [ 588.880624][T23681] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 588.896284][ T5912] usb 8-1: config 0 descriptor?? [ 589.117014][T23658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.148508][T23658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.176045][ T5912] ath6kl: Failed to submit usb control message: -71 [ 589.183041][ T5912] ath6kl: unable to send the bmi data to the device: -71 [ 589.284851][ T5912] ath6kl: Unable to send get target info: -71 [ 589.316881][ T5912] ath6kl: Failed to init ath6kl core: -71 [ 589.324729][ T5912] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 589.345730][ T5912] usb 8-1: USB disconnect, device number 11 [ 589.602827][ T9] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 589.612506][T14764] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 589.826807][ T9] usb 1-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 589.868294][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 589.898519][ T9] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 589.934417][T14764] usb 7-1: config 0 has an invalid interface number: 118 but max is 0 [ 589.976793][T14764] usb 7-1: config 0 has no interface number 0 [ 589.989130][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.034155][ T9] usb 1-1: config 0 descriptor?? [ 590.059682][T14764] usb 7-1: too many endpoints for config 0 interface 118 altsetting 115: 105, using maximum allowed: 30 [ 590.112027][T14764] usb 7-1: config 0 interface 118 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 590.188507][T14764] usb 7-1: config 0 interface 118 has no altsetting 0 [ 590.232527][T14764] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 590.306418][T14764] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.387325][T14764] usb 7-1: config 0 descriptor?? [ 590.466403][T14764] cp210x 7-1:0.118: cp210x converter detected [ 590.815984][T23747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 591.100194][T23758] netlink: 'syz.3.1732': attribute type 1 has an invalid length. [ 591.502506][ T5912] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 591.731545][ T5912] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 591.765731][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.801445][ T5912] usb 4-1: Product: syz [ 591.819050][ T29] usb 1-1: USB disconnect, device number 115 [ 591.828799][ T5912] usb 4-1: Manufacturer: syz [ 591.865482][ T5912] usb 4-1: SerialNumber: syz [ 591.903722][ T5912] usb 4-1: config 0 descriptor?? [ 592.208150][T23809] tipc: Enabled bearer , priority 0 [ 592.242722][T23809] syzkaller0: entered promiscuous mode [ 592.261453][T23809] syzkaller0: entered allmulticast mode [ 592.365773][T23809] tipc: Resetting bearer [ 592.376790][T23809] x_tables: duplicate underflow at hook 1 [ 592.398578][T23807] tipc: Resetting bearer [ 592.491975][T23807] tipc: Disabling bearer [ 592.521413][T23723] kvm: kvm [23722]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x2000000 [ 592.679541][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 592.679563][ T30] audit: type=1400 audit(1772542974.154:1631): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A61616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 pid=23831 comm="syz.0.1736" [ 593.190184][T14764] cp210x 7-1:0.118: failed to get vendor val 0x370c size 13: -71 [ 593.244980][T14764] cp210x 7-1:0.118: GPIO initialisation failed: -71 [ 593.358021][T14764] usb 7-1: cp210x converter now attached to ttyUSB0 [ 593.394573][ T5912] usb 4-1: Firmware version (0.0) predates our first public release. [ 593.427764][T14764] usb 7-1: USB disconnect, device number 18 [ 593.662867][ T5912] usb 4-1: Please update to version 0.2 or newer [ 593.711731][T14764] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 593.802647][T14764] cp210x 7-1:0.118: device disconnected [ 593.893810][T23860] loop2: detected capacity change from 0 to 7 [ 593.943022][T23860] Dev loop2: unable to read RDB block 7 [ 593.948842][T23860] loop2: unable to read partition table [ 593.996440][T23860] loop2: partition table beyond EOD, truncated [ 594.094938][ T5912] usb 4-1: USB disconnect, device number 4 [ 594.111414][T23860] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 594.213499][ T5192] Dev loop2: unable to read RDB block 7 [ 594.219174][ T5192] loop2: unable to read partition table [ 594.248083][ T5192] loop2: partition table beyond EOD, truncated [ 594.343030][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 594.612894][ T9] usb 8-1: device descriptor read/64, error -71 [ 594.863321][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 595.003090][ T9] usb 8-1: device descriptor read/64, error -71 [ 595.042305][ T5823] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 595.113227][ T9] usb usb8-port1: attempt power cycle [ 595.212867][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 595.220333][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.258868][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.288613][ T5823] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 595.321821][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.366483][ T5823] usb 1-1: config 0 descriptor?? [ 595.454095][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 595.496727][ T9] usb 8-1: device descriptor read/8, error -71 [ 595.601171][ T5823] usbhid 1-1:0.0: can't add hid device: -71 [ 595.616758][ T5823] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 595.716785][ T5823] usb 1-1: USB disconnect, device number 116 [ 595.742896][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 595.773691][ T9] usb 8-1: device descriptor read/8, error -71 [ 595.895173][ T9] usb usb8-port1: unable to enumerate USB device [ 595.927031][T23924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.952774][T23924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.972108][T23924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.984359][T23924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.153586][ T5823] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 596.183560][ T9] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 596.314600][T23951] xt_hashlimit: size too large, truncated to 1048576 [ 596.344679][ T9] usb 2-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 596.369910][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 596.390314][ T9] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 596.400625][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.414024][ T9] usb 2-1: config 0 descriptor?? [ 596.582400][ T5823] usb 4-1: device descriptor read/64, error -71 [ 596.832862][ T5823] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 596.998516][ T5823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.033308][ T5823] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 597.043602][ T5823] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 597.056074][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.094474][ T5823] usb 4-1: config 0 descriptor?? [ 597.343071][T23975] syzkaller0: entered promiscuous mode [ 597.360284][T23975] syzkaller0: entered allmulticast mode [ 597.530812][ T5823] Bluetooth: Can't get state to change to load configuration err [ 597.545851][ T5823] Bluetooth: Loading sysconfig file failed [ 597.552164][ T5823] ath3k 4-1:0.0: probe with driver ath3k failed with error -16 [ 597.598150][ T5823] usb 4-1: USB disconnect, device number 6 [ 597.700812][ T9] usb 2-1: USB disconnect, device number 119 [ 597.870611][T24006] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1752'. [ 598.142731][ T9] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 598.479405][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 598.516734][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 598.706441][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 598.732112][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.770649][ T9] usb 1-1: Product: syz [ 598.821881][ T9] usb 1-1: Manufacturer: syz [ 598.850081][ T9] usb 1-1: SerialNumber: syz [ 598.876126][ T9] usb 1-1: config 0 descriptor?? [ 598.941373][ T9] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 599.671167][ T9] usb 1-1: USB disconnect, device number 117 [ 599.810640][T12590] udevd[12590]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 600.282925][ T9] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 600.445603][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1048, setting to 1024 [ 600.459893][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 600.478511][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice= 0.40 [ 600.489807][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.629916][ T9] usb 1-1: Product: syz [ 600.683335][ T9] usb 1-1: Manufacturer: syz [ 600.689410][ T9] usb 1-1: SerialNumber: syz [ 600.958292][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.977840][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 601.010853][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 601.029367][ T9] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 601.174951][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 601.427013][ T9] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 601.499278][ T9] usb 1-1: USB disconnect, device number 118 [ 706.602159][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 706.609184][ C1] rcu: 0-...!: (0 ticks this GP) idle=68a4/1/0x4000000000000000 softirq=88362/88362 fqs=0 [ 706.620407][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9/1:b..l [ 706.628120][ C1] rcu: (detected by 1, t=10502 jiffies, g=87037, q=643 ncpus=2) [ 706.635878][ C1] Sending NMI from CPU 1 to CPUs 0: [ 706.635911][ C0] NMI backtrace for cpu 0 [ 706.635932][ C0] CPU: 0 UID: 0 PID: 24105 Comm: syz.7.1763 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.635956][ C0] Tainted: [L]=SOFTLOCKUP [ 706.635963][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 706.635975][ C0] RIP: 0010:sched_mm_cid_fork+0x56c/0xc80 [ 706.636034][ C0] Code: 00 00 0f b6 c0 41 29 c6 4c 89 e3 e9 64 ff ff ff 49 c7 c5 98 be 1a 8e 49 c1 ed 03 eb 0b 44 89 e0 f7 d8 0f 81 2a fd ff ff f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 50 44 8b [ 706.636049][ C0] RSP: 0018:ffffc90003bf7c78 EFLAGS: 00000887 [ 706.636064][ C0] RAX: 0000000080000000 RBX: 0000000000000002 RCX: dffffc0000000000 [ 706.636077][ C0] RDX: dffffc0000000000 RSI: 0000000000000002 RDI: ffff888033596150 [ 706.636090][ C0] RBP: ffff888033596150 R08: 1ffff110066b2ad9 R09: 0000000000000000 [ 706.636102][ C0] R10: ffff88803359580c R11: fffff5200077ef80 R12: 0000000080000000 [ 706.636115][ C0] R13: 1ffffffff1c357d3 R14: 0000000000000002 R15: ffff8880335955c0 [ 706.636127][ C0] FS: 00007f0ad33166c0(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 706.636143][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 706.636155][ C0] CR2: 00002000002be030 CR3: 000000003e612000 CR4: 00000000003526f0 [ 706.636170][ C0] DR0: 0000000000000000 DR1: 0000000000001000 DR2: 0000000000000000 [ 706.636181][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 706.636193][ C0] Call Trace: [ 706.636202][ C0] [ 706.636216][ C0] bprm_execve+0xda1/0x1460 [ 706.636244][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 706.636264][ C0] ? alloc_bprm+0x508/0x5c0 [ 706.636279][ C0] ? count+0x1cb/0x230 [ 706.636297][ C0] do_execveat_common+0x50d/0x690 [ 706.636320][ C0] __x64_sys_execveat+0xc7/0xf0 [ 706.636340][ C0] do_syscall_64+0x14d/0xf80 [ 706.636359][ C0] ? trace_irq_disable+0x3b/0x150 [ 706.636385][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.636403][ C0] ? clear_bhb_loop+0x40/0x90 [ 706.636423][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.636441][ C0] RIP: 0033:0x7f0ad239c799 [ 706.636459][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.636480][ C0] RSP: 002b:00007f0ad3316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 706.636498][ C0] RAX: ffffffffffffffda RBX: 00007f0ad2615fa0 RCX: 00007f0ad239c799 [ 706.636511][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 706.636522][ C0] RBP: 00007f0ad2432bd9 R08: 0000000000001000 R09: 0000000000000000 [ 706.636533][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.636544][ C0] R13: 00007f0ad2616038 R14: 00007f0ad2615fa0 R15: 00007f0ad273fa48 [ 706.636566][ C0] [ 706.636903][ C1] task:kworker/0:0 state:R running task stack:19880 pid:9 tgid:9 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 706.932187][ C1] Workqueue: usb_hub_wq hub_event [ 706.937367][ C1] Call Trace: [ 706.940675][ C1] [ 706.943659][ C1] __schedule+0x15dd/0x52d0 [ 706.948263][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 706.953254][ C1] ? __pfx___schedule+0x10/0x10 [ 706.958129][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 706.963189][ C1] preempt_schedule_irq+0x4d/0xa0 [ 706.968243][ C1] irqentry_exit+0x599/0x620 [ 706.972960][ C1] ? trace_irq_disable+0x3b/0x150 [ 706.978017][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 706.984030][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 706.989343][ C1] Code: e9 30 ff ff ff e8 d5 ed 0b 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 51 3b 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d ee 5a 73 [ 707.008992][ C1] RSP: 0018:ffffc900000e7408 EFLAGS: 00000282 [ 707.015083][ C1] RAX: b09408cfe9276100 RBX: 0000000000000246 RCX: 0000000000000046 [ 707.023090][ C1] RDX: 000000004fbbe6c3 RSI: ffffffff8e16369b RDI: ffffffff8c27ae80 [ 707.031097][ C1] RBP: 0000000000000000 R08: ffffffff826f1d7c R09: ffffffff8e7602e0 [ 707.039100][ C1] R10: dffffc0000000000 R11: ffffed10036dab25 R12: 0000000000000002 [ 707.047119][ C1] R13: ffffffff8e7602e0 R14: 0000000000000000 R15: 0000000000000000 [ 707.055141][ C1] ? kernfs_root+0x1c/0x230 [ 707.059684][ C1] ? kernfs_root+0x1c/0x230 [ 707.064219][ C1] kernfs_root+0x38/0x230 [ 707.068604][ C1] ? kernfs_root+0x1c/0x230 [ 707.073137][ C1] kernfs_find_ns+0x200/0x490 [ 707.077846][ C1] kernfs_remove_by_name_ns+0x4b/0x130 [ 707.083356][ C1] sysfs_remove_group+0xfc/0x2e0 [ 707.088331][ C1] sysfs_remove_groups+0x54/0xb0 [ 707.093303][ C1] device_remove_attrs+0x1cb/0x280 [ 707.098521][ C1] ? __pfx_device_remove_attrs+0x10/0x10 [ 707.104184][ C1] device_del+0x51f/0x8f0 [ 707.108543][ C1] ? usb_disconnect+0xf8/0x990 [ 707.113335][ C1] ? __pfx_device_del+0x10/0x10 [ 707.118207][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 707.123272][ C1] usb_disable_device+0x3d4/0x8d0 [ 707.128391][ C1] usb_disconnect+0x32f/0x990 [ 707.133118][ C1] hub_event+0x1cc9/0x4f30 [ 707.137583][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 707.142564][ C1] ? __pfx_hub_event+0x10/0x10 [ 707.147385][ C1] ? process_scheduled_works+0xa25/0x1830 [ 707.153154][ C1] ? process_scheduled_works+0xa25/0x1830 [ 707.158911][ C1] process_scheduled_works+0xb02/0x1830 [ 707.164522][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 707.170533][ C1] ? assign_work+0x3d5/0x5e0 [ 707.175168][ C1] worker_thread+0xa50/0xfc0 [ 707.179835][ C1] kthread+0x388/0x470 [ 707.183952][ C1] ? __pfx_worker_thread+0x10/0x10 [ 707.189089][ C1] ? __pfx_kthread+0x10/0x10 [ 707.193707][ C1] ret_from_fork+0x51e/0xb90 [ 707.198356][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 707.203501][ C1] ? __switch_to+0xc7d/0x1450 [ 707.208234][ C1] ? __pfx_kthread+0x10/0x10 [ 707.212844][ C1] ret_from_fork_asm+0x1a/0x30 [ 707.217655][ C1] [ 707.220730][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g87037 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 707.231950][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 707.241948][ C1] rcu: RCU grace-period kthread stack dump: [ 707.247855][ C1] task:rcu_preempt state:R running task stack:26600 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 707.261377][ C1] Call Trace: [ 707.264682][ C1] [ 707.267641][ C1] __schedule+0x15dd/0x52d0 [ 707.272208][ C1] ? __pfx___schedule+0x10/0x10 [ 707.277102][ C1] ? schedule+0x90/0x360 [ 707.281384][ C1] schedule+0x164/0x360 [ 707.285575][ C1] schedule_timeout+0x158/0x2c0 [ 707.290452][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 707.295850][ C1] ? __pfx_process_timeout+0x10/0x10 [ 707.301170][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 707.307002][ C1] ? prepare_to_swait_event+0x340/0x370 [ 707.312573][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 707.317451][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 707.322678][ C1] ? rcu_gp_init+0x1315/0x15b0 [ 707.327471][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 707.332780][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 707.338012][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 707.343849][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 707.348466][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 707.353727][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 707.359565][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 707.364535][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 707.369593][ C1] kthread+0x388/0x470 [ 707.373689][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 707.378999][ C1] ? __pfx_kthread+0x10/0x10 [ 707.383612][ C1] ret_from_fork+0x51e/0xb90 [ 707.388407][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 707.393574][ C1] ? __switch_to+0xc7d/0x1450 [ 707.398275][ C1] ? __pfx_kthread+0x10/0x10 [ 707.402883][ C1] ret_from_fork_asm+0x1a/0x30 [ 707.407693][ C1] [ 707.410731][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 707.417073][ C1] CPU: 1 UID: 0 PID: 20493 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 707.428203][ C1] Tainted: [L]=SOFTLOCKUP [ 707.432640][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 707.442720][ C1] RIP: 0010:smp_call_function_many_cond+0xce5/0x12c0 [ 707.449422][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 74 e2 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 1f de 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 03 de [ 707.469098][ C1] RSP: 0018:ffffc90005567440 EFLAGS: 00000293 [ 707.475204][ C1] RAX: ffffffff81b9b7dd RBX: 1ffff110170c8515 RCX: ffff88807bcdbd00 [ 707.483200][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 707.491196][ C1] RBP: ffffc90005567580 R08: ffffffff90118cb7 R09: 1ffffffff2023196 [ 707.499192][ C1] R10: dffffc0000000000 R11: fffffbfff2023197 R12: ffff8880b86428a8 [ 707.507185][ C1] R13: dffffc0000000000 R14: ffff8880b873bf80 R15: 0000000000000000 [ 707.515174][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 707.524125][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 707.530731][ C1] CR2: 00007f941661375c CR3: 000000000e54c000 CR4: 00000000003526f0 [ 707.538752][ C1] Call Trace: [ 707.542056][ C1] [ 707.545016][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 707.550280][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 707.556650][ C1] ? rcu_is_watching+0x15/0xb0 [ 707.561528][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 707.566748][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 707.571895][ C1] flush_tlb_mm_range+0x5c3/0x10c0 [ 707.577035][ C1] tlb_flush_mmu+0x1af/0xa30 [ 707.581679][ C1] tlb_finish_mmu+0xf9/0x230 [ 707.586299][ C1] free_ldt_pgtables+0x19d/0x350 [ 707.591268][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 707.596773][ C1] ? down_read+0x272/0x2e0 [ 707.601213][ C1] ? exit_mmap+0x183/0xa10 [ 707.605644][ C1] exit_mmap+0x1af/0xa10 [ 707.609909][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 707.614712][ C1] ? __pfx_exit_aio+0x10/0x10 [ 707.619431][ C1] ? uprobe_clear_state+0x27c/0x290 [ 707.625349][ C1] __mmput+0x118/0x430 [ 707.629445][ C1] exit_mm+0x168/0x220 [ 707.633541][ C1] do_exit+0x62e/0x2320 [ 707.637727][ C1] ? __pfx_do_exit+0x10/0x10 [ 707.642340][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 707.647393][ C1] do_group_exit+0x21b/0x2d0 [ 707.652012][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 707.657244][ C1] get_signal+0x1284/0x1330 [ 707.661785][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 707.667356][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 707.672675][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 707.678866][ C1] exit_to_user_mode_loop+0x86/0x480 [ 707.684179][ C1] ? rcu_is_watching+0x15/0xb0 [ 707.688982][ C1] do_syscall_64+0x32d/0xf80 [ 707.693591][ C1] ? trace_irq_disable+0x3b/0x150 [ 707.698645][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.704734][ C1] ? clear_bhb_loop+0x40/0x90 [ 707.709439][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.715349][ C1] RIP: 0033:0x7f45e015cfce [ 707.719786][ C1] Code: Unable to access opcode bytes at 0x7f45e015cfa4. [ 707.726817][ C1] RSP: 002b:00007ffd3bfa3148 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 707.735263][ C1] RAX: fffffffffffffe00 RBX: 000055558283e500 RCX: 00007f45e015cfce [ 707.743257][ C1] RDX: 0000000040000000 RSI: 00007ffd3bfa31bc RDI: ffffffffffffffff [ 707.751250][ C1] RBP: 00007ffd3bfa31bc R08: 0000000000000000 R09: 0000000000000000 [ 707.759239][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 707.767234][ C1] R13: 0000000000000003 R14: 00007ffd3bfa3418 R15: 0000000000000000 [ 707.775266][ C1]