last executing test programs: 5m59.308894974s ago: executing program 0 (id=93): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_io_uring_setup(0x259a, &(0x7f0000000000)={0x0, 0xa550, 0x800, 0x1, 0x153}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001b00)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r5}}) (async) io_uring_enter(r1, 0x42be, 0xafb2, 0x8, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in=@empty, 0x0, 0x2e9, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73}, {0x8, 0x10, 0x100000002, 0xfffffffffffffffd, 0xfff, 0xffffffffffffb473, 0x7}, {0xa, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x800, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f000000f4c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000060a09040000000000000000020000040900010073797a30000000000900020073797a320000000028000480240001800b0001006578746864720000140002800500020083000000080006400000000105000740"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x29}, {0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) (async) prlimit64(0x0, 0xc, &(0x7f0000000340)={0xffc0000000000000, 0x1}, &(0x7f0000000380)) (async) io_setup(0x10001, &(0x7f00000000c0)) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) (async) listen(r9, 0xfffff789) (async) r10 = accept(r9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x7}, 0x8) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r12, 0x0, 0x78) (async) r13 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r13, &(0x7f0000001480)=[{&(0x7f0000000780)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000007c0)="18de4512421b", 0x6}], 0x1, &(0x7f0000000980)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}], 0x18, 0x4000}], 0x1, 0x20000006) (async) ioctl$TIOCGSID(r12, 0x5429, &(0x7f0000000140)=0x0) wait4(r14, &(0x7f0000000240), 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r12, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r10, {0x7}}, './file0\x00'}) fallocate(r6, 0x1b, 0x4, 0xbc10) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x200}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20040000) 5m59.13610955s ago: executing program 0 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @last={{0xfffffffffffffc2e}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 5m58.971783544s ago: executing program 0 (id=96): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') openat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x18) getdents(r0, &(0x7f0000000080)=""/193, 0xc1) getdents64(r0, 0xffffffffffffffff, 0x43) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0xfb, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003100)=@deltfilter={0x3ec4, 0x2d, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xf}, {0xa, 0xb}, {0x2, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x3e94, 0x2, [@TCA_FLOW_EMATCHES={0x54, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xc, 0x2, 0x8}, {0x8, 0x1, 0x1, 'm'}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x8001}, {0x0, 0x1, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xc, 0x7, 0x2}, {{0x3, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}]}]}, @TCA_FLOW_POLICE={0x514, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x27b, 0x0, 0x0, 0x9, 0x4, {0x7, 0x0, 0x2, 0x3, 0x7, 0x2}, {0x3, 0x1, 0x5, 0x6, 0x1, 0xb49}, 0x0, 0x9, 0xefef}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x1, 0x2000, 0x8000, 0x1, {0x7, 0x2, 0x4, 0x0, 0xce7, 0xe9}, {0x8, 0x1, 0xe5, 0x7, 0x1, 0x7}, 0x6, 0x2, 0x800}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff9, 0x3, 0x9, 0xf0, 0x9, {0xfb, 0x0, 0x24, 0x59, 0x5, 0x6}, {0x5e, 0x1, 0x401, 0x8, 0xff, 0xab5}, 0x1, 0x7, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x3, 0x9, 0x37, {0x1, 0x2, 0x3ff, 0x4, 0x7, 0x17}, {0x8, 0x0, 0x8, 0x6, 0x6, 0x2}, 0x4, 0x800, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe71, 0x7, 0x6, 0x80000000, 0x8, 0x64f, 0x7, 0x10, 0x47, 0x8000, 0x0, 0x8, 0xdb, 0x8, 0x4, 0x1, 0x4, 0x7, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x4, 0x3, 0x80000000, 0x64, 0xfd4, 0x5, 0x6, 0x9, 0x2, 0x3, 0x8, 0x53d, 0xdb8b, 0x9, 0x8, 0x3, 0xfffffff7, 0x4, 0x4, 0x7f, 0x8, 0x4, 0x8, 0x3, 0x8, 0xfffffff9, 0x30000, 0x6, 0x1, 0x5, 0x400, 0xd, 0x7, 0x4, 0x3, 0x5a1, 0x1, 0x0, 0x22ba, 0x7fa5, 0x200, 0x10000, 0xfffffffc, 0x3, 0x0, 0x1ff, 0x9, 0x4, 0x0, 0xe13, 0xfffffff1, 0x0, 0x5, 0xd, 0x5, 0x800, 0x7fffffff, 0x8a, 0x2, 0xe4, 0x4, 0x3, 0x4, 0x2bc, 0x7f, 0x1000, 0x1, 0xf, 0x1200, 0x2, 0x8, 0x7, 0x9, 0x3, 0x7, 0x4f2, 0x4b58, 0x1, 0x1, 0x81, 0x5, 0x86, 0x2, 0x1, 0x7f, 0x81, 0x8, 0x1, 0xfffffffd, 0x80000000, 0x10001, 0xf979, 0x0, 0x5, 0xd926, 0x8001, 0x5, 0x1, 0x6, 0x2f2e, 0xa, 0x2, 0x40, 0x3, 0x4, 0x0, 0x3, 0x3, 0x5, 0x99, 0x0, 0x7fffffff, 0x7, 0x7, 0x7fff, 0x9, 0x7, 0x0, 0x7, 0x4, 0x8199, 0xffffffff, 0x8, 0x9, 0x64, 0x7, 0x2, 0x200, 0xfffffff9, 0x7, 0x3, 0x80000000, 0x6, 0x9, 0x7, 0x2, 0xb36, 0x8001, 0x8, 0x4c4, 0x40, 0x6, 0x6, 0x7, 0xfffff0ee, 0x6, 0x7, 0x200, 0x400, 0x7, 0x0, 0x286, 0x10, 0x1000, 0xfffffffa, 0x59, 0x5, 0x1000, 0x800, 0x7, 0xb7, 0x6, 0x2, 0x7fff, 0x7, 0x312, 0x6, 0x4, 0x7, 0x5fb, 0x0, 0x5, 0x8, 0x63, 0xffff, 0x6, 0x40000, 0x4, 0xfff, 0xc, 0x3, 0xffffffff, 0x7, 0x5, 0x8, 0x0, 0x9, 0x48, 0x5, 0x3, 0x10000000, 0x8d2d, 0x9, 0x6, 0x8, 0x1000, 0x8, 0x5, 0x6, 0x4, 0x3, 0xeafc, 0x6d2, 0x6, 0x0, 0x9, 0x9, 0xfffffff9, 0x5, 0x7, 0x8, 0x45b8, 0x9, 0x4, 0x11f4, 0x7, 0x7ff, 0x6, 0x8, 0x4, 0x9, 0x2, 0x5ca, 0x4, 0x4, 0xd, 0x3, 0x96a8, 0x3, 0x1, 0x184, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4098092a}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5b}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_POLICE={0x1c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xcd9}]}, @TCA_FLOW_ACT={0x2af0, 0x9, 0x0, 0x1, [@m_police={0x2a48, 0x1d, 0x0, 0x0, {{0xb}, {0x2920, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x8, 0x100, 0x80000001, 0xffff, 0x40, 0x9, 0x3, 0x7, 0xde5, 0x80000000, 0x35e, 0x1, 0x80000001, 0x9c, 0x19de, 0x2, 0x6, 0x8, 0x3, 0x2e, 0x6, 0x2, 0x34, 0x7f, 0xf, 0x1, 0x1000, 0x4, 0x4, 0xffffffff, 0x7f, 0x2, 0xec9, 0x4, 0x3, 0x90c, 0x2, 0x7, 0xce, 0x1, 0x5, 0x4, 0xa3db, 0x53, 0x5, 0x8, 0x8, 0x8, 0x7fffffff, 0x3, 0x1ff, 0x7, 0x5, 0xc45, 0x8, 0xf1, 0x2, 0x7, 0xffffffff, 0xe3, 0x3, 0x6, 0x4, 0x4, 0x9, 0xffffffd8, 0x4, 0xa37, 0x1000, 0x965, 0xe, 0x7, 0x0, 0x6, 0x9, 0xdc36, 0x4, 0x200, 0x8, 0x100, 0x3ff, 0x87, 0x7, 0x8, 0x0, 0x80000001, 0x2, 0x5, 0x1, 0xfffffffd, 0x7, 0xfff, 0x4, 0x1, 0x3625, 0x8, 0x8000, 0x3, 0x8, 0x1ff, 0x86a, 0x3, 0x7fff, 0x10, 0x10001, 0x6, 0x3, 0x2, 0x5, 0x7, 0x3, 0x80000001, 0x0, 0x7, 0x9, 0x8, 0x7, 0x4, 0xe332, 0x4, 0x800, 0x0, 0x6, 0x6, 0x80, 0x3, 0x1, 0xc, 0x1, 0x8, 0x7, 0x5, 0x5, 0x7, 0x5, 0x6, 0x1, 0x8, 0x5, 0x8, 0x19cf9ec9, 0x8, 0x2, 0x0, 0x4, 0xf, 0x300, 0x8000, 0x8, 0x95d, 0x1, 0x2, 0x4, 0x1, 0x6, 0x8000, 0x5, 0x3, 0x2, 0x0, 0x5, 0x2, 0x0, 0xffffffff, 0xe, 0x8, 0x0, 0x4, 0x128, 0xbb, 0xe, 0x2, 0x8, 0x8, 0x2, 0x8, 0xa43, 0x7, 0x401, 0xffffffff, 0x0, 0x8, 0x0, 0xb, 0x3fffc000, 0x1200000, 0xb0, 0x100, 0x7ff, 0x7, 0x3ff, 0x6, 0x757d, 0x3, 0x7, 0xc25, 0x0, 0x7, 0x7, 0x15ba7af, 0x1000, 0x8001, 0x3, 0x8, 0xae70, 0x4, 0x5, 0x4000, 0xfffffffc, 0xfffffffc, 0xf, 0xf59e, 0xac, 0x7, 0x40, 0x468, 0x7f, 0x8, 0x9, 0x1, 0x1, 0x2, 0x4, 0x1, 0xff, 0x2, 0x4, 0x0, 0x80, 0x10, 0x2, 0x5, 0x7fffffff, 0x0, 0x7ff, 0x7ff, 0x800, 0xb5, 0x7fffffff, 0x9, 0x2, 0xffffffff, 0x20, 0x2, 0xe, 0x0, 0x0, 0x351, 0x2, 0x9, 0x80000001, 0x80000000, 0x8001, 0x9, 0x96]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x511, 0x0, 0xfffffffc, 0x7787, 0x6ce, 0x4, 0x844, 0x2, 0x10, 0x3, 0xb642, 0xff, 0xab, 0x0, 0x6, 0x6, 0x42, 0x7, 0x7, 0x4, 0x7, 0x1, 0x9, 0x401, 0xffffff7f, 0x7fffffff, 0x3a, 0x6, 0x8, 0x2, 0x1, 0x4, 0x3ff, 0x2, 0x1, 0x0, 0x14, 0x6, 0x2, 0x6, 0x1dbb2357, 0x8000, 0x0, 0x1000, 0xa4f, 0x1, 0x4, 0x200, 0xef3, 0x8001, 0x3673, 0x4, 0x0, 0x5d7, 0x8, 0x2, 0x7, 0x3, 0x1, 0x7, 0x3, 0x5, 0x395, 0x2, 0x3, 0x2d5b5222, 0x4, 0x3, 0x6, 0x3ff, 0x8000, 0x9, 0x6, 0x1, 0x80000000, 0x2, 0x80000000, 0x6, 0x7, 0x17e, 0x0, 0x6, 0x2, 0x3, 0x5, 0x9, 0x1, 0x1, 0x1, 0x318f, 0x7, 0x4, 0x9, 0x7f, 0x0, 0x3, 0x1, 0x1, 0x10001, 0x7, 0x80, 0xb, 0x8, 0x2, 0xfffffffb, 0x0, 0x80000001, 0x3, 0x4, 0x40, 0x3, 0x817, 0xae8, 0xfffffffd, 0x10000000, 0x2, 0xd, 0x8, 0x3, 0x2b, 0x10001, 0x9, 0x9, 0x0, 0x40, 0x10001, 0x800, 0x7, 0xa8, 0x2, 0x29, 0x6, 0xffff, 0x81, 0x6, 0x7, 0xfffffffe, 0x7fff, 0x2, 0xfffffffd, 0x1, 0xffffffff, 0x0, 0x8, 0x12, 0x4, 0x10001, 0x9, 0x40, 0x6, 0x1, 0x1, 0x80000000, 0x5e, 0x3, 0x1, 0x6, 0x6, 0x1, 0x0, 0x4, 0x10000, 0x0, 0x1, 0x2, 0x9, 0x5, 0x4, 0x5, 0x2, 0xffffff2b, 0x5270, 0x9, 0x8318, 0xee5, 0x4, 0x1, 0x5, 0x0, 0xfffffffb, 0x5, 0x1000, 0x9, 0x9, 0x6, 0x80000001, 0xb, 0x5, 0x4, 0x401, 0x80, 0xd0, 0x400, 0x3, 0x4, 0x5b800000, 0x5, 0x8a85, 0x9, 0x2, 0x5f, 0x2, 0x4, 0x1, 0xff, 0x9, 0x62f7, 0x9, 0x1, 0x761, 0x2, 0x7, 0x7a3, 0xfffff54b, 0x9, 0x8, 0x6, 0x1d, 0x7, 0xa, 0x3ff, 0x9, 0x0, 0x4, 0xffff8001, 0x2, 0x7ff, 0x43ab, 0x9, 0x7ff, 0x8474, 0x0, 0xbecb, 0x3, 0x4, 0x2, 0x8, 0x3, 0x8, 0x8, 0x200, 0x5cc, 0xa96, 0x1000, 0x1000, 0x5, 0x7, 0x6, 0xc72f, 0x4, 0x7, 0x64d, 0x3, 0x7, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x2, 0x6, 0x7f, {0x9, 0x1, 0x3, 0xff57, 0x9, 0x80}, {0x2, 0x2, 0xd, 0x5, 0x8d6b, 0x7}, 0x5, 0x6, 0x40}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x101, 0xc, 0x3, 0x8001, 0x6, 0x1, 0x4, 0xfff, 0xfffff0b0, 0x2, 0x7ff, 0x7, 0xc, 0x80000001, 0x3, 0x8, 0x2, 0x38000000, 0x7, 0x753, 0x6, 0x9, 0xa, 0x7, 0x0, 0xf, 0x10, 0x6, 0x80000000, 0x8, 0x7, 0x7f, 0x4, 0xfffffff2, 0x920e, 0x5, 0x7ff, 0x40, 0x2, 0x3, 0x2, 0x87, 0x7, 0x8000, 0x4efb, 0x1, 0x100, 0x3, 0x2df, 0xffffffff, 0x0, 0x63f, 0xd863, 0xfff, 0x7, 0x9, 0x4, 0x7, 0x1, 0x5, 0x9, 0x9b7, 0x5cf462a3, 0x1ff, 0x3, 0xc1c0, 0x0, 0xa8c, 0x401, 0x63, 0x8001, 0x6, 0x6, 0x8, 0x1, 0x0, 0x8, 0xd644, 0x5c, 0x7f, 0x72c, 0x8bc, 0x5, 0xb, 0x3, 0xe, 0x5, 0x4, 0xe, 0x1800000, 0x6, 0x31e3, 0x1, 0x6, 0x1, 0x4, 0x5050, 0x9, 0xfffffbe4, 0x4, 0x10, 0x2, 0x1, 0xfff, 0x10001, 0x5, 0xf6d, 0x5f5, 0x2a19, 0x3, 0x80000001, 0x2, 0x2, 0x5, 0xa, 0x7, 0x7, 0x10000, 0x1, 0xffffffff, 0x6, 0x9, 0x2, 0x196f, 0x0, 0x29c, 0xa19, 0xd30, 0xfffffffe, 0x10000, 0x2, 0x0, 0x9, 0x5, 0x2, 0x19b, 0xfffffff3, 0x1, 0xa, 0x0, 0x6, 0x2, 0x5, 0x5, 0x20000, 0x0, 0x7, 0x9, 0x2285, 0x3ff, 0x80000000, 0x7, 0x80000, 0x101, 0x9, 0x1, 0x2, 0x9, 0xb, 0x9, 0x0, 0x0, 0x800, 0x3, 0x7, 0x2, 0x0, 0x4, 0x5, 0x5, 0x3, 0x5, 0xec, 0x2, 0x6, 0x4, 0x6, 0x0, 0x1, 0x9, 0x21c, 0xfffffff7, 0x5, 0x1a, 0xb0, 0x4, 0x9, 0x3, 0x21a6, 0x80000, 0xe000, 0x400, 0x6, 0x37, 0xfff, 0x2, 0x2, 0xd7, 0x0, 0x3, 0x1, 0x6, 0xf1c1, 0x2, 0x7, 0x5, 0xa, 0x5, 0x2, 0x3, 0x0, 0x3, 0x100006, 0x7ff, 0x3, 0x8, 0x8001, 0xb4, 0xfff, 0x6, 0x3, 0x9, 0x4, 0x2, 0x6, 0x5890, 0x664, 0x7, 0x1, 0xe88, 0x855, 0x80000000, 0xb, 0xba, 0x1000, 0xfffffffc, 0x8, 0x400, 0xee3, 0x8001, 0x3, 0x4, 0x4219, 0xffff, 0x2f1ad4df, 0x40, 0x5, 0x5, 0x3, 0x9, 0x8, 0x7fff, 0x1, 0x0, 0x30000000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1000, 0x9, 0x91, 0x7, 0x8524, 0x3, 0x6, 0x80000000, 0x9, 0x60a, 0x20b, 0x0, 0x0, 0xa555, 0x8000, 0x5, 0x81, 0xa6af25, 0x6, 0x1, 0x68, 0xfd8c, 0x2, 0x3, 0x4, 0x1, 0x9, 0x4, 0x4a, 0x47df, 0x2, 0xf9, 0x7fffffff, 0x1, 0xc, 0xffff7fff, 0x6, 0xf662ffe, 0x6, 0x8, 0x9, 0x6, 0xfffffff9, 0x37, 0x7fffffff, 0x80a, 0x0, 0xfff, 0x7, 0x8, 0x4, 0xfffffff9, 0xfffe0, 0x10, 0x6e3, 0x2c70, 0x8, 0x7f, 0x9, 0x7fff, 0xe36, 0x4, 0x9, 0xfff, 0x4, 0x3, 0xffff, 0x8, 0x2, 0x5, 0xfffffff9, 0x9, 0x8, 0x400, 0x6, 0x10000, 0xc, 0x3ac4178d, 0x3, 0x7, 0xffffff91, 0x2, 0x6, 0x8, 0x4, 0x7ff, 0x2, 0x7fffffff, 0x6, 0x2, 0x779d, 0x8001, 0xfffffff7, 0x3, 0x2, 0xa3b1, 0x7, 0x0, 0x7, 0x7, 0x800, 0x4, 0x2, 0xfffffff8, 0x0, 0x8001, 0x8, 0xfb, 0x2, 0xf, 0x2, 0x1, 0x3, 0x1, 0x100000, 0x800, 0x693, 0x9, 0x7ff, 0x8, 0x10, 0x8, 0xe2, 0x9, 0x4, 0x7, 0x401, 0x10000, 0x6, 0x6, 0x4, 0x2, 0x8, 0x4, 0x5, 0x80000000, 0x0, 0x8, 0x8, 0x5, 0x31839ea, 0x4, 0x101, 0x6, 0xff, 0x4, 0x8, 0x8b, 0x8001, 0x2, 0x9, 0x9, 0x3, 0xf, 0x5, 0x2, 0x6, 0x401, 0x5, 0x49d2, 0x7c7, 0x5, 0x5000, 0x7, 0x5, 0xfe3, 0x2, 0x0, 0x9, 0x0, 0xa, 0x400, 0x2, 0x1, 0x8, 0xffffdb34, 0x9e, 0x9, 0x7fff, 0x5, 0x400, 0x9, 0x7f, 0x7, 0x10, 0x5, 0x4, 0x1d, 0x3, 0x75, 0x4, 0xff, 0x1800, 0x0, 0x737e, 0x9, 0xb, 0x0, 0x4, 0x7, 0xffffffff, 0x9, 0xef50, 0x5, 0x9, 0x9c, 0x101, 0x9, 0x4, 0x323f, 0x0, 0x81, 0x0, 0x8dd, 0x3, 0x9, 0x8, 0x4, 0xb, 0xc8f, 0x5, 0x5, 0x4, 0x997, 0x0, 0x6, 0x9, 0x10, 0x6, 0x1, 0x7fff, 0x10000, 0x977, 0x7fff, 0x40, 0x1, 0x1ff, 0x4dd, 0x2, 0x9, 0xc, 0x5, 0x4, 0x53, 0xac, 0x3, 0xfffffffc, 0x0, 0x1ff, 0xffffffcd, 0x8, 0xd1, 0x0, 0xfffffbff, 0x791]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x5, 0x0, 0x9, 0x3ff, 0xcc, 0x1, 0x4, 0x65, 0x5, 0x8, 0x6, 0xfd3, 0x80, 0x5, 0x6, 0xc, 0x4, 0x6, 0x0, 0x1000, 0x58d9, 0x5, 0x9, 0x3, 0x0, 0xdbb, 0x5, 0x7, 0x7, 0x781, 0x3, 0xc, 0x7, 0x8, 0x2, 0x44, 0x83d1, 0x8, 0x7fffffff, 0x0, 0x2, 0x7, 0x4, 0x5, 0x81, 0x8, 0x6, 0x1, 0x9, 0x8, 0x5, 0x2, 0x6, 0x80000001, 0x5, 0x9, 0xf7fa, 0x8, 0x5, 0x7ff, 0x1, 0xe, 0x1, 0x0, 0x8, 0x3, 0x100, 0x3, 0x7, 0xfffffff8, 0x5, 0x4, 0x0, 0x8, 0x8001, 0x6e4, 0x6f0, 0x9, 0x5, 0x1, 0x9, 0xff0, 0x8, 0x404, 0x1, 0x2, 0xc, 0x100000, 0x80, 0x2, 0xf8d, 0x87f6, 0x800, 0x3, 0x5, 0x8, 0x9, 0x4, 0x2, 0x80000001, 0x10, 0x1ff, 0x5, 0x4, 0x5, 0x1000, 0x400, 0x5312, 0x6, 0x9, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0xefe9f8e0, 0x7, 0x1, 0x1000, 0x7, 0x3, 0x8, 0x3, 0x6, 0xfffffffe, 0xd, 0xf, 0x401, 0x5, 0x1, 0x9, 0x9, 0x3, 0x81, 0x9, 0x9, 0xd, 0x8b000000, 0x2, 0x100, 0xf, 0x8, 0x2, 0xfffffffd, 0x3, 0x7, 0x3, 0x8, 0x7, 0x9, 0x2, 0x81, 0x5, 0x1, 0x3, 0x6, 0x8, 0x3, 0xa6b8, 0x4, 0x6249, 0x2, 0x7fff, 0x3, 0x400, 0xfffffff9, 0xfff, 0x9, 0xb275, 0x7, 0x1, 0xa93f, 0x692d, 0x1, 0x1, 0x5, 0x0, 0x1000, 0x81, 0x0, 0xd3, 0x9, 0x7, 0xe, 0x1, 0x4000000, 0x0, 0x1, 0x200, 0x9, 0x0, 0x1, 0x9, 0x1ff, 0xfffffeff, 0x4d5, 0x6a0e, 0x2, 0x41b, 0x1, 0x8, 0x1, 0x2, 0xb, 0x1, 0x4, 0x1, 0x4, 0xfffffff0, 0x4, 0x6, 0x6, 0x4, 0x8, 0x2dd, 0x800, 0x1000, 0x9, 0x1, 0xffffffff, 0x0, 0x8, 0x3, 0x9, 0x2, 0x80, 0x6, 0x8, 0x900, 0xe730, 0x1, 0x5, 0x80000001, 0x3, 0x7, 0xc8, 0xfff, 0x7, 0xf5, 0x3, 0xd3, 0x8001, 0x2, 0x3, 0xddec, 0x7, 0x8, 0x40, 0x2, 0x6, 0x7, 0x7fff, 0xfff, 0x85]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x40}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd010}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa0, 0x2, 0x1ff, 0x78f, 0x9, 0x1e33, 0xe000, 0x8000, 0xf, 0x3, 0x832, 0x2, 0x2, 0x63, 0x101, 0x1, 0x3, 0x8000, 0xd69, 0x0, 0x5, 0x7ff, 0x1, 0x4, 0xffffffa2, 0x9f, 0x2, 0x2, 0x5, 0x7, 0x6, 0x2, 0x2, 0x103e, 0xabd, 0x7, 0xffffffff, 0x8001, 0x2, 0x8f27, 0x2, 0x3800000, 0x7, 0x5, 0x4, 0x2, 0x96, 0x4, 0x4, 0xfffffffe, 0xfff, 0x5, 0x80000001, 0x3, 0xaa, 0xfff, 0x2, 0xd, 0x8084, 0x2, 0x800, 0xfffffffd, 0x7fff, 0xfbc0, 0x3, 0x100, 0x1, 0x3, 0x4, 0x1, 0x101, 0x4, 0x89, 0x401, 0xa, 0x0, 0x4, 0x5, 0x8, 0x0, 0x7a08, 0x6, 0x6f, 0x1312, 0x9, 0xfe12, 0xff, 0xa, 0x9, 0x5, 0x8, 0x6, 0x8, 0x7ff, 0x9, 0xffffffff, 0x6, 0x0, 0x1, 0x7, 0x10001, 0x10, 0x401, 0xc, 0x280000, 0x100, 0x4, 0x0, 0x4, 0x1, 0x5, 0xa, 0x7ff, 0x9, 0x1, 0x8, 0x4, 0x0, 0x1e, 0x8, 0xfffffff8, 0x7f, 0x3, 0x0, 0x0, 0x1, 0x8001, 0x401, 0x8, 0x3, 0x8, 0x81, 0x5, 0x3, 0xe, 0x6, 0x81, 0x3, 0x0, 0x9, 0x8, 0x3, 0x60, 0x7fffffff, 0x7, 0x3, 0x7, 0x1000, 0xffffff00, 0x1ff, 0x3ff, 0x1000, 0x755, 0x22ae, 0x89b, 0x7, 0x0, 0xff, 0x6, 0x2, 0xb18, 0x3, 0x8, 0x3, 0x9, 0x6, 0xff, 0x18, 0x80000000, 0x6, 0x28e, 0x5, 0x8, 0xfffffff9, 0x0, 0x34, 0xf7, 0x80, 0x366, 0x0, 0xcd, 0xd, 0x9, 0x8000, 0x1, 0x0, 0x6, 0x79e, 0x0, 0x3, 0xfffffff8, 0x4, 0xfffffff4, 0x8, 0x9, 0x98, 0x8001, 0x100, 0x5, 0x6, 0x4, 0x40, 0x8, 0x0, 0x8, 0x3, 0x800, 0x6, 0x232090ec, 0x5, 0x9, 0x5, 0x18000000, 0x4, 0x3, 0x1, 0x5, 0x9, 0x919, 0x0, 0x53, 0xda, 0x674, 0x1000, 0x7fffffff, 0x0, 0x2, 0x8d4c5af, 0x43b, 0xffffffff, 0xfffffaf2, 0x7, 0x3, 0x3, 0x8, 0x1, 0x2a9, 0x7, 0x10000, 0x3, 0x1, 0x5, 0x1ff, 0x2, 0x0, 0x40, 0x4, 0xa17, 0x2, 0x5, 0x5, 0x790, 0x2, 0x0, 0x1, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x5, 0x4, 0x3, 0x0, 0x2, 0x1, 0x2, 0x5, 0xffffffff, 0x1, 0x3ff, 0xffffffff, 0x11, 0x7, 0x5, 0x7, 0x6ecf, 0x2, 0x9, 0x640, 0xffff, 0x1ff, 0x9, 0x7, 0x6, 0xfffffffb, 0x5, 0x800, 0x1000, 0x1, 0x7fffffff, 0x7, 0x80000000, 0xffffffff, 0x7, 0x316, 0x6, 0x6, 0x7fffffff, 0x46, 0x9, 0x0, 0xe, 0x9, 0x10000, 0xf3, 0xbfea, 0x8, 0x12b, 0x5ce, 0x9, 0xa776, 0x80000000, 0x0, 0x0, 0x7ff, 0x1, 0x9ea9, 0xffff, 0xf31, 0x8001, 0x80, 0x6, 0x9, 0x363, 0xd, 0x6, 0x0, 0x158319e4, 0x3, 0x4, 0xfffffff8, 0x35, 0xc7ef, 0x7, 0x6, 0x2c5, 0x8001, 0x400, 0x7, 0x1ff, 0x9, 0xfffffe68, 0x3, 0x9, 0x10001, 0x8, 0x40, 0x1, 0x80000001, 0xe, 0x9, 0x6, 0x1, 0x4, 0x4, 0xffff8001, 0x2, 0x5, 0xfffffff1, 0x6, 0x9, 0x5, 0x5, 0x7, 0x9a, 0x8, 0x1, 0x7, 0x7, 0xfffffeff, 0x5, 0x7, 0x80000001, 0x80, 0x9, 0x0, 0x6, 0x6, 0x8, 0x3, 0x625, 0x3, 0xc, 0x4, 0x6, 0xa000, 0x3, 0x2, 0x2, 0x2, 0x80000000, 0x7, 0x3fa7372b, 0x6, 0x4, 0x8, 0x3, 0x9, 0x5, 0x80, 0x5, 0xffff, 0x4, 0xb, 0x3, 0x0, 0x7, 0x3, 0x99b3, 0x10001, 0x7f, 0xcfd8, 0x4, 0x4, 0x9, 0x1, 0xffffffff, 0x463d, 0x2, 0x7, 0x3, 0x5, 0x3, 0x0, 0x2, 0x2, 0x9, 0xfffffffb, 0xb5e, 0xd5, 0x1, 0x500, 0xc9e9, 0x2, 0x7, 0x9, 0x2, 0xcf41, 0x6508, 0x8001, 0x9, 0xfffffc01, 0x50, 0x3, 0x39, 0x5, 0x0, 0x1, 0x6b, 0x7fff, 0x2, 0x6, 0xc0000000, 0x9, 0x6, 0x2, 0x7, 0x0, 0xb, 0xd2e7, 0x8, 0x87b, 0x4, 0x0, 0xb02c, 0x8, 0x1, 0x4, 0x6, 0x8, 0x7, 0x0, 0x400, 0x8001, 0x9, 0x8, 0xfffffffa, 0x404000, 0x7, 0x7, 0x8001, 0x0, 0x3, 0x4, 0x7, 0x2, 0x4, 0x7, 0x7ff, 0x0, 0x45e, 0xfffffffc, 0x401, 0x3, 0x40, 0x1, 0x81, 0x6, 0x3, 0x9, 0xfffffffc, 0x3ff, 0x88fd, 0x9, 0x8, 0x4, 0x5, 0x1, 0xd6b, 0x7f, 0x80, 0x1, 0x3, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0xe4, 0x7, 0xfffffffd, {0x0, 0x1, 0xb, 0xffff, 0xc, 0x1}, {0x5, 0x1, 0x4, 0xb, 0xc1, 0x5}, 0x1, 0xba2, 0x1958}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffff986, 0x3, 0xfffffffa, 0x3, 0x800, 0xbf, 0xc9fa, 0x3, 0x3f4a, 0x23, 0x6, 0x4, 0xddc, 0x5, 0x0, 0x6, 0x8001, 0x91, 0x1, 0xd, 0x401, 0x1, 0x1, 0xb, 0x2, 0x8, 0x80, 0x2fb, 0x2, 0x1, 0x8, 0x5, 0xfffffc01, 0x1, 0x2c4e, 0xffffff7f, 0x8, 0x1, 0xfffffc01, 0x4, 0x52fc, 0x4, 0x6, 0x9, 0xfff, 0xb, 0xfffffffc, 0x1, 0x6, 0x0, 0x2, 0x7f, 0x2, 0x582, 0xf67, 0x7, 0x7fff, 0x1, 0x4, 0x6, 0x7, 0x5c, 0xc3f6, 0xb8, 0x4, 0x4, 0x9, 0xb32, 0x1ff, 0x2, 0x9, 0x9, 0x8, 0x8dbbf400, 0x7, 0x7fff, 0x91d5e64, 0x5, 0xf, 0x1, 0x6, 0x1, 0x4, 0xc708, 0x342f, 0x6, 0x40, 0x0, 0x9, 0x6cd4, 0x7, 0x7, 0x101, 0x8, 0xc, 0x1, 0x4, 0x10, 0x4, 0x956, 0x6, 0x0, 0xffffff80, 0x3, 0x4, 0x80000000, 0x80000000, 0x9, 0x7, 0xfffff70f, 0xb, 0x30, 0x2, 0x1, 0x5, 0xd08935b, 0x7, 0x6, 0x400, 0xff, 0x7ff, 0x6, 0x400, 0x1000, 0xffffffff, 0xd, 0x6, 0x1ff, 0x3, 0x8, 0x1, 0x5, 0x7fff, 0x8, 0x5b81, 0xc, 0x1, 0x2, 0x1, 0x3, 0x2, 0x553f, 0x10, 0xdb1, 0x1140, 0x902a, 0x5, 0x22, 0x7, 0xff, 0xffffff8a, 0x2, 0x1, 0xefb, 0x9, 0x3, 0x6, 0x40, 0x80000000, 0x10000, 0x1000, 0x1, 0xfff, 0x7687a71, 0x9, 0x9, 0xfffffff9, 0x7d9a, 0x5, 0x6, 0xffffff01, 0x5, 0x1, 0x6, 0xd, 0xfffffff0, 0xfff, 0x7f, 0x2, 0x4, 0x4, 0x7f, 0x8, 0x40, 0x0, 0x6, 0x800, 0x409, 0x5, 0x3, 0x1, 0x72, 0x3ff, 0x4af, 0x1000, 0x4, 0x0, 0x8, 0x6, 0x3, 0xfffffffe, 0x3, 0x9, 0x1, 0x100, 0x2, 0x80, 0x2cce, 0x1, 0x80000001, 0x4f8, 0x33f, 0xffff, 0xe4a1, 0x4, 0x7, 0x4, 0x6762ebd5, 0xffff, 0x6, 0x5, 0xfffffffd, 0x80000001, 0x8000, 0x7fff, 0x6, 0x1, 0x4, 0x1, 0x80000001, 0x3, 0x3, 0x6, 0x3f000, 0x4, 0xfffffffd, 0x0, 0x38, 0x8, 0x10001, 0x4, 0xfffffffb, 0x3, 0x9101, 0x1, 0x9, 0x62db2598, 0x850, 0x4, 0x80000000, 0x7f, 0x2, 0x2, 0x1, 0x6, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5ea5, 0x3, 0x2, 0x400, 0x24, {0x5, 0x2, 0x6, 0x3, 0x8, 0xaf}, {0x0, 0x0, 0x2, 0x6, 0x8, 0x3}, 0x6, 0x5, 0x100}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffa, 0x0, 0x3, 0xaf, 0xe9, 0x2088, 0x6, 0xffffdea2, 0x8, 0x80000000, 0x7fff, 0x3, 0x175, 0x6, 0x9, 0x2, 0x5, 0x5, 0x7fff, 0x800, 0x1, 0xfffffffa, 0x6, 0x8, 0xa5, 0x0, 0x42, 0x0, 0x1, 0x80, 0xf, 0x9, 0x0, 0x6, 0x37, 0x7fffffff, 0xf, 0x3, 0x80000000, 0x9, 0x1e, 0x141, 0x2, 0x526a, 0x4, 0xfffff000, 0x1, 0x3, 0xd, 0x7, 0x1, 0xe, 0x2, 0xd1, 0x3, 0x0, 0x40, 0xfffffffe, 0x4, 0xca8, 0x80000000, 0x9, 0xfffffff7, 0x1, 0xe, 0x4, 0x21, 0x4, 0x2, 0xd00, 0x8, 0x0, 0xfe000000, 0x80000001, 0x800, 0x6, 0x2, 0x0, 0x2, 0xf42, 0x3, 0x1, 0x8, 0x81, 0x4, 0x4, 0x80c2, 0x7, 0x10001, 0x3, 0x1, 0x5, 0x0, 0x401, 0xd, 0x7, 0x2, 0x2, 0x1, 0x9, 0xffffffff, 0x8, 0x3, 0x77, 0x7, 0x100, 0x7873b57, 0x40, 0x4, 0x8, 0x4, 0x7fffffff, 0x7f, 0x9, 0xffff, 0x1, 0xc000, 0x8000, 0x7, 0x6, 0x75e5, 0x3, 0x1000, 0x2, 0x6, 0x0, 0x6, 0xf148, 0x0, 0xffffffff, 0x2, 0x8, 0x7, 0x6, 0x4, 0xd, 0xfffffff8, 0xd, 0x1, 0x6, 0x6, 0x3, 0xfff, 0x0, 0x1, 0x5, 0x4, 0x2, 0x9, 0x7a65, 0x7c, 0x401, 0x101, 0x40, 0x1, 0x8000, 0x7, 0xd6e9, 0x7ff, 0x4, 0x5, 0x1, 0xc7, 0x4a3b826b, 0x1, 0x80, 0x2, 0x8, 0x3, 0xfffffcf2, 0x6, 0x9, 0x3, 0x0, 0x4, 0x8001, 0x3, 0x7ff, 0x4, 0x0, 0x6, 0x100, 0x7fffffff, 0xffffffff, 0x7, 0x5, 0x4, 0x0, 0xb3d2, 0x8, 0x1000, 0x3, 0x2, 0xa3, 0x1000, 0x6, 0x5, 0x1, 0x4, 0x7fffffff, 0x9, 0x5, 0x4, 0x1, 0x5, 0xa0f, 0x8, 0x0, 0x7, 0x8, 0x7, 0x9, 0xb, 0xf, 0x9, 0x3, 0x6, 0x5, 0x81, 0x4, 0x393d, 0x3, 0x3, 0x63dbcd58, 0x80, 0xffffffff, 0x69e, 0x0, 0x5, 0x5c8, 0x4, 0x1ff, 0xd, 0x8, 0x1, 0x45, 0x1ff, 0x4, 0x6, 0x0, 0xb, 0x4, 0x1, 0x3, 0x78, 0x8, 0x10000000, 0x6, 0x1ff, 0x8001, 0x0, 0x800, 0xfff, 0x2, 0x8, 0xc0]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x8, 0xfffffff9, 0x500000, 0x708, 0x1000, 0x4, 0x82, 0x7, 0x3, 0xfffff34e, 0xfffffff9, 0x2, 0x100, 0x9, 0x7, 0x2, 0x4, 0x8001, 0x0, 0x1ff, 0x0, 0xc0, 0x2, 0x7ff, 0x0, 0x4, 0x3, 0x800, 0x9, 0x6b, 0x4, 0x1, 0x3a7, 0x1, 0xffff, 0x10, 0x6, 0xc, 0x1926, 0xc, 0x9, 0x4, 0xa7d, 0xf, 0x1, 0x2, 0x8, 0x3ff, 0x1, 0x697, 0x5, 0x4, 0x7, 0x5, 0x4, 0x8, 0x3, 0x4, 0xc00, 0xffffff33, 0x7d5, 0x4, 0x8, 0x1ff, 0x8, 0x3, 0x8, 0x9, 0x8, 0x7fffffff, 0x9, 0x4, 0x16, 0x3, 0xf, 0xffff0001, 0x6, 0x9, 0x5, 0x2, 0x1, 0x2d, 0x9, 0x1, 0x1, 0x8000, 0x3, 0x6, 0x1, 0x0, 0xa, 0x1000, 0x1ffb, 0x1ff, 0x9f6, 0x7d, 0x2, 0xfff, 0x6, 0xd7fa, 0x5, 0xffffffff, 0x4, 0x3, 0xfffffff9, 0x80000001, 0x1, 0x7, 0x94, 0xd, 0xfab, 0x85, 0x3, 0x800, 0xa, 0x1, 0x2, 0x100, 0x10000000, 0x6, 0x3, 0x1, 0x4, 0x6, 0x9, 0x5, 0x3, 0x2, 0x3, 0x3ff, 0x5, 0xc169, 0xdf, 0x80, 0x6, 0x8, 0x80000001, 0x0, 0x4, 0x0, 0x1, 0x3, 0x8, 0x1ff, 0x7, 0x1, 0x9, 0x1, 0xfffffff7, 0x5, 0xffff, 0x7, 0x0, 0x40, 0x3, 0x7fff, 0x0, 0xffffff9f, 0x3, 0x248, 0xa, 0x56, 0x8, 0x2, 0x4, 0x7ff, 0x1, 0x9, 0xfffffff7, 0x9d1, 0x9, 0x9, 0x2, 0x6, 0x6, 0x100, 0x40, 0x1ff, 0x8, 0x9bd8, 0x401, 0x7, 0x2, 0x6, 0x1000, 0x80000000, 0x7fffffff, 0x5, 0xfffff801, 0x0, 0x2, 0x5, 0x6, 0xb1e, 0x9, 0x9, 0xa30, 0x1ff, 0xa3, 0x2, 0x200, 0x2, 0x0, 0x10000, 0x2, 0x68, 0xffffffff, 0x3, 0x0, 0x3f, 0x0, 0x8001, 0x2, 0x5e80, 0x10, 0xfff, 0x40, 0x5, 0xffff8001, 0x6, 0x2, 0x6, 0x4, 0x7fff, 0x71, 0x1, 0x7, 0x9, 0x66b, 0x3db7, 0x6, 0x8000, 0x9, 0x4, 0x5, 0x3, 0x20000000, 0x5, 0xa51, 0x9, 0x9, 0x1, 0x0, 0x0, 0x2, 0x37c00, 0x9, 0x3, 0x4, 0x9, 0x364, 0x400, 0xff]}]]}, {0xfd, 0x6, "c1b1572911266e0b16445e3492a250af33c84b5f909c29d07d9aa6d735cd2adeca4452ac9a66e3deda8b6c2a01572ecb8c05cd52d3ebef6e883a4c9c55bf05c0062b8319218deee93e1e6f4882190b9051196d990e1ff3d07c0dc7ad58197623921672b04f6de5c81aa0c7e86310c51c11a858f71a0b430a10a484bd9f6345eaa54bbbc07f0172da71f01d5c8e19c45ef115c8cc493b9edffd7008809932582b622cc85577f2cb08647ba4bda44ae85a6d612ad7d7fa433070e6c116e9490b7b2c4fcfa5ee7226298bf10980823a66c9433e1f2dc44617cfd88752ff61797c3be9e10194db3602df93b8f8f71a67710091813dc544138dd94c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0xa4, 0x20, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x5, 0x4, 0xa, 0xe}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x4, 0x1, 0x400, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x459, 0x9, 0x7, 0x5, 0x54}, 0x3}}]}, {0x15, 0x6, "2408b983a0820479fc3285536ec5d35294"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_FLOW_POLICE={0x87c, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x0, 0x10000, 0x4, 0x8, 0x0, 0xb, 0x7, 0x3b81233d, 0x2, 0x5e, 0xf, 0x5, 0x0, 0x7, 0xc, 0x1, 0x5, 0x5, 0x80000000, 0x78, 0x2, 0x5, 0x4, 0x49, 0x6, 0x401, 0x10, 0x66a, 0x4, 0x3, 0x3, 0x80000000, 0xe5d, 0x9, 0x4, 0x3, 0x2, 0x5, 0x9, 0x7, 0x1, 0x378, 0x0, 0x80000000, 0x5, 0x5, 0x6, 0x2, 0x646b, 0x7, 0x6, 0x3, 0x3, 0x9, 0xbc220, 0x3, 0x4, 0x715, 0x1, 0x9, 0x4, 0x9, 0x43, 0x7, 0xfffffff7, 0xe, 0x9, 0x6, 0x2a, 0x4, 0x1, 0xff, 0xffffff28, 0xd, 0x2, 0x8, 0x3, 0x2, 0x4, 0x4, 0x4617, 0x4, 0x3, 0x3, 0x8, 0x7, 0x0, 0x6, 0xff, 0x9, 0x1, 0xb1b, 0xfffffffb, 0x4c88, 0x200, 0x0, 0x1, 0x2e, 0x2, 0x1, 0x100, 0x1ff, 0x1, 0x1, 0x8, 0x7, 0x101, 0x8, 0x80000001, 0x6, 0x8, 0x80000001, 0x0, 0x7, 0x0, 0x6, 0x6, 0x6, 0x1, 0xe, 0x7fffffff, 0x400, 0x2, 0x17, 0x3135, 0x400, 0x10000, 0x6, 0x4, 0x3, 0x3, 0x387, 0x7f, 0xf2, 0x0, 0x6, 0x2, 0x4, 0x24, 0x0, 0x1, 0xffff8000, 0xffffffff, 0x3, 0x2, 0x5, 0x796, 0xfffff800, 0x11b, 0x4, 0x6, 0x958, 0x517, 0x9, 0x1000, 0xd, 0x8, 0x6, 0x80000000, 0x8, 0x6, 0x7, 0x4, 0x56d, 0xfffffff2, 0x2, 0x2, 0x0, 0xb, 0x0, 0x800, 0x2, 0x9, 0x3, 0x0, 0x7ff, 0x1, 0x200, 0x4, 0x5, 0x81, 0x64d5ad47, 0x4, 0x3, 0x81, 0x4828, 0x3, 0x3, 0x7, 0xbecf, 0x100, 0x1cf0, 0xf3, 0x401, 0xe, 0xa, 0x401, 0x0, 0x800, 0xffffffff, 0x50e, 0x3, 0xb156000, 0xecc1, 0x0, 0x2, 0x1, 0xb5b, 0x0, 0x0, 0x1, 0x6, 0xe4, 0x6, 0x3, 0x3, 0x0, 0x9, 0x0, 0xffff0001, 0xe, 0x4, 0x32a2, 0xd2, 0x6, 0x3, 0x1f, 0x4, 0x20, 0x7, 0x4, 0x8, 0x8, 0x100, 0x5, 0x80000000, 0x7, 0x40, 0x4638138a, 0x4, 0x4, 0x8, 0x9, 0x4, 0x5, 0xe, 0x7, 0x7ff, 0x6, 0xd633, 0xd, 0x4, 0x6, 0x8, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0xbc7, 0x81, 0x4, 0xffff0001, 0x25, 0x6, 0x1, 0x7, 0x1, 0x80000000, 0x7, 0x0, 0x1, 0x0, 0x6, 0xc, 0x2, 0x4, 0xfffffff7, 0x100, 0x3, 0x99, 0x2, 0xfffffc00, 0x40, 0x7, 0x8, 0x74, 0x80, 0x101, 0x2, 0x4, 0x0, 0x0, 0x8, 0x400, 0xfff, 0x4, 0x8, 0xfffffffb, 0xffffffaf, 0x80000000, 0x5, 0x4, 0xc2, 0x29ae, 0x8, 0x0, 0x0, 0x1, 0xfffffffe, 0x962f, 0x401, 0x2, 0x3, 0x4, 0x6, 0x2, 0x2, 0x5, 0x7, 0xf, 0x1, 0x9, 0x3, 0x4, 0x6, 0x4, 0x7, 0x4, 0x93, 0xfffffff9, 0x6, 0x4, 0x4, 0x101, 0x0, 0x8, 0x400, 0x40, 0x7, 0xa, 0x401, 0x200, 0x1, 0x3, 0xabe, 0x10, 0x6, 0x22a4, 0x1, 0xffffff1d, 0x2, 0x3, 0x1, 0x1, 0xfffffffc, 0xa, 0xffffffff, 0xbf, 0xf4, 0x1000, 0x9, 0x80000001, 0xbe06, 0x6, 0x8be, 0xfffffffb, 0xff, 0xffffffba, 0x0, 0x7, 0x6, 0x0, 0x4, 0xa9, 0x2, 0x8, 0x3, 0x6, 0x19, 0xff, 0xd0, 0x9, 0x5, 0x8, 0x1, 0x5, 0x8000, 0x101, 0xf9b, 0x9, 0x6, 0x100, 0x0, 0x1, 0x5, 0xff, 0x7, 0x3, 0xfffffaa3, 0x7, 0x9, 0x3, 0xd, 0x81, 0x1, 0x3, 0x4, 0x2d432b71, 0x6, 0x80000001, 0x9, 0xd21, 0x1, 0x6, 0x7, 0x0, 0x5, 0x5, 0x5, 0x1, 0x5, 0xffffff7f, 0x9db, 0x7, 0x5, 0x40, 0x1, 0x9, 0x3, 0xfff, 0x7fffffff, 0x6, 0xb9d, 0x800, 0x0, 0x18000000, 0xffff056c, 0x2, 0x6, 0x0, 0x7701, 0x6, 0x8, 0x9, 0x1, 0x7, 0x8, 0x0, 0x4, 0x9, 0x2, 0x3, 0x3, 0x7ff, 0x81, 0x55, 0x4f18cd9, 0x4, 0x5, 0x7fff, 0x1ff, 0x3, 0xf, 0x7, 0x8000, 0x4, 0x12, 0x950, 0x2, 0x6, 0x1000, 0x80, 0xfff, 0x2, 0xf, 0x4a, 0x9, 0x9, 0x1, 0xe, 0x3, 0x4c01f8d8, 0x6, 0xe7b3, 0x3, 0x2, 0x3, 0x8a, 0x8226, 0x8001, 0x1fb, 0x74, 0x7e, 0x48d6, 0x6, 0x0, 0x2, 0xfffffffe, 0x4cf, 0x5, 0x0, 0x7, 0x3, 0x80000000, 0x9, 0x7fffffff, 0x2, 0x1, 0x200, 0x7, 0x8, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0xfffffffe, 0x8, 0x200, {0x2, 0x1, 0x3, 0xfffd, 0x3a2, 0x9}, {0x4, 0x0, 0x9, 0xe6f, 0xc, 0xa9}, 0x5, 0x4, 0x7}}]}, @TCA_FLOW_ACT={0x588, 0x9, 0x0, 0x1, [@m_connmark={0xfc, 0x1f, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7fff, 0xffffffffffffffff, 0x5, 0x8}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x80, 0x7, 0x4, 0x1}, 0x260}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x694, 0x3, 0x5, 0xd20, 0xffff7961}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xdf3, 0x40, 0x3, 0x4, 0x2}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x7, 0x6b60, 0x5}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x8, 0xfffffffd, 0xfff}, 0x4}}]}, {0x21, 0x6, "71ea68c8bb7003fb36dd891ceaa7652b203ebdff0cf2b082db5c234a2b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x134, 0x13, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x9}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9e86, 0x5, 0x3, 0x6}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8001}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xe}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x5, 0x1, 0xfffffff8, 0x7}}]}, {0xb5, 0x6, "db226b1df12fe9e190c76e64acfa3d7cdeeb84347a86a3481f1e9df4065b11f0905e07b803a24716ae3de2a92740ff922bf271c9bc4e2b4bc4bd9c0c183ede3675ddb74684e8fff89a51c2712d891b27c89c59ee0edbfbe0ee56885cfd309c2a3635afcf8ec8d80368a35d63e9e270e74ddf5cba5828f6f4fd937abc0319081fcf6ec4bd2d2f110dc7742d65dcc863c3a75ae78fab1cac57a6afefb11ba6c3b9815d8dd6d92509d44b245f49f9fe306cbb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x354, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x329, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x3ec4}, 0x1, 0x0, 0x0, 0x400cc00}, 0x20080000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104bcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c032000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5m58.843064663s ago: executing program 0 (id=97): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x26000804) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xf4) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000022eaffff00000080d5e2fb470a00002002000000", @ANYRES32=r2, @ANYBLOB="0100"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000003000000010000000a00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x8001, r11}, 0x38) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f00003d5000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000340)="baf80c66b8f927018a66efbafc0cecf0820801b822000f00d8f20f01df0f77660f382b0e0058bad004b05dee0fc75fdcbaf80c66b84c27868666efbafc0c66b80000008066ef6766c7442400387a00006766c7442402000000006766c744240600000000670f011c24", 0x69}], 0x1, 0x92, &(0x7f0000000400), 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r12, 0x89a2, &(0x7f0000000200)='bridge0\x00') 5m57.593960992s ago: executing program 0 (id=104): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x4, 0x8000000000, 0xcf, 0x1, 0x1000, 0x8001, 0x1001002, 0x5, 0x63, 0x4, 0x3, 0x8001063, 0x5, 0x4, 0x401, 0x20100000000022], 0x54000, 0x216146}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, r4, 0x4c1dad3e3d6a7499, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 5m57.434679333s ago: executing program 0 (id=107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4002004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = syz_io_uring_setup(0x6198, &(0x7f0000000400)={0x0, 0x32, 0x10000, 0x0, 0x1cc}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "0000650381c66e54", "27c8291a0f479e020000002cb3237cb1", '\x00', "38cb8a873cfcabba"}, 0x28) openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00', 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) 5m56.60857225s ago: executing program 32 (id=107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4002004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = syz_io_uring_setup(0x6198, &(0x7f0000000400)={0x0, 0x32, 0x10000, 0x0, 0x1cc}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "0000650381c66e54", "27c8291a0f479e020000002cb3237cb1", '\x00', "38cb8a873cfcabba"}, 0x28) openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00', 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) 2m33.44138625s ago: executing program 2 (id=1079): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0a00fa1b04"], 0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) 2m32.046565395s ago: executing program 2 (id=1085): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @remote, 0xb}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x110, r1, 0xdeda1000) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x10, 0x2040) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) socketpair(0x23, 0x4, 0xb2c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x10020, &(0x7f00000010c0)={0xa, 0x4e20, 0x2, @mcast2, 0x2}, 0x1c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000001380)={&(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000013c0)={&(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[{}, {}], &(0x7f0000001200)=[0x0], &(0x7f0000001240)=[0x0], 0x2, 0x1, 0x8, 0x0, r5}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) getresgid(&(0x7f0000001500), &(0x7f0000001540), &(0x7f0000001580)=0x0) syz_mount_image$fuse(&(0x7f0000001440), &(0x7f0000001480)='./file0\x00', 0xa00400, &(0x7f00000015c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}], [{@flag='sync'}]}}, 0x0, 0x0, &(0x7f0000001680)="5830696f96d238a8ef60aff19aa3a426bea4ecdc4cfa9c874a22bf0ca86331f2a78ad29ec6f46fd8d9889a36b9f6fbc8841107cc9cf9773bb58802d97b1f80ae5349b08d13d43e6f1bfd62b8336a13ecd102dc1e5ca6f1418bafc31f9b2efc2adc735a") ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000001700)={'rose0\x00', 0x100}) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001740)='vlan0\x00', 0x10) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001780)='/sys/power/resume_offset', 0x200080, 0x146) ioctl$DRM_IOCTL_IRQ_BUSID(r8, 0xc0106403, &(0x7f00000017c0)={0x0, 0x0, 0x4, 0x4}) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000001800)) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000001840)=@gcm_256={{0x303}, "91623b937926cf8a", "c56baafe2de640a89c92047750572011c827986997dddbe2c37bcca41d05171d", "56a6db88", "a3a318621b5ca7cb"}, 0x38) syz_ublk_setup_io_uring(0x178d, &(0x7f0000001880)={0x0, 0x8c2a, 0x400, 0x2, 0x3be, 0x0, r8}, &(0x7f0000001900)=0x0, &(0x7f0000001940), &(0x7f0000001980)) syz_ublk_setup_io_uring(0x6575, &(0x7f00000019c0)={0x0, 0x71a7, 0x200, 0x1, 0x5f, 0x0, r8}, &(0x7f0000001a40), &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, r10, &(0x7f0000001b00)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r11}}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000001b80)=0x9, 0x4) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000001bc0)={0x0, 0xffff}, &(0x7f0000001c00)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000001c40)={r13, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x871, 0x6, 0x8, 0x7, 0x80, 0x5, 0x9}, 0x9c) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$admmidi(&(0x7f0000001d00), 0x81, 0x494880) 2m31.909077127s ago: executing program 2 (id=1087): r0 = syz_usb_connect$cdc_ncm(0x3, 0x150, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e, 0x2, 0x1, 0x3, 0x60, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xd8, 0xfffb, 0x8}, {0x6, 0x24, 0x1a, 0x2, 0x2}, [@acm={0x4, 0x24, 0x2, 0x9}, @mdlm_detail={0xde, 0x24, 0x13, 0x7c, "eded085b0210eeedf5456dc42a5968ebc32173f18169a035f8cb85af3b06b3b9109203c5a7f0f0e8e2d4615b9abc394980fb39f9d8434bd6d20b4a907144b13b19617e8877ddb81d5eb61f503677d8fcb0412bc61361718791e34f46d8acb6c4a6cdf7eb5374aa9d0227b77bba046bb7e63cf797688ab6d4abf4ad7e22b5353990f6f10622a6f7c2caa011e4c1a546b92d3862189de4acf5e4357fd900c7106700e08cdba0873989cb720a00154912688882bf78a401e9b55504fa3f930a5583824414c3f13e6be82e1b6e0ee4673e2562469a1372fe8f2d05cc"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x7, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x3}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x7, 0x1, 0x0, 0x20}, 0x3f, &(0x7f00000003c0)={0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "37ab37ddaaa7170d6e6c551f14e97e8e"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xb, 0x7, 0x86db, 0x5a}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x3, 0x4, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "92e6240a65f68d035ee490cf9e9c25a0"}]}, 0x3, [{0x34, &(0x7f0000000400)=@string={0x34, 0x3, "d60730b76fe410bbe6bdd9e9b7957dd38850e89a5215b782fed92d15021993a31e9f1a27915c4019c154df6a0fd691da6706"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x446}}, {0x42, &(0x7f0000000480)=@string={0x42, 0x3, "437c6a7f8007b74ec9996b67858f4a2d9b0fb6a36c784f2092a18e118459a7e13f7a4d510b5559a377dd2e016d9075c280b9bfbe837a1a7e51b8a015dd5bb4d8"}}]}) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, &(0x7f0000000540)={0x40, 0x30, 0xe2, {0xe2, 0x4, "49d7c9cb51bd3fdf7df925d4a9dae31062b85381d9246ea9aa44407b60b7799467074243fc4182a5b77ebecfd00c824ed10e7a93f5ac8c516f2d268d273ae3ba55477cbf9e57d6cce03aa4be9d055c98b4cd76356ae211ad52aa2cdc7b221346c3a34bbf81ba8a42be17f3667c79469c9184de64139f89be8a7891441cd928f69bf8b514fe554965594760f474ddfe6e49c49f8eaf91a2786def9963c7ebb4935ffcb5876a95c91a20d64c59e30b8778ff839f0af63776ced3a2d6b65103c2c590105be95c3673937e05bd7741746b1fa3c84d4f3e1e0a7eedf4264d9c8eb79b"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}, &(0x7f0000001640)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x3, 0x3, 0x62, "7765548d", "4f022ffb"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0xd2, 0x3, 0xe1, 0x8, 0x101}}}, &(0x7f0000000d00)={0x84, &(0x7f00000008c0)={0x40, 0x5, 0x43, "414e70cb1e92e8d228a75d2f8ac4e4942a796a85c2d8b60b64db9723f9db40984efd6cc7690e1963dee6e63f9d7032706f672730c58e3720875ed89469e2844bc4b669"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x54}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x20, 0x8}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0xa5de}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "4ddf"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0xe}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @local}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "d30d"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x6}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff00001207, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000010c0)={0x2c, &(0x7f0000000dc0)={0x0, 0x8, 0xd4, {0xd4, 0x4, "971e8bb000ed9cb64add7336cf5ac8e09105beaaf04eb3f1777503b52e65191a7da9a91af46df371e4ca7242f9d335f59071f5e5673b2b0a6e85412be64937bb07809468716879a661845b9259b62c7bf427d233d1f11736c32f77025c60fce2fdbd809e991e1960a1dff395232aee5d8e2ec40050a78941336f4aa1575e89d82ce4ebdbb09d660b97438001cb60283ab6bf6ce46095441ba692a8ff37e5635d6d006fc81c18cebcbab116641075da1ea846b3c0216fb858954be7989055c486b7a2641f70733b76678686d14724e907c100"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x51, @string={0x51, 0x3, "948ce7aa4744f3e73969f186978abfb3cc27058f1e99551489ee7d59856d9946fee91d3ec69ecf5b0ec0e0d54a83393275ce358f54627c29b201772450d4c021c583906ffaa4af2002e6d5d167d12f"}}, &(0x7f0000000f40)={0x0, 0xf, 0xdc, {0x5, 0xf, 0xdc, 0x1, [@generic={0xd7, 0x10, 0x2, "d896b517c5b1c43fa5a2d2eaa84d603b4802c0f81563c741b4427e445169b9cf4062925a5fa83dd40dbc6a9cad857394b805ffcc9da558797e3b1807a984a5d3c32c929ca26ff8a8d2b3f01dd6719bba7c20169729f704b9cbf753deccd1c90f9a049af6408b358a0472841950c9cdf0a4c4d8d0c2467c83b816c5196f9f0d9323fb3890507af063269d356129c7df10aae3b6e9cf6b3d3fc493946f66c1c9c8b2875b76e9fb2fc2fe2449b1a9e59f31e77dcce64bc21d2b2706149eed7151b44521f13a3dfc3ba7e4169eb9cdaaafdf2decf188"}]}}, &(0x7f0000001040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x0, 0xc, 0x5e, "04b432ee", "991bd784"}}, &(0x7f0000001080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x1, 0x3, 0x5, 0x13, 0x4865, 0xfffd}}}, &(0x7f0000001580)={0x84, &(0x7f0000001100)={0x0, 0xf, 0xaf, "edcb129348fc5f88b281f23af67566059a76b0ef1b5097d0ee81f1466cc29e227c6d47870996e1dd7344f6e9f00c662b2b71057ed25402723f0d233a28048dd08f2f6d0b5eb932960e6004ddcf7d45c11776f8aac1d97d3fb3301921796b810a51a399d1ae69db92421932598c18246d3f6ee4079159ad71ae0e34eccef099f5ac9d620b144f06c6067e261512d21f56f154622c7c8fddc3bdd0064b8450cfbeb4b5ea0d530bb8f559fa7baf2fa8c8"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x60, 0x2}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0xc2f}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001340)={0x40, 0xb, 0x2, "9054"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x44a1}, &(0x7f00000013c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001400)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000001440)={0x40, 0x19, 0x2, "8e69"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x883}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0x3}}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000015006b05c84e21000af32c6e025875f802000000400001800000d34460be040400000000000082949a36c23d3b48dfd810000002003fce86b6345b05ca97fe4d5670a568fe435afe38f69054c4be816a9ff213d60026a8f8", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240200c0) 2m29.293088088s ago: executing program 2 (id=1095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) 2m29.012920703s ago: executing program 2 (id=1097): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x80000001, 0x80201) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000540)={0x0, 0x0}) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRESOCT=r4, @ANYRESHEX=r0, @ANYRES16=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b00340001800c0001007061796c6f616400240002800800024000000000080001400000000a080003400000000508000440000000020900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 2m27.142953112s ago: executing program 2 (id=1106): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x202, 0xc) (rerun: 32) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, 'wlan1\x00'}}, 0x1e) (async, rerun: 32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) recvmsg(0xffffffffffffffff, 0x0, 0x40) (async, rerun: 64) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000500)=0x2) (async, rerun: 32) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1) (async, rerun: 32) write$tcp_mem(r1, &(0x7f0000000040)={0x0, 0x20, 0x2, 0x20, 0xfffffffffffffe01}, 0x69) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x204, 0x2) ioctl$USBDEVFS_RELEASE_PORT(r8, 0x80045519, &(0x7f0000000000)=0x3) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x290, 0x140, 0x19, 0x0, 0x140, 0x0, 0x1f8, 0x1f0, 0x1f0, 0x1f8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x73}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1, 0x0, 0x0, 0x5}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2], 0x10}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2709fb5a2bab03dc, 0xff0000ff, 'bridge_slave_0\x00', 'pimreg\x00', {}, {0xe8835d89a38d226f}, 0xff, 0x2, 0x1}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) 2m14.695785651s ago: executing program 3 (id=1157): syz_io_uring_setup(0x2229, &(0x7f0000000200)={0x0, 0x87cf, 0x2, 0x1003, 0x8c}, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x16, 0x2, @thr={&(0x7f0000000140)="a32b77adc262c3d403a0376d6bbcf554d4292cd31f310e692bb2e46f97827f779105af12d892e1deb989b44a4f375935d5a0fe2ab6d20b494d8f9c16500489f134990d37ba54acc500a724548746fd49ea02b2219b65e1886ec7dd00f5433423ccc038dfd1ac807d091d0f855603b5ca", &(0x7f0000000480)="337f423c02f463dc38d8c47c98e6c5fa5cf5276cf00422b1a9bc8bbaf0342197c83070fdf0494eb7de4ca2f8ce8ea519fa99c76fbccfd9d5a730c96d92f207fc9e6789cd3ee201357df6b8386ecc5a1bc2434dbe40ef91f4ad7beb737f6f35f24bb5f55033eba9278addc8992aff88fe883eed16330648cf1f949f03a291ee62aa3484904fa03d12ae61c07f698d73b88b7c3e39f4f4000ce43a77b19629c2f6303a9d5a755790ad91e818c277cb1285cda9d26b44fa4b125b1350bb330836f3873a920893056ee7cfc0b6c6ee35468314ba9fa9c71483027831d8f00aa7aade9e8d67a19083632e39c3c96c357db89c12ba92343e5b7c"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r2, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f00000001c0)={0x20, r2, 0x0, 0x0, 0x0}) mremap(&(0x7f0000061000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f00000a2000/0x1000)=nil) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)}}], 0x1, 0x810) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x4000014) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000080)="d8ab", 0x2}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000600)="6eb2bc57ffd4426616d704a35903b55445eaf0a85f043015a132175f4d6c88cb6f74cba99afc10b02b5d08e7897e659a9ec5839b37119d86be726fa69efb4f145b1da27d3660ce4556daf7d1b973fb46fc0040de5c827092db739beb7fa2b7235c566451b73e05f3a80c7f2872fde409e6ad64555373cda33ade641d4e3b725b0250bb06e67d548f0b64afa1c0220b218a0f484aadcb4894351f57a001503ca431bbd09af5b81e405fa98cbc44c9fb5ff13feba6711c828056293ab5e62f3d5927dd271d1b4d0d9ed4232ec548550ed1096419e660258fd7afa0c6d66b2574f71b881e67f98d4f24db93c303298a324538c16b91034699a316c2b343", 0xfc}, {&(0x7f0000000880)="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", 0x1000}], 0x5, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0xfffffffc}], 0x18, 0x4000}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) 2m14.566714967s ago: executing program 3 (id=1158): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'trusted.', '+:-&\\0(+*(\\\x00'}, &(0x7f0000000080)='\\,\x1d\x00', 0x4, 0x5) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f00000001c0)) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) r4 = syz_usb_connect$uac1(0x6, 0xdd, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0xd5, 0x60, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x893, 0x19}, [@feature_unit={0xf, 0x24, 0x6, 0x6, 0x4, 0x4, [0x9, 0x4, 0x3, 0x6], 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x1, 0x8, "de", "99ae42"}, @as_header={0x7, 0x24, 0x1, 0x99, 0x7f, 0x1002}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xa, 0x1000, 0x5c, "671491996a0c33955c"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x100, 0x3ff, 0x1, "95"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x10, 0x6, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x9f7, 0xc, 0x1, 0xb, {0x7, 0x25, 0x1, 0x0, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xd, 0x4, 0x5, 0x6, "f215"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7f, 0x7f, 0x0, "2eaccb669b0d"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x8, 0x9, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x408, 0x2, 0x1, 0x6e, {0x7, 0x25, 0x1, 0x8, 0xcc, 0x4}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x1, 0xf, 0x77, 0xff, 0xe}, 0x2d, &(0x7f00000003c0)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "8a78bf9f584b66eb16ae20b8f1d1044d"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "4fed739bd4a0871d8a8e4815045a1056"}]}, 0x7, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x438}}, {0x11, &(0x7f00000004c0)=@string={0x11, 0x3, "e027f3d2df6a4c9d1eac45a8a12004"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x440a}}, {0xe0, &(0x7f0000000580)=@string={0xe0, 0x3, "fd9337f9b12955d59ddb0c96c8f4847bfe076ec5fb886ceae0f88b27016692528117e9236d54cd463ff84f731068882e6df60843d44ee7fc1d47ddcefd8565240bfa077c1e7d8f855733b0395037c6852e33c4176a06322ba8757364eb30614aa1b27ba0108df23eb7d8bf028df07cec3eacc0277c023edbcd49939f6112ec0884df22ca60b9b3afab9507dc1b4052eefd338b94cf27b1e24f63c35c103cab7e95100421b2f190c35787fbd90d02276fc6380e5fd607c351e1c7f37044b5bbc5ba6734777010ee8498096238618648fd062a2f8cb1e874d8745067ccbc63"}}]}) syz_usb_control_io(r4, &(0x7f0000000940)={0x2c, &(0x7f0000000700)={0x0, 0x11, 0x88, {0x88, 0x30, "b2781d3776830147d46ff15de2d61022f4ed025f4ad8d3dc521c3b678d280826f77db025d7a47bbd7da8127e6bd1c1d4320005ee5972d54d2ea9053a7b14ad147b1efce557ae9aaf2226e3bbfea76e3bde820c97266a56048ffaa9c7f7fbe7f66783819f47952b8566f6be0d77859d1e93ecf8029feeb1bac95bf596356917c6f9fdba6b25af"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000000800)={0x0, 0xf, 0x85, {0x5, 0xf, 0x85, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x2, 0x7fff}, @generic={0x4e, 0x10, 0x2, "5b76fca3e9ffc6303356a677545677205e960f4dd857f888b1395254272a6934192070f9a2b1227ece6d4dde07786888065106b32203c4a9824dbcf6df36f638c6ae69fbdabd7d69318ad0"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "5c3a2bbb469b2273039e48eeb3cb3e76"}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "ef43a09f1fd5dc7490f7c913c6f150f7"}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x44, 0x60, 0xfa, 0xb7, "1b32d0b4", "96608a8f"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0xf, 0x67, 0x1, 0xd, 0x3}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000980)={0x40, 0x30, 0x5b, "2602b1f38a0bd891b25483f6fdc8bb99dde22028c0f2f52cdd8baca604d6795088cefc6642a6844918512b21e67d60aa434d817b48023d5e150caf4ddab085f463f86e117e87811f96d1fbfb7d39a29a3a2cd963e21a69210cd823"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000ac0)={0x20, 0x0, 0x8, {0x40, 0x8, [0x0]}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "17b9"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0xd}, &(0x7f0000000c00)={0x40, 0x13, 0x6}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000c80)={0x40, 0x19, 0x2, '^j'}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x26}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000d80)={0x40, 0x21, 0x1}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000e80)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000ec0)='/proc/schedstat\x00', 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000001440)={&(0x7f0000000f00)=@sco, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f80)="73f1f857c2d0349b2bf00b666058073ab88efe0aabdc37b7d9c878d65ba21753c047ab4e731258d2956622d099aa1444c219221dcd74c72ec4edc8107388a354d31927d277cf18e05bfa0dff2f414a7b8b68316494ff9b97f497ff12cefea65aa2757148cdb06319bc8253510d16c892f6", 0x71}], 0x1, &(0x7f0000001040)=[{0x28, 0x10d, 0x100, "ca707484025de0d2433572f5923c8b04963bb383228f6afa"}, {0xc0, 0x88, 0x6, "47fd9c7dfaa834fcafb8b00d47756e46b31d55d9d8feec3e1d98581ee8c622e1c080d999e607f0bc8a4e5744f722755bbaa4fb8348c2e70ad2d97e5d68917c7034fef4d30c299e827864eb7a118149ca91b85cdadd036d941bfcb1f83c4d0dbab26b8cd06a33b38b7047064e617a1ee080badabca14fcdfba4b65b2bee68c44834f2396701b6b6fda1a1645f9dd6985047539702531de7efdbff1c2855786baeebcdc5b2fd66abf7b6"}, {0xe8, 0x119, 0x8, "13f51a914f8419d8c0f49fff8165fa202edc7eb81d58f107fbdb3106487947c21e38311522c5fad6562e1abe18e28604109b9fce60b88d10158b4ec8174b240af6c0d84054b3f977b1d35cff92b9ec25bcca96d48282fe69f0d455e3e394669bfda8893dfddef50ce7dfe166d70dc3289e617d1608efb17ef9ecb650a71ded2d5435a3258fd7a67ac4cbe6fda185c25dbc4f937ebc6f663b1dd31837c8ea322b30ba2bd1dfcbfea50fe2a412635bc10e0e0a2541cff6011fc9b12233d016e21f09f03353b7c49114a9a8cfd989b047bc0181381e"}, {0xe8, 0x1a5, 0x1, "3a4320c3c69f6514382afecffac064ad5d08dbb2ddf408af210b9db5e471e0faad2dfd8c10d757e5b54630f4b3931f4e9c78b296ed5a1bf1cd9738f25ea5ea9bf033e035b0facc3f608c97712c15b46a5e68efeac3f322d61bd24e53e33bc22d5ec431f64eecc054bf2ed39451fd0f4a76ca552c6217ff16640c904feb0bd57ad5dd6f7b731c7aeb47eca1dca627c012b727c42c1f4a0d2678d9988469e305c96122b024a852c7b66e3363bb3e2eb8deb9c17fc686af26d9ee2880977b0bed8551ebc680b19ae70df7635f674e20078fd404f4"}, {0x20, 0x10f, 0x81, "cc1e2b942daccb04c46842f0"}, {0x110, 0x102, 0x7a, "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"}], 0x3e8}, 0x800) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x3) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000014c0), r5) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0xb98d0a2158319012}, 0xc, &(0x7f0000001780)={&(0x7f0000001500)={0x25c, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x51f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0xde, 0x3, "3b9c89b62972e4cb42c71ed2e97ead70e94f0739436c73c9fbdc780dc59755920f1d4d14fe1f75f6502602a6534ac6b8142421533775ca391cb4b8384d91c6438d316134bc6915ae6c5023f05d3df6ecf6f3c8b6eab63592588de0583871d0f60f61f14b20e872f6f1182ebec6b2aa798207061e89e26d9b0551d74e3206dcc2550b5570daf41151abaca9b2ded45135d78a09b78b280b203f13803e065ca1d9f4510483a15a15d0cda30e02b6f095a9c1be82cb7b81d110e732f968ce0137657444908a31d1c484c1b7a9d68b3cf7169136c44e810211eb3676"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000001880)={0xa, &(0x7f0000001800)=[{0x2, 0xa, 0x0, 0x1}, {0xb2b0, 0x6, 0x6, 0x7}, {0x4, 0x0, 0x4, 0x200}, {0x9, 0x10, 0x40, 0xfff}, {0x2, 0x8, 0x69, 0x5}, {0x1, 0x6, 0x3, 0x4}, {0x2, 0x5, 0x3, 0x6}, {0xc, 0xf1, 0xa8, 0x6}, {0x5, 0x5, 0x7, 0x9}, {0xe3ce, 0x0, 0x3, 0x6}]}, 0x10) stat(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, r7, &(0x7f0000001980)) sendmsg$nl_route(r5, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)=@newnexthop={0x54, 0x68, 0x0, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_TTL={0x5}}, @NHA_OIF={0x8, 0x5, r3}, @NHA_GROUP={0x24, 0x2, [{0x1, 0x6}, {0x1, 0x9}, {0x2, 0x6}, {0x2, 0x17}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004880}, 0x20000800) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000001b40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002bc0)={0x10, 0x0, &(0x7f0000001b80)=[@request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f0000001bc0)="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"}) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000002c00)) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000002c80)={0x1, [0xd]}, &(0x7f0000002cc0)=0x6) ioctl$NILFS_IOCTL_GET_VINFO(r5, 0xc0186e86, &(0x7f0000002dc0)={&(0x7f0000002d00)=[{0x80, 0xfffffffffffffff8, 0x5, 0x2}, {0x6, 0x7ff, 0x4, 0x1000000000}, {0x5, 0xb, 0x8000000000000001, 0x3}, {0x8000000000000001, 0x8, 0x1, 0x1}, {0x5, 0x5, 0x100000001, 0x5}, {0x4, 0xb39, 0x2, 0x6}], 0x6, 0x20, 0x4, 0x40}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000002e00)={0x1, [0x8]}, 0x6) write$sndseq(r5, &(0x7f0000002f00)=[{0xff, 0x7, 0x29, 0xb, @time={0xfffffff5, 0x34}, {0x3, 0x8}, {0xa, 0xa6}, @control={0x3, 0xe, 0x1}}, {0x9, 0x3, 0xd, 0x1, @time={0x8, 0x80}, {0x9, 0xff}, {0x9, 0xb}, @raw8={"d06f62160d4cd0f0854e74c2"}}, {0x81, 0x2, 0x3, 0x1, @tick=0x10000, {0x9, 0x1}, {0x81, 0x5}, @quote={{0xf, 0x40}, 0x5, &(0x7f0000002e40)={0x3f, 0xe, 0xb, 0x1, @time={0x1140, 0x270}, {0x8, 0xfb}, {0x5}, @raw32={[0x2a8, 0xb0a, 0xf71]}}}}, {0x0, 0x6, 0x3, 0x5, @time={0x4, 0x4}, {0x2, 0x1}, {0x0, 0x40}, @queue={0x3, {0x401, 0x9}}}, {0x8, 0x4f, 0x5, 0x7f, @time={0x1}, {0x10, 0x4}, {0x80, 0x5}, @addr={0x3}}, {0xc, 0x4, 0xc, 0x7, @time={0xe013, 0x200}, {0xe, 0x4}, {0x3, 0x9}, @addr={0x7, 0x5}}, {0x0, 0x0, 0x70, 0x10, @tick=0x2, {0x10}, {0x8, 0x2}, @ext={0x6c, &(0x7f0000002e80)="36587cdabaadc50f9490d5621b3ccdc5fd9dbde138cefbeaa99411fd627515c6099974d31f03fb08c6fda61ecb8b5130591b2b396c8659412dd5c91d3de2c3807a85aa2c1955b8f7ffc55d233f9fd4e4d887ec8407d7e0fc497f085f2499cd959324915d1dc63b514d5e0b01"}}], 0xc4) r8 = openat$cgroup_procs(r5, &(0x7f0000003000)='cgroup.threads\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000003080)={0x85b, 0x0, &(0x7f0000003040)=[r8, r1, r1, r5, r2, r0, r5]}, 0x7) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003200)={&(0x7f00000030c0), 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0x13, 0x4, "2252be07c6c4ae7f64d6b5785ba281"}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "68c22954d21f7e776cfd0ab3dc"}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000000}, 0x1) 2m13.953007512s ago: executing program 3 (id=1161): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x1, 0x7fff7ffc}]}) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000100)=0x4) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000480)=[{&(0x7f00000001c0)="21b5c20bf24bb39b3c7fdf106c28bfb85ef244fb77cadb40511e23c6657fb42784d10c3dd7f08bc3b408196b5c45b790072890924415028ce2e8fa79478e3074be15e4d04f7432562f42413743ef6fb4a8781cf2a087daf09e9550efc2b71876a1032b1346ab757fd2fa49347a63ae1388adfad4b56e41e65b70cdbad05c98dc0bd90e25fb96dbc0008fb00641eb9d281570bca91fc79db06e51f5863f01c03a35cdff06d254546bea6aa72a27cd25a21152ade32b1f53bf7d1be6df3cf80bedd34bbd00b75541df41ce1303c382642e7cf64b63f7d55597afac77c8074bbbc966ca2f861de1907098"}, {&(0x7f00000002c0)="b6c70ceeb05584fc59337d8b0493d40c58783854106e8a97c6d5663465d24e6278c4215d65bf5311a0eb98b45f9075465fb280c6658943463e24fb4e8d54c123a8efc23434441db7180a1d506ab4ff7bba4f3dd9dab1b9589e9d4d1b175c065233d302c3af37c452bbb1e3f3d5ade7e227130a60dcc2ee8d0e58cb6d475215f5b09c6f070c2b985d51c014f6c349dd559700fcd17b2800e040ab419075eebb0905"}, {&(0x7f0000000380)="e4be2779d5f70661715f47977129d1c54b6c9eeb814f02b2090ca7d3e2ad0c58d0fec30da83578b4f0db751fda9199f28177526baa94739028fa3ab918dde9035cef061b4daf4ee20355999f8a3c581b61d174eae89ed13f2a6d1d51cae7a02bb7b188f8566883abe501a72a81f236cd6871ac6622ac0184909d1cd0d5134d922a55c8df85b5dd16ac74c255c662ac9c75e6ef49ca61dcda975d2d90ed31bdf92d"}, {&(0x7f0000000440)="af5d3cf78fedd8f4084c97f33c8d9e11dd1f0c3393355b43abe6b812939efa89a828a414fc"}], 0x1, 0x0, 0x7, 0x2c}, 0x4004) 2m13.788931739s ago: executing program 3 (id=1162): socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r2, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e22, 0xfffffffd, @local}, 0x0, {[0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x9]}}, 0x5c) r4 = socket$inet6(0xa, 0x400000000001, 0x100) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffff18) unshare(0x80) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8feffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000fefeffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) chown(&(0x7f00000002c0)='./file0\x00', 0x0, r7) socket$nl_route(0x10, 0x3, 0x0) 2m13.029856494s ago: executing program 3 (id=1165): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001040), 0x802, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000080)={0xc}) waitid(0x0, r1, 0x0, 0x8, 0x0) write$UHID_INPUT(r0, &(0x7f0000001080)={0xa, {"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", 0x1000}}, 0x1006) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x82, &(0x7f0000000400)=ANY=[@ANYBLOB="120110010000002082057d004000010203010902700003010048f311fdbc429efbe577f2b70904000000010100000a240106000a000201020904010000010200000904010101010200000824020109040403082402017f020607ae050109080000037f0725010c000200090402000001020000090402010101020000090582094000"], 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0xe, 0x24000010, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x6, 0x6, @random="b8667c152066"}, 0x14) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xa6f6, 0x10, 0x2, 0x28b}, 0x0, &(0x7f0000000140), &(0x7f0000000000)) connect$inet6(r6, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) dup2(r6, r6) socket(0x2b, 0x1, 0x1) r10 = inotify_init1(0x0) inotify_add_watch(r10, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x94000516) lsetxattr(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='urer.hashlimit\x00'], 0x0, 0x0, 0x1) 2m11.924199921s ago: executing program 33 (id=1106): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x202, 0xc) (rerun: 32) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, 'wlan1\x00'}}, 0x1e) (async, rerun: 32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) recvmsg(0xffffffffffffffff, 0x0, 0x40) (async, rerun: 64) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000500)=0x2) (async, rerun: 32) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1) (async, rerun: 32) write$tcp_mem(r1, &(0x7f0000000040)={0x0, 0x20, 0x2, 0x20, 0xfffffffffffffe01}, 0x69) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x204, 0x2) ioctl$USBDEVFS_RELEASE_PORT(r8, 0x80045519, &(0x7f0000000000)=0x3) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x290, 0x140, 0x19, 0x0, 0x140, 0x0, 0x1f8, 0x1f0, 0x1f0, 0x1f8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x73}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1, 0x0, 0x0, 0x5}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2], 0x10}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2709fb5a2bab03dc, 0xff0000ff, 'bridge_slave_0\x00', 'pimreg\x00', {}, {0xe8835d89a38d226f}, 0xff, 0x2, 0x1}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) 2m9.858265179s ago: executing program 3 (id=1175): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xed, 0x20200) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket(0x1e, 0x802, 0x0) r3 = epoll_create1(0x80000) close(r2) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)={0x60002005}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x2}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) 1m54.808571016s ago: executing program 34 (id=1175): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xed, 0x20200) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket(0x1e, 0x802, 0x0) r3 = epoll_create1(0x80000) close(r2) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)={0x60002005}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x2}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) 12.436398615s ago: executing program 5 (id=1714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000001200e9500000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', r1, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe10, 0x10, &(0x7f0000000040), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x42) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) (async) prctl$PR_SET_IO_FLUSHER(0x50, 0xfffffffffffffffd) (async, rerun: 32) ptrace$cont(0x7, 0x0, 0x9, 0x5) (rerun: 32) 12.04084701s ago: executing program 5 (id=1716): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7fff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x28, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3305280f125e6e11a9314b296"}}, 0xfdef) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) 11.540335063s ago: executing program 5 (id=1718): socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1f, 0xfa}, {0x9, 0x5, 0x5, 0x2, 0x3ff, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x83, 0x3, 0x20, 0x3, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c01000013000100"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = fsopen(&(0x7f00000000c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @remote}}}], 0x20}, 0x40800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x7, 0x4, 0x34524742, 0x8, 0xc, [{0xfffffffe, 0xb}, {0x40, 0x7}, {0x800, 0x100}, {0x8, 0x1}, {0xfffffffb, 0x676e7560}, {0xc2f8, 0x5}, {0x3, 0x1}, {0x4, 0x165}], 0xe, 0x6, 0x7, 0x0, 0x3}}) syz_usb_control_io$sierra_net(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000600)={0x40, 0x5, 0x18, {0x18, 0x22, "44b5e16cc73db7e3e6b9260977a333fc828dd0cda02b"}}, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) socket$unix(0x1, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.429745699s ago: executing program 1 (id=1725): socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b2000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xe0ffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a20020000000000", 0x8) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01300000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31f5ffffff38000000030a01040000000000000000010000010900030001007a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x2004041}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x140}}, 0x844) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xffffff2f, 0x2, 0x2, 0x18, 0x3, 0xf0a6}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc5}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x114435b29ef03429}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r6, 0x0, 0x0) 8.469518991s ago: executing program 7 (id=1727): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0xb, 0x17, {0x17, 0x10, "3a8f07f9749fe33c6292d89442b2ff4a335cc860bd"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000f40)={0x84, &(0x7f0000000740)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 8.228873899s ago: executing program 5 (id=1728): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_usb_ep_read(r0, 0x4, 0x1000, &(0x7f0000001380)=""/4096) syz_open_dev$vim2m(&(0x7f0000000300), 0xd37, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket$can_j1939(0x1d, 0x2, 0x7) creat(&(0x7f0000000180)='./file0\x00', 0x3c) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b7080000000000000301090292009dd171030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=0x0, @ANYRESOCT=r0], 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) 7.473298053s ago: executing program 1 (id=1732): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000000)="8d18185ca85cc9067d70b1580157ca8b747317") socketpair(0x1d, 0x3, 0x1, &(0x7f00000000c0)) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00225c000000000004e006"], 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000000)="8d18185ca85cc9067d70b1580157ca8b747317") (async) socketpair(0x1d, 0x3, 0x1, &(0x7f00000000c0)) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00225c000000000004e006"], 0x0}, 0x0) (async) 5.808115919s ago: executing program 1 (id=1737): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_write(r0, 0x5, 0x23, &(0x7f00000000c0)="19dcc987389c7e58059b00000038f89e15bf19bd5c39a920a734f75397c9cfb1370185") openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000080)={0x3}, 0x8, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xd0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x189a80, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r3, 0x80044df9, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f00001ae000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x34}}, 0x881) 5.320893449s ago: executing program 6 (id=1738): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x5, &(0x7f0000000400)=""/119, &(0x7f0000000480)=0x77) 5.13571557s ago: executing program 6 (id=1739): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xff01, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800, 0x0, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x14000851}, 0x20040040) (async) r5 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000600)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYRES64=r2], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async, rerun: 32) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) (rerun: 32) syz_usb_control_io(r6, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x3e, 0x6, "06abf4e701c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x6f0) syz_usb_connect$midi(0x2, 0xcc, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x1, 0x1, 0xfd, 0x40, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0x0, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x1, 0x1, [{0x2, 0x2}]}, @midi_in_jack={0x6, 0x24, 0x2, 0x4, 0x4, 0x1}, @midi_out_jack={0xd, 0x24, 0x3, 0x3, 0x6, 0x3, [{0x2, 0x6}, {0x0, 0x9}, {0xea, 0xd}], 0x1}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x7f, 0x6, 0x60, {0x6, 0x25, 0x1, 0x2, "4ab4"}}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x6, 0xf, 0x7f, {0x5, 0x25, 0x1, 0x1, '\v'}}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x3, 0x1, 0x3, {0x5, 0x25, 0x1, 0x1, 'r'}}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0xff, 0x6, {0xb, 0x25, 0x1, 0x7, "4e5e44c27e0e6d"}}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x6, 0xe, 0x10, {0xb, 0x25, 0x1, 0x7, "b8b6f73b0b8e1f"}}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x1, 0x0, 0x65, {0x9, 0x25, 0x1, 0x5, "c2cafe0c4c"}}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0xf9, 0x8, 0x7, {0x6, 0x25, 0x1, 0x2, "c0cc"}}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0xf, 0xf8, 0x3, {0xf, 0x25, 0x1, 0xb, "3f887d0f484cd7bb77f4c5"}}}]}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x24, 0x9, 0x3, 0x40, 0x40}, 0xd3, &(0x7f00000002c0)={0x5, 0xf, 0xd3, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x0, 0x10, 0x4, 0x7, "74bd21c4514fccf01173cb09cbc661a0"}, @generic={0x12, 0x10, 0x4, "981003c5ac469349c6a37d3e4a8048"}, @generic={0x20, 0x10, 0x3, "f423abe708db7480a53a30c406ceb866a3cb6915eab72bb2246a34e824"}, @generic={0x48, 0x10, 0x2, "a5cfe89ed4ca36dbf11d417ad8e3c4b010784bf359adce013c59cde678b0142d4b63169eddd13ae67e08aae8e7b51206b53c1f7ade55517203dfb2be6b6e741790f4d36c5b220ee3a95cb82223b457f43733fc9bb0f28c6de6282779b44774dad98c6d4c6466644011d2"}]}, 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x436}}, {0x50, &(0x7f0000000400)=ANY=[@ANYBLOB="5003acb36f7ec792bf79a2f1f005c8714ae56f42670f9691d77a7c047fe5bbf702577f582db315fe9618e398f499b96c36d5cb41e33a71281bf8bc2ef6d899aef55115613e00ef8a2ae1d4f150525290"]}, {0xad, &(0x7f0000000540)=@string={0xad, 0x3, "a966e30e714c017deefb0cff276f0757c92383e8936bc1babc53a70ccdb4a6c8cd8665412e45acb5c6cad2e12db20cb02167d55184db0f7ac55b766bb228733cccb881ea9734cdbaa975a642ea42665189cfa77b90857822716588924e391d5f811b4bf5e606552dee10b69453268827570dc083000893f2212c9c09ac30503592a550b3c3452dce872fdefa7abf75733fba09e72db46342fbd9ee776e8d7d5e93d66d6ee953a48e474894"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x9e, &(0x7f0000000640)=@lang_id={0x0, 0x3, 0x1009}}, {0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="4603865abe0eb645afeeace5d2964bf9cfd0f96aff0ffcc06b449d9c753ef6ddeee2caae934ae7bea5469681f1d18ae36976791b689aeafdb72604"]}, {0x1f, &(0x7f0000000880)=@string={0x1f, 0x3, "b4ba92edabdec4db8def339b466fcad62b794f1d83179f08a4e6256578"}}]}) (async) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) syz_open_dev$video4linux(&(0x7f00000000c0), 0xfffffffffffffffe, 0x8800) (async) r9 = mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960x0, 0x0, 0x0}, 0x2020) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000002640), r8) r9 = userfaultfd(0x40800) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000002680)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r10 = syz_usb_connect$uac2(0x0, 0xad, &(0x7f00000026c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x4142, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x64, 0x50, 0xd, {0x8, 0xb, 0x2, 0x2, 0x1, 0x8, 0x20, 0xe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0xa, 0x16, 0x7}, [@feature_unit={0xd, 0x24, 0x6, 0x1, 0x1, [0x4, 0xa, 0xc, 0x6]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x157, 0x3, 0x5, "983b"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x5, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x9, 0x9, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x8, 0x7f, {0x8, 0x25, 0x1, 0x0, 0xf, 0x40, 0x44b0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x7, 0xe, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x2, 0xf9, {0x8, 0x25, 0x1, 0x1, 0x30, 0xc0, 0x800}}}}}}}}]}}, &(0x7f0000002b00)={0xa, &(0x7f0000002780)={0xa, 0x6, 0x110, 0x8, 0x2, 0x2, 0x10, 0x8}, 0x21, &(0x7f00000027c0)={0x5, 0xf, 0x21, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x2, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc, 0x6, 0x5, 0x0, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0xf, 0xf00b}]}, 0x6, [{0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x3001}}, {0xed, &(0x7f0000002840)=@string={0xed, 0x3, "96bb0bd1d90dc302baab54a0bd1ef801ccaa67c92fc27bde96844d50f3f6d91ac66e160912b4d1ff8b6792f4b1de6c7a4e73db3ae54521ddfcab47b3d9d8808b203ade1101a60b5e573e4253317a77b1a5a2cb8922aec77fa5fbb84aafd1de97be0e19b0f9050107dad6728c1030b713734ed24baf347b02546e39b5b780099874d88875b3e31f41f0d50171721e8f45ed05faf4863a07fbe0d3486f71ad876da20b2d8f14a2e550a6bfd9775d73f86e95b93227b4164869d14f7f9f70111ee1a2a290c84bb4691beac2aa298ff781669cc20d32661f1cadcb040e8133554f8e4eee2e107c4c52cbe7a396"}}, {0x85, &(0x7f0000002940)=@string={0x85, 0x3, "10c25a1be8044e12c744424301a739fe01f6d4e75e35b200a62ca81e7b38bb6c1344d09c1c051e419c390f6fe2bd8948ff46b9ea09392b61ef51f65f37ec8e25bb6d60bb69a7870af2c2d6d0028dec5110734b65ee84ec4fbaf41c2f589c7a9fee46ff660eec83ff8b64710575cc0650f9354204e601464c42cd2ef72c64a53a9bc4cb"}}, {0x4, &(0x7f0000002a00)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x42a}}, {0x56, &(0x7f0000002a80)=@string={0x56, 0x3, "fdd2deaa386bfbb45fb258969d6e861164ec01d54aecfe563df8308cc765ca730b8997cf1505ef3132a5184b14ec3d010ee74259fa3955f4cdf5002253004d4177ee7764a79b3dde677135633b95865b3090db1f"}}]}) syz_usb_control_io$uac2(r10, &(0x7f0000002c80)={0x14, &(0x7f0000002b80)={0x0, 0xe, 0x80, {0x80, 0x7, "4ba39e8add56aee3be45237bec8a2fc21cf83f89121f8367bc3d539bcc312bbb60668d1d21ecadd9645ef11ea66abf96c286313d93dfffd44676a5f663870a78ba4e2cb78d84cd04a43a7643f80b1e08cbffb90396a8bae9a69cf8ea306cedc02811ccb4d9688e75346bee50084dd0225712bda9152ae0a1b635a952d13f"}}, &(0x7f0000002c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, &(0x7f0000002ec0)={0x44, &(0x7f0000002cc0)={0x20, 0xf, 0x31, "3f2d22fb986d02cf00c9c2abb90cd90dc4ef5a49f860a665326e1dfaa64c43fe037b564b5694804b61073e166f16d713ba"}, &(0x7f0000002d00)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000002d40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002d80)={0x20, 0x81, 0x1, '_'}, &(0x7f0000002dc0)={0x20, 0x82, 0x2, "3f82"}, &(0x7f0000002e00)={0x20, 0x83, 0x3, "c08f4a"}, &(0x7f0000002e40)={0x20, 0x84, 0x3, "9e914c"}, &(0x7f0000002e80)={0x20, 0x85, 0x3, "452dfa"}}) fcntl$getown(r1, 0x9) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000002f40)={0x58, 0x400, 0x3, 0xc}, 0x10) syz_open_dev$dvb_frontend(&(0x7f0000002f80), 0x9, 0x100) syz_mount_image$fuse(&(0x7f0000002fc0), &(0x7f0000003000)='./file0\x00', 0x2, &(0x7f0000003040)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@default_permissions}], [{@euid_eq={'euid', 0x3d, r6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '[(,&\x8e[*$'}}, {@uid_lt={'uid<', r6}}, {@flag='sync'}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'IPVS\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'batadv\x00'}}, {@euid_lt={'euid<', r6}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}, 0x0, 0x0, &(0x7f00000031c0)) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000003240), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x30, r11, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x69b7, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}}, 0x40000) r12 = syz_open_dev$vcsn(&(0x7f0000003340), 0x3, 0x100000) landlock_restrict_self(r12, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000003380)={0x101fc, 0x0, 0x100000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r13, &(0x7f0000004580)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004540)={&(0x7f0000003400)={0x1114, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7d}, @val={0x8}, @val={0xc, 0x99, {0x9, 0x3f}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfd8b}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x10000}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80000000}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xa6, 0xc5, "f3c09b5f10a429781be08b875a14057d41a6c58f75a902910f0b8823e7c10272b2d12fdc70d14f6b5649faee49badfe964b12d163f933e971b1b6ddb7b7e869d9c2beeea0ecd4352ca84227427fa2d4003775ac622b100a40a96eb3a5b069a98c0b7c567bb1004b10119e55d11bd3971f01af3e24ad94c317eb803b090c52f9a2117e79cd2878af1fd339fa77ac6667d90dd6014b15f9343b515a8f7ab5ab2747894"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x69}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0x1114}, 0x1, 0x0, 0x0, 0x10}, 0x4091) r14 = syz_open_dev$ublk_chdev(&(0x7f0000004700), 0x0, 0x40002) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000046c0)={@fallback=r14, 0x7, 0x0, 0x2, &(0x7f00000045c0)=[0x0], 0x1, 0x0, &(0x7f0000004600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004640)=[0x0], &(0x7f0000004680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004740)={0x50, 0xffffffffffffffda, r5, {0x7, 0x2d, 0x1, 0x20002030, 0x3, 0x2, 0xffffffab, 0x6, 0x0, 0x0, 0x40, 0x81}}, 0x50) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000004cc0)={0x14, &(0x7f0000004bc0)={0x0, 0xd, 0xa6, {0xa6, 0x9, "d009f144f0714e98d393e9b50900ed2c46965da71eba57c828b15549f70c069290b21bc9ec1ac73d7353bf9dad4a00e92a7363959addb0eba96fbb08db3c3c7f6d591092477ec39d0769a141df5d8d150d366bc962cd64b01ce07094d2ba177ac264b359eda12c06a4df68183506f4d61814dbdd34937a29ad421a730cbbf6ec5099bcaa78a61783b40217471ad907ab6200dd4b5dee990746fa1ed5cc61f90f1e0eafee"}}, &(0x7f0000004c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}}, &(0x7f0000004f80)={0x44, &(0x7f0000004d00)={0x40, 0xc, 0x9f, "9623ced6b82c4151f4fb1fa9f9812994214fd39a35d511bed335e43334420e8364c73810cc1b98bba16ade56d915eb45a0c3f7ab49fa39e99105aa9b0f4874edf6ac4d8464bb12e8e98ec9d745c1329291564b245dfa4eca89231f58dd7d52a037b67e663a374ae51b8acfd2bb7c9e13dc043d08c7b467efa29d3bcd86941acbd4ca0dba9dcc932b42a8f44d7a3d5a655ab4732127985af9dcf0ee2fdc609c"}, &(0x7f0000004dc0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000004e00)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000004e40)={0x20, 0x81, 0x1, "83"}, &(0x7f0000004e80)={0x20, 0x82, 0x1, "99"}, &(0x7f0000004ec0)={0x20, 0x83, 0x1, "cb"}, &(0x7f0000004f00)={0x20, 0x84, 0x4, "0a6708ac"}, &(0x7f0000004f40)={0x20, 0x85, 0x3, "a23752"}}) 4.874945713s ago: executing program 7 (id=1741): r0 = socket(0x11, 0xa, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x132, 0xffffffffffffffff, 0x6ad42000) r1 = shmget$private(0x0, 0x13000, 0x400, &(0x7f0000feb000/0x13000)=nil) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x400c) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 4.803911534s ago: executing program 7 (id=1742): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r4, 0x74c77000) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1], 0x0) r5 = dup(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x20000000000001bf, &(0x7f00000002c0)=ANY=[@ANYRES16=r4, @ANYRESOCT=r0], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xe, 0x0, &(0x7f0000000080)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0xffffffffffffff8f) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd86) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac74fcaab9925fabaa303bac61", "38e51009894cae17d2b361d9fedae469737f49b6a39d85a1ca87cbbb9b8e4809", "f16f995bdf5e1d0f32a39b81f061d8cf37f3a57c678b2356afda00", "87e20d1a690faf456b2d5369", 0x7afc, 0x3, 0x4, 0x6fa, 0x7ff}}) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) read$FUSE(0xffffffffffffffff, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001a00010028bd7000fedbdf2481808000000000000000000008000f000180000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x40048c0}, 0x884) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) syz_open_dev$video(&(0x7f0000000280), 0x8001, 0x0) 3.372136257s ago: executing program 7 (id=1743): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a0009000000090401"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) unshare(0x22020400) (async) unshare(0x22020400) syz_open_dev$loop(&(0x7f0000000100), 0x272, 0x4000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x272, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r1, 0x0) (async) fanotify_mark(r3, 0x1, 0x4800003e, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f0000000040), 0x8) (async) read$rfkill(r5, &(0x7f0000000040), 0x8) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f00000003c0)={0x18, r4, 0x5, 0xfffffffffefffffb}) syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x5, 0x0, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="2903b17190685c4721661014a2dd191408000000000000005cecff13298675c762cae0c83d6654e4e7"]}, {0x2, &(0x7f0000000440)=ANY=[@ANYBLOB='\n']}]}) (async) syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x5, 0x0, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="2903b17190685c4721661014a2dd191408000000000000005cecff13298675c762cae0c83d6654e4e7"]}, {0x2, &(0x7f0000000440)=ANY=[@ANYBLOB='\n']}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000000100)={0xc00, 0x35315258, 0x780, 0x100001e0, 0x0, @discrete={0x8288}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4a300, 0xcd) (async) openat(0xffffffffffffff9c, 0x0, 0x4a300, 0xcd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 2.536112108s ago: executing program 1 (id=1746): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r0, 0x0) 2.028096653s ago: executing program 1 (id=1748): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x80000019, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007b80)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_connect$uac3(0x5, 0x95, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x249c, 0x9002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x5, 0x38, 0x5, {0x8, 0xb, 0x2, 0x1, 0x1, 0x22, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa, 0xfffffac9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0x20, 0x1, {0xa, 0x25, 0x25, 0x0, 0x5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x7f, 0x1, 0x5, 0x81}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x3, 0x2, "bc293cbd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x2, 0xfb, {0xa, 0x25, 0x25, 0x40, 0xf, 0x6}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x2, 0x6, 0x0, 0x10}, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x4, 0x3}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x82c}}, {0xd3, &(0x7f00000002c0)=@string={0xd3, 0x3, "101d8f003f5d8d0f13cfcf485a90f576064d138cc2ccf09f41a6ba202e9112293b7c079e521fa94aff493debc60bd7c4868bb2d48f6c068fd23ec6b4a680dada2964e1907e9908e1b1b078e953866d7d17caef01e3b7c9908329d09f0309853d6078d143bd35ca821c9c80831bd5f34fd5b087da1c8349571878ddfbcd0c443807231d40990d09c41229bf29810b549386b37671d3b3e94e4a91197715112efe187e27f391291a6861ebb115e0ba836eef73caa0f86a69b87ce3210cfb2c601e35fc635f64249b3d86d191acd27e89a547"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x36, &(0x7f0000000400)=@string={0x36, 0x3, "b60256c46c9616d14bf876fba962e4a952bd161e6d99558e69acceb630dce6b31eb31b24e710b814d37de1585405daa0ab279b93"}}, {0x22, &(0x7f0000000440)=@string={0x22, 0x3, "d84067c8cdbe7c298d65e9aad7715421c0177dc70f86a8e9a9ec127d0287319e"}}]}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1495b0328ff77991) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220c000000676f16a6040000be5a7b2488"], 0x0}, 0x0) 1.894038886s ago: executing program 6 (id=1749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000440000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000001000000", @ANYRES32=r4], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccde, 0xc000, 0x0, 0x3be}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x2220, 0x1, 0x3}, 0x18, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xffe0}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x3f, 0x6, 0x2}, 0x1}}]}, {0xfffffffffffffd70}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.864779795s ago: executing program 7 (id=1750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000000000000000003aed938907dc74b5b6aca3751f83400000a28000000000a050000000000000000000300000308000240000000050900010073797a300000000028000000000a010400000000000000000300008a0900010073797a30000000000800024000000007140000001000"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r4) ioctl$FBIOGET_CON2FBMAP(r4, 0x460f, &(0x7f0000000000)={0x14, 0x1}) 1.797232471s ago: executing program 5 (id=1751): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x40}}, 0x10) r2 = socket(0x10, 0x803, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x3, 0x20000, 0x0, 0xffffffffffffffff}, &(0x7f0000000080)=[0x0], 0x1, 0x0) r3 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @private=0xa010102}, 0x10) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x1, 0x20000, {0xa, 0x78, 0x22, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000008d90467a040b0180000010902240001010250080904d328e289012102092102000a0122a209090581030000050409"], &(0x7f0000000340)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x9e, &(0x7f0000000380)=@string={0x9e, 0x3, "4d0d79ff458089b77b300f6f379c4a1bf8a2c15cca17635ae2a3ec48546e61f28453db1ed34779c41158b63ae0b54067ee4d9373928fd8c223d11ad56b8570ca610240469c29334fdbb2de6614ca8dbe4ca1ba541edf7bbde18b9df43be82b40e3122552d71752c4f59daa513c98ce675ce9b31f5b101d5145eafb0c149b1c95a9350596780219d218c9b25b6522b3b509a1e5e0049011967c12fe78"}}, {0xd2, &(0x7f0000000200)=@string={0xd2, 0x3, "cbc6cfce671025ddf0518093ad2d1dca7f71805e2241c185fdf04981c6ac47bdd0b920cd0e6230927f207e20e25a33c3f36cb25bc6351d457098349cba9005356f008ad7cea8d78421e659f93b61ddb685ace965ac1da4393023f1574d7d579cd1e2938cb0be1da32ef08ffb157d45bc1d039495631a97f5eec5770ef523da3f7e240bb97c26b84e905c133977169cb8a491e8065773f5d2d4fef8cb235c24be0956d7e797ce354f457ed2eee759f6a34d097bc9758d68ac885a86796ee73cf67dd0106db23a4cf8a6466eb40dda25df"}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1c4f, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xe7}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x0, 0xa, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.627050472s ago: executing program 7 (id=1753): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) r2 = syz_usb_connect(0x1, 0x26c, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xdd, 0xdf, 0xd2, 0xff, 0x19d2, 0xff72, 0x256, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x25a, 0x1, 0x81, 0x0, 0x20, 0x9, "", [{{0x9, 0x4, 0xa4, 0x4, 0x3, 0xff, 0xff, 0xff, 0x3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "2d890c0e1b"}, {0x5, 0x24, 0x0, 0xf2a4}, {0xd, 0x24, 0xf, 0x1, 0xf1, 0x7, 0x8, 0xfa}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x3ff}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}, @country_functional={0xc, 0x24, 0x7, 0x3, 0x2f0, [0x0, 0x3, 0x5]}]}], [{{0x9, 0x5, 0x6, 0x2, 0x3ff, 0xe, 0x5f, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xeb, 0x6}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x9, 0x6, 0x7, [@generic={0x88, 0xb, "a060be220b8021f867ff650a55042feee6b9e53567933f5d366ac18bf724fffbdbff9c2c6b6f998021c5ba0e81dd2b88be369c6ff8013d68c695576a380b9526c97e9c9bc25e8ce3fe3fb1246c576c365067d9be730ac07bd96c6d22399300e97109d11310264d2cae289393162225a6c1718ef71c8292c7e70d4ea38b8536923834229b5b70"}, @generic={0xb6, 0xc, "f287fe87860422110e79b24f0bdae04bb6b0aa1dae289230daf472b7095bc128b3db8f124cf2439da73860a38f3febd25a7581545ec0182e5b5eb4bc07a780ca15725bb0cc12dd791acf6cfb00a1964b450eaf0e13a45f92fc98eac7166f9c948629693b2fff5a7b2d0132d13527efe88d62cd0e7261c22b13a1c343cdb0407b78d694feca58f5b8ff739c5ebfd681d66f2f53bd4f989e74dc3daf677b61387ac730f121926fe57648e094c18a079dc6a1af9be2"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0x6, 0x6, 0x9, [@generic={0xb4, 0x3, "55c477d95747e9b775b1dd378b814d9025ea2f4b1e3f664783f16ee63a0700632c6bb7f70cd9246bb12ee02efa94a007b934daf7d8398d870508a3061f110b96a1e34c5a4cd1333cd9349843df3850927583514fc36219561cffe6edd68fe437c05771f409d734156df5b7e526e3dc651a9bd9d21d4e29c4d0a323b63125a61b5dd42051f7f69863d55158143f4d9c68a1adc8770772ac8bbfd246ae93f169f00b2e2211f498706ad4f18eadf09ed9b3ca4b"}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x310, 0x6e, 0x8, 0x9, 0xff, 0x7}, 0x1a, &(0x7f00000004c0)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x1, 0x8, 0x171}, @wireless={0xb, 0x10, 0x1, 0x2, 0x42, 0xd, 0x9, 0x0, 0x5}]}, 0x1, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x42f}}]}) syz_usb_control_io$sierra_net(r2, &(0x7f00000007c0)={0x14, &(0x7f0000000740)={0x20, 0x11, 0x15, {0x15, 0x21, "84773d6aae2a61e1ca331d8d5f71dd63442e6e"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000000cc0)={0x1c, &(0x7f0000000800)={0x60, 0x10, 0xd, "04d335ec6ccc6cd15247235216"}, &(0x7f0000000840)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c80)}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000240)='\x00W', 0x2}], 0x1) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) r4 = syz_io_uring_setup(0x4a08, &(0x7f0000000100)={0x0, 0xa0f3, 0x2, 0x1, 0x58}, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000001800)={0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) timer_create(0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x4000000001) recvmmsg$unix(r5, &(0x7f0000001780)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000e00), 0x0, &(0x7f0000000e40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000000f80)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001000)=""/161, 0xa1}, {&(0x7f00000010c0)=""/6, 0x6}, {&(0x7f0000001100)=""/242, 0xf2}, {&(0x7f0000001200)=""/160, 0xa0}, {&(0x7f00000012c0)=""/196, 0xc4}, {&(0x7f00000013c0)=""/147, 0x93}, {&(0x7f0000001480)=""/183, 0xb7}, {&(0x7f0000001540)}, {&(0x7f0000001580)=""/27, 0x1b}, {&(0x7f00000015c0)=""/169, 0xa9}], 0xa, &(0x7f0000001740)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x10101, &(0x7f0000001840)={r6, r7+10000000}) io_uring_register$IORING_REGISTER_FILES(r4, 0x23, &(0x7f0000000040), 0x0) 1.354577444s ago: executing program 6 (id=1754): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.191401622s ago: executing program 6 (id=1755): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x80000000, 0x101, 0x1e, 0x1b, 0x18, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x5}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @local}, 0x0, 0x0, 0x0, 0x0, 0x9f3, &(0x7f00000000c0)='pim6reg1\x00', 0xd0c1, 0x0, 0x9}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x2c, r9, 0x1, 0x70bd2d, 0xfffffffa, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$OCFS2_IOC_RESVSP64(r7, 0x4030582a, &(0x7f0000000100)={0x1, 0x1, 0x101, 0x7f, 0x22, 0x9}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000019030000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c00148008000140"], 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r12, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffe0}, {0x2, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4009c}, 0x4008000) syz_usb_connect$uac3(0x4, 0xa0, &(0x7f0000000080)=ANY=[], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_CROP(r13, 0x4014563c, &(0x7f0000000300)={0x6, {0x5, 0xe02, 0x327f, 0x8}}) 1.037316599s ago: executing program 4 (id=1757): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000440)={0x0}) close(r0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') openat$cgroup(r1, &(0x7f0000000c40)='syz1\x00', 0x200002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_tables_targets\x00') ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x0, 0x3, 0xd59f80, 0x5, 0x2800, 0x10, 0x3, 0x2, 0x2800, 0x0, 0x0, 0x0, 0x1, 0x10, {0x401}, 0xce, 0x9}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05000000000300"/18, @ANYRES32=r9, @ANYBLOB="39000e008000fc00ffffffffffff080211000000080211000000000000000000000000006400138825030084012a0100710701ffff0000bd68000000080026006c090000050018013a00000008000c006400000008000d00fdffffff"], 0x78}}, 0x0) r10 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 699.757831ms ago: executing program 4 (id=1758): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, @local, {[@dstopts={0x2c}]}}}}}, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_getnexthop={0x20, 0x6a, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x4040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f00000004c0)={0x80004000, 0x2, 0x80000001, 0xa1ef, 0x3}, 0x18, 0x1000) 576.69397ms ago: executing program 4 (id=1759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xcc4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xd, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc98, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_POLICE={0xc60, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4f2, 0x1000, 0x1, 0x27, 0xc7, 0x4, 0x80000000, 0x2, 0x50e, 0x8, 0x200, 0x931, 0x1, 0x1, 0x5, 0x1, 0x4, 0x9, 0xd, 0x10, 0x4, 0x7fffffff, 0x7, 0x80000000, 0x3, 0x7ff, 0x4, 0x0, 0xedb, 0x8, 0x32, 0x7fffffff, 0x5, 0x3, 0x1, 0xfffffff9, 0x20000, 0x0, 0x8001, 0xddef, 0x0, 0x3ff, 0x5, 0x8, 0x4, 0x6, 0x39af4701, 0x7f7, 0x6, 0x3e3, 0x8, 0x3, 0x1, 0x7, 0x0, 0x1f, 0x1d1, 0x2, 0x1, 0xffff, 0x6, 0xfff, 0x4, 0x8, 0x2, 0x5, 0x7f, 0x1, 0x753, 0x12c0, 0xfffffff8, 0x2, 0xe038, 0x1, 0x200, 0x5, 0x4, 0x0, 0xe, 0xfffff81f, 0x0, 0x8, 0xffff, 0xfff, 0x8, 0xfb7, 0x9, 0x101, 0xd91, 0x8, 0x7ec0b36e, 0xf9, 0xfffeffff, 0x7, 0x8, 0x7, 0xffff0000, 0x6, 0x0, 0x5, 0xf243, 0x7ff, 0x3, 0x101, 0xabd, 0xff, 0x1cda, 0x0, 0x2, 0x0, 0x0, 0x7, 0xfffffffe, 0x10001, 0x8, 0x401, 0x8, 0x80000000, 0x6, 0x1, 0x11, 0x6, 0x61, 0x1000, 0x3674dab7, 0x8, 0xfffffffa, 0x3, 0x2, 0x8000, 0x0, 0xfffffffa, 0x8001, 0x0, 0x7, 0x0, 0x5, 0x10001, 0x45dd, 0x10001, 0xe9aa, 0x0, 0x8, 0x3, 0x80000001, 0xfffffffa, 0x1, 0x9, 0xfffffffd, 0x6, 0x7, 0x200, 0xc, 0x3, 0x3, 0x7ffd, 0xf, 0xa7, 0xff, 0x2, 0x6, 0x2, 0x3, 0x8001, 0x2, 0x9, 0x8, 0x7f, 0x0, 0x477d, 0x0, 0x7, 0x331, 0x3, 0x3, 0x7, 0x5, 0x4, 0x1000, 0x2, 0x243, 0x8, 0x4, 0x7ff, 0x100, 0x4, 0x4, 0x7, 0x7, 0xac, 0x80000000, 0x5, 0x1af, 0xe0, 0x9, 0x419, 0x3, 0x1000, 0x8, 0x1, 0x400, 0x8, 0x2, 0x1, 0x5, 0x4, 0x0, 0x81, 0x40000, 0x7, 0x90, 0x5, 0x2, 0x1e9, 0x10, 0x1, 0x9, 0x2, 0x4, 0x401, 0x5, 0x1, 0x8, 0x80000000, 0x80000000, 0x4b06889e, 0xa6e2, 0x1000, 0x1, 0x8, 0x0, 0x10001, 0x0, 0xb0f, 0x6, 0x3, 0x80, 0xc, 0x3800, 0x8, 0xc, 0x7, 0xd, 0x3ff, 0x3, 0x83, 0xfff, 0x231, 0x0, 0x1, 0xaa73, 0x4, 0x4, 0x8, 0xbf6c, 0xe7ca]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x7, 0x6, 0x7, 0x4, {0x5, 0x1, 0x9, 0x7, 0x3}, {0x7, 0x0, 0x0, 0xe0b, 0x9, 0x1}, 0xfffd, 0x101, 0x372}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7fff, 0x3fb, 0x5a5d, 0x0, 0x1, 0x0, 0x8, 0x9, 0x0, 0x8, 0x6, 0x5, 0x10, 0x8, 0x5, 0x7, 0x1, 0x2, 0xc2, 0xe00, 0xfffffffd, 0x50e9, 0x0, 0x5, 0x5, 0x4, 0x7f, 0x130, 0x0, 0x10001, 0x8, 0x6, 0x9, 0x1, 0x1, 0x7, 0x5, 0x22, 0x4, 0x0, 0x8, 0x1, 0x7, 0xd4c, 0x2, 0x1, 0x8, 0x1, 0x1, 0x5, 0xf, 0x1, 0x7, 0xfa, 0x0, 0x0, 0x7, 0xb362, 0x0, 0x4, 0x3, 0x3c, 0xffff, 0xfffffff0, 0x4, 0x3, 0x5e17f105, 0xeb8, 0x77, 0x7, 0x7, 0xfff, 0x0, 0x3, 0xa95d, 0x8, 0x0, 0x1, 0x80000001, 0x5b29, 0x3, 0x6, 0xff, 0x401, 0x81, 0x212135b9, 0x3, 0xbe6, 0x1, 0xb, 0x1ff, 0x647, 0x0, 0x8, 0x8, 0x7, 0x71180000, 0x7fff, 0x2, 0xfffffb20, 0xfff, 0xffffffd9, 0x4, 0xeef9, 0x7f, 0x6, 0x9, 0xf4, 0x41, 0x200000, 0x8, 0x3, 0xffff, 0x96, 0x0, 0x4, 0x4, 0x1, 0x4, 0x80, 0x2, 0x187, 0x9, 0x0, 0xfffffff8, 0x4, 0x1ed, 0x7, 0x3, 0xfffffffa, 0x0, 0xe09, 0x5, 0x4, 0xfff, 0x1dd6, 0x6, 0x7, 0x80000000, 0x7, 0x1, 0xfce5, 0xfffffff9, 0x0, 0x14a, 0xff, 0x100, 0x1aac, 0x1000, 0xfff, 0xe93, 0x3, 0xd2ad, 0x8, 0x81, 0x7ff, 0x2, 0x7d5, 0x2, 0xffff0c9c, 0x6, 0x5, 0xcf000000, 0x6, 0x8, 0x4, 0x4, 0x2, 0x6, 0x8000, 0xfffffffd, 0xc26, 0x5, 0x9, 0x9, 0x7fff, 0x6, 0x1, 0x200, 0x0, 0x400, 0xa, 0x81, 0x10000, 0x83a, 0x7, 0x2, 0x7, 0x5, 0x26bd, 0xc, 0x401, 0x7, 0x3a5b, 0x2, 0x8001, 0x9, 0x5c9, 0x6, 0xff, 0x8, 0x5, 0xd, 0x2, 0x481, 0x401, 0xa1, 0x43a5, 0x2, 0x1, 0x2, 0xacaf, 0x2, 0x6, 0x85, 0xbe, 0x6, 0x4, 0x3, 0x80000000, 0x7ff, 0x4f, 0x0, 0x5, 0x7, 0xed01, 0x4, 0x1, 0x8, 0x100, 0xffff, 0x8, 0x76, 0x3ff, 0xc2, 0x8, 0x8, 0x10001, 0x0, 0x1ff, 0x1000, 0xfffffbff, 0x10000, 0x7b0, 0x3, 0x6, 0x8, 0x10001, 0x4, 0x2, 0x9, 0x4, 0x2, 0xf, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3d3}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xd, 0xfffffffc, 0x6, 0x28, 0x9, 0xffffffaa, 0x5, 0x81, 0x3, 0x43, 0x7fff, 0x0, 0x3, 0x8, 0x1ff, 0x3c, 0xef5, 0xfffffffb, 0x9, 0x1, 0x8, 0x25, 0xf472, 0xffffffff, 0x9, 0x0, 0x8, 0x8b7, 0xfffffffe, 0x10, 0x9, 0x1, 0x9, 0x7, 0x7, 0x9, 0xb5b3, 0x9, 0x200, 0x4, 0x9b6a, 0x2, 0x9, 0x6, 0xe2b, 0x4, 0x7, 0xfffff49c, 0x12c, 0xb9, 0x2, 0x8, 0x101, 0xff, 0x8001, 0x5, 0x5, 0x3, 0x1, 0x9, 0x8, 0x1, 0x6, 0x2c0f0303, 0x2, 0x80000001, 0x7fffffff, 0xbbb, 0x5, 0x3, 0x4, 0x1, 0x4, 0x5a12, 0x9, 0x3, 0x9, 0x7, 0x4, 0x1, 0x93, 0x800, 0x4, 0x8001, 0x1d, 0x48, 0x0, 0x7, 0x5883, 0x2, 0x5, 0x80000001, 0xb97f, 0x8, 0x9, 0x8, 0x3, 0xc, 0x6, 0x9, 0x8, 0x8, 0x3, 0x100, 0xfffffff8, 0x120, 0x5, 0x80000000, 0x8, 0x1c, 0x10400, 0x3ff, 0x1, 0x400, 0x5, 0x5, 0x1, 0x9, 0x9, 0x0, 0xffffff80, 0x8, 0x401, 0x6, 0xd4, 0x8, 0x800, 0x6, 0x8806, 0x1, 0x2, 0x20000000, 0x10001, 0x759f, 0x9, 0x100, 0x0, 0x9, 0x5, 0x3, 0xb43, 0x80000001, 0x4, 0xc, 0x703, 0x7f, 0x6, 0x7, 0xffff, 0xd, 0x1000, 0x7, 0x4, 0x8001, 0x5, 0x7, 0x0, 0x400, 0x9, 0x8, 0x4, 0x5, 0x0, 0x9, 0x442, 0x4, 0x5, 0xcb5702, 0x1, 0xf1f9, 0x30, 0xbf1, 0x1, 0x4, 0x0, 0xa2db, 0x2, 0x5, 0x8, 0x3, 0x100, 0x8, 0x7, 0x7, 0xf6, 0x7fff, 0xb, 0x8, 0x3c35, 0x8, 0x7, 0x5, 0x7ff, 0x1, 0x100000, 0x401, 0x4, 0xfffffc01, 0xb, 0x1, 0x8, 0x1, 0x1, 0x9187, 0x3ff, 0x5, 0x9, 0xc80, 0x0, 0x8, 0x1, 0x8, 0x400, 0xfffffff7, 0x7, 0x18, 0x80000000, 0x2, 0xc, 0x2, 0x0, 0x38, 0x1c0, 0x0, 0xd54, 0x40, 0x400, 0xfffd, 0x6, 0x9, 0x49, 0x1b, 0xe0, 0xe9, 0x44b1, 0x3, 0x1, 0x3, 0xffff, 0xb1c, 0x2, 0x7fff, 0x40, 0x7, 0xf, 0x1, 0x6, 0x3, 0x3, 0xfffffff7, 0xffffffff, 0x25, 0x2e2bae5d, 0xfffff4c0, 0xc]}]}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_INDEV={0x14, 0x3, 'erspan0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x4}}]}}]}, 0xcc4}, 0x1, 0x0, 0x0, 0x40000000}, 0x24000084) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4044080}, 0x4004400) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 538.268515ms ago: executing program 4 (id=1760): prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)={0x1c, r2, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000c54a4530bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b706000008ffffffcf6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce7"], 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1}, 0x94) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902600003010900080904000000010100000a240106000a00020102090401000001020000090401010101ffff00090501090004"], 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) write$tun(r4, &(0x7f0000000140)={@val={0x0, 0x22f0}, @val={0x2, 0x80, 0x2, 0xc2, 0xffff, 0x1}, @mpls={[{0x3ff}], @ipv6=@icmpv6={0x3, 0x6, "929da6", 0x8, 0x3a, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @ndisc_rs}}}}, 0x42) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 32) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r5, 0x5, 0x9d42, 0x28, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xe, 0x42, &(0x7f0000000000)="bf83759d711740e193bdb7c2909b", &(0x7f0000000040)=""/66, 0x5, 0x0, 0x19, 0x10, &(0x7f00000000c0)="44dfbb88b1c188630ae494d90fcfcc8aca508667a5205f4234", &(0x7f0000000100)="91be755cba54453a1b59b2c0d26cf38c", 0xb, 0x0, 0x4}, 0x50) 492.830661ms ago: executing program 6 (id=1761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x30, 0x70, 0x1, 0x70bd28, 0x25dfdc01, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x7, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_connect$uac3(0x0, 0xc5, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0xd8, 0xc0, 0x5, {0x8, 0xb, 0x2, 0x1, 0x1, 0x20, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x16, 0x200}, [@source_unit={0xc, 0x24, 0xb, 0xb, 0x1, 0x90a04d4c, 0x4, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xa}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x8}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x40, 0x3, 0x40}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0x9, 0x0, {0xa, 0x25, 0x25, 0xc, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4f, 0x3, 0x3, 0x23, "0cfeb2b5c8"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0xb9, 0x3, 0x6, 0x3}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x1, 0x7, 0x5, "6bda05", "bb8506"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x15, 0x0, {0xa, 0x25, 0x25, 0x7, 0xf, 0xc}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x9e19c5b883b2730b, 0x9, 0x9f, 0x7, 0x20, 0x7}, 0x6b, &(0x7f0000000200)={0x5, 0xf, 0x6b, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x88, 0xff00, 0x8000, [0xfebf30, 0x1241bab467366b0, 0xc000, 0xff41a0, 0x3f0f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0xf4, 0x81, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x8, 0x1e0f, 0x0, [0x3f, 0xc0]}, @ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x979, 0x0, 0x5, [0xffffc0, 0x3f30]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0xb9b, 0xff0f, 0x3, [0x3f00]}]}, 0x2, [{0x92, &(0x7f0000000280)=@string={0x92, 0x3, "93dbeb6868d45971c8e196eb0de87cbda4b484e2380dc4d32bdb7707d61746e7e62a7fd6f924fbab0074fd509bccd8d0a1082fbb39b6ccde3b626b1c31032f1adb35f779ff609667f23575c7a8f5aaef9387643f63c790a968ff4cfe76835ab141552762df1a29b10b80f190796c47925c56ac3c4bda517ed2d7a23167f1ae63daeb346abfc2d28c6d8d31518e20ea60"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2801}}]}) 219.47575ms ago: executing program 4 (id=1762): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4080850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a440000000c0a010100000000000000000a0000060900020073790100000000000900010073797a3100000000180003801400008004000180080003400000000104000640140000001100010000000000000000000300000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000d1c000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000d62000/0x3000)=nil) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000040000100fcff07000400000001000000040048801800018014001080040006800c000000030000000000000008000200", @ANYRES32, @ANYBLOB="ad1517e244e7231e1d7f23ad63b1be312edc7d4a087c7dab6b77d471cdbe1d4bae8942dc014675aee3d05344aa643add2ed45f93ccce32398db8e60c277f3a2b00"/78], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x64, 0x0, &(0x7f00000005c0)=[@acquire_done, @register_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x0, 0x0, 0x35}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000440)={0x0, 0x20, 0x38}}}, @decrefs={0x40046307, 0xfffffff9}], 0x0, 0x0, 0x0}) r5 = dup3(r4, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x8000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000045) sendmsg$nl_route_sched(r5, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xf, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40051}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x148, {0x2, 0x0, 0x100}, 0x8b, 0x0, 0x0, 0xff, 0x5, 0x4000084, 0xbf43, 0x20000008000007, 0x8, 0x400000000008, 0x200002, 0x2, 0xfffffffffffffffe, 0x4, 0x8, 0x8000000000408, 0x0, 0xfffffffffffffff7}}, 0xa0) r7 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r7, 0x5393, &(0x7f00000001c0)) 84.348627ms ago: executing program 1 (id=1763): r0 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="c5", 0x1, 0xfffffffffffffffb) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000000100)={0x20, r2, 0x0, 0x0, 0x0}) r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r3, r0}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f00000001c0)={&(0x7f0000000340)={'sha512\x00'}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') syz_usb_connect(0x3, 0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724", @ANYRES32=r4], 0x0) 0s ago: executing program 4 (id=1764): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0x4, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000840) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet(0x2, 0x800, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x18, &(0x7f00000002c0)="8a00000000000000", 0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008926e0db8dd9f488100010067656e650c2a4e801b766500001800028014000700"/52, @ANYRES32=r5, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): ace 123 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 8 [ 352.590405][ T5630] usb 2-1: config 129 interface 123 has no altsetting 0 [ 352.599074][ T5630] usb 2-1: config 129 has an invalid interface number: 123 but max is 0 [ 352.607957][ T5630] usb 2-1: config 129 has no interface number 0 [ 352.614313][ T5630] usb 2-1: config 129 interface 123 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 8 [ 352.624968][ T5630] usb 2-1: config 129 interface 123 has no altsetting 0 [ 352.635698][ T5630] usb 2-1: config 129 has an invalid interface number: 123 but max is 0 [ 352.644456][ T5630] usb 2-1: config 129 has no interface number 0 [ 352.651295][ T5630] usb 2-1: config 129 interface 123 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 8 [ 352.661810][ T5630] usb 2-1: config 129 interface 123 has no altsetting 0 [ 352.675500][ T5630] usb 2-1: New USB device found, idVendor=0499, idProduct=c455, bcdDevice=81.ab [ 352.685259][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.705237][ T5630] usb 2-1: Product: syz [ 352.713705][ T5630] usb 2-1: Manufacturer: syz [ 352.719704][ T5630] usb 2-1: SerialNumber: syz [ 352.729501][T10482] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 352.908380][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.123/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.953786][ T10] usb 2-1: USB disconnect, device number 96 [ 353.044634][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.053841][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.875413][T10503] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 353.894744][T10503] bond6 (unregistering): Released all slaves [ 354.265446][T10508] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 354.274723][T10508] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 354.312201][T10508] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 354.318222][T10508] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 354.329830][T10508] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 354.336247][T10508] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 354.344893][T10508] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 354.354309][T10508] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 354.371040][T10508] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.384679][T10508] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 354.411572][T10508] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 354.435609][T10508] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 354.476975][ T10] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 354.658715][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.706266][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.706355][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 354.706404][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 354.706428][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.730357][ T10] usb 2-1: config 0 descriptor?? [ 354.777996][T10522] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1240'. [ 354.778048][T10522] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1240'. [ 355.204512][ T10] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 355.459152][ T10] usb 2-1: USB disconnect, device number 97 [ 355.533110][T10528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.882350][T10531] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 355.954331][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 355.969627][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 355.979910][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 355.990166][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 356.003323][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 356.029877][ T5644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 356.041919][ T5644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 356.051262][ T5644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 356.064799][ T5644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 356.073662][ T5644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 356.496228][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 356.520156][T10544] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1248'. [ 356.593059][T10534] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.600856][T10534] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.608281][T10534] bridge_slave_0: entered allmulticast mode [ 356.616286][T10534] bridge_slave_0: entered promiscuous mode [ 356.624590][T10534] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.632222][T10534] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.639829][T10534] bridge_slave_1: entered allmulticast mode [ 356.647829][T10534] bridge_slave_1: entered promiscuous mode [ 356.682639][T10534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.695950][T10534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.731988][T10534] team0: Port device team_slave_0 added [ 356.740462][T10534] team0: Port device team_slave_1 added [ 356.781269][T10534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.788463][T10534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.790688][ T5630] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 356.852635][T10534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.872027][T10534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.879484][T10534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.908361][T10534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.921200][T10549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.931645][T10549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.982653][T10534] hsr_slave_0: entered promiscuous mode [ 356.989592][T10534] hsr_slave_1: entered promiscuous mode [ 356.996272][T10534] debugfs: 'hsr0' already exists in 'hsr' [ 357.002054][T10534] Cannot create hsr debugfs directory [ 357.003104][ T5630] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 357.016437][ T5630] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.027196][ T5630] usb 2-1: config 0 has no interface number 0 [ 357.039045][ T5630] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 357.051012][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.060697][ T5630] usb 2-1: Product: syz [ 357.065001][ T5630] usb 2-1: Manufacturer: syz [ 357.070676][ T5630] usb 2-1: SerialNumber: syz [ 357.078866][ T5630] usb 2-1: config 0 descriptor?? [ 357.294245][ T5630] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 357.313970][ T5630] uvcvideo 2-1:0.64: No valid video chain found. [ 357.330012][ T5630] usb 2-1: USB disconnect, device number 98 [ 357.365264][T10534] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 357.376754][T10534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 357.385179][T10534] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 357.396970][T10534] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.408519][T10534] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 357.419039][T10534] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.427088][T10534] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 357.438644][T10534] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.549528][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.568448][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.577979][T10534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.589359][T10557] tipc: Started in network mode [ 357.594433][T10557] tipc: Node identity 2, cluster identity 4711 [ 357.601666][T10557] tipc: Node number set to 2 [ 357.607602][T10557] tipc: Cannot configure node identity twice [ 357.628897][T10534] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.641573][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1250'. [ 357.657273][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.664540][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.825320][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.832738][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.949970][T10534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.002862][T10534] veth0_vlan: entered promiscuous mode [ 358.017900][T10534] veth1_vlan: entered promiscuous mode [ 358.052998][T10534] veth0_macvtap: entered promiscuous mode [ 358.064081][T10534] veth1_macvtap: entered promiscuous mode [ 358.087091][T10534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.117744][ T5644] Bluetooth: hci6: command tx timeout [ 358.128912][T10534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.145354][ T8316] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.156870][ T8316] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.173588][ T8316] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.182988][ T8316] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.324051][ T8311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.332826][ T8311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.393752][ T8311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.414293][ T8311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.596152][T10568] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 358.663485][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.678194][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.118123][T10576] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.127767][T10576] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.723681][T10576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.747285][T10576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.768108][T10593] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 360.197528][ T5644] Bluetooth: hci6: command tx timeout [ 360.422158][ T78] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.465398][ T78] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.525477][ T78] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.554117][ T78] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.104038][T10607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.149279][T10607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.395609][T10617] input: syz0 as /devices/virtual/input/input32 [ 361.403080][T10619] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1261'. [ 361.415161][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1261'. [ 361.776024][ T5723] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 361.948401][ T5723] usb 8-1: Using ep0 maxpacket: 32 [ 361.962567][ T5723] usb 8-1: config 2 has an invalid interface number: 13 but max is 0 [ 361.996954][ T5723] usb 8-1: config 2 has no interface number 0 [ 362.015879][ T5723] usb 8-1: config 2 interface 13 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.060584][ T5723] usb 8-1: config 2 interface 13 has no altsetting 0 [ 362.099748][ T5723] usb 8-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=52.92 [ 362.146607][ T5723] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.230324][ T5723] usb 8-1: Product: syz [ 362.262596][T10642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.276774][ T5644] Bluetooth: hci6: command tx timeout [ 362.288770][ T5723] usb 8-1: Manufacturer: syz [ 362.293400][ T5723] usb 8-1: SerialNumber: syz [ 362.353372][T10642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.466153][T10649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.508111][T10649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.544794][T10617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.593149][T10617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.654018][T10617] IPv6: addrconf: prefix option has invalid lifetime [ 362.787720][ T5723] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 362.865144][T10653] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 363.050732][T10655] kAFS: unable to lookup cell 'ÿ' [ 363.174509][ T5723] usb 8-1: USB disconnect, device number 2 [ 363.541345][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:2.13/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.035154][T10680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.062860][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 364.062878][ T29] audit: type=1326 audit(1780976089.101:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.7.1274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03acb9ce59 code=0x7ffc0000 [ 364.205866][ T29] audit: type=1326 audit(1780976089.101:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.7.1274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03acb9ce59 code=0x7ffc0000 [ 364.263766][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1274'. [ 364.327396][ T29] audit: type=1326 audit(1780976089.141:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.7.1274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f03acb9ce59 code=0x7ffc0000 [ 364.363347][ T5644] Bluetooth: hci6: command tx timeout [ 364.398584][ T29] audit: type=1326 audit(1780976089.141:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.7.1274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03acb9ce59 code=0x7ffc0000 [ 364.504457][ T29] audit: type=1326 audit(1780976089.141:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.7.1274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03acb9ce59 code=0x7ffc0000 [ 364.548361][ T29] audit: type=1326 audit(1780976089.161:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.7.1274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03acb9ce59 code=0x7ffc0000 [ 364.579977][ T29] audit: type=1326 audit(1780976089.161:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.7.1274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03acb9ce59 code=0x7ffc0000 [ 364.651596][ T29] audit: type=1326 audit(1780976089.171:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.7.1274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f03acb9ce59 code=0x7ffc0000 [ 364.703709][ T29] audit: type=1326 audit(1780976089.171:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.7.1274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03acb9ce59 code=0x7ffc0000 [ 364.734850][ T29] audit: type=1326 audit(1780976089.171:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.7.1274" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03acb9ce59 code=0x7ffc0000 [ 365.002719][T10708] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 365.771769][T10710] veth1_vlan: left allmulticast mode [ 366.109756][T10710] bridge0: left allmulticast mode [ 366.159583][ T8316] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.184157][ T8316] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.269049][ T8316] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.443306][T10724] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1282'. [ 367.265391][T10746] syzkaller0: entered promiscuous mode [ 367.292354][T10746] syzkaller0: entered allmulticast mode [ 367.512382][T10759] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 367.716067][T10579] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 367.900284][T10579] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 367.913604][T10579] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.926186][T10579] usb 8-1: config 0 descriptor?? [ 367.938413][T10579] cp210x 8-1:0.0: cp210x converter detected [ 368.046105][T10597] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 368.228317][T10597] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.240430][T10597] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 368.252703][T10597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 368.264091][T10597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 368.278653][T10597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 368.290928][T10597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 368.300897][T10597] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.316626][T10597] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 368.326704][T10597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.334862][T10597] usb 2-1: Product: syz [ 368.340684][T10597] usb 2-1: Manufacturer: syz [ 368.345483][T10597] usb 2-1: SerialNumber: syz [ 368.358196][T10597] usb 2-1: config 0 descriptor?? [ 368.366417][T10764] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 368.385288][T10597] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 368.400554][T10597] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 368.412151][T10757] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 368.421483][T10757] kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 368.433533][T10757] kvm: requested 121523 ns i8254 timer period limited to 200000 ns [ 368.443042][T10757] kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 368.453594][T10757] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 368.462978][T10579] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 368.472459][T10757] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 368.484679][T10757] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 368.494001][T10757] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 368.502623][T10757] kvm: requested 168457 ns i8254 timer period limited to 200000 ns [ 368.523534][T10757] kvm: requested 152533 ns i8254 timer period limited to 200000 ns [ 368.653789][T10780] FAULT_INJECTION: forcing a failure. [ 368.653789][T10780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.707547][T10780] CPU: 0 UID: 0 PID: 10780 Comm: syz.6.1298 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.707579][T10780] Tainted: [L]=SOFTLOCKUP [ 368.707586][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.707597][T10780] Call Trace: [ 368.707605][T10780] [ 368.707614][T10780] dump_stack_lvl+0xe8/0x150 [ 368.707797][T10780] should_fail_ex+0x412/0x560 [ 368.707897][T10780] _copy_to_user+0x31/0xb0 [ 368.707954][T10780] simple_read_from_buffer+0xe1/0x170 [ 368.708011][T10780] proc_fail_nth_read+0x1bb/0x230 [ 368.708063][T10780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.708093][T10780] ? rw_verify_area+0x2a6/0x4d0 [ 368.708127][T10780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.708155][T10780] vfs_read+0x20c/0xa70 [ 368.708190][T10780] ? __pfx___mutex_lock+0x10/0x10 [ 368.708284][T10780] ? __pfx_vfs_read+0x10/0x10 [ 368.708314][T10780] ? __fget_files+0x2a/0x420 [ 368.708345][T10780] ? __fget_files+0x3a0/0x420 [ 368.708368][T10780] ? __fget_files+0x2a/0x420 [ 368.708402][T10780] ksys_read+0x150/0x270 [ 368.708433][T10780] ? __pfx_ksys_read+0x10/0x10 [ 368.708471][T10780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.708510][T10780] do_syscall_64+0x174/0x580 [ 368.708553][T10780] ? trace_irq_disable+0x3b/0x140 [ 368.708605][T10780] ? clear_bhb_loop+0x40/0x90 [ 368.708631][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.708651][T10780] RIP: 0033:0x7f8eb535d68e [ 368.708671][T10780] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 368.708688][T10780] RSP: 002b:00007f8eb6298fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 368.708710][T10780] RAX: ffffffffffffffda RBX: 00007f8eb62996c0 RCX: 00007f8eb535d68e [ 368.708725][T10780] RDX: 000000000000000f RSI: 00007f8eb62990a0 RDI: 0000000000000004 [ 368.708737][T10780] RBP: 00007f8eb6299090 R08: 0000000000000000 R09: 0000000000000000 [ 368.708758][T10780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.708770][T10780] R13: 00007f8eb5616038 R14: 00007f8eb5615fa0 R15: 00007f8eb573fa48 [ 368.708803][T10780] [ 368.979819][ T5794] usb 2-1: USB disconnect, device number 99 [ 369.041856][T10579] cp210x 8-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 369.064454][T10579] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 369.089196][T10579] usb 8-1: cp210x converter now attached to ttyUSB0 [ 369.122045][T10579] usb 8-1: USB disconnect, device number 3 [ 369.175215][T10794] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 369.193591][T10579] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 369.204775][T10794] batman_adv: batadv0: Adding interface: wlan0 [ 369.214029][T10579] cp210x 8-1:0.0: device disconnected [ 369.220171][T10794] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.261616][T10794] batman_adv: batadv0: Interface activated: wlan0 [ 369.307976][T10797] x_tables: duplicate underflow at hook 3 [ 369.648940][T10810] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 369.743942][T10814] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1309'. [ 369.888138][T10820] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 369.910774][T10801] binder: 10800:10801 ioctl c0306201 0 returned -14 [ 369.910774][T10802] binder: 10800:10802 ioctl c0306201 0 returned -14 [ 369.932760][T10820] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 369.956446][T10801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.994895][T10820] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 370.005489][T10801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.043468][T10820] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 370.057364][T10820] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 370.079951][T10820] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 370.098168][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 370.098185][ T29] audit: type=1326 audit(1780976095.131:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0199ce59 code=0x7ffc0000 [ 370.106466][T10820] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 370.133490][ T29] audit: type=1326 audit(1780976095.131:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0199ce59 code=0x7ffc0000 [ 370.164984][T10820] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 370.199268][T10820] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 370.214903][ T29] audit: type=1326 audit(1780976095.131:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0199ce59 code=0x7ffc0000 [ 370.230697][T10820] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 370.291103][ T29] audit: type=1326 audit(1780976095.131:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0199ce59 code=0x7ffc0000 [ 370.319099][ T29] audit: type=1326 audit(1780976095.141:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f0199ce59 code=0x7ffc0000 [ 370.378161][ T29] audit: type=1326 audit(1780976095.141:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f6f0199ce59 code=0x7ffc0000 [ 370.409212][ T29] audit: type=1326 audit(1780976095.171:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0199ce59 code=0x7ffc0000 [ 370.436686][ T29] audit: type=1326 audit(1780976095.171:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0199ce59 code=0x7ffc0000 [ 370.469135][ T29] audit: type=1326 audit(1780976095.171:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0199ce59 code=0x7ffc0000 [ 370.538819][ T29] audit: type=1326 audit(1780976095.181:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10827 comm="syz.1.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0199ce59 code=0x7ffc0000 [ 370.995510][T10858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.996213][T10585] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 371.015121][T10858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.156152][T10585] usb 2-1: Using ep0 maxpacket: 8 [ 371.163333][T10585] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 371.172040][T10585] usb 2-1: config 179 has no interface number 0 [ 371.178468][T10585] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 371.190127][T10585] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 371.201566][T10585] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 371.213002][T10585] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 371.224926][T10585] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 371.240067][T10585] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 371.256068][T10585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.282719][T10850] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 371.518831][T10843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.530863][T10843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.565410][T10597] usb 2-1: USB disconnect, device number 100 [ 371.565428][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 371.581397][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 371.688561][T10860] netlink: 'syz.7.1320': attribute type 22 has an invalid length. [ 371.733829][T10867] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1322'. [ 371.743203][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1322'. [ 371.755157][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1322'. [ 371.915274][T10871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.926519][T10871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.935673][T10871] netlink: 'syz.4.1324': attribute type 1 has an invalid length. [ 371.966691][T10871] 8021q: adding VLAN 0 to HW filter on device bond6 [ 371.990525][T10871] bond6: (slave geneve3): making interface the new active one [ 372.001558][T10871] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 372.010693][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.022079][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.034092][T10871] loop5: detected capacity change from 0 to 7 [ 372.046534][ T8312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.056275][T10871] Dev loop5: unable to read RDB block 7 [ 372.061974][T10871] loop5: unable to read partition table [ 372.068568][T10871] loop5: partition table beyond EOD, truncated [ 372.074810][T10871] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 372.594936][T10889] netlink: 'syz.1.1329': attribute type 10 has an invalid length. [ 372.619462][T10889] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1329'. [ 372.993947][T10897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.066215][T10579] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 373.091451][T10897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.138748][T10897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.189388][T10897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.240242][T10897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.279092][T10579] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.293728][T10897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.354054][T10897] netlink: 'syz.4.1332': attribute type 1 has an invalid length. [ 373.354071][T10579] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 373.403965][T10579] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.433090][T10579] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.475504][T10895] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 373.499505][T10579] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 373.512295][T10897] 8021q: adding VLAN 0 to HW filter on device bond7 [ 373.968138][T10585] usb 2-1: USB disconnect, device number 101 [ 374.396282][ T5794] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 374.556229][ T5794] usb 8-1: Using ep0 maxpacket: 32 [ 374.572467][ T5794] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.602738][ T5794] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 374.609310][T10931] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 374.617717][ T5794] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.631066][ T5794] usb 8-1: Product: syz [ 374.635313][ T5794] usb 8-1: Manufacturer: syz [ 374.640726][ T5794] usb 8-1: SerialNumber: syz [ 374.661268][T10931] netlink: 'syz.4.1342': attribute type 2 has an invalid length. [ 374.787155][T10933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.801837][T10933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.877796][ T5794] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.947642][ T5794] usb 8-1: USB disconnect, device number 4 [ 374.991224][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.373458][T10942] loop6: detected capacity change from 0 to 2640 [ 375.383611][T10942] buffer_io_error: 346 callbacks suppressed [ 375.383631][T10942] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.402957][T10942] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.411886][T10942] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.420902][T10942] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.484056][T10942] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.494071][T10943] loop6: detected capacity change from 2640 to 524288000 [ 375.504151][T10942] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.513560][T10942] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.522638][T10942] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.530918][T10942] ldm_validate_partition_table(): Disk read failed. [ 375.539272][T10942] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.552777][T10942] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.561566][T10942] Dev loop6: unable to read RDB block 0 [ 375.568530][T10942] loop6: unable to read partition table [ 375.577340][T10942] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 375.902843][T10959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.915865][T10579] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 375.934602][T10959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.110052][T10579] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 376.120178][T10579] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.128328][T10579] usb 8-1: Product: syz [ 376.132592][T10579] usb 8-1: Manufacturer: syz [ 376.137288][T10579] usb 8-1: SerialNumber: syz [ 376.144259][T10579] usb 8-1: config 0 descriptor?? [ 376.423388][T10962] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 376.432796][T10962] [U] [“)ÎU°}¸Ç”ÍÚJϬ}N°SEF*œ £‡¿ßÅNZÍÀF[F_H®¦'ª„W"ÓXÅ~¶ÎÏÚ;VA˜)^ˆ`Û1C':ZÂÞ÷ÃÃÚÞFOBÞ *?ÛŸC‹Z˜S¯Ý<8ZNÑ·š Ñ˜¾ÔEY TT<$CÐR¿Æ–»/VG¿Ðà {Y«~Y5\—;ƃZ–ÓDX ŸƒYÖA€Ì"XI®F¦{‚Å`A$í¡55?­É×S«AÃM¢ÅO‰¤«ÝÍ»*K€¶ [ 376.473382][T10962] [U] ÔO‡4 [ 376.493060][T10962] [U] œšU·©BÕ+ '~GIÞƒRQ^Á¿™,(-|¢ØÚŸ†Ë-<ƒ6&µÅH.Z9ÉÎ/ÚRJΩ°™³ËˆÅ+)Ö­KΦ.›NHÕA#LW#RF7–PÙªÛÍMAX€Ï]Œ¤›LN"KŒM +,G¶SB´HJ‚¹ËXÏ̧ÉCÎÝQ„ [ 376.577677][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 376.577704][ T29] audit: type=1326 audit(1780976101.611:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.4.1353" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 376.627369][ T29] audit: type=1326 audit(1780976101.621:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.4.1353" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 376.654217][ T29] audit: type=1326 audit(1780976101.671:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.4.1353" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 376.685215][ T29] audit: type=1326 audit(1780976101.671:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.4.1353" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 376.849388][ T29] audit: type=1326 audit(1780976101.671:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.4.1353" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 377.000021][ T29] audit: type=1326 audit(1780976101.671:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.4.1353" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 377.027963][T10977] create_pit_timer: 5 callbacks suppressed [ 377.027981][T10977] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 377.191056][T10579] usb 8-1: non-Atmel transceiver xxxxe500 [ 377.225361][ T29] audit: type=1326 audit(1780976101.671:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.4.1353" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 377.365951][ T29] audit: type=1326 audit(1780976101.671:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.4.1353" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 377.381814][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1355'. [ 377.404317][T10579] usb 8-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 377.473553][T10579] usb 8-1: Firmware version (0.0) predates our first public release. [ 377.504550][ T29] audit: type=1326 audit(1780976101.671:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.4.1353" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 377.536652][T10579] usb 8-1: Please update to version 0.2 or newer [ 377.578518][ T29] audit: type=1326 audit(1780976101.731:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10970 comm="syz.4.1353" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 377.619329][T10579] usb 8-1: atusb_probe: initialization failed, error = -19 [ 377.640912][T10579] usb 8-1: USB disconnect, device number 5 [ 378.265130][T11009] trusted_key: encrypted_key: insufficient parameters specified [ 378.467421][T11013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.548395][T11012] kvm: MONITOR instruction emulated as NOP! [ 378.568220][T11007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.599976][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.606600][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.684788][T11007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.005897][T10579] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 379.125985][T10597] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 379.166002][T10579] usb 8-1: Using ep0 maxpacket: 8 [ 379.173677][T10579] usb 8-1: unable to get BOS descriptor or descriptor too short [ 379.183390][T10579] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 379.198633][T10579] usb 8-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 379.210094][T10579] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.218293][T10579] usb 8-1: Product: syz [ 379.222538][T10579] usb 8-1: Manufacturer: syz [ 379.229316][T10579] usb 8-1: SerialNumber: syz [ 379.295927][T10597] usb 2-1: Using ep0 maxpacket: 32 [ 379.303447][T10597] usb 2-1: unable to get BOS descriptor or descriptor too short [ 379.313826][T10597] usb 2-1: config 0 has an invalid interface number: 77 but max is 0 [ 379.322615][T10597] usb 2-1: config 0 has no interface number 0 [ 379.329066][T10597] usb 2-1: config 0 interface 77 has no altsetting 0 [ 379.338332][T10597] usb 2-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=9c.90 [ 379.347727][T10597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.355855][T10597] usb 2-1: Product: syz [ 379.360447][T10597] usb 2-1: Manufacturer: syz [ 379.365160][T10597] usb 2-1: SerialNumber: syz [ 379.373622][T10597] usb 2-1: config 0 descriptor?? [ 379.454006][T10579] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 379.507401][T10579] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 379.528654][T10579] usb 8-1: USB disconnect, device number 6 [ 379.569079][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.794262][T10597] quatech2 2-1:0.77: Quatech 2nd gen USB to Serial Driver converter detected [ 379.804397][T10597] usb 2-1: qt2_attach - failed to power on unit: -71 [ 379.812581][T10597] quatech2 2-1:0.77: probe with driver quatech2 failed with error -71 [ 379.827052][T10597] usb 2-1: USB disconnect, device number 102 [ 380.081638][T11028] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1365'. [ 380.130643][T11028] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1365'. [ 380.217591][T11031] netlink: 'syz.1.1366': attribute type 3 has an invalid length. [ 380.516177][ T5794] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 380.689646][ T5794] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 380.713776][ T5794] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 64 [ 380.740366][ T5794] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.770654][ T5794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 380.785284][ T5794] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 380.807906][ T5794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.832486][ T5794] usb 2-1: config 0 descriptor?? [ 380.854482][T11035] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 381.322709][ T5794] elecom 0003:056E:010D.001A: unknown main item tag 0x0 [ 381.368352][ T5794] elecom 0003:056E:010D.001A: unknown main item tag 0x0 [ 381.403810][ T5794] elecom 0003:056E:010D.001A: unknown main item tag 0x0 [ 381.440054][ T5794] elecom 0003:056E:010D.001A: unknown main item tag 0x0 [ 381.466517][ T5794] elecom 0003:056E:010D.001A: unknown main item tag 0x0 [ 381.490753][ T5794] elecom 0003:056E:010D.001A: unknown main item tag 0x0 [ 381.515233][ T5794] elecom 0003:056E:010D.001A: unknown main item tag 0x0 [ 381.529326][T11035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.557083][ T5794] elecom 0003:056E:010D.001A: hidraw0: USB HID v1.01 Device [HID 056e:010d] on usb-dummy_hcd.1-1/input0 [ 381.559788][T11044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.578046][T11035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.627752][T11044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.681968][ T5794] usb 2-1: USB disconnect, device number 103 [ 382.023991][T11047] fido_id[11047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 382.272153][T11068] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.280055][T11068] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.289694][T11068] bridge0: entered allmulticast mode [ 382.467168][T11077] fuse: Bad value for 'user_id' [ 382.473194][T11077] fuse: Bad value for 'user_id' [ 382.602839][T11083] kAFS: unable to lookup cell 'ÿ' [ 382.728425][T11085] Invalid argument reading file caps for ./file0 [ 382.740828][T11086] Invalid argument reading file caps for ./file0 [ 383.029105][T11095] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1380'. [ 383.644970][T11114] bond4: entered promiscuous mode [ 383.662940][T11114] bond4: entered allmulticast mode [ 383.679396][T11114] 8021q: adding VLAN 0 to HW filter on device bond4 [ 385.707927][T10597] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 385.915913][T10597] usb 8-1: Invalid ep0 maxpacket: 16 [ 386.055887][T10597] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 386.235858][T10597] usb 8-1: Invalid ep0 maxpacket: 16 [ 386.241819][T10597] usb usb8-port1: attempt power cycle [ 386.325934][T10579] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 386.476227][T10579] usb 2-1: device descriptor read/64, error -71 [ 386.605965][T10597] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 386.626613][T10597] usb 8-1: Invalid ep0 maxpacket: 16 [ 386.725928][T10579] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 386.776296][T10597] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 386.797229][T10597] usb 8-1: Invalid ep0 maxpacket: 16 [ 386.808453][T10597] usb usb8-port1: unable to enumerate USB device [ 386.856304][T10579] usb 2-1: device descriptor read/64, error -71 [ 386.966188][T10579] usb usb2-port1: attempt power cycle [ 387.325968][T10579] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 387.346653][T10579] usb 2-1: device descriptor read/8, error -71 [ 387.370724][T11152] kvm: user requested TSC rate below hardware speed [ 387.586227][T10579] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 387.607032][T10579] usb 2-1: device descriptor read/8, error -71 [ 387.716530][T10579] usb usb2-port1: unable to enumerate USB device [ 388.491807][T11156] fuse: Bad value for 'group_id' [ 388.498377][T11156] fuse: Bad value for 'group_id' [ 389.584634][T11172] batman_adv: batadv0: Interface deactivated: wlan0 [ 389.898985][T11175] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 390.469846][T11182] syzkaller0: entered promiscuous mode [ 390.484318][T11182] syzkaller0: entered allmulticast mode [ 390.554320][T11185] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1406'. [ 390.929732][T10579] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 391.019008][T10597] IPVS: starting estimator thread 0... [ 391.117191][T11200] IPVS: using max 39 ests per chain, 93600 per kthread [ 391.126772][T10579] usb 2-1: Using ep0 maxpacket: 8 [ 391.134167][T10579] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 391.146379][T10579] usb 2-1: config 0 has no interface number 0 [ 391.158262][T10579] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 391.177437][T10579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.187451][T10579] usb 2-1: Product: syz [ 391.191718][T10579] usb 2-1: Manufacturer: syz [ 391.197197][T10579] usb 2-1: SerialNumber: syz [ 391.208865][T10579] usb 2-1: config 0 descriptor?? [ 391.289612][T11204] binder: 11201:11204 ioctl c0306201 200000000640 returned -22 [ 391.420060][T10579] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 391.436003][T10579] uvcvideo 2-1:0.31: No valid video chain found. [ 391.458252][T10579] usb 2-1: USB disconnect, device number 108 [ 392.093668][T11208] syzkaller0: entered promiscuous mode [ 392.099731][T11208] syzkaller0: entered allmulticast mode [ 392.111838][T11208] program syz.4.1414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.486060][T10597] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 392.659527][T10597] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.673907][T10597] usb 2-1: config 0 has no interfaces? [ 392.682177][T10597] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.696094][T10597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.719160][T10597] usb 2-1: config 0 descriptor?? [ 392.968724][T11210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.997292][T11210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.038405][T11210] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 393.116735][T11210] bond0: entered promiscuous mode [ 393.134487][T11210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.202573][T10597] usb 2-1: USB disconnect, device number 109 [ 393.210306][T11228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.242847][T11228] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 393.268448][T11228] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 393.308345][T11228] bond0: (slave vti0): making interface the new active one [ 393.335519][T11228] vti0: entered promiscuous mode [ 393.360354][T11228] bond0: (slave vti0): Enslaving as an active interface with an up link [ 393.565874][T10585] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 393.727826][T10585] usb 8-1: too many configurations: 63, using maximum allowed: 8 [ 393.739079][T10585] usb 8-1: config index 0 descriptor too short (expected 64988, got 72) [ 393.749729][T10585] usb 8-1: config index 1 descriptor too short (expected 64988, got 72) [ 393.761498][T10585] usb 8-1: config index 2 descriptor too short (expected 64988, got 72) [ 393.772105][T10585] usb 8-1: config index 3 descriptor too short (expected 64988, got 72) [ 393.796156][T10585] usb 8-1: config index 4 descriptor too short (expected 64988, got 72) [ 393.817629][T10585] usb 8-1: config index 5 descriptor too short (expected 64988, got 72) [ 393.833026][T10585] usb 8-1: config index 6 descriptor too short (expected 64988, got 72) [ 393.844818][T10585] usb 8-1: config index 7 descriptor too short (expected 64988, got 72) [ 393.858744][T10585] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 393.869347][T10585] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.880054][T10585] usb 8-1: Product: syz [ 393.884313][T10585] usb 8-1: Manufacturer: syz [ 393.889933][T10585] usb 8-1: SerialNumber: syz [ 393.905479][T10585] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 393.927151][ T5730] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 393.972176][ T46] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 394.026810][ T46] dvb_usb_dibusb_mb 6-1:1.191: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 394.068107][ T46] dvb-usb: found a 'AVerMedia AverTV DVBT USB1.1' in cold state, will try to load a firmware [ 394.128698][ T46] usb 6-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 394.172348][ T46] usb 6-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 394.244347][T11230] netlink: 'syz.7.1421': attribute type 10 has an invalid length. [ 394.363419][ T8311] bond0 (unregistering): (slave vti0): Releasing backup interface [ 394.393428][ T8311] vti0 (unregistering): left promiscuous mode [ 394.630695][T11256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.665702][T11256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.679200][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1426'. [ 394.682596][ T8311] bond0 (unregistering): Released all slaves [ 394.944762][T11230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.972775][T11230] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 394.986202][ T5730] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 394.994231][ T5730] ath9k_htc: Failed to initialize the device [ 395.004642][T10597] usb 8-1: USB disconnect, device number 11 [ 395.031378][T10597] usb 8-1: ath9k_htc: USB layer deinitialized [ 395.064923][T11253] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.346968][T10585] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 395.376238][T10585] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 395.679631][T11266] xt_CONNSECMARK: invalid mode: 66 [ 395.695537][T11266] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 395.759284][T11271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.769261][T11271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.783412][T11271] loop5: detected capacity change from 0 to 7 [ 395.805904][T11271] Dev loop5: unable to read RDB block 7 [ 395.812146][T11271] loop5: unable to read partition table [ 395.818331][T11271] loop5: partition table beyond EOD, truncated [ 395.824725][T11271] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 396.519705][T11286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.530034][T11286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.595894][ T5730] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 396.604506][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1437'. [ 396.644341][T11289] hsr_slave_1 (unregistering): left promiscuous mode [ 396.700038][T11279] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1434'. [ 396.778085][ T5730] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 396.789452][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 396.800945][ T5730] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 396.814991][ T5730] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 396.824190][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.835483][ T5730] usb 2-1: config 0 descriptor?? [ 396.843393][T11278] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 397.258328][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 397.304981][ T5730] logitech 0003:046D:C294.001C: unknown main item tag 0x0 [ 397.313010][ T5730] logitech 0003:046D:C294.001C: unknown main item tag 0x0 [ 397.321200][ T5730] logitech 0003:046D:C294.001C: unknown main item tag 0x0 [ 397.328582][ T5730] logitech 0003:046D:C294.001C: unknown main item tag 0x0 [ 397.337452][ T5730] logitech 0003:046D:C294.001C: unknown main item tag 0x0 [ 397.344746][ T5730] logitech 0003:046D:C294.001C: unknown main item tag 0x0 [ 397.352247][ T5730] logitech 0003:046D:C294.001C: unknown main item tag 0x0 [ 397.360387][ T5730] logitech 0003:046D:C294.001C: unknown main item tag 0x0 [ 397.367966][ T5730] logitech 0003:046D:C294.001C: unknown main item tag 0x0 [ 397.385683][ T5730] logitech 0003:046D:C294.001C: hidraw0: USB HID v0.01 Device [HID 046d:c294] on usb-dummy_hcd.1-1/input0 [ 397.426959][ T5730] logitech 0003:046D:C294.001C: no inputs found [ 397.491527][T11278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.527383][T11278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.581885][ T5730] usb 2-1: USB disconnect, device number 110 [ 398.315993][T10589] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 398.465910][T10589] usb 8-1: device descriptor read/64, error -71 [ 398.720801][T10589] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 398.857913][T10589] usb 8-1: device descriptor read/64, error -71 [ 398.948552][T11320] team0: Device gtp0 is of different type [ 398.971939][T11322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.988321][T10589] usb usb8-port1: attempt power cycle [ 398.997408][T11322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.355983][T10589] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 399.408210][T10589] usb 8-1: device descriptor read/8, error -71 [ 399.665991][T10589] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 399.686859][T10589] usb 8-1: device descriptor read/8, error -71 [ 399.806279][T10589] usb usb8-port1: unable to enumerate USB device [ 399.977881][T11337] syzkaller0: entered promiscuous mode [ 399.994909][T11337] syzkaller0: entered allmulticast mode [ 400.492782][T11349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.525495][T11349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.711843][T11352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.726679][T11357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1455'. [ 400.733276][T11352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.742628][T11357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1455'. [ 400.847402][T11359] netlink: 'syz.1.1456': attribute type 1 has an invalid length. [ 400.888356][T11359] 8021q: adding VLAN 0 to HW filter on device bond6 [ 401.246755][T11382] netlink: 'syz.7.1463': attribute type 10 has an invalid length. [ 401.616523][T11394] netlink: 'syz.4.1466': attribute type 32 has an invalid length. [ 401.627235][ T12] net_ratelimit: 55 callbacks suppressed [ 401.627255][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.644815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.045330][T11401] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 402.061818][T11401] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 402.466058][T10579] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 402.635920][T10597] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 402.670651][T10579] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 402.710862][T10579] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.735063][T10579] usb 8-1: config 0 has no interface number 0 [ 402.754113][T10579] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 402.772569][T10579] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.791493][T10579] usb 8-1: Product: syz [ 402.801003][T10579] usb 8-1: Manufacturer: syz [ 402.810903][T10579] usb 8-1: SerialNumber: syz [ 402.824402][T10597] usb 2-1: unable to get BOS descriptor or descriptor too short [ 402.845375][T10579] usb 8-1: config 0 descriptor?? [ 402.860424][T10597] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 402.876933][T10579] uvcvideo 8-1:0.64: probe with driver uvcvideo failed with error -22 [ 402.891148][T10597] usb 2-1: can't read configurations, error -71 [ 402.906886][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.917614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.929860][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.940565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.413605][T11417] netem: change failed [ 403.421332][T11421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.432007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.483305][T11422] input: syz1 as /devices/virtual/input/input34 [ 403.878484][T11425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.888160][T11425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.187082][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.525869][T10585] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 404.676655][T10585] usb 2-1: Using ep0 maxpacket: 8 [ 404.691202][T10585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 404.712873][T10585] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 404.729288][T10585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.742608][T10585] usb 2-1: config 0 descriptor?? [ 404.754177][T11433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.767204][T11433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.953576][T10585] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 404.991917][T10597] usb 8-1: USB disconnect, device number 16 [ 405.080815][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1477'. [ 405.100715][T11436] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 405.110890][T11436] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 405.159260][T10579] usb 2-1: USB disconnect, device number 114 [ 405.165483][ C1] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 405.575595][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 405.685956][T10579] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 405.879956][T10579] usb 2-1: unable to get BOS descriptor or descriptor too short [ 405.904373][T10579] usb 2-1: not running at top speed; connect to a high speed hub [ 405.918782][T10579] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.931919][T10579] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.962139][T10579] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 405.977853][T10579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.988461][T10579] usb 2-1: Product: syz [ 406.000493][T10579] usb 2-1: Manufacturer: syz [ 406.008747][T10579] usb 2-1: SerialNumber: syz [ 406.523794][T11464] netlink: 'syz.7.1485': attribute type 21 has an invalid length. [ 406.544056][T11464] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1485'. [ 406.565195][T11464] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1485'. [ 406.629234][T11462] netlink: 'syz.4.1484': attribute type 49 has an invalid length. [ 406.748344][ T35] net_ratelimit: 6 callbacks suppressed [ 406.748362][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.762761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.869068][T10579] usb 2-1: unit 3 not found! [ 406.994092][T10579] usb 2-1: USB disconnect, device number 115 [ 407.062479][ T5730] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 407.225927][ T5730] usb 8-1: Using ep0 maxpacket: 8 [ 407.243916][ T5730] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 407.287463][ T5730] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.340806][ T5730] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 407.385380][ T5730] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 407.442847][ T5730] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.515427][ T5730] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 407.567236][ T5730] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.822097][ T5730] usb 8-1: usb_control_msg returned -32 [ 407.840617][ T5730] usbtmc 8-1:16.0: can't read capabilities [ 408.451433][T11489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.464267][T11489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.667218][ T8316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.675560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.684097][ T5730] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 408.692599][ T8318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.700954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.866221][ T5730] usb 2-1: Using ep0 maxpacket: 16 [ 408.889270][ T5730] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 408.920903][T11500] usbtmc 8-1:16.0: CHECK_CLEAR_STATUS returned 57 [ 408.923416][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.976624][ T5730] usb 2-1: config 0 descriptor?? [ 409.011342][ T5730] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 409.451290][ T5730] gspca_sonixj: reg_r err -71 [ 409.475640][ T5730] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 409.506459][ T5730] usb 2-1: USB disconnect, device number 116 [ 409.946756][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.955287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.965936][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.974559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.206576][ T3109] usb 8-1: USB disconnect, device number 17 [ 410.936317][T10589] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 411.101940][T10589] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 411.121716][T10589] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.142183][T10589] usb 8-1: Product: syz [ 411.152649][T10589] usb 8-1: Manufacturer: syz [ 411.162263][T10589] usb 8-1: SerialNumber: syz [ 411.180634][T10589] usb 8-1: config 0 descriptor?? [ 411.197340][T10589] ch341 8-1:0.0: ch341-uart converter detected [ 411.266257][T10585] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 411.396187][T11523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.411615][T11523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.430387][T10585] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.456284][T10585] usb 2-1: config 0 interface 0 has no altsetting 0 [ 411.471374][T10585] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 411.495940][T10585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.523925][T10585] usb 2-1: config 0 descriptor?? [ 411.541000][T10589] usb 8-1: failed to receive control message: -71 [ 411.571338][T10589] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 411.608217][T10589] usb 8-1: USB disconnect, device number 18 [ 411.627304][T10589] ch341 8-1:0.0: device disconnected [ 411.741039][T10585] usbhid 2-1:0.0: can't add hid device: -32 [ 411.752722][T10585] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 411.961688][T11530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.973039][T11530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.117819][ T3109] usb 2-1: USB disconnect, device number 117 [ 412.506156][T10585] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 412.514352][ T12] net_ratelimit: 2 callbacks suppressed [ 412.514371][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.528800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.698900][T10585] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.722961][T10585] usb 8-1: config 0 has no interfaces? [ 412.753071][T10585] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 412.776246][T10585] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.784547][T10585] usb 8-1: Product: syz [ 412.791749][T10585] usb 8-1: Manufacturer: syz [ 412.800254][T10585] usb 8-1: SerialNumber: syz [ 412.830445][T10585] usb 8-1: config 0 descriptor?? [ 413.273918][T11560] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1511'. [ 413.293379][T10589] usb 8-1: USB disconnect, device number 19 [ 413.301543][T11560] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.312061][T11560] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.606174][T10585] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 413.758115][T10585] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 413.769893][T10585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 413.781217][T10585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 413.791762][T10585] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 413.805147][T10585] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 413.814347][T10585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.827915][T10585] usb 2-1: config 0 descriptor?? [ 414.250017][T11573] binder: BINDER_SET_CONTEXT_MGR already set [ 414.264262][T10585] hid_parser_main: 28 callbacks suppressed [ 414.264281][T10585] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 414.280058][T11573] binder: 11572:11573 ioctl 4018620d 200000000100 returned -16 [ 414.289242][T11573] binder: BINDER_SET_CONTEXT_MGR already set [ 414.295350][T10585] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 414.303458][T11573] binder: 11572:11573 ioctl 4018620d 200000000100 returned -16 [ 414.311538][T10585] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 414.326367][T10585] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 414.340235][T10585] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 414.379242][T10585] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 414.426918][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.435626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.445017][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.453763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.870062][T11583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.880390][T11583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.894698][T11583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.905185][T11583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.050991][T11588] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1519'. [ 415.125945][T10585] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 415.275894][T10585] usb 8-1: Invalid ep0 maxpacket: 64 [ 415.406259][T10585] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 415.556298][T10585] usb 8-1: Invalid ep0 maxpacket: 64 [ 415.562226][T10585] usb usb8-port1: attempt power cycle [ 415.706336][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.716082][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.725438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.733762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.905934][T10585] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 415.936778][T10585] usb 8-1: Invalid ep0 maxpacket: 64 [ 416.066243][T10585] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 416.086643][T10585] usb 8-1: Invalid ep0 maxpacket: 64 [ 416.095284][T10585] usb usb8-port1: unable to enumerate USB device [ 416.682823][ T3109] usb 2-1: USB disconnect, device number 118 [ 417.585910][ T3109] usb 2-1: new low-speed USB device number 119 using dummy_hcd [ 417.755931][ T3109] usb 2-1: Invalid ep0 maxpacket: 32 [ 417.896513][ T3109] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 417.923684][T11606] xt_hashlimit: size too large, truncated to 1048576 [ 418.041071][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1526'. [ 418.070664][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1526'. [ 418.096206][ T3109] usb 2-1: Invalid ep0 maxpacket: 32 [ 418.113934][ T3109] usb usb2-port1: attempt power cycle [ 418.114671][T11614] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1526'. [ 418.129649][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1526'. [ 418.161644][T11614] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1526'. [ 418.177426][T11614] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1526'. [ 418.267021][ T35] net_ratelimit: 2 callbacks suppressed [ 418.267041][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.281128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.373612][T11617] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1527'. [ 418.391402][T11617] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1527'. [ 418.465192][T11621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.479147][T11621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.525985][ T3109] usb 2-1: new low-speed USB device number 121 using dummy_hcd [ 418.546547][ T3109] usb 2-1: Invalid ep0 maxpacket: 32 [ 418.626072][T10579] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 418.686074][ T3109] usb 2-1: new low-speed USB device number 122 using dummy_hcd [ 418.708127][ T3109] usb 2-1: Invalid ep0 maxpacket: 32 [ 418.713905][ T3109] usb usb2-port1: unable to enumerate USB device [ 418.796015][T10579] usb 8-1: Using ep0 maxpacket: 16 [ 418.803201][T10579] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.814210][T10579] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.824318][T10579] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 418.833857][T10579] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.844548][T10579] usb 8-1: config 0 descriptor?? [ 419.503263][T11638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.537861][T11639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.551281][T11638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.580746][T11639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.611468][T10579] hid-multitouch 0003:1FD2:6007.001E: reserved main item tag 0xe [ 419.634750][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 419.634770][ T29] audit: type=1326 audit(1780976144.671:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.4.1533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 419.652227][T10579] hid-multitouch 0003:1FD2:6007.001E: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.7-1/input0 [ 419.745340][ T29] audit: type=1326 audit(1780976144.671:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.4.1533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 419.825400][ T29] audit: type=1326 audit(1780976144.721:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.4.1533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 419.897246][ T29] audit: type=1326 audit(1780976144.721:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.4.1533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 419.953571][ T29] audit: type=1326 audit(1780976144.721:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.4.1533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 419.990161][ T29] audit: type=1326 audit(1780976144.741:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.4.1533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 420.015039][ T29] audit: type=1326 audit(1780976144.741:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.4.1533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 420.041473][ T29] audit: type=1326 audit(1780976144.741:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.4.1533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 420.068063][T10579] usb 8-1: USB disconnect, device number 24 [ 420.081908][ T29] audit: type=1326 audit(1780976144.741:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.4.1533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 420.128693][ T29] audit: type=1326 audit(1780976144.741:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11637 comm="syz.4.1533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f40d9ce59 code=0x7ffc0000 [ 420.187107][ T8318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.195438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.204530][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.212891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.527891][T11647] tipc: Started in network mode [ 420.538058][T11647] tipc: Node identity 00000000000000002d00000000000001, cluster identity 4711 [ 420.570814][T11647] tipc: Enabling of bearer rejected, failed to enable media [ 420.623327][T11647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.829573][T10109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.838196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.851335][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.859945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.915900][T10579] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 421.084403][T11652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.101394][T11652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.156828][T10579] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 421.204754][T10579] usb 2-1: can't read configurations, error -71 [ 421.375862][T10585] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 421.536468][T10585] usb 8-1: Using ep0 maxpacket: 32 [ 421.567594][T10585] usb 8-1: unable to get BOS descriptor or descriptor too short [ 421.642218][T10585] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 421.691397][T10585] usb 8-1: New USB device found, idVendor=0499, idProduct=1005, bcdDevice= 0.40 [ 421.713243][T10585] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.773413][T10585] usb 8-1: Product: syz [ 421.810165][T10585] usb 8-1: Manufacturer: syz [ 421.841556][T10585] usb 8-1: SerialNumber: syz [ 421.988313][T11672] dlm: no locking on control device [ 422.162097][T10585] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.411122][T10585] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 422.506302][T10585] usb 8-1: USB disconnect, device number 25 [ 422.596383][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.916678][T11680] fuse: Bad value for 'fd' [ 423.364545][T11684] fuse: Bad value for 'rootmode' [ 423.480771][T11695] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1549'. [ 424.027788][ T8318] net_ratelimit: 2 callbacks suppressed [ 424.027805][ T8318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.041942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.318859][T11705] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1551'. [ 424.568115][T11709] program syz.4.1553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.309417][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.318207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.946917][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.955297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.080648][T11727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.117335][T11727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.586870][ T8311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.595230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.611311][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.619703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.793534][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 426.793554][ T29] audit: type=1326 audit(1780976151.831:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11730 comm="syz.4.1560" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f40d9ce59 code=0x0 [ 426.872582][T11736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.900930][T11736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.326218][T10589] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 427.476213][T10589] usb 2-1: Using ep0 maxpacket: 16 [ 427.490291][T10589] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 427.520465][T10589] usb 2-1: config 0 interface 0 has no altsetting 0 [ 427.546306][T10589] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 427.560052][T10589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.573379][T10589] usb 2-1: config 0 descriptor?? [ 428.049992][T10589] bigben 0003:146B:0902.001F: unexpected rdesc, please submit for review [ 428.088283][T10589] bigben 0003:146B:0902.001F: ignoring exceeding usage max [ 428.123919][T10589] bigben 0003:146B:0902.001F: unknown main item tag 0x1 [ 428.162104][T10589] bigben 0003:146B:0902.001F: hidraw0: USB HID vc2.59 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 428.207913][T10589] bigben 0003:146B:0902.001F: missing HID_OUTPUT_REPORT 0 [ 428.222474][T10589] bigben 0003:146B:0902.001F: no output report found [ 428.530903][T10589] usb 2-1: USB disconnect, device number 125 [ 429.255873][T10597] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 429.356632][T11756] net_ratelimit: 2 callbacks suppressed [ 429.356648][T11756] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 429.374527][T11756] program syz.1.1566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.415969][T10597] usb 8-1: Using ep0 maxpacket: 16 [ 429.423029][T10597] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 429.436341][T10597] usb 8-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 429.445690][T10597] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.457744][T10597] usb 8-1: config 0 descriptor?? [ 429.636301][T10589] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 429.790735][ T8311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.799284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.812320][T10589] usb 2-1: unable to get BOS descriptor or descriptor too short [ 429.837629][T10589] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 429.856407][T10589] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.872632][T10589] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 429.884200][T10589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.892984][T10589] usb 2-1: Product: syz [ 429.900001][T10589] usb 2-1: Manufacturer: syz [ 429.907007][T10597] logitech-djreceiver 0003:046D:C513.0020: unknown main item tag 0x0 [ 429.910148][T10589] usb 2-1: SerialNumber: syz [ 429.918993][T10597] logitech-djreceiver 0003:046D:C513.0020: unknown main item tag 0x0 [ 429.930365][T10597] logitech-djreceiver 0003:046D:C513.0020: unknown main item tag 0x0 [ 429.939441][T10597] logitech-djreceiver 0003:046D:C513.0020: unknown main item tag 0x0 [ 429.951141][T10597] logitech-djreceiver 0003:046D:C513.0020: unknown main item tag 0x0 [ 429.962510][T10597] logitech-djreceiver 0003:046D:C513.0020: unknown main item tag 0x0 [ 429.972733][T10597] logitech-djreceiver 0003:046D:C513.0020: unknown main item tag 0x0 [ 429.978172][T10589] usb 2-1: selecting invalid altsetting 1 [ 429.986949][T10597] logitech-djreceiver 0003:046D:C513.0020: unknown main item tag 0x0 [ 429.992047][T10589] usb 2-1: unit 6 not found! [ 429.998209][T10597] logitech-djreceiver 0003:046D:C513.0020: unknown main item tag 0x0 [ 430.157179][T11766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.174874][T11766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.247200][T11766] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 430.382605][T11766] syz.4.1569 (11766): drop_caches: 2 [ 431.069474][ T8311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.078403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.132424][T10589] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 431.246939][T10589] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 431.259787][T10589] usb 2-1: USB disconnect, device number 126 [ 431.295172][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.367780][T11788] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 431.709871][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.718343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.955294][ T5730] usb 8-1: USB disconnect, device number 26 [ 432.153229][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 432.235317][ T29] audit: type=1326 audit(1780976157.271:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11804 comm="syz.7.1583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03acb9ce59 code=0x0 [ 432.346572][T10109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.355086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.408081][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1585'. [ 432.421979][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1585'. [ 432.572247][T11824] netlink: 'syz.5.1587': attribute type 12 has an invalid length. [ 432.580949][T11824] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1587'. [ 433.676126][T11845] bridge0: left promiscuous mode [ 433.682242][T11845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.703092][T11845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.923791][T11845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 434.003763][T11859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.335887][T10589] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 434.492851][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1599'. [ 434.516849][T10589] usb 2-1: Using ep0 maxpacket: 8 [ 434.540230][T10589] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 434.587676][T10589] usb 2-1: config 2 has no interface number 0 [ 434.599458][T10589] usb 2-1: config 2 interface 31 has no altsetting 0 [ 434.630220][T10589] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 434.667876][T10589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.695821][T10589] usb 2-1: Product: syz [ 434.710421][T10589] usb 2-1: Manufacturer: syz [ 434.724625][T10589] usb 2-1: SerialNumber: syz [ 434.805001][T11876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.830084][T11876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.843092][T11876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.852543][T11876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.887555][T11876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.907330][ C1] net_ratelimit: 5 callbacks suppressed [ 434.908892][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.953848][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1605'. [ 434.982741][T11876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.992560][T11877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.009947][T11881] netlink: 59 bytes leftover after parsing attributes in process `syz.7.1605'. [ 435.029627][T11877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.213023][T10589] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 435.262423][T10589] usb 2-1: USB disconnect, device number 127 [ 435.437567][T11899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.474042][T11899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.550949][T10109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.559475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.595500][T11907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.605560][T11907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.776725][T10579] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 435.903326][T11914] binder: BINDER_SET_CONTEXT_MGR already set [ 435.910699][T10579] usb 8-1: device descriptor read/64, error -71 [ 435.920053][T11914] binder: 11912:11914 ioctl 4018620d 200000000100 returned -16 [ 436.166582][T10579] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 436.197266][T10585] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 436.305888][T10579] usb 8-1: device descriptor read/64, error -71 [ 436.357079][T10585] usb 2-1: Using ep0 maxpacket: 16 [ 436.364540][T10585] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 436.373967][T10585] usb 2-1: config 254 has no interface number 0 [ 436.380434][T10585] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 436.392925][T10585] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8A has invalid wMaxPacketSize 0 [ 436.404320][T10585] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 436.414689][T10585] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 436.425222][T10585] usb 2-1: config 254 interface 235 has no altsetting 0 [ 436.436794][T10579] usb usb8-port1: attempt power cycle [ 436.446238][T10585] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 436.456701][T10585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.472717][T10585] usb 2-1: Product: syz [ 436.493228][T10585] usb 2-1: Manufacturer: syz [ 436.503835][T10585] usb 2-1: SerialNumber: syz [ 436.517719][T11926] dummy0: left promiscuous mode [ 436.569641][T11926] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 436.732322][T10585] usbtest 2-1:254.235: Linux gadget zero [ 436.740249][T10585] usbtest 2-1:254.235: high-speed {control in/out bulk-in iso-in} tests (+alt) [ 436.795970][T10579] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 436.827437][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.836046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.848648][T10579] usb 8-1: device descriptor read/8, error -71 [ 436.941662][T10597] usb 2-1: USB disconnect, device number 2 [ 437.095882][T10579] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 437.126638][T10579] usb 8-1: device descriptor read/8, error -71 [ 437.236474][T10579] usb usb8-port1: unable to enumerate USB device [ 437.467402][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.475881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.525819][T11931] syzkaller0: entered promiscuous mode [ 437.531566][T11931] syzkaller0: entered allmulticast mode [ 437.753615][T11938] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1623'. [ 438.028402][ T8311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.037343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.351816][T11947] program syz.6.1626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.362274][T11947] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1626'. [ 438.817555][T11960] program syz.7.1630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.001318][ T29] audit: type=1800 audit(1780976164.041:684): pid=11970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1634" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 439.936439][T10579] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 439.959482][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'. [ 440.026375][ C0] net_ratelimit: 147 callbacks suppressed [ 440.026400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.042476][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.046553][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.052088][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.065461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.073995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.086252][T10579] usb 2-1: device descriptor read/64, error -71 [ 440.172896][T12001] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1644'. [ 440.320957][T12003] fuse: Unknown parameter 'subj_user' [ 440.355900][T10579] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 440.496392][T10579] usb 2-1: device descriptor read/64, error -71 [ 440.630507][T10579] usb usb2-port1: attempt power cycle [ 441.006411][T10579] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 441.046829][T10579] usb 2-1: device descriptor read/8, error -71 [ 441.068181][ T5730] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 441.239682][ T5730] usb 8-1: config 0 has no interfaces? [ 441.258637][ T5730] usb 8-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 441.296297][T10579] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 441.307563][T10109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.315957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.329452][ T5730] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.389098][ T5730] usb 8-1: config 0 descriptor?? [ 441.390511][T10579] usb 2-1: device descriptor read/8, error -71 [ 441.546756][T10579] usb usb2-port1: unable to enumerate USB device [ 441.750553][T10579] usb 8-1: USB disconnect, device number 31 [ 442.586746][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.595134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.864622][T12038] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 443.227874][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.236293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.705892][T10579] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 443.856111][T10579] usb 2-1: Using ep0 maxpacket: 32 [ 443.877786][T10579] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 443.901837][T10579] usb 2-1: config 0 has no interface number 0 [ 443.920975][T10579] usb 2-1: config 0 interface 12 has no altsetting 0 [ 443.938516][T10579] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 443.966217][T10579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.978472][T10579] usb 2-1: Product: syz [ 443.987525][T10579] usb 2-1: Manufacturer: syz [ 443.998573][T10579] usb 2-1: SerialNumber: syz [ 444.019429][T10579] usb 2-1: config 0 descriptor?? [ 444.516558][T10579] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 444.546768][T10579] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 444.575169][T10579] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 444.607456][T10579] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 444.689511][T10579] usb 2-1: USB disconnect, device number 7 [ 444.939369][T12071] binder: BINDER_SET_CONTEXT_MGR already set [ 444.967595][T12071] binder: 12067:12071 ioctl 4018620d 200000000040 returned -16 [ 445.096429][T10579] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 445.186230][T10589] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 445.275915][T10579] usb 2-1: device descriptor read/64, error -71 [ 445.347033][T10589] usb 8-1: Using ep0 maxpacket: 16 [ 445.358066][T10589] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 445.368701][T10589] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.389602][T10589] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 445.412450][T10589] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89 [ 445.425914][T10589] usb 8-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3 [ 445.444444][T10589] usb 8-1: Manufacturer: syz [ 445.453650][T10589] usb 8-1: SerialNumber: syz [ 445.471347][T10589] usb 8-1: config 0 descriptor?? [ 445.494353][T10589] usb 8-1: 0:2 : does not exist [ 445.548985][T10579] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 445.702556][T12072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.716236][T10579] usb 2-1: device descriptor read/64, error -71 [ 445.741793][T12072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.768301][T10597] usb 8-1: USB disconnect, device number 32 [ 445.805638][T12080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.846794][T12080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.854882][T10579] usb usb2-port1: attempt power cycle [ 446.189116][T12082] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 446.722129][T12097] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1670'. [ 446.996236][T12103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.026783][T12103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.068242][ T8316] net_ratelimit: 6 callbacks suppressed [ 447.068264][ T8316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.082352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.098369][T10597] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 447.200324][T12106] xt_hashlimit: size too large, truncated to 1048576 [ 447.251449][T12107] kvm: user requested TSC rate below hardware speed [ 447.297847][T10597] usb 8-1: Using ep0 maxpacket: 16 [ 447.314246][T10597] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.351306][T10597] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.386016][T10597] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 447.428779][T10597] usb 8-1: New USB device found, idVendor=045e, idProduct=07c2, bcdDevice= 0.00 [ 447.466147][T10597] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.500786][T10597] usb 8-1: config 0 descriptor?? [ 447.944150][T10597] hid_parser_main: 29 callbacks suppressed [ 447.952136][T10597] hid-generic 0003:045E:07C2.0021: unknown main item tag 0x0 [ 447.960781][T10597] hid-generic 0003:045E:07C2.0021: unknown main item tag 0x0 [ 447.971854][T10597] hid-generic 0003:045E:07C2.0021: unknown main item tag 0x0 [ 447.989174][T10597] hid-generic 0003:045E:07C2.0021: unknown main item tag 0x0 [ 448.004664][T10597] hid-generic 0003:045E:07C2.0021: unknown main item tag 0x0 [ 448.024701][T10597] hid-generic 0003:045E:07C2.0021: unknown main item tag 0x0 [ 448.045854][T10597] hid-generic 0003:045E:07C2.0021: unknown main item tag 0x0 [ 448.056437][T10597] hid-generic 0003:045E:07C2.0021: unknown main item tag 0x0 [ 448.075847][T10597] hid-generic 0003:045E:07C2.0021: unknown main item tag 0x0 [ 448.095819][T10597] hid-generic 0003:045E:07C2.0021: unbalanced collection at end of report description [ 448.116651][T10597] hid-generic 0003:045E:07C2.0021: probe with driver hid-generic failed with error -22 [ 448.143667][T10597] usb 8-1: USB disconnect, device number 33 [ 448.358459][ T8316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.366927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.996212][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.004615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.014155][ T8316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.022672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.338361][T10589] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 449.480718][T12133] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1680'. [ 449.536191][T10589] usb 8-1: Using ep0 maxpacket: 32 [ 449.565504][T10589] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.601625][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1680'. [ 449.601617][T10589] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.626277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 449.638387][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.647148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.681966][T12135] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1680'. [ 449.713154][T10589] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.752663][T10589] usb 8-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.766856][T10597] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 449.808421][T10589] usb 8-1: config 0 interface 0 has no altsetting 0 [ 449.844192][T10589] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 449.867513][T10589] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.909236][T10589] usb 8-1: config 0 descriptor?? [ 450.014458][T10597] usb 2-1: unable to get BOS descriptor or descriptor too short [ 450.052560][T10597] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.107576][T10597] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.165134][T10597] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 450.207966][T10597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.252230][T10597] usb 2-1: Product: syz [ 450.272792][T10597] usb 2-1: Manufacturer: syz [ 450.309712][T10597] usb 2-1: SerialNumber: syz [ 450.374347][T10597] usb 2-1: selecting invalid altsetting 1 [ 450.410960][T10597] usb 2-1: unit 6 not found! [ 450.434368][T10589] usbhid 8-1:0.0: can't add hid device: -71 [ 450.449454][T10589] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 450.486682][T10589] usb 8-1: USB disconnect, device number 34 [ 450.570211][T12131] input: syz1 as /devices/virtual/input/input37 [ 451.053826][T12131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.067021][T12131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.140824][T12150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.158123][T12150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.193598][T12162] ipvlan2: entered promiscuous mode [ 451.216961][T12162] bridge0: port 3(ipvlan2) entered blocking state [ 451.224067][T12162] bridge0: port 3(ipvlan2) entered disabled state [ 451.232459][T12162] ipvlan2: entered allmulticast mode [ 451.238964][T12162] bridge0: entered allmulticast mode [ 451.246546][ T3109] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 451.259595][T12162] ipvlan2: left allmulticast mode [ 451.265015][T12162] bridge0: left allmulticast mode [ 451.453583][ T3109] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.485518][ T3109] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.507110][ T3109] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 451.543099][ T3109] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 451.564892][ T3109] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.592751][ T3109] usb 8-1: config 0 descriptor?? [ 451.749494][T10597] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 451.821779][T12158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.848517][T12158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.898496][T10597] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 451.914891][T10597] usb 2-1: USB disconnect, device number 11 [ 451.959465][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.109681][ T3109] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 452.411867][T10585] usb 8-1: USB disconnect, device number 35 [ 452.547101][T12177] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1691'. [ 452.761522][T12181] binder: BINDER_SET_CONTEXT_MGR already set [ 452.797993][T12181] binder: 12180:12181 ioctl 4018620d 200000000100 returned -16 [ 452.829026][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.837553][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.153897][T12186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.258032][T12183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1695'. [ 453.326510][T12191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.369736][T12191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.467095][ T8311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.475531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.546154][T10585] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 453.685976][T10585] usb 2-1: device descriptor read/64, error -71 [ 453.708977][T12191] program syz.4.1697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.947108][T10585] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 454.085931][T10585] usb 2-1: device descriptor read/64, error -71 [ 454.196004][ T3109] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 454.196829][T10585] usb usb2-port1: attempt power cycle [ 454.311796][T12204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.321167][T12204] IPv6: NLM_F_CREATE should be set when creating new route [ 454.328562][T12204] IPv6: NLM_F_CREATE should be set when creating new route [ 454.356892][ T3109] usb 8-1: Using ep0 maxpacket: 32 [ 454.364103][ T3109] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 454.377808][ T3109] usb 8-1: config 0 has no interface number 0 [ 454.384054][ T3109] usb 8-1: config 0 interface 12 has no altsetting 0 [ 454.412388][ T3109] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 454.434782][ T3109] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.458426][ T3109] usb 8-1: Product: syz [ 454.476946][ T3109] usb 8-1: Manufacturer: syz [ 454.481779][ T3109] usb 8-1: SerialNumber: syz [ 454.508172][ T3109] usb 8-1: config 0 descriptor?? [ 454.545849][T10585] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 454.590835][T10585] usb 2-1: device descriptor read/8, error -71 [ 454.747791][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.760573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.769815][ T8311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.778227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.846148][T10585] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 454.866731][T10585] usb 2-1: device descriptor read/8, error -71 [ 454.976660][T10585] usb usb2-port1: unable to enumerate USB device [ 455.396968][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.410912][ T46] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 455.484259][ T46] dvb_usb_dibusb_mb 6-1:1.140: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 455.520335][ T46] dvb-usb: found a 'AVerMedia AverTV DVBT USB1.1' in cold state, will try to load a firmware [ 455.554388][ T46] usb 6-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 455.579393][ T46] usb 6-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 456.448517][ T29] audit: type=1800 audit(1780976181.481:685): pid=12224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1707" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 456.634464][ T3109] f81534 8-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 456.659590][T12229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.690597][ T3109] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 456.713855][ T3109] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 456.733317][T12229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.758889][ T3109] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 456.839856][ T3109] usb 8-1: USB disconnect, device number 36 [ 457.389747][T12237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1709'. [ 457.743285][T12240] sg_write: data in/out 479232/136 bytes for SCSI command 0x0-- guessing data in; [ 457.743285][T12240] program syz.6.1711 not setting count and/or reply_len properly [ 458.586551][ T35] net_ratelimit: 3 callbacks suppressed [ 458.586573][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.600954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.628216][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.636952][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.937624][T12263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1717'. [ 459.014676][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 459.205533][T12265] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1718'. [ 460.075299][T12269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.117000][T12269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.176180][T12269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.214108][T12269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.506793][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.515170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.527141][T10109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.535418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.916714][ T3109] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 460.931374][T12275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.944317][T12275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.958486][T12275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.972545][T12275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.087757][ T3109] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.113703][ T3109] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.147870][ T8311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.151345][ T3109] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 461.162551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.197916][ T3109] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.222637][ T3109] usb 8-1: config 0 descriptor?? [ 461.304035][T12286] netlink: 'syz.1.1725': attribute type 39 has an invalid length. [ 461.678571][ T3109] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 461.695045][ T3109] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 461.722148][ T3109] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 461.749239][ T3109] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 461.768216][ T3109] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 461.800254][ T3109] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 461.828825][ T3109] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 461.895626][ T3109] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 462.000749][ T3109] cp2112 0003:10C4:EA90.0023: Part Number: 0x00 Device Version: 0x00 [ 462.114084][ T3109] cp2112 0003:10C4:EA90.0023: error requesting SMBus config [ 462.237435][ T3109] cp2112 0003:10C4:EA90.0023: probe with driver cp2112 failed with error -71 [ 462.338763][ T3109] usb 8-1: USB disconnect, device number 37 [ 462.739331][ T3109] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 462.940959][ T3109] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 462.968340][ T3109] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.997626][ T3109] usb 8-1: Product: syz [ 463.014473][ T3109] usb 8-1: Manufacturer: syz [ 463.029210][ T3109] usb 8-1: SerialNumber: syz [ 463.229874][T12319] netlink: 'syz.1.1732': attribute type 13 has an invalid length. [ 463.248524][T12319] netlink: 'syz.1.1732': attribute type 17 has an invalid length. [ 463.504174][ T3109] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 463.646492][T10589] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 463.657675][ T8311] net_ratelimit: 15 callbacks suppressed [ 463.657697][ T8311] bond3: (slave erspan0): failed to get link speed/duplex [ 463.795053][ T8312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.803723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.829200][T10589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.847036][ T8311] bond3: (slave erspan0): failed to get link speed/duplex [ 463.847328][T10589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.886555][T10589] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 463.929336][T10589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.967530][T10110] bond3: (slave erspan0): failed to get link speed/duplex [ 464.004844][T10589] usb 2-1: config 0 descriptor?? [ 464.143778][T10108] bond3: (slave erspan0): failed to get link speed/duplex [ 464.326548][ T8318] bond3: (slave erspan0): failed to get link speed/duplex [ 464.349207][ T8311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.357588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.476833][ T8311] bond3: (slave erspan0): failed to get link speed/duplex [ 464.517331][T10589] hkems 0003:2006:0118.0024: unknown main item tag 0x0 [ 464.517381][T10589] hkems 0003:2006:0118.0024: unknown main item tag 0x0 [ 464.517417][T10589] hkems 0003:2006:0118.0024: reserved main item tag 0xe [ 464.558299][T10589] hkems 0003:2006:0118.0024: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 464.558341][T10589] hkems 0003:2006:0118.0024: no inputs found [ 464.558358][T10589] hkems 0003:2006:0118.0024: force feedback init failed [ 464.762106][T10597] usb 2-1: USB disconnect, device number 16 [ 464.919049][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1736'. [ 465.200744][ T3109] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 465.225409][ T3109] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 465.272297][ T3109] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 465.306523][ T3109] usb 8-1: USB disconnect, device number 38 [ 466.002692][T12387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1742'. [ 467.526059][ T3109] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 467.688046][ T3109] usb 8-1: unable to get BOS descriptor or descriptor too short [ 467.697250][ T3109] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.708349][ T3109] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 467.720348][ T3109] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 467.729940][ T3109] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.738153][ T3109] usb 8-1: Product: syz [ 467.742861][ T3109] usb 8-1: Manufacturer: syz [ 467.747939][ T3109] usb 8-1: SerialNumber: syz [ 467.906375][T12396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.921043][T12396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.687779][ T78] net_ratelimit: 46 callbacks suppressed [ 468.687802][ T78] bond3: (slave erspan0): failed to get link speed/duplex [ 468.860105][ T3109] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 468.907722][ T48] bond3: (slave erspan0): failed to get link speed/duplex [ 468.921568][ T3109] usb 8-1: USB disconnect, device number 39 [ 468.966374][T10598] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 469.004971][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.026471][T12407] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1749'. [ 469.047918][T12407] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1749'. [ 469.076929][ T8316] bond3: (slave erspan0): failed to get link speed/duplex [ 469.156679][T10598] usb 2-1: Using ep0 maxpacket: 16 [ 469.170492][T10598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.184790][T10598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.216559][ T8316] bond3: (slave erspan0): failed to get link speed/duplex [ 469.219742][T10598] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 469.258220][T10598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.270012][T10598] usb 2-1: config 0 descriptor?? [ 469.336361][ T8316] bond3: (slave erspan0): failed to get link speed/duplex [ 469.490262][ T3109] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 469.499851][ T8316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.508342][T12405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.509115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.531557][ T78] bond3: (slave erspan0): failed to get link speed/duplex [ 469.541731][T12405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.671657][ T8311] bond3: (slave erspan0): failed to get link speed/duplex [ 469.679527][ T3109] usb 8-1: Using ep0 maxpacket: 8 [ 469.688187][ T3109] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 469.690246][T12431] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 469.698508][ T3109] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 469.720076][T12431] block device autoloading is deprecated and will be removed. [ 469.726283][ T3109] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 469.740108][ T3109] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 469.761861][T10598] wacom 0003:056A:0084.0025: unknown main item tag 0x0 [ 469.769366][T10598] wacom 0003:056A:0084.0025: unknown main item tag 0x0 [ 469.781530][ T3109] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 469.795634][ T3109] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.804241][ T3109] usb 8-1: Product: syz [ 469.808922][ T3109] usb 8-1: Manufacturer: syz [ 469.813641][ T3109] usb 8-1: SerialNumber: syz [ 469.825281][ T3109] usb 8-1: config 0 descriptor?? [ 469.831704][ T8311] bond3: (slave erspan0): failed to get link speed/duplex [ 469.841291][T12419] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 469.964262][T10598] usb 2-1: USB disconnect, device number 17 [ 470.060793][ T3109] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 470.104099][ T3109] input: Griffin SoundKnob as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input38 [ 470.319215][T12419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.341994][T12419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.363537][T12419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.397184][T12419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.476754][ C1] powermate: config urb returned -71 [ 470.481386][ T5794] usb 8-1: USB disconnect, device number 40 [ 470.482239][ C1] powermate: usb_submit_urb(config) failed [ 470.488121][ C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 470.710970][T12452] netlink: 'syz.4.1764': attribute type 1 has an invalid length. [ 470.733351][T12451] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1764'. [ 470.746718][ T30] INFO: task syz.2.1106:10052 blocked for more than 143 seconds. [ 470.765797][ T30] Tainted: G L syzkaller #0 [ 470.772379][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.784212][ T30] task:syz.2.1106 state:D stack:28120 pid:10052 tgid:10048 ppid:5651 task_flags:0x400040 flags:0x00080002 [ 470.799160][ T30] Call Trace: [ 470.804724][ T30] [ 470.808241][ T30] __schedule+0x1821/0x5740 [ 470.812972][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 470.818954][ T30] ? __pfx___schedule+0x10/0x10 [ 470.823929][ T30] ? schedule+0x90/0x360 [ 470.830275][ T30] schedule+0x164/0x360 [ 470.834531][ T30] schedule_preempt_disabled+0x13/0x30 [ 470.842365][ T30] __mutex_lock+0x7f7/0x1550 [ 470.847400][ T30] ? __mutex_lock+0x608/0x1550 [ 470.852430][ T30] ? usbdev_open+0x182/0x770 [ 470.857384][ T3109] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 470.865214][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 470.871864][ T30] ? bus_find_device+0x27d/0x2d0 [ 470.877815][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 470.883164][ T30] ? usbdev_open+0xa7/0x770 [ 470.889151][ T30] ? __kmalloc_cache_noprof+0x15b/0x660 [ 470.894883][ T30] usbdev_open+0x182/0x770 [ 470.899567][ T30] ? kobject_get_unless_zero+0x167/0x1f0 [ 470.905441][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 470.910666][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 470.916084][ T30] chrdev_open+0x4cd/0x5e0 [ 470.920617][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 470.925816][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 470.932278][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 470.937566][ T30] do_dentry_open+0x822/0x13a0 [ 470.942425][ T30] vfs_open+0x3b/0x340 [ 470.948319][ T30] ? path_openat+0x2df0/0x3860 [ 470.953145][ T30] path_openat+0x2e08/0x3860 [ 470.957936][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 470.963479][ T30] ? stack_depot_save_flags+0x33/0x810 [ 470.969218][ T30] ? __pfx_path_openat+0x10/0x10 [ 470.974277][ T30] ? __x64_sys_openat+0x138/0x170 [ 470.979686][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 470.984713][ T30] do_file_open+0x23e/0x4a0 [ 470.989473][ T30] ? __pfx_do_file_open+0x10/0x10 [ 470.994621][ T30] ? _raw_spin_unlock+0x28/0x50 [ 470.999802][ T30] ? alloc_fd+0x64b/0x6c0 [ 471.004225][ T30] do_sys_openat2+0x113/0x200 [ 471.009256][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 471.025776][ T30] ? exc_page_fault+0x6a/0xc0 [ 471.030572][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 471.037623][ T3109] usb 2-1: Using ep0 maxpacket: 8 [ 471.046130][ T30] __x64_sys_openat+0x138/0x170 [ 471.051210][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.057567][ T30] do_syscall_64+0x174/0x580 [ 471.062565][ T30] ? trace_irq_disable+0x3b/0x140 [ 471.068219][ T30] ? clear_bhb_loop+0x40/0x90 [ 471.073204][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.079387][ T30] RIP: 0033:0x7fc33a55d68e [ 471.084036][ T3109] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 471.093462][ T30] RSP: 002b:00007fc3387d4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 471.102125][ T3109] usb 2-1: config 0 has no interface number 0 [ 471.108698][ T30] RAX: ffffffffffffffda RBX: 00007fc3387d56c0 RCX: 00007fc33a55d68e [ 471.117163][ T30] RDX: 0000000000000002 RSI: 00007fc3387d4c00 RDI: ffffffffffffff9c [ 471.125344][ T30] RBP: 00007fc3387d4c00 R08: 0000000000000000 R09: 0000000000000000 [ 471.134263][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 471.143779][ T3109] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 471.165554][ T3109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.173992][ T30] R13: 00007fc33a816218 R14: 00007fc33a816180 R15: 00007fc33a93fa48 [ 471.182165][ T3109] usb 2-1: Product: syz [ 471.186576][ T30] [ 471.189658][ T3109] usb 2-1: Manufacturer: syz [ 471.194414][ T30] [ 471.194414][ T30] Showing all locks held in the system: [ 471.203947][ T3109] usb 2-1: SerialNumber: syz [ 471.210178][ T30] 2 locks held by ksoftirqd/0/15: [ 471.217025][ T3109] usb 2-1: config 0 descriptor?? [ 471.225990][ T30] #0: ffff8880b863b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 471.237546][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 471.247249][ T30] 1 lock held by khungtaskd/30: [ 471.254791][ T30] #0: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 471.265018][ T30] 6 locks held by kworker/1:1/46: [ 471.270626][ T30] #0: ffff8880226ce940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 471.283789][ T30] #1: ffffc90000b67c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 471.295845][ T30] #2: ffff88802addf1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 471.304986][ T30] #3: ffff888031bc91d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 471.314665][ T30] #4: ffff8880202b91a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 471.324185][ T30] #5: ffffffff8e7f9a68 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 471.334904][ T30] 4 locks held by kworker/u8:5/78: [ 471.340282][ T30] #0: ffff8880b863b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 471.350542][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 471.359673][ T30] #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 471.368990][ T30] #3: ffffffff9a710440 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 471.379589][ T30] 5 locks held by kworker/1:2/3109: [ 471.384865][ T30] #0: ffff8880226ce940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 471.398811][ T30] #1: ffffc9000d757c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 471.410952][ T30] #2: ffff88802ac7f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 471.420162][ T30] #3: ffff888029abf1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 471.429650][ T30] #4: ffff888053a841a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 471.439114][ T30] 2 locks held by getty/5389: [ 471.443882][ T30] #0: ffff8880365df0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 471.454051][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 471.464395][ T30] 4 locks held by udevd/5778: [ 471.469434][ T30] #0: ffff888056804518 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 471.478707][ T3109] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 471.492931][ T30] #1: ffff888055cce080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 471.507953][ T3109] usb 2-1: USB disconnect, device number 18 [ 471.515966][ T30] #2: ffff88805852ee18 (kn->active#31){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 471.534503][ T30] #3: ffff888031bc91d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 471.544945][ T30] 2 locks held by kworker/u8:10/8311: [ 471.553946][ T30] #0: ffff88801e3b2940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 471.566605][ T30] #1: ffffc90005d3fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 471.579172][ T30] 1 lock held by syz.2.1106/10052: [ 471.584323][ T30] #0: ffff88802addf1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 471.593499][ T30] 1 lock held by syz.3.1175/10288: [ 471.598716][ T30] #0: ffff88802addf1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 471.607824][ T30] 3 locks held by kworker/0:15/10589: [ 471.613235][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 471.624664][ T30] #1: ffffc9000d787c40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 471.635591][ T30] #2: ffffffff8e963028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 471.646765][ T30] [ 471.649154][ T30] ============================================= [ 471.649154][ T30] [ 471.663414][ T30] NMI backtrace for cpu 1 [ 471.663462][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 471.663490][ T30] Tainted: [L]=SOFTLOCKUP [ 471.663498][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.663511][ T30] Call Trace: [ 471.663520][ T30] [ 471.663530][ T30] dump_stack_lvl+0xe8/0x150 [ 471.663568][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 471.663599][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 471.663632][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 471.663654][ T30] sys_info+0x135/0x170 [ 471.663716][ T30] watchdog+0xfd3/0x1030 [ 471.663744][ T30] ? watchdog+0x1c9/0x1030 [ 471.663768][ T30] kthread+0x389/0x470 [ 471.663788][ T30] ? __pfx_watchdog+0x10/0x10 [ 471.663807][ T30] ? __pfx_kthread+0x10/0x10 [ 471.663827][ T30] ret_from_fork+0x514/0xb70 [ 471.663856][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 471.663873][ T30] ? __switch_to+0xc79/0x1410 [ 471.663896][ T30] ? __pfx_kthread+0x10/0x10 [ 471.663915][ T30] ret_from_fork_asm+0x1a/0x30 [ 471.663943][ T30] [ 471.663949][ T30] Sending NMI from CPU 1 to CPUs 0: [ 471.780614][ C0] NMI backtrace for cpu 0 [ 471.780636][ C0] CPU: 0 UID: 0 PID: 48 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.780661][ C0] Tainted: [L]=SOFTLOCKUP [ 471.780668][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.780680][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 471.780794][ C0] RIP: 0010:get_stack_info_noinstr+0xf7/0x130 [ 471.780822][ C0] Code: d7 40 0f 92 c6 49 39 cf 40 0f 93 c7 40 08 f7 75 27 41 c7 06 02 00 00 00 49 89 56 08 49 89 4e 10 48 8b 00 49 89 46 18 89 d8 5b <41> 5c 41 5d 41 5e 41 5f e9 3c 2b 03 00 cc 4c 89 ff 4c 89 f6 5b 41 [ 471.780837][ C0] RSP: 0018:ffffc90000b874d0 EFLAGS: 00000202 [ 471.780859][ C0] RAX: 0000000000b87501 RBX: ffffc90000b875a8 RCX: ffffc90000b80000 [ 471.780873][ C0] RDX: ffffc90000b87588 RSI: ffffc90000b88000 RDI: ffffc90000b87528 [ 471.780886][ C0] RBP: ffffc90000b87501 R08: ffffc90000b87501 R09: 0000000000000000 [ 471.780899][ C0] R10: ffffc90000b87588 R11: fffff52000170ebd R12: ffff88801af35d00 [ 471.780912][ C0] R13: ffffc90000b875a8 R14: ffffc90000b87588 R15: ffffc90000b87528 [ 471.780926][ C0] FS: 0000000000000000(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 471.780940][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.780953][ C0] CR2: 000000110c3ce067 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 471.780969][ C0] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 000000007fffdff5 [ 471.780980][ C0] DR3: 0000800000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 471.780992][ C0] Call Trace: [ 471.780999][ C0] [ 471.781008][ C0] get_stack_info+0x3a/0xf0 [ 471.781029][ C0] __unwind_start+0x43e/0x760 [ 471.781053][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 471.781079][ C0] arch_stack_walk+0xe3/0x150 [ 471.781103][ C0] ? __unwind_start+0xf7/0x760 [ 471.781124][ C0] stack_trace_save+0xa9/0x100 [ 471.781149][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 471.781175][ C0] ? stack_depot_save_flags+0x33/0x810 [ 471.781197][ C0] kasan_save_track+0x3e/0x80 [ 471.781261][ C0] __kasan_kmalloc+0x93/0xb0 [ 471.781286][ C0] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 471.781313][ C0] ? nsim_dev_trap_report_work+0x29a/0xb90 [ 471.781332][ C0] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 471.781361][ C0] __alloc_skb+0x2c1/0x7d0 [ 471.781446][ C0] nsim_dev_trap_report_work+0x29a/0xb90 [ 471.781469][ C0] ? process_scheduled_works+0xa70/0x1860 [ 471.781491][ C0] ? process_scheduled_works+0xa70/0x1860 [ 471.781509][ C0] process_scheduled_works+0xb5d/0x1860 [ 471.781543][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 471.781564][ C0] ? assign_work+0x3d5/0x5e0 [ 471.781583][ C0] worker_thread+0xa53/0xfc0 [ 471.781614][ C0] kthread+0x389/0x470 [ 471.781636][ C0] ? __pfx_worker_thread+0x10/0x10 [ 471.781653][ C0] ? __pfx_kthread+0x10/0x10 [ 471.781675][ C0] ret_from_fork+0x514/0xb70 [ 471.781693][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 471.781711][ C0] ? __switch_to+0xc79/0x1410 [ 471.781736][ C0] ? __pfx_kthread+0x10/0x10 [ 471.781758][ C0] ret_from_fork_asm+0x1a/0x30 [ 471.781787][ C0] [ 472.099051][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 472.105971][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 472.116691][ T30] Tainted: [L]=SOFTLOCKUP [ 472.121051][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 472.131144][ T30] Call Trace: [ 472.134460][ T30] [ 472.137424][ T30] vpanic+0x56c/0xa60 [ 472.141455][ T30] ? __pfx___schedule+0x10/0x10 [ 472.146361][ T30] ? __pfx_vpanic+0x10/0x10 [ 472.150919][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 472.157133][ T30] panic+0xc5/0xd0 [ 472.160914][ T30] ? __pfx_panic+0x10/0x10 [ 472.165380][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 472.170815][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 472.177025][ T30] watchdog+0x102c/0x1030 [ 472.181410][ T30] ? watchdog+0x1c9/0x1030 [ 472.185890][ T30] kthread+0x389/0x470 [ 472.189999][ T30] ? __pfx_watchdog+0x10/0x10 [ 472.194710][ T30] ? __pfx_kthread+0x10/0x10 [ 472.199330][ T30] ret_from_fork+0x514/0xb70 [ 472.203958][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 472.209109][ T30] ? __switch_to+0xc79/0x1410 [ 472.213819][ T30] ? __pfx_kthread+0x10/0x10 [ 472.218444][ T30] ret_from_fork_asm+0x1a/0x30 [ 472.223254][ T30] [ 472.226956][ T30] Kernel Offset: disabled [ 472.231298][ T30] Rebooting in 86400 seconds..