last executing test programs: 11m10.199462358s ago: executing program 1 (id=2608): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) (async) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)="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", 0x41c}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000002540004803c0001800e000100696d6d656469617465000000280002801c0002801800028009000200739b7a320000000008000180fffffffc0800014000000000140001800e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7f0000006a007ffa9e", 0x9}, {&(0x7f00000001c0)="64cabf2dfb58fc021d6b689866f05d4800050088a8ffff0200258f2e4409b8f9e6aaeb88beab23fc2c6726e89b13e2f6e8bc95ee52dcd7298d390938510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa4000923ed3c3fac90beecd4521a447ffe975606ab42a207000000000000000000", 0x76}], 0x2}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000580)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36592f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m8.657748161s ago: executing program 1 (id=2621): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f3, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x8, 0x7ff, @fr_pvc=0x0}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff2cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2911010020100000140012800c0001006d6163766c616e00040002800800", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="0580110002000000"], 0x4c}, 0x1, 0x600, 0x0, 0x8014}, 0x40040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r5) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000e2f8c1153b465183e859998cb560fb2989f9b772faceab9f776a847fb74ae5a5859e76be687e95cfa04107c79de31ee8159c3864af8c95b277fff8f9ccc45d92abf1f6", @ANYRES16=r6, @ANYBLOB="310026bd7000fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'syztnl0\x00', r4, 0x4, 0x4, 0x4, 0x7ff, 0x40, @mcast2, @private2, 0x1, 0x1, 0xb0b, 0x216}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002740)={&(0x7f0000001fc0)=ANY=[@ANYBLOB='D\a\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="7c00028040000100240001006c625f74785f4e6173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000008000008000100", @ANYRES32=r4, @ANYBLOB="bc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000010044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r7, @ANYBLOB="bc0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="f800028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="9401028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400c70a000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003400040000007f10000000000c000e050700000003000203ff0f000001800802def100003200027d09000000080d06070800000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000008000100", @ANYRES32=r4, @ANYBLOB="8400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="08000700ffc6ffff0800d70e", @ANYRES32=r4, @ANYBLOB="f4010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000080000008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x744}, 0x1, 0x0, 0x0, 0x20004001}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000023c0)={'erspan0\x00', &(0x7f0000002b40)={'ip_vti0\x00', 0x0, 0x10, 0x1, 0x4, 0x80000001, {{0x47, 0x4, 0x0, 0x2b, 0x11c, 0x65, 0x0, 0xc4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, {[@ssrr={0x89, 0x13, 0xcf, [@rand_addr=0x64010102, @multicast1, @private=0xa010100, @empty]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x6f, [@multicast2, @broadcast]}, @cipso={0x86, 0x35, 0x2, [{0x6, 0x9, "7a65df5c525f73"}, {0x1, 0x8, "85e108478db7"}, {0x1, 0xa, "0a38b28ba38d217a"}, {0x5, 0xd, "460bd8f51ac5bfc52bde2a"}, {0x2, 0x7, "e434a0a026"}]}, @timestamp_addr={0x44, 0x1c, 0x50, 0x1, 0xc, [{@broadcast, 0x6}, {@local, 0x6}, {@local}]}, @generic={0x86, 0xe, "2067d8132eab8675215850ae"}, @lsrr={0x83, 0x23, 0x54, [@private=0xa010101, @multicast1, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x27}, @local, @rand_addr=0x64010101, @empty]}, @timestamp_prespec={0x44, 0x44, 0xe7, 0x3, 0x8, [{@broadcast, 0x1}, {@private=0xa010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x1000}, {@local, 0x4}, {@multicast1, 0x10000}, {@multicast1, 0x10}, {@local, 0x8}, {@broadcast, 0x80000001}]}, @timestamp={0x44, 0x20, 0x17, 0x0, 0x9, [0x5, 0x5, 0x7, 0x5, 0x4, 0xff, 0x5]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002400)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002440)={0x0, @local, @private}, &(0x7f0000002480)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002600)={'syztnl1\x00', &(0x7f00000024c0)={'gretap0\x00', 0x0, 0x20, 0x8, 0x4db, 0x5, {{0x39, 0x4, 0x3, 0x7, 0xe4, 0x64, 0x0, 0x5, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x51, 0x3, 0xd, [{@rand_addr=0x64010100, 0x3}]}, @cipso={0x86, 0x52, 0x0, [{0x6, 0x12, "17ab8d41e39d4b060c5184b450b801bb"}, {0x0, 0xd, "ada675fe8187e33e3adbd6"}, {0x5, 0xa, "c9d575542051162f"}, {0x6, 0xf, "17e73cdd5e1f79f765708a8d75"}, {0x7, 0x8, "54af78047253"}, {0x0, 0xc, "66809151e56d25c7e310"}]}, @timestamp_addr={0x44, 0x3c, 0xa6, 0x1, 0x1, [{@local, 0x9}, {@empty, 0x5}, {@broadcast, 0x4}, {@private=0xa010100, 0x3ff}, {@loopback, 0x2d86}, {@dev={0xac, 0x14, 0x14, 0x1}, 0xfffffff7}, {@multicast2, 0xfff}]}, @ssrr={0x89, 0xf, 0x3b, [@multicast1, @remote, @empty]}, @timestamp_prespec={0x44, 0x14, 0x8a, 0x3, 0x8, [{@remote, 0x800}, {@local, 0x7}]}, @timestamp_addr={0x44, 0xc, 0xa7, 0x1, 0x9, [{@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x7, 0xfd, [@local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002640)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002700)={'syztnl0\x00', &(0x7f0000002680)={'erspan0\x00', 0x0, 0x7800, 0x10, 0x0, 0x1000, {{0xa, 0x4, 0x2, 0x8, 0x28, 0x64, 0x0, 0xb, 0x29, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0xca, 0x1, 0x9, [{@remote}, {@empty, 0xc301}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002b00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002740)=ANY=[@ANYBLOB="44030000", @ANYRES16=r6, @ANYBLOB="00022abd7000ffdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400090000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="3801028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400040000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ff0f1007fcffffff020009097d08000008000905000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="08000120", @ANYRES32=r17, @ANYBLOB="6c010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040000ffffff400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400440000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB], 0x344}, 0x1, 0x0, 0x0, 0x4000050}, 0x800) recvmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/159, 0x9f}, {&(0x7f0000000140)=""/84, 0x54}, {&(0x7f0000000380)=""/192, 0xc0}], 0x3, &(0x7f0000000480)=""/232, 0xe8}, 0x7}, {{&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000600)=""/64, 0x40}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/130, 0x82}, {&(0x7f0000001700)=""/234, 0xea}, {&(0x7f0000001800)=""/175, 0xaf}], 0x5, &(0x7f0000001940)=""/170, 0xaa}, 0x8}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a00)=""/90, 0x5a}, {&(0x7f0000001a80)=""/94, 0x5e}, {&(0x7f0000001b00)=""/139, 0x8b}], 0x3, &(0x7f0000001c00)=""/127, 0x7f}, 0x9}, {{&(0x7f0000001c80)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001d00)=""/100, 0x64}], 0x1, &(0x7f0000001dc0)}, 0xe}, {{&(0x7f0000001e00)=@pppol2tp, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e80)=""/115, 0x73}, {&(0x7f0000001f00)=""/170, 0xaa}], 0x2, &(0x7f0000002000)=""/67, 0x43}, 0xce}, {{&(0x7f0000002080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002100)}, 0xd5}], 0x6, 0x0, 0x0) 11m7.580379687s ago: executing program 1 (id=2627): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6, 0x0, 0xff, 0x7fff0000}, {0x2, 0x3, 0x18, 0x6}]}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f0300a1ff000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0) 11m7.182851623s ago: executing program 1 (id=2630): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) rseq(0x0, 0x0, 0x10000, 0x0) io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) close(0x3) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r5, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) fgetxattr(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='user.user.'], 0x0, 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = syz_open_dev$sg(&(0x7f0000000240), 0x4, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x109) r8 = getpid() fcntl$setownex(r7, 0xf, &(0x7f0000000240)={0x2, r8}) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000440)={'\x00', 0x6, 0x7, 0x3, 0xff, 0xfffffffffffff993, r8}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0x178}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00'}) 11m5.262791807s ago: executing program 1 (id=2636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000400000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 11m3.683695233s ago: executing program 1 (id=2641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x7, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 11m3.425639216s ago: executing program 32 (id=2641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x7, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 9m40.352303875s ago: executing program 5 (id=3114): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001002bbd700000000100e00000020000000000000000000000000000000000000000009a000000f8000000000000000200000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000fe0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x324}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x2000000, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 9m39.988185217s ago: executing program 5 (id=3115): r0 = socket$inet6(0xa, 0x4, 0x9a2) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa001, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f0000000240)=@file={0x0, './file0/../file0\x00'}, 0x6e) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000440)=ANY=[], 0x210) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote}, {0x4, 0x1, @loopback}, {0x2, 0x4e20, @local}, 0x194, 0x0, 0x0, 0xfdffffffffffffff, 0x3, &(0x7f0000000180)='lo\x00', 0x7ffffffffffffffe, 0x800000000009, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xffffffffffffff68) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x100, 0xfffffe0000100001, 0x400fa11, 0xffffffff}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x400076, 0x484100) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r8 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000200)={0x202, {"40a568bffcffffffe9c6a0c0f5482de8", "241e6a0b37e28869f574458eb6497d15", "a34d3bde00"}, 0x800, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r9, &(0x7f0000000bc0)={&(0x7f0000000100)={0xa, 0x4e22, 0x800, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, 0x0}, 0x44810) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5071d4d8d2d48b85d5dbf5f9e3413", "a9d49200"}, 0x2e, 0x4}) 9m36.647141029s ago: executing program 5 (id=3126): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300030c000000000700000000000002000900400000000000000000100000030006000000000002000000e0000002000000000000000002000100000000000000050200000011030005000000000002"], 0x60}, 0x1, 0x7}, 0x10) 9m36.589016167s ago: executing program 5 (id=3127): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) futex_waitv(&(0x7f0000001240)=[{0x1, &(0x7f0000000100)=0x7fff, 0x86}], 0x1, 0x0, 0x0, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') rt_sigtimedwait(&(0x7f0000000200)={[0xfffffffffffffffa]}, &(0x7f0000000340), &(0x7f00000003c0)={0x0, 0x3938700}, 0x8) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x4) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffc) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a6012203010902220001000000000904"], 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r1) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001000010428bd70000000000000030000", @ANYRES32=0x0, @ANYBLOB="0000000000040000300012800b00010067656e65766500002000028008000100010000f2"], 0x64}}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000240)={0x0, 0xa, 0x2, 0x8, 0x2, 0x4, 0xf7f}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x4, 0x8}, {0x9, 0xfd}, 0x1000, 0x1, 0x46}) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 9m35.186676962s ago: executing program 5 (id=3132): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000040ef174760400001020301090224000101ff50090904000d020301020009210100050122b10f09058103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x5, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x5, 0x80, 0x7f, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x2, 0x6, 0x0, 0x45, {{0x9, 0x24, 0x6, 0x0, 0x0, "c9928cdd"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x4, 0x6}, [@country_functional={0xe, 0x24, 0x7, 0x3, 0x81, [0x3, 0x9, 0xe, 0x0]}, @ncm={0x6, 0x24, 0x1a, 0x7a, 0x34}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0xd, 0xb6}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x6, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x7, 0x6}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x81, 0x0, 0x1, 0x8, 0x4}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x7, 0x6}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c32}}, {0x78, &(0x7f0000000180)=@string={0x78, 0x3, "9a5ddc2b2e905898c0afaf97665c35b613c68a3e917ee79eeea47a71a0dd9b252f9dc46c3f880d1d294a207a1ed9fadba0f90e25c792e466453f255fa58601589b7b37aedabf6fc4b3ff6539c28d4489e0e1a9d266c0af100eee14a6e261942a51ab1157bb725bd5a457608444168cf6d96b5dd2e21c"}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "95be6c1e6ad6e0eb5d8f0c7cdffa4e030a4981ab0c54a7c461895bdd8bc64e18a8339deb18b5315b87676fb9293d8e4126242763b90d04d483"}}, {0x5c, &(0x7f0000000240)=@string={0x5c, 0x3, "3b39c5d293c7e4fd5a689f727323429ca1285f2f68a0639a01a775c20807292eb04054206a1f217bd3bd82460109785d95fed9a965903cfc82db39e071001c3dd25587ae5abda9c9a69b000f4a0d1a36f71b0c8360109dbfc8b2"}}, {0xc, &(0x7f00000004c0)=@string={0xc, 0x3, "74d98af1f307e6a26c9d"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000780), 0x0}, 0x0) 9m34.623961433s ago: executing program 5 (id=3135): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x200, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="20bd00000000"], 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0x7000, 0x100000}) close(r4) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r6, 0x7fffffffffffffff, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e02000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) sendfile(r6, r6, &(0x7f0000000000)=0x6, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f0000000580)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x4094) r9 = timerfd_create(0x1, 0x80000) read(r9, &(0x7f0000000040)=""/250, 0xfa) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000400)={{0x77359400}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x2006815, &(0x7f0000000240)={0x0, 0x3085, 0x40, 0x2, 0x286, 0x0, r6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x40004) 9m34.289075686s ago: executing program 33 (id=3135): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x200, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="20bd00000000"], 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0x7000, 0x100000}) close(r4) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r6, 0x7fffffffffffffff, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e02000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) sendfile(r6, r6, &(0x7f0000000000)=0x6, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f0000000580)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x4094) r9 = timerfd_create(0x1, 0x80000) read(r9, &(0x7f0000000040)=""/250, 0xfa) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000400)={{0x77359400}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x2006815, &(0x7f0000000240)={0x0, 0x3085, 0x40, 0x2, 0x286, 0x0, r6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x40004) 8.193866525s ago: executing program 2 (id=6099): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0xa5f288b4872b4003, 0x5, 0x5, "b54ce52e39046868bcf2f75089c86b302cd6188b57b2b59c4df079e389d719af2c5dd08cf01d928739441c819e839bd0f1eef252951384596a4994a31c9e91", 0x23}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)="87ee88c59562b5f4623ec5cc4a13bc6de50d26bf2907aada90d6034a9faa4dac42", 0x21}, {&(0x7f0000000400)="71f6485a5da09b0cde83f4f9e1522c4d53d1db87057febbd7d24e1462ac9d3f5ceeabe9af81bee55cc636f2bba2d065be1544e73be6d675ef0ce7df253535f652977610cfd2f79c19a24d0749b181e1aa6a5d64fe669a0ec9206a2c016be765ce9132b5d6d84263e60ae421ed31de163a13672963feede0730617dd8f79c319ec4f6f7e1d1d85c49de85803a4965f0328ee175587c3516a623c8d6e50ad5d5425d094c951da0d56579b3f8735f075f9121261dbab9008cd75a9f26c596cfae00153a0e8f7d1a165902c3120102c02062b26da3c3b8f06bdb3f69adafcf23d8f4547ae8176ec2a9bd1acb67abb701deb6dee1eda68ac81a8f67", 0xf9}, {&(0x7f0000000500)="04dca1e6d7a1b3d6b11e09e185a3511b2595cbdb7f53d1a96d13f82d34fc82acdc03429850500db51a80a28e2c619ba76cf793ae3f5e30ec33885be8b1d4300bc6dd57a8fd97b58ffc2508", 0x4b}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000600)=[{0x58, 0x103, 0x2, "d3782934a409ddcde44388227926ce131ef1b3716cddc573e249efae40200a34f44961f4834935744ba6f5b0f96571c11914cfd27e0cfe1ea1846e06e5340d0687"}, {0x98, 0x108, 0x4, "3d57e8255e88918052b18f57fa65f09bae9328dccdf188c34aa8d8e1cb32aab2bc2b1fb07826581ac8d20e368cf346cdf79ad7a9a05f1751732b11790dc2b8357f6d0fe2b5fa78fe3d7eb7dc57e61ff0dbf65012357240c7cfb1911bc9c0d2baa8309ccd6e45233e809751977e9025c87a946010ba347c62615df3c1cf832296f4"}], 0xf0}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000004a0001002bbd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0700000014000100ff"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 7.246352807s ago: executing program 0 (id=6101): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @dev, 0x0}, &(0x7f00000000c0)=0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x20, 0xfffffffa, 0x81, 0x10, 0x0, r0, 0x5, '\x00', r1, r2, 0x5, 0x1}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000000240)=0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000280)={0x0, 0xa, 0x0, 0x40, 0x18e}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000300)={r5, 0xfa, "08a1fa3cd502c4b5049c93582e32789e736c3584c94ece356c9e27cd2af9aa761c82237619bb949e517ec1c0245b356c1f15f599dd29ce187e7b9498ffc2107e425d94b7ec684f8bfe2bd84e36ac8ceb2a32d1c182709fda6432a9b137365ee0adfc9aa400e5d56c4308c5bf99627fff828fe4fc1688c11147ee92a72ab14e88074f29d97b7b7066d7b987062d55ba7f393720ecfc8e92deceaf8e663de4fc22d45d0dffdb1ce0df546539c2297ddbd0b2f65a0ff44bf650fccced173b9f545d16afbb0ce4e7aae613d6925ca8e05c96d2defe8cc1153c7d25f6e9c6daa1c8cc6c90f97f24acd0ea1099a3e5ba94dab2c37bb0163ca7151ff8bd"}, &(0x7f0000000440)=0x102) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x26, &(0x7f00000004c0)={@dev, @private, @dev}, &(0x7f0000000500)=0xc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f0000000540)={0x9, 0x0, {0x2, 0x2, 0x3ff, 0x0, 0x500}, 0x6}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x10}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x408f1}, 0x48084) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x1) ioctl$int_in(r0, 0x5421, &(0x7f0000000880)=0xe) r11 = socket$pppoe(0x18, 0x1, 0x0) ioctl$OCFS2_IOC_INFO(r11, 0x80106f05, &(0x7f0000009b40)={&(0x7f0000009980)=[&(0x7f00000008c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000900)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000000940)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000001}, [{0x2, 0x6}, {0x3, 0xa7}, {0x2, 0x5}, {0x0, 0x9}, {0x9, 0x101}, {0x1, 0xafd}, {0x9, 0x5}, {0x7fffffffffffffff, 0xd}, {0x9, 0x7}, {0x6a4c, 0x300000000000000}, {0x3, 0xfffffffffffffff4}, {0x80000001, 0x8}, {0x5, 0xffffffff7fffffff}, {0x753, 0x7926}, {0x8001, 0x6}, {0x9, 0x3}, {0x100, 0x1}, {0xfd05, 0xb2}, {0x4, 0x1000}, {0x4, 0x6}, {0x0, 0xa2}, {0x40, 0x8}, {0x2cfa, 0x7}, {0x9, 0x8}, {0x541cdf72}, {0xd254, 0x9}, {0x8000, 0x1}, {0x0, 0x9}, {0x0, 0x248}, {0x101}, {0x8, 0x5}, {0x7, 0x7fff}, {0x6, 0x2}, {0x8000, 0x9}, {0x5, 0x100000000}, {0xa00, 0x8000000000000001}, {0x6, 0x1}, {0x8, 0x2}, {0x8000000000000000, 0x6}, {0x8001, 0x400}, {0x3, 0x5}, {0x2}, {0x3, 0x7fffffff}, {0x6, 0xf}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x10000}, {0x6, 0x6c}, {0x33, 0x4}, {0x1ff, 0x8}, {0x5, 0x8}, {0x4, 0xffffffff}, {0x0, 0x80}, {0x5, 0x9}, {0x8, 0x8}, {0x0, 0x1}, {0x3821, 0x9}, {0x9, 0x8}, {0x4, 0x81}, {0x4, 0x9}, {0x4, 0xe}, {0x8001, 0x9}, {0x7fff, 0x9}, {0xcd75, 0x9}, {0x4, 0x8}, {0x80, 0x8}, {0x5, 0x8000}, {0xa, 0x2}, {0x2, 0x3e}, {0x2, 0x2}, {0x2, 0x80000000}, {0x9, 0x1}, {0x8, 0x8}, {0xfffffffffffffffc, 0x100000000}, {0x4}, {0x9, 0x8000000000000001}, {0x5fe7f605, 0xffffffff}, {0xffff, 0x8}, {0x5, 0x100}, {0x0, 0x3}, {0x4, 0xffffffffffffffff}, {0x9, 0x673}, {0xd73f, 0x8000000000000000}, {0x6, 0x40}, {0x3, 0x7fff}, {0x7ff, 0x6}, {0x1, 0xa15}, {0x8, 0x1}, {0xb, 0x2}, {0x8, 0x78fb}, {0x7, 0x9}, {0x8, 0x3}, {0x780000000, 0xa00000000}, {0x8, 0x9}, {0xfffffffffffffff7, 0xbcba}, {0x7f, 0x5}, {0x2, 0xfffffffffffff22a}, {0x100, 0x200040000}, {0x6, 0x2}, {0x78dc, 0x7}, {0x1, 0x7f}, {0x200, 0x7}, {0x7fff, 0x5}, {0x7fff}, {0x8, 0x7}, {0x7, 0x8}, {0x6, 0x4}, {0x8, 0x80}, {0x2}, {0x6, 0x7fff}, {0x1b48, 0x3e}, {0xff, 0x4}, {0x4, 0x5}, {0xffff, 0x8}, {0xfffffffffffffffb, 0x6}, {0x7}, {0x4, 0x7}, {0x221, 0x56}, {0xa207, 0x5}, {0x6e, 0xfffffffffffffffc}, {0x800, 0x80000001}, {0x0, 0x3}, {0x1ff, 0x8000000000000}, {0x8, 0xb}, {0x101, 0x7}, {0x7f}, {0x1, 0x2}, {0x5, 0x3a48501f}, {0x7fffffff, 0x6}, {0xffffffffffffffff, 0x2}, {0x9, 0xd}, {0xc, 0x9}, {0x0, 0x1000}, {0x200, 0x9}, {0x101, 0x1}, {0x5b31cf0d, 0x1316f56d}, {0x3, 0x1}, {0x7, 0x8001}, {0x0, 0x9}, {0x2f, 0xfd7}, {0x7, 0x7}, {0xb, 0x8}, {0x7}, {0x5, 0x6}, {0xc, 0x8}, {0x7, 0x7f}, {0x17, 0xe16a}, {0x100000000, 0x8}, {0x4, 0x2}, {0x7fffffffffffffff, 0x9}, {0x8, 0xae}, {0x9c24, 0x7ff}, {0x8000000000000000, 0x5}, {0x4}, {0x10001, 0xffffffff}, {0x4, 0x400}, {0x100000001, 0xfff}, {0xfffffffffffff065, 0xffffffffffffff68}, {0x5, 0x9e}, {0x6, 0x8}, {0x6ba01f76, 0x5}, {0xfffffffffffffff8, 0x5}, {0x5, 0x5}, {0x9, 0x4}, {0x4, 0xffff}, {0x7, 0x3}, {0x3fff8, 0x8}, {0xd4e}, {0x100, 0x2}, {0x7fffffffffffffff, 0xd}, {0x8, 0xc9}, {0x8, 0x3}, {0x0, 0x8}, {0x845b, 0xfa}, {0x4, 0xfa40000000000000}, {0x0, 0x5}, {0xbcf3}, {0x280000000000000, 0x4d04}, {0x400000000000, 0x1}, {0x0, 0xffffffff}, {0x4, 0x3}, {0x0, 0x385153a9}, {0xc, 0x80000001}, {0x10001}, {0xc2d8, 0x5}, {0x9, 0x9000000000000000}, {0x3, 0x8f30}, {0xfffffffffffffffd, 0x1}, {0xe, 0x3}, {0x1000, 0x5}, {0x7}, {0x5, 0x7}, {0x1, 0x2}, {0x1, 0x3}, {0x4, 0xf}, {0x7, 0x80000000}, {0x7, 0x7b}, {0x8, 0x8}, {0x8, 0x8}, {0x400, 0x8}, {0x5, 0x2}, {0x2, 0x4}, {0x6, 0x81}, {0xfff, 0x6}, {0x3, 0x9}, {0xffffffffffffffc5, 0x5}, {0xae, 0xb8}, {0x7, 0x10001}, {0x1, 0x1}, {0x800, 0x3}, {0x6, 0xe}, {0x2, 0x280000}, {0xa, 0x5}, {0x2, 0x5}, {0x0, 0x2}, {0x8, 0x7}, {0xfffffffffffffff9, 0x4}, {0xffff, 0x5}, {0xfffffffffffffff7, 0x5}, {0xa264, 0x1}, {0x7, 0x100000001}, {0x5, 0x6}, {0xd}, {0x4, 0x2}, {0x81, 0x9}, {0xe, 0x4}, {0x52, 0x81}, {0x2614, 0x8000000000000000}, {0x6, 0x1}, {0x4, 0x7}, {0x6, 0x4}, {0x1, 0x3}, {0x6, 0x7}, {0xbef, 0x6}, {0x7651, 0x8001}, {0x0, 0x6}, {0x1, 0x101}, {0x81, 0x10}, {0xfff, 0x800}, {0x42, 0x2}, {0x1d, 0x4}, {0x96, 0x9}, {0xf, 0x6}, {0x0, 0x4}, {0x6b, 0x3}, {0xfffffffffffff141, 0x2}, {0x4, 0x2}, {0x12, 0x6}, {0x528, 0xd}, {0x1, 0xbb}, {0x2, 0x3}, {0x6, 0xffffffff}, {0x1, 0x2}, {0x2, 0x8}, {0xffffffffffffffff, 0x1ff}]}, &(0x7f0000001980)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f00000019c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000001a00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000001a40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0xce}, &(0x7f0000001b80)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000001bc0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f0000001c00)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0xdd0, 0x1}, {0x400, 0x6}, {0xa4, 0x7}, {0xffffffffffffffff, 0x2}, {0x7, 0x8}, {0x0, 0xfffffffffffffffc}, {0x2, 0xd088}, {0x8, 0x8}, {0x40, 0x4}, {0x1, 0x3bfe}, {0x5, 0x401}, {0x3c, 0x7ff}, {0x5, 0x6}, {0xc, 0x7}, {0x3, 0x3}, {0x4, 0x1000}, {0x5, 0x5}, {0x9, 0x7}, {0x2, 0x3}, {0x0, 0x3}, {0x8001, 0x9}, {0x6, 0xfffffffffffffff0}, {0xfff, 0x6a}, {0x7, 0x6}, {0x7, 0x7}, {0x6, 0x5}, {0x6, 0x62}, {0x40000000000000, 0x8}, {0x10000, 0x8}, {0x40, 0x7}, {0x49, 0x9}, {0x8, 0x5}, {0x9, 0x9}, {0x100000000, 0x62}, {0x0, 0x4}, {0x6, 0x4}, {0x7fff, 0x8}, {0x97, 0x8000}, {0x4, 0x94c}, {0xffff, 0x7}, {0x100000001, 0x4}, {0x8, 0x40000000000}, {0x0, 0xd85}, {0x1, 0x100000001}, {0x6e, 0xa}, {0xc15, 0x81}, {0x5, 0x5}, {0x9}, {0x7, 0x3ff}, {0x2, 0xffffffffffffff88}, {0xe, 0x5}, {0x4, 0x6}, {0x3, 0x9}, {0x2, 0x3}, {0x5, 0x8}, {0x4, 0xc}, {0x0, 0xfffffffffffffff7}, {0x3}, {0xd3c, 0x80}, {0x5, 0x385b}, {0x8, 0x736}, {0x7, 0x6}, {0x4, 0xdd}, {0x4, 0x100000000}, {0x6, 0xcb78}, {0x10001, 0xeb9f}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x34}, {0x5}, {0x6, 0x4}, {0x8, 0xffffffffffff3733}, {0x21b8, 0x7}, {0x4, 0xbcc9}, {0x8ff, 0x2}, {0x1, 0xb12a}, {0x8, 0x3ff}, {0x1, 0x7ff}, {0x4, 0x2}, {0x0, 0x9}, {0x2}, {}, {0x1000, 0xfff}, {0x13, 0xfffffffffffeffff}, {0xa2a, 0x3}, {0xffffffffffffffff, 0x6}, {0xfffffffffffffffa, 0x7}, {0x9, 0x9}, {0x4, 0x9}, {0x96d, 0x5}, {0xfffffffffffffffc}, {0xff, 0x5}, {0x10, 0x1}, {0x3, 0x9}, {0x3, 0x9}, {0x6, 0x6}, {0x1, 0x689}, {0x9, 0x30f}, {0x6, 0x1}, {0xbc9, 0x5}, {0x8, 0xa431}, {0x1, 0x3}, {0x2, 0x6}, {0x100, 0x8}, {0x1, 0x3}, {0x8}, {0x0, 0x5}, {0x8, 0x3}, {0x6, 0x7fff}, {0xc58, 0x419}, {0x80000001, 0x3}, {0x1, 0x3}, {0x0, 0xc00000000}, {0xfffffffffffffff8, 0xe}, {0x3ff, 0xfffffffffffffff9}, {0x0, 0x7}, {0xf8e}, {0x80000000, 0x1}, {0x5, 0x3ff}, {0x3, 0x8}, {0x7, 0x8}, {0x8, 0x4}, {0x478, 0x2996}, {0x1, 0x4}, {0xd0ca, 0x5}, {0x2}, {0x4, 0x5}, {0x9, 0x1}, {0x1, 0x3}, {0x8, 0x3c3}, {0x5, 0x824}, {0xe1, 0x3}, {0x6, 0x6b2e}, {0x7, 0x1}, {0x1c00000000000, 0x1}, {0x1}, {0x9, 0x6}, {}, {0xab32, 0x2}, {0x4, 0x400}, {0x8000000000000001, 0xffffffffffffffff}, {0x853, 0x5}, {0x8, 0xffff}, {0xffffffff, 0x7f}, {0x30fe, 0x6}, {0x2, 0x8}, {0x0, 0x5}, {0x8001, 0x80000001}, {0x8, 0x8}, {0x7}, {0xb97, 0x6}, {0x8, 0x1200000000000000}, {0x8, 0x6}, {0xc, 0x3ff}, {0x7, 0x80000000}, {0x5, 0x1}, {0x12a, 0xffffffffffffffff}, {0x3, 0x4}, {0x7, 0x1}, {0x6, 0x2}, {0x6}, {0x0, 0x8}, {0xc062, 0x1}, {0xb7143e5, 0x7}, {0x80000001, 0x519}, {0x5, 0x6}, {0x0, 0x4c}, {0xe3aa, 0x287}, {0x1, 0x5}, {0x3, 0x4432}, {0x67, 0x6}, {0x2}, {0x9, 0x9}, {0x8}, {0x3}, {0x6, 0x100}, {0x6, 0x2e4}, {0xb5, 0x73fe1004}, {0x4, 0x3}, {0x3, 0x4887}, {0x0, 0x5}, {0x4, 0x95d}, {0xfffffffffffffff9, 0x3}, {0x2}, {0xf, 0x5}, {0x0, 0x7}, {0x1, 0xdd}, {0x4, 0x3}, {0x3, 0x7fffffffffffffff}, {0xffffffffffffffff, 0x78719261}, {0xfff, 0x8}, {0x1, 0xb}, {0x2, 0xfffffffffffffff9}, {0xfffffffffffff922, 0xe7}, {0x3, 0x6}, {0x5}, {0x800, 0x3ff}, {0x8, 0x2}, {0x8000000000000001, 0xffffffffffffffff}, {0x9, 0x800}, {0x0, 0x3c00000000000000}, {0x4872, 0x2c}, {0x0, 0x80000001}, {0x7fffffffffffffff, 0xe}, {0xfffffffffffffffc, 0x80000000}, {0x8, 0x7}, {0x3}, {0xfffe0000000, 0x8000000000000000}, {0x0, 0x30}, {0x0, 0x1}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x2}, {0x8, 0x3}, {0x9, 0x3}, {0x9, 0x6}, {0x4, 0x7fffffffffffffff}, {0x7, 0x8000000000000001}, {0x5511, 0x75878864}, {0x1, 0x1}, {0x1000, 0x6}, {0x401, 0x8}, {0xffffffffffffff9d, 0x6}, {0x8, 0x7}, {0xcb, 0x4}, {0x4, 0xa6b}, {0x3, 0xffff}, {0x3, 0x1}, {0x40, 0xf}, {0x4, 0xf0a}, {0x0, 0x1}, {0x5}, {0x800, 0x101}, {0x8, 0x7}, {0x1ff, 0x6}, {0x7, 0x1edd}, {0x8, 0x4}, {0xfff, 0x7fffffff}, {0x80000000, 0x7}, {0x7, 0x9}, {0x100000000000}, {0x8, 0xfffffffffffffffd}, {0x654, 0x4}, {0xa8e, 0x5db}, {0x7, 0xa}, {0x2, 0xd}, {0x7, 0x1ff}, {0x4, 0x1}, {0x200, 0x2}, {0x7, 0x4}, {0x80000000, 0x1}, {0x9, 0x2}, {0xe9, 0x5}, {0x9, 0x3}, {0x0, 0x6}]}, &(0x7f0000002c40)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000002cc0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x20000001}}, &(0x7f0000002d00)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x8, 0x4}, {0xfffffffffffffffb, 0x100000001}, {0x400, 0x2}, {0x7, 0xfffffffffffffffc}, {0xbfcc, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x9, 0x80000000}, {0x2, 0x527}, {0x2, 0x3}, {0x40ba, 0xfe}, {0x7, 0xfff}, {0x3, 0xe102}, {0xb4, 0xdff}, {0x5, 0x2}, {0x6, 0xfffffffffffffffa}, {0x60000000000000, 0x4}, {0x1, 0x10}, {0x8000000000000001, 0x10}, {0x5d7c, 0x31}, {0x2, 0x6}, {0x4, 0x7d9}, {0x2, 0x400}, {0x0, 0x8}, {0x0, 0x7ff}, {0x1, 0x4}, {0x8000000000000001, 0x8000000000000000}, {0xd472, 0x9}, {0x8, 0x3}, {0x9b4e, 0xc}, {0x5, 0x9}, {0x0, 0x8}, {0x2, 0xfffffffffffffffe}, {0x4, 0x2}, {0x2, 0x7ff}, {0xb79, 0x200000000000}, {0x4, 0x9}, {0x8, 0x80}, {0x8, 0x7fffffff}, {0x9, 0xc000000}, {0x1, 0x3}, {0x6, 0x1000}, {0x0, 0x82a6}, {0x4, 0x400}, {0x10001, 0x7fffffffffffffff}, {0x2, 0x2}, {0x7fffffff, 0x4}, {0x7, 0x100}, {0xe, 0xfffffffffffffffe}, {0x0, 0x65}, {0x8, 0x80000000}, {0x8001, 0xffffffffffff8a54}, {0x9, 0x6d7aac14}, {0x2, 0x71}, {0x8}, {0x1ff, 0x400}, {0x400, 0x401}, {0x7, 0x80000000}, {0x7, 0x2}, {0x51, 0xffffffffffff0001}, {0x75, 0xfffffffffffffffb}, {0x2f0, 0x697}, {0x200, 0x7fff}, {0x4, 0x100000000}, {0xaeaf}, {0x0, 0x7fff}, {0x1, 0x3}, {0x95f0, 0xa}, {0x400000000000000, 0x7}, {0xdf7cb91, 0x6}, {0xa4, 0xffffffff}, {0x72db, 0x4}, {0x8, 0x88d9}, {0x5, 0x1}, {0x7, 0x9f9e}, {0x5, 0x7fffffffffffffff}, {0x10000000000000, 0x7f}, {0x7, 0x7fffffff}, {0x100, 0x8}, {0xca0, 0x1}, {0x4, 0xffffffff}, {0x2, 0x5}, {0x8, 0x38}, {0x6, 0x9}, {0x6, 0x5ee9}, {0x3ff, 0x6}, {0x2, 0x5}, {0x9, 0x6}, {0xf6, 0x7f}, {0x10001, 0x7fffffffffffffff}, {0x3, 0x5}, {0x3, 0xa}, {0xfffffffffffffc23, 0xfffffffffffffffa}, {0x0, 0x3ff}, {0x0, 0x3}, {0x3, 0x5}, {0x8001, 0x5bf01304}, {0x9}, {0x7, 0x7fffffff}, {0xffffffff, 0x6}, {0x6, 0x8}, {0x100, 0x7f}, {0x0, 0x6}, {0x6, 0x4}, {0x8, 0x3}, {0x9, 0x6}, {0x8, 0xd3}, {0x100000000, 0xffff}, {0x2}, {0x0, 0xffffffffffffffff}, {0x1, 0x2d84}, {0x8, 0x1}, {0x1, 0xffffffff}, {0x7, 0x4428}, {0x9, 0x7}, {0x4, 0x8512}, {0x9, 0x80}, {0xd612, 0x2}, {0x9, 0x3}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x2}, {0x86b, 0x5}, {0x2, 0x100}, {0x4, 0xfffffffffffffff8}, {0xcd, 0xd7c}, {0x66c9, 0x10000}, {0x723, 0x7}, {0xfff, 0x5}, {0x2, 0x7}, {0x5, 0x9}, {0x4, 0x4}, {0x10}, {0x9, 0x7fffffff}, {0x6, 0x3}, {0x3, 0x9}, {0x6, 0xaec}, {0x1, 0x7}, {0xb756, 0x2}, {0x0, 0x401}, {0x2}, {0x1, 0x8001}, {0x401, 0x80000000}, {0xe, 0x8}, {0xfffffffffffffff7, 0x7}, {0xffffffff}, {0x0, 0x3}, {0x1, 0x3}, {0x2, 0x7fffffff}, {0x7ff, 0x81}, {0x2, 0x5}, {0x1400, 0x7f}, {0x400, 0x7f}, {0x9, 0x8}, {0x80000001, 0x20}, {0x7fff, 0xd730}, {0xffffffffffffff72, 0x9}, {0x0, 0xf5d}, {0x4, 0x5}, {0x5, 0x8}, {0x4, 0x5}, {0x0, 0x200}, {0x6, 0x8}, {0x0, 0x5}, {0x34f7b2e1, 0x40}, {0x9, 0xa}, {0x9, 0x819d}, {0x8, 0xe}, {0x5, 0x7}, {0x7ff, 0x1}, {0x80, 0x3}, {0x9, 0x4}, {0x7, 0x8000000000000001}, {0x4, 0x81}, {0xd, 0xe0}, {0x1, 0x7}, {0xf, 0x5}, {0x9, 0x40}, {0x9, 0x6}, {0x8000, 0x4}, {0x8001, 0x4}, {0xefec, 0x9}, {0x5, 0x8}, {0x1, 0x101}, {0xffffffff, 0x8}, {0xd5b8, 0x6}, {0x2, 0x1}, {0x2a, 0x400}, {0x5, 0x6}, {0x3, 0x1}, {0x9, 0x3}, {0x401, 0x7fffffffffffffff}, {0x2}, {0xe5, 0x1}, {0x401, 0x7}, {0x100, 0x8}, {0x401, 0x45}, {0x7c06121f, 0x4b30}, {0x5, 0xffff}, {0x5, 0x1}, {0x4, 0x5}, {0x5, 0xffffffff80000001}, {0x401, 0x8000}, {0x10, 0x4}, {0x3, 0x6}, {0x0, 0x1}, {0x8, 0x5}, {0x120, 0x10}, {0x5}, {0x450, 0x5}, {0x1, 0x5}, {0x5, 0x7}, {0x8, 0xffffffffffffffc0}, {0x39b1, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x1fe000000000000, 0x9}, {0x452, 0x4}, {0xfffffffffffffffd, 0xff}, {0x3, 0x5}, {0x40}, {0x9, 0xfffffffffffffffb}, {0x4bec, 0x10000}, {0x1, 0x4}, {0x5, 0x1f2b}, {0x6, 0x105a}, {0x701, 0xcb2}, {0x6, 0x55a}, {0x9, 0xfffff80000000000}, {0xffffffffffff8000, 0x4}, {0x7, 0xfffffffffffffffa}, {0xffff, 0x9}, {0x3, 0x8}, {0xffffffffffff38b9, 0x443d}, {0x1, 0x8}, {0x6, 0x4}, {0x4, 0x1}, {0x8, 0x7}, {0x44378679, 0x1}, {0x6, 0x100000001}, {0x7, 0x8}, {0x8000, 0x200}, {0x3, 0x3c0}, {0x4, 0x6}, {0x8000000000000000, 0x7}, {0x9, 0x3569}, {0xfff, 0x3}, {0xffff, 0xfffffffffffffff9}, {0x9, 0x9}, {0x9, 0x2}, {0x9, 0x2}, {0x8, 0x7fff}, {0x5, 0x9}, {0xf, 0xa3b}, {0xae, 0x8}]}, &(0x7f0000003d40)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x1, 0x101}, {0x9, 0x5}, {0x80000000, 0x6}, {0x6d, 0x8}, {0x9, 0x4}, {0x0, 0x3}, {}, {0x3, 0x4}, {0x9, 0xfffffffffffffff7}, {0x8, 0x7}, {0x6, 0x2}, {0x1, 0x8000000000000000}, {0x5, 0x6}, {0x800, 0x8}, {0x0, 0x7}, {0x8000000000000000, 0x8}, {0xa80000000000000, 0x10}, {0xfffffffffffffb4a, 0x8}, {0x1000, 0xf5}, {0x8000000000000000}, {0x3, 0x654b}, {0x5, 0x4}, {0x8, 0x5}, {0x4657ee46, 0x80b}, {0x80, 0x5}, {0x80000000, 0x7fffffff}, {0x3, 0x43}, {0xc39, 0x10001}, {0xfffffffffffffffe, 0x7fffffffffffffff}, {0x5, 0x772}, {0xdca, 0x1}, {0x3, 0x9}, {0x2, 0x5}, {0x101, 0x200000000000}, {0x100, 0xfffffffffffeffff}, {0x8001, 0x7}, {0x1, 0x95}, {0x2, 0x3}, {0x3, 0x9}, {0x0, 0x10000}, {0x6, 0x3}, {0x401, 0x5}, {0x0, 0x3}, {0x6, 0x4}, {0x28, 0x7fffffffffffffff}, {0x3, 0x9}, {0x0, 0xffffffffffffffff}, {0x40000000, 0xbb92}, {0x4, 0x1000}, {0x401}, {0xc818, 0x1}, {0x1, 0xfffffffffffffff8}, {0xf, 0x6}, {0xc, 0xd}, {0x1, 0x9}, {0x10001, 0xffff}, {0x8, 0x7}, {0x5}, {0x9a, 0x8000000000000000}, {0x9, 0x5}, {0x3ff, 0x6}, {0x7429, 0x7fffffff}, {0x9, 0x6}, {0xb, 0x10}, {0x9363, 0x2}, {0x4, 0x2}, {0x2, 0xc}, {0xfff, 0x4}, {0x3ff, 0x3}, {0x9, 0x3ff}, {0x85, 0xffff}, {0x6e, 0x81}, {0x4, 0xae9}, {0x3a7a, 0x4}, {0xbc0, 0x3}, {0x7, 0xab5}, {0x9, 0xe}, {0x3, 0x7fffffffffffffff}, {0xe1be, 0x6}, {0x7, 0xa1c}, {0x7, 0xffffffff80000000}, {0x8, 0x87}, {0xfbde, 0x8c6f}, {0xfff, 0x7fffffff}, {0x0, 0x3}, {0xffffffffffffffff, 0x9}, {0x4, 0x5}, {0x2, 0xbfc3}, {0x96ef, 0x1}, {0xce0b, 0x10000}, {0x82a, 0x40}, {0x5, 0x6}, {0x7, 0x1}, {0x2, 0x831462}, {0x2, 0x7}, {0x8, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x4}, {0xfffffffffffffa75, 0x4}, {0x1ff, 0x1}, {0xc, 0x3}, {0x7fff, 0x5}, {0x9, 0x1}, {0x80, 0x6}, {0x3, 0x4}, {0x4, 0x8000000000000000}, {0xffff, 0x9}, {0x3, 0x5713}, {0x101, 0x90}, {0x40, 0x5}, {0x6, 0xffffffffffffb8ba}, {0x100000000, 0xfffffffffffffffe}, {0x5e0d73ad, 0x2}, {0x4, 0x5}, {0xffffffffffffa70d, 0x6}, {0x0, 0x9}, {0x8, 0x3}, {0x31f, 0x9}, {0x3, 0x4a67}, {0x0, 0x2}, {0x101, 0x1}, {0x8000000000000001, 0x5}, {0x995, 0x4}, {0x1, 0xffffffffffffa876}, {0x1, 0x1}, {0x1ff, 0x9}, {0x7, 0x101}, {0x400, 0xa}, {0x100000001, 0xff}, {0x9, 0xc}, {0x80000000, 0x1}, {0x9, 0x400}, {0x10001, 0x696}, {0x3, 0x66}, {0x6, 0xcca5}, {0x3, 0x5}, {0xffffffffffffffff}, {0x13a5, 0xff}, {0x10, 0x7}, {0x7, 0xbb74}, {0x7f, 0x6}, {0xa75, 0x2}, {0x9, 0xfffffffffffffff7}, {0x7fffffff, 0x3}, {0x101, 0x10}, {0xc0000000, 0x4}, {0xeff0, 0x7}, {0x89, 0x4}, {0xff, 0x100000000}, {0x6, 0x5}, {0x7, 0x7}, {0xcc, 0x29}, {0x6, 0x7}, {0x2}, {0x1, 0x3}, {0x2, 0x4}, {0x2, 0x3747}, {0x7, 0x10001}, {0x5, 0x1ff}, {0x1ff}, {0x6, 0x1}, {0x65c8, 0xd7}, {0x7fff, 0x3}, {0x5, 0x455a}, {0x1, 0x8}, {0x8, 0x5}, {0x800, 0x68ecb782}, {0x6, 0x65}, {0xb0ae, 0xfffffffffffffda7}, {0x8, 0xffff}, {0xc6e1, 0x189efc18}, {0x2, 0x93c9}, {0x9, 0x5}, {0xffff, 0x7f}, {0x6, 0x6}, {0x5, 0x80000001}, {0x4}, {0x1a, 0x4}, {0x11, 0x1000}, {0x2, 0x4}, {0xfffffffffffffffb, 0x6}, {0x7fff, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0xe4c8, 0x2}, {0x5, 0x6}, {0x7f, 0x7f}, {0x2, 0x3ff}, {0x7fffffffffffffff, 0x7}, {0x9, 0x4}, {0xeee, 0x7}, {0x0, 0x3}, {0x1, 0x9}, {0x6, 0x1}, {0x687, 0x81}, {0x9, 0x588}, {0x8000000000000001, 0x9}, {0x3, 0x3}, {0x10, 0x5}, {0x6b05, 0x7}, {0x8, 0x9}, {0x1, 0x2}, {0x2, 0x4}, {0x6b9c072e, 0x1}, {0x3, 0x4}, {0x1000, 0x9}, {0x79, 0xb4d5}, {0x2, 0x6}, {0x1, 0x8d}, {0x7fff, 0x7}, {0x8, 0x53a}, {0x1, 0x3}, {0x7, 0x4ef}, {0x1, 0x8}, {0x8, 0x80000000}, {0x1, 0x7ecb}, {0x5, 0xffff}, {0x4, 0x4}, {0x9, 0x2}, {0x3, 0x8000}, {0x8, 0x1}, {0x0, 0x7}, {0xfffffffffffffff9, 0xfffffffffffffffc}, {0xff80000000000000, 0x1}, {0x200, 0x10}, {0x3, 0x2}, {0x19, 0xb0e}, {0x8d, 0x9}, {0xfffffffffffffff8, 0x8000}, {0xfffffffffffff001, 0x18}, {0x3}, {0x3a, 0x6}, {0x2, 0x7f}, {0x5, 0xff80000000000000}, {0x1ff000000000, 0x100000000}, {0x200000000, 0x8001}, {0x200, 0x4}, {0x9, 0x7}, {0x3, 0x6e}, {0x5, 0x8}, {0x4, 0xd}, {0x8, 0x3}, {0xd1, 0x5}, {0x8, 0x7fff}, {0x8, 0x9}, {0x4, 0xf70}, {0x4, 0x10}, {0x3, 0x9}, {0x4, 0x4}, {0x6, 0xfbb}, {0x7fffffffffffffff, 0x8}, {0xe, 0x36a36cce}, {0xfffffffffffffff8, 0x10001}]}, &(0x7f0000004d80)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000004dc0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000004e00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000004e40)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000004e80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000001}, {}, 0x9}, &(0x7f0000004fc0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000005000)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000005040)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000005080)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0x17f}, {0x10, 0x562}, {0x3, 0xb31}, {0x6, 0x800}, {0xffffffffffffffff, 0xee}, {0x0, 0x6599}, {0x3e9fb530, 0xf48}, {0x5, 0x401}, {0x3, 0x86}, {0x3, 0xfffffffffffffffd}, {0x81}, {0x5f3, 0x1}, {0x6, 0x80000000}, {0x4, 0x9}, {0x100000000, 0x6}, {0xffffffffffffff00, 0x6}, {0x5, 0x8000}, {0x9, 0x800}, {0xf, 0x4}, {0x8000, 0xe4b}, {0x5, 0x1}, {0xbe, 0x6}, {0x1000, 0x32}, {0x3, 0xe}, {0x80000000, 0x8001}, {0xffffffffffffffaa, 0xaa}, {0x7fff, 0x100000000}, {0xe3, 0x7fff}, {0x2, 0xff}, {0x1}, {0x5, 0x7}, {0x2c1, 0x1}, {0x5, 0x3}, {0x4, 0x9}, {0x4, 0x5}, {0xbf3b, 0x3}, {0x6, 0x2}, {0x401, 0xff}, {0x9, 0x3}, {0x7, 0x4}, {0x7, 0x2}, {0x1, 0x8000000000000000}, {0xbe6, 0x6}, {0x0, 0xc5b}, {0x1ff, 0x8c60}, {0x3714, 0x53}, {0x8, 0x9}, {0x7, 0x27}, {0x4006, 0x100000000}, {0x8000000000000000, 0x6}, {0xd, 0x8}, {0x10000, 0x5}, {0x4, 0x3}, {0x7fff, 0x8000}, {0xf, 0x6}, {0x0, 0x864e}, {0xe67, 0xaf8}, {0x80, 0x2}, {0xfffffffffffffffd, 0x54ae}, {0x100000000, 0x10000}, {0x0, 0x7fffffffffffffff}, {0x5, 0xe786}, {0x7, 0x3}, {0x6, 0x6}, {0x38a35adb, 0x1}, {0x2}, {0xda, 0x5}, {0x100000001, 0x1}, {0x0, 0xe}, {0x2, 0x10001}, {0x80, 0x7}, {0x6, 0x2}, {0x0, 0x7fffffffffffffff}, {0x3, 0x4}, {0xf, 0xf}, {0x0, 0x6}, {0x1, 0x80000000}, {0x7fffffffffffffff, 0x7}, {0x1d, 0x7fffffff}, {0xfffffffffffffffd, 0x6}, {0xb5bc0b1000000000, 0x8}, {0x9, 0x7}, {0x10000, 0x401}, {0x0, 0x7fff0000000000}, {0x1, 0x100}, {0x0, 0x5}, {0xb97, 0x7f}, {0x0, 0x7}, {0xda, 0x3}, {0x8000000000000001, 0x1}, {0x8001, 0x1ff}, {0x1, 0xa63}, {0x3c, 0x3ff}, {0x100000000, 0x8000000000000000}, {0xfffffffffffffff8, 0x100}, {0x8, 0x1}, {0x80000000, 0x6}, {0x68, 0x7}, {0x23, 0x3ff}, {0x24000000000, 0x4}, {0xb2e, 0xa65}, {0x6, 0x800}, {0xa, 0xa}, {0xc, 0xffffffffffff61a2}, {0x200, 0xfffffffffffffffe}, {0x5f4e, 0x40}, {0x5, 0x6}, {0x1ff, 0xf}, {0xca2, 0xba}, {0x1ff, 0xffffffff}, {0x4, 0x7}, {0x9, 0x9}, {0xffffffffffffffff, 0x4}, {0xceee, 0x60b8fa}, {0x5, 0x81}, {0x4, 0x9}, {0xb, 0x8}, {0x10}, {0x1, 0x8}, {0x100000000, 0x3ff}, {0xff, 0x8}, {0x8, 0x8}, {0x9}, {0x1, 0x5}, {0x14f6c585, 0x7fffffffffffffff}, {0xfffffffffffffffb, 0x8}, {0x0, 0xb07}, {0x4, 0x2}, {0x80, 0x8}, {0x4, 0xf45c}, {0x9, 0x2}, {0x7}, {0x1000, 0x8}, {0x10000, 0xd}, {0xff, 0xc}, {0x6, 0x2fd9}, {0x8, 0x4}, {0x0, 0x5}, {0x1ff, 0x7f}, {0x7}, {0x4}, {0x3}, {0x6, 0xffffffffffffffff}, {0xb, 0x100000000}, {0x9, 0x8000}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0x8}, {0x2000000, 0x1000}, {0x5, 0xe}, {0xffffffffffffffff, 0x2}, {0x783, 0x6}, {0x7fff, 0x4}, {0x8, 0x8000}, {0x4}, {0x7911, 0x8}, {0x7, 0x7fffffffffffffff}, {0x7, 0x5}, {0x9, 0x4}, {0x7, 0x8001}, {0x5, 0x9}, {0xea06, 0xfffffffffffffffa}, {0x5, 0x1c000000}, {0x3, 0x7}, {0x7}, {0xfffffffffffffff9, 0x6}, {0x284f, 0x9}, {0x2, 0xfffffffffffffff1}, {0x5, 0x7}, {0x626e3c0e, 0x6}, {0xd5b, 0x83b5}, {0x4, 0xffffffffffffffff}, {0xfffffffffffffaa3}, {0x2, 0x7fff}, {0x7f, 0xffffffff}, {0x7, 0xf5b1}, {0x0, 0xa}, {0x6, 0x1}, {0xcaf7, 0x8000}, {0x8, 0x815}, {0x3, 0x7}, {0x2, 0x52}, {0xfffffffffffffff9, 0xb}, {0xd7}, {0xf, 0x93}, {0x7fffffff, 0x5c6b}, {0x100000001, 0xffffffffffffffff}, {0x7, 0x737}, {0xf, 0x1}, {0xffff, 0x8a}, {0x3}, {0x0, 0x6}, {0x6caf, 0x6}, {0x4a}, {0xc9, 0x3}, {0x4, 0x9}, {0x72, 0xfffffffffffffffc}, {0x3, 0xffffffff}, {0x140}, {0x4, 0x663e}, {0x6, 0x5}, {0xf2c, 0xd}, {0x6b08, 0x6}, {0x8000, 0x400}, {0x4, 0x3}, {0x400, 0xe}, {0x2, 0x6}, {0x8, 0x3}, {0xfffffffffffffffb, 0x6}, {0x7, 0x4}, {0x8348, 0x35f9}, {0x6, 0x2}, {0x4, 0x6}, {0x2, 0x9}, {0x3, 0xc}, {0x1, 0xe}, {0xb, 0x5}, {0x8, 0x3}, {0x4, 0x1e}, {0x4, 0x6}, {0x9, 0x6}, {0x7, 0x80000001}, {0x0, 0x8}, {0xe, 0xa7d7}, {0x6, 0xa}, {0x1, 0x2}, {0x9, 0x4}, {0x8000, 0x3b42}, {0x7fffffffffffffff, 0x4}, {0xbd, 0x1}, {0x7f, 0x1d}, {0x6, 0x4}, {0x200, 0x8}, {0x9, 0x2}, {0x3, 0xffffffff80000001}, {0x9}, {0x11f8, 0x1}, {0x16c, 0x2}, {0xffffffffffffffff, 0x400}, {0x800, 0x6d5e}, {0xdb9, 0x5}, {0xfffffffffffffff7, 0x635}, {0x80000000, 0xf3}, {0x1, 0x9}, {0x7, 0xfff}, {}, {0x7, 0x1}, {0x5, 0x5}, {0x5}, {0x4, 0x8}, {0x300d, 0x1}, {0x2, 0x6}, {0x4d4, 0x10000}, {0x2, 0x9}, {0x7fff, 0x8000000000000000}]}, &(0x7f00000060c0)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000006100)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000006140)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000006180)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000006200)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0x8, 0x9}, {0x10001, 0x80000001}, {0xa, 0x800}, {0xd4, 0xc}, {0x6, 0x6}, {0x4, 0xffffffffffff7fff}, {0x6, 0x7}, {0x61, 0x2}, {0x1, 0x4}, {0x478, 0xa}, {0xfff, 0x8000000000000000}, {0x9, 0x7f}, {0x5, 0x80000001}, {0x0, 0x2}, {0x2, 0x3}, {0x40, 0x1}, {0x4, 0x57e}, {0x6, 0x8}, {0x46a, 0x3}, {0x5, 0x3}, {0x80000000, 0x4}, {0x1, 0xca}, {0xd, 0x3}, {0x1000, 0x48}, {0x10}, {0x5, 0x9}, {0x5, 0x45f0a6b0}, {0x22fb}, {0x0, 0x2}, {0x108, 0x4}, {0x6, 0x9}, {0x2, 0x70}, {0x100000001, 0x8}, {0x8, 0x9}, {0x4, 0xa}, {0x200000000, 0x9f6}, {0x8, 0x7eee}, {0x7, 0x200}, {0x9, 0x8}, {0x9, 0x7}, {0x37cd, 0x9}, {0x2, 0x53d1}, {0xa00, 0x101}, {0x8000000000000000, 0x9d2}, {0x50384196, 0x40}, {0x48cc, 0x8}, {0x10000, 0x69c0}, {0x949815b, 0xb15c}, {0x5, 0x9}, {0x1af, 0x8}, {0x8, 0x8}, {0x7fffffff, 0x7fff}, {0x3}, {0xfe, 0x663}, {0xffff, 0x40}, {0x2, 0xc1c}, {0x401, 0x9}, {0x80000001, 0x9448}, {0x3e15, 0xfffffffffffffe00}, {0x2, 0x6}, {0x0, 0x7fffffffffffffff}, {0x5, 0x996d}, {0xfffffffffffffff9, 0x6}, {0x3ff, 0x10}, {0x8, 0x441}, {0x3, 0xa5c}, {0x9, 0x2}, {0x7, 0x401}, {0x5, 0x2}, {0x6, 0x7}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x3}, {0x3, 0x1}, {0x800, 0x8}, {0x1, 0x1}, {0x8, 0x5}, {0x100000001, 0x200}, {0x0, 0x8}, {0xfffffffffffffffd, 0x906}, {0x5, 0x405b}, {0x6, 0x6}, {0x6, 0x6d488000}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0x4}, {0x3, 0xf9}, {0x7198a4ab, 0x2a}, {0x9, 0xebb}, {0xffffffffffff6125, 0x10000}, {0x200, 0x1000}, {0x10, 0x5e1}, {0xd3, 0x2d823bcf}, {0xe, 0x8}, {0x12000000000000, 0xffffffff00000001}, {0xffffffffffffffff, 0x80}, {0x41}, {0x9, 0x4}, {0x2, 0xffff}, {0x5, 0x7}, {0xa30d72f, 0x6}, {0x80000001, 0x80000000}, {0x5, 0x7}, {0x1, 0x6}, {0xd, 0x1}, {0xffffffffffffffff, 0x6f}, {0x7b5, 0x5}, {0x5, 0x87b}, {0xffffffff, 0x7}, {0x1, 0xffffffffffffffb8}, {0x5, 0x8}, {0x10, 0x2}, {0x9, 0x9}, {0x87, 0x5}, {0x1, 0x6}, {0x5, 0x3}, {0xd10, 0x1ad}, {0x2b3, 0x3}, {0xd, 0x53}, {0x3, 0x401}, {0x7, 0x1f}, {0x9, 0x7fffffffffffffff}, {0x6, 0x4}, {0x9, 0x4}, {0x3, 0x1}, {0x7, 0xfffffffffffffff7}, {0x8, 0xfffffffffffffff9}, {0xfffffffffffffff3, 0x2}, {0x0, 0x5}, {0x7, 0xfffffffffffff000}, {0x800, 0x10000}, {0xffffffffffff8916, 0x4898}, {0x0, 0xc}, {0x9, 0x401}, {0xfb, 0x1}, {0x1, 0x4c}, {0x365, 0x7}, {0x0, 0x3}, {0xabe, 0xd78f}, {0x0, 0x100000001}, {0xfff, 0x8}, {0x2, 0x7}, {0x8, 0x7}, {0xffffffff, 0x8000000000000000}, {0x9, 0x3}, {0x9}, {0xc5f, 0xfffffffffffffff9}, {0x6c, 0xffff}, {0xf16, 0x92e7}, {0x1, 0x5}, {0xb, 0x401}, {0x3, 0x5}, {0x4, 0x2e2}, {0x8000, 0x600000000000}, {0x6, 0x2}, {0xfffffffffffffffa, 0x6}, {0x5, 0x8}, {0x40, 0x8}, {0x0, 0x1ff}, {0x200}, {0xffffffffffffffff, 0x1}, {0x8, 0x7}, {0x2, 0x8}, {0x3, 0x3}, {0x4ea, 0xfac9}, {0x9, 0x7fffffffffffffff}, {0x6, 0x2}, {0x2, 0x5}, {0x2, 0x1}, {0x3, 0x7}, {0x1, 0xfc19}, {0xfffffffffffffffd, 0x9d4d}, {0x6, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x7, 0x9c9}, {0x0, 0x7f}, {0x10000, 0x4}, {0x4, 0x1}, {0xff, 0x4bf3e47}, {0x6, 0xfffffffffffffc01}, {0x0, 0x4}, {0x7, 0x8}, {0x9, 0x4}, {0x81, 0x3ff}, {0x9, 0x7}, {0x61d3, 0xc55}, {0x7, 0xffffffff7fffffff}, {0x7fffffff, 0x800}, {0x1c6, 0x9}, {0x1000, 0x4}, {0x2, 0x101}, {0xffff}, {0x9, 0x8}, {0x7fff, 0x8000000000000001}, {0x5, 0x969}, {0x5, 0x6}, {0xace, 0x9a}, {0x188, 0x3}, {0x80000000, 0x3d}, {0xffff, 0xa048}, {0x1ff}, {0x2, 0x6}, {0xfffffffffffffffd, 0xd2}, {0x6a5, 0x7fffffff}, {0xfe5, 0x5}, {0x0, 0x6}, {0x5, 0x7ff}, {0x7, 0x1}, {0xf, 0x7fffffffffffffff}, {0x1, 0xfffffffffffff4f7}, {0x1, 0x3}, {0x8, 0x60}, {0x81, 0x2}, {0x2, 0x2c7}, {0x2, 0x8}, {0x9, 0x8000}, {0x2, 0x9}, {0x6580000}, {0x3, 0xfffffffffffffffd}, {0x773, 0xf96}, {0x5, 0x3}, {0x9, 0x4}, {0x80000000, 0x70d0b9d}, {0x8, 0x257}, {0x6, 0x7}, {0x4, 0xff}, {0xfffffffffffffffd, 0x4}, {0xf2a2, 0x1}, {0x433, 0x6}, {0x3ff, 0x9}, {0x1, 0x10}, {0x7, 0x80000000}, {0x8, 0x3}, {0x401, 0xffff}, {0x3, 0x3}, {0x6, 0x6}, {0xffff, 0xe}, {0xffffffff, 0x1bc}, {0x212, 0x7f}, {0x0, 0x5}, {0x100, 0x8000000000000001}, {0x32, 0x401}, {0x1, 0x8}, {0x5, 0x8}, {0x634c, 0x2}, {0x7}, {0xffffffffffff44b5, 0xa}, {0x5, 0x81}, {0x2d, 0x6}, {0x1, 0x81}, {0x5, 0x1ff}, {0x1, 0x9}, {0x100, 0xfc00000000000000}]}, &(0x7f0000007240)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x6}, {0x7, 0x401}, {0x0, 0x8}, {0x9, 0x1}, {0x6, 0x1}, {0xd6d83eb, 0x1}, {0x246, 0x5}, {0x80000001, 0x81}, {0x1, 0x9}, {0x307, 0x9}, {0x10000, 0x3a}, {0x7, 0x8}, {0x7fffffff, 0x7fffffffffffffff}, {0x2, 0x5}, {0xa2d, 0x9}, {0x6, 0x20000000}, {0x9, 0x5}, {0x2, 0x5}, {0x100000001, 0x4}, {0x6, 0x1ff}, {0x9889}, {0x3, 0x3}, {0x7, 0x4}, {0x1e64, 0xfff}, {0x2, 0x3}, {0x5, 0x5}, {0xa2, 0x1}, {0x7, 0x4}, {0x6, 0xf}, {0xe858}, {0xb7b, 0x1}, {0xc1d, 0x3}, {0x3, 0x2}, {0x3, 0x100}, {0xd7c2, 0x9}, {0x6, 0x8}, {0x7, 0x7}, {0x2e, 0x6}, {0xffffffff}, {0x6, 0x7fffffffffffffff}, {0x9, 0x8}, {0x5, 0x7fffffffffffffff}, {0x6, 0xfffffffffffffe01}, {0x4, 0xfffffffffffffff9}, {0x401, 0x8}, {0x8, 0x55}, {0x3, 0xd69b}, {0x3, 0x40}, {0x458, 0x9}, {0x4, 0x5}, {0x7f, 0x9}, {0x100020, 0x9}, {0x1000, 0x5}, {0xb, 0x5}, {0x9, 0x3}, {0x3, 0xb}, {0x6, 0x2}, {0xe471, 0x7fffffffffffffff}, {0x1, 0x401}, {0x0, 0x4}, {0x3ff, 0x7fff}, {0xb, 0x1}, {0x8000000000000001}, {0x7, 0x3}, {0x26c8, 0x1ff}, {0xcf9, 0x51}, {0x7, 0x5}, {0x9, 0x1}, {0x4, 0x800}, {0x6, 0x70}, {0x6767, 0x1}, {0xec29, 0xb3de}, {0x8, 0x776}, {0xda7d, 0x2}, {0x8, 0x6}, {0x9, 0x4}, {0x1, 0x7}, {0x1, 0x80000000}, {0x2, 0x8}, {0x1, 0x7b}, {0xfff, 0x3}, {0x1000, 0x5d9}, {0x5f7f}, {0x8000, 0x4}, {0x855, 0xa28}, {0x6, 0x3ff}, {0xe9c, 0xfffffffffffffeff}, {0x8, 0xffff}, {0x8, 0x200000000000000}, {0x6, 0xd}, {0x4, 0x5}, {0xffffffff, 0x64}, {0x0, 0x7}, {0x9, 0x5}, {0x20a48f35, 0x67dc4b44}, {0x5, 0xeae}, {0x2, 0x100000001}, {0xa497, 0x6}, {0xffff, 0x7}, {0x5, 0x400}, {0xfffffffffffffffe, 0x7fff}, {0xb5, 0x3}, {0x6, 0xf}, {0xe, 0x6}, {0x80, 0x80000000}, {0x4, 0xffffffff}, {0xc0000000, 0x6}, {0x8, 0x2de}, {0x3}, {0xff, 0x2}, {0x30bb91c8, 0x2}, {0x4, 0x7}, {0xc93, 0x3}, {0x88, 0x80000001}, {0x7f, 0xffffffff}, {0x55e, 0x9}, {0x1, 0x7}, {0x200, 0x7f}, {0x3, 0x7}, {0x80, 0x1}, {0xef}, {0x4, 0xa7}, {0x2, 0xfffffffffffffe01}, {0x8000000000000000, 0xdbbf}, {0x7cd, 0x6}, {0x10000, 0x9}, {0xfffffffffffffffe, 0x9}, {0x2, 0x82}, {0x2, 0xb94}, {0x2, 0x90}, {0x9df7, 0x4}, {0x0, 0xb04}, {0x8, 0x5}, {}, {0xc4689d1, 0x3}, {0x0, 0x1}, {0x8000000000000000}, {0x8000000000000001, 0x6}, {0x7, 0xe220}, {0x3, 0xc}, {0xa, 0x5}, {0x80000001, 0xb0}, {0x9, 0x9}, {0x5, 0x8}, {0x3, 0x2}, {0x9, 0x7}, {0x8, 0xfffffffffffffff8}, {0xff, 0x5}, {0x6, 0xbce7}, {0x2, 0x8000}, {0x6, 0x9}, {0x5, 0x8}, {0x4, 0x2}, {0x1, 0x1}, {0x6, 0x9}, {0x9, 0x7}, {0x5, 0xfffffffffffffffa}, {0x100000000, 0xb0}, {0x4, 0x8f2d}, {0xf, 0x8}, {0x8fb, 0x7fff}, {0x81, 0xe2f70c4}, {0x2, 0xa}, {0x4, 0x7fff}, {0x392, 0xf30}, {0x4, 0x6}, {0xfffffffffffffff2, 0x3}, {}, {0x7, 0x6}, {0x2, 0xccb}, {0x800, 0x7}, {0xffffffffffff8000, 0x9}, {0xfffffffffffffeff, 0x2}, {0x2, 0x3c}, {0x5}, {0xffffffffffff8000, 0xd56}, {0x6, 0x8}, {0x7, 0x8}, {0x0, 0x98}, {0xfff, 0xfffffffeffffffff}, {0x1, 0x9}, {0x9, 0x1}, {0x3, 0xffffffff}, {0x4, 0x35481b27}, {0x9, 0x10001}, {0x5b6, 0x7}, {0x7, 0x200}, {0x5, 0xbadc}, {0xe, 0xce2}, {0x2a56, 0x9}, {0x5, 0xdbb7}, {0x3, 0x2}, {0x3, 0x2d6e}, {0x80000000, 0x5}, {0x5, 0x8}, {0xfe, 0x7}, {}, {0x7, 0x2}, {0xfffffffffffffffc, 0x7}, {0x7, 0x6}, {0x8, 0x6f31}, {0x80000001, 0x7}, {0x8000, 0x3}, {0xfffffffffffffffd, 0xc}, {0x5, 0x7d}, {0x77, 0x1}, {0x2, 0x4}, {0x7, 0x1fb999ee}, {0x9, 0x200}, {0x7, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x800, 0xf71}, {0x6ed4e133}, {0x400, 0x6}, {0x5, 0x3}, {0x3, 0x7e5}, {0x0, 0xffffffffffffffff}, {0x9, 0xd}, {0x6, 0xffffffffffffffff}, {0x7, 0x6}, {0x1, 0x2}, {0xfffffffffffffff8, 0xffffffffffffff98}, {0x8, 0x8}, {0xb28d, 0x7}, {0x4fa, 0x4}, {0x8, 0x5}, {0x8000000000000000, 0x3}, {0xfb, 0x8}, {0x1, 0x3}, {0x5, 0x3}, {0x7fff, 0xe}, {0x40, 0x1}, {0x800, 0x7}, {0xffffffffffffffff, 0xbf2c}, {0x6, 0x1}, {0xe, 0x6}, {0x7fffffff, 0x3}, {0x6, 0x2}, {0xb411, 0x4}, {0xf1, 0x6}, {0x1}, {0x6, 0x7}, {0x100000000, 0x2}, {0x1, 0x400}, {0x8, 0x2c000000000}, {0x3, 0xed}, {0x9, 0x1}, {0x80000000}, {0x1, 0x8000}, {0x4, 0xf3}, {0x5, 0x7}, {0x9, 0xfffffffffffffffd}, {0x5, 0x1d00}, {0xffffffffffffffff, 0x4}]}, &(0x7f0000008280)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f00000082c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x81}, &(0x7f0000008400)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000008440)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000008480)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f00000084c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000008500)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x45, 0x7c26}, {0x100, 0x1}, {0xffffffff, 0x5}, {0x9, 0x8}, {0xffffffffffffffb0}, {0x800, 0x1}, {0x0, 0x5267e0a8}, {0x0, 0x5}, {0x68a, 0x2}, {0x4, 0x80000000}, {0x5, 0x9}, {0x8, 0x7}, {0x74c, 0x101}, {0x100000001, 0x8}, {0x2, 0x80000001}, {0x5, 0x7fff}, {0x1, 0x89}, {0x40, 0x9}, {0x1, 0x3}, {0x1ff, 0xffffffffffffffc9}, {0xffff, 0x2}, {0x8, 0x507}, {0x0, 0x3}, {0x6, 0x4}, {0x3, 0x8000000000000000}, {0xf3, 0x7}, {0xc, 0x100}, {0x9, 0x4}, {0x4, 0x5}, {}, {0xd61, 0x800}, {0x7fffffffffffffff, 0x62fd40c0}, {0x6, 0x1}, {0x5}, {0x7, 0x4}, {0x6, 0x6}, {0x3, 0x2f3}, {0x6, 0x9}, {0x8000000000000000, 0x8}, {0x4, 0x323f}, {0x1, 0x428}, {0x5, 0xfffffffffffff801}, {0x2, 0xc0e40}, {0x4, 0xa091}, {0x1, 0x2}, {0x5, 0x4}, {0x6, 0x7}, {0x0, 0xffffffffffffffff}, {0x4}, {0x9, 0x1}, {0x70ed, 0x4}, {0x5, 0x2}, {0x5c27, 0x4a}, {0x6, 0x71c}, {0xffffffffdd0cc0ad, 0x8000000000000001}, {0x8, 0x65cd}, {0x1000, 0x77}, {0x100, 0x51}, {0x5, 0xfffffffffffffffc}, {0x7, 0x4}, {0x4, 0xfffffffffffffff7}, {0x7, 0x3}, {0x8, 0x7f}, {0x8000000000000000}, {0x0, 0x5}, {0x9, 0x3}, {0x800, 0x1}, {0x1000, 0x611c8000000}, {0xe51e, 0x8}, {0x6baf, 0xfffffffffffffff3}, {0xd, 0xcbc6}, {0xfd, 0x8}, {0x1, 0xfffffffffffff801}, {0x1, 0x6}, {0x8, 0x5}, {0x7, 0x9}, {0x6, 0x5}, {0x4, 0x6}, {0x2, 0x5}, {0x5, 0x80000000}, {0x3, 0x6}, {0x81, 0x7}, {0x506c, 0x7}, {0xf, 0xffffffffffff8000}, {0xffffffffffffffff, 0x7}, {0x3}, {0xffffffff80000001, 0x7c}, {0x4, 0x6a}, {0xb}, {0x1, 0x100000001}, {0x9, 0x3}, {0x2, 0x9}, {0x80, 0x10001}, {0x0, 0x4}, {0x3, 0xb9f}, {0x260, 0x6}, {0x6c8a, 0x7e2f}, {0x2, 0x80000000}, {0x1, 0x81}, {0x6, 0x8}, {0x2, 0xaa}, {0x2, 0x6}, {0x9, 0x1}, {0x1, 0xfffffffffffffffc}, {0x37, 0x1}, {0x1, 0x47}, {0x9}, {0x98, 0x5}, {0x52f, 0x4}, {0x8000, 0x80000000}, {0x0, 0x6}, {0x2, 0x9}, {0x9, 0x8}, {0x5, 0xcc46}, {0x4, 0x2b74}, {0x9, 0x1}, {0x7, 0x2}, {0x7ff, 0xc}, {0x1, 0x7ff}, {0x800}, {0x8, 0xfffffffffffffff9}, {0x401, 0xf}, {0x40}, {0x100000001, 0x5}, {0xfffffffffffffffa, 0xff}, {0x40, 0xc73}, {0x9, 0x10001}, {0x7, 0x5}, {0x9, 0x9}, {0x8001, 0x1ff}, {0x4, 0x101}, {0xfff, 0xffff}, {0x4, 0x5}, {0x1, 0x5}, {0xe, 0xd}, {0xd09, 0x9}, {0x1, 0xef}, {0x8, 0x292b}, {0x1, 0x9988}, {0x3278f320}, {0x5, 0x7ff}, {0x6d9f, 0x8000000000000001}, {0x1, 0x3}, {0x7fff, 0x400}, {0x7, 0x5}, {0x7af, 0x9}, {0x100000001, 0xfffffffffffffff7}, {0x30, 0x6}, {0x89, 0xffffffff}, {0x38a77b91, 0x2a}, {0x100000000, 0x2bd7}, {0xc44, 0x4}, {0x4, 0x7}, {0x7, 0x1}, {0x6, 0x8000000000000000}, {0x3e, 0x1000000000000000}, {0x5, 0xfffffffffffffff9}, {0x40, 0x1}, {0x0, 0x7}, {0x4, 0x1}, {0x1c3aa2ab, 0xae}, {0x7, 0x5}, {0xa, 0x5}, {0x3}, {0xd0, 0x7}, {0xe1, 0x5}, {0x4, 0x400}, {0x10001, 0x3}, {0x4, 0x5d7}, {0x401, 0xfffffffffffffffe}, {0x4, 0x8000}, {0x9, 0x100}, {0x1, 0x2}, {0x0, 0x4}, {0xfffffffffffffffd, 0x101}, {0x5, 0x7}, {0x2, 0x9}, {0x3, 0x6}, {0x8, 0x7fffffffffffffff}, {0x81, 0x5}, {0xb, 0x2}, {0xff, 0x7}, {0x0, 0x7}, {0x1df, 0x4}, {0x8, 0x2}, {0x5, 0x8}, {0x4, 0x200}, {0x3, 0xb4}, {0x1, 0x3}, {0x2a8, 0x8a22}, {0xe132c09, 0x5}, {0xd3c, 0x39f}, {0x8000000000000001}, {0xa4e, 0x10000}, {0x7, 0x7}, {0x7fff, 0x80000000}, {0x7ff, 0x5}, {0x7, 0xe}, {0x6}, {0x7851, 0xff}, {0x401, 0x3}, {0x3, 0x3}, {0x5869, 0x5}, {0x1, 0xf14}, {0x9, 0x9}, {0xf, 0x80e}, {0x8, 0x4}, {0x5, 0x2}, {0x38, 0x3}, {0x5, 0x9e1}, {0x2, 0x5}, {0x8, 0x7}, {0x8, 0x2}, {0x16000000000, 0x9}, {0xffffffffffffffff, 0x4}, {0x800000000, 0x2}, {0x9, 0x383}, {0xb9, 0x4}, {0x40000000000000, 0x5}, {0xd545, 0x100000000}, {0x8, 0x10}, {0x971, 0x9}, {0x1, 0x4}, {0xff, 0x77}, {0x7fffffffffffffff, 0x46}, {0x5, 0xfffffffffffffff9}, {0x10, 0xe}, {0xe2f, 0x7}, {0x2, 0x1}, {0xa, 0x9}, {0xc, 0x1}, {0x0, 0x7}, {0xa, 0x10}, {0x1, 0x100}, {0x20000000, 0xffffffffc349ab89}, {0x3, 0x6b99}, {0x10}, {0x2, 0x8}, {0x101, 0x1}, {0x9, 0x7ff}, {0x8000000000000000, 0xca0}, {0x6, 0x8}, {0x8, 0xff00000000000000}, {0x80000000, 0xec5}, {0x4, 0x1}, {0x9bec00000, 0x6}, {0x0, 0x7fff}, {0x9, 0xaf20}, {0x1ff, 0x4}, {0x2, 0x3}, {0x40, 0xc1}, {0xfffffffffffffff8, 0xcdbd}, {0x100000000, 0x2}, {0x5, 0x80}, {0x9, 0x2}]}, &(0x7f0000009540)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f00000095c0)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000009640)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000009680)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1c0000000}}, &(0x7f00000096c0)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000009700)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000009740)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000009780)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f00000097c0)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000009800)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000009840)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x20000000}}, &(0x7f0000009880)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000009900)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000009940)=@maxslots={{0x4f32494e, 0x3, 0x10}}], 0x32}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000009b80)) r12 = syz_open_dev$vcsa(&(0x7f0000009bc0), 0x9, 0x400) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r12, 0x40089413, &(0x7f0000009c00)=0x2) sendto$inet(r6, &(0x7f0000009c40)="573527b33d3b76ae951eb5d6463a3ca9032efdf0e32b4253a1547d3c3519cb47051478afbb371b43ac2429b2b8e9cb86987bfbaa8014d6e7b520a80241c4a7a884e739626c53e4e187ec12f97efedc9bf1a2111f8b6344aee6a5f7166f4f052bc0c8bb9ee878df466ca73e06ec1f70f3b8303978659e1f963d3b9332ec81d6d1a41e37758d31ce00d3955d5d1e3d8a1ae1d8ba52e6d1b8bf1e46cde80926ae8e583f02280fe97601d25e0d85f51c445008cc28895c98ef780c65907b719eb7f6d3b7537225791eb85f523b33e70e8e2be1bb2345267b", 0xd6, 0x40, &(0x7f0000009d40)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r12, &(0x7f000000a780)={&(0x7f0000009d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f000000a740)={&(0x7f0000009dc0)={0x944, r9, 0x700, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x10000, 0x1f}}}}, [@NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0xe73c, 0x2, 0x7, 0xf, 0x79c5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x66, 0x36, 0x3, 0x36, 0x16, 0x16, 0x2, 0x1c, 0x2, 0xb, 0x16, 0x36, 0xc, 0xc, 0x12, 0x1, 0x1, 0x1b, 0x18, 0x36, 0x24, 0x6c, 0x1b, 0x24, 0x1b, 0x6c, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x9, 0x79c, 0x9, 0x7, 0x1ff, 0xfffc, 0xc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x140, 0x2, 0x6, 0x373, 0x1, 0xfff8, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x6}, {0x0, 0x1}, {0x1, 0x4}, {0x5, 0x3}, {0x2}, {0x3, 0x1}, {0x5, 0x8}, {0x0, 0x7}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x3}, {0x6, 0x1}, {0x2}, {0x7, 0x9}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x5}, {0x2}, {0x2, 0x2}, {0x3, 0x4}, {0x2, 0x7}, {0x7, 0x3}, {0x3, 0x9}, {0x5, 0x9}, {0x3, 0x4}, {0x7, 0x6}, {0x5, 0x2}, {0x3, 0x3}, {0x2, 0x4}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0x4}, {0x7, 0x3}, {0x6}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x4, 0x99, 0x80, 0x4, 0xffff]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x5}, {0x3, 0x5}, {0x4, 0x4}, {0x5, 0x1}, {0x7, 0x2}, {0x2, 0x3}, {0x2, 0x4}, {0x4, 0xa}, {0x7, 0x3}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x9}, {0x6, 0x4}, {0x6, 0x5}, {0x5, 0x9}, {0x3, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x8}, {}, {0x4, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x3, 0x9}, {0x6, 0x4}, {0x7}, {0x0, 0x8}, {0x2, 0xa}, {0x0, 0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x4}, {0x2}, {0x5, 0x1}, {0x0, 0xa}, {0x6, 0x1b}, {0x1, 0x4}, {0x3, 0x5}, {0x6, 0x9}, {0x1, 0x6}, {0x6, 0x5}, {0x2, 0x1}, {0x1}, {0x4, 0x2}, {0x6, 0x2}, {0x0, 0x8}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x10, 0x8001, 0x3, 0x800, 0x5, 0xf, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0xa}, {0x4, 0x2}, {0x7, 0x2}, {0x7, 0x7}, {0x2, 0x3}, {0x5, 0xa}, {0x0, 0xa}, {0x6, 0xa}, {0x3, 0x9}, {0x0, 0x1}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x3}, {0x3, 0x5}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0xa}, {0x6, 0xa}, {0x0, 0x3}, {0x3, 0x6}, {0x6, 0x7}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x7}, {0x1, 0x7}, {}, {0x2, 0x2}, {0x6, 0x6}, {0x2}, {0x6, 0x1}, {0x5, 0x6}, {0x0, 0x6}, {0x7, 0xa}, {0x4, 0x8}, {0x4, 0x7}, {0x1, 0x3}, {0x7}, {0x2, 0x8}, {0x2, 0x9}, {0x4, 0x3}, {0x4, 0x7}, {0x3, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x4, 0x4}, {}, {0x0, 0x7}, {0x1, 0x2}, {0x3, 0x3}, {0x0, 0x8}, {0x5, 0x6}, {0x1, 0x7}, {0x3, 0x2}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x8}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x6}, {0x0, 0x9}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x3}, {0x2, 0x2}, {0x7, 0x1}, {0x3, 0x9}, {}, {0x4, 0x7}, {0x4, 0x5}, {0x4, 0x1}, {0x7}, {0x0, 0x8}, {0x2, 0x7}, {0x2, 0x6}, {0x2, 0x6}, {0x4, 0x9}, {0x0, 0x8}, {0x1, 0x9}, {0x5, 0x4}, {0x4, 0x2}, {0x2, 0x6}, {0x2, 0x7}, {0x3, 0x2}, {0x4, 0x9}, {0x2, 0x5}, {0x0, 0x5}, {0x4, 0x6}, {0x6, 0x9}, {0x3, 0x5}, {0x6, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x2}, {0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x3, 0x2}, {0x2, 0x6}, {0x6}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x1}, {0x3, 0x9}, {0x5, 0xa}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x3}, {0x5, 0x3}, {0x4, 0x5}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x3, 0x3, 0x0, 0x3, 0x0, 0x8000, 0xf7fc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}, @NL80211_ATTR_TX_RATES={0x64, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x8001, 0x7, 0x40, 0x8, 0x9, 0x76, 0x401]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x2}, {0x0, 0x2}, {}, {0x0, 0x8}, {0x5}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x7}, {0x7, 0x2}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0x4}, {0x2, 0x9}, {0x3, 0x3}, {0x5, 0x3}, {0x1, 0xa}, {0x3, 0x3}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x9}, {0x5, 0x2}, {0x1}, {0x4, 0x3}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0xa}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0x5}, {0x7}, {0x3, 0xa}, {0x1, 0x6}, {0x6, 0x6}, {0x5, 0x7}, {0x5, 0x7}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x1}, {0x2}, {0x2, 0x2}, {0x3, 0x6}, {0x5}, {0x4, 0x9}, {0x4, 0x6}, {0x1, 0x3}, {0x0, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x2}, {0x7, 0x7}, {0x5, 0x7}, {0x7, 0x1}, {0x3}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x5}, {0x4, 0x9}, {0x2, 0x2}, {0x2, 0x3}, {0x4, 0x1}, {0x7}, {}, {0x7, 0x3}, {0x5, 0x6}, {0x3}, {0x1, 0xa}, {0x2, 0x3}, {0x6, 0x3}, {0x4}, {0x0, 0xa}, {0x7, 0x2}, {0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0xa}, {0x7, 0x6}, {0x2}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x3}, {0x5}, {0x1, 0x5}, {0x1, 0xa}, {0x5}, {0x1, 0x3}, {0x2, 0x1}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x3}, {0x3, 0x3}, {0x4, 0x5}, {0x3, 0x1}, {0x0, 0x5}, {0x2, 0x2}, {0x1, 0xa}, {0x3, 0xa}, {0x2, 0x6}, {0x3, 0x6}, {0x0, 0x9}, {0x3}, {0x7, 0x6}, {0x0, 0x6}, {0x3, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0xd, 0x9, 0x8, 0xbc8d, 0x4, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x0, 0x0, 0x2, 0x1, 0x2, 0x1, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0xfffc, 0x4, 0x7, 0xe9b5, 0xfff9, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xcdd, 0x5, 0x2, 0xb, 0x2, 0x0, 0x9bfc]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0xa}, {0x4, 0xa}, {}, {0x1, 0x9}, {0x5, 0x7}, {0x6, 0x8}, {0x3, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x7, 0x4}, {0x1, 0x6}, {0x7, 0x9}, {0x3, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0x8}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x6, 0x7}, {0x1, 0x4}, {0x4, 0xa}, {0x0, 0x7}, {0x0, 0x4}, {0x6, 0xa}, {}, {0x3, 0x9}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x8}, {0x4, 0x8}, {0x2, 0x4}, {0x0, 0xa}, {0x7, 0x9}, {0x7}, {0x0, 0x8}, {0x7, 0x2}, {0x2, 0x9}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x3, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x4}, {0x4}, {}, {0x0, 0x8}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x5}, {0x7, 0x6}, {0x5, 0x1}, {0x3, 0x3}, {0x5, 0x7}, {0x5, 0x7}, {0x6, 0x1}, {0x2}, {0x7, 0x3}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x4, 0x2, 0xffc0, 0x1, 0x7ff, 0x3, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x238, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x82, 0x9, 0x6, 0x8, 0xbf, 0x2, 0xba]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0x5}, {0x0, 0x8}, {0x2, 0x4}, {0x4, 0x3}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x4, 0x9}, {0x0, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x7, 0x8}, {0x3}, {0x7, 0x6}, {0x4, 0xa}, {0x0, 0x9}, {0x3, 0x8}, {0x4, 0x2}, {0x6}, {0x0, 0x7}, {0x5, 0x2}, {0x6, 0x2}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x4, 0x7}, {0x2, 0x1a}, {0x4, 0x3}, {0x3, 0x7}, {0x6, 0x3}, {0x3, 0x6}, {0x1, 0x6}, {0x5, 0x4}, {0x7, 0x6}, {0x3, 0x9}, {0x2, 0x5}, {0x3, 0x8}, {0x0, 0x7}, {0x7, 0x9}, {0x7, 0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x7}, {0x7, 0x4}, {0x2, 0x9}, {0x6, 0x2}, {0x1, 0x7}, {0x4, 0x2}, {0x0, 0x8}, {0x7}, {0x1, 0x7}, {0x3, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {}, {0x3, 0x7}, {0x4, 0x5}, {0x7, 0x6}, {0x3, 0x3}, {0x6, 0x8}, {0x1}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3, 0x1, 0xc, 0x9, 0x24, 0x1, 0x36, 0xc, 0x60, 0x2, 0x9, 0x16, 0x48, 0x45, 0x3, 0x9, 0x16, 0x9, 0x9, 0x18, 0x4, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfffb, 0x7fff, 0x1, 0x7, 0x7, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x9}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x3, 0xe, 0x8, 0x3, 0xffff, 0x6277, 0x9]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x800, 0xa91a, 0x4, 0x9, 0x5, 0x0, 0xffff]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x0, 0x7fff, 0x1, 0xfb, 0x7, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2}, {0x0, 0x8}, {}, {0x1, 0x8}, {0x4, 0x2}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x3, 0x2}, {0x0, 0xa}, {}, {0x2, 0x6}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x1}, {0x7}, {0x2, 0x3}, {0x7, 0x3}, {}, {0x1, 0x1}, {0x2, 0x9}, {0x7, 0x7}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x6}, {0x4, 0x6}, {0x2}, {0x3, 0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x5}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x6}, {0x6, 0x9}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0xa}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd84, 0xcb2, 0x0, 0xfffa, 0x1, 0x3, 0x7, 0x7]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x3}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x1}, {0x6, 0xa}, {0x2, 0x6}, {0x4, 0x6}, {0x2, 0x2}, {0x6}, {0x6, 0x1}, {0x3, 0x8}, {0x0, 0x6}, {0x4, 0x7}, {0x6, 0x9}, {0x7, 0x3}, {0x0, 0x6}, {0x1, 0x3}, {0x6}, {0x4, 0x1}, {0x6, 0x1}, {0x0, 0x8}, {0x5, 0x5}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x7, 0x5}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0x3}, {0x0, 0x3}, {0x5, 0x5}, {0x5, 0x8}, {0x3, 0x5}, {0x4}, {0x5, 0x8}, {0x7}, {0x0, 0x6}, {0x1}, {0x0, 0x6}, {0x4, 0x8}, {0x6, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {}, {0x5, 0x9}, {0x4, 0x5}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x5, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1a, 0x9, 0x6, 0xd, 0x5, 0x3, 0x0, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x1ff, 0x80, 0x4, 0x8, 0x1, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x5ac, 0xbcdf, 0x4, 0x5, 0x7, 0x3ff]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x9, 0xdd4, 0xfffb, 0x9, 0x3, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8, 0x9, 0x100, 0x14, 0x8001, 0x264e, 0x3]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x8}, {0x2}, {0x7, 0x7}, {0x6, 0xa}, {0x5, 0x5}, {0x1, 0xa}, {0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x3, 0x1b}, {0x5, 0x9}, {0x6, 0x7}, {0x6, 0x8}, {0x0, 0x2}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x6}, {0x6, 0xa}, {0x3, 0xa}, {0x2, 0x8}, {0x2, 0xa}, {0x3, 0x8}, {0x2, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0x2, 0x4}, {0x6, 0x8}, {0x7, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x1}, {0x5, 0x3}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0xa}, {0x7, 0x1}, {0x5, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x5, 0x8}, {0x4, 0xa}, {0x4, 0x8}, {0x4, 0x6}, {}, {0x7, 0x7}, {0x3, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfff, 0x0, 0x10, 0x3, 0x6, 0x0, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x1dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x8}, {0x2, 0x9}, {0x7, 0x9}, {0x3, 0x7}, {0x7, 0x1}, {0x0, 0x4}, {0x4, 0x9}, {0x5, 0x2}, {0x6, 0x5}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0x2}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x3}, {0x2}, {0x6, 0x7}, {0x2, 0x3}, {0x1, 0x8}, {}, {0x0, 0x2}, {0x2, 0x2}, {0x1, 0x8}, {0x5}, {0x6, 0x3}, {0x7, 0x2}, {0x1, 0xa}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x9}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0xa}, {0x4, 0x4}, {0x7, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x0, 0x2}, {0x3, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x7, 0x6}, {0x4, 0xa}, {0x1}, {0x0, 0x9}, {0x1, 0x8}, {0x1}, {0x6, 0x3}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x4}, {0x6, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x81, 0x100, 0x8, 0xfffe, 0x9, 0x7, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfffe, 0x1a, 0x79, 0x6, 0x80, 0x5, 0xe]}}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x71, 0x4, 0x4, 0xcfec, 0x6, 0xf9b3]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0x3}, {0x0, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x2}, {0x4, 0xa}, {0x0, 0x4}, {0x6}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x5, 0x30, 0x4, 0x60, 0x1b, 0x4, 0x0, 0xc]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x8}, {0x0, 0x2}, {0x3, 0x5}, {0x2}, {0x1, 0x2}, {0x0, 0x3}, {0x3, 0x5}, {0x0, 0x8}, {0x5, 0x7}, {0x4, 0x4}, {0x4, 0xa}, {0x2, 0x7}, {}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x3, 0x2}, {0x2, 0x4}, {}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0xa}, {0x6, 0x8}, {0x6, 0x2}, {0x6, 0x7}, {0x4, 0x6}, {0x0, 0x5}, {0x7}, {0x0, 0x7}, {0x1, 0xa}, {0x3, 0xa}, {0x2, 0x2}, {0x7}, {0x5, 0x7}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x5}, {0x1}, {0x5, 0x7}, {0x0, 0x2}, {0x0, 0x7}, {0x6, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x72, 0x9, 0x6, 0xa, 0x1, 0x8]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xc14d, 0x5, 0x8, 0x0, 0x3, 0x4, 0x7]}}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x3b05, 0x9, 0x1ff, 0xc, 0x200, 0xc3f1]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x6}, {0x4, 0x8}, {0x2, 0x3}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x6, 0xa}, {0x2, 0x8}, {0x7, 0x9}, {0x4, 0xa}, {0x2, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x8}, {0x2, 0x6}, {0x3, 0x8}, {0x7, 0x19}, {0x2, 0x6}, {0x7, 0xa}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x3}, {0x6, 0x8}, {0x1, 0x4}, {0x0, 0x8}, {0x2, 0x7}, {0x4, 0x3}, {0x0, 0x8}, {0x6, 0x1}, {0x6, 0x8}, {0x5, 0x7}, {0x7, 0xa}, {0x5, 0x7}, {0x1}, {0x4, 0x9}, {0x3, 0x3}, {0x4, 0x3}, {0x2, 0x4}, {0x0, 0x7}, {0x5, 0x2}, {0x0, 0x6}, {0x5}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0xa}, {0x3, 0x7}, {0x6, 0x2}, {0x2, 0x4}, {0x2, 0x2}, {0x7, 0xa}, {}, {0x4, 0x9}, {0x7, 0x7}, {0x0, 0x4}, {0x3, 0x2}, {0x2, 0x3}, {0x0, 0x5}, {0x4, 0x9}, {0x7, 0x3}, {0x5, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x4, 0x9}, {0x4, 0xa}, {0x1}, {0x2}, {0x3, 0x7}, {0x4, 0x2}, {0x0, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x3, 0x0, 0x69, 0x2, 0x12, 0x5, 0x6c, 0x55, 0x16, 0xf, 0xb]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x9}, {0x7, 0x1}, {0x5, 0x9}, {0x2, 0x3}, {0x1, 0x8}, {0x2, 0x5}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x4}, {0x6, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x5, 0x9}, {0x6, 0xa}, {0x2, 0x2}, {0x1, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x2, 0x5}, {0x5}, {0x6, 0x8}, {0x7, 0x8}, {0x5, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {}, {0x6, 0x5}, {0x0, 0x8}, {0x4, 0x8}, {0x2}, {0x4, 0x7}, {0x7, 0x4}, {0x2, 0x5}, {0x1}, {0x5, 0x9}, {0x3, 0x2}, {}, {0x5, 0x2}, {0x0, 0x9}, {0x5, 0x8}, {0x4, 0x9}, {0x6}, {0x6, 0x4}, {0x4, 0x1}, {0x1, 0x5}, {0x1, 0x4}, {0x2}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x5}, {0x7, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x7, 0x710d, 0x0, 0xb, 0x7, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x0, 0x4, 0x6, 0x48, 0x1, 0x18, 0x1b, 0x2, 0x16, 0x18, 0x18, 0x6c, 0x71, 0x48, 0x60, 0x6c, 0x24, 0x1b, 0x4, 0x2, 0x2, 0x16, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x80, 0x8, 0x4, 0xc2, 0x1, 0xc, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x81, 0x2, 0x8, 0x8000, 0xca, 0x1, 0xfff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x1}, {0x4, 0x3}, {0x3, 0x1}, {0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x3, 0x2, 0x8000, 0x5, 0x5, 0x8001]}}]}]}]}, 0x944}, 0x1, 0x0, 0x0, 0x40000}, 0x40084) openat$tun(0xffffffffffffff9c, &(0x7f000000a7c0), 0x400080, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f000000a800)={'wlan1\x00'}) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f000000a840)=0x8, 0x4) 7.065998786s ago: executing program 0 (id=6102): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x23, "5c76276f6c86622447099377e66e2e9d40f7cb08a213db2d0bab5fbe9cc1cb0a2d53fa"}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0xff98, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 6.734979709s ago: executing program 2 (id=6103): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x23, "5c76276f6c86622447099377e66e2e9d40f7cb08a213db2d0bab5fbe9cc1cb0a2d53fa"}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0xff98, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r4, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 6.487872311s ago: executing program 2 (id=6105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440500000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 6.220006438s ago: executing program 2 (id=6106): unshare(0x64000600) r0 = fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) r2 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ip6_vti0\x00', 0x400}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) unshare(0x4000400) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x46, "ee0f6e30c115fde553a7a5ce7a57375baac986c739a7a064925fd3b3ee990ef546cb2b9136215c3862e25d64000000000000130000000000e581f37887ddb63490597885544ed6265968ec048367619ee895726b699a55317447"}, &(0x7f0000000100)=0xb6) 4.90604659s ago: executing program 4 (id=6113): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0xa5f288b4872b4003, 0x5, 0x5, "b54ce52e39046868bcf2f75089c86b302cd6188b57b2b59c4df079e389d719af2c5dd08cf01d928739441c819e839bd0f1eef252951384596a4994a31c9e91", 0x23}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)="87ee88c59562b5f4623ec5cc4a13bc6de50d26bf2907aada90d6034a9faa4dac42", 0x21}, {&(0x7f0000000400)="71f6485a5da09b0cde83f4f9e1522c4d53d1db87057febbd7d24e1462ac9d3f5ceeabe9af81bee55cc636f2bba2d065be1544e73be6d675ef0ce7df253535f652977610cfd2f79c19a24d0749b181e1aa6a5d64fe669a0ec9206a2c016be765ce9132b5d6d84263e60ae421ed31de163a13672963feede0730617dd8f79c319ec4f6f7e1d1d85c49de85803a4965f0328ee175587c3516a623c8d6e50ad5d5425d094c951da0d56579b3f8735f075f9121261dbab9008cd75a9f26c596cfae00153a0e8f7d1a165902c3120102c02062b26da3c3b8f06bdb3f69adafcf23d8f4547ae8176ec2a9bd1acb67abb701deb6dee1eda68ac81a8f67", 0xf9}, {&(0x7f0000000500)="04dca1e6d7a1b3d6b11e09e185a3511b2595cbdb7f53d1a96d13f82d34fc82acdc03429850500db51a80a28e2c619ba76cf793ae3f5e30ec33885be8b1d4300bc6dd57a8fd97b58ffc25088157f170e377a3bd75752314", 0x57}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000600)=[{0x58, 0x103, 0x2, "d3782934a409ddcde44388227926ce131ef1b3716cddc573e249efae40200a34f44961f4834935744ba6f5b0f96571c11914cfd27e0cfe1ea1846e06e5340d0687"}, {0x98, 0x108, 0x4, "3d57e8255e88918052b18f57fa65f09bae9328dccdf188c34aa8d8e1cb32aab2bc2b1fb07826581ac8d20e368cf346cdf79ad7a9a05f1751732b11790dc2b8357f6d0fe2b5fa78fe3d7eb7dc57e61ff0dbf65012357240c7cfb1911bc9c0d2baa8309ccd6e45233e809751977e9025c87a946010ba347c62615df3c1cf832296f4"}], 0xf0}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000004a0001002bbd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0700000014000100ff"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 4.757082914s ago: executing program 2 (id=6115): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x23, "5c76276f6c86622447099377e66e2e9d40f7cb08a213db2d0bab5fbe9cc1cb0a2d53fa"}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0xff98, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 4.126121006s ago: executing program 6 (id=6119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (fail_nth: 1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3.618492587s ago: executing program 0 (id=6120): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x40403, 0x0, 0x9, &(0x7f0000000480), &(0x7f00000004c0)=0x7fffffff}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x9, 0x20000000, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 3.617693275s ago: executing program 4 (id=6121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x55402}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'pim6reg1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040051}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x24}}, 0x20040005) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x670281, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="337636a52ca91981f08efb333d195937b94e127c415cfb0ecea2cc588cf46922c271d41ff65207e1c8e45f002a856ec792ab71f73fd30ee30a0732dc9cbc91e008f8c17e2b7b93a232d04ac447f9dc5e235d2ef999afc9f18712cf642f5725388d5aa9f9e3875d59ad71eb7f6c34924f687fdc3d0e1c1e6779b5bd2e01b5d2ccbbbfcbc15b75c4f791605b170c643ea5849a2ad1e6f3ad48acc28e7e4170b8f81d022623c6d091cf3ff56361bddaddb8d2dceafe056855f7470867184bc004be9e1b94b8110aeef5"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3.480380879s ago: executing program 6 (id=6122): r0 = syz_usbip_server_init(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000001a80)={[0x5]}, 0x8, 0x80000) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@random="195df410dc24", @random="000600", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x54, 0x2c, 0x0, @dev, @local, {[@routing={0x2b}, @routing={0x4, 0x0, 0x2, 0x6}], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xff}}}}}}}}}, 0x0) close_range(r1, r1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_usbip_server_init(0x1) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x5, 0xfffff030}, {0x6, 0x0, 0x2}]}, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x68, 0x0, 0x810, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xd6d, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x48040}, 0x40000) syz_usbip_server_init(0x2) 3.321470678s ago: executing program 4 (id=6124): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3deb987a89456383ceba51ed71ebdf72a38bcdd6f0f71a7e9f729b0bf4366fa2d5005dd3fcc4a8a8982a8883633520c43653016bbef19b3fbd8cbede415ef106387315827bfec2d85762d9aef1736baea3dd53bcb9ac89a47de0eb9f39d"], 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000440)={0x200, 0x1}, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.280116906s ago: executing program 3 (id=6125): socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.022683338s ago: executing program 0 (id=6126): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000000008b150000"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0003020000000000005f3a65850008bf6f81bd0f0e570b94a7e21a1bf8c5a1073b60d4"], 0x0, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x32, 0xa, "e2f32531", "a855e0c4"}}, 0x0}, &(0x7f00000009c0)={0x84, 0x0, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x80}, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @local}, 0x0, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x3}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r9 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) 2.928283853s ago: executing program 3 (id=6127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0xef, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) 2.865612259s ago: executing program 3 (id=6128): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) (async) r1 = getuid() quotactl$Q_QUOTAOFF(0x0, &(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, r1, 0x0) (async) sendmsg$xdp(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000340)="b87d70565452e58343f38cb9210fd46277cee7e1a374cb948f20fd4dae336749706b0c0645ac809be35fe0a74a9a78ba4057b5f2b8ecc17cb029a833f3cbcfb67228ee909bd53d2113b1f12e0b383097e9ba31b19ce62a00442ed4143b15c6a13515243e5d210c22353661f935e44c40a64a2d91b485faf221733b5183bd1d3b100221b5ee78aab4b122a7ed0b495f6eb0ecd5f876076dadb4a1000ff04261953fe7f1914b32b5de5877cdd275f2dfdd8a1e4605ca536075c5b54f374bb45b5bd73f678ec1eadba0a98c4c720ae745d419a971485f617faf7c3b92f11270bf6ccae5289ecd3370b4661177c1faaef5836b84d115d2d1fe", 0xf7}, {&(0x7f0000000480)="46d2e373b1df3c3b27f259519c67fb0f7d37625513bd3135b8883f6bb48a474f611559f15273dadf0fa0aaaa16e3d96241dfab7b2bbf4a3f2bb5c4e584f84fe2423970034f3608883ac0aaa1321371b590aa3f5c394a6732aa767d2016676653d829c6ae9a530e8e27f71ff0cbc1e8f3b5c46926f637b3668b9fefa20e5ba486a1dee4cbaf0ceb217179bc24bfd14ac13d5a8cb385ac9140b855fd0b9ed2094262403ab444234144de5edf9edc37dd4d20720dda6d0ab4397165b6f18ad17840357a8395691344ff84de8025a673c1f4065db5463b5431ad30562dee75", 0xdd}, {&(0x7f0000001040)="4163d4df050c21a0e6c4b2843da2bdafddb2fedb869de41ce00ce565c4426f74debbb4b330097dea401eff2e5e94af5e1e85d108f27e5497e67328ef5047493a2fd98e84951ea9677c3be138d25637c9545ef584275e45adf394303d074baaed54d398846f4f53f4b6814e05c1a5c3c26f0770a388962cf7ce5266550b55548a833fb78853f2c7d789fec862a45a5af30df9399a101121f56fcb6cea845be2e54063f7d06f66a2c06dd04c703df1bb842eec785d85ef64a01329657da070fbf3f431265c6af8d480d1542a3a2db283fb706d786b4c2ddd72f67b45099e2065b2615b87d37ca21fd977cf86c313bf07da396b5ed0d60f5e719138637b18c7e6fd468a1ad3814b5753631eced8a226d6eb624cad344db6f8f6995dcc1f31f143bdbfcdf46071c585d6ae2c3e9b431dba3d4654ae9490bb27c3ef0a7160a4244aff9569392c64cabdbc25a75e048ffad496ac3ac0d358aec81bafdb9d60e74f91caba67ceb4f1f1446d4cc0c8a1f16d5c22ae4e828e07dbd4250a88534daaf0820995527a2282c5d253e927a403bd0765d1c2e594cb4585288060c86a7cedecaabb0966ea8b0eebf131951a7582ce5dbe23c5ecde238fb9a6ce7531b6d0698dd4febe9eefc8938e779f61becb979012258b9d348d60a7d12b7ff64e7541a293065c24371b12bf5abc056a166b10ca86141a76cb827e0a3009aa796771941fb846a9b81e360ddcc131cfea4d5c234c63892457d23da080138c10a8602a6daaac68392b9d01f1578efbd75579fba8560f3e642fcca8626b26fef73b651ec96cbb5defb7caea17a7d5bbaca1703018d36618505c4bb075819677ee125296d3b8d36f15fa8119c6df794faedf615fda03a5ff6f7cb9435552d60e257932258de461e23add6302b29784c614440ab6b1e15a4ea18e665b6da0d75cb8c71217f44b074195ab516a29e9efeda4bb41003cd325b5ff1afeeb11ea5398e4c6c6587dcd794b12f75d704e73e3ae5c4fc43678752c4f43052e42775ec08645f1c713d7ede59ca9ca55bce1526ea9b57dbeb1199cfd8713555dd22c24e0502bd0d701ef6bac6b557e6e9bf1e5adf1767bc5d8ae86db3d7495307bbbfd416244f950cbfd9347567e557e2fa79954935e64d39b57202ea7d9a6a4094d1f3401f1539a829ac8bcc1a0bfb7a024058bff76c6c22932887495975a169ac02705464ce505eb49dfb9635eda771f31c1d8e9da0ce02a38fa8fbed262a7b5677cd870e90cab8191cc4662be3c711ab41ad7acbc51b8cd69aa9e9f298f8bf8936ebf47b51fb66a5ad62b59e40ac793c0375e93815f2516a7ee1f9dedcf6b24c2d7b10a9c7f59a1e88c65ef7066e9b3dc032ec1e5a48e6849eb2a9bfa6179ec772a4709b8e4a211e168f835e5968050c43c3014706d96cad1de53b75f8f5e2002677aee097de73b9e0546b9907a40e9e0171512e6464659cf4d29d030415d912bab8b7b66a83295413b5ad9fb1284f80f4a75e0c303c4e75c10b9d3f3b2e3ded778c5d38aacd9153deb268acc10c1b7c8a8db396c07beaa4d20ddd7386b4235aa550e3578dd375749eace1d4eb69024778258d5319a422838ac69ddbb3118179f454ee8923b374ed4e562c8ea7064990cf677b0c5620853d8a10aab928be4d385da18cee8226f823a25088d57f379a2a068296ce92650ce3dc0ee7cb62fba3c1456af4ca6d3f6f9cf7a5e35986fe931043c2760e9fddf34a48d8bd46c2aa93e05b311533b18ca1b4cabcd65785d632c84fcf05c4dc29a54f33bb799c34cf1edf19b98e8dc82858b15d81fe862b0f9870af1541eaa4a7e240ec4bb45d38f6652d434b0f9d8ac9ec32749993bc88eb2ab040f5ae7cb2bdeaa0b6d8b9dde2954fc56d0d0bbd28b179cd541ad629d496fc43045227a51495df3b23b723adf2ae2eddba9f8070a4308ae16fa8c3355a607341b584684b13eb5e6dd242743b27e314c21b9e49dce816540bb8002e7333961bfb0f4d9ac4d65d68f6e038d3b6e8f79b1b841f869035fe4a21c9462ab6b492b09d810da8e94aa4ba10aaebb9fe86d8e3acaa5af7651ee1299aef7244d572d4fecfeec3f8a5987fe2ff35e3930983f2451aeddac106c957f7100ebf04a10dd445e58dc60cea5f4e534c6ea4af6f40455f79a4344a57b032cf52a1e959ba48bdfb2254f2f1a4802992c7935750db7ced5bb5fbbfcf09e03ec67b174b32bacbc42435502f5959e6714e8ae52e4939d417a2ad54c1813cc6e3dc01304a371335e7a193987e440296955e87a28f80cf2fc6a722cab342bf83984fcf8f8f403b52013c205f1bcde4d509dd8fc3fcbbd74b33733e0a6d3ad2de4d4f72237fd225537764197979aa8a09369c1507453f6991618383876c86358267b147a948d594c30464259947b6571c20a31c2fa6b9b16ad7fd65ee746536ccb01948bd9cb0955799205bc227be11093174a4517d4df7f6f45ef324cd5d1c590d5d314562624a0fcd93147258d717275e957120b9682d5f5b0ca3871ab48f014762059ce78a1ea6ea7f560c4b02dcccbd16ab6199a4bcb5fc8f308d49cd5ee3efb68a7d86b0e7ca1ffd9f8861be5ee7e3891f53c48205655fb47f6675630ad698360937bb75df0006efe26c6a866d667c231fbca9d67bd254c6bb5d270c0c3aef46bc09a115abdeb83746381cade76765d93c0b43ec7921b72e7f6b5eb948beb13c522957b934b275e3c423a8e9fd80b8edf65add5dc4caa34cd1167526d33b82f3f03fdd7f13f09db487e5af019adb61a2d4fedcf6d832e1e22eb529b85a97a71202c4f2dc1411ee19a2ea46cf89122b2dfb8b31c7e8787c6b4bfa1bf4a6376d3d2ca47fe0819e02ff6e30bf822379c1f43d6a19295b31aae92723f8f90d1571705eb75b701cc00ff89db13003ff33bb681ce146e600f78a8719b0f3a011cde658061da67f1791b4bc6e0485ef55cec6deec7e008034da1f2aeb6a497887b6df0387de58659fd9bb353245635fb25939d494bde72ac6146f808426a6c2469035ced4f916642f29cd871bae5ecb8c35dda6ea036a8c92892a7e32f607169e262dd0f0874dfea84d55ec8eaec4a89fca0d3c117062918d4c65134895b4e5a0d16cba1e3081e093bc6c46d55f6a87bd688a1aa67fb09c9eda97b08f4b286e85332b2132644f0848d97f12313a831e8d646536d60f70ca2747951c141025199dc6519d416b6d672b5fec95d4b594960ddcd3824471e3d981f3119676cac6f5049b3b09ad864fadec5fa5c0726eea50052db89daff5710cdaf4bd65e7021676d0bf5d0425a9a1dc3daa17e659317f14b953328aa9736bae661be0a7d12b519248632c08244ee05a90027d23ad443160afd64c5024414685b4fae65ecc5cf9f26109bb3f618c3805c1a083c58cdf39838f03b6d1307eadd31a1bb8fe04556bbdaf7bec681460c44246a286b9f6a4b4560e71af4d24b509436407f1c5530411cf8f37f00673dcf631a1942c577fa32c124c2d047c76c816fdb2f8732793fc5b76c29caf461447956c6b5711ddf89be90fc5fb0c673c7640c83a0007fe8d8ff3cbcd3e90c7503db8a58c9d3b594fbcfa12aa46a457e81eb92231deacbdac59dc67c180d0c3b211f0f7da2fb7a97c25cc61c0763e00087a7d17e0ce31d485ac1744e7ac3fbb5292c1851ec90e50503dc19f88fbdd489f57718a44ba0563d06526154c16906f3f1963ed3c790b5ee890bd751c0a6759723d683b8c3aeb9457963d4e761156ab077fb16345c4e384000c50f9261c71c820a86248fd4c37ad86807f5b41655bbcfed6fdc564ced826f28a44c17c765ad8d624f0f92c65cd7224401d4c1ced75371b8d2aa92d1f4d341ac663d418c90c84c45af7cc561124b08e266562b271ebe9758d2c4627807f8ed5f2c7e7ac904399598ec427f585c544d3ffb27725f3cbfcee7a74e9058ffc96ad42388385ca7ab247b2cf45f1f1a083eef4a2aaf41700c2986a0f5cdeae15721d16d199c05b9b874372be9fc271e036e4a4945194fba760644772c5f16fe0731f08baa4a94cd315bac35cf8dca3d5127075475f65ea891eb3fcceacea314fda1964fb23f21fa8e4d112f2f5e04e1f8219af85b200471404efb1eb548b320b6df331f6426c2ebef690787c9c57f33ada86267321b883209771c2749fe3153280def59538be73f005305a7553d15576b942542c9d24a88e7f27b67f810b99896ab665a0cd22593da9785202ef94036e098104b8c4ddd4087e00fc60b97ce9d6a18fb7a9f47669531c5813504661e07e73e441a0675398f8580a1dd11aca8c4fcbe98855b0e8d530f0b1f7cdd8f107554f9abf11c7cb85d0ee9f3df460ea2e4920270b06eed7f883879abf67c24551c5b97e688da4367f91bfded8ef29e6d44fd8c2cda46a4ca152d3d6b50facc5f95e6e0302d477e34a1433437378e986080d14df7a97f1a61a32713d7d2ef07b86eefc23f5dcccb4d2e35af6d21add1597e79bb7d60156384e572c7f5cc9cc22cd06910a1a76ddfe9bda0189620d9b5556538b0847b60c2d85dbbffee35cc949f87902e6051ae15f4ee33f1ea447a1dceca45f59ffc948978c01f0ac8ff1fbcbe72de100f3a416ee78f4451939b558a487977e15e20deee15f9c292663455e05a4876d320f12fb59d22641f345e8c5053a07710e39032cedae61de8cfb06fd7097fe740c06c462ae6e0c5c8dec90eae83e3b6005fe833a80d81a954986fa5a720eded7569c7dc960c3d20914b6f59f42b4e09bac36403a347a08eb4ea2f0e4bfac2923d88534da5e189e315e5bae153cc28ffba04b966a425dfc5be612b96adb368bfc1972258c08b6dccaeb4cca0d9e9108fc03058f9d28505a26ddb561ed4f05dedc304c279641dfaebb63f222bb3c034015a9c4bf202ad1a194d4e65aea3f3a78c4005fa72be6b6a48fbcbd9036fa89c29277e1391cf0f823c452119a27fffc6ebdfedfb1d98fbb80e1b287e47d2dd7551112f73600459d7f94cd95d61d5bef521d948913b66201e71dfbab03287338355662d737c17f59d7669c68a9ba1a7bf359c53ac637c56c1d8984fc8c12970a02b4d9acd3f6cbec0784ae90cc24fe5647cc74ceb3610e99461b91aa40773458b06e9f0080f432b3d03a1c64fd577fc138c4dd5cada3c32cd202f91fcdcb710f6812ac2e462dbf9f0950291c249f1c82122abac20351e0134c8b99ea83a3892466b2f72060fd849c3e678a531f0f5f545a876490a9b61cba00390fbcdf48c19edea199d4a6743794a38570739ef8b48a7143187e4ca26a3f04f5185ddfe0e24c5f483e98414d362927e20cebae0bbde975f69844bdedefe4532a966ceebfcfe78816940035fa27e6d8004e7c54074a34685f3b99d524ac2faef906cb312b63af6a5a655a95314c4dc1d60148645d20fc3b1b6b8db887005288f60ae41a8696cedb4d499e736db3c76cca1976f857f9b4eb13a87dc3b26fc02120ce63e970ac85d45dbe72ada4b0aac27c8ed708461bbbc5e27da1fbeac65905d37ff53a02917742470de0799b4234fb5f0e001d4e537f7364297090e49bcbeb973cb9f71ccd57e228294dfc9429fab88612943505a267fbbd5f74e9c1b15695432e7fe261c44ff006bda4daee3025a55edc00a18ef4eab2b726debf048cd5d5f1e11e88dbbb4486118eaee88ef0669aeb07d1b8ab177e3878ca542459f412f4033ec6f94cacc6e588fc17e1d63e4a1b20dff85a3db59eb3b862cb9677c9d6a24bf26137801a8a4a0223eab9fff65db483ef51a57065ec736aaa0c767be7e0cd7e93917f6ee6e", 0x1000}, {&(0x7f0000002040)="c949ab98f3416eb17951c1a72f58cca2d0b78031944a91f51fdf4262f4ed60e0ade8e094fdf54eec6947135500e9378e", 0x30}], 0x4, 0x0, 0x0, 0x4010}, 0x44000) (async) close(r0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) read$FUSE(r3, 0x0, 0x2000) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0xb, 0x0, 0x80, 0x0}) (async, rerun: 64) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) (async, rerun: 64) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}], 0x18, 0x44810}, 0x4040) (async) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) (async) linkat(r4, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1400) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) socket(0x1d, 0x2, 0x6) syz_usb_connect$uac2(0x2, 0xa8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x15555733}) 2.767208791s ago: executing program 3 (id=6129): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x20000040) r1 = gettid() sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x2a}, 0x40004) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x5, 0x46, 0xb, '\x00', 0x9}) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000002180), 0x0, 0x48000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) recvmmsg(r9, 0x0, 0x0, 0x40002002, 0x0) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f0000000040)=0x55b7, 0x4) splice(r6, 0x0, r8, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r10}, 0x20) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000500)={"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"}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x3, 0xac, &(0x7f0000000080)=0x7}) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000663000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f000089d000/0x2000)=nil) 2.450492513s ago: executing program 6 (id=6130): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) r4 = accept4(r3, &(0x7f0000000540)=@phonet, &(0x7f0000000600)=0x80, 0x80000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x7, 0x3}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48001}, 0x44841) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf) r5 = accept4(r1, 0x0, 0x0, 0x800) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="f2435f0100088000000000950800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) syncfs(r6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYBLOB="0a875045cc2389fb2ed3b783388cbda7ee552cce7729b9d54445e8eb2f50fa7f53f60729227c44cd33506d551631c0b30215424fa335703e0254ab676cba58d492f3ab19652f5ca27219fd89a4c5bb5cb305c7a57fc113152998ae0b8f35207fe97781c2b8119b532b72b5cb3f08f4258baac296ddd004d54e808769b56a575489", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRESOCT=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)="f79ec4bc30b58d4b788c6d3b6c3cd2f48fc3be3a768d929ca38f", 0x1a}, {0x0}], 0x2, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)}, {0x0}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="000e0000000000000001000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba86e3ab336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000000000000000800ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) connect$can_j1939(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x22, 0x5, 0x0, 0x80000001, 0xffffffff, 0x3, 0x0, 0xfffffe0000000001, 0x13fec9ec}, 0x0) mmap(&(0x7f0000201000/0x2000)=nil, 0x2000, 0x2000006, 0x200000006c832, r1, 0x0) 2.438070455s ago: executing program 2 (id=6131): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000145f405e04bd84b6890102030109022400010000"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x8000000000000000, 0x0, 0xfa11, 0x4}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000300)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffa) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r5 = socket(0x18, 0x800, 0x0) sendfile(r5, r4, 0x0, 0x8) r6 = socket(0x2d, 0x2, 0x6) connect$qrtr(r6, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x2, &(0x7f0000000080)={0x0}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xc}, {0x0, 0x3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x200488c4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 1.813772979s ago: executing program 0 (id=6132): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x34, 0x1c, 0x68, 0x0, 0xe, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, @echo={0x8, 0x0, 0x0, 0x5, 0x2}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000140), 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0), 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) file_getattr(0xffffffffffffffff, &(0x7f0000005000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000006040), 0x18, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000040020"], 0x24, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) 1.810842293s ago: executing program 3 (id=6133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 1.69191039s ago: executing program 6 (id=6134): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000300)=0xe, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) timer_gettime(r1, &(0x7f0000000080)) setgroups(0x0, 0x0) 1.678331112s ago: executing program 4 (id=6135): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001002bbd700000000100e00000020000000000000000000000000000000000000000009a000000f8000000000000000200000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000fe0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x324}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.547979927s ago: executing program 4 (id=6136): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x40403, 0x0, 0x9, &(0x7f0000000480), &(0x7f00000004c0)=0x7fffffff}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x9, 0x20000000, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1.4964088s ago: executing program 6 (id=6137): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f00000002c0)={&(0x7f0000000240)=[{0x8, 0x2, 0x0, {0x5, 0x3}}, {0xa8, 0x0, 0x0, {0x0, 0x0, 0x3}}, {0x100, 0x1, 0x0, {0x1, 0x3, 0x2}}], 0x3, 0x20, 0x8, 0xb}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x3, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000080) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f00000000c0)=0x8253, 0x4) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x13) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x8082, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x0, 0x0}) pipe(&(0x7f0000000440)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x2}) 1.094023801s ago: executing program 3 (id=6138): r0 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)=ANY=[]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000040)=0x30, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) syz_io_uring_setup(0x9b3, 0x0, &(0x7f0000020940), &(0x7f00000001c0), &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x81485740, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) 990.337099ms ago: executing program 4 (id=6139): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000004200)=@delchain={0x2050, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x2020, 0x2, [@TCA_TCINDEX_ACT={0x201c, 0x7, [@m_xt={0x154, 0x17, 0x0, 0x0, {{0x7}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x15c, 0x16, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x209}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x71ff, 0x20000000, 0x8, 0x6}, 0x2}}]}, {0xe1, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b13c48f18cb8dc7c39dd9c924b24b96d151107ca9811f7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x38, 0x4, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_pedit={0x1d30, 0x1e, 0x0, 0x0, {{0xa}, {0x1d04, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0x2, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x6, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x7, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3fb, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0x7, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0x7}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0x7, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x0, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x10001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0xbc0a, 0xf, 0x2, 0x80, 0x3}, 0x3, 0x5, [{0x8, 0xbe4e, 0x7, 0x80000001, 0x9, 0xd}, {0x0, 0x1, 0x0, 0x0, 0x4, 0x9}, {0xfffffffb, 0xffffffff, 0x6, 0x40, 0x1, 0x1}, {0x401, 0x7, 0x0, 0x7, 0x8, 0xd}, {0x3fbd9d88, 0xfffffbff, 0xffffffff, 0x0, 0x3ff, 0x9}, {0xa, 0x8, 0x101, 0x64, 0x1, 0x3}]}, [{0x0, 0x1, 0xffff, 0x7, 0xffffff50, 0x7}, {0x6, 0x5, 0x2, 0x401, 0xf, 0xd}, {0x8, 0x40, 0x1, 0x8, 0x0, 0x5}, {0x3, 0xc8, 0x2, 0x2, 0xa, 0xfff}, {0x3, 0xffffffff, 0x7, 0x9, 0x7, 0xbf16}, {0x3ff, 0xfffffffc, 0x7, 0x9, 0x2, 0x7}, {0x0, 0x1ff, 0x8, 0x4, 0x6, 0x5}, {0x6, 0x4, 0x9, 0x0, 0x9}, {0x7, 0x8001, 0x1000, 0x8, 0x9, 0x7ff}, {0x2, 0x5, 0x9, 0x802, 0x4, 0x5}, {0x8, 0xf, 0x3, 0x8, 0x8, 0xaa6}, {0x9, 0x11, 0x4, 0xf, 0xbec4, 0xf}, {0xfffffff7, 0x3, 0x8, 0x0, 0xffff, 0x2}, {0x98, 0x4, 0x4, 0x89, 0x8, 0x6}, {0x0, 0x10, 0xcfd7, 0x100, 0x7fffffff}, {0x8, 0x1000, 0x1, 0xd, 0x1, 0xa589}, {0x6, 0x3, 0x8, 0x5, 0x9, 0x2}, {0x1, 0x80, 0x9, 0x80000001, 0x9, 0x3}, {0x4, 0x7, 0xc, 0x200, 0x4}, {0x0, 0x400, 0x3, 0xdd74, 0x1}, {0x3, 0x6, 0x8, 0xffff8543, 0x3, 0xd2c}, {0x80, 0xffffffff, 0x101, 0x5, 0x7f, 0x300}, {0x4, 0x10, 0x8f, 0x4, 0xd1, 0x1}, {0xb6e0, 0xb9ba, 0x3, 0x17, 0x3, 0x7}, {0x8, 0x0, 0x7, 0x6, 0x7, 0xfffffffe}, {0x8, 0x200, 0xef0, 0x0, 0x6, 0xb4}, {0xae6f, 0x4, 0x2, 0x3, 0x7, 0x1}, {0x34, 0xffff, 0x2, 0x7, 0x2, 0x7fffffff}, {0x6, 0x10, 0x3, 0x6, 0x10000, 0x2}, {0x0, 0x8, 0xfffff34d, 0x80000000, 0xff, 0xfffffffb}, {0x94a, 0x5, 0x9, 0x0, 0x7, 0x6c241156}, {0x8, 0x5, 0x3, 0x5, 0x80000001, 0x1}, {0xffff, 0x4791, 0x5, 0x9, 0xa7, 0x6}, {0x0, 0x7, 0x0, 0xfd, 0x9, 0x6}, {0x400, 0xc577, 0x1000, 0x1, 0x3, 0x8}, {0xdaa5, 0x2, 0xfffffff9, 0x158, 0x6, 0x1d2}, {0x2d, 0x5, 0x400, 0x4, 0x2, 0x9}, {0xad08, 0x0, 0x4, 0x2, 0x36b, 0x63}, {0x6, 0x2, 0xb8, 0x2, 0x7, 0x6}, {0xd4e4, 0x2, 0x6, 0x8001, 0x8, 0x8}, {0x3, 0x4, 0x3ff, 0x81, 0x3, 0x4}, {0x1, 0x1, 0x401, 0x9, 0x8, 0xd4da}, {0xffffff15, 0x7f96, 0xae7, 0x8, 0x80000000}, {0x482f, 0xffffffc5, 0x1, 0x3, 0x2, 0x1}, {0x17, 0x100, 0x9, 0x200, 0x1, 0x5}, {0x1, 0x3a88, 0x9, 0xb50d, 0x0, 0x10000}, {0x80, 0xfd2, 0x6, 0x8, 0x7, 0x4}, {0x3eca, 0x0, 0xa, 0x1ff, 0xab0}, {0x5, 0x8, 0xfffffffd, 0x2, 0xe04b, 0x80000000}, {0x10, 0x1, 0x1ff, 0x1, 0x9b38, 0x2463}, {0x8, 0x3, 0xb, 0xffffff68, 0x370, 0x401}, {0x5, 0x8, 0x4, 0x9, 0x3, 0x4b}, {0x4, 0x9, 0x8, 0x1, 0x800, 0xfffffffe}, {0x7, 0xfffffff9, 0x7fff, 0x9, 0x800000, 0x3}, {0x4, 0x6, 0xf96f, 0x8, 0x5, 0x6}, {0x20c, 0x800, 0x8, 0xfffffffd, 0x7, 0x1}, {0x2, 0x101, 0x0, 0x2, 0xf9, 0x7fffffff}, {0x5, 0x47, 0x100, 0x40, 0x8, 0xe}, {0xfff, 0x3, 0x100, 0xdf9, 0x6, 0x4}, {0x1, 0x8001, 0xff, 0x5, 0xa, 0x3}, {0x101, 0x8, 0x979, 0x6d, 0x6, 0x6}, {0xf, 0x9, 0xfffffff7, 0x1, 0x4, 0x3ff}, {0x10, 0x1, 0x148, 0x2, 0x0, 0x14e7}, {0x4, 0x9, 0x3, 0x6, 0x1590, 0x7}, {0x0, 0x7, 0x3821, 0x5, 0x2, 0x5}, {0x2, 0x9, 0x1, 0x9, 0x28dbd359, 0x6}, {0x10000, 0xc29, 0x5, 0x5, 0x36b9, 0x7f}, {0x2, 0xdb7, 0x842, 0x4b, 0xfffffff8, 0x9}, {0xe, 0x101, 0x400, 0x7, 0x3, 0x7ff}, {0x5, 0x5, 0x9, 0xffffffff, 0x4, 0x2}, {0x40, 0x4, 0x5, 0x3, 0x8, 0x6}, {0x7ff, 0x10000, 0x2, 0xf281, 0x9, 0x8000}, {0x6, 0x14c800, 0x100, 0x8, 0xd, 0x3}, {0x3, 0x8000, 0x3, 0x5, 0x5, 0xc}, {0x5, 0x8, 0x8, 0x6, 0x3ff, 0x2}, {0x5, 0x80000000, 0x1, 0x8, 0x1, 0xdea}, {0x926b, 0x80000000, 0x8, 0x1, 0x2, 0x10001}, {0x6, 0x2, 0x0, 0x7, 0x5, 0x10001}, {0x5, 0xfffffffd, 0x401, 0xa, 0x800, 0x7fff}, {0xa0, 0x7fff, 0x4, 0x7, 0xffffffff, 0x401}, {0xd7, 0xfc, 0x8, 0x4, 0x3ff, 0xc33}, {0x6, 0x19, 0x2, 0x2, 0x7, 0x8001}, {0x7f, 0xffff9dcb, 0x9, 0x1, 0x24000000, 0x7}, {0x5, 0x8, 0x9, 0x5, 0x80000001, 0x6}, {0x2, 0xaebf, 0x6, 0x7a, 0x8, 0x9}, {0x9e7, 0x3ff, 0x1, 0x2, 0x7fffffff, 0x3}, {0x2, 0x2, 0x1, 0x4, 0x0, 0xd5}, {0x6bd, 0x80, 0x7, 0x1, 0xffff, 0xfffffff1}, {0x7, 0x7ff, 0x7fff, 0x6, 0x7, 0xff}, {0x4800, 0x1, 0x2, 0xa131, 0x848, 0x6}, {0x5, 0x6, 0x2, 0x3, 0xffff, 0x3}, {0x6, 0x800, 0x8ce, 0x2, 0x1}, {0x9, 0xfffffff9, 0x1, 0x2, 0x20, 0x38000000}, {0x0, 0xffffffff, 0x7bf, 0x2, 0x5, 0x2}, {0x71d, 0x9, 0x7f, 0x79, 0x7, 0xfff}, {0x6, 0x0, 0x7, 0x4, 0xfffffffe, 0x9bc}, {0x9, 0xfffffffb, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x9, 0x7, 0xf, 0xc}, {0x5, 0xf, 0x4, 0x10, 0x8, 0x215}, {0xa944, 0x86, 0x51b, 0x10000, 0x80000000, 0x3}, {0x8, 0x0, 0x4, 0x7, 0xffffffff, 0x5165}, {0x4, 0x1, 0x4, 0x1, 0x9765}, {0x0, 0x6, 0x6, 0x8, 0x2, 0x2}, {0x3877ae68, 0x4, 0x9, 0xf, 0x2, 0x9}, {0x6, 0x7, 0xc, 0xfff, 0xdc, 0x3}, {0x8, 0x7fff, 0x10, 0xfffffe00, 0xd6, 0x8}, {0x100, 0x8, 0x5d7, 0xe8878000, 0x7, 0x9}, {0x3, 0x4, 0x83c6, 0x0, 0x1000, 0x7}, {0x401, 0x5, 0x9, 0x1186, 0xc0, 0x7f}, {0x7ff, 0xb3, 0x4, 0x0, 0xf, 0xd64}, {0x0, 0x7, 0x3, 0x7, 0x400, 0xffffffff}, {0x0, 0x6, 0x7fffffff, 0x8, 0x7, 0x9}, {0x8, 0x2, 0x101, 0x0, 0x7f}, {0x9, 0x4662, 0x70, 0x9, 0xce, 0x10001}, {0x4, 0xa, 0x3, 0x0, 0xf, 0x5}, {0xcc, 0x8, 0x5137, 0x2, 0x2e9a, 0xaf}, {0x789c, 0x5, 0x2, 0x7ff, 0xb67, 0x4}, {0x0, 0x91f, 0xb0e, 0xffff, 0x2, 0xffffffff}, {0xc7a, 0x6, 0xffffffc5, 0x9, 0x4, 0x7fff}, {0x21, 0x0, 0x7, 0x4, 0x80, 0x2800}, {0x3, 0x9, 0x0, 0x80, 0x6, 0x2}, {0x1, 0xc5, 0x0, 0x3, 0x2, 0x3}, {0x6, 0x4, 0x7ff, 0x8, 0x4, 0xb}, {0x4, 0x0, 0x5, 0x7fff, 0x5, 0x9}, {0x9, 0x4, 0x10, 0x3, 0x0, 0x8}, {0x7fffffff, 0x6, 0x8, 0x7, 0x7, 0x2}, {0x3, 0x5b8, 0x5, 0x6, 0x3d67, 0x3}, {0x4, 0x0, 0x9, 0x5, 0x80000000, 0x1}], [{0x4}, {}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x6, 0x1}, {0x3}, {0x1}, {0x2}, {0x7}, {0x3}, {0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x501abeaffe19eb8}, {0x4}, {0x2}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x6}, {0x3}, {0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x8c8f22033c51199d}, {}, {0x4}, {0x5, 0xe909f12c5f33f997}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x2}, {0x7}, {}, {}, {0x3}, {0x2}, {0x3}, {0x5}, {0x2}, {0x4}, {0x654d41918ae72e00}, {0x4}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x2}, {0x4}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2050}, 0x1, 0x0, 0x0, 0x810}, 0x41) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000000c0)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @empty, 0x8}, 0x7e) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xb, 'S'}, @main=@item_4={0x3, 0x0, 0x9, "e2d83f12"}]}}, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="5b1a033f251100000000000008004500001c006400000011907800000000e000000100004e2000089078d9caaeff6aa4fa4e039227ba99a2537e1200beda6d31cd4aa8cce5e206d5cc3471ee5ccd4a1367d12d7cbec4dd132785e31aa26aced2311ddff026ed7a0a04eb79470a7aa886698de869ad389eaefd687c661a08a02d4a1e7e008e5e7d42df20784edd7fdd8ae972802495a9f09e7377a83a4f873a8b7db6d7a6535a14191315e3bcd0f1665aebc1c5d45ae25359aba47145666f612da78fdc0b80a9ac011bcd"], 0x0) r4 = syz_io_uring_setup(0x2229, &(0x7f0000000200)={0x0, 0x87cf, 0x2, 0x1003, 0x8c}, &(0x7f0000000000), &(0x7f0000000340), &(0x7f0000000000)) io_uring_enter(r4, 0x6eff, 0x708c, 0x4b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8518000010010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x12, &(0x7f000000cf3d)=""/195}, 0x23) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000000}, 0x20004844) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 947.888606ms ago: executing program 6 (id=6140): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x2c, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x3f, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x3e, 0x0, 0x0, @fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r0, &(0x7f0000000c80)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0xa5f288b4872b4003, 0x5, 0x5, "b54ce52e39046868bcf2f75089c86b302cd6188b57b2b59c4df079e389d719af2c5dd08cf01d928739441c819e839bd0f1eef252951384596a4994a31c9e91", 0x23}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)="87ee88c59562b5f4623ec5cc4a13bc6de50d26bf2907aada90d6034a9faa4dac42", 0x21}, {&(0x7f0000000400)}, {&(0x7f0000000500)}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000600)=[{0x90, 0x108, 0x4, "3d57e8255e88918052b18f57fa65f09bae9328dccdf188c34aa8d8e1cb32aab2bc2b1fb07826581ac8d20e368cf346cdf79ad7a9a05f1751732b11790dc2b8357f6d0fe2b5fa78fe3d7eb7dc57e61ff0dbf65012357240c7cfb1911bc9c0d2baa8309ccd6e45233e809751977e9025c87a946010ba347c62615df3c1cf832296"}], 0x90}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000004a0001002bbd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0700000014000100ff"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000840)={r9, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 0s ago: executing program 0 (id=6141): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x23, "5c76276f6c86622447099377e66e2e9d40f7cb08a213db2d0bab5fbe9cc1cb0a2d53fa"}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): eed USB device number 71 using dummy_hcd [ 1140.341060][T23624] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1140.365203][T23624] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.386218][T23624] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1140.413090][T23624] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1140.431898][T23624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.459330][T23624] usb 4-1: config 0 descriptor?? [ 1140.872214][T24606] FAULT_INJECTION: forcing a failure. [ 1140.872214][T24606] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.909902][T23624] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 1140.921094][T24606] CPU: 0 UID: 0 PID: 24606 Comm: syz.6.5714 Tainted: G L syzkaller #0 PREEMPT(full) [ 1140.921114][T24606] Tainted: [L]=SOFTLOCKUP [ 1140.921118][T24606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1140.921124][T24606] Call Trace: [ 1140.921128][T24606] [ 1140.921133][T24606] dump_stack_lvl+0xe8/0x150 [ 1140.921150][T24606] should_fail_ex+0x412/0x560 [ 1140.921167][T24606] should_failslab+0xa8/0x100 [ 1140.921183][T24606] __kvmalloc_node_noprof+0x178/0x8a0 [ 1140.921199][T24606] ? io_alloc_cache_init+0x42/0x140 [ 1140.921212][T24606] ? __raw_spin_lock_init+0x45/0x100 [ 1140.921235][T24606] io_alloc_cache_init+0x42/0x140 [ 1140.921249][T24606] io_ring_ctx_alloc+0x455/0xc50 [ 1140.921265][T24606] io_uring_create+0x50/0x9a0 [ 1140.921279][T24606] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1140.921295][T24606] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1140.921315][T24606] ? __pfx_ksys_write+0x10/0x10 [ 1140.921334][T24606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.921345][T24606] do_syscall_64+0x15f/0xf80 [ 1140.921359][T24606] ? trace_irq_disable+0x3b/0x140 [ 1140.921375][T24606] ? clear_bhb_loop+0x40/0x90 [ 1140.921387][T24606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.921397][T24606] RIP: 0033:0x7ff7da99ce59 [ 1140.921408][T24606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.921417][T24606] RSP: 002b:00007ff7db879028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1140.921428][T24606] RAX: ffffffffffffffda RBX: 00007ff7dac15fa0 RCX: 00007ff7da99ce59 [ 1140.921435][T24606] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000003b7b [ 1140.921441][T24606] RBP: 00007ff7db879090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.921448][T24606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.921453][T24606] R13: 00007ff7dac16038 R14: 00007ff7dac15fa0 R15: 00007ff7dad3fa48 [ 1140.921468][T24606] [ 1140.922517][T23624] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 1141.137591][T24600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.148544][T24600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.156484][T23624] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 1141.176299][T23624] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 1141.183788][T23624] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 1141.193340][T24619] netlink: 'syz.0.5716': attribute type 62 has an invalid length. [ 1141.211379][T23624] plantronics 0003:047F:FFFF.0058: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1141.283284][T23624] usb 4-1: USB disconnect, device number 71 [ 1141.372605][T24620] fido_id[24620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1141.532286][ T29] usb 5-1: USB disconnect, device number 64 [ 1141.946315][T23612] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1142.016275][ T29] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1142.126465][T23612] usb 7-1: Using ep0 maxpacket: 16 [ 1142.143214][T23612] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1142.178194][T23612] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1142.187381][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 1142.208200][ T29] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1142.222486][T23612] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.230864][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.257249][T23612] usb 7-1: config 0 descriptor?? [ 1142.262507][ T29] usb 5-1: Product: syz [ 1142.277842][ T29] usb 5-1: Manufacturer: syz [ 1142.300007][ T29] usb 5-1: SerialNumber: syz [ 1142.319915][ T29] usb 5-1: config 0 descriptor?? [ 1142.670858][T24638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.689250][T24638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.804714][T24640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5720'. [ 1142.890881][T24640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5720'. [ 1142.920547][ T29] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 1142.942924][ T29] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 1143.081146][ T29] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -32 [ 1143.319607][T23612] usbhid 7-1:0.0: can't add hid device: -71 [ 1143.333730][T23612] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1143.350298][T23612] usb 7-1: USB disconnect, device number 95 [ 1144.267321][T23624] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1144.426277][T23624] usb 7-1: Using ep0 maxpacket: 32 [ 1144.433924][T23624] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1144.448651][T23624] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1144.458159][T23624] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1144.466441][T23624] usb 7-1: Product: syz [ 1144.470835][T23624] usb 7-1: Manufacturer: syz [ 1144.475456][T23624] usb 7-1: SerialNumber: syz [ 1144.482213][T23624] usb 7-1: config 0 descriptor?? [ 1144.490188][T24662] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1144.496305][T23612] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1144.509901][T23624] hub 7-1:0.0: bad descriptor, ignoring hub [ 1144.522121][T23624] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1144.660278][T23612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 1144.674996][T23612] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1144.685007][T23612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.705727][T23619] usb 5-1: USB disconnect, device number 65 [ 1144.730903][T23612] usb 4-1: config 0 descriptor?? [ 1144.748337][T24663] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 1145.003197][T24675] netlink: 'syz.2.5732': attribute type 62 has an invalid length. [ 1145.185007][T23612] elan 0003:04F3:0755.0059: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1145.199678][T24662] usb 7-1: reset high-speed USB device number 96 using dummy_hcd [ 1145.220479][T24662] usb 7-1: device reset changed ep0 maxpacket size! [ 1145.269447][ T29] usb 7-1: USB disconnect, device number 96 [ 1145.423203][ T29] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1145.469800][T23625] usb 4-1: USB disconnect, device number 72 [ 1145.606304][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 1145.619073][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1145.635846][ T29] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1145.648535][ T29] usb 7-1: can't read configurations, error -71 [ 1145.826343][T23624] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1145.993774][T23624] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.014585][T23624] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1146.037086][T23624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.059249][T23624] usb 5-1: config 0 descriptor?? [ 1146.074630][T23624] pwc: Askey VC010 type 2 USB webcam detected. [ 1146.384961][T24696] FAULT_INJECTION: forcing a failure. [ 1146.384961][T24696] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.414739][T24696] CPU: 1 UID: 0 PID: 24696 Comm: syz.3.5740 Tainted: G L syzkaller #0 PREEMPT(full) [ 1146.414768][T24696] Tainted: [L]=SOFTLOCKUP [ 1146.414775][T24696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1146.414785][T24696] Call Trace: [ 1146.414793][T24696] [ 1146.414801][T24696] dump_stack_lvl+0xe8/0x150 [ 1146.414826][T24696] should_fail_ex+0x412/0x560 [ 1146.414853][T24696] should_failslab+0xa8/0x100 [ 1146.414878][T24696] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1146.414902][T24696] ? ip6_default_advmss+0x80/0x3b0 [ 1146.414919][T24696] ? __alloc_skb+0x1d0/0x7d0 [ 1146.414944][T24696] __alloc_skb+0x1d0/0x7d0 [ 1146.414967][T24696] tcp_stream_alloc_skb+0x3f/0x580 [ 1146.414986][T24696] ? __asan_memset+0x22/0x50 [ 1146.415010][T24696] tcp_connect+0x15a9/0x53a0 [ 1146.415062][T24696] ? __pfx_tcp_connect+0x10/0x10 [ 1146.415089][T24696] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1146.415116][T24696] ? lockdep_hardirqs_on+0x7a/0x110 [ 1146.415137][T24696] ? ktime_get_with_offset+0x93/0x2d0 [ 1146.415159][T24696] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1146.415191][T24696] ? __asan_memset+0x22/0x50 [ 1146.415215][T24696] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1146.415246][T24696] ? inet6_hash_connect+0xeb/0x170 [ 1146.415269][T24696] tcp_v6_connect+0x1295/0x1b10 [ 1146.415288][T24696] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1146.415321][T24696] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1146.415340][T24696] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 1146.415374][T24696] __inet_stream_connect+0x25a/0xdd0 [ 1146.415406][T24696] ? do_raw_spin_lock+0x12b/0x2f0 [ 1146.415428][T24696] ? lock_sock_nested+0x6a/0x100 [ 1146.415447][T24696] ? __pfx___inet_stream_connect+0x10/0x10 [ 1146.415476][T24696] ? inet_stream_connect+0x51/0xa0 [ 1146.415512][T24696] ? __local_bh_enable_ip+0xd0/0x130 [ 1146.415536][T24696] inet_stream_connect+0x66/0xa0 [ 1146.415564][T24696] __sys_connect+0x312/0x450 [ 1146.415592][T24696] ? __pfx___sys_connect+0x10/0x10 [ 1146.415623][T24696] ? __pfx_ksys_write+0x10/0x10 [ 1146.415651][T24696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.415670][T24696] __x64_sys_connect+0x7a/0x90 [ 1146.415691][T24696] do_syscall_64+0x15f/0xf80 [ 1146.415713][T24696] ? trace_irq_disable+0x3b/0x140 [ 1146.415740][T24696] ? clear_bhb_loop+0x40/0x90 [ 1146.415762][T24696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.415779][T24696] RIP: 0033:0x7ff70c19ce59 [ 1146.415794][T24696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.415808][T24696] RSP: 002b:00007ff70d002028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1146.415828][T24696] RAX: ffffffffffffffda RBX: 00007ff70c415fa0 RCX: 00007ff70c19ce59 [ 1146.415840][T24696] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003 [ 1146.415852][T24696] RBP: 00007ff70d002090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.415863][T24696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1146.415874][T24696] R13: 00007ff70c416038 R14: 00007ff70c415fa0 R15: 00007ff70c53fa48 [ 1146.415903][T24696] [ 1146.725075][T23624] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1146.732957][T23624] pwc: recv_control_msg error -32 req 02 val 2700 [ 1146.740659][T23624] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1146.748067][T23624] pwc: recv_control_msg error -32 req 04 val 1000 [ 1146.755128][T23624] pwc: recv_control_msg error -32 req 04 val 1300 [ 1146.798443][T23624] pwc: recv_control_msg error -32 req 04 val 1400 [ 1146.807653][T23624] pwc: recv_control_msg error -32 req 02 val 2000 [ 1146.821131][T23624] pwc: recv_control_msg error -32 req 02 val 2100 [ 1146.822381][T24702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.836907][T24702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.839329][T23624] pwc: recv_control_msg error -32 req 04 val 1500 [ 1146.872700][T23624] pwc: recv_control_msg error -32 req 02 val 2500 [ 1147.036314][ T29] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1147.112728][T23624] pwc: recv_control_msg error -71 req 02 val 2600 [ 1147.130527][T23624] pwc: recv_control_msg error -71 req 02 val 2900 [ 1147.137866][T23624] pwc: recv_control_msg error -71 req 02 val 2800 [ 1147.145756][T23624] pwc: recv_control_msg error -71 req 04 val 1100 [ 1147.160787][T23624] pwc: recv_control_msg error -71 req 04 val 1200 [ 1147.175131][T23624] pwc: Registered as video103. [ 1147.186276][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 1147.196659][T23624] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input94 [ 1147.224834][ T29] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1147.255492][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.268955][T23624] usb 5-1: USB disconnect, device number 66 [ 1147.295256][ T29] usb 7-1: Product: syz [ 1147.300292][T24718] netlink: 'syz.3.5746': attribute type 62 has an invalid length. [ 1147.354753][ T29] usb 7-1: Manufacturer: syz [ 1147.368862][ T29] usb 7-1: SerialNumber: syz [ 1147.392169][ T29] usb 7-1: config 0 descriptor?? [ 1147.838676][T24726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5749'. [ 1147.880976][T24722] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5741'. [ 1147.900021][T24726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5749'. [ 1147.919944][T24722] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5741'. [ 1147.951076][ T29] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 1147.983246][ T29] peak_usb 7-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 1148.125868][T24728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5750'. [ 1148.137276][ T29] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -32 [ 1148.157594][T24728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.177424][T24728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.566685][T23624] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1148.696030][T24739] syzkaller0: entered promiscuous mode [ 1148.705171][T24739] syzkaller0: entered allmulticast mode [ 1148.729433][T23624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 1148.753792][T23624] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1148.792835][T23624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.822657][T23624] usb 5-1: config 0 descriptor?? [ 1148.829270][T24729] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1149.280510][T23624] elan 0003:04F3:0755.005A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1149.480281][T23612] usb 7-1: USB disconnect, device number 98 [ 1149.504642][T23624] usb 5-1: USB disconnect, device number 67 [ 1149.584820][T24749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5755'. [ 1149.595292][T24747] FAULT_INJECTION: forcing a failure. [ 1149.595292][T24747] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.608817][T24747] CPU: 0 UID: 0 PID: 24747 Comm: syz.0.5756 Tainted: G L syzkaller #0 PREEMPT(full) [ 1149.608837][T24747] Tainted: [L]=SOFTLOCKUP [ 1149.608841][T24747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1149.608848][T24747] Call Trace: [ 1149.608853][T24747] [ 1149.608857][T24747] dump_stack_lvl+0xe8/0x150 [ 1149.608874][T24747] should_fail_ex+0x412/0x560 [ 1149.608891][T24747] should_failslab+0xa8/0x100 [ 1149.608907][T24747] __kvmalloc_node_noprof+0x178/0x8a0 [ 1149.608923][T24747] ? io_alloc_cache_init+0x42/0x140 [ 1149.608936][T24747] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1149.608953][T24747] io_alloc_cache_init+0x42/0x140 [ 1149.608966][T24747] io_ring_ctx_alloc+0x497/0xc50 [ 1149.608982][T24747] io_uring_create+0x50/0x9a0 [ 1149.608996][T24747] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1149.609011][T24747] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1149.609032][T24747] ? __pfx_ksys_write+0x10/0x10 [ 1149.609051][T24747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.609062][T24747] do_syscall_64+0x15f/0xf80 [ 1149.609076][T24747] ? trace_irq_disable+0x3b/0x140 [ 1149.609098][T24747] ? clear_bhb_loop+0x40/0x90 [ 1149.609113][T24747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.609123][T24747] RIP: 0033:0x7feb2979ce59 [ 1149.609134][T24747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.609143][T24747] RSP: 002b:00007feb2a6ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1149.609155][T24747] RAX: ffffffffffffffda RBX: 00007feb29a15fa0 RCX: 00007feb2979ce59 [ 1149.609162][T24747] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000003b7b [ 1149.609168][T24747] RBP: 00007feb2a6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.609174][T24747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1149.609180][T24747] R13: 00007feb29a16038 R14: 00007feb29a15fa0 R15: 00007feb29b3fa48 [ 1149.609195][T24747] [ 1149.612629][T24749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5755'. [ 1150.156298][T23625] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1150.330579][T23625] usb 7-1: Using ep0 maxpacket: 32 [ 1150.351413][T23625] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1150.382263][T23625] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1150.393906][T23625] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1150.403239][T23625] usb 7-1: Product: syz [ 1150.409577][T23625] usb 7-1: Manufacturer: syz [ 1150.420783][T23625] usb 7-1: SerialNumber: syz [ 1150.433721][T23625] usb 7-1: config 0 descriptor?? [ 1150.441016][T24757] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1150.465820][T23625] hub 7-1:0.0: bad descriptor, ignoring hub [ 1150.485223][T23625] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1150.780989][T24779] netlink: 'syz.3.5763': attribute type 62 has an invalid length. [ 1151.107880][T24757] usb 7-1: reset high-speed USB device number 99 using dummy_hcd [ 1151.148751][T24757] usb 7-1: device reset changed ep0 maxpacket size! [ 1151.162714][T24782] netlink: 'syz.2.5765': attribute type 1 has an invalid length. [ 1151.184659][ T29] usb 7-1: USB disconnect, device number 99 [ 1151.280370][T24782] bond8: entered promiscuous mode [ 1151.299139][T24782] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1151.356301][ T29] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1151.510125][T24791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.537066][T24791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.616360][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 1151.670962][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1151.681528][T24792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5767'. [ 1151.702528][ T29] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1151.758504][T24793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5767'. [ 1151.769636][ T29] usb 7-1: can't read configurations, error -71 [ 1152.266279][T23619] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1152.428623][T23619] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1152.439194][T23619] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.459930][T23619] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1152.486438][T23619] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1152.521161][T23619] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1152.535758][T23619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.560474][T23619] usb 5-1: Product: syz [ 1152.570388][T23619] usb 5-1: Manufacturer: syz [ 1152.580921][T23619] usb 5-1: SerialNumber: syz [ 1152.759912][T24805] FAULT_INJECTION: forcing a failure. [ 1152.759912][T24805] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.787173][T24805] CPU: 0 UID: 0 PID: 24805 Comm: syz.0.5771 Tainted: G L syzkaller #0 PREEMPT(full) [ 1152.787201][T24805] Tainted: [L]=SOFTLOCKUP [ 1152.787205][T24805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1152.787211][T24805] Call Trace: [ 1152.787216][T24805] [ 1152.787222][T24805] dump_stack_lvl+0xe8/0x150 [ 1152.787238][T24805] should_fail_ex+0x412/0x560 [ 1152.787256][T24805] should_failslab+0xa8/0x100 [ 1152.787272][T24805] __kvmalloc_node_noprof+0x178/0x8a0 [ 1152.787288][T24805] ? io_alloc_cache_init+0x42/0x140 [ 1152.787302][T24805] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1152.787318][T24805] io_alloc_cache_init+0x42/0x140 [ 1152.787332][T24805] io_ring_ctx_alloc+0x4b9/0xc50 [ 1152.787348][T24805] io_uring_create+0x50/0x9a0 [ 1152.787361][T24805] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1152.787377][T24805] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1152.787398][T24805] ? __pfx_ksys_write+0x10/0x10 [ 1152.787417][T24805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.787428][T24805] do_syscall_64+0x15f/0xf80 [ 1152.787443][T24805] ? trace_irq_disable+0x3b/0x140 [ 1152.787458][T24805] ? clear_bhb_loop+0x40/0x90 [ 1152.787470][T24805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.787480][T24805] RIP: 0033:0x7feb2979ce59 [ 1152.787491][T24805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.787500][T24805] RSP: 002b:00007feb2a6ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1152.787512][T24805] RAX: ffffffffffffffda RBX: 00007feb29a15fa0 RCX: 00007feb2979ce59 [ 1152.787519][T24805] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000003b7b [ 1152.787526][T24805] RBP: 00007feb2a6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.787532][T24805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.787538][T24805] R13: 00007feb29a16038 R14: 00007feb29a15fa0 R15: 00007feb29b3fa48 [ 1152.787552][T24805] [ 1153.357354][T23619] usb 5-1: USB disconnect, device number 68 [ 1153.445620][T12790] udevd[12790]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1153.598365][T23624] usb 7-1: new full-speed USB device number 102 using dummy_hcd [ 1153.780911][T23624] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 1153.805139][T23624] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1153.830156][T23624] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.852450][T23624] usb 7-1: config 0 descriptor?? [ 1153.871264][T24808] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1154.059173][T24825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5777'. [ 1154.352217][T23624] elan 0003:04F3:0755.005B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 1154.398030][T24813] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5773'. [ 1154.444621][T24813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5773'. [ 1154.463479][T24837] netlink: 'syz.0.5779': attribute type 62 has an invalid length. [ 1154.557695][T23619] usb 7-1: USB disconnect, device number 102 [ 1154.664801][T24840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.688691][T24840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.918373][T24844] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1154.968539][T24840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.979444][T24840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.016312][T23624] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1155.176522][T23624] usb 4-1: Using ep0 maxpacket: 32 [ 1155.187576][T23624] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1155.211206][T23624] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1155.226357][T23624] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1155.245483][T23624] usb 4-1: Product: syz [ 1155.250698][T23624] usb 4-1: Manufacturer: syz [ 1155.255793][T23624] usb 4-1: SerialNumber: syz [ 1155.266532][T23624] usb 4-1: config 0 descriptor?? [ 1155.272409][T24842] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1155.282880][T23624] hub 4-1:0.0: bad descriptor, ignoring hub [ 1155.289188][T23624] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1155.296583][T23622] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1155.456326][T23622] usb 5-1: Using ep0 maxpacket: 32 [ 1155.474751][T23622] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1155.494509][T23622] usb 5-1: config 0 has no interface number 0 [ 1155.508478][T23622] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1155.532149][T23622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.568262][T23622] usb 5-1: Product: syz [ 1155.588214][T23622] usb 5-1: Manufacturer: syz [ 1155.613256][T23622] usb 5-1: SerialNumber: syz [ 1155.633936][T23622] usb 5-1: config 0 descriptor?? [ 1155.685680][T23622] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1155.885203][T24857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5785'. [ 1155.901477][T23622] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1155.944522][T23622] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1156.028664][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1156.028681][ T30] audit: type=1804 audit(1778681382.236:800): pid=24857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5785" name="/newroot/566/file0" dev="fuse" ino=1 res=1 errno=0 [ 1156.131549][ T30] audit: type=1804 audit(1778681382.326:801): pid=24858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5785" name="/newroot/566/file0" dev="fuse" ino=1 res=1 errno=0 [ 1156.236365][T24842] usb 4-1: reset high-speed USB device number 73 using dummy_hcd [ 1156.264020][T24842] usb 4-1: device reset changed ep0 maxpacket size! [ 1156.287631][T23624] usb 4-1: USB disconnect, device number 73 [ 1156.466290][T23624] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1156.539712][T24861] FAULT_INJECTION: forcing a failure. [ 1156.539712][T24861] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.554636][T24861] CPU: 1 UID: 0 PID: 24861 Comm: syz.0.5786 Tainted: G L syzkaller #0 PREEMPT(full) [ 1156.554665][T24861] Tainted: [L]=SOFTLOCKUP [ 1156.554672][T24861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1156.554683][T24861] Call Trace: [ 1156.554691][T24861] [ 1156.554700][T24861] dump_stack_lvl+0xe8/0x150 [ 1156.554734][T24861] should_fail_ex+0x412/0x560 [ 1156.554763][T24861] should_failslab+0xa8/0x100 [ 1156.554790][T24861] __kvmalloc_node_noprof+0x178/0x8a0 [ 1156.554816][T24861] ? io_alloc_cache_init+0x42/0x140 [ 1156.554840][T24861] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1156.554867][T24861] io_alloc_cache_init+0x42/0x140 [ 1156.554892][T24861] io_ring_ctx_alloc+0x4ce/0xc50 [ 1156.554919][T24861] io_uring_create+0x50/0x9a0 [ 1156.554943][T24861] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1156.554970][T24861] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1156.555007][T24861] ? __pfx_ksys_write+0x10/0x10 [ 1156.555039][T24861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.555058][T24861] do_syscall_64+0x15f/0xf80 [ 1156.555082][T24861] ? trace_irq_disable+0x3b/0x140 [ 1156.555107][T24861] ? clear_bhb_loop+0x40/0x90 [ 1156.555129][T24861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.555147][T24861] RIP: 0033:0x7feb2979ce59 [ 1156.555164][T24861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.555179][T24861] RSP: 002b:00007feb2a6ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1156.555198][T24861] RAX: ffffffffffffffda RBX: 00007feb29a15fa0 RCX: 00007feb2979ce59 [ 1156.555211][T24861] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000003b7b [ 1156.555223][T24861] RBP: 00007feb2a6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.555235][T24861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.555245][T24861] R13: 00007feb29a16038 R14: 00007feb29a15fa0 R15: 00007feb29b3fa48 [ 1156.555273][T24861] [ 1156.646287][T23624] usb 4-1: Using ep0 maxpacket: 16 [ 1156.845680][T23624] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1156.868896][T23624] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1156.877229][T23624] usb 4-1: can't read configurations, error -71 [ 1157.471134][T24873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5789'. [ 1157.619348][T24876] loop8: detected capacity change from 0 to 7 [ 1157.640820][T24876] Dev loop8: unable to read RDB block 7 [ 1157.656301][T24876] loop8: unable to read partition table [ 1157.675514][T24876] loop8: partition table beyond EOD, truncated [ 1157.698841][T24876] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1157.940858][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1157.941464][T23613] usb 5-1: USB disconnect, device number 69 [ 1157.975581][T23613] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1158.011974][T24884] netlink: 'syz.6.5794': attribute type 8 has an invalid length. [ 1158.019877][T23613] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 1158.020543][T23613] quatech2 5-1:0.51: device disconnected [ 1158.259817][T24894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5797'. [ 1158.296731][T24894] 8021q: VLANs not supported on vcan0 [ 1158.419276][T24903] netlink: 'syz.4.5796': attribute type 62 has an invalid length. [ 1158.594130][T24909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.619624][T23624] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1158.620068][T24909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.693171][T24909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.720003][T24909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.748716][T24909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.768571][T24909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.815199][T24909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.818030][T23624] usb 7-1: config 1 has an invalid interface number: 188 but max is 0 [ 1158.843951][T24909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.871264][T23624] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.917440][T23624] usb 7-1: config 1 has no interface number 0 [ 1158.944532][T23624] usb 7-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1158.995035][T23624] usb 7-1: config 1 interface 188 has no altsetting 0 [ 1159.029811][T23624] usb 7-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 1159.056471][T23624] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.081442][T23624] usb 7-1: Product: syz [ 1159.105984][T23624] usb 7-1: Manufacturer: syz [ 1159.125951][T23624] usb 7-1: SerialNumber: syz [ 1159.408422][T24902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5799'. [ 1159.581728][T24902] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1159.717983][T24902] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1160.068892][T24933] syzkaller0: entered promiscuous mode [ 1160.101957][T24933] syzkaller0: entered allmulticast mode [ 1160.163271][T23624] usb 7-1: USB disconnect, device number 103 [ 1162.222896][T24956] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1163.977967][T24968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.995423][T24968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.030993][T24968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.041666][T24968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.059356][T24968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.069989][T24968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.081885][T24968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.091522][T24968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.861675][T24973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.874347][T24973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.968244][T24979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5819'. [ 1166.278252][T24992] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1166.335042][T24994] FAULT_INJECTION: forcing a failure. [ 1166.335042][T24994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.349091][T24994] CPU: 0 UID: 0 PID: 24994 Comm: syz.0.5826 Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.349120][T24994] Tainted: [L]=SOFTLOCKUP [ 1166.349127][T24994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1166.349138][T24994] Call Trace: [ 1166.349146][T24994] [ 1166.349154][T24994] dump_stack_lvl+0xe8/0x150 [ 1166.349179][T24994] should_fail_ex+0x412/0x560 [ 1166.349206][T24994] _copy_from_user+0x2d/0xb0 [ 1166.349236][T24994] procfs_procmap_ioctl+0x1b0/0xe00 [ 1166.349257][T24994] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1166.349288][T24994] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 1166.349317][T24994] ? __fget_files+0x2a/0x420 [ 1166.349340][T24994] ? __fget_files+0x2a/0x420 [ 1166.349358][T24994] ? __fget_files+0x3a0/0x420 [ 1166.349377][T24994] ? __fget_files+0x2a/0x420 [ 1166.349400][T24994] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1166.349425][T24994] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 1166.349443][T24994] __se_sys_ioctl+0xfc/0x170 [ 1166.349468][T24994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.349488][T24994] do_syscall_64+0x15f/0xf80 [ 1166.349511][T24994] ? trace_irq_disable+0x3b/0x140 [ 1166.349537][T24994] ? clear_bhb_loop+0x40/0x90 [ 1166.349557][T24994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.349575][T24994] RIP: 0033:0x7feb2979ce59 [ 1166.349592][T24994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.349607][T24994] RSP: 002b:00007feb2a6ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1166.349626][T24994] RAX: ffffffffffffffda RBX: 00007feb29a15fa0 RCX: 00007feb2979ce59 [ 1166.349639][T24994] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000004 [ 1166.349651][T24994] RBP: 00007feb2a6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.349663][T24994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.349674][T24994] R13: 00007feb29a16038 R14: 00007feb29a15fa0 R15: 00007feb29b3fa48 [ 1166.349701][T24994] [ 1166.897026][T23624] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1167.069807][T23624] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1167.088728][T23624] usb 4-1: not running at top speed; connect to a high speed hub [ 1167.105980][T23624] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.134238][T23624] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1167.157183][T23624] usb 4-1: string descriptor 0 read error: -22 [ 1167.165994][T23624] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1167.180272][T25004] syzkaller0: entered promiscuous mode [ 1167.185983][T25004] syzkaller0: entered allmulticast mode [ 1167.188449][T23624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.227736][T23624] usb 4-1: 0:2 : does not exist [ 1168.069300][T23622] hid-generic 0000:2000:0000.005C: unknown main item tag 0x0 [ 1168.076541][T25016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.086496][T23622] hid-generic 0000:2000:0000.005C: unknown main item tag 0x0 [ 1168.100084][T23622] hid-generic 0000:2000:0000.005C: unknown main item tag 0x0 [ 1168.108147][T25016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.110250][T23622] hid-generic 0000:2000:0000.005C: unknown main item tag 0x0 [ 1168.131468][T25013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.167949][T25013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.176005][T23622] hid-generic 0000:2000:0000.005C: unknown main item tag 0x0 [ 1168.188222][T25013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.191000][T23622] hid-generic 0000:2000:0000.005C: unknown main item tag 0x0 [ 1168.199945][T25013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.208579][T23622] hid-generic 0000:2000:0000.005C: unknown main item tag 0x0 [ 1168.221445][T23622] hid-generic 0000:2000:0000.005C: unknown main item tag 0x0 [ 1168.229316][T23622] hid-generic 0000:2000:0000.005C: unknown main item tag 0x0 [ 1168.237147][T23622] hid-generic 0000:2000:0000.005C: unknown main item tag 0x0 [ 1168.326580][T23622] hid-generic 0000:2000:0000.005C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1168.364569][T25019] fido_id[25019]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1168.423149][T25024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5837'. [ 1168.558651][T25026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5837'. [ 1169.449641][T23624] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1169.546014][T23624] usb 4-1: USB disconnect, device number 76 [ 1170.175331][T25028] FAULT_INJECTION: forcing a failure. [ 1170.175331][T25028] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1170.196875][T25028] CPU: 1 UID: 0 PID: 25028 Comm: syz.0.5838 Tainted: G L syzkaller #0 PREEMPT(full) [ 1170.196905][T25028] Tainted: [L]=SOFTLOCKUP [ 1170.196911][T25028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1170.196922][T25028] Call Trace: [ 1170.196929][T25028] [ 1170.196936][T25028] dump_stack_lvl+0xe8/0x150 [ 1170.196963][T25028] should_fail_ex+0x412/0x560 [ 1170.196990][T25028] prepare_alloc_pages+0x22a/0x650 [ 1170.197023][T25028] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1170.197050][T25028] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1170.197077][T25028] ? __pfx_policy_nodemask+0x10/0x10 [ 1170.197103][T25028] ? is_bpf_text_address+0x26/0x2b0 [ 1170.197129][T25028] alloc_pages_mpol+0x235/0x490 [ 1170.197158][T25028] folio_alloc_mpol_noprof+0x39/0x160 [ 1170.197185][T25028] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1170.197212][T25028] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1170.197256][T25028] do_wp_page+0x118a/0x4cc0 [ 1170.197293][T25028] ? __pfx_do_wp_page+0x10/0x10 [ 1170.197311][T25028] ? do_raw_spin_lock+0x12b/0x2f0 [ 1170.197338][T25028] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1170.197371][T25028] handle_mm_fault+0x151d/0x3170 [ 1170.197404][T25028] ? handle_mm_fault+0xee/0x3170 [ 1170.197431][T25028] ? __pfx_handle_mm_fault+0x10/0x10 [ 1170.197453][T25028] ? follow_page_pte+0xbb7/0xe50 [ 1170.197480][T25028] ? __pfx_follow_page_pte+0x10/0x10 [ 1170.197509][T25028] __get_user_pages+0x1683/0x2720 [ 1170.197558][T25028] __gup_longterm_locked+0x3db/0x1630 [ 1170.197598][T25028] gup_fast_fallback+0x1d84/0x20d0 [ 1170.197646][T25028] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1170.197668][T25028] ? is_valid_gup_args+0x11f/0x200 [ 1170.197689][T25028] ? pin_user_pages_fast+0x4d/0xb0 [ 1170.197709][T25028] io_pin_pages+0xba/0x1b0 [ 1170.197730][T25028] io_region_pin_pages+0x7d/0x190 [ 1170.197753][T25028] io_create_region+0x38c/0x4a0 [ 1170.197781][T25028] io_allocate_scq_urings+0x220/0x820 [ 1170.197810][T25028] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 1170.197829][T25028] ? cap_capable+0x123/0x460 [ 1170.197852][T25028] ? security_capable+0xb9/0x2c0 [ 1170.197879][T25028] io_uring_create+0x47d/0x9a0 [ 1170.197903][T25028] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1170.197931][T25028] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1170.197970][T25028] ? __pfx_ksys_write+0x10/0x10 [ 1170.198003][T25028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.198023][T25028] do_syscall_64+0x15f/0xf80 [ 1170.198046][T25028] ? trace_irq_disable+0x3b/0x140 [ 1170.198071][T25028] ? clear_bhb_loop+0x40/0x90 [ 1170.198093][T25028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.198111][T25028] RIP: 0033:0x7feb2979ce59 [ 1170.198129][T25028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.198143][T25028] RSP: 002b:00007feb2a6ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1170.198163][T25028] RAX: ffffffffffffffda RBX: 00007feb29a15fa0 RCX: 00007feb2979ce59 [ 1170.198175][T25028] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000003b7b [ 1170.198187][T25028] RBP: 00007feb2a6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.198198][T25028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1170.198209][T25028] R13: 00007feb29a16038 R14: 00007feb29a15fa0 R15: 00007feb29b3fa48 [ 1170.198238][T25028] [ 1170.723818][T25034] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1171.654406][T23622] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1171.909732][T23622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 21293, setting to 64 [ 1171.975268][T23622] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1171.990104][T23622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.998506][T23622] usb 4-1: Product: syz [ 1172.003151][T23622] usb 4-1: Manufacturer: syz [ 1172.008172][T23622] usb 4-1: SerialNumber: syz [ 1172.032071][T23622] usb 4-1: config 0 descriptor?? [ 1172.046414][T25037] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1172.059673][T23622] hub 4-1:0.0: bad descriptor, ignoring hub [ 1172.065680][T23622] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1172.078179][T23622] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input95 [ 1172.527491][T23622] usb 4-1: USB disconnect, device number 77 [ 1173.250693][T25045] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1173.508848][T25059] netlink: 'syz.0.5846': attribute type 62 has an invalid length. [ 1173.590239][T25063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.609222][T25063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.647679][T23619] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1173.756296][T23613] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1173.795032][T25066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.806630][T23619] usb 7-1: Using ep0 maxpacket: 8 [ 1173.822208][T23619] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1173.838176][T25066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.850039][T23619] usb 7-1: config 0 has no interface number 0 [ 1173.856591][T23619] usb 7-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 1173.872624][T23619] usb 7-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 1173.883462][T23619] usb 7-1: config 0 interface 239 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1173.916767][T23613] usb 5-1: Using ep0 maxpacket: 32 [ 1173.923168][T23619] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1173.939001][T23613] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 250, changing to 7 [ 1173.953841][T23619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.967259][T23613] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 72, changing to 7 [ 1173.986632][T23619] usb 7-1: Product: syz [ 1173.993120][T23619] usb 7-1: Manufacturer: syz [ 1174.005667][T23619] usb 7-1: SerialNumber: syz [ 1174.013093][T23613] usb 5-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 1.05 [ 1174.026425][T23613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.038477][T23619] usb 7-1: config 0 descriptor?? [ 1174.052181][T25056] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1174.067344][T23613] usb 5-1: Product: syz [ 1174.082950][T23613] usb 5-1: Manufacturer: syz [ 1174.094830][T23613] usb 5-1: SerialNumber: syz [ 1174.150042][T23613] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1174.179103][T23613] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1174.224899][T23613] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1174.257171][T23613] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1174.329271][T23613] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1174.365723][T25061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.433036][T25061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.462752][ T30] audit: type=1804 audit(1778681400.676:802): pid=25056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5848" name="/newroot/517/file1" dev="fuse" ino=1 res=1 errno=0 [ 1174.625045][T23613] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1174.760521][T23619] ath6kl: Failed to submit usb control message: -71 [ 1174.782128][T13360] udevd[13360]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1174.809469][T23619] ath6kl: unable to send the bmi data to the device: -71 [ 1174.830604][T23622] usb 5-1: USB disconnect, device number 70 [ 1174.843246][T23619] ath6kl: Unable to send get target info: -71 [ 1174.888273][T23619] ath6kl: Failed to init ath6kl core: -71 [ 1174.943902][T23619] ath6kl_usb 7-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 1175.049446][T23619] usb 7-1: USB disconnect, device number 104 [ 1175.646735][ T5633] Bluetooth: hci1: unexpected event for opcode 0x0009 [ 1175.723845][T25090] netlink: 'syz.0.5857': attribute type 1 has an invalid length. [ 1175.780376][T25094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5857'. [ 1175.880333][T25090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1176.000233][T25096] bond7: (slave geneve2): making interface the new active one [ 1176.071325][T25096] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 1176.098103][T25098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5858'. [ 1176.117406][T25098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5858'. [ 1176.766291][T23622] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1176.931333][T25118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.948046][T23622] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.960166][T25118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.982851][T23622] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1176.998926][T23622] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1177.013463][T23622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.049584][T23622] usb 4-1: Product: syz [ 1177.053829][T23622] usb 4-1: Manufacturer: syz [ 1177.058497][T23622] usb 4-1: SerialNumber: syz [ 1177.147334][T25121] input: syz1 as /devices/virtual/input/input96 [ 1177.275229][T23624] usb 4-1: USB disconnect, device number 78 [ 1177.408251][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.414614][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.638907][T25154] kvm: pic: non byte write [ 1179.383776][T25160] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1180.742755][T25181] binder: 25177:25181 ioctl c0285840 0 returned -22 [ 1181.300269][T25195] xt_hashlimit: size too large, truncated to 1048576 [ 1181.321821][T25195] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1181.695659][T25205] binder: transaction release 541 bad handle 1, ret = -22 [ 1182.108369][ T5633] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1182.480896][T23624] IPVS: starting estimator thread 0... [ 1182.705448][T25227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5899'. [ 1182.785544][T25223] IPVS: using max 37 ests per chain, 88800 per kthread [ 1184.223366][T25241] syzkaller0: entered promiscuous mode [ 1184.243692][T25241] syzkaller0: entered allmulticast mode [ 1185.682741][T25271] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5914'. [ 1187.560846][T14297] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1187.581353][T14297] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1187.601026][T14297] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1187.611239][T14297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1187.619139][T14297] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1188.644937][T23623] usb 3-1: USB disconnect, device number 115 [ 1188.723495][T23623] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1188.760897][T23623] ftdi_sio 3-1:0.0: device disconnected [ 1189.145103][T25337] netlink: 'syz.3.5933': attribute type 1 has an invalid length. [ 1189.251019][T25340] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5934'. [ 1189.500742][T25337] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1189.602258][T25339] bond6: (slave geneve2): making interface the new active one [ 1189.665082][T25339] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 1189.726455][T14297] Bluetooth: hci4: command tx timeout [ 1190.577741][T25379] netlink: 'syz.3.5947': attribute type 1 has an invalid length. [ 1190.917853][T25313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.927848][T25313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.935515][T25313] bridge_slave_0: entered allmulticast mode [ 1190.944199][T25313] bridge_slave_0: entered promiscuous mode [ 1190.985729][T25313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.994643][T25313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.002566][T25313] bridge_slave_1: entered allmulticast mode [ 1191.010858][T25313] bridge_slave_1: entered promiscuous mode [ 1191.026530][ T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1191.194247][T14899] erspan0: left allmulticast mode [ 1191.215680][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1191.221204][T14899] bridge0: port 1(erspan0) entered disabled state [ 1191.234806][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1191.255091][ T9] usb 4-1: config 0 has no interface number 0 [ 1191.280744][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1191.308650][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1191.329375][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.406018][ T9] usb 4-1: Product: syz [ 1191.429619][ T9] usb 4-1: Manufacturer: syz [ 1191.439285][ T9] usb 4-1: SerialNumber: syz [ 1191.451635][ T9] usb 4-1: config 0 descriptor?? [ 1191.488158][T25401] IPVS: set_ctl: invalid protocol: 18591 172.20.20.48:20001 [ 1191.746535][T23619] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1191.760127][T14899] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1191.800546][T14899] bond4 (unregistering): (slave gretap2): Releasing active interface [ 1191.806395][T14297] Bluetooth: hci4: command tx timeout [ 1191.847647][T14899] bond5 (unregistering): (slave gretap3): Releasing active interface [ 1191.873312][T25410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5952'. [ 1191.896310][T23619] usb 7-1: Using ep0 maxpacket: 16 [ 1191.903780][T23619] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1191.907494][T25410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5952'. [ 1191.917744][T23619] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1191.936971][T25384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.950319][T25384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.959225][T23619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.971502][T23619] usb 7-1: config 0 descriptor?? [ 1192.376118][T25384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.387036][T25384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.401930][T25384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.402516][T23619] usbhid 7-1:0.0: can't add hid device: -71 [ 1192.411236][T25384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.419967][T23619] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1192.447876][T23619] usb 7-1: USB disconnect, device number 105 [ 1192.475472][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1192.488702][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1192.505136][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1192.518173][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1192.614306][T14899] bond0 (unregistering): Released all slaves [ 1192.626454][T14899] bond1 (unregistering): Released all slaves [ 1192.645505][T14899] bond2 (unregistering): Released all slaves [ 1192.662399][T14899] bond3 (unregistering): Released all slaves [ 1192.678325][T14899] bond4 (unregistering): Released all slaves [ 1192.697354][T14899] bond5 (unregistering): Released all slaves [ 1192.713440][T14899] bond6 (unregistering): Released all slaves [ 1192.728287][T14899] bond7 (unregistering): Released all slaves [ 1192.745053][T14899] bond8 (unregistering): Released all slaves [ 1192.774564][T25313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.795840][ T5288] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1192.813783][T25313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.971943][T14899] tipc: Disabling bearer [ 1192.983883][T14899] tipc: Left network mode [ 1192.993806][T25313] team0: Port device team_slave_0 added [ 1193.004163][T25313] team0: Port device team_slave_1 added [ 1193.134067][T25313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.145053][T25313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.172546][T25313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.221534][T25313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.254185][T25313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.293132][T25313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.307979][T25433] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5955'. [ 1193.564232][T25313] hsr_slave_0: entered promiscuous mode [ 1193.584975][T25313] hsr_slave_1: entered promiscuous mode [ 1193.864569][T23623] usb 4-1: USB disconnect, device number 79 [ 1193.896563][T14297] Bluetooth: hci4: command tx timeout [ 1194.079565][T14899] batman_adv: batadv0: Removing interface: macvtap1 [ 1194.750186][T25449] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5956'. [ 1194.988019][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5956'. [ 1195.966535][T14297] Bluetooth: hci4: command tx timeout [ 1196.032524][T25475] IPVS: set_ctl: invalid protocol: 18591 172.20.20.48:20001 [ 1196.169655][T25476] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5963'. [ 1196.179253][T25476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5963'. [ 1196.233287][ T5288] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1196.747273][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1196.773405][T25497] openvswitch: netlink: Flow key attr not present in new flow. [ 1196.910562][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1196.918654][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1196.933596][ T9] usb 5-1: config 0 has no interface number 0 [ 1196.953174][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1196.964984][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1196.985444][T14899] IPVS: stop unused estimator thread 0... [ 1196.994846][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.004031][ T9] usb 5-1: Product: syz [ 1197.009899][ T9] usb 5-1: Manufacturer: syz [ 1197.014627][ T9] usb 5-1: SerialNumber: syz [ 1197.024489][ T9] usb 5-1: config 0 descriptor?? [ 1197.459741][T25488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.494984][T25488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.704719][T25513] binfmt_misc: register: failed to install interpreter file ./file0 [ 1197.952166][T25488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.973028][T25488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.021849][T25488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.051724][T25488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.145389][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1198.179617][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1198.222171][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1198.241174][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1198.494425][T25528] syzkaller0: entered promiscuous mode [ 1198.507665][T25528] syzkaller0: entered allmulticast mode [ 1203.375040][ T9] usb 5-1: USB disconnect, device number 71 [ 1203.393990][T25313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1203.434522][T25313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1203.462210][T25313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1203.518293][T25313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1203.551326][T25313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1203.563744][T25313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1203.572356][T25313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1203.607574][T25313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1203.656636][T25586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5977'. [ 1203.677982][T25586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5977'. [ 1203.716844][T25599] hub 8-0:1.0: USB hub found [ 1203.723497][T25599] hub 8-0:1.0: 1 port detected [ 1203.797298][ T29] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1203.868731][T25313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.903432][T25313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.935638][T14906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.942890][T14906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.979201][ T29] usb 7-1: config 1 has an invalid interface number: 188 but max is 0 [ 1204.015945][T14912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.020355][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.023176][T14912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.057607][ T29] usb 7-1: config 1 has no interface number 0 [ 1204.064543][ T29] usb 7-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1204.080093][ T29] usb 7-1: config 1 interface 188 has no altsetting 0 [ 1204.115122][ T29] usb 7-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 1204.129240][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.143718][ T29] usb 7-1: Product: syz [ 1204.153454][ T29] usb 7-1: Manufacturer: syz [ 1204.165357][ T29] usb 7-1: SerialNumber: syz [ 1204.254922][T25313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.416538][T25589] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5980'. [ 1204.447849][T25313] veth0_vlan: entered promiscuous mode [ 1204.519490][T25589] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1204.555081][T25589] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1204.611440][T25313] veth1_vlan: entered promiscuous mode [ 1204.672125][T25313] veth0_macvtap: entered promiscuous mode [ 1204.695416][ T29] usb 7-1: USB disconnect, device number 106 [ 1204.697109][T25313] veth1_macvtap: entered promiscuous mode [ 1204.739671][T25313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1204.763728][T25313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1204.791029][T14906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.810588][T14906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.820113][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1204.829188][T14906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.844256][T14906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.976411][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1205.013822][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1205.040260][ T9] usb 5-1: config 0 has no interface number 0 [ 1205.055994][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1205.088686][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1205.101634][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.111620][T14899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.121999][T14899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.131142][ T9] usb 5-1: Product: syz [ 1205.137942][ T9] usb 5-1: Manufacturer: syz [ 1205.152164][ T9] usb 5-1: SerialNumber: syz [ 1205.175191][ T9] usb 5-1: config 0 descriptor?? [ 1205.224958][T14906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.263092][T14906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.525992][T25627] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5990'. [ 1205.561171][T25627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5990'. [ 1205.661671][T25617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.696124][T25617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.086351][ T29] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 1206.159175][T25617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.181014][T25617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.224358][T25617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.247504][T23623] usb 7-1: new full-speed USB device number 107 using dummy_hcd [ 1206.276008][T25617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.350645][ T29] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1206.369363][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1206.395363][ T29] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1206.407011][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1206.420245][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1206.439960][T23623] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1206.467197][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1206.475786][T23623] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1206.524139][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1206.581961][ T29] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1206.591312][T23623] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1206.626503][T23623] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1206.636102][T23623] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1206.666870][T23623] usb 7-1: Product: syz [ 1206.671458][T23623] usb 7-1: Manufacturer: syz [ 1206.676863][T23623] usb 7-1: SerialNumber: syz [ 1206.700575][ T29] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1206.702425][T23623] usb 7-1: config 0 descriptor?? [ 1206.756754][ T29] usb 3-1: Product: syz [ 1206.761090][ T29] usb 3-1: Manufacturer: syz [ 1206.766023][ T29] usb 3-1: SerialNumber: syz [ 1206.775911][T23623] usb 7-1: selecting invalid altsetting 0 [ 1206.806032][ T29] usb 3-1: config 0 descriptor?? [ 1207.074269][ T29] usb 3-1: selecting invalid altsetting 0 [ 1207.106396][T23623] usb 7-1: USB disconnect, device number 107 [ 1207.219278][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1207.235593][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1207.249019][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1207.257992][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1207.271000][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1207.385950][T14063] udevd[14063]: setting mode of /dev/bus/usb/007/107 to 020664 failed: No such file or directory [ 1207.398982][ T29] usb 3-1: USB disconnect, device number 116 [ 1207.432680][T14063] udevd[14063]: setting owner of /dev/bus/usb/007/107 to uid=0, gid=0 failed: No such file or directory [ 1207.495038][T12790] udevd[12790]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1207.547097][T13490] udevd[13490]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1207.795309][ T9] usb 5-1: USB disconnect, device number 72 [ 1208.331631][T14906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.358064][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1208.518277][ T9] usb 5-1: config 1 has an invalid interface number: 188 but max is 0 [ 1208.538913][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.578097][ T9] usb 5-1: config 1 has no interface number 0 [ 1208.610011][ T9] usb 5-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1208.689353][ T9] usb 5-1: config 1 interface 188 has no altsetting 0 [ 1208.768636][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 1208.803314][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.813093][ T9] usb 5-1: Product: syz [ 1208.821460][ T9] usb 5-1: Manufacturer: syz [ 1208.833652][ T9] usb 5-1: SerialNumber: syz [ 1208.874325][T14906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.040569][T25645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.069957][T25645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.090522][T25645] bridge_slave_0: entered allmulticast mode [ 1209.118354][T25645] bridge_slave_0: entered promiscuous mode [ 1209.170030][T25686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5999'. [ 1209.193279][T25645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.213802][T25682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6003'. [ 1209.227326][T25645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.240856][T25682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6003'. [ 1209.250538][T25645] bridge_slave_1: entered allmulticast mode [ 1209.275311][T25645] bridge_slave_1: entered promiscuous mode [ 1209.333072][ T5633] Bluetooth: hci0: command tx timeout [ 1209.375733][T14906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.476470][T25686] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1209.493461][T25686] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1209.622354][ T9] usb 5-1: USB disconnect, device number 73 [ 1209.641966][T25645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.665025][T25645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.727639][T25645] team0: Port device team_slave_0 added [ 1209.735629][T25645] team0: Port device team_slave_1 added [ 1209.874136][T14906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.002427][T25645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.059435][T25645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.140905][T25645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.177576][T25645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.191379][T25645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.265153][T25645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.387112][T25703] tipc: Enabled bearer , priority 0 [ 1210.496469][T23626] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1210.507169][T25645] hsr_slave_0: entered promiscuous mode [ 1210.515588][T25645] hsr_slave_1: entered promiscuous mode [ 1210.523487][T25645] debugfs: 'hsr0' already exists in 'hsr' [ 1210.529673][T25645] Cannot create hsr debugfs directory [ 1210.539095][ T9] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 1210.551747][T25703] tipc: Resetting bearer [ 1210.696417][T23626] usb 7-1: Using ep0 maxpacket: 32 [ 1210.705621][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1210.747407][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1210.759673][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1210.760275][T23626] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1210.779212][T23626] usb 7-1: config 0 has no interface number 0 [ 1210.787393][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1210.797233][T23626] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1210.804121][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1210.828089][T23626] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1210.843358][ T9] usb 3-1: Product: syz [ 1210.853225][ T9] usb 3-1: Manufacturer: syz [ 1210.858608][T23626] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.875039][ T9] usb 3-1: SerialNumber: syz [ 1210.889452][T23626] usb 7-1: Product: syz [ 1210.900739][ T9] usb 3-1: config 0 descriptor?? [ 1210.910419][T23626] usb 7-1: Manufacturer: syz [ 1210.929742][T23626] usb 7-1: SerialNumber: syz [ 1210.941676][ T9] usb 3-1: selecting invalid altsetting 0 [ 1210.969671][T23626] usb 7-1: config 0 descriptor?? [ 1211.160381][ T9] usb 3-1: USB disconnect, device number 117 [ 1211.303480][T13360] udevd[13360]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1211.322559][T14906] erspan0: left allmulticast mode [ 1211.329067][T14906] erspan0: left promiscuous mode [ 1211.337960][T14906] bridge0: port 3(erspan0) entered disabled state [ 1211.364685][T14906] bridge_slave_1: left allmulticast mode [ 1211.371004][T14906] bridge_slave_1: left promiscuous mode [ 1211.390659][T14906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.407387][ T5633] Bluetooth: hci0: command tx timeout [ 1211.430143][T14906] bridge_slave_0: left allmulticast mode [ 1211.445079][T25699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.461493][T14906] bridge_slave_0: left promiscuous mode [ 1211.479315][T14906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.494871][T25699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.838207][T25733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6013'. [ 1211.867535][T25733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6013'. [ 1211.965724][T25699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.978170][T25699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.989671][T25699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.016695][T25699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.078759][T23626] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1212.116392][T23626] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1212.131477][T23626] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1212.144187][T23626] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 1212.187695][T14906] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1212.229413][T14906] bond3 (unregistering): (slave gretap2): Releasing active interface [ 1212.280824][T14906] bond4 (unregistering): (slave gretap3): Releasing active interface [ 1212.342996][T14906] bond5 (unregistering): (slave gretap4): Releasing active interface [ 1212.406439][T14906] bond6 (unregistering): (slave geneve2): Releasing active interface [ 1212.448444][T14906] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1212.923941][T14906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1212.947327][T14906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.968319][T14906] bond0 (unregistering): Released all slaves [ 1212.980192][T14906] bond1 (unregistering): Released all slaves [ 1212.995232][T14906] bond2 (unregistering): Released all slaves [ 1213.026884][T14906] bond3 (unregistering): Released all slaves [ 1213.062492][T14906] bond4 (unregistering): Released all slaves [ 1213.133400][T14906] bond5 (unregistering): Released all slaves [ 1213.178291][T14906] bond6 (unregistering): Released all slaves [ 1213.351087][ T5288] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1213.351985][T25747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6016'. [ 1213.432730][T25747] 8021q: VLANs not supported on vcan0 [ 1213.447619][T23613] usb 7-1: USB disconnect, device number 108 [ 1213.454445][T14906] tipc: Disabling bearer [ 1213.486561][ T5633] Bluetooth: hci0: command tx timeout [ 1213.498242][T14906] tipc: Left network mode [ 1213.538805][T25751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6017'. [ 1214.101271][T25768] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6019'. [ 1214.462275][T25774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6019'. [ 1214.616466][T25771] syzkaller0: entered promiscuous mode [ 1214.630705][T25771] syzkaller0: entered allmulticast mode [ 1215.327219][ T29] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1215.506298][T23613] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1215.525731][ T29] usb 5-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1215.546665][ T29] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1215.567924][ T5633] Bluetooth: hci0: command tx timeout [ 1215.587917][ T29] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1215.616307][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1215.631055][ T29] usb 5-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 1215.655414][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.688854][ T29] usb 5-1: config 0 descriptor?? [ 1215.703656][T25785] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1215.756355][T23613] usb 7-1: Using ep0 maxpacket: 32 [ 1215.765940][T23613] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1215.776784][T23613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.787774][T23613] usb 7-1: Product: syz [ 1215.794267][T23613] usb 7-1: Manufacturer: syz [ 1215.799429][T23613] usb 7-1: SerialNumber: syz [ 1216.024423][ T30] audit: type=1326 audit(1778681442.246:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25788 comm="syz.6.6025" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7da99ce59 code=0x7ffc0000 [ 1216.069916][ T30] audit: type=1326 audit(1778681442.246:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25788 comm="syz.6.6025" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff7da99ce59 code=0x7ffc0000 [ 1216.094958][ T30] audit: type=1326 audit(1778681442.246:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25788 comm="syz.6.6025" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7da99ce59 code=0x7ffc0000 [ 1216.138810][ T30] audit: type=1326 audit(1778681442.246:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25788 comm="syz.6.6025" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7da99caeb code=0x7ffc0000 [ 1216.202462][ T30] audit: type=1326 audit(1778681442.246:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25788 comm="syz.6.6025" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7da99caeb code=0x7ffc0000 [ 1216.249338][ T30] audit: type=1326 audit(1778681442.246:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25788 comm="syz.6.6025" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7da95d68e code=0x7ffc0000 [ 1216.298450][ T30] audit: type=1326 audit(1778681442.456:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25788 comm="syz.6.6025" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7da99ce59 code=0x7ffc0000 [ 1216.323168][ T30] audit: type=1326 audit(1778681442.456:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25788 comm="syz.6.6025" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7da99caeb code=0x7ffc0000 [ 1216.399864][ T30] audit: type=1326 audit(1778681442.456:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25788 comm="syz.6.6025" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7da99caeb code=0x7ffc0000 [ 1216.454343][T25798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6023'. [ 1216.473201][T23613] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 1216.485406][T23613] usb 7-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1216.494382][T23613] usb 7-1: 2:1: cannot get freq (v2/v3): err -71 [ 1216.501411][T23613] usb 7-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 1216.511458][ T30] audit: type=1326 audit(1778681442.456:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25788 comm="syz.6.6025" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7da99ce59 code=0x7ffc0000 [ 1216.598690][T23613] usb 7-1: USB disconnect, device number 109 [ 1216.735160][T12790] udevd[12790]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1217.416713][T23613] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1217.587944][T23613] usb 7-1: Using ep0 maxpacket: 32 [ 1217.597528][T23613] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1217.606526][T23613] usb 7-1: config 0 has no interface number 0 [ 1217.613303][T23613] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1217.623418][T23613] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1217.632803][T23613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.641491][T23613] usb 7-1: Product: syz [ 1217.645901][T23613] usb 7-1: Manufacturer: syz [ 1217.651063][T23613] usb 7-1: SerialNumber: syz [ 1217.659722][T23613] usb 7-1: config 0 descriptor?? [ 1218.081715][T25802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.093192][T25802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.512653][T25802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.522355][T25802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.533257][T25802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.542433][T25802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.583442][T23613] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1218.595970][T23613] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1218.606887][T23613] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1218.636408][T23613] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 1220.815131][ T29] usbhid 5-1:0.0: can't add hid device: -32 [ 1220.821241][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1220.864776][ T5288] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1220.891243][T25798] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1220.905699][ T29] usb 7-1: USB disconnect, device number 110 [ 1221.021238][T23626] usb 5-1: USB disconnect, device number 74 [ 1221.268138][T25814] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1221.313988][T25812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6029'. [ 1221.339798][T25812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6029'. [ 1221.706655][T14906] hsr_slave_0: left promiscuous mode [ 1221.723984][T14906] hsr_slave_1: left promiscuous mode [ 1221.737236][T14906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.757463][T14906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.796295][T23613] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1221.971552][T23613] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1221.995304][T23613] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.054849][T23625] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1222.055363][T23613] usb 7-1: config 0 descriptor?? [ 1222.099709][T23613] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1222.122585][T14906] team0 (unregistering): Port device team_slave_1 removed [ 1222.162104][T14906] team0 (unregistering): Port device team_slave_0 removed [ 1222.226245][T23625] usb 5-1: Using ep0 maxpacket: 32 [ 1222.233143][T23625] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1222.243071][T23625] usb 5-1: config 0 has no interface number 0 [ 1222.256234][T23625] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1222.272361][T23625] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1222.283579][T23625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.295104][T23625] usb 5-1: Product: syz [ 1222.302713][T23625] usb 5-1: Manufacturer: syz [ 1222.307770][T25821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6033'. [ 1222.317094][T23625] usb 5-1: SerialNumber: syz [ 1222.335311][T23625] usb 5-1: config 0 descriptor?? [ 1222.417189][T23623] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1222.487328][T25849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1222.505911][T25849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6033'. [ 1222.586311][T23623] usb 3-1: Using ep0 maxpacket: 32 [ 1222.611383][T23623] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1222.627937][T23623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.637055][T23623] usb 3-1: Product: syz [ 1222.642350][T23623] usb 3-1: Manufacturer: syz [ 1222.654049][T23623] usb 3-1: SerialNumber: syz [ 1222.682066][T23623] usb 3-1: config 0 descriptor?? [ 1222.771970][T25834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.783012][T25834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.844753][T25645] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1222.851850][T23613] gspca_cpia1: usb_control_msg 05, error -71 [ 1222.859970][T23613] gspca_cpia1: usb_control_msg 01, error -71 [ 1222.877101][T23613] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1222.906517][T25645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1222.917126][T23613] usb 7-1: USB disconnect, device number 111 [ 1222.924104][T25645] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1222.982464][T25645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1222.992505][T25645] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1223.024904][T25645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1223.045486][T25645] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1223.065285][T25645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1223.222396][T25834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.249365][T25834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.273284][T25834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.295530][T25834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.308430][T25645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.372551][T23625] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1223.407399][T25645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.414129][T23625] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1223.436630][T25845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6038'. [ 1223.450894][T23625] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1223.451871][T14897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.468432][T14897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.481657][T23625] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1223.493973][T25871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6038'. [ 1223.560808][T23623] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1223.581568][T23623] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1223.582868][T14899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.589243][T23623] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1223.595611][T14899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.699486][T23623] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 1223.835584][T25645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.922848][T25645] veth0_vlan: entered promiscuous mode [ 1223.937534][T25645] veth1_vlan: entered promiscuous mode [ 1223.982895][T25645] veth0_macvtap: entered promiscuous mode [ 1224.012721][T25645] veth1_macvtap: entered promiscuous mode [ 1224.042780][T25645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.063142][T25645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.100495][T14899] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.110294][T14899] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.122849][T14899] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.132421][T14899] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.293146][T14906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.304359][T14906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.328136][T14906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.336980][T14906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.815812][T23626] usb 5-1: USB disconnect, device number 75 [ 1224.831983][T25910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6045'. [ 1224.859228][T25910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6045'. [ 1225.040131][T14297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1225.064429][T14297] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1225.073210][T14297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1225.081898][T14297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1225.090580][T14297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1225.179981][T23624] usb 3-1: USB disconnect, device number 118 [ 1225.566710][T23624] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1225.726608][T23624] usb 3-1: Using ep0 maxpacket: 32 [ 1225.748115][T23624] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1225.786875][T23624] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1225.815809][T23624] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1225.834757][T25932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6050'. [ 1225.854005][T23624] usb 3-1: Product: syz [ 1225.862055][T23624] usb 3-1: Manufacturer: syz [ 1225.867818][T25914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.897755][T23624] usb 3-1: SerialNumber: syz [ 1225.903967][T25914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.913665][T23624] usb 3-1: config 0 descriptor?? [ 1225.921015][T25914] bridge_slave_0: entered allmulticast mode [ 1225.932751][T25916] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1225.943780][T25914] bridge_slave_0: entered promiscuous mode [ 1225.953466][T23624] hub 3-1:0.0: bad descriptor, ignoring hub [ 1225.972905][T23624] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1226.015006][T25914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.041643][T25914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.057772][T25914] bridge_slave_1: entered allmulticast mode [ 1226.065603][T25914] bridge_slave_1: entered promiscuous mode [ 1226.095215][T25914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1226.109846][T25914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.255904][T25934] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 1226.267937][T25934] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 1226.308541][T25914] team0: Port device team_slave_0 added [ 1226.318062][T25914] team0: Port device team_slave_1 added [ 1226.340618][T25914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.351250][T25914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.386093][T25914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.417785][T25914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.428333][T25914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.459076][T25914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.610296][T25914] hsr_slave_0: entered promiscuous mode [ 1226.629165][T25914] hsr_slave_1: entered promiscuous mode [ 1226.642769][T25914] debugfs: 'hsr0' already exists in 'hsr' [ 1226.655365][T25914] Cannot create hsr debugfs directory [ 1226.756303][ T29] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1226.865846][T25914] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.897063][T25916] usb 3-1: reset high-speed USB device number 119 using dummy_hcd [ 1226.908565][T25916] usb 3-1: device reset changed ep0 maxpacket size! [ 1226.918878][T23625] usb 3-1: USB disconnect, device number 119 [ 1226.981345][ T29] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.002405][ T29] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.022896][ T29] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1227.051654][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1227.066207][ T29] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1227.079234][T23625] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1227.126287][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.148156][ T29] usb 4-1: config 0 descriptor?? [ 1227.166671][ T5633] Bluetooth: hci1: command tx timeout [ 1227.190189][T25914] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.272084][T23625] usb 3-1: Using ep0 maxpacket: 16 [ 1227.287577][T23625] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1227.296373][T25914] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.311051][T23625] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1227.321680][T23625] usb 3-1: can't read configurations, error -71 [ 1227.470450][T25914] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.756869][T25948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6053'. [ 1228.121595][T25914] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1228.145639][T25914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1228.157461][T25914] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1228.180027][T25914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1228.197557][T25914] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1228.226889][T25914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1228.244821][T25914] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1228.278057][T25914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1228.396266][T23625] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1228.511168][T25914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.556250][T23625] usb 3-1: Using ep0 maxpacket: 32 [ 1228.569744][T23625] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1228.582809][T25914] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.607805][T23625] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1228.621155][T14914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.626243][T23625] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1228.628408][T14914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.647004][T23625] usb 3-1: Product: syz [ 1228.651297][T23625] usb 3-1: Manufacturer: syz [ 1228.661709][T14897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.668957][T14897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.684141][T23625] usb 3-1: SerialNumber: syz [ 1228.701340][T23625] usb 3-1: config 0 descriptor?? [ 1228.722856][T25952] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1228.743664][T23625] hub 3-1:0.0: bad descriptor, ignoring hub [ 1228.787947][T23625] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1228.906966][T25914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.043592][T25914] veth0_vlan: entered promiscuous mode [ 1229.071223][T25961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6059'. [ 1229.071342][T25914] veth1_vlan: entered promiscuous mode [ 1229.095942][T23612] usb 3-1: USB disconnect, device number 121 [ 1229.109832][T25961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6059'. [ 1229.211477][T25914] veth0_macvtap: entered promiscuous mode [ 1229.225106][T25914] veth1_macvtap: entered promiscuous mode [ 1229.247120][ T5633] Bluetooth: hci1: command tx timeout [ 1229.293131][T25914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1229.355993][T25914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.420527][T14899] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.437209][T14899] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.446281][T14899] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.470608][T14899] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.587343][T23625] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1229.670539][T14914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.700308][T14914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.715647][ T29] usbhid 4-1:0.0: can't add hid device: -71 [ 1229.738360][ T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1229.752187][T14914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.773106][ T29] usb 4-1: USB disconnect, device number 80 [ 1229.776791][T23625] usb 3-1: Using ep0 maxpacket: 16 [ 1229.784651][T14914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.831425][T23625] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1229.866592][T23625] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1229.885705][T23625] usb 3-1: can't read configurations, error -71 [ 1230.633013][T14297] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1230.654267][T14297] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1230.673856][T14297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1230.685471][T14297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1230.693912][T14297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1231.326904][ T5633] Bluetooth: hci1: command tx timeout [ 1231.472390][T22857] syz_tun (unregistering): left allmulticast mode [ 1231.836745][T23619] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1232.088312][T23619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 1232.112992][T23619] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1232.136846][T23619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.167754][T23619] usb 5-1: config 0 descriptor?? [ 1232.187650][T26008] dummy0: entered allmulticast mode [ 1232.195655][T25994] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1232.209316][T26006] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6069'. [ 1232.260131][T26006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6069'. [ 1232.416239][T25987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.423674][T25987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.431488][T25987] bridge_slave_0: entered allmulticast mode [ 1232.439063][T25987] bridge_slave_0: entered promiscuous mode [ 1232.452140][T25987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.459969][T25987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.467297][T25987] bridge_slave_1: entered allmulticast mode [ 1232.474636][T25987] bridge_slave_1: entered promiscuous mode [ 1232.504772][T25987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1232.522266][T25987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.537004][T23624] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1232.577105][T25987] team0: Port device team_slave_0 added [ 1232.586693][T25987] team0: Port device team_slave_1 added [ 1232.627001][T25987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.633978][T25987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.727902][T25987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.738985][T23624] usb 3-1: Using ep0 maxpacket: 32 [ 1232.748706][T23624] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 1232.765174][T23619] elan 0003:04F3:0755.005D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1232.779192][T23624] usb 3-1: config 2 has no interface number 0 [ 1232.792584][ T5633] Bluetooth: hci2: command tx timeout [ 1232.815034][T23624] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1232.825642][T25987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.851008][T25987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.883743][T23624] usb 3-1: config 2 interface 88 has no altsetting 0 [ 1232.901812][T23624] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1232.957127][T25987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.999751][T23624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.078905][T23624] usb 3-1: Product: syz [ 1233.106674][T25987] hsr_slave_0: entered promiscuous mode [ 1233.113344][T25987] hsr_slave_1: entered promiscuous mode [ 1233.124850][T25987] debugfs: 'hsr0' already exists in 'hsr' [ 1233.133194][T25987] Cannot create hsr debugfs directory [ 1233.139816][T25989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1233.154101][T25989] batadv_slave_1: entered promiscuous mode [ 1233.194727][T23624] usb 3-1: Manufacturer: syz [ 1233.212307][T23619] usb 5-1: USB disconnect, device number 76 [ 1233.233052][T23624] usb 3-1: SerialNumber: syz [ 1233.257857][T26012] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1233.416831][ T5633] Bluetooth: hci1: command tx timeout [ 1233.672198][T25987] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.702309][T26012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.711310][T25987] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.746868][T26012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.071348][T25987] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.114787][T25987] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.136258][T23619] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1234.248823][T25987] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.261017][T25987] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.296354][T23619] usb 7-1: Using ep0 maxpacket: 32 [ 1234.320865][T23619] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1234.331534][T23619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.344520][T23619] usb 7-1: Product: syz [ 1234.355145][T23619] usb 7-1: Manufacturer: syz [ 1234.360081][T23619] usb 7-1: SerialNumber: syz [ 1234.379865][T23619] usb 7-1: config 0 descriptor?? [ 1234.387250][ T29] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1234.450800][T25987] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.461165][T25987] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.556403][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 1234.567090][ T29] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1234.576644][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.590076][ T29] usb 5-1: Product: syz [ 1234.594560][ T29] usb 5-1: Manufacturer: syz [ 1234.605221][ T29] usb 5-1: SerialNumber: syz [ 1234.630342][ T29] usb 5-1: config 0 descriptor?? [ 1234.728929][T25987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1234.740111][T25987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1234.748887][T25987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1234.759470][T25987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1234.768366][T25987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1234.781636][T25987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1234.790160][T25987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1234.801774][T25987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1234.848912][ T5633] Bluetooth: hci2: command tx timeout [ 1234.935449][T25987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.960539][T25987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.979904][T14914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.987203][T14914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.006002][T14912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.013335][T14912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.084460][T26030] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6075'. [ 1235.103477][T26030] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6075'. [ 1235.122459][T25987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.140281][T23619] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1235.172426][T23619] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1235.188381][T23619] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1235.254674][T25987] veth0_vlan: entered promiscuous mode [ 1235.267556][T23619] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 1235.281118][T25987] veth1_vlan: entered promiscuous mode [ 1235.323475][T26038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6077'. [ 1235.377977][T26052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6077'. [ 1235.393234][T25987] veth0_macvtap: entered promiscuous mode [ 1235.415562][ T29] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1235.431556][T25987] veth1_macvtap: entered promiscuous mode [ 1235.452087][ T29] peak_usb 5-1:0.0 can1: sending command failure: -22 [ 1235.464697][T26051] 8021q: VLANs not supported on wg0 [ 1235.473311][ T29] peak_usb 5-1:0.0 can1: sending command failure: -22 [ 1235.485696][T23624] asix 3-1:2.88: probe with driver asix failed with error -71 [ 1235.539099][T23624] usb 3-1: USB disconnect, device number 124 [ 1235.618736][T25987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.661057][ T29] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 1235.694433][T25987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.779901][T14914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.832602][T14914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.891254][T14914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.939830][T14914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.225944][ T29] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1236.332903][T14899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.354443][T14899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.409320][ T29] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1236.433077][T14912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.454824][ T29] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1236.474148][T14912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.509494][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1236.539524][ T29] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1236.554196][ T29] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1236.563079][ T29] usb 3-1: Product: syz [ 1236.568016][ T29] usb 3-1: Manufacturer: syz [ 1236.573322][ T29] usb 3-1: SerialNumber: syz [ 1236.592975][ T29] usb 3-1: config 0 descriptor?? [ 1236.641358][ T29] usb 3-1: selecting invalid altsetting 0 [ 1236.852311][ T29] usb 3-1: USB disconnect, device number 125 [ 1236.938115][ T5633] Bluetooth: hci2: command tx timeout [ 1237.015566][T23624] usb 7-1: USB disconnect, device number 112 [ 1237.233267][T23619] usb 5-1: USB disconnect, device number 77 [ 1237.479361][T23624] usb 7-1: new full-speed USB device number 113 using dummy_hcd [ 1237.646068][T26084] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1237.671392][T23624] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1237.688120][T23624] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.698373][T23624] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1237.705458][T23624] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1237.718909][T23624] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.728062][T23625] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1237.741782][T23624] usb 7-1: config 0 descriptor?? [ 1237.907418][T23625] usb 5-1: Using ep0 maxpacket: 32 [ 1237.922336][T23625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.935243][T23625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.946637][T23625] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1237.963129][T23625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.010257][T23625] usb 5-1: config 0 descriptor?? [ 1238.050647][T23625] hub 5-1:0.0: USB hub found [ 1238.232533][T23625] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1238.260285][T23624] hid_parser_main: 759 callbacks suppressed [ 1238.260318][T23624] hid-steam 0003:28DE:1102.005E: unknown main item tag 0x3 [ 1238.275491][T23624] hid-steam 0003:28DE:1102.005E: unknown main item tag 0x3 [ 1238.327648][T23624] hid-steam 0003:28DE:1102.005E: unknown main item tag 0x3 [ 1238.344242][T23625] usbhid 5-1:0.0: can't add hid device: -71 [ 1238.364245][T23625] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1238.381802][T23624] hid-steam 0003:28DE:1102.005E: unknown main item tag 0x3 [ 1238.499966][T23624] hid-steam 0003:28DE:1102.005E: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 1238.540462][T23625] usb 5-1: USB disconnect, device number 78 [ 1238.849320][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.863292][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.016775][ T5633] Bluetooth: hci2: command tx timeout [ 1239.041361][T23625] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1239.216372][T23625] usb 5-1: device descriptor read/64, error -71 [ 1239.456336][T23625] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1239.596254][T23625] usb 5-1: device descriptor read/64, error -71 [ 1239.734124][T23625] usb usb5-port1: attempt power cycle [ 1240.076252][T23625] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1240.107145][T23625] usb 5-1: device descriptor read/8, error -71 [ 1240.115535][T23614] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1240.205974][T23619] usb 7-1: USB disconnect, device number 113 [ 1240.294638][T23614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 1240.325700][T26133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6105'. [ 1240.347324][T23614] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1240.351956][T26133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6105'. [ 1240.365826][T23625] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1240.385106][T23614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.406963][T23625] usb 5-1: device descriptor read/8, error -71 [ 1240.417256][T23614] usb 4-1: config 0 descriptor?? [ 1240.440639][T26122] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1240.556878][T23625] usb usb5-port1: unable to enumerate USB device [ 1240.826227][T23625] usb 3-1: new low-speed USB device number 126 using dummy_hcd [ 1240.942598][T23614] elan 0003:04F3:0755.005F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1240.999185][T23625] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.021875][T23625] usb 3-1: config 0 has no interfaces? [ 1241.036936][T23625] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.052321][T23625] usb 3-1: config 0 has no interfaces? [ 1241.061585][T23625] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.072401][T23625] usb 3-1: config 0 has no interfaces? [ 1241.083720][T23625] usb 3-1: string descriptor 0 read error: -22 [ 1241.090967][T23625] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1241.104574][T23625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.162511][T23625] usb 3-1: config 0 descriptor?? [ 1241.230724][T26121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1241.247975][T26121] batadv_slave_1: entered promiscuous mode [ 1241.323763][T23614] usb 4-1: USB disconnect, device number 81 [ 1241.415096][T23624] usb 3-1: USB disconnect, device number 126 [ 1241.734371][T26150] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1242.406268][T23613] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1242.577967][T23613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 21293, setting to 64 [ 1242.618473][T23613] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1242.672588][T23613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.713070][T23613] usb 3-1: Product: syz [ 1242.723191][T23613] usb 3-1: Manufacturer: syz [ 1242.740331][T26177] FAULT_INJECTION: forcing a failure. [ 1242.740331][T26177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1242.759407][T23613] usb 3-1: SerialNumber: syz [ 1242.792123][T26177] CPU: 0 UID: 0 PID: 26177 Comm: syz.6.6119 Tainted: G L syzkaller #0 PREEMPT(full) [ 1242.792144][T26177] Tainted: [L]=SOFTLOCKUP [ 1242.792148][T26177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1242.792156][T26177] Call Trace: [ 1242.792161][T26177] [ 1242.792166][T26177] dump_stack_lvl+0xe8/0x150 [ 1242.792185][T26177] should_fail_ex+0x412/0x560 [ 1242.792203][T26177] _copy_from_user+0x2d/0xb0 [ 1242.792218][T26177] ___sys_sendmsg+0x1c6/0x360 [ 1242.792233][T26177] ? __lock_acquire+0x6b5/0x2cf0 [ 1242.792246][T26177] ? __pfx____sys_sendmsg+0x10/0x10 [ 1242.792276][T26177] ? __fget_files+0x2a/0x420 [ 1242.792288][T26177] ? __fget_files+0x3a0/0x420 [ 1242.792304][T26177] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1242.792320][T26177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1242.792339][T26177] ? __pfx_ksys_write+0x10/0x10 [ 1242.792360][T26177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.792371][T26177] do_syscall_64+0x15f/0xf80 [ 1242.792387][T26177] ? clear_bhb_loop+0x40/0x90 [ 1242.792399][T26177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.792409][T26177] RIP: 0033:0x7ff7da99ce59 [ 1242.792420][T26177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.792429][T26177] RSP: 002b:00007ff7db879028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1242.792441][T26177] RAX: ffffffffffffffda RBX: 00007ff7dac15fa0 RCX: 00007ff7da99ce59 [ 1242.792448][T26177] RDX: 0000000000000000 RSI: 0000200000004380 RDI: 0000000000000003 [ 1242.792454][T26177] RBP: 00007ff7db879090 R08: 0000000000000000 R09: 0000000000000000 [ 1242.792460][T26177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1242.792465][T26177] R13: 00007ff7dac16038 R14: 00007ff7dac15fa0 R15: 00007ff7dad3fa48 [ 1242.792480][T26177] [ 1243.153771][T23613] usb 3-1: config 0 descriptor?? [ 1243.203286][T26166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1243.248333][T23613] hub 3-1:0.0: bad descriptor, ignoring hub [ 1243.288054][T23613] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1243.305590][T26184] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1243.312155][T26184] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1243.374766][T26184] vhci_hcd vhci_hcd.0: Device attached [ 1243.388134][T23613] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input97 [ 1243.391420][T26190] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(8) [ 1243.403796][T26190] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1243.432867][T26190] vhci_hcd vhci_hcd.0: Device attached [ 1243.507178][T26184] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(10) [ 1243.513823][T26184] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1243.556507][T23619] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1243.577220][T26184] vhci_hcd vhci_hcd.0: Device attached [ 1243.606093][T26196] vhci_hcd: connection closed [ 1243.606632][T14914] vhci_hcd vhci_hcd.6: stop threads [ 1243.621252][T26192] vhci_hcd: connection closed [ 1243.627025][T23619] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 1243.639644][T14914] vhci_hcd vhci_hcd.6: release socket [ 1243.660772][T23613] usb 3-1: USB disconnect, device number 127 [ 1243.667728][T14914] vhci_hcd vhci_hcd.6: disconnect device [ 1243.672000][T26186] vhci_hcd: connection closed [ 1243.746311][T26187] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1243.815962][T26204] netlink: 'syz.0.6126': attribute type 1 has an invalid length. [ 1243.867351][T14914] vhci_hcd vhci_hcd.6: stop threads [ 1243.873479][T14914] vhci_hcd vhci_hcd.6: release socket [ 1243.894646][T14914] vhci_hcd vhci_hcd.6: disconnect device [ 1243.928064][T23624] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1243.952796][T14914] vhci_hcd vhci_hcd.6: stop threads [ 1243.965623][T14914] vhci_hcd vhci_hcd.6: release socket [ 1243.994396][T14914] vhci_hcd vhci_hcd.6: disconnect device [ 1244.098177][T23624] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1244.112135][T23624] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1244.124292][T23624] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1244.141864][T23624] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1244.151369][T23624] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1244.162095][T23624] usb 5-1: Product: syz [ 1244.168242][T23624] usb 5-1: Manufacturer: syz [ 1244.173303][T23624] usb 5-1: SerialNumber: syz [ 1244.197521][T23624] usb 5-1: config 0 descriptor?? [ 1244.215507][T26216] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1244.248394][T23624] usb 5-1: selecting invalid altsetting 0 [ 1244.450800][T23624] usb 5-1: USB disconnect, device number 83 [ 1244.676610][ T5681] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1244.849179][ T5681] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.862102][ T5681] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1244.874174][ T5681] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 1244.883417][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.892025][ T5681] usb 3-1: Product: syz [ 1244.897465][ T5681] usb 3-1: Manufacturer: syz [ 1244.902139][ T5681] usb 3-1: SerialNumber: syz [ 1244.910667][ T5681] usb 3-1: config 0 descriptor?? [ 1245.023442][T26223] syzkaller0: entered promiscuous mode [ 1245.047265][T26223] syzkaller0: entered allmulticast mode [ 1245.601527][T26239] binder: 26238:26239 ioctl 40186e8d 2000000002c0 returned -22 [ 1245.632882][T26239] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1245.650870][T26239] binder: 26238:26239 ioctl c0306201 2000000004c0 returned -14 [ 1245.693320][T26239] binder: 26238:26239 ioctl c0306201 2000000001c0 returned -14 [ 1245.722860][T26239] binder: 26238:26239 ioctl c018620b 200000000180 returned -14 [ 1246.115058][T26249] netlink: 'syz.6.6140': attribute type 62 has an invalid length. [ 1246.136312][T23613] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1246.349102][T23613] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1246.399107][T23613] usb 5-1: config 0 has no interface number 0 [ 1246.441794][T23613] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.516881][T23613] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.583752][T23613] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1246.631580][T23613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.684115][T23613] usb 5-1: config 0 descriptor?? [ 1247.192187][T23613] prodikeys 0003:041E:2801.0060: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 1247.255420][T23613] hid_prodikeys: hid-prodikeys: failed to find output report [ 1247.255420][T23613] [ 1247.401964][T26259] ================================================================== [ 1247.410059][T26259] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 1247.418296][T26259] Read of size 7 at addr ffff888058341480 by task fido_id/26259 [ 1247.425951][T26259] [ 1247.428356][T26259] CPU: 0 UID: 0 PID: 26259 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1247.428375][T26259] Tainted: [L]=SOFTLOCKUP [ 1247.428379][T26259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1247.428386][T26259] Call Trace: [ 1247.428394][T26259] [ 1247.428399][T26259] dump_stack_lvl+0xe8/0x150 [ 1247.428415][T26259] print_address_description+0x55/0x1e0 [ 1247.428426][T26259] ? report_descriptor_read+0xb5/0x100 [ 1247.428437][T26259] print_report+0x58/0x70 [ 1247.428445][T26259] kasan_report+0x117/0x150 [ 1247.428462][T26259] ? report_descriptor_read+0xb5/0x100 [ 1247.428473][T26259] kasan_check_range+0x264/0x2c0 [ 1247.428487][T26259] ? report_descriptor_read+0xb5/0x100 [ 1247.428496][T26259] __asan_memcpy+0x29/0x70 [ 1247.428509][T26259] report_descriptor_read+0xb5/0x100 [ 1247.428519][T26259] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 1247.428531][T26259] kernfs_fop_read_iter+0x451/0x6b0 [ 1247.428548][T26259] vfs_read+0x582/0xa70 [ 1247.428564][T26259] ? __pfx_vfs_read+0x10/0x10 [ 1247.428577][T26259] ? do_sys_openat2+0x14c/0x200 [ 1247.428588][T26259] ? kmem_cache_free+0x182/0x650 [ 1247.428602][T26259] ? fd_install+0x94/0x3d0 [ 1247.428615][T26259] ksys_read+0x150/0x270 [ 1247.428629][T26259] ? __pfx_ksys_read+0x10/0x10 [ 1247.428643][T26259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.428654][T26259] do_syscall_64+0x15f/0xf80 [ 1247.428669][T26259] ? trace_irq_disable+0x3b/0x140 [ 1247.428684][T26259] ? clear_bhb_loop+0x40/0x90 [ 1247.428695][T26259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.428705][T26259] RIP: 0033:0x7f72264a7407 [ 1247.428716][T26259] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1247.428725][T26259] RSP: 002b:00007ffff77a2280 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1247.428736][T26259] RAX: ffffffffffffffda RBX: 00007f7226c2b880 RCX: 00007f72264a7407 [ 1247.428744][T26259] RDX: 0000000000001000 RSI: 00007ffff77a22d0 RDI: 0000000000000004 [ 1247.428751][T26259] RBP: 000055ef59cb4730 R08: 0000000000000000 R09: 0000000000000000 [ 1247.428757][T26259] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ef59cb3930 [ 1247.428763][T26259] R13: 00007ffff77a22d0 R14: 0000000000000004 R15: 000055ef552424d8 [ 1247.428773][T26259] [ 1247.428777][T26259] [ 1247.659819][T26259] Allocated by task 23613: [ 1247.665554][T26259] kasan_save_track+0x3e/0x80 [ 1247.671718][T26259] __kasan_kmalloc+0x93/0xb0 [ 1247.676574][T26259] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 1247.683094][T26259] kmemdup_noprof+0x2b/0x70 [ 1247.687609][T26259] hid_open_report+0x1f7/0xf00 [ 1247.692424][T26259] pk_probe+0x1c6/0xf80 [ 1247.696580][T26259] hid_device_probe+0x416/0x7a0 [ 1247.701425][T26259] really_probe+0x267/0xaf0 [ 1247.705971][T26259] __driver_probe_device+0x1ef/0x380 [ 1247.711340][T26259] driver_probe_device+0x4f/0x240 [ 1247.716375][T26259] __device_attach_driver+0x279/0x430 [ 1247.721775][T26259] bus_for_each_drv+0x258/0x2f0 [ 1247.726620][T26259] __device_attach+0x2c5/0x450 [ 1247.731408][T26259] device_initial_probe+0xa1/0xd0 [ 1247.736419][T26259] bus_probe_device+0x12a/0x220 [ 1247.741259][T26259] device_add+0x7e9/0xbb0 [ 1247.745573][T26259] hid_add_device+0x272/0x3e0 [ 1247.750348][T26259] usbhid_probe+0xbab/0x1080 [ 1247.754938][T26259] usb_probe_interface+0x659/0xc70 [ 1247.760087][T26259] really_probe+0x267/0xaf0 [ 1247.764596][T26259] __driver_probe_device+0x1ef/0x380 [ 1247.770747][T26259] driver_probe_device+0x4f/0x240 [ 1247.775856][T26259] __device_attach_driver+0x279/0x430 [ 1247.781215][T26259] bus_for_each_drv+0x258/0x2f0 [ 1247.786089][T26259] __device_attach+0x2c5/0x450 [ 1247.791194][T26259] device_initial_probe+0xa1/0xd0 [ 1247.796395][T26259] bus_probe_device+0x12a/0x220 [ 1247.801235][T26259] device_add+0x7e9/0xbb0 [ 1247.805643][T26259] usb_set_configuration+0x1a87/0x2110 [ 1247.811528][T26259] usb_generic_driver_probe+0x8d/0x150 [ 1247.817192][T26259] usb_probe_device+0x1c4/0x3b0 [ 1247.822045][T26259] really_probe+0x267/0xaf0 [ 1247.826722][T26259] __driver_probe_device+0x1ef/0x380 [ 1247.832013][T26259] driver_probe_device+0x4f/0x240 [ 1247.837038][T26259] __device_attach_driver+0x279/0x430 [ 1247.842405][T26259] bus_for_each_drv+0x258/0x2f0 [ 1247.847251][T26259] __device_attach+0x2c5/0x450 [ 1247.852022][T26259] device_initial_probe+0xa1/0xd0 [ 1247.857058][T26259] bus_probe_device+0x12a/0x220 [ 1247.862000][T26259] device_add+0x7e9/0xbb0 [ 1247.866323][T26259] usb_new_device+0xa08/0x16f0 [ 1247.871084][T26259] hub_event+0x2a1c/0x4f30 [ 1247.875924][T26259] process_scheduled_works+0xb5d/0x1860 [ 1247.881666][T26259] worker_thread+0xa53/0xfc0 [ 1247.886348][T26259] kthread+0x388/0x470 [ 1247.890512][T26259] ret_from_fork+0x514/0xb70 [ 1247.895104][T26259] ret_from_fork_asm+0x1a/0x30 [ 1247.899862][T26259] [ 1247.902171][T26259] The buggy address belongs to the object at ffff888058341480 [ 1247.902171][T26259] which belongs to the cache kmalloc-8 of size 8 [ 1247.915957][T26259] The buggy address is located 0 bytes inside of [ 1247.915957][T26259] freed 8-byte region [ffff888058341480, ffff888058341488) [ 1247.929422][T26259] [ 1247.931744][T26259] The buggy address belongs to the physical page: [ 1247.938185][T26259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058341080 pfn:0x58341 [ 1247.948320][T26259] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1247.956403][T26259] page_type: f5(slab) [ 1247.960393][T26259] raw: 00fff00000000200 ffff88813fe1a500 ffffea0000db1f10 ffffea0000a5f050 [ 1247.968990][T26259] raw: ffff888058341080 0000000800800064 00000000f5000000 0000000000000000 [ 1247.977580][T26259] page dumped because: kasan: bad access detected [ 1247.984343][T26259] page_owner tracks the page as allocated [ 1247.990046][T26259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6728, tgid 6727 (syz.1.307), ts 127859274818, free_ts 127798065740 [ 1248.012695][T26259] post_alloc_hook+0x231/0x280 [ 1248.017544][T26259] get_page_from_freelist+0x24ba/0x2540 [ 1248.023088][T26259] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1248.028983][T26259] allocate_slab+0x77/0x660 [ 1248.033476][T26259] refill_objects+0x339/0x3d0 [ 1248.038161][T26259] __pcs_replace_empty_main+0x321/0x720 [ 1248.043690][T26259] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 1248.050093][T26259] kstrdup+0x42/0x100 [ 1248.054061][T26259] kobject_set_name_vargs+0x61/0x110 [ 1248.059392][T26259] dev_set_name+0xe2/0x140 [ 1248.063806][T26259] netdev_register_kobject+0xb7/0x310 [ 1248.069175][T26259] register_netdevice+0x1456/0x1ec0 [ 1248.074406][T26259] __ip_tunnel_create+0x3e8/0x560 [ 1248.079423][T26259] ip_tunnel_init_net+0x2e7/0x840 [ 1248.084516][T26259] ops_init+0x35c/0x5c0 [ 1248.088670][T26259] setup_net+0x118/0x340 [ 1248.092915][T26259] page last free pid 6694 tgid 6694 stack trace: [ 1248.099240][T26259] __free_frozen_pages+0xbc7/0xd30 [ 1248.104364][T26259] rcu_core+0x7cd/0x1070 [ 1248.108595][T26259] handle_softirqs+0x22a/0x840 [ 1248.113349][T26259] __irq_exit_rcu+0xca/0x220 [ 1248.117977][T26259] irq_exit_rcu+0x9/0x30 [ 1248.122319][T26259] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1248.128027][T26259] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1248.134017][T26259] [ 1248.136329][T26259] Memory state around the buggy address: [ 1248.142024][T26259] ffff888058341380: fa fc fc fc fa fc fc fc 06 fc fc fc fa fc fc fc [ 1248.150069][T26259] ffff888058341400: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 1248.158124][T26259] >ffff888058341480: fa fc fc fc 03 fc fc fc 00 fc fc fc fa fc fc fc [ 1248.166173][T26259] ^ [ 1248.170329][T26259] ffff888058341500: 06 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 1248.178464][T26259] ffff888058341580: 06 fc fc fc fa fc fc fc fa fc fc fc 07 fc fc fc [ 1248.187636][T26259] ================================================================== [ 1249.085042][T26251] fuse: Unknown parameter '' [ 1249.099388][T26251] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6138'. [ 1249.116082][T26259] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1249.123338][T26259] CPU: 0 UID: 0 PID: 26259 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1249.134469][T26259] Tainted: [L]=SOFTLOCKUP [ 1249.138804][T26259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1249.148882][T26259] Call Trace: [ 1249.152152][T26259] [ 1249.155064][T26259] vpanic+0x56c/0xa60 [ 1249.159197][T26259] ? __pfx_vpanic+0x10/0x10 [ 1249.163696][T26259] ? __pfx___schedule+0x10/0x10 [ 1249.168557][T26259] panic+0xc5/0xd0 [ 1249.172368][T26259] ? __pfx_panic+0x10/0x10 [ 1249.176927][T26259] ? preempt_schedule_thunk+0x16/0x30 [ 1249.182314][T26259] ? report_descriptor_read+0xb5/0x100 [ 1249.187782][T26259] check_panic_on_warn+0x89/0xb0 [ 1249.192801][T26259] ? report_descriptor_read+0xb5/0x100 [ 1249.198273][T26259] end_report+0x73/0x170 [ 1249.202535][T26259] ? report_descriptor_read+0xb5/0x100 [ 1249.208110][T26259] kasan_report+0x128/0x150 [ 1249.212786][T26259] ? report_descriptor_read+0xb5/0x100 [ 1249.218243][T26259] kasan_check_range+0x264/0x2c0 [ 1249.223179][T26259] ? report_descriptor_read+0xb5/0x100 [ 1249.229408][T26259] __asan_memcpy+0x29/0x70 [ 1249.234554][T26259] report_descriptor_read+0xb5/0x100 [ 1249.239928][T26259] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 1249.245403][T26259] kernfs_fop_read_iter+0x451/0x6b0 [ 1249.250711][T26259] vfs_read+0x582/0xa70 [ 1249.254862][T26259] ? __pfx_vfs_read+0x10/0x10 [ 1249.259529][T26259] ? do_sys_openat2+0x14c/0x200 [ 1249.264368][T26259] ? kmem_cache_free+0x182/0x650 [ 1249.269291][T26259] ? fd_install+0x94/0x3d0 [ 1249.273701][T26259] ksys_read+0x150/0x270 [ 1249.277933][T26259] ? __pfx_ksys_read+0x10/0x10 [ 1249.282683][T26259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.289020][T26259] do_syscall_64+0x15f/0xf80 [ 1249.293610][T26259] ? trace_irq_disable+0x3b/0x140 [ 1249.298637][T26259] ? clear_bhb_loop+0x40/0x90 [ 1249.303303][T26259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.309190][T26259] RIP: 0033:0x7f72264a7407 [ 1249.313596][T26259] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1249.333279][T26259] RSP: 002b:00007ffff77a2280 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1249.341686][T26259] RAX: ffffffffffffffda RBX: 00007f7226c2b880 RCX: 00007f72264a7407 [ 1249.349674][T26259] RDX: 0000000000001000 RSI: 00007ffff77a22d0 RDI: 0000000000000004 [ 1249.357635][T26259] RBP: 000055ef59cb4730 R08: 0000000000000000 R09: 0000000000000000 [ 1249.365685][T26259] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ef59cb3930 [ 1249.373646][T26259] R13: 00007ffff77a22d0 R14: 0000000000000004 R15: 000055ef552424d8 [ 1249.381628][T26259] [ 1249.385133][T26259] Kernel Offset: disabled [ 1249.389456][T26259] Rebooting in 86400 seconds..