last executing test programs: 31m25.880389429s ago: executing program 4 (id=167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a400000000000031a00030014007ebcfe80000000000000000000000000000f140001002001"], 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390436ddba6612ede0005ddb5fdd", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000020114000200fc"], 0x5c}}, 0x0) 31m25.610639948s ago: executing program 4 (id=171): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "6bad71b350e22a00", "ccaa54dbfef3216ec09b63757e98ed63", "f6ffffff"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x4, &(0x7f0000000280)=@gcm_256={{0x304}, "45c594c057c79552", "1ea90b05633ee088498b8d50702128937e52933d857ebf2d5f788466b5915e97", "d81e1605", "37bbb74f571aefc8"}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) 31m23.186831048s ago: executing program 4 (id=183): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x2, 0x2}, 0x10) write(r0, &(0x7f0000000780)="1c00a8001a009b8a1474614d2c1d56ecd469ebdd390ba30000003b00000000f8ffffff00618562ea0aece71f4712e0b183abec0cd97a1213170d40ffffebb503c0b2032be20ce3c0623f73a5ab1ffccc51bb97363c7ec1b27759dfecbb82a2ee808f7a77f6e4bf68a3f1e62a195b94bb9b4c12a015e1b0295522e61758b521fd6d", 0x81) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x2546, &(0x7f0000000140)={0x0, 0xd2f3, 0x0, 0xd5, 0xda}, &(0x7f00000000c0), &(0x7f0000000200)) io_uring_setup(0x2e2c, &(0x7f0000000240)={0x0, 0x5b9c, 0x10000, 0x0, 0x25a, 0x0, r3}) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000480)="200000001300034700bb65e1c3e4ffff010000000100000056000000250000b4", 0x20}], 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6f, 0x0, 0x7fff0000}]}) close_range(r4, r1, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.kill\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd, 0x4010, r6, 0x952de000) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f00000004c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/236, 0xec}], 0x3) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0003000f000000028000001294", 0x2e}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 31m22.514766715s ago: executing program 1 (id=186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0xef, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 31m22.361171518s ago: executing program 1 (id=188): memfd_create(&(0x7f0000000000)='\\\\&.\x00c6\x0fR\xfc\xbb `\r$\x88oCi\xad\x13\xeb\xea0n\xea,\xc2\xeb\x9e\xa2\xd5\x94\xed\x9e\xd5cHX\xa2@\xdf\x99R\x16\xa1\x8f\xfd\v\xe1m,\xa7W\xfb2d\xe9C\x02B\"\xce\xfcE5e\x01=\xbbK\xe0kLA\xd2\b#{m[\x16\x83u,\xcdo0\x90v\x9a\xc9\xad$z\x8e\xcc\x9cO\xdb\xb2\xf9\x06#\xd9\xf02\xd5&\xd0\x90\xdb\xbb\xa3\xa2\xac\x1a9\xf7Y\xd12\xec\xc0\x84E\xc1\xebM\xe6sN$]\x9a\x8cv~W^X\v\xa4\xdd\x05]\x8d%#\xf7S\x83\xf1\xf0\xd0\x9f\x88\x1a\xdc\xff\n\xce>\xca%\xb9a\xc1\xd1\x95\x01h\x8d\x81Q\x8a\x04n\xba\xc3\xb2O\xd5\xeb\x03\x1dS\xd6\x9ebR\xfd\xb9\xf3\xf4w\xf1Q\x89a\xa7g#\xe3P9\xd5z\x1d\xb5G\x17\x8dC\x88Q@\xbd\xed&a~\x00\xec\xc0\xf2\x04\x19\xb5\x03\xb5\xb1-\xe8\xb6U\xb3\xaef\xdc\x17\xa8kr\x0eJ\r\xd1\x7f\xcaE-\xc2\x92\xa3\x05\x0eVP\x98\xb5VA\by\xadd\x15\xf3\x1e\xa4\xb1*h=:\x1d\x8b\x81.\xa3h\xa0v\xd5n\xf7\xa7D\xf8\x86\x00+\xf8~\x8d\xab\xfb R\xd7\xadh\xbaa\x94\xb9\x01_I\x01\x14\tS\xd3\xaf\xfc\n\xcf\x90\xbc\xf6\x80\x04\xc5\a\xdbV\xb2\x98\x04\xf4\x14\x0e\f\xd4|\xa1\xd0E\x7f\x00\x00\x00\x00\x00\x00\x87\x12\xd5=\xa2<\xc7\x9d\xfb\xd2\x86\xd0\x89\xbfa\x84\x98\xba\x1a\x1d\'\x99w\x14\x1e\'81\x17\x03\xbc\xc1J\x8b\x94\xad\a\xe4\x1f\xe7\xda\xccT\x11\xa9)\xb2\\\xb9v%e\x15A&\xf8Ij\xd1\x85#Wu\xce\xbc\xe2\xbc\xc0\xa9\xc2j\t\xb8\xcbI\xa7\xac\x176\x0e\xda\xc6\xad?\xaaW\x11\x18\xe2HW\x10\\:\xe5Q\xd6\xb5\x8e\x06\"\\\x06\xe4\x00>\xfc\xcb\xf4 \xa6 \x94Q?\x9a\x95\xf5\xa5\x0f\x14M!\xa1S\xfb+<\x1e\xad\xe4\xa5\xc0*\xb1\xc2\xd7\v\xca\x98\xf4\x06\xe1\x0eH+\xe3\xca\xfdXwft`\x1f\xc5G\xe0_\xc4SR\xaf\xeao\f\xffE\x12\xfe\x9a\x19i9)\xe8\xae\"H\x9fS\xf3\x97\x9d\x93\x80+@\x86\xd9\xff*\xa1\x9f\xd7\xc7w\xbd\xa5s\x99\xa9\x8b<\xcb\xd7\x85(j\xb3\xc8\xa4\x06\xf0\xae>\xf5h\xbe\x19\xc6M\x15\xc2L\n\x90\xf6\x81W\xd7\xc2\x91Z\xb6I2m\x01\x12\xab_\x8d\xc8\xd8\xed0l_\xd7-\x90im\xb4E', 0x5) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x8, r3, r1}) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaa7dbcbd214dfa155e09ee651600e3aaaaaa86dd6bd697da00002c80000000000000"], 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbb"], 0x0) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x15, r7) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 31m22.200197281s ago: executing program 4 (id=190): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) r5 = getpid() syz_open_procfs$pagemap(r5, &(0x7f0000000340)) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) io_uring_enter(r2, 0x4d10, 0x2, 0x2, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@nullb, 0xffffffffffffffff, &(0x7f0000000280)='./bus\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e000100000000000200000002100000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2810) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x345303, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) 31m22.013022039s ago: executing program 4 (id=193): timer_create(0xb, 0x0, &(0x7f0000000080)=0x0) timer_settime(r0, 0x0, &(0x7f0000000640)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) exit(0x0) (async) rt_sigaction(0x14, &(0x7f0000000140)={0x0, 0x40000000, 0x0, {[0xd]}}, 0x0, 0x8, &(0x7f0000000280)) (async) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x8, 0x1, 0x3}}}}}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000001}, 0x20000800) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 31m21.816346305s ago: executing program 1 (id=196): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'veth1_to_bridge\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014540000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a310000000028000380240000800400018004000b800c000e7d000000000000000f0c0005400000000000000007140000001100010000000000000000000100000a"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x80000001}) dup3(r2, r3, 0x0) 31m21.584310912s ago: executing program 4 (id=199): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x400c040) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0x400, 0x9, 0x5, 0xc}, 0x8, 0x9807, 0x0, 0xb, 0x0, 0x4}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 31m20.454708241s ago: executing program 32 (id=199): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x400c040) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0x400, 0x9, 0x5, 0xc}, 0x8, 0x9807, 0x0, 0xb, 0x0, 0x4}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 31m19.365307324s ago: executing program 1 (id=203): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) r5 = getpid() syz_open_procfs$pagemap(r5, &(0x7f0000000340)) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) io_uring_enter(r2, 0x4d10, 0x2, 0x2, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@nullb, 0xffffffffffffffff, &(0x7f0000000280)='./bus\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e000100000000000200000002100000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2810) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x345303, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) 31m19.038340311s ago: executing program 1 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500ffffff", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008001f0007000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 31m17.204168968s ago: executing program 1 (id=214): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0xb}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) listxattr(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x2, [@typedef={0x6}, @enum={0xb, 0x1, 0x0, 0x6, 0x4, [{0xa}]}, @ptr, @func_proto, @float={0xf, 0x0, 0x0, 0x10, 0xc}]}}, &(0x7f0000000840)=""/228, 0x5e, 0xe4, 0x1, 0x7f, 0x10000, @value=r4}, 0x28) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000240)={0x1, 0xffff0fff, 0x1, r3, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 31m16.780310772s ago: executing program 33 (id=214): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0xb}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) listxattr(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x2, [@typedef={0x6}, @enum={0xb, 0x1, 0x0, 0x6, 0x4, [{0xa}]}, @ptr, @func_proto, @float={0xf, 0x0, 0x0, 0x10, 0xc}]}}, &(0x7f0000000840)=""/228, 0x5e, 0xe4, 0x1, 0x7f, 0x10000, @value=r4}, 0x28) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000240)={0x1, 0xffff0fff, 0x1, r3, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 6m42.135890678s ago: executing program 0 (id=6905): syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x2a440) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semctl$SETALL(0x0, 0x0, 0x11, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) syz_usb_connect(0x4, 0x64c, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xd2, 0x10, 0x91, 0xbf9e561f31bb4d1e, 0xbda, 0xffef, 0x591b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63a, 0x2, 0x1, 0x81, 0xd0, 0x32, [{{0x9, 0x4, 0xea, 0x7, 0x4, 0xff, 0xff, 0xff, 0xf2, [], [{{0x9, 0x5, 0xd, 0x10, 0x400, 0x81, 0x4, 0xe0, [@generic={0xb7, 0x9, "782ca06ac7a034ca249a669084eb7861835a1cf9e6baad291e1b2a6823bd5df004355fe775edded7e383b41bfbac7fdb601dc32b9b45c872b733328643a872d4e719294005eeb143b4cb8bac8fc2a7b66fa4b9e70cae03ca86d9893c0bdf4874e32dc2966c22b96c39cb0a1965965ee5ac655d2cf2cb23e9abe20145daeb3d64f6485ea4331c6de814eb277081ad14c639ce760de385ee3d19835f2cf73328392654c8263eca40d6da4a0ddb897fe9994087fee2fa"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xfffb}]}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x3, 0x5, 0x1, [@generic={0x6, 0x1, "4877a230"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x9c, 0x5, 0x9b}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x4, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x1}]}}]}}, {{0x9, 0x4, 0xc9, 0x7, 0xc, 0x2, 0x6, 0x0, 0x9, [@generic={0x2, 0x21}], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x4, 0x9, 0x1}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x2, 0x2, 0x5, [@generic={0x59, 0x4, "da35d4e729459dd411091d13bfa5d6c811dacf3ef0f72a6477c3408cff30812e9e9db42771da9f9af5eabaccf62cb01115cfa9259c35a97481e833957ec40e75517f8ecf5df77c9d92d9250743558c3da283b21ea36203"}, @generic={0xdc, 0xf, "913c98e464641888e51145bfbb5f066c84337e298dc7bbba3f00730c6fa04f7791f1eb6e50487a7014ed5dc6e9bc59b6645fa0fda975aade74fcf0152d03aec65fe359b2040b1abda7a94b995bc0b0108a06c1a2906932b0ff8ca9dedeca943a8894cf74fbfe39e31499fcd729dd030157f239dfe2146a933cea0054b8a5e58efc648b03f1db92863af3e6e0032b0cad6305659e5fbc8348b97c079a1ee250b64d6097907ad7c8f301a1ed82786d401da5446b595d245f59f32931fca8e6deb601bf596bd2ce86f60e21343ad91a6cc3978cf0d8ae695a71c285"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x6, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2c, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x3, 0x5, 0x4}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0x7, 0x6, 0xf, [@generic={0xf0, 0x30, "776675ea37dd73ab36fc78d90e577f9e4fe56bb3ff54ccde0f31795c48f665b77755512622597f47924b989d4d849d9cc2be154e405efeb43cbb646ee03b38ee22287c8a056482fdc1a570c836a8a0f41895b71476d0393cbb9394e4d5bceee5f72a9468efacb589203df8655fbb896878dc0b322fc189abc08764b8e1eb562c2f590730523e80ad19d5a41a6c3118f382c73ced2d1fbe61c35cd74b366ebf36f7867a02476f13de781d0fe41b24a4616192e0d742e32c7ca8e5b81a4ead895f2ba9f0c8dda851578f54b79c547236e6944bccde290c4ae09b2542877bffeb610da738e690af13e28328c76da416"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xca, 0x80, 0x10, [@generic={0x87, 0x2, "ba55e0eb54a1bd4468b4a4fea8d894e4fcfdb3bdc53239b6b3c8333d6e63725a5c3299b355e3258d263307f733819aef0d10ec2d2ab9e808c8366c04f66d01d979478e62c07ff260abb2e88bbb8beece953a93ed0600bb0b9b3c19d2a688ad5c370e7ff31eecc8db8ba3a9e3d233af64ecd295ff1998f6cb34d8d5343976371dd13b17a890"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x5, 0x64, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3ff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xff, 0x76, 0xe1, [@generic={0x67, 0x2a, "39796f5eb79fb238d534c9f53ccad5ec6eb72a989c37dc5279cb8196c1c6920bc9a0fa3932f02199977dc6de4504a22d162e5d1a0a1f1773b64c51b2e00659d5143ba6512537127dcbdd5c81bb7431e5aed379e1a5de4c247e8adb9a8d49e04901cdf76e8b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x4d7}]}}, {{0x9, 0x5, 0x2, 0x3a1a5264062d6f26, 0x200, 0x1, 0x8, 0xcb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3}, @generic={0xbc, 0x7, "20e9f0943d0745a29288fcd591b4aba42f3b5dcfc0e72a6439e052822d8dda605a978b850fd243ac7df2fb554a804945712f3b4d2bd4f1215d72431ae1164602df49f189a168065db15bbe23e0110d6211ca276ace500cce2517c0e26a383b60f009c72aeb6649ae01bc80ba8408c2a981bcee9f0e0912c1b2f31871d8e1c9e104031cc04434825bc16939ea6471ac91d0ff95e762f5747c48e2083f29d27762f3173e3b1cec6f4d7931cb193a91ba60342c10d22c98def5fe85"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x2, 0x54, 0xa, [@generic={0xc2, 0x21, "821f4ece390a4c8f41687026f16bb29df6e32e30bc3b0cb96d1a75842751b3e670f3eb50475807f51fda232fa2991201f5c19fdc0f8105e3d0463b6cce0841199876c43a7667b6b25e3c0e158bf865aaab9b71401c12cebe4700ae00ffb932a06fcb36e741fb0def692544427fe9e681a7d2378f936e887126e1a9e2419fc3b79dff592655b24733bff04d3d1d6a8d1225d2a0747f0166cb48278fcb14d6a9bb90217110765ac1a74e0d455b2c706bad345a6f96a1ab7d417db9526a73b5e356"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x4}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0xf8, 0x4, 0x6}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x8, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x5}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x46, 0x0, 0x62, 0x10, 0x4}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x92, &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, {0xa7, &(0x7f0000000ec0)=@string={0xa7, 0x3, "ab4e47676b48fa8709d8874632b6ab33bdc9fa6c05412aa46f80e81b95dafd88f3861214b1483133d10311bcabd69e0925d97d1ee4819b04058a1b63bfb0d17086a6bb1e867b1e3ed19f69220b57f00c895bcb806c003a31322e61c6f0dbc93af4347c299eaaf5f1bc64ee0390d9791cec80889b1b30af60762239a2ebd4c94ed6bb1186d4ec9a134230bb72282b3439b181fe512ce3649807e5c5fe7b9f61f3ab488a0eb7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0f6}}]}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m39.022285599s ago: executing program 0 (id=6918): ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r2, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000840)="11b1bfad69c9e86215472a62a9773cd45edddf1fe28799b805943daeac8c4c3a22b571b37c290e338dd4b545648fb3ee6693b661eb02468799ce387cb38848442a8bac944cafa6006ad0cad331750787f6572490373b915434708b46f6f858b877b3c5031f976dfa9d79115f93d400", 0x6f}, {&(0x7f00000024c0)="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", 0x628}, {&(0x7f0000000940)="dd09685c6d6d24005d353911c37357e50a5571ce326b2b217c121fbfca79449cba01ca0f7b09761850e4547adf5db2a96f0514", 0x33}, {&(0x7f00000034c0)}, {&(0x7f0000000a40)="2a3deb398b53e788b26eb617d0dc691d24ebc2a22da7fc38024de9de13340f4f4c8449d9e89c07a176", 0x29}, {0x0}, {&(0x7f0000000c00)}], 0x7}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000000e80)="73359c7aef6c8c46c16b02df643c244001ccb84a8f1ca6395a76f2bece75531a08f89ec1474622da43892ee1a02c355c5634564dd9cf67a6cb36b72e51d985bb023808ded7b261784e71ce39f6857c71887c085a520dccdd658561f7a4a5fa76d43fa855a716e315d7cd9771c4f64fc0a5eeee5fca2a2e84f6f6f5c397f812d38c7343ed5118ead79d58903a07573b73377b750938eb61d2ae8bf98b33c92fd6360590382cf64b65ab54688714c146da89312abb727fe5febd996fe20892b60cc9af7fba8f1a0161489a84d03c0a176ce6", 0xd1}, {0x0}, {0x0}, {0x0}, {&(0x7f00000044c0)="597a6b789cd5110caaa8e68623b0d55cfdff26cc78f16da427c07a314759cf6ca6867f2cda685d0f6a6723b953cb682580a11d0f01f7d7c16d7fb344aea09f9c6aa7639fc31813f85abae92cc838632e169851ff784e77c611e47d0a0269651bb766f9668aa38a809267f6afb294fecbee8cc4383ea66e5b9209ee2b3e19bef5d6ae6c155fbaecb16cb9f1d8d954cdfb7595b8c54d27674b518377ad919e", 0x9e}, {&(0x7f00000013c0)="e2f5e0db6549ee7d1669356953", 0xd}], 0x6, &(0x7f00000048c0)=ANY=[@ANYBLOB="40000000000000002900000037000000ff0400000000000007180000000304ff00800400000000000000000000000000000000010005020c5f040100280000000000000029000000040000000001000000000000000100050200ff04"], 0x80}}, {{&(0x7f0000004680)={0xa, 0x4e22, 0x3, @local, 0x7}, 0x1c, &(0x7f0000004700)=[{&(0x7f00000046c0)="e5dbe94c6d46969f", 0x8}], 0x1}}], 0x5, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000500)={0x601, 0x0, &(0x7f0000000180), &(0x7f0000000480)=[0x2], &(0x7f0000000440)=[0x0], &(0x7f0000000040), 0x0, 0x8}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0xfffffffd, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) madvise(&(0x7f00002a3000/0x2000)=nil, 0x2000, 0xc) 6m37.622403333s ago: executing program 0 (id=6924): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit={0x95, 0x0, 0x0, 0x3801}], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) 6m37.565252105s ago: executing program 0 (id=6925): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000021c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x280, 0x3, 0x32344d59, 0x6, 0x0, 0x3, 0xc, 0xfeedcafe, 0x2, 0x3}}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200"]) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m36.62685689s ago: executing program 0 (id=6935): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x5, 0x8001, 0x8000000000, 0xff, 0xffffffff}, 0x0) rt_sigaction(0x1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000001b00)={0x5, 0x35315258, 0x2, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0xfffffffe, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x11, 0xb, &(0x7f0000019100)=ANY=[@ANYBLOB="dbc4ffff00000000000000000000000000006f936abc2849155c31794ad226c3adaba9851770af66d6d81bdb30bde886eeb0a94021714cadd424d18c36a3b0de4d1f150e756a675992b0"], &(0x7f0000019080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000191c0)=@abs={0x0, 0x0, 0x80000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m36.420212411s ago: executing program 0 (id=6937): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000028001280090001006970697000000000180002800400190008001400090000000600"], 0x48}, 0x1, 0x2}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x8, 0x8000, 0x5, 0x0, {{0x23, 0x4, 0x0, 0xc, 0x8c, 0x68, 0x0, 0xff, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x51, 0x1, 0x6, [{@empty, 0xd7}, {@remote, 0xee80}, {@rand_addr=0x64010101, 0xfffffffc}]}, @timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x3, [{@remote, 0x3}]}, @generic={0x89, 0x7, "7d1c5e8365"}, @timestamp_prespec={0x44, 0xc, 0x99, 0x3, 0x1, [{@rand_addr=0x64010101, 0x6}]}, @lsrr={0x83, 0xb, 0x9c, [@remote, @multicast1]}, @cipso={0x86, 0x32, 0x0, [{0x2, 0x6, "54a67fdd"}, {0x0, 0x11, "560f57785f29d70f80cb65cf9d3505"}, {0x4, 0xa, "cc601f76f5fdbbcb"}, {0xb, 0xb, "a077f741c1c508e728"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f0000000940)={'ip6_vti0\x00', 0x0, 0x2f, 0x97, 0x5, 0x200, 0x22, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x10, 0x7856, 0x3, 0x42}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)={0x104, 0x0, 0x114, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r7 = syz_open_procfs(0x0, 0x0) lseek(r7, 0x80000000004, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r8, 0xffff8000) syz_open_dev$vbi(0x0, 0x3, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000000}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x2000, 0x3c}, 0x2, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@remote}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xc}, {{@in=@remote, 0x4d2, 0x33}, 0x2, @in6=@private0, 0x0, 0x5, 0x0, 0x1}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r11, 0x0, 0x0) 6m35.596555761s ago: executing program 34 (id=6937): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000028001280090001006970697000000000180002800400190008001400090000000600"], 0x48}, 0x1, 0x2}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x8, 0x8000, 0x5, 0x0, {{0x23, 0x4, 0x0, 0xc, 0x8c, 0x68, 0x0, 0xff, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x51, 0x1, 0x6, [{@empty, 0xd7}, {@remote, 0xee80}, {@rand_addr=0x64010101, 0xfffffffc}]}, @timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x3, [{@remote, 0x3}]}, @generic={0x89, 0x7, "7d1c5e8365"}, @timestamp_prespec={0x44, 0xc, 0x99, 0x3, 0x1, [{@rand_addr=0x64010101, 0x6}]}, @lsrr={0x83, 0xb, 0x9c, [@remote, @multicast1]}, @cipso={0x86, 0x32, 0x0, [{0x2, 0x6, "54a67fdd"}, {0x0, 0x11, "560f57785f29d70f80cb65cf9d3505"}, {0x4, 0xa, "cc601f76f5fdbbcb"}, {0xb, 0xb, "a077f741c1c508e728"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f0000000940)={'ip6_vti0\x00', 0x0, 0x2f, 0x97, 0x5, 0x200, 0x22, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x10, 0x7856, 0x3, 0x42}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)={0x104, 0x0, 0x114, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r7 = syz_open_procfs(0x0, 0x0) lseek(r7, 0x80000000004, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r8, 0xffff8000) syz_open_dev$vbi(0x0, 0x3, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000000}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x2000, 0x3c}, 0x2, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@remote}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xc}, {{@in=@remote, 0x4d2, 0x33}, 0x2, @in6=@private0, 0x0, 0x5, 0x0, 0x1}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r11, 0x0, 0x0) 4m47.749979201s ago: executing program 3 (id=7574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r2 = socket(0xa, 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000000c0)=0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m47.420212525s ago: executing program 3 (id=7578): r0 = syz_usb_connect(0x6, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000280)=@ready={0x0, 0x0, 0x8, "af02d1a1", {0x1, 0x6a4, 0x5, 0x77, 0x1}}) syz_usb_connect$uac1(0x3, 0x101, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0x7, 0xe0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xdb3c, 0x6}, [@processing_unit={0xd, 0x24, 0x7, 0x4, 0x3, 0x4, "d55fee292a37"}, @selector_unit={0xb, 0x24, 0x5, 0x1, 0xf4, "f7a494d15ebb"}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x2, 0x2, [0x2, 0x9], 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x305, 0x3, 0x3, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x1ff, 0x6, 0x6, 0x6d, 0x80, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0xa3, 0x3, "0291"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x2, 0x1}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xf, 0xfffb, 0x4, ')]c}\"'}]}, {{0x9, 0x5, 0x1, 0x9, 0x1cf, 0x5, 0x19, 0x3, {0x7, 0x25, 0x1, 0x80, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1, 0xc, 0xfa, "1c5dadbf0d"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x45, 0x1, 0x8, 0x0, "9f03", "85"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x6, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x52, 0x3, 0xd, 0x6, "a374c5", "f7"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x1, 0x65, 0x7, "abfff7c9cf"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfa, 0x81, 0x2, {0x7, 0x25, 0x1, 0x80, 0x4, 0x3}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0xd, 0x5, 0x68, 0x38, 0x1}, 0x17e, &(0x7f0000000440)={0x5, 0xf, 0x17e, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x78, 0x5, 0x3, 0x0, 0x55}, @generic={0xed, 0x10, 0x2, "00c3d4a90e54e45f7d11a4c458f672955c21b3f8c59cf7cac7e4cde1b561bde9067c2430149bd99d89702e231db2d51d293148601d1dc4c55b4451418ea36c600e2681e24d1d1ab614560607d6252492a8e55040ae8500ea2706e4cbbcc033062c6492406750785a81c2f4356fb09a1a13fc1f6d27c9218766ffc828add4c2a4420b30cacaadec942fcd25adeb61634cf6a97c7cc657968fbd6a9168c64803a0492a45381136541c7f6f6e5aa4b96c30d1ab3337014bf37fbc791817f67ee6056881788b0feef7e6e0f587f91464fddf4f2e0d350a0a692b2fd8443d2a4b91157f925c8a4621fdca26c0"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x8, 0xf00f, 0x8001, [0xf, 0xc030, 0xff1f80, 0xc00f, 0xff7e0f, 0xffc000]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x0, 0x3, 0x4, 0x8}, @generic={0x4f, 0x10, 0x4, "0b32f9b9da07a22a6a69dc9e2bf44fd1cdb9feae3131138e2f04c1b0c91289685aa6ce88d28fb7610696ba714095d5f12617360ee5c1b548ece0a07be18c8bc702468d1e364cee1d9e4ca4d4"}]}, 0x3, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x77}}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0xfffffffe, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x2, 0x62, {0x62, 0x23, "e2b701311a0c5b299c35597d7c4fa980f26148e47700653398dc7a09f8d8a253b9088a1bd4dd0806f81a1b50d496e7734fc89f3a3c8526df09238ce7880ad94ec6850d61a20b7c23984f25e085afe03505a444d53400b3d59b99ac429721ec73"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000001c0)={0x1c, &(0x7f0000000100)={0x0, 0x5, 0x3, "73b8a1"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x3}}) syz_usb_connect(0x6, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000280)=@ready={0x0, 0x0, 0x8, "af02d1a1", {0x1, 0x6a4, 0x5, 0x77, 0x1}}) (async) syz_usb_connect$uac1(0x3, 0x101, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0x7, 0xe0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xdb3c, 0x6}, [@processing_unit={0xd, 0x24, 0x7, 0x4, 0x3, 0x4, "d55fee292a37"}, @selector_unit={0xb, 0x24, 0x5, 0x1, 0xf4, "f7a494d15ebb"}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x2, 0x2, [0x2, 0x9], 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x305, 0x3, 0x3, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x1ff, 0x6, 0x6, 0x6d, 0x80, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0xa3, 0x3, "0291"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x2, 0x1}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xf, 0xfffb, 0x4, ')]c}\"'}]}, {{0x9, 0x5, 0x1, 0x9, 0x1cf, 0x5, 0x19, 0x3, {0x7, 0x25, 0x1, 0x80, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1, 0xc, 0xfa, "1c5dadbf0d"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x45, 0x1, 0x8, 0x0, "9f03", "85"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x6, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x52, 0x3, 0xd, 0x6, "a374c5", "f7"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x1, 0x65, 0x7, "abfff7c9cf"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfa, 0x81, 0x2, {0x7, 0x25, 0x1, 0x80, 0x4, 0x3}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0xd, 0x5, 0x68, 0x38, 0x1}, 0x17e, &(0x7f0000000440)={0x5, 0xf, 0x17e, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x78, 0x5, 0x3, 0x0, 0x55}, @generic={0xed, 0x10, 0x2, "00c3d4a90e54e45f7d11a4c458f672955c21b3f8c59cf7cac7e4cde1b561bde9067c2430149bd99d89702e231db2d51d293148601d1dc4c55b4451418ea36c600e2681e24d1d1ab614560607d6252492a8e55040ae8500ea2706e4cbbcc033062c6492406750785a81c2f4356fb09a1a13fc1f6d27c9218766ffc828add4c2a4420b30cacaadec942fcd25adeb61634cf6a97c7cc657968fbd6a9168c64803a0492a45381136541c7f6f6e5aa4b96c30d1ab3337014bf37fbc791817f67ee6056881788b0feef7e6e0f587f91464fddf4f2e0d350a0a692b2fd8443d2a4b91157f925c8a4621fdca26c0"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x8, 0xf00f, 0x8001, [0xf, 0xc030, 0xff1f80, 0xc00f, 0xff7e0f, 0xffc000]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x0, 0x3, 0x4, 0x8}, @generic={0x4f, 0x10, 0x4, "0b32f9b9da07a22a6a69dc9e2bf44fd1cdb9feae3131138e2f04c1b0c91289685aa6ce88d28fb7610696ba714095d5f12617360ee5c1b548ece0a07be18c8bc702468d1e364cee1d9e4ca4d4"}]}, 0x3, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x77}}]}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0xfffffffe, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x2, 0x62, {0x62, 0x23, "e2b701311a0c5b299c35597d7c4fa980f26148e47700653398dc7a09f8d8a253b9088a1bd4dd0806f81a1b50d496e7734fc89f3a3c8526df09238ce7880ad94ec6850d61a20b7c23984f25e085afe03505a444d53400b3d59b99ac429721ec73"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000001c0)={0x1c, &(0x7f0000000100)={0x0, 0x5, 0x3, "73b8a1"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x3}}) (async) 4m45.72279755s ago: executing program 3 (id=7590): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x710, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0xda03000000000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x770) 4m45.516242911s ago: executing program 3 (id=7591): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8004, 0x38, &(0x7f0000006680)) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) unshare(0x2c020400) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) 4m44.660173621s ago: executing program 3 (id=7598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0xffffffff, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) 4m44.440368092s ago: executing program 3 (id=7599): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0xcd0b9642b84fbf7d, 0x40, 0x1000, 0x4, 0xd968d5b908ac0cde, 0x1, {0x0, 0xd96}, {0x350}, {0xf4ef}, {0x20, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0xffff9a70, 0x0, 0x8, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) 4m44.241621889s ago: executing program 35 (id=7599): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0xcd0b9642b84fbf7d, 0x40, 0x1000, 0x4, 0xd968d5b908ac0cde, 0x1, {0x0, 0xd96}, {0x350}, {0xf4ef}, {0x20, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0xffff9a70, 0x0, 0x8, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) 2m45.632725013s ago: executing program 8 (id=8309): openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000300)={0x200000, [[0x9ef8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xd], [0x10000, 0x0, 0x20000], [0x7]], '\x00', [{0x5}, {0x0, 0xfffffffa}, {}, {0x4, 0x80000000}, {0x3, 0x40000000, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x200006}, {0x0, 0xfffffffe}], '\x00', 0x1000}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) io_setup(0x5, &(0x7f0000000000)=0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) io_submit(r5, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000080)=0x10) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xfe8d, 0x0, 0x0, {0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x0, 0x0, r3, 0x3, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0x5c, 0x4, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000084}, 0x44010) syz_fuse_handle_req(r0, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20060, 0x0) 2m44.690111748s ago: executing program 8 (id=8319): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c0000001400b59527bd7000ffdbdf250a1700ff", @ANYRES32=r1, @ANYBLOB="140002000000000000000000000000020000000114000180200100000000000000000000000000020800090005"], 0x5c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 2m44.491748976s ago: executing program 8 (id=8320): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000ffff27bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000f003c00128009000100766c616e000000002c000280100004800c000100ff010000f9ffffff0600010000000000100003800c000100010000004903000008000500", @ANYRES32=r1, @ANYBLOB="140003"], 0x78}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 2m44.25235883s ago: executing program 8 (id=8322): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 2m43.796507524s ago: executing program 8 (id=8323): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, &(0x7f00000000c0)=@tcp6}, 0x20) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0000d0452e"], 0x50) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000019100)=@newlink={0x48, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x20, 0x14810}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) close(r4) (async) r7 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) (async) execveat$binfmt(r7, r3, 0x0, 0x0, 0x100) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) (async) r8 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) (async) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f00000004c0)={[0x0, 0x0]}, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2m42.483818728s ago: executing program 8 (id=8328): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190780001024a0000000000000000000000ac1e0001ac141401071300e000040200000000ffffffffac14140c00"/82], 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) r9 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d80)=@newchain={0xbd8, 0x64, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x2e}, {0x6, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0xb88, 0x2, [@TCA_FLOW_EMATCHES={0xb84, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_LIST={0x2f4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x8001, 0x2, 0x3}, {0x5, 0x6, 0x1, "529496f29d96"}}}, @TCF_EM_CONTAINER={0x84, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x1a}, "b8bb947e8fba52538e29816867a4340fdf6230e984798989bde9892c89233bc9672f5da0a192fb494d388633db880e6012ceb57ff2a526461c8dfb745fad989eed8419dd2d2fade5e3369544d0c276c8bbc8d397060589ec29bafaa6c4f4e3f9dde32e680e32b0c48313fe95b9bd8ecf07753dd7d5"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0xffff}, {0x0, 0x7, 0x0, 0x6, 0x0, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x3}, {0x8, 0x8, 0xdd8f, 0x4, 0x2, 0x0, 0x2}}}, @TCF_EM_META={0x5c, 0x2, 0x0, 0x0, {{0x1ff, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_VAR="977b75fa32", @TCF_META_TYPE_VAR="46e6bc444ac96cd8", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="bd40f30f8d1383ec93"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x3, 0x2}, {0x6, 0x9, 0x1}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x5, 0x1}, {0x1, 0x4}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="1855"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_IPT={0xe4, 0x2, 0x0, 0x0, {{0x8000, 0x9, 0x5806}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xc1, 0x5, "4844641099f71c304d63e547ca21fcd6790397e3b01e00a26d85c095336166b9bc40fdd149edbe41334d95738f69a85413fc7f5a289dfd2aac2ab11724a57445bb42bfe377f755614d376efbef9b1c02e56cfb9c8978d9aa184ac308b5d4e0442358554ad6a7fcde15daf72a80b492306dee80dd9a4521e8c01491e01883acb38b06c62307b6283d4a505ac921b932374a95ee225b1d4bde7755c040af312732846de168d2d7540d33939565f92497848f09577b0bb9b5b26ee18339b2"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x40}, {0x7, 0x3, 0x2, "13e704"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x6f}, {{0x3, 0x0, 0x1}, {0x4}}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x7}, {0x7, 0xa, 0x0, "7de87a5f17ad6729321b"}}}, @TCF_EM_CONTAINER={0xa0, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x9000}, "383640fc3a4378c4e7759ff413d21d7cd1ba66e457b3cba3b644573df426d9271db7daef9cd4965e00aae68f04ba67b8a142c8689f2def39164db279f556aef00ea8c9a2a87f9f8405805d9af4efd8e02e66fdf0e694198e911088a092fea6724f73cfc61e0dd69abd168efdb5d4667bc36659b927a6f1458d0298d535fb97a9085f68948eaaa5c138895b49efe3145d21"}}]}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_META={0xbc, 0x2, 0x0, 0x0, {{0xfffd, 0x4, 0xf}, [@TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR=']', @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="73bc49f524335e0349", @TCF_META_TYPE_VAR="7477f84f839a", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="d10c7276fa1ca5c2"]}, @TCA_EM_META_LVALUE={0x3e, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="56ac9f47d71ea1", @TCF_META_TYPE_VAR="9feffc3c3715c1", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="6f0467a63dfdcc91", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b1eff7cbc3b95f64", @TCF_META_TYPE_VAR="fbfdc9762c025e73"]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="6671b3d4", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="30de50e554d94d0f9d87"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="8ef3901157f6c2f19e1c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x80, 0x2}, {0x7fff, 0x10, 0x1}}}]}}, @TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0x80, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x401, 0x5, 0x1}, {0xbefa, 0x80, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x6, 0x2}, {0x2, 0x7, 0x1}}}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR="bbe546f114449986e928", @TCF_META_TYPE_VAR="aa", @TCF_META_TYPE_VAR="0f9a", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="f82bf0ec6e8e"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x300, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x3, 0x0, 0x0, {{0x200, 0x9, 0x101}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}, @TCF_EM_IPT={0x84, 0x2, 0x0, 0x0, {{0xbb}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x48, 0x5, "26fe2f0434587a9fd674847366ab16da6dc2aa3fd341056f364de8949862a9b9c79444eab72fec404502fc54e9e3fa00e09256c7bc5fa2e08ca4cbedd15e7adf12bae697"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x3}, {0x6, 0x8, 0x1, "ba588682ab7e5984"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{}, {0xf28b, 0x6, 0x0, "661d20e6709a"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x40, 0x3, 0x9}, {0x534, 0xffff, 0x8000, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0xff}, {0x6, 0x75e, 0xad79, 0x3, 0x0, 0x2, 0x2}}}, @TCF_EM_IPT={0x104, 0x3, 0x0, 0x0, {{0x1, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_DATA={0xae, 0x5, "836eeb5047762140f7149230cc8b901a887268379b5ddb0fe634a53646f12d833d45b68fa53bccb14893be666d31fc5b1da79322e2a35dee905f2be1da9788c3cf1c1f751ca90a3c715537469101006ec4ec3b639bfe8fb63b60c98e95e47e2764fa236636d916ee5397faed2e67725d7f86abb6a6cf98bdc05bbfe6f353f4800ca9ca04f4ac6765d96d281fda5fd8b12304c242f9e804ed11c9af30e18422f4defc0732bd94578fc2e9"}, @TCA_EM_IPT_MATCH_DATA={0x2e, 0x5, "d57bf06d7d97466d2c3849f2f76298c615031695f789d34b3d54018d67cc5c7f31d08efde0c945043997"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CONTAINER={0xe4, 0x3, 0x0, 0x0, {{0x1, 0x0, 0xfff}, "42047cc51f0bce5f13cc36bbbc03fe0dc2c4cbea88eb0deffff377cb645c8ee29e8584f173728fed6dcb8bdbe5b32a85fc92a190b69443949ef8c4f9b8bbc08820c7ae902f4c0a3f3d9bc12e027e6d18ac8cfa7928763d9965d9f42b158885fba82f2aa96ffe93814f2073a21ae9c028d3ab6956c1e99dd336f9c53ffd661417ae504e070cfb41c47c3ef0aa48726f314181af05ede784ec82a4189763b34a6208786d40a68c4ae53b7030ea456a66c332d0086fbfbf1a7c7b8170611191f29cd6de171ddad8680493fd125fa87049dcb14ef958652c52"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0xfff, 0x4, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x40, 0x8, 0xfc}, {0x2, 0x5, 0x2}}}, @TCF_EM_CONTAINER={0x64, 0x3, 0x0, 0x0, {{0xe}, "559041d3692baf13f1f0485c2fd44a39d846f4236bb2716abd6023ae3a703d096e66f16a0fb488f0bd97050a3a8fa3a4cac7404df6df5fa050cd0f771a9f55a7044168f6205ca5f937fa52ae3c976c27239f14c7b37a6491"}}]}, @TCA_EMATCH_TREE_LIST={0x268, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xf801, 0x3, 0x9}, {0x7, 0xf, 0x7, 0x5}}}, @TCF_EM_META={0x80, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x7937}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x1, 0x2}, {0xe, 0xa, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="290f08a66f348694", @TCF_META_TYPE_VAR="4d86a698ba4c", @TCF_META_TYPE_VAR="c7226c"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="c3883e70d9057f03fe"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x9e, 0x2}, {0x0, 0x26, 0x5}}}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_VAR="521b", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="fd0661afdc1d2d", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="43ca31e7", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_IPT={0x1a8, 0x3, 0x0, 0x0, {{0xc, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_DATA={0x5, 0x5, 'p'}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4a, 0x5, "b6c0d717d7be067773a0ddbb6eedc27c404b5876227cb55918bde9996aa2f545ce8fa389ad8d6614f841194f4330f8997462bd0d1b0617a5d07188e65c62b3b2f97c8317cab2"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x103, 0x5, "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"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x400, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x8}, {0x330a, 0x1, 0x2}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xea, 0x3, 0x6afc}, {0x3d1cfec1, 0x2, 0x7, 0xfffffbc1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x290, 0x7, 0x51}, {{0x3, 0x0, 0x1}, {0x2, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x101}, {0x3, 0x0, 0x6, 0xdd}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xff64, 0x3, 0x6}, {0x100, 0xfffffffe, 0x6, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x200}, {0x3, 0x7, 0x2, "a1505b9b2e3685"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8000, 0x1, 0x80}, {0x9, 0x4, 0x4, 0x6, 0x5, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x10, 0x0, 0x0, {{0x5, 0x3, 0x5}, {0x4, 0x7, 0x9, 0x84}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7f, 0x3, 0xfffe}, {0x9, 0x5a58, 0x7f, 0x7f}}}, @TCF_EM_CONTAINER={0x50, 0x3, 0x0, 0x0, {{0xe45, 0x0, 0x8}, "e3b23ae472c472a5dc43d74c0ebbc44b2d252569cb863a3f7282166b6f93cf8a2c351909bd6c33d029da1cd132db426233ac08e848fb064bfb0a966b5b5af5c7a7a42360"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x30c, 0x1, 0x7}, {0x9, 0x3, 0x5, 0x4, 0xa, 0x2}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xf11, 0x4, 0x6ccb}, [@TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="a53100b4924a"]}]}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0x80, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x86}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0xbd8}, 0x1, 0x0, 0x0, 0x800}, 0x4000090) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) 2m27.411092185s ago: executing program 36 (id=8328): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190780001024a0000000000000000000000ac1e0001ac141401071300e000040200000000ffffffffac14140c00"/82], 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) r9 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d80)=@newchain={0xbd8, 0x64, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x2e}, {0x6, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0xb88, 0x2, [@TCA_FLOW_EMATCHES={0xb84, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_LIST={0x2f4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x8001, 0x2, 0x3}, {0x5, 0x6, 0x1, "529496f29d96"}}}, @TCF_EM_CONTAINER={0x84, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x1a}, "b8bb947e8fba52538e29816867a4340fdf6230e984798989bde9892c89233bc9672f5da0a192fb494d388633db880e6012ceb57ff2a526461c8dfb745fad989eed8419dd2d2fade5e3369544d0c276c8bbc8d397060589ec29bafaa6c4f4e3f9dde32e680e32b0c48313fe95b9bd8ecf07753dd7d5"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0xffff}, {0x0, 0x7, 0x0, 0x6, 0x0, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x3}, {0x8, 0x8, 0xdd8f, 0x4, 0x2, 0x0, 0x2}}}, @TCF_EM_META={0x5c, 0x2, 0x0, 0x0, {{0x1ff, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_VAR="977b75fa32", @TCF_META_TYPE_VAR="46e6bc444ac96cd8", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="bd40f30f8d1383ec93"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x3, 0x2}, {0x6, 0x9, 0x1}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x5, 0x1}, {0x1, 0x4}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="1855"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_IPT={0xe4, 0x2, 0x0, 0x0, {{0x8000, 0x9, 0x5806}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xc1, 0x5, "4844641099f71c304d63e547ca21fcd6790397e3b01e00a26d85c095336166b9bc40fdd149edbe41334d95738f69a85413fc7f5a289dfd2aac2ab11724a57445bb42bfe377f755614d376efbef9b1c02e56cfb9c8978d9aa184ac308b5d4e0442358554ad6a7fcde15daf72a80b492306dee80dd9a4521e8c01491e01883acb38b06c62307b6283d4a505ac921b932374a95ee225b1d4bde7755c040af312732846de168d2d7540d33939565f92497848f09577b0bb9b5b26ee18339b2"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x40}, {0x7, 0x3, 0x2, "13e704"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x6f}, {{0x3, 0x0, 0x1}, {0x4}}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x7}, {0x7, 0xa, 0x0, "7de87a5f17ad6729321b"}}}, @TCF_EM_CONTAINER={0xa0, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x9000}, "383640fc3a4378c4e7759ff413d21d7cd1ba66e457b3cba3b644573df426d9271db7daef9cd4965e00aae68f04ba67b8a142c8689f2def39164db279f556aef00ea8c9a2a87f9f8405805d9af4efd8e02e66fdf0e694198e911088a092fea6724f73cfc61e0dd69abd168efdb5d4667bc36659b927a6f1458d0298d535fb97a9085f68948eaaa5c138895b49efe3145d21"}}]}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_META={0xbc, 0x2, 0x0, 0x0, {{0xfffd, 0x4, 0xf}, [@TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR=']', @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="73bc49f524335e0349", @TCF_META_TYPE_VAR="7477f84f839a", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="d10c7276fa1ca5c2"]}, @TCA_EM_META_LVALUE={0x3e, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="56ac9f47d71ea1", @TCF_META_TYPE_VAR="9feffc3c3715c1", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="6f0467a63dfdcc91", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b1eff7cbc3b95f64", @TCF_META_TYPE_VAR="fbfdc9762c025e73"]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="6671b3d4", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="30de50e554d94d0f9d87"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="8ef3901157f6c2f19e1c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x80, 0x2}, {0x7fff, 0x10, 0x1}}}]}}, @TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0x80, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x401, 0x5, 0x1}, {0xbefa, 0x80, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x6, 0x2}, {0x2, 0x7, 0x1}}}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR="bbe546f114449986e928", @TCF_META_TYPE_VAR="aa", @TCF_META_TYPE_VAR="0f9a", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="f82bf0ec6e8e"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x300, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x3, 0x0, 0x0, {{0x200, 0x9, 0x101}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}, @TCF_EM_IPT={0x84, 0x2, 0x0, 0x0, {{0xbb}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x48, 0x5, "26fe2f0434587a9fd674847366ab16da6dc2aa3fd341056f364de8949862a9b9c79444eab72fec404502fc54e9e3fa00e09256c7bc5fa2e08ca4cbedd15e7adf12bae697"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x3}, {0x6, 0x8, 0x1, "ba588682ab7e5984"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{}, {0xf28b, 0x6, 0x0, "661d20e6709a"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x40, 0x3, 0x9}, {0x534, 0xffff, 0x8000, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0xff}, {0x6, 0x75e, 0xad79, 0x3, 0x0, 0x2, 0x2}}}, @TCF_EM_IPT={0x104, 0x3, 0x0, 0x0, {{0x1, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_DATA={0xae, 0x5, "836eeb5047762140f7149230cc8b901a887268379b5ddb0fe634a53646f12d833d45b68fa53bccb14893be666d31fc5b1da79322e2a35dee905f2be1da9788c3cf1c1f751ca90a3c715537469101006ec4ec3b639bfe8fb63b60c98e95e47e2764fa236636d916ee5397faed2e67725d7f86abb6a6cf98bdc05bbfe6f353f4800ca9ca04f4ac6765d96d281fda5fd8b12304c242f9e804ed11c9af30e18422f4defc0732bd94578fc2e9"}, @TCA_EM_IPT_MATCH_DATA={0x2e, 0x5, "d57bf06d7d97466d2c3849f2f76298c615031695f789d34b3d54018d67cc5c7f31d08efde0c945043997"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CONTAINER={0xe4, 0x3, 0x0, 0x0, {{0x1, 0x0, 0xfff}, "42047cc51f0bce5f13cc36bbbc03fe0dc2c4cbea88eb0deffff377cb645c8ee29e8584f173728fed6dcb8bdbe5b32a85fc92a190b69443949ef8c4f9b8bbc08820c7ae902f4c0a3f3d9bc12e027e6d18ac8cfa7928763d9965d9f42b158885fba82f2aa96ffe93814f2073a21ae9c028d3ab6956c1e99dd336f9c53ffd661417ae504e070cfb41c47c3ef0aa48726f314181af05ede784ec82a4189763b34a6208786d40a68c4ae53b7030ea456a66c332d0086fbfbf1a7c7b8170611191f29cd6de171ddad8680493fd125fa87049dcb14ef958652c52"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0xfff, 0x4, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x40, 0x8, 0xfc}, {0x2, 0x5, 0x2}}}, @TCF_EM_CONTAINER={0x64, 0x3, 0x0, 0x0, {{0xe}, "559041d3692baf13f1f0485c2fd44a39d846f4236bb2716abd6023ae3a703d096e66f16a0fb488f0bd97050a3a8fa3a4cac7404df6df5fa050cd0f771a9f55a7044168f6205ca5f937fa52ae3c976c27239f14c7b37a6491"}}]}, @TCA_EMATCH_TREE_LIST={0x268, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xf801, 0x3, 0x9}, {0x7, 0xf, 0x7, 0x5}}}, @TCF_EM_META={0x80, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x7937}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x1, 0x2}, {0xe, 0xa, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="290f08a66f348694", @TCF_META_TYPE_VAR="4d86a698ba4c", @TCF_META_TYPE_VAR="c7226c"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="c3883e70d9057f03fe"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x9e, 0x2}, {0x0, 0x26, 0x5}}}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_VAR="521b", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="fd0661afdc1d2d", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="43ca31e7", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_IPT={0x1a8, 0x3, 0x0, 0x0, {{0xc, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_DATA={0x5, 0x5, 'p'}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4a, 0x5, "b6c0d717d7be067773a0ddbb6eedc27c404b5876227cb55918bde9996aa2f545ce8fa389ad8d6614f841194f4330f8997462bd0d1b0617a5d07188e65c62b3b2f97c8317cab2"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x103, 0x5, "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"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x400, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x8}, {0x330a, 0x1, 0x2}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xea, 0x3, 0x6afc}, {0x3d1cfec1, 0x2, 0x7, 0xfffffbc1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x290, 0x7, 0x51}, {{0x3, 0x0, 0x1}, {0x2, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x101}, {0x3, 0x0, 0x6, 0xdd}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xff64, 0x3, 0x6}, {0x100, 0xfffffffe, 0x6, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x200}, {0x3, 0x7, 0x2, "a1505b9b2e3685"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8000, 0x1, 0x80}, {0x9, 0x4, 0x4, 0x6, 0x5, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x10, 0x0, 0x0, {{0x5, 0x3, 0x5}, {0x4, 0x7, 0x9, 0x84}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7f, 0x3, 0xfffe}, {0x9, 0x5a58, 0x7f, 0x7f}}}, @TCF_EM_CONTAINER={0x50, 0x3, 0x0, 0x0, {{0xe45, 0x0, 0x8}, "e3b23ae472c472a5dc43d74c0ebbc44b2d252569cb863a3f7282166b6f93cf8a2c351909bd6c33d029da1cd132db426233ac08e848fb064bfb0a966b5b5af5c7a7a42360"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x30c, 0x1, 0x7}, {0x9, 0x3, 0x5, 0x4, 0xa, 0x2}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xf11, 0x4, 0x6ccb}, [@TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="a53100b4924a"]}]}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0x80, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x86}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0xbd8}, 0x1, 0x0, 0x0, 0x800}, 0x4000090) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) 14.20410467s ago: executing program 2 (id=9179): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x60}, {0x34}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') lseek(r1, 0x401, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000005c0)=0x80000) 14.116311637s ago: executing program 2 (id=9180): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) socket$inet_tcp(0x2, 0x1, 0x0) 11.913371738s ago: executing program 2 (id=9192): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r0, &(0x7f0000002380), 0x0, 0x0, 0x0) 11.836338034s ago: executing program 2 (id=9193): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x8012}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac0e0000}, 0x8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/213, 0xd5}, {&(0x7f0000000900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4104, 0x1008}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/4075, 0xfeb}, {&(0x7f00000004c0)=""/106, 0x6a}, {&(0x7f0000000100)=""/83, 0x53}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}], 0x8, 0x40010020, 0x0) 11.735469363s ago: executing program 2 (id=9194): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x80000, 0x102) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x2c00) r2 = syz_io_uring_setup(0xbdb, &(0x7f0000000640)={0x0, 0xec28, 0x4, 0x1, 0x40010333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x72, 0x4007, @fd_index=0x6, 0x3, &(0x7f0000000cc0)=[{&(0x7f0000000380)=""/35, 0x23}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f00000007c0)=""/205, 0xcd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f00000008c0)=""/154, 0x9a}, {&(0x7f0000000980)=""/233, 0xe9}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/94, 0x5e}], 0x9, 0x2, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', 0x0) request_key(0x0, 0x0, 0x0, r1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x928ff000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000500)=""/201, &(0x7f0000000040)=""/57, &(0x7f0000000bc0)=""/200, 0xffff1000}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0xed, 0x2000, 0xfffe, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) close(0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xe4401, 0x0) io_uring_setup(0x1493, &(0x7f0000000480)={0x0, 0x450b, 0x4, 0x8000004, 0x201d4, 0x0, r5}) 11.512174324s ago: executing program 2 (id=9196): r0 = syz_open_dev$usbmon(&(0x7f0000000840), 0x80000000000000, 0x101800) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x2, 0x408, 0x0, 0x110, 0x110, 0x320, 0x320, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="7a22cb490c5b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ipvlan0\x00', 'bond0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @loopback, @local}}}, {{@arp={@private, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ipvlan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7fe0262a2c3f61d8b01499b0a06dbe1103006325eb3b9094dcaad5273454"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) readv(r1, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f00000007c0)=""/76, 0x4c}], 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x5) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x80) ioctl$CEC_RECEIVE(r4, 0xc0386106, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r5, 0x8004550f, &(0x7f0000002a40)) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x7ff, 0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x95}}) dup3(r1, r0, 0x80000) 10.001335486s ago: executing program 6 (id=9209): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000480)) (async) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x1) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba801020301090227"], 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x149a82, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x149a82, 0x0) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYRESOCT=r5], 0x2e) r6 = userfaultfd(0x80801) r7 = dup(r6) r8 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x8400, 0xfffffffc}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000}) (async) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r8, 0x47f5, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r8, 0x47f5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r5, @ANYBLOB="0100000000010100000000fc529c985405971d00", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="04000000020000000100"/28], 0x50) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc0000002d00010027bd7000fcdbdf2504000000040012800a00090027"], 0xdc}}, 0x8004) 8.30359907s ago: executing program 5 (id=9213): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x5, 0x3, 0x0, 0x2, "f759ca14860e4041836dd400", '\x00\x00\a\x00', "03000500", '\x00', ["8000", "808e8889dc7fb3eacf821b00", "0800820900", "ff812500004000"]}) 8.254311658s ago: executing program 5 (id=9214): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=@newtaction={0x19a8, 0x30, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{0x1994, 0x1, [@m_vlan={0x144, 0x1d, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfff, 0x0, 0x3, 0x40, 0xf74}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc42}]}, {0xea, 0x6, "7c70cc037f82388e1fe0b9b5b94599e772891530d839d73a283eaada575dc951285a7421188166e47436ba2fbfdd4aab16d5b633054e81da85d884303d604a3bd446c9acad457837f0602dc606d91b3aba7444684a57d22e11de0fa9d37975c1d814da44d9b572c5368189a293ad0318430a249201e69e51b15667f8ba4acb525e4b5c741570051241937bd542e2d7b8e06657baefce5797809496bee1a3d79b8783912d342f7084b31249cbec0e058d7f8400491d8f31d9523157203dbc114b0cf9f795fdec407c32ffea45bb53b42a6288a202b7e19c677cd82bbceeaa0a28bf490e670e27"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x114, 0x20, 0x0, 0x0, {{0x7}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xd}, @TCA_IPT_TARG={0x86, 0x6, {0x101, 'filter\x00', 0x5, 0x883b, "9dcbf5f72e588229e47439a85b3d171045d063978c2e0bf93e746f4af292c2a5c374273ed6acf47601f6f925e0ce1601b875f98003ff970fd3112c4a9815e4107876221d3b77480ce81178ea7e7cde508a0ea86720b44e4d0b9ec6ca"}}, @TCA_IPT_TARG={0x42, 0x6, {0x5, 'nat\x00', 0x3, 0x5c, "7635bb59814bcf03f64a30ccfcaf7cf53c272063bfb41f62"}}]}, {0x16, 0x6, "cd169f93a5d1d3e6a538ae4c38688298652f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd4, 0x20, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x80, 0x3, 0x2, 0x8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7f8}]}, {0x84, 0x6, "d6adddad1954b684d293839cc59ebe52008cc72418cb2d5d8759794f6d37f28d6a81ea958138631e5225f0e017f61245de519308f88b663a10e869833a11a650d8f29d382ade57f4d9243a86bfba2e65775ceb59d76b37265794284da0b2822cd2659381eb50f1ae9747730d9366fceb936c44f73ee5fec96e9c7c9c700d3133"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0xe8, 0x15, 0x0, 0x0, {{0xc}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x1, 0x7, 0x6, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x0, 0x5, 0x2, 0x2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xfff2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x1, 0x20000000, 0x4, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x5, 0x1, 0x1, 0x40}}]}, {0x44, 0x6, "081f123c82b43c70d6b78f3878e4cefe44bf31cdde4fde1a0e14712a1cb42c982a743f0655fe17cc316c5419b15a941b9b913d848bb8c2c7fc36fc1fb0f74a30"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x138, 0x15, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xd5, 0x2, 0x7, 0x8}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100, 0x6, 0x2, 0x5}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x81, 0x80000001, 0xffffffffffffffff, 0x3, 0x2}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xb8, 0x6, "89ceca9dc82277790abc0ddf6671612c6fa594f16cbfc3a542a8c4644aa253220731546ad705f2962bc59099ab9e7424d8152eaea07581cfb4c8ebc28a7fd239fe2bae1104a414511758f8906ce4dfb81b7414e0aabc7d452d49e7cb7d5813169c5513e7a95cb19bea11f3c4a2a60a6d6ce829eafc6e11d7e7dc4603f26a6b57eb4d11f7d022a25599abc66aae1957186acf9ce706219cb2d6517a70b6ef130470b22d729623ce9c6fee7217faabba2f89768325"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0xf4, 0x1, 0x0, 0x0, {{0x7}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa3, 0x6, {0x40, 'nat\x00', 0x1, 0x5, "68310683e29e8a009d6d8b0647ed6fbe30dc757607290506cf81a11cc4e894333b01062fb527f4368a404dda18191830f12604d20df945d75415bc8428569f864416819722a782f21a6d0aec61ac772b4bd05d3db8d4787dd38f5171de54288db0e80750e18596c15bc2dcc9606310b82ebfe7de107160d453"}}]}, {0x26, 0x6, "72a1a02c3d877508b12b19f7c94b4d2ce6fc4d701fa7970381608d174cce396e8605"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_pedit={0x1110, 0x6, 0x0, 0x0, {{0xa}, {0xe4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0xc8, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x780257d5d77bfa75}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x240, 0xc, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x77ee, 0x10000007, 0x1, 0x6}, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xbb15, 0x2, 0x8, 0x3, 0x1000}, @remote, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x6, 0x8, 0x1}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2340, 0x3, 0x4, 0xf091}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x6, 0x2, 0x7, 0x5}, @multicast1, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x2, 0x1, 0x3}, @broadcast, @remote, 0xe66924a618f26371, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x1, 0xb, 0x6, 0x6d1222b5}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x1}}]}, {0xff, 0x6, "a1af7bfb19f2e8b7a335392acd13cae7211d3d0ced7e6dba0a7c8919e612ae7a8d99fe7a8e6914e5cb5cfffb15a61aab737659ff21579c5d19ed27bead717933521f7fdc2820a47be1c5f8833d3be2cab7f70dbc1cb7be360542b80654de620e43e3f91ff4e85dce30d3011c57e6e6ee9af28063d4f548dece1323bdfc914b9e0a2d0ea1e0718cdf18785637964066651997fe4f5cd016bc2215e310ea667028191c060430eb95432b973b4d5e3b3ec03a030b8e0a851c9da2f700d9b401797c7d7d4bee49da244302b127c2c7308257ec33bbe3c0327db6805a926f7eb998f34eed4f4b7ba57acb92070656c872fe65831cd637ae9292b0731c96"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x19a8}}, 0x2000400c) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)={0x0, 0x31, 0x3, "00ff91"}, 0x0, 0x0}) 6.917509419s ago: executing program 6 (id=9220): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x39, 0x0}, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2f, &(0x7f0000000000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r9 = dup3(r7, r6, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r11 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f00000001c0)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16, @ANYRES16=r11, @ANYRESOCT=0x0, @ANYRESDEC=r7, @ANYRESHEX=r3, @ANYRES64=r8, @ANYRES64=r8, @ANYRES64=r5, @ANYBLOB="8956d0e5d5fda14e8b15b1a29b71ada57aaa6c03", @ANYRES8=r9, @ANYRESDEC=r2], 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) 5.474818294s ago: executing program 5 (id=9224): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff80], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) socket$key(0xf, 0x3, 0x2) r2 = dup2(r0, r1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000500)) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={[0x0, 0x0, &(0x7f00000002c0)='-&\x00']}, &(0x7f0000000280)={[&(0x7f0000000200)='batadv_slave_1\x00', &(0x7f0000000240)='}\x1c(\x00']}) 5.196493406s ago: executing program 5 (id=9227): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x0, 0x0) 5.184373387s ago: executing program 7 (id=9229): syz_emit_ethernet(0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527a006c3c0020010000000000000000200000000001ff020000000000000000f500000000017304000400000000c9"], 0x0) 5.116602135s ago: executing program 7 (id=9230): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) (async) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000026c0)=@delchain={0x10b0, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xe, 0x5}, {0xfff1, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x1084, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xfff2}}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xe}}, @TCA_FW_ACT={0x105c, 0x4, [@m_police={0x1058, 0x1f, 0x0, 0x0, {{0xb}, {0x1014, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x2, 0x8, 0x0, 0x8, 0x1ed, 0x8, 0x5, 0x2, 0x1, 0x0, 0x6, 0xe, 0xe9d, 0xa, 0xf, 0x80, 0x4, 0x5eab8d38, 0x5, 0x400, 0xc6, 0x8, 0x8000, 0xfff, 0x5, 0x4, 0x4, 0x6, 0x10001, 0x2, 0xfffffff9, 0x7, 0x5, 0x1, 0x3, 0xfc1, 0xc, 0x5, 0x3, 0x6, 0x3, 0x2, 0x1, 0x6, 0x6, 0x3, 0x5, 0xff, 0x5, 0x1, 0x9, 0x8, 0x6, 0x1, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x2, 0xe6, 0x7, 0x7, 0xb, 0x7, 0x2, 0x7fffffff, 0x0, 0x8000, 0xf9, 0x0, 0x3, 0x8, 0x0, 0xdda, 0xf, 0x8, 0x0, 0xfffffff9, 0xf, 0xa, 0xe, 0x80, 0x6, 0xfffff4ba, 0x5, 0x7fff, 0x101, 0x79, 0xf509, 0x4, 0x3, 0x2, 0x7, 0x5, 0x101, 0xf, 0x1, 0x4, 0x5, 0xdb00, 0x6, 0x34ef, 0x9, 0x0, 0x80, 0xd, 0x3, 0xdc5d, 0x3, 0x9d5, 0x1000, 0x3ff, 0x6, 0xd, 0x1, 0xa0000000, 0x200, 0x7, 0x1000, 0x2, 0x6, 0xfff, 0x7fffffff, 0x5, 0x5, 0xd16, 0x7, 0x3, 0x2000000, 0x4, 0x7, 0x6, 0x728, 0x2, 0x1, 0x4ef, 0x0, 0x6, 0x6, 0xfffffff8, 0x3, 0x7, 0x0, 0x1, 0xa, 0x7fffffff, 0xfff00000, 0x7, 0x5, 0x1035bab4, 0x2, 0x400, 0x6, 0x8f0f, 0x0, 0x2, 0x5, 0x7fffffff, 0x1, 0x2, 0x8, 0x40, 0x50a0, 0xc, 0x8000, 0x7, 0xd37, 0x6, 0x60, 0xd2f2, 0x1, 0xc, 0x3, 0x1, 0x5, 0x8, 0xe, 0x9, 0x8, 0x7, 0x4, 0x80000001, 0x4, 0x6, 0x10000057, 0x7fffffff, 0x7, 0xc, 0x4f4, 0x6, 0x9, 0x40, 0x3ff, 0x1, 0x4, 0x8, 0x6, 0x9, 0x2, 0x395a, 0x5, 0x7, 0x9, 0x18b, 0x80000001, 0x4, 0xfffffff7, 0x3, 0x6, 0x0, 0xb55f, 0x0, 0x0, 0x101, 0xd33, 0x9, 0x5, 0x2, 0x9, 0x0, 0x6, 0x4, 0x5, 0x5, 0x7, 0x4, 0x3, 0x1004, 0x1, 0x6, 0x82, 0x1, 0xc, 0x7, 0x5, 0x1, 0xffffff48, 0x401, 0x9, 0xce, 0xff, 0x3, 0x8, 0x0, 0x5, 0x4, 0x4, 0x9, 0x80, 0x7ff, 0x2, 0x96, 0xc84e652, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3e34, 0x5, 0x5, 0x8, 0xffffff8d, 0x80000000, 0x8, 0x3, 0x5, 0x5, 0x3, 0xd760, 0x8, 0xff, 0x8, 0xc, 0x5e, 0x401, 0x23a, 0x0, 0xfffffffc, 0xd, 0x3, 0x2, 0x7fffffff, 0x5, 0x8, 0x3, 0x1, 0xf96, 0x6, 0x0, 0x2194b8ff, 0x0, 0x6, 0xfffffff7, 0x9, 0x2, 0xcb, 0x1, 0x4, 0x2, 0x8, 0x9, 0x8, 0x1f09, 0x9, 0xd, 0x94, 0x765c, 0xc, 0x1, 0x4, 0x7, 0x0, 0x270, 0x5, 0x8, 0x8, 0xde30, 0xa, 0x3, 0x4, 0x7cf, 0x7, 0xc8, 0xf440, 0x200, 0x8, 0x2, 0x81, 0x0, 0x7, 0x5, 0x9, 0x81, 0x2, 0x7, 0x6, 0xff, 0x10, 0x38, 0x8, 0x1, 0x6, 0x1, 0x6, 0x9, 0x9, 0xf, 0xfffffff9, 0x80000000, 0x1, 0x4, 0x0, 0xb, 0xfffffff7, 0x9, 0x9, 0x9, 0x8, 0x7414, 0x8000, 0x5, 0xb1c2, 0x1, 0x920c, 0xfffffffe, 0x0, 0x10001, 0x5, 0x5, 0x9, 0x8, 0x1, 0x5ee86852, 0x5, 0xff, 0x5, 0x4, 0x33, 0x5, 0x41, 0x1000, 0x5, 0xa, 0x10000, 0xb, 0x0, 0x8, 0x8, 0x3, 0x1, 0x5, 0x400, 0x2, 0x8, 0xb, 0x0, 0x191, 0x80000001, 0x345, 0x0, 0x200, 0x1, 0x9, 0x9, 0xfaac, 0x1, 0xa, 0x9, 0x100, 0x1ff, 0x8, 0x5, 0x1000, 0x1, 0x87, 0x10, 0x3, 0x5, 0x2, 0xe, 0xe41, 0x8, 0xa, 0x2, 0x131c, 0x4, 0x7, 0x1ff, 0x2, 0x9892, 0x5, 0x4, 0x918, 0x40, 0x2001, 0x81, 0x8, 0x200000, 0x1, 0x5, 0x3, 0x0, 0x5b0, 0x1, 0x3, 0xffffffff, 0x9, 0xf5, 0x1, 0x4, 0x3ff, 0x800, 0x8, 0x7, 0x2, 0xffffffff, 0xfe47, 0x2, 0x6, 0x74d, 0x0, 0x8001, 0x0, 0x5, 0x400, 0xfffffffe, 0x7, 0x3ff, 0x3, 0x1, 0xc, 0x2, 0xda3c45e6, 0x5, 0x3, 0x8, 0xf, 0xfff, 0x5, 0x8, 0x400, 0x8, 0x6, 0xfffffff7, 0x6, 0x9, 0x1, 0x0, 0xffffffff, 0x1ff, 0xa, 0x3675, 0x4, 0x1, 0x1, 0xffff0000, 0x4e, 0xff, 0x10000, 0xb1, 0x4, 0x40, 0x4, 0xb, 0x0, 0x3, 0xa, 0x3, 0x5, 0x2, 0x1d, 0x2]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x2, 0x100, 0x8, 0x0, 0xffffffff, 0x401, 0x8, 0x9, 0x0, 0xffffff99, 0x800, 0x4, 0x3, 0x3, 0x5, 0x5, 0xd7f4a9c, 0x5, 0xd5f3, 0x1, 0x3, 0x315b, 0x4, 0x701, 0xc, 0xfffffffa, 0x5, 0x1000, 0x2, 0x7, 0xfffffffa, 0xffffffc0, 0x9, 0x10001, 0x7, 0x200, 0x2, 0xffff, 0x9, 0x4, 0x9, 0x8, 0x10, 0xd, 0x8001, 0x8000, 0x7, 0x5, 0x2e, 0x3, 0xc599, 0x237e, 0x70bf, 0x0, 0x3f, 0xfffffffe, 0x7fff, 0x8, 0x0, 0x6db1f8cd, 0x2, 0x7, 0x8000, 0x4, 0x7fffffff, 0x8, 0x52a, 0x401, 0x0, 0x5, 0x8, 0x200, 0x3, 0x3, 0x150, 0xfffffffb, 0x9, 0x4f0f, 0x7, 0x0, 0x10, 0x80000000, 0xe619, 0x5, 0x4ed, 0x1ff, 0x10001, 0x7, 0x1, 0x2, 0x5145, 0xa, 0x1000, 0x6, 0x9, 0x6, 0x4, 0x7ff, 0x200, 0x7fff, 0x8, 0x1000, 0x401, 0xa0000000, 0x8, 0x9, 0x6, 0x2, 0x5, 0x4, 0x2, 0x7, 0x9, 0x4, 0xd7, 0x2c, 0x5, 0x5, 0x4, 0x8, 0x5, 0x7, 0x0, 0x1, 0x80b, 0x4, 0x80, 0xc25, 0x0, 0x7fffffff, 0x6, 0x0, 0xfffffffa, 0x4, 0x80000001, 0x3ba, 0x6, 0x8, 0xe, 0x5, 0x3, 0x8, 0x2, 0x4, 0x9, 0xe, 0x6, 0x99, 0x47f7, 0x80, 0xfffffff0, 0x1, 0x7fff, 0x4, 0x6, 0xfffffffd, 0x3, 0x4, 0x0, 0x4, 0x5, 0x6, 0x9, 0x5, 0xaa1, 0x101, 0x2, 0x5, 0xc, 0x5, 0x9, 0x4, 0xfffffffb, 0x7, 0x3, 0x2, 0xa, 0xffffffff, 0x1000, 0x1, 0x1, 0x9, 0xf5b, 0x9, 0x7, 0x0, 0x80000001, 0x3, 0x5, 0x0, 0x10001, 0x5, 0x7ff, 0x9, 0xfff, 0x2, 0x80, 0x0, 0x65, 0x4da0, 0x4, 0xb9, 0x2b16, 0xffff, 0x4, 0x4, 0x81, 0x10001, 0xb6, 0x3, 0x3, 0x9, 0xfffffffc, 0x8, 0x8, 0x5, 0x2f7c, 0xffff, 0x40000009, 0xe1ae, 0x7593, 0xfffffffd, 0x8001, 0x2, 0x200, 0x1, 0x3, 0xa2, 0x5, 0x81, 0x5, 0x0, 0xffffff01, 0x1000, 0x9, 0x85, 0x3, 0x8, 0xce8, 0x7f, 0x4, 0xf0, 0xffff7fff, 0x1, 0x3, 0x5, 0x7, 0x40, 0xc01, 0x9, 0xf1, 0x2, 0x8000, 0x77c2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x7fffffff, 0xc0000000, 0x3ff, 0x8, 0xae36, 0x7, 0x6, 0x0, 0x0, 0x7, 0x0, 0x6, 0x1, 0x0, 0x100, 0x8, 0x8210, 0x0, 0x5, 0xffff, 0xfffffffb, 0x7, 0x8, 0x2aa, 0x8001, 0x9, 0xfb2, 0x2, 0x71b81e5f, 0x4d2b, 0x423, 0x7, 0x2, 0x9, 0xd, 0x400, 0x5, 0x2, 0x3, 0x7f, 0x4, 0xa, 0x1000, 0x8000000, 0xbc, 0x6, 0x131a, 0xfffffff7, 0x0, 0x6, 0xfffffff9, 0x5f, 0x3b, 0x8, 0x8, 0x5, 0x5c1, 0xc5, 0x4, 0x569e, 0x1, 0x9, 0x9, 0x5, 0x4, 0x1000, 0x7, 0x507, 0x6, 0x504, 0xe, 0x3f4, 0x6, 0xfffff001, 0x200, 0x8, 0x9, 0xf8, 0x2, 0x5, 0x5, 0x1ff, 0x6, 0x10, 0x800, 0x8, 0x1, 0x9, 0x1, 0x8, 0xe, 0x8, 0x8, 0x4, 0x4, 0x7, 0x8, 0xffff, 0x800, 0x5, 0xffffffda, 0x3, 0x7, 0x3, 0x4, 0x8, 0x10, 0xfffffff9, 0x7, 0x0, 0x7fa, 0x7, 0x2, 0x1, 0x2, 0x39b076a1, 0xc96d, 0x9, 0xdf7, 0x7, 0x8, 0x10000, 0x2e, 0x4, 0x4, 0x5, 0x1ff, 0x0, 0x80000001, 0xb, 0x949, 0x3, 0x9, 0xfffffff9, 0x5, 0x9, 0x4, 0x1, 0xd, 0x4, 0x700, 0x8, 0x2, 0x9, 0x100, 0x813, 0x7fffffff, 0x5, 0xfffff2e8, 0x8, 0x4, 0x5, 0x5, 0xe0, 0x101, 0xd8, 0xb, 0x7, 0x3a, 0x4, 0x9, 0x5, 0xe, 0x8, 0x7f, 0xffff, 0x2, 0x4d8bf04, 0x7fff, 0x2, 0x4, 0x8a, 0xefd, 0x0, 0x10000, 0xf, 0x6, 0xffffffb4, 0x3, 0x101, 0x7, 0x53, 0x7, 0x4, 0x4, 0x3, 0x9, 0x240000, 0x400, 0xc, 0x80000000, 0x3ff, 0xb, 0x9, 0x10001, 0x7, 0x7, 0x5, 0x80, 0x6bf, 0x4379, 0x7fff, 0x5, 0x3000, 0x4, 0x10000, 0x3ff, 0xb, 0xfffffff6, 0x7, 0x1, 0x1, 0xffffffbd, 0x7, 0x2, 0x20000, 0x41, 0x2, 0x8d3, 0x335, 0x0, 0xfffffffd, 0x1, 0x4, 0xa, 0x800, 0xac, 0x9, 0x0, 0x7fff, 0x28, 0x29, 0x8, 0x4, 0xe, 0x5ec6, 0x0, 0x8, 0x800, 0x0, 0x2f, 0xc, 0x8, 0x8, 0x10000, 0x1, 0x4, 0xc6b, 0x1, 0xd, 0x587f, 0x8, 0x3, 0x800, 0x800]}]]}, {0x19, 0x6, "51bb591e38784835b406ea2d43b3a31c741d3211a7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x10b0}, 0x1, 0x0, 0x0, 0xc040}, 0xc050) recvmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/233, 0xe9}], 0x1}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) (async) syz_emit_ethernet(0x6ea, &(0x7f0000001240)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x6b4, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x2c}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xd678, 0xfff, "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"}}}}}}, 0x0) 5.087245934s ago: executing program 5 (id=9231): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x200000000000011, 0x2, 0x1) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, 0x0, 0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x17, r8, 0x1, 0x2, 0x6, @remote}, 0x14) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.876160374s ago: executing program 7 (id=9232): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x82}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) socket$inet_tcp(0x2, 0x1, 0x0) 4.196498078s ago: executing program 9 (id=9233): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60090b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4.141105752s ago: executing program 9 (id=9234): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$video(0x0, 0xf, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f00000002c0)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) read$char_usb(r5, &(0x7f0000000080)=""/139, 0xfdef) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r6, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) io_uring_setup(0x2c23, &(0x7f0000000000)={0x0, 0xf0e6, 0x2, 0x4, 0xf0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r9, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 4.084091266s ago: executing program 7 (id=9235): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0xe803) r5 = accept4(r4, 0x0, 0x0, 0x80000) recvmsg(r5, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x3) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) read$FUSE(r8, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r8, &(0x7f0000000340)=""/133, 0x85) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 3.77202975s ago: executing program 6 (id=9236): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0x5}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x2, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 3.213877386s ago: executing program 6 (id=9237): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x5, 0x8001, 0x8000000000, 0xff, 0xffffffff}, 0x0) rt_sigaction(0x1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000001b00)={0x5, 0x35315258, 0x2, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0xfffffffe, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x11, 0xb, &(0x7f0000019100)=ANY=[@ANYBLOB="dbc4ffff00000000000000000000000000006f936abc2849155c31794ad226c3adaba9851770af66d6d81bdb30bde886eeb0a94021714cadd424d18c36a3b0de4d1f150e756a675992b0"], &(0x7f0000019080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000191c0)=@abs={0x0, 0x0, 0x80000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.187252974s ago: executing program 7 (id=9238): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000001c0)={0x5b, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f00000009c0)={0x40, 0x5, 0x66, "d9e720ebacada2b0c7200d6679ee2892ac89b1217c88ac458cf579a75f786509ccf9c94e34f0e8dc9d7c23baf7724627ad0e21ac145ecdb393faf66f13f6d5ddf3898930dbc330ac401521040abe9a40b3926e733c8a9f2e90c951cb0788cd1b9a97f2b4d47b"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xa5}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x20, 0x8}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x82}, 0x0, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0x12e}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "06e3"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x49}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0xd9}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x3, 0x6, 0xebb) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x0, 0xc, 0x27, "4face774601180c524b0c72b605c3b041c6bca3fcfd6a9ae1fbb3cecf8a5cd3d3f9dc4bcd41851"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000440)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000480)={0xc0, 0xa2, 0x2f, "b4294e11f9186850b90c78e049722100d78edd5399440f94991fcecdc82c885c010315db698231a501fc5ca71d9623"}}) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) 2.787831125s ago: executing program 9 (id=9239): memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000004000", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) 2.469789047s ago: executing program 5 (id=9240): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) unshare(0x66000080) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r5 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d30826100000000080013f0", @ANYRES32=r5], 0x28}}, 0x0) 2.39242876s ago: executing program 9 (id=9241): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x0, 0x0) 2.338013838s ago: executing program 9 (id=9242): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)={0x0, 0x0, 0x9, {0x9, 0x0, "2a53fb8991f8e0"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002480), 0x0, 0x404) 2.136271238s ago: executing program 6 (id=9243): syz_emit_ethernet(0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527a006c3c0020010000000000000000200000000001ff0200000000000000000003000000017304000400000000c9"], 0x0) 2.068141664s ago: executing program 6 (id=9244): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setns(0xffffffffffffffff, 0x20000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000800080003007bd4a4c98a7d10e119152467e179ff18a86000", @ANYRES32, @ANYBLOB="14005a8010000180040001000500020057000000"], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0x9, 0x59c}) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x40b00) ioctl$BLKREPORTZONE(r6, 0xc0101282, 0x0) 206.949691ms ago: executing program 9 (id=9245): fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) syz_clone(0x103d0411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 0s ago: executing program 7 (id=9246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES16, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8=r0], 0x48}}, 0x0) kernel console output (not intermixed with test programs): led to get link speed/duplex [ 1871.203991][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1871.342628][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1871.468573][T25841] bond1: (slave macvlan2): failed to get link speed/duplex [ 1871.612558][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1871.746618][T15610] usb 6-1: USB disconnect, device number 18 [ 1872.025608][ T1943] xt_TCPMSS: Only works on TCP SYN packets [ 1872.202972][ T1948] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8583'. [ 1872.429854][ T1950] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8584'. [ 1872.549201][ T1950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8584'. [ 1872.742758][ T5904] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1872.962491][ T5904] usb 10-1: Using ep0 maxpacket: 16 [ 1872.989981][ T5904] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 1873.042475][ T5904] usb 10-1: config 0 has no interface number 0 [ 1873.056915][ T5904] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1873.077091][ T5904] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1873.093006][ T5904] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1873.102226][ T5904] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.110339][ T5904] usb 10-1: Product: syz [ 1873.114874][ T5904] usb 10-1: Manufacturer: syz [ 1873.119542][ T5904] usb 10-1: SerialNumber: syz [ 1873.126174][ T5904] usb 10-1: config 0 descriptor?? [ 1873.135494][ T1953] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1873.143758][ T1953] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1873.357831][ T1953] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1873.367819][ T1953] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1873.393603][ T1961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1873.423171][T15615] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1873.523094][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1873.596565][ T5904] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1873.616868][T15615] usb 6-1: Using ep0 maxpacket: 8 [ 1873.713061][ T5904] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1873.815653][T15615] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1873.851846][ T5904] asix 10-1:0.251: probe with driver asix failed with error -5 [ 1873.867750][T15615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.889502][ T5904] usb 10-1: USB disconnect, device number 8 [ 1873.898362][T15615] usb 6-1: Product: syz [ 1873.922350][T15615] usb 6-1: Manufacturer: syz [ 1873.947732][T15615] usb 6-1: SerialNumber: syz [ 1873.978030][T15615] usb 6-1: config 0 descriptor?? [ 1873.997544][T15615] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1874.045536][T15615] usb 6-1: setting power ON [ 1874.055947][T15615] dvb-usb: bulk message failed: -22 (2/0) [ 1874.081402][T15615] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1874.109551][T15615] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1874.215438][T15615] usb 6-1: media controller created [ 1874.306162][ T1958] dvb-usb: bulk message failed: -22 (3/0) [ 1874.312126][ T1958] dvb-usb: bulk message failed: -22 (4/0) [ 1874.318767][ T1958] cxusb: i2c read failed [ 1874.341011][T15615] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1874.490481][T15615] usb 6-1: selecting invalid altsetting 6 [ 1874.516678][T15615] usb 6-1: digital interface selection failed (-22) [ 1874.527387][T15615] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1874.612284][T15615] usb 6-1: setting power OFF [ 1874.633311][T15615] dvb-usb: bulk message failed: -22 (2/0) [ 1874.639059][T15615] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1874.641498][ T1995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1874.676181][T25841] net_ratelimit: 26 callbacks suppressed [ 1874.676199][T25841] bond1: (slave macvlan2): failed to get link speed/duplex [ 1874.694517][T15615] (NULL device *): no alternate interface [ 1874.711038][ T1995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1874.738468][ T1995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8594'. [ 1874.789221][ T1995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1874.799009][ T1995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1874.813940][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1874.923965][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1875.043302][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1875.168234][ T2006] xt_bpf: check failed: parse error [ 1875.202673][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1875.362000][T15615] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1875.379827][T25841] bond1: (slave macvlan2): failed to get link speed/duplex [ 1875.411912][T15615] usb 6-1: USB disconnect, device number 19 [ 1875.513292][T25841] bond1: (slave macvlan2): failed to get link speed/duplex [ 1875.608125][ T2014] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.8602'. [ 1875.626199][ T2015] IPVS: set_ctl: invalid protocol: 50 172.20.20.47:20000 [ 1875.643556][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1875.653427][ T2014] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1875.773191][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1875.847716][ T2023] loop5: detected capacity change from 0 to 7 [ 1875.857171][T14320] Dev loop5: unable to read RDB block 7 [ 1875.863468][T14320] loop5: AHDI p3 [ 1875.867300][T14320] loop5: partition table partially beyond EOD, truncated [ 1875.880515][ T2023] Dev loop5: unable to read RDB block 7 [ 1875.886671][ T2023] loop5: AHDI p3 [ 1875.890356][ T2023] loop5: partition table partially beyond EOD, truncated [ 1875.947291][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1876.326918][ T2043] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8611'. [ 1876.341726][ T2043] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8611'. [ 1877.904690][T25846] veth0_to_bond: left promiscuous mode [ 1878.002626][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1878.952510][T28842] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1879.115952][T28842] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1879.128800][T28842] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1879.139041][T28842] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1879.149240][T28842] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1879.158711][T28842] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.219222][T28842] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1879.338340][T28842] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1879.440786][T14130] udevd[14130]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1879.671571][ T2079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1879.695630][ T2079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1879.730934][ T30] audit: type=1326 audit(1760839482.776:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2075 comm="syz.9.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1879.735360][ T2079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1879.805083][ T2079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1879.832500][T25839] net_ratelimit: 31 callbacks suppressed [ 1879.832516][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1879.884504][ T30] audit: type=1326 audit(1760839482.776:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2075 comm="syz.9.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47ae98d810 code=0x7ffc0000 [ 1879.909010][ T5904] usb 10-1: USB disconnect, device number 9 [ 1880.042550][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1880.090261][ T30] audit: type=1326 audit(1760839482.776:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2075 comm="syz.9.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47ae98ebcb code=0x7ffc0000 [ 1880.152640][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1880.164467][ T30] audit: type=1326 audit(1760839482.776:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2075 comm="syz.9.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47ae98ebcb code=0x7ffc0000 [ 1880.265410][ T30] audit: type=1326 audit(1760839482.876:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2075 comm="syz.9.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1880.313392][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1880.354973][ T30] audit: type=1326 audit(1760839482.886:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2075 comm="syz.9.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1880.424930][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1880.446354][ T30] audit: type=1326 audit(1760839482.946:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2075 comm="syz.9.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1880.522156][ T30] audit: type=1326 audit(1760839482.946:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2075 comm="syz.9.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1880.547927][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1880.638664][ T2094] netlink: 'syz.7.8626': attribute type 10 has an invalid length. [ 1880.649562][ T2094] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8626'. [ 1880.660975][ T2094] batadv0: entered promiscuous mode [ 1880.671343][ T2094] batadv0: entered allmulticast mode [ 1880.678367][ T2094] bridge0: port 3(batadv0) entered blocking state [ 1880.685414][ T2094] bridge0: port 3(batadv0) entered disabled state [ 1880.693147][ T2093] netlink: 'syz.7.8626': attribute type 10 has an invalid length. [ 1880.695003][ T2094] bridge0: port 3(batadv0) entered blocking state [ 1880.707535][ T2094] bridge0: port 3(batadv0) entered forwarding state [ 1880.715121][ T30] audit: type=1326 audit(1760839482.946:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2075 comm="syz.9.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1880.793623][ T2093] bridge0: port 3(batadv0) entered disabled state [ 1880.838829][ T30] audit: type=1326 audit(1760839482.946:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2075 comm="syz.9.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1880.861311][ C1] vkms_vblank_simulate: vblank timer overrun [ 1880.901343][ T2093] batadv0: left allmulticast mode [ 1880.908259][ T2093] batadv0: left promiscuous mode [ 1880.916324][ T2093] bridge0: port 3(batadv0) entered disabled state [ 1880.923481][T25846] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1880.933391][T25846] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1880.960595][ T2093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1880.974589][ T2093] batadv0: entered promiscuous mode [ 1880.985557][ T2093] batadv0: entered allmulticast mode [ 1881.000589][ T2093] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1881.013050][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1881.064382][ T2096] loop5: detected capacity change from 0 to 7 [ 1881.073410][T14320] Dev loop5: unable to read RDB block 7 [ 1881.079056][T14320] loop5: AHDI p3 [ 1881.087773][T14320] loop5: partition table partially beyond EOD, truncated [ 1881.135184][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1881.148529][ T2107] xt_bpf: check failed: parse error [ 1881.211229][ T2096] Dev loop5: unable to read RDB block 7 [ 1881.219653][ T2096] loop5: AHDI p3 [ 1881.223767][ T2096] loop5: partition table partially beyond EOD, truncated [ 1881.252759][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1881.366998][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1881.571930][ T2117] netlink: 'syz.7.8634': attribute type 1 has an invalid length. [ 1881.888393][ T2132] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 1881.998648][ T2140] netlink: 'syz.6.8638': attribute type 10 has an invalid length. [ 1882.038827][ T2140] team0: Port device dummy0 added [ 1882.052117][ T2140] netlink: 'syz.6.8638': attribute type 10 has an invalid length. [ 1882.317273][ T2140] team0: Port device dummy0 removed [ 1882.331543][ T2140] dummy0: entered promiscuous mode [ 1882.353514][ T2140] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1882.492827][T29691] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1882.663718][T29691] usb 10-1: Using ep0 maxpacket: 16 [ 1882.698140][T29691] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.758525][T29691] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1882.798915][T29691] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1882.852755][T29691] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1882.902760][T29691] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.953463][T29691] usb 10-1: config 0 descriptor?? [ 1883.504601][T29691] usbhid 10-1:0.0: can't add hid device: -71 [ 1883.514097][T29691] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1883.531355][T29691] usb 10-1: USB disconnect, device number 10 [ 1884.029003][ T2172] binder: 2171:2172 ioctl 540c 0 returned -22 [ 1884.238715][ T2186] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8657'. [ 1884.477118][ T2202] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.8664'. [ 1884.499446][ T2202] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1884.650018][ T2213] netlink: 'syz.2.8663': attribute type 27 has an invalid length. [ 1884.665596][ T2212] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8667'. [ 1884.833547][ T2213] bond0: left allmulticast mode [ 1884.838442][ T2213] bond_slave_0: left allmulticast mode [ 1884.844915][ T2213] syz_tun: left allmulticast mode [ 1884.996506][ T2223] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8670'. [ 1885.029098][ T2213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1885.174984][ T2213] macvlan3: left promiscuous mode [ 1885.182115][ T2213] ip6gre1: left promiscuous mode [ 1885.199450][ T2213] ip6gre1: left allmulticast mode [ 1885.211407][ T2213] ip6gre2: left promiscuous mode [ 1885.217341][ T2213] ip6gre2: left allmulticast mode [ 1885.258414][ T2225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1885.287879][ T2225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1885.310380][ T2214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1885.320020][ T2214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1885.348851][ T2214] net_ratelimit: 26 callbacks suppressed [ 1885.348862][ T2214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1885.425078][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1885.434439][T25840] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.462071][T25840] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.483835][T15615] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1885.494768][T25840] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.528013][T25840] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.562951][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1885.625583][T25845] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1885.667069][ T2229] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8671'. [ 1885.683804][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1885.802615][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1885.853108][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1885.912549][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1886.032696][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1886.143050][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1886.322762][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1886.343565][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1886.453162][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1886.642970][T25839] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1886.656290][T25839] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1887.617694][T29694] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1887.737717][ T2252] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8677'. [ 1887.747958][ T2252] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8677'. [ 1888.409691][ T2263] Invalid logical block size (508) [ 1888.499840][ T2268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8686'. [ 1888.844404][ T2282] netlink: 'syz.2.8689': attribute type 10 has an invalid length. [ 1888.882659][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1888.890358][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1889.432556][ T5904] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1889.624674][ T5904] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1889.642072][ T5904] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1889.664816][ T5904] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.747222][ T5904] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1889.824916][ T5904] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1890.057956][ T5904] usb 10-1: USB disconnect, device number 11 [ 1890.081729][ T2299] delete_channel: no stack [ 1890.368314][T25839] net_ratelimit: 33 callbacks suppressed [ 1890.368330][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1890.512627][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1890.622739][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1890.733201][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1890.862656][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1890.992219][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1891.052623][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1891.102575][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1891.212755][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1891.337998][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1891.378561][ T2309] netlink: 'syz.5.8699': attribute type 11 has an invalid length. [ 1891.452861][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1891.479993][ T2320] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8702'. [ 1891.556363][ T2322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1891.571487][ T2325] loop5: detected capacity change from 0 to 7 [ 1891.579075][ T2322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1891.589342][T14320] Dev loop5: unable to read RDB block 7 [ 1891.596723][T14320] loop5: AHDI p3 [ 1891.600499][T14320] loop5: partition table partially beyond EOD, truncated [ 1891.631505][ T2325] Dev loop5: unable to read RDB block 7 [ 1891.639503][ T2325] loop5: AHDI p3 [ 1891.646482][ T2325] loop5: partition table partially beyond EOD, truncated [ 1891.853114][ T2330] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8705'. [ 1892.222552][T29694] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1892.520060][T29694] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1892.530611][T29694] usb 10-1: not running at top speed; connect to a high speed hub [ 1892.554835][T29694] usb 10-1: config 2 has an invalid interface number: 212 but max is 0 [ 1892.565807][T29694] usb 10-1: config 2 has no interface number 0 [ 1892.579199][T29694] usb 10-1: config 2 interface 212 has no altsetting 0 [ 1892.600476][T29694] usb 10-1: language id specifier not provided by device, defaulting to English [ 1892.721361][T29694] usb 10-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1892.739816][T29694] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.752563][T29694] usb 10-1: Product: syz [ 1892.756981][T29694] usb 10-1: SerialNumber: syz [ 1894.765521][ T2373] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8715'. [ 1894.781848][ T2373] unsupported nlmsg_type 40 [ 1895.375033][T29694] usb 10-1: USB disconnect, device number 12 [ 1895.456647][T25845] net_ratelimit: 32 callbacks suppressed [ 1895.456667][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1895.482647][ T2381] input: syz0 as /devices/virtual/input/input96 [ 1895.585471][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1895.858136][ T2389] netlink: 'syz.6.8719': attribute type 11 has an invalid length. [ 1895.903835][ T2386] futex_wake_op: syz.7.8717 tries to shift op by 144; fix this program [ 1895.982801][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1896.164118][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1896.273678][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1896.392570][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1896.592625][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1896.742561][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1896.852932][T29694] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1896.853685][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1896.992536][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1897.015694][T29694] usb 10-1: Using ep0 maxpacket: 8 [ 1897.060769][T29694] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1897.114784][T29694] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.132202][T29694] usb 10-1: Product: syz [ 1897.138159][T29694] usb 10-1: Manufacturer: syz [ 1897.143482][T29694] usb 10-1: SerialNumber: syz [ 1897.154545][T29694] usb 10-1: config 0 descriptor?? [ 1897.359790][ T2437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.408007][T29694] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1897.424601][ T2437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.450686][ T2437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.468814][ T2437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.640355][T29694] usb write operation failed. (-71) [ 1897.686183][T29694] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1897.723033][T29694] dvbdev: DVB: registering new adapter (Terratec H7) [ 1897.742872][T29694] usb 10-1: media controller created [ 1897.749401][T29694] usb read operation failed. (-71) [ 1897.757185][T29694] usb write operation failed. (-71) [ 1897.767277][T29694] dvb_usb_az6007 10-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1897.782906][T29694] usb 10-1: USB disconnect, device number 13 [ 1897.804335][ T2454] netlink: 830 bytes leftover after parsing attributes in process `syz.9.8732'. [ 1898.148572][ T2468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.236479][ T2468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.526681][ T2481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8736'. [ 1898.591789][ T2484] loop4: detected capacity change from 0 to 7 [ 1898.649420][T14320] Dev loop4: unable to read RDB block 7 [ 1898.658170][T14320] loop4: unable to read partition table [ 1898.667106][T14320] loop4: partition table beyond EOD, truncated [ 1898.678178][ T2484] Dev loop4: unable to read RDB block 7 [ 1898.691598][ T2484] loop4: unable to read partition table [ 1898.713153][ T2484] loop4: partition table beyond EOD, truncated [ 1898.728825][ T2484] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1898.991112][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1898.991124][ T30] audit: type=1326 audit(1760839502.036:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2489 comm="syz.9.8740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1899.033110][ T30] audit: type=1326 audit(1760839502.066:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2489 comm="syz.9.8740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1899.071031][ T30] audit: type=1326 audit(1760839502.066:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2489 comm="syz.9.8740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1899.096281][ T30] audit: type=1326 audit(1760839502.066:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2489 comm="syz.9.8740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1899.119290][ T30] audit: type=1326 audit(1760839502.066:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2489 comm="syz.9.8740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1899.259773][ T30] audit: type=1326 audit(1760839502.066:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2489 comm="syz.9.8740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1899.312526][ T30] audit: type=1326 audit(1760839502.066:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2489 comm="syz.9.8740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1899.352556][ T30] audit: type=1326 audit(1760839502.066:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2489 comm="syz.9.8740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1899.407807][ T30] audit: type=1326 audit(1760839502.066:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2489 comm="syz.9.8740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1899.475795][ T30] audit: type=1326 audit(1760839502.076:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2489 comm="syz.9.8740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1899.620822][ T2500] pim6reg: entered allmulticast mode [ 1899.648402][ T2503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1899.657999][ T2503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1900.402701][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1900.533416][T25838] net_ratelimit: 28 callbacks suppressed [ 1900.533434][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1900.692737][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1900.807414][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1900.886432][ T2545] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8755'. [ 1900.902817][ T2545] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8755'. [ 1900.922706][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1901.083817][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1901.098137][ T5904] usb 7-1: USB disconnect, device number 53 [ 1901.213341][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1901.294118][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1901.308599][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1901.337410][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1901.357415][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1901.366665][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1901.374433][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1901.455879][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1901.561979][T26991] bond0: (slave syz_tun): Releasing backup interface [ 1901.653411][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1901.779784][ T2552] chnl_net:caif_netlink_parms(): no params data found [ 1901.890759][ T2552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.898247][ T2552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.913067][ T2552] bridge_slave_0: entered allmulticast mode [ 1901.921034][ T2552] bridge_slave_0: entered promiscuous mode [ 1901.965645][ T2552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.972957][ T2552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.980165][ T2552] bridge_slave_1: entered allmulticast mode [ 1901.987518][ T2552] bridge_slave_1: entered promiscuous mode [ 1902.017038][ T2552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1902.028642][ T2552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1902.063496][ T2552] team0: Port device team_slave_0 added [ 1902.070858][ T2552] team0: Port device team_slave_1 added [ 1902.171683][ T2552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1902.180351][ T2552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1902.210328][ T2552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1902.216536][ T2570] netlink: 'syz.9.8760': attribute type 1 has an invalid length. [ 1902.223297][ T2552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1902.236321][ T2552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1902.268202][ T2552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1902.448657][ T2570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1902.611896][ T2585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1902.634274][ T2585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.689995][ T2571] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1902.740469][ T2578] bond1: (slave veth0_to_bond): making interface the new active one [ 1902.772064][ T2578] veth0_to_bond: entered promiscuous mode [ 1902.787528][ T2578] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1902.944835][ T2552] hsr_slave_0: entered promiscuous mode [ 1902.983327][ T2552] hsr_slave_1: entered promiscuous mode [ 1902.989899][ T2592] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 1903.004763][ T2552] debugfs: 'hsr0' already exists in 'hsr' [ 1903.021125][ T2552] Cannot create hsr debugfs directory [ 1903.476756][ T2552] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.512976][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1903.522568][ T5834] Bluetooth: hci6: command tx timeout [ 1903.577274][ T2552] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.759526][ T2552] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.121868][ T2552] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1904.139865][ T2552] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1904.166430][ T2552] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1904.180578][ T2552] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1904.251600][T29700] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1904.270862][T29700] dvb_usb_dibusb_mb 9-1:191.159: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1904.286261][T29700] dvb-usb: found a 'Artec T1 USB2.0 TVBOX (please check the warm ID)' in cold state, will try to load a firmware [ 1904.306242][T29700] usb 9-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 1904.328213][T29700] usb 9-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 1904.438187][ T2552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1904.455633][ T2552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1904.489119][T25838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1904.496310][T25838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1904.522241][T25838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1904.529440][T25838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1904.798417][ T2552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1904.925957][ T2552] veth0_vlan: entered promiscuous mode [ 1904.956883][ T2552] veth1_vlan: entered promiscuous mode [ 1904.994882][ T2552] veth0_macvtap: entered promiscuous mode [ 1905.006079][ T2552] veth1_macvtap: entered promiscuous mode [ 1905.026726][ T2552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1905.042055][ T2552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1905.059162][T25845] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.070269][T25845] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.094904][T25845] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.108781][T25845] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.313909][T25838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.326822][T25838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.404500][T25839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.413192][T25839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.562337][ T2647] netlink: 88 bytes leftover after parsing attributes in process `syz.6.8773'. [ 1905.582905][T25845] net_ratelimit: 11 callbacks suppressed [ 1905.582918][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1905.606422][ T5834] Bluetooth: hci6: command tx timeout [ 1905.713553][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1905.720245][ T2651] netlink: 'syz.6.8775': attribute type 10 has an invalid length. [ 1905.744997][ T2651] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1905.810934][ T2651] bond_slave_0: entered promiscuous mode [ 1905.816656][ T2651] bond_slave_1: entered promiscuous mode [ 1905.822307][ T2651] syz_tun: entered promiscuous mode [ 1905.828926][ T2651] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1905.838081][ T2651] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 1905.857620][ T2651] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1905.875396][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1906.052651][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1906.326397][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1906.432985][T29694] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1906.446734][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1906.603910][T29694] usb 10-1: config 0 has no interfaces? [ 1906.611305][T29694] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1906.622206][T29694] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.643701][T29694] usb 10-1: Product: syz [ 1906.659699][T29694] usb 10-1: Manufacturer: syz [ 1906.664917][T29694] usb 10-1: SerialNumber: syz [ 1906.673619][T29694] usb 10-1: config 0 descriptor?? [ 1906.702533][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1906.814566][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1906.942614][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1906.953383][T29694] usb 10-1: USB disconnect, device number 14 [ 1907.070144][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1907.134385][ T2691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8781'. [ 1907.279142][ T2693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8782'. [ 1907.686659][ T5834] Bluetooth: hci6: command tx timeout [ 1907.742816][T29706] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1907.763775][ T2713] netlink: 'syz.2.8790': attribute type 2 has an invalid length. [ 1907.894599][T29706] usb 6-1: Using ep0 maxpacket: 32 [ 1907.912941][T29706] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1907.921816][T29706] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1907.937260][T28842] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1907.945322][ T2722] netlink: 'syz.6.8793': attribute type 4 has an invalid length. [ 1907.958761][T29706] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1907.978612][T29706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 1908.019357][T29706] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1908.040119][T29706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1908.050484][T29706] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1908.068903][T29706] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1908.097979][ T2726] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 1908.108339][T28842] usb 10-1: Using ep0 maxpacket: 32 [ 1908.114882][ T2728] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8796'. [ 1908.126518][T28842] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1908.140118][ T2726] bond3: (slave vcan1): Error -95 calling set_mac_address [ 1908.144837][ T2730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8797'. [ 1908.151563][T29706] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1908.165829][T28842] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1908.176026][T29706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.185422][T28842] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1908.222379][T29706] usb 6-1: config 0 descriptor?? [ 1908.236710][T28842] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1908.265240][ T2693] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1908.275252][T28842] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1908.285299][T28842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.296788][T28842] usb 10-1: Product: syz [ 1908.301112][T28842] usb 10-1: Manufacturer: syz [ 1908.312847][T28842] usb 10-1: SerialNumber: syz [ 1908.346689][ T2737] loop5: detected capacity change from 0 to 7 [ 1908.354650][ T2737] Dev loop5: unable to read RDB block 7 [ 1908.360264][ T2737] loop5: AHDI p3 [ 1908.365149][ T2737] loop5: partition table partially beyond EOD, truncated [ 1908.365220][ T2738] netlink: 'syz.7.8798': attribute type 2 has an invalid length. [ 1908.390394][ T2738] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8798'. [ 1908.414990][T29706] usblp0: Disabling reads from problematic bidirectional printer [ 1908.520069][ T2743] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 1908.580258][T28842] cdc_ncm 10-1:1.0: failed GET_NTB_PARAMETERS [ 1908.586666][T28842] cdc_ncm 10-1:1.0: bind() failure [ 1908.617123][T28842] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1908.650683][T28842] cdc_ncm 10-1:1.1: bind() failure [ 1908.696852][T28842] usb 10-1: USB disconnect, device number 15 [ 1908.945078][T29706] usblp 6-1:0.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 1909.004292][T29706] usb 6-1: USB disconnect, device number 20 [ 1909.016183][T29706] usblp0: removed [ 1909.764037][ T5834] Bluetooth: hci6: command tx timeout [ 1910.731016][ T2802] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1910.835194][ T2793] net_ratelimit: 30 callbacks suppressed [ 1910.835207][ T2793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1910.972683][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1911.677483][ T2807] dvmrp0: entered allmulticast mode [ 1911.693173][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1911.802584][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1911.912600][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1912.074497][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1912.222776][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1912.343366][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1912.493703][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1912.612759][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1912.770829][ T2832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8824'. [ 1912.989002][ T2841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8827'. [ 1912.998947][ T2841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8827'. [ 1914.274094][T17452] veth0_to_bond: left promiscuous mode [ 1914.490580][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.497283][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.650160][ T2909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.669651][ T2909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.783467][T29706] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1914.973509][T29706] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.003548][T29706] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1915.012904][T29706] usb 10-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1915.034043][T29706] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.063232][T29706] usb 10-1: config 0 descriptor?? [ 1915.144755][ T2896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8843'. [ 1915.485412][T29706] kye 0003:0458:5015.002D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1915.513602][T29706] kye 0003:0458:5015.002D: unbalanced collection at end of report description [ 1915.524101][T29706] kye 0003:0458:5015.002D: parse failed [ 1915.529716][T29706] kye 0003:0458:5015.002D: probe with driver kye failed with error -22 [ 1915.700076][T29706] usb 10-1: USB disconnect, device number 16 [ 1915.874984][T25845] net_ratelimit: 28 callbacks suppressed [ 1915.875004][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1916.002716][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1916.112626][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1916.222796][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1916.342581][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1916.452678][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1916.566253][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1916.682581][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1916.736388][ T2952] netlink: 'syz.9.8865': attribute type 1 has an invalid length. [ 1916.812586][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1916.922962][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1917.237110][ T2956] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 1917.412713][ T2959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.433998][ T2959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1917.662955][T15610] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1917.832567][T15610] usb 10-1: Using ep0 maxpacket: 8 [ 1917.924829][T15610] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1917.977739][T15610] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.045438][T15610] usb 10-1: config 0 descriptor?? [ 1918.490892][T15610] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1918.513213][T15610] asix 10-1:0.0: probe with driver asix failed with error -32 [ 1919.352143][ T2987] vlan0: entered promiscuous mode [ 1919.363373][ T2987] vlan0: entered allmulticast mode [ 1919.602652][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1919.611699][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1919.655048][ T3014] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.8884'. [ 1919.686202][T29706] usb 10-1: USB disconnect, device number 17 [ 1919.710871][ T3014] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1919.879727][ T3021] input: syz0 as /devices/virtual/input/input97 [ 1920.610062][ T3025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8888'. [ 1920.998778][T25839] net_ratelimit: 31 callbacks suppressed [ 1920.998798][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1921.184109][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1921.332579][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1921.512569][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1921.693909][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1921.751901][ T3071] netlink: 'syz.9.8904': attribute type 1 has an invalid length. [ 1921.882808][ T3071] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1922.034510][ T3075] bond2: (slave veth7): Enslaving as an active interface with a down link [ 1922.111956][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1922.111972][ T30] audit: type=1326 audit(1760839525.156:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3081 comm="syz.7.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d2d8efc9 code=0x7ffc0000 [ 1922.142997][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1922.149728][ T30] audit: type=1326 audit(1760839525.156:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3081 comm="syz.7.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d2d8efc9 code=0x7ffc0000 [ 1922.180322][ T3078] bond1: (slave veth0_to_bond): Releasing active interface [ 1922.197897][ T3078] bond2: (slave veth0_to_bond): making interface the new active one [ 1922.206986][ T3078] veth0_to_bond: entered promiscuous mode [ 1922.216456][ T3078] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1922.315351][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1922.454107][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1922.582654][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1922.622608][T29691] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1922.632710][ T30] audit: type=1326 audit(1760839525.156:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3081 comm="syz.7.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f61d2d8efc9 code=0x7ffc0000 [ 1922.695481][ T3093] blktrace: Concurrent blktraces are not allowed on sg0 [ 1922.703128][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1922.716078][ T30] audit: type=1326 audit(1760839525.156:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3081 comm="syz.7.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d2d8efc9 code=0x7ffc0000 [ 1922.749629][ T30] audit: type=1326 audit(1760839525.156:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3081 comm="syz.7.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d2d8efc9 code=0x7ffc0000 [ 1922.778926][ T30] audit: type=1326 audit(1760839525.156:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3081 comm="syz.7.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d2d8efc9 code=0x7ffc0000 [ 1922.806203][T29691] usb 10-1: config 0 has an invalid interface number: 45 but max is 0 [ 1922.818793][T29691] usb 10-1: config 0 has no interface number 0 [ 1922.828664][T29691] usb 10-1: config 0 interface 45 altsetting 175 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1922.841746][ T30] audit: type=1326 audit(1760839525.156:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3081 comm="syz.7.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d2d8efc9 code=0x7ffc0000 [ 1922.864923][T29691] usb 10-1: config 0 interface 45 altsetting 175 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1922.877017][T29691] usb 10-1: config 0 interface 45 has no altsetting 0 [ 1922.890553][T29691] usb 10-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 1922.900312][ T30] audit: type=1326 audit(1760839525.156:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3081 comm="syz.7.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61d2d8efc9 code=0x7ffc0000 [ 1922.924557][T29691] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.939688][ T30] audit: type=1326 audit(1760839525.156:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3081 comm="syz.7.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d2d8efc9 code=0x7ffc0000 [ 1922.966077][ T30] audit: type=1326 audit(1760839525.156:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3081 comm="syz.7.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d2d8efc9 code=0x7ffc0000 [ 1922.993264][T29691] usb 10-1: config 0 descriptor?? [ 1923.272125][T29691] usbhid 10-1:0.45: can't add hid device: -71 [ 1923.288358][T29691] usbhid 10-1:0.45: probe with driver usbhid failed with error -71 [ 1923.312817][T29691] usb 10-1: USB disconnect, device number 18 [ 1923.745430][ T3117] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8920'. [ 1923.764929][ T3117] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8920'. [ 1924.722605][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1925.341325][ T3135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8926'. [ 1925.687389][ T3137] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1926.053171][T25838] net_ratelimit: 29 callbacks suppressed [ 1926.053193][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1926.172533][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1926.285024][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1926.402687][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1926.472927][ T3144] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1926.479273][ T3144] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1926.503918][ T3144] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1926.513432][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1926.524245][ T3144] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1926.591808][ T3162] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1926.610691][ T3162] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1926.617573][ T3144] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1926.625514][ T3144] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1926.631549][ T3144] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1926.668275][ T3162] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1926.694404][ T3162] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1926.703260][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1926.742272][ T3144] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1926.749393][ T3144] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1926.758693][ T3144] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1926.771745][ T3144] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1926.778871][ T3144] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1926.786973][ T3144] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1926.824146][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1926.943380][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1927.054135][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1927.172790][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1927.213596][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1927.213611][ T30] audit: type=1326 audit(1760839530.266:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3174 comm="syz.9.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1927.247570][ T30] audit: type=1326 audit(1760839530.266:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3174 comm="syz.9.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1927.281335][ T30] audit: type=1326 audit(1760839530.296:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3174 comm="syz.9.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1927.330957][ T30] audit: type=1326 audit(1760839530.296:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3174 comm="syz.9.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1927.331152][ T30] audit: type=1326 audit(1760839530.296:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3174 comm="syz.9.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1927.331241][ T30] audit: type=1326 audit(1760839530.296:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3174 comm="syz.9.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1927.331282][ T30] audit: type=1326 audit(1760839530.296:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3174 comm="syz.9.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1927.331309][ T30] audit: type=1326 audit(1760839530.326:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3174 comm="syz.9.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1927.331331][ T30] audit: type=1326 audit(1760839530.326:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3174 comm="syz.9.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1927.331353][ T30] audit: type=1326 audit(1760839530.326:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3174 comm="syz.9.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1927.483034][ T3180] blktrace: Concurrent blktraces are not allowed on sg0 [ 1927.880912][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 1928.483037][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 1928.562923][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 1928.644473][ T5834] Bluetooth: hci0: command 0x0405 tx timeout [ 1928.802968][ T5834] Bluetooth: hci6: command 0x0c1a tx timeout [ 1928.809035][ T5834] Bluetooth: hci5: command 0x0c1a tx timeout [ 1928.825191][ T3191] loop5: detected capacity change from 0 to 7 [ 1928.833049][T14320] Dev loop5: unable to read RDB block 7 [ 1928.838641][T14320] loop5: AHDI p3 [ 1928.842291][T14320] loop5: partition table partially beyond EOD, truncated [ 1928.884384][ T3191] Dev loop5: unable to read RDB block 7 [ 1928.890036][ T3191] loop5: AHDI p3 [ 1928.895306][ T3191] loop5: partition table partially beyond EOD, truncated [ 1929.412556][T26535] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1929.542817][T26535] usb 6-1: device descriptor read/64, error -71 [ 1929.741081][ T3209] netlink: 'syz.6.8949': attribute type 11 has an invalid length. [ 1929.792683][T26535] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1929.842901][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1929.843240][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1929.865889][ T5883] kworker/0:3 (5883) used greatest stack depth: 15320 bytes left [ 1929.932545][T26535] usb 6-1: device descriptor read/64, error -71 [ 1930.052758][T26535] usb usb6-port1: attempt power cycle [ 1930.402750][T26535] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1930.437368][T26535] usb 6-1: device descriptor read/8, error -71 [ 1930.562999][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 1930.643220][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 1930.682587][T26535] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1930.705161][T26535] usb 6-1: device descriptor read/8, error -71 [ 1930.732683][ T5834] Bluetooth: hci0: command 0x0405 tx timeout [ 1930.813368][T26535] usb usb6-port1: unable to enumerate USB device [ 1930.882940][ T5834] Bluetooth: hci5: command 0x0c1a tx timeout [ 1930.888987][ T5834] Bluetooth: hci6: command 0x0c1a tx timeout [ 1930.952534][T15610] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1931.103477][T25839] net_ratelimit: 33 callbacks suppressed [ 1931.103492][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1931.135963][T15610] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1931.152610][T15610] usb 10-1: config 1 has no interface number 1 [ 1931.158995][T15610] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1931.173080][T15610] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1931.186879][T15610] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1931.198889][T15610] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.210437][T15610] usb 10-1: Product: syz [ 1931.215283][T15610] usb 10-1: Manufacturer: syz [ 1931.220139][T15610] usb 10-1: SerialNumber: syz [ 1931.230275][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1931.362759][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1931.451971][T15610] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1931.484254][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1931.532708][T15610] usb 10-1: USB disconnect, device number 19 [ 1931.569777][ T3237] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8957'. [ 1931.573542][T14320] udevd[14320]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1931.603797][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1931.716545][ T3243] tipc: Started in network mode [ 1931.721532][ T3243] tipc: Node identity 72e4cfee13f4, cluster identity 4711 [ 1931.729087][ T3243] tipc: Enabled bearer , priority 0 [ 1931.737607][ T3244] syzkaller0: entered promiscuous mode [ 1931.749538][ T3244] syzkaller0: entered allmulticast mode [ 1931.775703][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1931.902984][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1932.012509][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1932.123734][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1932.233596][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1932.392665][T26535] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1932.470422][ T3263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8966'. [ 1932.552781][T26535] usb 10-1: device descriptor read/64, error -71 [ 1932.792800][T26535] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1932.842506][T29706] tipc: Node number set to 1628491758 [ 1932.922502][T26535] usb 10-1: device descriptor read/64, error -71 [ 1932.967295][T24337] Bluetooth: hci5: command 0x0c1a tx timeout [ 1932.975754][ T5834] Bluetooth: hci6: command 0x0c1a tx timeout [ 1933.035349][T26535] usb usb10-port1: attempt power cycle [ 1933.392910][T26535] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1933.414190][T26535] usb 10-1: device descriptor read/8, error -71 [ 1933.652520][T26535] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1933.674346][T25845] veth0_to_bond: left promiscuous mode [ 1933.693033][T26535] usb 10-1: device descriptor read/8, error -71 [ 1933.802937][T26535] usb usb10-port1: unable to enumerate USB device [ 1934.749104][ T3244] tipc: Resetting bearer [ 1934.794843][ T3244] tipc: Disabling bearer [ 1934.914208][ T3285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8973'. [ 1935.086398][ T3287] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.8974'. [ 1935.110732][ T3287] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1935.592756][T29706] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1935.772704][T29706] usb 10-1: Using ep0 maxpacket: 8 [ 1935.779280][T29706] usb 10-1: config 162 has an invalid interface number: 246 but max is 1 [ 1935.788205][T29706] usb 10-1: config 162 has an invalid interface number: 245 but max is 1 [ 1935.796856][T29706] usb 10-1: config 162 has no interface number 0 [ 1935.803639][T29706] usb 10-1: config 162 has no interface number 1 [ 1935.809983][T29706] usb 10-1: config 162 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1935.836693][T29706] usb 10-1: config 162 interface 245 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1935.863715][T29706] usb 10-1: config 162 interface 245 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1935.892509][T29706] usb 10-1: config 162 interface 245 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1935.917040][T29706] usb 10-1: config 162 interface 245 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1935.939925][T29706] usb 10-1: config 162 interface 245 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1935.990102][T29706] usb 10-1: config 162 interface 246 has no altsetting 0 [ 1936.020539][T29706] usb 10-1: config 162 interface 245 has no altsetting 0 [ 1936.031907][T29706] usb 10-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 1936.041516][T29706] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.050753][T29706] usb 10-1: Product: syz [ 1936.055305][T29706] usb 10-1: Manufacturer: syz [ 1936.060083][T29706] usb 10-1: SerialNumber: syz [ 1936.112890][T25845] net_ratelimit: 32 callbacks suppressed [ 1936.112908][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1936.232572][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1936.262315][ T3289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8972'. [ 1936.342627][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1936.386164][T29706] Bluetooth: failed to set interface 0, alt 0 -22 [ 1936.403804][T29706] btusb 10-1:162.245: probe with driver btusb failed with error -22 [ 1936.430064][T29706] usb 10-1: USB disconnect, device number 24 [ 1936.452821][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1936.572530][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1936.703496][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1936.812505][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1936.942755][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1937.062882][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1937.172733][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1937.740123][ T3336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1937.804965][ T3337] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1937.812694][T26535] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 1937.952553][T26535] usb 10-1: device descriptor read/64, error -71 [ 1938.192558][T26535] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 1938.428099][T26535] usb 10-1: device descriptor read/64, error -71 [ 1938.560227][T26535] usb usb10-port1: attempt power cycle [ 1938.846611][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1938.846627][ T30] audit: type=1326 audit(1760839541.896:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3351 comm="syz.2.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358d38efc9 code=0x7ffc0000 [ 1938.905981][ T30] audit: type=1326 audit(1760839541.896:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3351 comm="syz.2.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f358d38efc9 code=0x7ffc0000 [ 1938.929484][T26535] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1938.951813][ T30] audit: type=1326 audit(1760839541.896:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3351 comm="syz.2.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358d38efc9 code=0x7ffc0000 [ 1938.953556][T26535] usb 10-1: device descriptor read/8, error -71 [ 1938.990072][ T3349] fuse: Unknown parameter 'rootmode«Fu¨ïy0:00000000100000' [ 1939.219447][ T30] audit: type=1326 audit(1760839541.896:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3351 comm="syz.2.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358d38efc9 code=0x7ffc0000 [ 1939.242693][T26535] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 1939.282307][T26535] usb 10-1: device descriptor read/8, error -71 [ 1939.289428][ T30] audit: type=1326 audit(1760839541.896:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3351 comm="syz.2.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f358d38efc9 code=0x7ffc0000 [ 1939.382722][ T30] audit: type=1326 audit(1760839541.896:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3351 comm="syz.2.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358d38efc9 code=0x7ffc0000 [ 1939.413642][T26535] usb usb10-port1: unable to enumerate USB device [ 1939.431322][ T30] audit: type=1326 audit(1760839541.936:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3351 comm="syz.2.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f358d38efc9 code=0x7ffc0000 [ 1939.470243][ T3368] blktrace: Concurrent blktraces are not allowed on sg0 [ 1939.491185][ T30] audit: type=1326 audit(1760839541.936:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3351 comm="syz.2.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358d38efc9 code=0x7ffc0000 [ 1939.540063][ T30] audit: type=1326 audit(1760839541.936:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3351 comm="syz.2.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358d38efc9 code=0x7ffc0000 [ 1939.593113][ T30] audit: type=1326 audit(1760839541.946:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3351 comm="syz.2.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f358d38efc9 code=0x7ffc0000 [ 1940.084627][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1940.093814][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1941.190018][T25838] net_ratelimit: 34 callbacks suppressed [ 1941.190037][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1941.378707][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1941.632604][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1941.789245][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1941.902798][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1942.042601][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1942.152574][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1942.262554][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1942.417463][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1942.602618][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1942.615866][ T3421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9010'. [ 1942.652826][T26535] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1942.805464][T26535] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1942.813676][T26535] usb 6-1: not running at top speed; connect to a high speed hub [ 1942.822303][T26535] usb 6-1: config 2 has an invalid interface number: 212 but max is 0 [ 1942.830872][T26535] usb 6-1: config 2 has no interface number 0 [ 1942.837325][T26535] usb 6-1: config 2 interface 212 has no altsetting 0 [ 1942.847892][T26535] usb 6-1: language id specifier not provided by device, defaulting to English [ 1942.861546][T26535] usb 6-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1942.870951][T26535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.879386][T26535] usb 6-1: Product: syz [ 1942.883852][T26535] usb 6-1: SerialNumber: syz [ 1943.562485][T29691] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1943.702597][T29691] usb 10-1: device descriptor read/64, error -71 [ 1943.952644][T29691] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1944.082877][T29691] usb 10-1: device descriptor read/64, error -71 [ 1944.192807][T29691] usb usb10-port1: attempt power cycle [ 1944.479114][T26535] usb 6-1: USB disconnect, device number 25 [ 1944.532701][T29691] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1944.570504][T29691] usb 10-1: device descriptor read/8, error -71 [ 1944.582200][ T3428] FAULT_INJECTION: forcing a failure. [ 1944.582200][ T3428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1944.596174][ T3428] CPU: 0 UID: 0 PID: 3428 Comm: syz.6.9014 Not tainted syzkaller #0 PREEMPT(full) [ 1944.596197][ T3428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1944.596208][ T3428] Call Trace: [ 1944.596216][ T3428] [ 1944.596224][ T3428] dump_stack_lvl+0x189/0x250 [ 1944.596250][ T3428] ? __pfx____ratelimit+0x10/0x10 [ 1944.596277][ T3428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1944.596296][ T3428] ? __pfx__printk+0x10/0x10 [ 1944.596315][ T3428] ? __might_fault+0xb0/0x130 [ 1944.596346][ T3428] should_fail_ex+0x414/0x560 [ 1944.596375][ T3428] _copy_from_user+0x2d/0xb0 [ 1944.596398][ T3428] do_ip6t_set_ctl+0x69f/0xce0 [ 1944.596424][ T3428] ? rcu_is_watching+0x15/0xb0 [ 1944.596448][ T3428] ? trace_contention_end+0x39/0x120 [ 1944.596473][ T3428] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1944.596515][ T3428] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1944.596545][ T3428] ? __pfx_aa_sk_perm+0x10/0x10 [ 1944.596569][ T3428] nf_setsockopt+0x26f/0x290 [ 1944.596592][ T3428] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1944.596616][ T3428] do_sock_setsockopt+0x17c/0x1b0 [ 1944.596646][ T3428] __x64_sys_setsockopt+0x13f/0x1b0 [ 1944.596676][ T3428] do_syscall_64+0xfa/0xfa0 [ 1944.596694][ T3428] ? lockdep_hardirqs_on+0x9c/0x150 [ 1944.596712][ T3428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1944.596731][ T3428] ? clear_bhb_loop+0x60/0xb0 [ 1944.596752][ T3428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1944.596770][ T3428] RIP: 0033:0x7f8be7d8efc9 [ 1944.596788][ T3428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1944.596803][ T3428] RSP: 002b:00007f8be8cf3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1944.596824][ T3428] RAX: ffffffffffffffda RBX: 00007f8be7fe5fa0 RCX: 00007f8be7d8efc9 [ 1944.596837][ T3428] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1944.596849][ T3428] RBP: 00007f8be8cf3090 R08: 0000000000000590 R09: 0000000000000000 [ 1944.596861][ T3428] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1944.596873][ T3428] R13: 00007f8be7fe6038 R14: 00007f8be7fe5fa0 R15: 00007f8be810fa28 [ 1944.596905][ T3428] [ 1944.963202][T29691] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1944.993172][T29691] usb 10-1: device descriptor read/8, error -71 [ 1945.102949][T29691] usb usb10-port1: unable to enumerate USB device [ 1945.193726][T26535] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1945.235159][ T3450] netlink: 'syz.6.9020': attribute type 1 has an invalid length. [ 1945.264360][ T3450] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1945.290172][ T3450] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1945.316326][ T3450] bond2: (slave veth0_to_bond): making interface the new active one [ 1945.325646][ T3450] veth0_to_bond: entered promiscuous mode [ 1945.331769][ T3450] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1945.352824][T26535] usb 6-1: Using ep0 maxpacket: 8 [ 1945.359656][T26535] usb 6-1: config 162 has an invalid interface number: 246 but max is 1 [ 1945.376792][T26535] usb 6-1: config 162 has an invalid interface number: 245 but max is 1 [ 1945.386626][T26535] usb 6-1: config 162 has no interface number 0 [ 1945.393564][T26535] usb 6-1: config 162 has no interface number 1 [ 1945.400318][T26535] usb 6-1: config 162 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1945.425411][T26535] usb 6-1: config 162 interface 245 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1945.460021][T26535] usb 6-1: config 162 interface 245 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1945.492730][T26535] usb 6-1: config 162 interface 245 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1945.529012][T26535] usb 6-1: config 162 interface 245 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1945.552589][T26535] usb 6-1: config 162 interface 245 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1945.582530][T26535] usb 6-1: config 162 interface 246 has no altsetting 0 [ 1945.589518][T26535] usb 6-1: config 162 interface 245 has no altsetting 0 [ 1945.614834][T26535] usb 6-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 1945.625556][T26535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.639935][T26535] usb 6-1: Product: syz [ 1945.659623][T26535] usb 6-1: Manufacturer: syz [ 1945.700608][T26535] usb 6-1: SerialNumber: syz [ 1945.917859][ T3465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9024'. [ 1946.112591][T26535] Bluetooth: failed to set interface 0, alt 0 -22 [ 1946.119462][T26535] btusb 6-1:162.245: probe with driver btusb failed with error -22 [ 1946.138944][T26535] usb 6-1: USB disconnect, device number 26 [ 1946.204407][T25838] net_ratelimit: 30 callbacks suppressed [ 1946.204424][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1946.322830][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1946.433092][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1946.542788][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1946.635303][ T3468] netlink: 'syz.9.9025': attribute type 1 has an invalid length. [ 1946.764524][ T3468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1946.875321][T28842] IPVS: starting estimator thread 0... [ 1946.906845][ T3471] bond2: (slave veth0_to_bond): Releasing active interface [ 1946.974230][ T3471] bond3: (slave veth0_to_bond): making interface the new active one [ 1947.007727][ T3471] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1947.082608][ T3475] IPVS: using max 49 ests per chain, 117600 per kthread [ 1947.161771][ T3469] bond3: (slave veth9): Enslaving as an active interface with a down link [ 1947.218839][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1947.289161][ T3479] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9027'. [ 1947.532782][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1947.642540][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1947.742492][T26535] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1947.764328][T25841] bond1: (slave macvlan2): failed to get link speed/duplex [ 1947.892541][T25841] bond1: (slave macvlan2): failed to get link speed/duplex [ 1947.956139][T26535] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1947.966411][T26535] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1947.982719][T26535] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1948.002027][T26535] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1948.010546][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1948.032862][T26535] usb 10-1: Product: syz [ 1948.037098][T26535] usb 10-1: Manufacturer: syz [ 1948.051946][T26535] usb 10-1: SerialNumber: syz [ 1948.072898][T26535] usb 10-1: config 0 descriptor?? [ 1948.095167][T26535] usb 10-1: selecting invalid altsetting 0 [ 1949.239432][ T3499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9032'. [ 1949.617906][ T3503] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9033'. [ 1950.323251][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1950.331112][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1950.338930][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1950.867618][ T3514] netlink: 316 bytes leftover after parsing attributes in process `syz.5.9038'. [ 1950.975622][T29691] usb 10-1: USB disconnect, device number 33 [ 1951.482556][T25841] net_ratelimit: 24 callbacks suppressed [ 1951.482576][T25841] bond1: (slave macvlan2): failed to get link speed/duplex [ 1951.728994][T24337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1951.739811][T24337] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1951.780982][ T1126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1951.795715][ T1126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1951.806438][ T1126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1951.881039][T25690] bond0: (slave syz_tun): Releasing backup interface [ 1951.953226][T25841] bond1: (slave macvlan2): failed to get link speed/duplex [ 1952.174492][ T3553] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1952.423252][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1952.680066][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1952.843929][T17452] team0: Port device netdevsim0 removed [ 1952.907974][ T3542] chnl_net:caif_netlink_parms(): no params data found [ 1952.982589][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1953.191929][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1953.423423][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1953.567192][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1953.575668][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1953.584261][ T3542] bridge_slave_0: entered allmulticast mode [ 1953.590419][ T3574] Cannot find add_set index 0 as target [ 1953.599525][ T3542] bridge_slave_0: entered promiscuous mode [ 1953.637135][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1953.644447][T15610] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1953.667751][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.682990][ T3542] bridge_slave_1: entered allmulticast mode [ 1953.690805][ T3542] bridge_slave_1: entered promiscuous mode [ 1953.816996][T15610] usb 10-1: Using ep0 maxpacket: 32 [ 1953.827461][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1953.847534][T15610] usb 10-1: config 0 has an invalid interface number: 228 but max is 0 [ 1953.863430][T15610] usb 10-1: config 0 has no interface number 0 [ 1953.875812][T15610] usb 10-1: config 0 interface 228 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 171 [ 1953.910669][T15610] usb 10-1: config 0 interface 228 has no altsetting 0 [ 1953.923110][ T1126] Bluetooth: hci1: command tx timeout [ 1953.927327][T15610] usb 10-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice= 0.02 [ 1953.952201][T15610] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1953.980466][T15610] usb 10-1: SerialNumber: syz [ 1953.994033][T15610] usb 10-1: config 0 descriptor?? [ 1953.999902][ T3564] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1954.059582][ T3595] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9062'. [ 1954.238820][T15610] net1080 10-1:0.228: probe with driver net1080 failed with error -71 [ 1954.259021][T17452] dvmrp0 (unregistering): left allmulticast mode [ 1954.273493][T15610] usb 10-1: USB disconnect, device number 34 [ 1954.611843][T17452] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1954.625650][T17452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1954.635145][T17452] bond0 (unregistering): Released all slaves [ 1954.649386][T17452] bond1 (unregistering): Released all slaves [ 1954.664128][T17452] bond2 (unregistering): Released all slaves [ 1954.784425][T15610] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1954.887210][T17452] bond3 (unregistering): Released all slaves [ 1954.955090][T15610] usb 6-1: device descriptor read/64, error -71 [ 1955.081736][T17452] bond4 (unregistering): (slave veth3): Releasing active interface [ 1955.091852][T17452] veth0_to_bond: entered promiscuous mode [ 1955.100078][T17452] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1955.111739][T17452] bond4 (unregistering): Released all slaves [ 1955.133464][ T3542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1955.206021][T15610] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1955.332843][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1955.366167][ T3542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1955.462669][T15610] usb 6-1: device descriptor read/64, error -71 [ 1955.546992][T25841] bond1: (slave macvlan2): failed to get link speed/duplex [ 1955.575279][T15610] usb usb6-port1: attempt power cycle [ 1955.677186][ T3542] team0: Port device team_slave_0 added [ 1955.778708][ T3542] team0: Port device team_slave_1 added [ 1955.876191][T17452] hsr_slave_0: left promiscuous mode [ 1955.891763][T17452] hsr_slave_1: left promiscuous mode [ 1955.923312][T17452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1955.951165][T15610] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1956.013132][ T1126] Bluetooth: hci1: command tx timeout [ 1956.017083][T15610] usb 6-1: device descriptor read/8, error -71 [ 1956.282531][T15610] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1956.318757][T15610] usb 6-1: device descriptor read/8, error -71 [ 1956.452793][T15610] usb usb6-port1: unable to enumerate USB device [ 1956.504408][ T3634] binder: 3633:3634 ioctl c0306201 2000000001c0 returned -14 [ 1957.122509][T26535] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1957.151912][T17452] team0 (unregistering): Port device team_slave_1 removed [ 1957.204240][T17452] team0 (unregistering): Port device team_slave_0 removed [ 1957.507855][ T3542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1957.519173][T26535] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1957.532646][T26535] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.540823][T26535] usb 10-1: Product: syz [ 1957.545378][T26535] usb 10-1: Manufacturer: syz [ 1957.550834][T26535] usb 10-1: SerialNumber: syz [ 1957.590801][ T3542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1957.651422][ T3542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1957.686947][ T3542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1957.697246][ T3542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1957.751895][ T3542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1957.939833][T25845] veth0_to_bond: left promiscuous mode [ 1957.953744][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1958.058346][ T3542] hsr_slave_0: entered promiscuous mode [ 1958.068528][ T3542] hsr_slave_1: entered promiscuous mode [ 1958.077861][ T3542] debugfs: 'hsr0' already exists in 'hsr' [ 1958.085100][ T3542] Cannot create hsr debugfs directory [ 1958.094630][ T1126] Bluetooth: hci1: command tx timeout [ 1958.252601][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1958.277911][ T3654] Invalid logical block size (508) [ 1958.672592][ T3663] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1959.093144][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1959.108426][T26535] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1959.120695][T26535] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1959.174947][T26535] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1959.217751][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1959.227777][T26535] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 1959.432837][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1959.572655][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1959.619628][ T3542] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1959.632147][ T3542] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1959.642247][ T3542] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1959.652274][ T3542] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1959.736049][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1959.868261][ T3542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1959.902613][T25841] bond1: (slave macvlan2): failed to get link speed/duplex [ 1959.941337][ T3542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1959.976595][T25839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1959.983708][T25839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1960.022810][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1960.042775][T25843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1960.049846][T25843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1960.156330][T29706] usb 10-1: USB disconnect, device number 35 [ 1960.162805][ T1126] Bluetooth: hci1: command tx timeout [ 1960.176109][ T3694] FAULT_INJECTION: forcing a failure. [ 1960.176109][ T3694] name failslab, interval 1, probability 0, space 0, times 0 [ 1960.196309][ T3694] CPU: 1 UID: 0 PID: 3694 Comm: syz.6.9079 Not tainted syzkaller #0 PREEMPT(full) [ 1960.196337][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1960.196348][ T3694] Call Trace: [ 1960.196356][ T3694] [ 1960.196364][ T3694] dump_stack_lvl+0x189/0x250 [ 1960.196388][ T3694] ? __pfx____ratelimit+0x10/0x10 [ 1960.196413][ T3694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1960.196431][ T3694] ? __pfx__printk+0x10/0x10 [ 1960.196455][ T3694] ? __pfx___might_resched+0x10/0x10 [ 1960.196477][ T3694] ? fs_reclaim_acquire+0x7d/0x100 [ 1960.196502][ T3694] should_fail_ex+0x414/0x560 [ 1960.196532][ T3694] should_failslab+0xa8/0x100 [ 1960.196555][ T3694] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 1960.196575][ T3694] ? __get_vm_area_node+0x13f/0x300 [ 1960.196598][ T3694] __get_vm_area_node+0x13f/0x300 [ 1960.196619][ T3694] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 1960.196638][ T3694] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1960.196660][ T3694] ? is_bpf_text_address+0x26/0x2b0 [ 1960.196693][ T3694] ? kernel_text_address+0xa5/0xe0 [ 1960.196724][ T3694] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1960.196748][ T3694] ? __lock_acquire+0xab9/0xd20 [ 1960.196771][ T3694] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1960.196791][ T3694] __vmalloc_noprof+0xb1/0xf0 [ 1960.196809][ T3694] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1960.196833][ T3694] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1960.196860][ T3694] bpf_prog_alloc+0x3c/0x1a0 [ 1960.196885][ T3694] bpf_prog_create+0x9e/0x200 [ 1960.196910][ T3694] bpf_mt_check+0xdd/0x190 [ 1960.196935][ T3694] ? __pfx_bpf_mt_check+0x10/0x10 [ 1960.196960][ T3694] ? xt_find_match+0x1f7/0x250 [ 1960.196985][ T3694] xt_check_match+0x3d1/0xab0 [ 1960.197010][ T3694] ? __pfx_xt_check_match+0x10/0x10 [ 1960.197029][ T3694] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 1960.197058][ T3694] ? xt_find_match+0x1f7/0x250 [ 1960.197081][ T3694] translate_table+0x1553/0x2040 [ 1960.197121][ T3694] ? __pfx_translate_table+0x10/0x10 [ 1960.197142][ T3694] ? __might_fault+0xb0/0x130 [ 1960.197178][ T3694] ? _copy_from_user+0x94/0xb0 [ 1960.197206][ T3694] do_ip6t_set_ctl+0x970/0xce0 [ 1960.197229][ T3694] ? rcu_is_watching+0x15/0xb0 [ 1960.197253][ T3694] ? trace_contention_end+0x39/0x120 [ 1960.197277][ T3694] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1960.197324][ T3694] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1960.197352][ T3694] ? __pfx_aa_sk_perm+0x10/0x10 [ 1960.197376][ T3694] nf_setsockopt+0x26f/0x290 [ 1960.197395][ T3694] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1960.197419][ T3694] do_sock_setsockopt+0x17c/0x1b0 [ 1960.197448][ T3694] __x64_sys_setsockopt+0x13f/0x1b0 [ 1960.197478][ T3694] do_syscall_64+0xfa/0xfa0 [ 1960.197496][ T3694] ? lockdep_hardirqs_on+0x9c/0x150 [ 1960.197513][ T3694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.197531][ T3694] ? clear_bhb_loop+0x60/0xb0 [ 1960.197552][ T3694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.197570][ T3694] RIP: 0033:0x7f8be7d8efc9 [ 1960.197586][ T3694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1960.197602][ T3694] RSP: 002b:00007f8be8cf3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1960.197622][ T3694] RAX: ffffffffffffffda RBX: 00007f8be7fe5fa0 RCX: 00007f8be7d8efc9 [ 1960.197635][ T3694] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1960.197646][ T3694] RBP: 00007f8be8cf3090 R08: 0000000000000590 R09: 0000000000000000 [ 1960.197658][ T3694] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1960.197670][ T3694] R13: 00007f8be7fe6038 R14: 00007f8be7fe5fa0 R15: 00007f8be810fa28 [ 1960.197701][ T3694] [ 1960.199397][ T3694] syz.6.9079: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 1960.304542][ T3542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1960.491385][ T3694] ,cpuset= [ 1960.655069][ T3542] veth0_vlan: entered promiscuous mode [ 1960.667925][ T3542] veth1_vlan: entered promiscuous mode [ 1960.687752][ T3542] veth0_macvtap: entered promiscuous mode [ 1960.696316][ T3542] veth1_macvtap: entered promiscuous mode [ 1960.711054][ T3542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1960.892072][ T3694] /,mems_allowed=0-1 [ 1960.913941][ T3694] CPU: 1 UID: 0 PID: 3694 Comm: syz.6.9079 Not tainted syzkaller #0 PREEMPT(full) [ 1960.913961][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1960.913968][ T3694] Call Trace: [ 1960.913973][ T3694] [ 1960.913978][ T3694] dump_stack_lvl+0x189/0x250 [ 1960.913994][ T3694] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1960.914007][ T3694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1960.914018][ T3694] ? __pfx__printk+0x10/0x10 [ 1960.914029][ T3694] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1960.914040][ T3694] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1960.914055][ T3694] warn_alloc+0x214/0x310 [ 1960.914070][ T3694] ? __pfx_warn_alloc+0x10/0x10 [ 1960.914085][ T3694] ? __get_vm_area_node+0x2b5/0x300 [ 1960.914099][ T3694] __vmalloc_node_range_noprof+0x331/0x12d0 [ 1960.914110][ T3694] ? is_bpf_text_address+0x26/0x2b0 [ 1960.914129][ T3694] ? kernel_text_address+0xa5/0xe0 [ 1960.914147][ T3694] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1960.914161][ T3694] ? __lock_acquire+0xab9/0xd20 [ 1960.914174][ T3694] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1960.914192][ T3694] __vmalloc_noprof+0xb1/0xf0 [ 1960.914203][ T3694] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1960.914216][ T3694] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1960.914231][ T3694] bpf_prog_alloc+0x3c/0x1a0 [ 1960.914245][ T3694] bpf_prog_create+0x9e/0x200 [ 1960.914259][ T3694] bpf_mt_check+0xdd/0x190 [ 1960.914273][ T3694] ? __pfx_bpf_mt_check+0x10/0x10 [ 1960.914287][ T3694] ? xt_find_match+0x1f7/0x250 [ 1960.914300][ T3694] xt_check_match+0x3d1/0xab0 [ 1960.914313][ T3694] ? __pfx_xt_check_match+0x10/0x10 [ 1960.914325][ T3694] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 1960.914342][ T3694] ? xt_find_match+0x1f7/0x250 [ 1960.914355][ T3694] translate_table+0x1553/0x2040 [ 1960.914378][ T3694] ? __pfx_translate_table+0x10/0x10 [ 1960.914390][ T3694] ? __might_fault+0xb0/0x130 [ 1960.914410][ T3694] ? _copy_from_user+0x94/0xb0 [ 1960.914427][ T3694] do_ip6t_set_ctl+0x970/0xce0 [ 1960.914441][ T3694] ? rcu_is_watching+0x15/0xb0 [ 1960.914455][ T3694] ? trace_contention_end+0x39/0x120 [ 1960.914470][ T3694] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1960.914492][ T3694] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1960.914508][ T3694] ? __pfx_aa_sk_perm+0x10/0x10 [ 1960.914521][ T3694] nf_setsockopt+0x26f/0x290 [ 1960.914533][ T3694] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1960.914547][ T3694] do_sock_setsockopt+0x17c/0x1b0 [ 1960.914563][ T3694] __x64_sys_setsockopt+0x13f/0x1b0 [ 1960.914579][ T3694] do_syscall_64+0xfa/0xfa0 [ 1960.914589][ T3694] ? lockdep_hardirqs_on+0x9c/0x150 [ 1960.914599][ T3694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.914609][ T3694] ? clear_bhb_loop+0x60/0xb0 [ 1960.914621][ T3694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.914631][ T3694] RIP: 0033:0x7f8be7d8efc9 [ 1960.914641][ T3694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1960.914650][ T3694] RSP: 002b:00007f8be8cf3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1960.914661][ T3694] RAX: ffffffffffffffda RBX: 00007f8be7fe5fa0 RCX: 00007f8be7d8efc9 [ 1960.914669][ T3694] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1960.914675][ T3694] RBP: 00007f8be8cf3090 R08: 0000000000000590 R09: 0000000000000000 [ 1960.914682][ T3694] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1960.914688][ T3694] R13: 00007f8be7fe6038 R14: 00007f8be7fe5fa0 R15: 00007f8be810fa28 [ 1960.914704][ T3694] [ 1960.914715][ T3694] Mem-Info: [ 1961.293105][ T3542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1961.438303][T25845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1961.456358][T25845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1961.547376][ T3694] active_anon:9495 inactive_anon:0 isolated_anon:0 [ 1961.547376][ T3694] active_file:21219 inactive_file:40682 isolated_file:0 [ 1961.547376][ T3694] unevictable:768 dirty:136 writeback:0 [ 1961.547376][ T3694] slab_reclaimable:11459 slab_unreclaimable:157996 [ 1961.547376][ T3694] mapped:40712 shmem:1368 pagetables:1838 [ 1961.547376][ T3694] sec_pagetables:0 bounce:0 [ 1961.547376][ T3694] kernel_misc_reclaimable:0 [ 1961.547376][ T3694] free:1219876 free_pcp:13922 free_cma:0 [ 1961.663066][ T3694] Node 0 active_anon:38780kB inactive_anon:0kB active_file:84864kB inactive_file:162528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:162836kB dirty:544kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18240kB pagetables:7228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1961.701863][T25841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.711406][T25841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.728487][T25841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.740030][T25841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.749967][ T3694] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1961.784714][T25841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1961.801590][T25841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1961.860043][ T3694] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1961.930636][ T3694] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1961.936928][ T3694] Node 0 DMA32 free:968196kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39836kB inactive_anon:0kB active_file:84864kB inactive_file:162528kB unevictable:1536kB writepending:552kB zspages:0kB present:3129332kB managed:2561600kB mlocked:0kB bounce:0kB free_pcp:34940kB local_pcp:17956kB free_cma:0kB [ 1961.978700][ T3694] lowmem_reserve[]: 0 0 1 1 1 [ 1961.989309][ T3694] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.037843][ T3694] lowmem_reserve[]: 0 0 0 0 0 [ 1962.083690][ T3694] Node 1 Normal free:3895696kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18264kB local_pcp:11912kB free_cma:0kB [ 1962.144383][ T3694] lowmem_reserve[]: 0 0 0 0 0 [ 1962.150789][ T3694] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1962.165388][ T3694] Node 0 DMA32: 1120*4kB (UME) 1201*8kB (UME) 920*16kB (UM) 656*32kB (UM) 414*64kB (UME) 264*128kB (UME) 187*256kB (UME) 100*512kB (UME) 53*1024kB (UM) 4*2048kB (UM) 170*4096kB (UM) = 967944kB [ 1962.272527][ T3694] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1962.322073][ T3694] Node 1 Normal: 194*4kB (UME) 57*8kB (UME) 50*16kB (UME) 213*32kB (UE) 56*64kB (UM) 14*128kB (UME) 6*256kB (UME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3895696kB [ 1962.369525][ T3694] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1962.395083][ T3694] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1962.428988][ T3694] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1962.452618][ T3694] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1962.461917][ T3694] 64065 total pagecache pages [ 1962.515014][ T3694] 0 pages in swap cache [ 1962.535475][ T3694] Free swap = 119796kB [ 1962.539646][ T3694] Total swap = 124996kB [ 1962.571094][ T3694] 2097051 pages RAM [ 1962.583423][ T3694] 0 pages HighMem/MovableOnly [ 1962.588113][ T3694] 424561 pages reserved [ 1962.592264][ T3694] 0 pages cma reserved [ 1962.611975][ T3694] xt_bpf: check failed: parse error [ 1962.704988][ T3735] netlink: 'syz.7.9086': attribute type 1 has an invalid length. [ 1962.816496][ T3735] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1962.866484][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9089'. [ 1962.964741][ T3743] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1963.036825][ T3747] bond2: (slave veth0_to_bond): Releasing active interface [ 1963.111482][ T3747] bond4: (slave veth0_to_bond): making interface the new active one [ 1963.136398][ T3747] veth0_to_bond: entered promiscuous mode [ 1963.181178][ T3747] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1963.216204][T25839] net_ratelimit: 13 callbacks suppressed [ 1963.216221][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1963.366755][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1963.483415][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1963.672983][T25846] bond1: (slave macvlan2): failed to get link speed/duplex [ 1963.795372][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1963.807277][ T3711] netlink: 'syz.5.9081': attribute type 11 has an invalid length. [ 1963.931843][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1964.062639][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1964.198766][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1964.364633][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1964.491709][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1964.754124][ C0] Unknown status report in ack skb [ 1964.772578][ T3809] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9101'. [ 1964.937810][ T3817] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9103'. [ 1964.957796][ T3817] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9103'. [ 1965.176414][ T3823] netlink: 'syz.7.9104': attribute type 4 has an invalid length. [ 1965.538025][ T3835] netlink: 88 bytes leftover after parsing attributes in process `syz.7.9110'. [ 1965.659397][ T3838] FAULT_INJECTION: forcing a failure. [ 1965.659397][ T3838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1965.690760][T29700] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1965.715392][T29700] dvb_usb_dibusb_mc 9-1:191.159: probe with driver dvb_usb_dibusb_mc failed with error -110 [ 1965.734161][T29700] dvb-usb: found a 'Artec T1 USB2.0' in cold state, will try to load a firmware [ 1965.746369][T29700] usb 9-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 1965.755990][T29700] usb 9-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 1965.913265][ T3838] CPU: 0 UID: 0 PID: 3838 Comm: syz.2.9111 Not tainted syzkaller #0 PREEMPT(full) [ 1965.913291][ T3838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1965.913302][ T3838] Call Trace: [ 1965.913310][ T3838] [ 1965.913319][ T3838] dump_stack_lvl+0x189/0x250 [ 1965.913343][ T3838] ? __pfx____ratelimit+0x10/0x10 [ 1965.913370][ T3838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1965.913389][ T3838] ? __pfx__printk+0x10/0x10 [ 1965.913408][ T3838] ? __might_fault+0xb0/0x130 [ 1965.913439][ T3838] should_fail_ex+0x414/0x560 [ 1965.913470][ T3838] _copy_from_user+0x2d/0xb0 [ 1965.913494][ T3838] snd_seq_oss_write+0x515/0x930 [ 1965.913533][ T3838] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1965.913564][ T3838] ? security_file_permission+0x75/0x290 [ 1965.913592][ T3838] odev_write+0x5a/0x80 [ 1965.913609][ T3838] ? __pfx_odev_write+0x10/0x10 [ 1965.913628][ T3838] vfs_write+0x27e/0xb30 [ 1965.913654][ T3838] ? __pfx_vfs_write+0x10/0x10 [ 1965.913675][ T3838] ? __fget_files+0x2a/0x420 [ 1965.913700][ T3838] ? __fget_files+0x2a/0x420 [ 1965.913718][ T3838] ? __fget_files+0x3a0/0x420 [ 1965.913737][ T3838] ? __fget_files+0x2a/0x420 [ 1965.913765][ T3838] ksys_write+0x145/0x250 [ 1965.913786][ T3838] ? __pfx_ksys_write+0x10/0x10 [ 1965.913807][ T3838] ? do_syscall_64+0xbe/0xfa0 [ 1965.913827][ T3838] do_syscall_64+0xfa/0xfa0 [ 1965.913842][ T3838] ? lockdep_hardirqs_on+0x9c/0x150 [ 1965.913856][ T3838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.913870][ T3838] ? clear_bhb_loop+0x60/0xb0 [ 1965.913887][ T3838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.913907][ T3838] RIP: 0033:0x7fee3c38efc9 [ 1965.913920][ T3838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1965.913933][ T3838] RSP: 002b:00007fee3d2df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1965.913950][ T3838] RAX: ffffffffffffffda RBX: 00007fee3c5e5fa0 RCX: 00007fee3c38efc9 [ 1965.913961][ T3838] RDX: 000000000000020f RSI: 0000200000000840 RDI: 0000000000000003 [ 1965.913971][ T3838] RBP: 00007fee3d2df090 R08: 0000000000000000 R09: 0000000000000000 [ 1965.913980][ T3838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1965.913988][ T3838] R13: 00007fee3c5e6038 R14: 00007fee3c5e5fa0 R15: 00007fee3c70fa28 [ 1965.914011][ T3838] [ 1966.289280][ T3847] xt_bpf: check failed: parse error [ 1968.294858][T25840] net_ratelimit: 30 callbacks suppressed [ 1968.294873][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1968.412583][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1968.522570][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1968.642671][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1968.762575][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1968.875529][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1968.997391][T25845] bond1: (slave macvlan2): failed to get link speed/duplex [ 1969.112761][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1969.166120][ T3883] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9128'. [ 1969.175375][ T3883] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9128'. [ 1969.224595][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1969.294316][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9131'. [ 1969.332600][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1970.234544][ T3903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9137'. [ 1970.288590][ T3903] veth2: entered promiscuous mode [ 1970.304747][ T3903] veth2: entered allmulticast mode [ 1970.424217][ T3906] loop8: detected capacity change from 0 to 7 [ 1970.461098][ T3906] Dev loop8: unable to read RDB block 7 [ 1970.473580][ T3906] loop8: AHDI p1 p2 p3 [ 1970.477879][ T3906] loop8: partition table partially beyond EOD, truncated [ 1970.486961][ T3906] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1970.494537][ T3906] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1970.535027][T14320] Dev loop8: unable to read RDB block 7 [ 1970.562089][T14320] loop8: AHDI p1 p2 p3 [ 1970.592684][T14320] loop8: partition table partially beyond EOD, truncated [ 1970.611152][T14320] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1970.626433][T14320] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1970.637290][ T3908] Dev loop8: unable to read RDB block 7 [ 1970.650654][ T3908] loop8: AHDI p1 p2 p3 [ 1970.676035][ T3908] loop8: partition table partially beyond EOD, truncated [ 1970.681806][ T3912] xt_bpf: check failed: parse error [ 1970.706409][ T3908] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1970.759808][ T3908] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1971.093510][T26535] usb 10-1: new full-speed USB device number 36 using dummy_hcd [ 1971.267378][T26535] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1971.303963][T26535] usb 10-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1971.324571][T26535] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.356770][T26535] usb 10-1: config 0 descriptor?? [ 1971.814353][T26535] hid (null): unknown global tag 0xe [ 1971.829937][T26535] hid (null): unknown global tag 0xd [ 1971.848801][T26535] elecom 0003:056E:00E6.002E: unknown global tag 0xe [ 1971.857442][T26535] elecom 0003:056E:00E6.002E: item 0 0 1 14 parsing failed [ 1971.866078][T26535] elecom 0003:056E:00E6.002E: probe with driver elecom failed with error -22 [ 1972.020262][T26535] usb 10-1: USB disconnect, device number 36 [ 1972.046227][ T3958] xt_bpf: check failed: parse error [ 1972.618936][ T3961] xt_bpf: check failed: parse error [ 1972.632837][ T3961] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1972.951918][ T3969] netlink: 'syz.7.9160': attribute type 4 has an invalid length. [ 1973.095082][ T3976] netlink: 'syz.7.9163': attribute type 1 has an invalid length. [ 1973.168332][ T3976] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1973.257112][ T3978] bond5: (slave veth9): Enslaving as an active interface with a down link [ 1973.311852][ T3976] bond4: (slave veth0_to_bond): Releasing active interface [ 1973.344526][ T3976] veth0_to_bond: left promiscuous mode [ 1973.371285][ T3976] bond5: (slave veth0_to_bond): making interface the new active one [ 1973.402348][ T3976] veth0_to_bond: entered promiscuous mode [ 1973.439056][ T3976] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1973.504127][T25839] net_ratelimit: 31 callbacks suppressed [ 1973.504146][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1973.627222][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1973.709110][ T3997] loop4: detected capacity change from 0 to 7 [ 1973.718646][T14320] Dev loop4: unable to read RDB block 7 [ 1973.724656][T14320] loop4: unable to read partition table [ 1973.731789][T14320] loop4: partition table beyond EOD, truncated [ 1973.745250][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1973.745315][ T3997] Dev loop4: unable to read RDB block 7 [ 1973.759376][ T3997] loop4: unable to read partition table [ 1973.767258][ T3997] loop4: partition table beyond EOD, truncated [ 1973.773758][ T3997] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1973.864026][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1973.983632][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1974.092543][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1974.219432][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1974.241131][ T4016] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9175'. [ 1974.332497][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1974.434666][ T4026] xt_bpf: check failed: parse error [ 1974.442495][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1974.562839][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1975.202103][ T4052] netlink: 'syz.6.9184': attribute type 4 has an invalid length. [ 1975.865095][ T4066] netlink: 'syz.9.9189': attribute type 10 has an invalid length. [ 1975.935427][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.941760][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.990231][ T4066] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1976.143700][ T4068] bond_slave_0: entered promiscuous mode [ 1976.149391][ T4068] bond_slave_1: entered promiscuous mode [ 1976.155077][ T4068] syz_tun: entered promiscuous mode [ 1976.209938][ T4068] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1976.243712][ T4068] bond4: (slave macvlan2): speed changed to 0 on port 1 [ 1976.302074][ T4068] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 1977.296936][ T4100] xt_bpf: check failed: parse error [ 1977.729850][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9200'. [ 1978.252838][T26183] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 1978.314933][ T4123] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9207'. [ 1978.426759][T26183] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1978.438508][T26183] usb 10-1: not running at top speed; connect to a high speed hub [ 1978.448520][T26183] usb 10-1: config 2 has an invalid interface number: 212 but max is 0 [ 1978.474063][T26183] usb 10-1: config 2 has no interface number 0 [ 1978.480284][T26183] usb 10-1: config 2 interface 212 has no altsetting 0 [ 1978.492767][T26183] usb 10-1: language id specifier not provided by device, defaulting to English [ 1978.508964][T26183] usb 10-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1978.518567][T26183] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.527554][T26183] usb 10-1: Product: syz [ 1978.531984][T26183] usb 10-1: SerialNumber: syz [ 1978.565907][T25840] net_ratelimit: 32 callbacks suppressed [ 1978.565919][T25840] bond1: (slave macvlan2): failed to get link speed/duplex [ 1978.693751][T25844] bond1: (slave macvlan2): failed to get link speed/duplex [ 1978.812686][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1978.922924][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1979.048092][T25841] bond1: (slave macvlan2): failed to get link speed/duplex [ 1979.162728][T25841] bond1: (slave macvlan2): failed to get link speed/duplex [ 1979.272602][T25844] bond1: (slave macvlan2): failed to get link speed/duplex [ 1979.382509][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1979.504901][T25841] bond1: (slave macvlan2): failed to get link speed/duplex [ 1979.662625][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1980.640050][T26183] usb 10-1: USB disconnect, device number 37 [ 1980.652295][T15610] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1980.829535][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1980.829551][ T30] audit: type=1326 audit(1760839583.876:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4149 comm="syz.9.9216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1980.865871][T15610] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 1980.874249][T15610] usb 6-1: config 0 has no interface number 0 [ 1980.887055][ T30] audit: type=1326 audit(1760839583.906:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4149 comm="syz.9.9216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1980.887534][T15610] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1980.909378][ C0] vkms_vblank_simulate: vblank timer overrun [ 1980.910856][ T30] audit: type=1326 audit(1760839583.906:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4149 comm="syz.9.9216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1980.926642][T15610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.956828][ T30] audit: type=1326 audit(1760839583.906:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4149 comm="syz.9.9216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1980.980170][T15610] usb 6-1: Product: syz [ 1980.998864][T15610] usb 6-1: Manufacturer: syz [ 1981.001446][ T30] audit: type=1326 audit(1760839583.906:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4149 comm="syz.9.9216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1981.033218][T15610] usb 6-1: SerialNumber: syz [ 1981.043089][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1981.074354][ T30] audit: type=1326 audit(1760839583.906:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4149 comm="syz.9.9216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1981.101114][T15610] usb 6-1: config 0 descriptor?? [ 1981.146055][ T30] audit: type=1326 audit(1760839583.916:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4149 comm="syz.9.9216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1981.227055][ T30] audit: type=1326 audit(1760839583.916:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4149 comm="syz.9.9216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1981.263525][ T30] audit: type=1326 audit(1760839583.916:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4149 comm="syz.9.9216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1981.325572][ T30] audit: type=1326 audit(1760839583.916:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4149 comm="syz.9.9216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ae98efc9 code=0x7ffc0000 [ 1981.427217][T15610] usb 6-1: Firmware: major: 0, minor: 255, hardware type: UNKNOWN (145) [ 1981.465059][ T4158] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.9217'. [ 1981.479085][ T4158] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1981.638822][T15610] usb 6-1: failed to fetch extended address, random address set [ 1981.663896][T15610] usb 6-1: atusb_probe: initialization failed, error = -524 [ 1981.679382][T15610] atusb 6-1:0.128: probe with driver atusb failed with error -524 [ 1981.744857][T15610] usb 6-1: USB disconnect, device number 31 [ 1983.586037][T25839] net_ratelimit: 33 callbacks suppressed [ 1983.586057][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1983.714718][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1983.832875][T25844] bond1: (slave macvlan2): failed to get link speed/duplex [ 1983.962576][T25844] bond1: (slave macvlan2): failed to get link speed/duplex [ 1984.072835][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1984.182956][T25844] bond1: (slave macvlan2): failed to get link speed/duplex [ 1984.292476][T25838] bond1: (slave macvlan2): failed to get link speed/duplex [ 1984.402808][T25844] bond1: (slave macvlan2): failed to get link speed/duplex [ 1984.512559][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1984.632700][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1984.672009][T25839] veth0_to_bond: left promiscuous mode [ 1985.484044][ T4214] netlink: 'syz.9.9234': attribute type 11 has an invalid length. [ 1985.871047][ T4230] loop4: detected capacity change from 0 to 7 [ 1985.887557][T14320] Dev loop4: unable to read RDB block 7 [ 1985.893509][T14320] loop4: unable to read partition table [ 1985.914018][T14320] loop4: partition table beyond EOD, truncated [ 1985.937952][ T4230] Dev loop4: unable to read RDB block 7 [ 1985.958149][ T4230] loop4: unable to read partition table [ 1985.982595][ T4230] loop4: partition table beyond EOD, truncated [ 1985.999891][ T4230] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1986.521755][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1986.521772][ T30] audit: type=1326 audit(1760839589.566:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.6.9244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be7d8efc9 code=0x7ffc0000 [ 1986.553654][T26535] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1986.567653][ T30] audit: type=1326 audit(1760839589.566:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.6.9244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be7d8efc9 code=0x7ffc0000 [ 1986.593024][ T30] audit: type=1326 audit(1760839589.566:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.6.9244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8be7d8efc9 code=0x7ffc0000 [ 1986.618318][ T30] audit: type=1326 audit(1760839589.566:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.6.9244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be7d8efc9 code=0x7ffc0000 [ 1986.642306][ T30] audit: type=1326 audit(1760839589.566:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.6.9244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be7d8efc9 code=0x7ffc0000 [ 1986.665306][ T30] audit: type=1326 audit(1760839589.616:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.6.9244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be7d8efc9 code=0x7ffc0000 [ 1986.693353][T15610] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1986.693370][ T30] audit: type=1326 audit(1760839589.616:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.6.9244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be7d8efc9 code=0x7ffc0000 [ 1986.693411][ T30] audit: type=1326 audit(1760839589.616:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.6.9244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8be7d8efc9 code=0x7ffc0000 [ 1986.761636][T26535] usb 10-1: Using ep0 maxpacket: 32 [ 1986.792725][T26535] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1986.828812][ T4247] blktrace: Concurrent blktraces are not allowed on sg0 [ 1986.888730][T26535] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1986.902551][ T30] audit: type=1326 audit(1760839589.616:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.6.9244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be7d8efc9 code=0x7ffc0000 [ 1986.902716][T26535] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1986.938199][ T30] audit: type=1326 audit(1760839589.616:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.6.9244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be7d8efc9 code=0x7ffc0000 [ 1986.991742][T26535] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.033880][T26535] usb 10-1: config 0 descriptor?? [ 1987.044967][T26535] hub 10-1:0.0: USB hub found [ 1987.051832][T15610] usb 6-1: config 0 has no interfaces? [ 1987.249994][T26535] hub 10-1:0.0: config failed, can't read hub descriptor (err -90) [ 1987.268577][T15610] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1987.279371][T15610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.300089][T15610] usb 6-1: Product: syz [ 1987.310355][T15610] usb 6-1: Manufacturer: syz [ 1987.321001][T15610] usb 6-1: SerialNumber: syz [ 1987.349637][T15610] usb 6-1: config 0 descriptor?? [ 1987.834595][T26535] hid-generic 0003:046D:C31C.002F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.9-1/input0 [ 1987.874654][T26535] usb 10-1: USB disconnect, device number 38 [ 1987.908604][ T4249] fido_id[4249]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1988.634327][T17452] net_ratelimit: 22 callbacks suppressed [ 1988.634346][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1988.730540][ T31] INFO: task syz.8.8328:1123 blocked for more than 143 seconds. [ 1988.737861][ T4256] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9246'. [ 1988.762963][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1988.784937][ T31] Not tainted syzkaller #0 [ 1988.790137][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1988.842590][ T31] task:syz.8.8328 state:D stack:25992 pid:1123 tgid:1116 ppid:31179 task_flags:0x400040 flags:0x00080002 [ 1988.868540][ T31] Call Trace: [ 1988.873526][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1988.881516][ T31] [ 1988.890114][ T31] __schedule+0x1798/0x4cc0 [ 1988.899539][ T31] ? __pfx___schedule+0x10/0x10 [ 1988.910656][ T31] ? schedule+0x91/0x360 [ 1988.920496][ T31] schedule+0x165/0x360 [ 1988.929676][ T31] schedule_preempt_disabled+0x13/0x30 [ 1988.941363][ T31] __mutex_lock+0x7e6/0x1350 [ 1988.952340][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1988.963490][ T31] ? usbdev_open+0x16e/0x760 [ 1988.975892][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1988.988608][ T31] ? bus_find_device+0x273/0x2b0 [ 1988.994133][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1989.008447][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1989.020058][ T31] ? __lock_acquire+0xab9/0xd20 [ 1989.031441][ T31] usbdev_open+0x16e/0x760 [ 1989.037015][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1989.041947][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1989.059642][ T31] chrdev_open+0x4cc/0x5e0 [ 1989.070622][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1989.080706][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1989.098914][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1989.103986][ T31] do_dentry_open+0x953/0x13f0 [ 1989.108794][ T31] vfs_open+0x3b/0x340 [ 1989.112555][T25839] bond1: (slave macvlan2): failed to get link speed/duplex [ 1989.120068][ T31] ? path_openat+0x2ecd/0x3830 [ 1989.129212][ T31] path_openat+0x2ee5/0x3830 [ 1989.133942][ T31] ? __pfx_path_openat+0x10/0x10 [ 1989.138877][ T31] do_filp_open+0x1fa/0x410 [ 1989.156458][ T31] ? __lock_acquire+0xab9/0xd20 [ 1989.167416][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1989.179372][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1989.191033][ T31] ? alloc_fd+0x64c/0x6c0 [ 1989.199751][ T31] do_sys_openat2+0x121/0x1c0 [ 1989.210491][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1989.228031][ T31] ? exc_page_fault+0x82/0x100 [ 1989.238296][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1989.249494][ T31] __x64_sys_openat+0x138/0x170 [ 1989.259526][ T31] do_syscall_64+0xfa/0xfa0 [ 1989.272673][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1989.281071][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1989.293243][T25843] bond1: (slave macvlan2): failed to get link speed/duplex [ 1989.306815][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1989.315958][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1989.333245][ T31] RIP: 0033:0x7f1d4d18d810 [ 1989.343134][ T31] RSP: 002b:00007f1d4dff3b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1989.368294][ T31] RAX: ffffffffffffffda RBX: 0000000000041341 RCX: 00007f1d4d18d810 [ 1989.382490][ T31] RDX: 0000000000041341 RSI: 00007f1d4dff3c10 RDI: 00000000ffffff9c [ 1989.403748][ T31] RBP: 00007f1d4dff3c10 R08: 0000000000000000 R09: 0000000000000000 [ 1989.422851][T17452] bond1: (slave macvlan2): failed to get link speed/duplex [ 1989.430312][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1989.458454][ T31] R13: 00007f1d4d3e64e8 R14: 00007f1d4d3e6450 R15: 00007f1d4d50fa28 [ 1989.476417][ T31] [ 1989.484132][ T31] [ 1989.484132][ T31] Showing all locks held in the system: [ 1989.501210][ T31] 1 lock held by khungtaskd/31: [ 1989.537360][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1989.560498][T15610] usb 6-1: USB disconnect, device number 32 [ 1989.571596][ T31] 2 locks held by getty/5583: [ 1989.582720][ T31] #0: ffff888033e8d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1989.605817][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1989.619436][ T31] 4 locks held by udevd/14194: [ 1989.626136][ T31] #0: ffff88808139b790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 1989.635455][ T31] #1: ffff888057e74c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1989.645081][ T31] #2: ffff888024b23a58 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1989.654654][ T31] #3: ffff8880330b5198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1989.664406][ T31] 3 locks held by kworker/0:7/15610: [ 1989.669699][ T31] #0: ffff8880206dd148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1989.681123][ T31] #1: ffffc9000f19fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1989.694489][ T31] #2: ffff888145334198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1989.709836][ T31] 5 locks held by kworker/u8:1/25838: [ 1989.715301][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1989.726534][ T31] #1: ffffc9000d29fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1989.739313][ T31] #2: ffffffff8f4d1530 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1989.748853][ T31] #3: ffffffff8f4de3c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 1989.758197][ T31] #4: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1989.769377][ T31] 6 locks held by kworker/1:6/29700: [ 1989.775303][ T31] #0: ffff8880206dd148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1989.787418][ T31] #1: ffffc90003787ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1989.799456][ T31] #2: ffff8880283b4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1989.809413][ T31] #3: ffff8880330b5198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1989.818819][ T31] #4: ffff8880582e1160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1989.828153][ T31] #5: ffffffff8dfe26f0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 1989.838694][ T31] 1 lock held by syz.8.8328/1123: [ 1989.844534][ T31] #0: ffff8880283b4198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1989.853655][ T31] 1 lock held by syz.2.9196/4096: [ 1989.858674][ T31] #0: ffff8880283b4198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1989.867900][ T31] [ 1989.870236][ T31] ============================================= [ 1989.870236][ T31] [ 1989.886415][T25841] bond1: (slave macvlan2): failed to get link speed/duplex [ 1989.891053][ T31] NMI backtrace for cpu 0 [ 1989.891069][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1989.891089][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1989.891100][ T31] Call Trace: [ 1989.891107][ T31] [ 1989.891116][ T31] dump_stack_lvl+0x189/0x250 [ 1989.891142][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1989.891161][ T31] ? __pfx__printk+0x10/0x10 [ 1989.891191][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1989.891216][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1989.891241][ T31] ? __pfx__printk+0x10/0x10 [ 1989.891263][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1989.891292][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1989.891317][ T31] watchdog+0xf60/0xfa0 [ 1989.891345][ T31] ? watchdog+0x1e2/0xfa0 [ 1989.891371][ T31] kthread+0x711/0x8a0 [ 1989.891391][ T31] ? __pfx_watchdog+0x10/0x10 [ 1989.891412][ T31] ? __pfx_kthread+0x10/0x10 [ 1989.891431][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1989.891456][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1989.891472][ T31] ? __pfx_kthread+0x10/0x10 [ 1989.891491][ T31] ret_from_fork+0x4bc/0x870 [ 1989.891515][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1989.891544][ T31] ? __switch_to_asm+0x39/0x70 [ 1989.891563][ T31] ? __switch_to_asm+0x33/0x70 [ 1989.891580][ T31] ? __pfx_kthread+0x10/0x10 [ 1989.891599][ T31] ret_from_fork_asm+0x1a/0x30 [ 1989.891634][ T31] [ 1989.891641][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1990.041926][ C1] NMI backtrace for cpu 1 [ 1990.041942][ C1] CPU: 1 UID: 0 PID: 5810 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1990.041960][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1990.041971][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1990.041995][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 24 62 e0 0b 48 89 de 5b e9 63 81 5a 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 30 91 92 65 8b 15 28 ec [ 1990.042015][ C1] RSP: 0018:ffffc90003a57d98 EFLAGS: 00000246 [ 1990.042030][ C1] RAX: ffffffff84728351 RBX: 0000000000000000 RCX: 0000000000000000 [ 1990.042042][ C1] RDX: ffff888030729e40 RSI: 0000000000000000 RDI: 0000000000000000 [ 1990.042053][ C1] RBP: ffffc90003a57eb0 R08: ffffffff8f9dfa77 R09: 1ffffffff1f3bf4e [ 1990.042065][ C1] R10: dffffc0000000000 R11: fffffbfff1f3bf4f R12: 1ffff110060e5482 [ 1990.042078][ C1] R13: 0000000000000001 R14: ffff88803072b4e0 R15: 1ffff110060e569c [ 1990.042090][ C1] FS: 0000555572d01500(0000) GS:ffff888125e0d000(0000) knlGS:0000000000000000 [ 1990.042104][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1990.042115][ C1] CR2: 0000200000404030 CR3: 00000000780d4000 CR4: 00000000003526f0 [ 1990.042130][ C1] Call Trace: [ 1990.042137][ C1] [ 1990.042144][ C1] blkcg_maybe_throttle_current+0x1ab/0xb40 [ 1990.042170][ C1] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 1990.042188][ C1] ? __se_sys_clock_nanosleep+0x339/0x390 [ 1990.042211][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 1990.042231][ C1] exit_to_user_mode_loop+0xab/0x130 [ 1990.042250][ C1] do_syscall_64+0x2bd/0xfa0 [ 1990.042268][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1990.042284][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1990.042300][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1990.042317][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1990.042332][ C1] RIP: 0033:0x7f6fa63c1843 [ 1990.042346][ C1] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6d 1f 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 1990.042359][ C1] RSP: 002b:00007ffd7ee06258 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 1990.042377][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6fa63c1843 [ 1990.042388][ C1] RDX: 00007ffd7ee06270 RSI: 0000000000000000 RDI: 0000000000000000 [ 1990.042398][ C1] RBP: 0000000000000000 R08: 7fffffffffffffff R09: 3fffffffffffffff [ 1990.042410][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd7ee066c0 [ 1990.042421][ C1] R13: 0000000000000004 R14: 00007ffd7ee062ac R15: 00007ffd7ee06340 [ 1990.042440][ C1] [ 1990.043446][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1990.043463][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1990.043483][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1990.043496][ T31] Call Trace: [ 1990.043504][ T31] [ 1990.043513][ T31] dump_stack_lvl+0x99/0x250 [ 1990.043536][ T31] ? __asan_memcpy+0x40/0x70 [ 1990.043555][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1990.043574][ T31] ? __pfx__printk+0x10/0x10 [ 1990.043604][ T31] vpanic+0x237/0x6d0 [ 1990.043628][ T31] ? __pfx_vpanic+0x10/0x10 [ 1990.043653][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1990.043677][ T31] panic+0xb9/0xc0 [ 1990.043699][ T31] ? __pfx_panic+0x10/0x10 [ 1990.043723][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1990.043753][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1990.043778][ T31] watchdog+0xf9f/0xfa0 [ 1990.043805][ T31] ? watchdog+0x1e2/0xfa0 [ 1990.043832][ T31] kthread+0x711/0x8a0 [ 1990.043854][ T31] ? __pfx_watchdog+0x10/0x10 [ 1990.043876][ T31] ? __pfx_kthread+0x10/0x10 [ 1990.043895][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1990.043920][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1990.043937][ T31] ? __pfx_kthread+0x10/0x10 [ 1990.043957][ T31] ret_from_fork+0x4bc/0x870 [ 1990.043982][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1990.044010][ T31] ? __switch_to_asm+0x39/0x70 [ 1990.044029][ T31] ? __switch_to_asm+0x33/0x70 [ 1990.044049][ T31] ? __pfx_kthread+0x10/0x10 [ 1990.044068][ T31] ret_from_fork_asm+0x1a/0x30 [ 1990.044103][ T31] [ 1990.450092][ T31] Kernel Offset: disabled [ 1990.454400][ T31] Rebooting in 86400 seconds..