last executing test programs: 10m54.991518872s ago: executing program 3 (id=10): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x66, 0x2, {0x4000}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x4}}]}]}, 0x5c}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r7) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f0000000340)=""/105, 0x69}, {&(0x7f00000005c0)=""/143, 0x8f}], 0x5}, 0x2020) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448dd, &(0x7f0000000140)="fc2a483a3f8b7d2218498aea73b2f5a491030c7066f2dbec3f789d96f313ac22b78a143ac07fd4eb5e38e7406eb17939dba27e41d2146e8de406b9d4e439e3d818cb56ec1e54e57488f6463e0e45f3981791977beed05d07a71ba1e47e6d0fb88eb0f748887321dbec1ee31b4111cda40cb9c010e166a7ce3c0d802814cb34ed7980c98597eddcd9c15f290891b7efbabf7ecc34209cbe0cc9252317ceef003f3f6c4fb595a15e1e1890d709660073de4e") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r8, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r8, 0x7af, &(0x7f0000000000)={@hyper, 0x8}) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000080)) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r9, 0x11, 0x1, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r10, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) 10m54.810291031s ago: executing program 4 (id=5): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xba0f, @rand_addr=' \x01\x00', 0x200}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000001e80)=[{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x223, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000000080)=' ', 0x1}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x10, 0x2, 0x4, 0x2, r4}}], 0x20, 0x8000}], 0x1, 0x40004) fsopen(&(0x7f0000000000)='omfs\x00', 0x1) 10m53.578679393s ago: executing program 3 (id=15): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r2, r2) preadv(r1, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x3}]}}]}, 0x40}}, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7fffffff, 0x5, 0x0, 0x6, 0x1, 0x310}}]}}}]}, 0x80}}, 0x0) writev(r4, &(0x7f00000006c0)=[{&(0x7f00000005c0)='I', 0x1}], 0x1) 10m53.443592902s ago: executing program 4 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c00048028000180"], 0x80}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x2b00, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 10m52.562868596s ago: executing program 4 (id=17): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) setuid(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) 10m51.827601294s ago: executing program 4 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}, 0x40000}, 0x0) 10m50.513176263s ago: executing program 2 (id=23): syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @random="6481bf928700", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x2}, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3, 0xffff0000}}}}}}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x40840) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) 10m49.686321399s ago: executing program 32 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}, 0x40000}, 0x0) 10m48.074082826s ago: executing program 3 (id=28): prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4, 0x2, 0xa9f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x44080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(r3, 0x4, 0x0, &(0x7f0000000040)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0x11, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 10m47.451533858s ago: executing program 2 (id=30): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = syz_usb_connect$cdc_ecm(0x6, 0x74, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x3, 0xb0, 0x7, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x6, {{0xb, 0x24, 0x6, 0x0, 0x0, "b09bacf7e1a0"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x5, 0xf, 0xa7}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @dmm={0x7, 0x24, 0x14, 0x7}, @mdlm_detail={0x9, 0x24, 0x13, 0x9, "d4f79b4e88"}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xc, 0xf2, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x8, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x34, 0x5, 0x8}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0x9, 0x4, 0x8f, 0x8, 0x2}, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x4, 0x3, 0x6, 0x3}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000a3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711038000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 10m46.626598944s ago: executing program 3 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r3 = socket(0x18, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004a80)=ANY=[], 0x1008}, 0x1, 0x0, 0x0, 0x844}, 0x24044804) 10m46.089011849s ago: executing program 2 (id=37): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x20, @mcast1, 0x2}, 0x1c) 10m45.286200079s ago: executing program 2 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r3 = socket(0x18, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004a80)=ANY=[], 0x1008}, 0x1, 0x0, 0x0, 0x844}, 0x24044804) 10m44.916482877s ago: executing program 3 (id=40): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @empty, @empty}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1200224}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x3, 0x17ff0}, {0x4, 0x7}, {0xb, 0x9}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 10m44.02575557s ago: executing program 2 (id=42): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m40.429790334s ago: executing program 2 (id=46): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000406a05f400000000000001090224000100001000090400000103000000092100000001220b000905810300000005013f2dcb79c885829ece22722764a9789b95292c2cbef29d6a7e5755a0b83b1b97b94ecb4df9e4d5af4874236f82e5294c793ffad28c3dc0bf66d2311b6d8821f42c"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00220bff000000000000007b662a29919875a89fffd69f5701fc2b40a99180a7bd9610016a98e43ce4a72591ce1fbeee69ff490bd9c14310bda5d20d2a00a30412161593053ec33ddf3cfa0eecc305c473d42c4863a3b22459d877351a09cda8ea6377a1d0e186cd86daebc43587da9d089d4562b6f76c07771217736866f283bd4a63e7fe9170950b0d78bd0b3a7e7e766dd5e0bee2fb92373187e0ae3651c5bbac41c3918efaf93a07cd72594d103c60"], 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x560d, &(0x7f0000000680)={0x0, 0xb586, 0x2, 0xfffffffe, 0x3bd}) r4 = socket$rxrpc(0x21, 0x2, 0xa) listen(r4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) close_range(r3, r4, 0x2000000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, 0x0, 0x0) 10m39.877710293s ago: executing program 33 (id=46): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000406a05f400000000000001090224000100001000090400000103000000092100000001220b000905810300000005013f2dcb79c885829ece22722764a9789b95292c2cbef29d6a7e5755a0b83b1b97b94ecb4df9e4d5af4874236f82e5294c793ffad28c3dc0bf66d2311b6d8821f42c"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00220bff000000000000007b662a29919875a89fffd69f5701fc2b40a99180a7bd9610016a98e43ce4a72591ce1fbeee69ff490bd9c14310bda5d20d2a00a30412161593053ec33ddf3cfa0eecc305c473d42c4863a3b22459d877351a09cda8ea6377a1d0e186cd86daebc43587da9d089d4562b6f76c07771217736866f283bd4a63e7fe9170950b0d78bd0b3a7e7e766dd5e0bee2fb92373187e0ae3651c5bbac41c3918efaf93a07cd72594d103c60"], 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x560d, &(0x7f0000000680)={0x0, 0xb586, 0x2, 0xfffffffe, 0x3bd}) r4 = socket$rxrpc(0x21, 0x2, 0xa) listen(r4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) close_range(r3, r4, 0x2000000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, 0x0, 0x0) 10m39.870307031s ago: executing program 3 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f0000000000)=""/99, 0x63}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x5}, 0x80000000}], 0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) 10m39.601223809s ago: executing program 34 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f0000000000)=""/99, 0x63}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x5}, 0x80000000}], 0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) 6m30.683355783s ago: executing program 5 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)={0x2a0400, 0x20, 0x20}, 0x18) ioctl$LOOP_CLR_FD(r0, 0x4c01) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdir(&(0x7f0000000280)='./file0/file0\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) execveat(r0, &(0x7f0000000380)='./file1\x00', &(0x7f00000005c0)={[&(0x7f00000003c0)='\\/(/($^%*##\x00', &(0x7f0000000400)='[\x00', &(0x7f0000000480)=']{\x00', 0x0, &(0x7f0000000500)=')\x8b\x00', &(0x7f0000000540)='/dev/cpu/#/msr\x00', &(0x7f0000000580)='/dev/cpu/#/msr\x00']}, &(0x7f00000006c0)={[&(0x7f0000000600)='@\x00', &(0x7f0000000640)='afs\x00', &(0x7f0000000680)='4+\x00']}, 0x1000) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={0x0}}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000"], 0x24}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x102, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0xc894) 6m28.545431329s ago: executing program 5 (id=567): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f00000000c0)=0x9, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x74, 0x10, 0x8, 0x70bd2b, 0xffffffff, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x793}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xc}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}]}}}]}, 0x74}}, 0x0) 6m27.539462552s ago: executing program 5 (id=569): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_STAT(0x0, 0xd, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000000303010100000000000000000a0000040c000200fffffffb0000000808000340800000010c000200fffffffe00000003a43dfd63e41a5bd15311"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008000) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c003920"], 0xf) socket$inet_sctp(0x2, 0x5, 0x84) 6m24.6134922s ago: executing program 5 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)={0x2a0400, 0x20, 0x20}, 0x18) ioctl$LOOP_CLR_FD(r0, 0x4c01) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdir(&(0x7f0000000280)='./file0/file0\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) execveat(r0, &(0x7f0000000380)='./file1\x00', &(0x7f00000005c0)={[&(0x7f00000003c0)='\\/(/($^%*##\x00', &(0x7f0000000400)='[\x00', &(0x7f0000000480)=']{\x00', 0x0, &(0x7f0000000500)=')\x8b\x00', &(0x7f0000000540)='/dev/cpu/#/msr\x00', &(0x7f0000000580)='/dev/cpu/#/msr\x00']}, &(0x7f00000006c0)={[&(0x7f0000000600)='@\x00', &(0x7f0000000640)='afs\x00', &(0x7f0000000680)='4+\x00']}, 0x1000) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={0x0}}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000"], 0x24}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x102, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0xc894) 6m20.833016092s ago: executing program 5 (id=583): rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0x1d3) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) r2 = socket$caif_stream(0x25, 0x1, 0x2) prctl$PR_SET_TIMERSLACK(0x1d, 0x9) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x10000}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x480400, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000280)=0xe8) getgroups(0x5, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0xee00, 0xee01, 0xee00]) fchown(r1, r6, r7) getpid() setuid(r6) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x2e33, @loopback}, 0x1c) ioctl$TCFLSH(r3, 0x540b, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000340)={r0, 0xff, 0xda0, "e267aa073a4f68626cf9914e42ff0bd3169d8bbbecef25c1862a4c978929836f3aa49997746c"}) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rxrpc_resend\x00', r3, 0x0, 0x7ff}, 0x18) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0x4, 0x10}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000600)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r5, 0x8000, 0x10, 0x4e0, 0x38100000, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x0, 0x9d, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @local, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x17c, r9, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4804}, 0x20000010) ioctl$BTRFS_IOC_BALANCE(r8, 0x5000940c, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x280000, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) 6m18.539289024s ago: executing program 5 (id=587): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)=ANY=[@ANYBLOB="140000001000010000000000000000000080000a50000000060a0104f9ffffffffffffff0200000024000480200001800e000100696d6d6564696174650600000000028008000140000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000000a0000"], 0x78}, 0x1, 0x0, 0x0, 0x44}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x0, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x7ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb979, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x5, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x5, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x8001, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @fd, @fda={0x66646185, 0x6, 0x2, 0x2c}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0xb1, 0x0, &(0x7f0000000600)="e55454e10923f7629220d107f91e290ea86f7d7a557c51a12fdf18b262e8ae07f86b28e251a8f01ce79f31679fa10bdc904f3425929d30ad0c7d5dc33411d6a9ef500d03ab471f5ae2b018988ae28737cac36d14ce9c07d9061ba87e7643e0097256778bf15807a1be3ad02cbc99858d0dec35b836f1a050464657fa5419ba67cb425c4ba5b3b3fb3fe1f1b534354ef41d35e1c6fd8e263d55f7d5cfc1f5e480e96da12973794f0a20ec875f70101c605c"}) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 6m1.551044775s ago: executing program 35 (id=587): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)=ANY=[@ANYBLOB="140000001000010000000000000000000080000a50000000060a0104f9ffffffffffffff0200000024000480200001800e000100696d6d6564696174650600000000028008000140000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000000a0000"], 0x78}, 0x1, 0x0, 0x0, 0x44}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x0, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x7ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb979, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x5, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x5, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x8001, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @fd, @fda={0x66646185, 0x6, 0x2, 0x2c}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0xb1, 0x0, &(0x7f0000000600)="e55454e10923f7629220d107f91e290ea86f7d7a557c51a12fdf18b262e8ae07f86b28e251a8f01ce79f31679fa10bdc904f3425929d30ad0c7d5dc33411d6a9ef500d03ab471f5ae2b018988ae28737cac36d14ce9c07d9061ba87e7643e0097256778bf15807a1be3ad02cbc99858d0dec35b836f1a050464657fa5419ba67cb425c4ba5b3b3fb3fe1f1b534354ef41d35e1c6fd8e263d55f7d5cfc1f5e480e96da12973794f0a20ec875f70101c605c"}) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 2m18.702763944s ago: executing program 7 (id=1186): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4084004) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x2, 0x1, 0x0, 0x2, 0x2, 0x0, 0x70bd2c}, 0x10}, 0x19}, 0x50) 2m17.871922757s ago: executing program 7 (id=1192): openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x501) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='illinois\x00', 0x9) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socket(0x10, 0x6, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r7, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x10, @empty}, 0x1c, 0x0}}], 0x1, 0x20000000) recvmmsg(r8, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 2m16.551184005s ago: executing program 7 (id=1195): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = semget$private(0x0, 0x2, 0x302) semctl$SEM_INFO(r0, 0x3, 0x13, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000007112660000000000bf9b0000000000009500000000000000e8836f0fc77c0d0ceb54e1aa09c43f6c3cad7071557549"], 0x0, 0xa}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xad, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x99, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x2, 0x2, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x4, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x4, @private1, 0x4}]}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r5, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f00000013c0)=""/193, 0xc1}], 0x2}, 0x8}], 0x2, 0x2061, 0x0) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) listen(0xffffffffffffffff, 0x0) r6 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) write$smackfs_cipso(r6, &(0x7f0000006940)=ANY=[@ANYBLOB='batadv_slave_1\x00 00000000000000000033 00000000000000000005 00000000000000000162 0000C000000000000070 00000000000000000099 00000000000000000124 00000000000000000119 \x00'], 0xa4) socket$l2tp(0x2, 0x2, 0x73) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2m12.052150154s ago: executing program 7 (id=1201): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4084004) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020100020263aa6974a711a5e600000097e8b91bfd65b9"], 0x10}, 0x19}, 0x50) 2m11.355748601s ago: executing program 7 (id=1202): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x3d, 0x1, 0x6, 0xc, 0x1}) 2m10.555617501s ago: executing program 7 (id=1205): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xd17, 0x4, 0x9, 0xb, 0x48, 0x2, 0x80}, 0xa9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1801000000000000000000deffffffff8a000000000000000c3677d638d1180ebc4e057bd38cf48a23bfc6e16949382a60f83fc3865473d6972ad68bff36b5397bdf04a27d9de3d781fb38b2bac877cc0671a460423c53"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000680)={0xffffffff, 0x2, 0x0, 0x1, 0x1}, 0x8) prlimit64(0x0, 0x6, &(0x7f0000000140)={0xfffffffffffffffb, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000006c0)={0x20, 0xe, 0xf, 0x1, 0x0, 0x5, 0x0}) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r5 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000340)=0x0) timer_settime(r6, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x2f7e, &(0x7f0000000180)=""/171) splice(r4, 0x0, r7, 0x0, 0xaf4, 0x0) 1m53.68865256s ago: executing program 36 (id=1205): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xd17, 0x4, 0x9, 0xb, 0x48, 0x2, 0x80}, 0xa9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1801000000000000000000deffffffff8a000000000000000c3677d638d1180ebc4e057bd38cf48a23bfc6e16949382a60f83fc3865473d6972ad68bff36b5397bdf04a27d9de3d781fb38b2bac877cc0671a460423c53"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000680)={0xffffffff, 0x2, 0x0, 0x1, 0x1}, 0x8) prlimit64(0x0, 0x6, &(0x7f0000000140)={0xfffffffffffffffb, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000006c0)={0x20, 0xe, 0xf, 0x1, 0x0, 0x5, 0x0}) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r5 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000340)=0x0) timer_settime(r6, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x2f7e, &(0x7f0000000180)=""/171) splice(r4, 0x0, r7, 0x0, 0xaf4, 0x0) 20.063316613s ago: executing program 0 (id=1409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) io_uring_enter(r3, 0x47f6, 0xeffd, 0x0, 0x0, 0x0) 18.784051249s ago: executing program 0 (id=1412): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r1, &(0x7f0000004280)='.\x00', 0x800, 0x0) sendto$ax25(r1, &(0x7f0000000380)="696398d06595e05201e49de0a02b80eb3f5ac8227c74a75a5b000c76df24ef49a4f25168f7e19b2d57014843d149b578ee61584b4d7cdf9cf595ed0f9a992a374412ddc4dc630b71cb6ce5b4a4624ec1ac4d6eb60bff4d3b4ffe6cd81d715f785adca01ef93e1e1ecbdc07e97b30ef0f396afd55aa1341891d0e23d9952c44d0ae2e27d1fcaa06b22c49d56ff0aaa21760d8a306cdfa005ae66094937fe142ce8c39a9c4a6331e41dbe0758e9c31ee9438e85ced6c24ea1c3577fe35ce02191a613c85dab741b6f07f532cac7111cbcb981265e0e7aead57e2eb45b3978e86b5b82e9d5ba6bec76141a1443b1eb7e25890", 0xf1, 0x801, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, 0x0) 11.089378287s ago: executing program 6 (id=1427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0x78, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x150, 0x11, 0x148, 0x150, 0x10, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0xffffff00, 0xffffff00, 'nicvf0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x84, 0x3, 0x18}, 0x10, 0xe8, 0x150, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @rand_addr=0x10, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0xa, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f8) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='coredump_filter\x00') 9.652471424s ago: executing program 0 (id=1430): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x4, 0x100, &(0x7f0000000500)="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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000006200)='./bus\x00', &(0x7f0000000000), 0x4002, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x180) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b0001000000000904000001ffffff000905"], 0x0) 9.283751831s ago: executing program 6 (id=1431): socket(0x15, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000003a0000000000000001"]) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES16=r5], 0xf0}}, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000300)=""/112, 0x103000, 0x6bc22fd484172ea7, 0xc, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="100000020000000000000096b68e6e20e3e18e00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = fsopen(&(0x7f0000000000)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00\x00', @ANYRES32=r6], 0x5) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r12, 0x800000000000) socket$rds(0x15, 0x5, 0x0) 9.080660038s ago: executing program 1 (id=1432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) r8 = openat$random(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev2(r8, &(0x7f0000000340)=[{&(0x7f00000000c0)="89", 0x1}], 0x1, 0xe, 0x0, 0x49) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000000002c00fe800000000000000000000000002a000100"/40, 0x2a}], 0x1}, 0x0) dup2(r7, r5) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$inet_smc(0x2b, 0x1, 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x120000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r9, 0x4610, &(0x7f0000000200)={0x1f, 0xfffffffc}) 8.20736608s ago: executing program 8 (id=1433): ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000580)={0x2, 0x3, 0x0, [{0x7, 0x9, 0x5, 0xe1, 0x7, 0x5, 0x2, '\x00', 0x4}, {0x5, 0x0, 0x4, 0x6, 0x81, 0xfe, 0x4, '\x00', 0xd6}, {0x3, 0x621, 0x1, 0x0, 0x2, 0xc, 0x8, '\x00', 0x100000001}]}) recvmsg(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000030c0)=""/4103, 0x1007}], 0x1, &(0x7f0000000740)=""/185, 0xb9}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = creat(&(0x7f0000001e00)='./file0\x00', 0x41) lsetxattr$smack_xattr_label(&(0x7f0000002000)='./file0\x00', &(0x7f0000002040)='security.SMACK64EXEC\x00', 0x0, 0x0, 0x1) socket$alg(0x26, 0x5, 0x0) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000002080)={{0x2, 0x200, 0x3, 0xfffffff7, 0x9, 0xfffffffa}, 0x125, [0x0, 0x2, 0x5, 0x4dce, 0x8, 0x7, 0x7, 0xbeb, 0x8, 0x6fd, 0xd, 0x9, 0x6519, 0x66c, 0x200, 0x101, 0x4, 0x3, 0x5, 0x9f, 0x7ff, 0x92b3, 0x2, 0x8, 0xd1, 0x8, 0x4, 0x7e5e, 0x1ff, 0xffffffff, 0x7, 0x2, 0x101, 0x7, 0x496d6f98, 0x9, 0xff, 0x7, 0x8, 0x10000, 0x0, 0x8e3, 0xf, 0x0, 0x1, 0x7, 0x80000001, 0x32, 0x180, 0x0, 0xffffffff, 0x7, 0xff, 0x5, 0x4089, 0xf, 0x8001, 0x800, 0x3a, 0x0, 0x10001, 0x893, 0xfff, 0x7fff, 0x2, 0x101, 0x1, 0xffffffff, 0x5c45b4e9, 0x1, 0x10001, 0x6b8, 0xca, 0x80000001, 0xb7, 0xf, 0x6, 0x401, 0x400, 0xbf00000, 0x1, 0x2fe, 0x7, 0x1, 0x10000, 0x0, 0x2, 0xc5, 0x4, 0x0, 0x1, 0x2f62, 0x8, 0xf, 0xff, 0x10001, 0xa5c5, 0xffffffff, 0x4, 0x1, 0xf, 0x401, 0x9, 0x3, 0xd9d, 0x20, 0x5, 0x54a, 0x8, 0x8, 0x7, 0x6, 0x8001, 0x3, 0xfffffffa, 0x2, 0x6, 0x0, 0xca, 0xe26, 0xa, 0x80000001, 0x3, 0x6, 0x1, 0x0, 0x5, 0xcd, 0x80, 0x5, 0x8, 0x7fff, 0x0, 0xfffffff8, 0xef848003, 0x8b, 0x0, 0x1, 0xa, 0xf, 0x4, 0x1, 0x6, 0x100, 0x3, 0x2, 0x8000, 0x5, 0x2, 0x1, 0xfffffffd, 0x7f, 0x1, 0xe0d9, 0x10000, 0x0, 0x2, 0x3, 0x0, 0x1, 0xa, 0xfffffff8, 0x3, 0x70a9, 0x0, 0xff, 0xbe, 0x7, 0x6, 0x8000, 0x8, 0x3, 0x8, 0x1, 0x6, 0xee03, 0x3, 0xbfd6, 0xfffffffb, 0x1, 0xf, 0x2, 0x8001, 0x3, 0x2, 0x9, 0x3, 0x7, 0x5, 0xf, 0x3, 0x195e, 0x9, 0x21a7016d, 0x0, 0xb2c, 0x7f, 0xfffffff7, 0x3, 0x0, 0xfffff000, 0x6, 0xdf, 0x7f, 0xebd, 0x0, 0x7, 0x1, 0x5, 0xf5a, 0x8, 0xe5ae, 0x4, 0x401, 0x5, 0x2, 0xd0, 0x7f, 0x44, 0x4, 0x18f6, 0x3, 0x7, 0x8, 0x7, 0x3, 0x5, 0xa46, 0xfff, 0x3, 0xfffffc00, 0xa0, 0x5, 0x80000000, 0x101, 0x0, 0x3, 0x401, 0x8, 0xfffffffe, 0xffff, 0xffffffff, 0xffff8001, 0x0, 0x9, 0x6, 0x5, 0x3, 0x8, 0x8, 0x1, 0x7e, 0x7, 0x0, 0x8, 0x0, 0x40, 0x4, 0x0, 0x6333, 0xb, 0x0, 0x3, 0x3, 0x80000000, 0x5, 0xb, 0x9, 0x1000050, 0xd, 0x5, 0x7, 0x0, 0x9a33, 0x5, 0x9, 0x62d, 0x57ae, 0x5, 0x0, 0x1, 0x200, 0x3ff, 0x800, 0x2, 0xfffffc01, 0x8c2, 0x400, 0x0, 0x80, 0x7fffffff, 0x0, 0x3, 0x2, 0x1ff, 0x10000, 0x7, 0x80, 0x7fff, 0x5566a0e6, 0x3, 0x1, 0x8, 0xf7a3, 0x1, 0x2, 0x8, 0x1, 0x0, 0x6, 0x7fff, 0x26c1, 0xb, 0x800, 0xff, 0x10, 0x7, 0x9, 0x6, 0xffffffff, 0x4, 0x3, 0x8, 0x9, 0x1000, 0x5, 0x1, 0x80000000, 0x8, 0x9, 0x8, 0x2, 0x3, 0x1, 0x1, 0x1, 0x8000, 0xffff, 0x9, 0x35, 0x2, 0x0, 0x3, 0x6, 0xe3b, 0x3, 0xbf77, 0x7, 0xd, 0x5, 0xd, 0x9, 0x400, 0x7, 0x400, 0x5, 0x3, 0x2, 0xd, 0x800, 0x5, 0x4, 0x9, 0x3, 0x9, 0x5, 0x9, 0x4ba7, 0x7, 0x77d, 0x9, 0x2ea, 0x8, 0x6, 0x7f, 0x0, 0x8, 0x8, 0x4, 0x9, 0x7, 0x3, 0x6, 0x0, 0x60, 0x1, 0x3, 0x1, 0x76, 0x2, 0x80000000, 0xcc8, 0xf324, 0x5, 0x10, 0x5, 0x4, 0xffffff48, 0x2, 0x2000000, 0x7, 0x6, 0x7f, 0xc, 0x5, 0x9, 0x10, 0x7, 0x9, 0x800, 0x10, 0xe6, 0x5, 0x6, 0xff, 0x3ff, 0x2, 0x2, 0x4, 0x49b, 0x4927, 0x3a3, 0x6, 0x4, 0x5, 0x4, 0x81, 0x2, 0xfffffffb, 0x80000001, 0xfffffffe, 0x5, 0x4, 0x0, 0x7, 0xe, 0x1, 0xff, 0x5, 0x4, 0x7fffffff, 0x3, 0x8001, 0x0, 0x800, 0x21, 0x0, 0x4beb8a0a, 0x5, 0x7, 0x8, 0x4, 0x4, 0x7, 0x101, 0x2, 0x2d9, 0x3, 0x8, 0x6, 0x5, 0x1, 0x7fff, 0x50, 0x8157, 0x7, 0x4aa90, 0xffffaf46, 0x3, 0x0, 0x100, 0x8, 0x7, 0x10000, 0xd, 0x4002, 0xa, 0x7f, 0x9, 0x10001, 0x6, 0x868b, 0x0, 0x0, 0x9, 0x88, 0x5, 0x1000, 0x7ff, 0x0, 0x3, 0x8, 0x3, 0x0, 0x7, 0x1, 0x100, 0x3, 0x2172ddab, 0x8, 0x0, 0x68f4d9aa, 0x7, 0x7, 0x9, 0x7, 0x7, 0x3, 0x400, 0x2, 0x2, 0x7, 0x5, 0x5, 0x3d396e99, 0x1ff, 0x7, 0x100, 0x6, 0x2, 0x0, 0xcf6, 0x1, 0x401, 0x6, 0x8, 0x401, 0x7, 0xf, 0x2, 0x6, 0x10000, 0x8, 0x7fffffff, 0x7, 0x5, 0x3, 0x4, 0xbc2aedc, 0x3, 0x4ee1162b, 0x2, 0x8, 0x10, 0x7d, 0xc1, 0x2cb, 0x9, 0x1, 0x0, 0x4, 0x8, 0xffffffff, 0x10001, 0x25567807, 0x7f6, 0xff50, 0x71d5, 0xfffffff4, 0x9, 0x9, 0xfffffff8, 0x1, 0x2, 0x4, 0x6, 0x1, 0x5, 0x81, 0x3, 0x7, 0x7, 0xffff, 0x3, 0xfb, 0x3, 0xffffffff, 0x4, 0x4, 0x200, 0x9, 0x9, 0x10, 0x9, 0x5, 0x10001, 0x4, 0x0, 0x5, 0x10000, 0xb, 0xfffffffa, 0x2, 0x9, 0x6, 0x8, 0x6, 0x5, 0x6, 0x1, 0x2, 0x0, 0x66f, 0x0, 0x6, 0x4, 0x80000000, 0x9, 0x2, 0x5, 0x7, 0x8, 0x5, 0x4, 0x1, 0x8, 0x81, 0x10000, 0x7, 0x2, 0xfffff6d1, 0x80000000, 0x10001, 0x45, 0xa0, 0x80000001, 0x9, 0x9, 0x9361, 0x8, 0x200, 0x5, 0x5, 0x13b2, 0x3, 0x9, 0x3c7e, 0x6, 0x6, 0x4, 0xab7, 0xf, 0x400, 0xf53c, 0x8, 0x5, 0x7fffffff, 0x2, 0x8, 0x1, 0x5, 0x8, 0x6, 0x7, 0x81d, 0x9, 0xe95, 0xffff6f6d, 0x5, 0x7, 0x9, 0x8001, 0x1, 0x183, 0x408, 0x5, 0xf, 0x3, 0x60ed03bf, 0xe, 0x8, 0x6, 0x7f, 0x5, 0xb9, 0x1, 0x4, 0x3, 0x0, 0x1f, 0x3, 0x1, 0xe85, 0xffff7ce2, 0x0, 0x7, 0x8, 0xc7, 0x3, 0xffffffff, 0x2, 0x2, 0x4, 0x220, 0x7ff, 0xba07, 0xbd2, 0x8, 0x2, 0x7, 0x1, 0x6, 0x0, 0xfffffffb, 0x2, 0x80000000, 0x7fffffff, 0x2, 0xff, 0x9, 0x3, 0xd, 0x5, 0xfffffffb, 0xf15, 0x8, 0x7, 0x8, 0x0, 0x1c, 0xfff, 0x1ff, 0x9, 0x3, 0x1, 0x7905000, 0xe, 0xd9, 0xffff, 0x81, 0x9, 0xf184, 0x286, 0xaf88, 0x7, 0x6, 0x8, 0xc9d8, 0x699, 0x8, 0x3, 0x1, 0x4, 0x3, 0x2, 0x3, 0x5, 0xc80, 0x0, 0x3, 0x9, 0x7, 0xaef, 0x7, 0x2, 0x2, 0xff, 0x7, 0x9, 0x8000, 0x100, 0x9, 0x0, 0x37, 0xc2, 0x5, 0x3, 0x0, 0x6, 0x7, 0x7fff, 0x8, 0x5, 0x0, 0x6f8, 0x9, 0x1, 0x0, 0x5, 0x0, 0x1, 0x3946, 0x400, 0xf, 0x0, 0x1, 0x480000, 0x0, 0xffffffff, 0x6, 0x9, 0x4, 0x70, 0x0, 0x1, 0x2, 0x7, 0x2, 0x6, 0xfff, 0xed, 0x5, 0x7, 0xb, 0xd, 0x1, 0x7, 0x200, 0x9, 0x1, 0xb, 0x9, 0x40, 0x8001, 0xfed, 0x1, 0x3, 0x1, 0x4, 0x1, 0x8001, 0x1, 0xde2, 0x4, 0x697, 0x5, 0x8bc, 0x6, 0x100, 0x0, 0x0, 0x9, 0xfffffff7, 0x1, 0xbd800, 0x3, 0x81, 0xf, 0x0, 0x9, 0x3, 0x6, 0xb41, 0x2, 0x2, 0x5178, 0x0, 0x4, 0x8, 0x1, 0x5, 0x9, 0xc, 0x1, 0xa, 0x1518, 0xa570, 0x9, 0x8, 0x40, 0x21, 0x1, 0x4, 0x1, 0x8000, 0x203, 0xca3, 0x1, 0x80000000, 0x3, 0xfffffffe, 0xa2, 0x8, 0x1, 0x2, 0x400006, 0x4, 0x8, 0x1, 0x800, 0x35, 0x2, 0x0, 0x7, 0x4, 0x4, 0x8, 0x42, 0x1, 0x6, 0x6, 0x802, 0x5, 0xd, 0x9, 0x93, 0x5, 0x9, 0x4, 0x4, 0x0, 0x1, 0x401, 0x0, 0x9, 0x6f4756e8, 0x2, 0x9, 0x3, 0x9, 0x2, 0xfffffffe, 0x10000, 0x7ff, 0x22ed, 0x9, 0x7f, 0x7, 0x7, 0x1, 0x80000001, 0x6311b718, 0x7, 0x5, 0xfffffffd, 0x7, 0x10, 0x5dd2bde8, 0x101, 0x3, 0x7, 0x1, 0x6, 0x5, 0x80000001, 0x4, 0x2, 0x3, 0xdd, 0x2, 0x2, 0x892, 0x2, 0x2, 0x7, 0x1000, 0x270, 0x9, 0xda7, 0x2, 0x101, 0x1, 0x8, 0x1, 0x9000000, 0x3, 0xffff, 0x2d47, 0xe5de, 0xdaa5, 0xff, 0x2a0, 0x10, 0x8c5, 0xd, 0x0, 0x7ff, 0x9, 0xe64, 0x9, 0x8001, 0x8, 0x1, 0x1, 0x6, 0x8, 0xb0a, 0x80000001, 0x0, 0x3, 0x7, 0x9, 0x0, 0x5, 0x101, 0x1, 0x400, 0x7, 0x0, 0x474, 0x0, 0xfffffb53, 0x9, 0x3, 0x0, 0x3, 0x5, 0x0, 0x10001, 0x9, 0x6, 0x6, 0x80000001, 0x0, 0x86, 0xfff, 0xee, 0x1c9, 0x7, 0x7fff, 0xf, 0x400, 0x3, 0x6e, 0x3, 0x2, 0x9, 0x4, 0x8, 0x7d, 0xfda0, 0x57a95298, 0x10001, 0x3]}) munmap(&(0x7f0000256000/0x3000)=nil, 0x3000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000004c0)={&(0x7f0000000000)=""/65, 0x328000, 0x0, 0x9}, 0x20) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = mq_open(&(0x7f0000000180)='+\x00', 0x40, 0x1a, &(0x7f00000001c0)={0x2a12, 0x7, 0xf, 0x9}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r6, &(0x7f00000002c0)=""/81, 0x51, 0x5, &(0x7f0000000380)={r7, r8+60000000}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0xd000, 0x10000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000540)={0x2}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x210000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32=r5], 0x78) ioctl$F2FS_IOC_SEC_TRIM_FILE(r9, 0x4018f514, &(0x7f0000000500)={0x9, 0xb01c, 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000c2000000c200000003000000100000000000001202000000030000000180000f0200000003000000483b00000f000000ea9f0e0000000800001308000000060000008000000001feffff0e00000009000000400000000c00000008000000fdffffff09000000f8ffffff070000000400000004000000070000001000000000000080020000000b00000006000000000000000500000002000000050000000000000000000003000000000500000003000000f7ffffff010000000000000b04000000090000000000000c030000000000000000"], &(0x7f0000000240)=""/77, 0xdf, 0x4d, 0x0, 0x4, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1a00000003000000ffffffff0c00000001000000", @ANYRES32=r10, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="000000000000000a000000000000fe000000bc37cc7b03b13aa000b7fc4307e48145be6fcc589a8d134d2884376487bfe501101668fb34a02dde732fcc3028f3a05b85de05671521c46b9ac0ea4fa40000000000000000000000000022786c"], 0x50) 7.461020492s ago: executing program 1 (id=1434): socket$nl_rdma(0x10, 0x3, 0x14) (async) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xd, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) memfd_create(0x0, 0x7) (async) syz_open_dev$MSR(0x0, 0x0, 0x0) (async) socket$kcm(0x29, 0x8, 0x0) (async) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@fallback=r5, r5, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='vlan0\x00', 0x10) (async) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x61}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) pwritev(r6, &(0x7f0000000680)=[{&(0x7f0000000500)="9ac25e8fe9769a37a432900f24803912d835ea06f57641832de164e451ee23ab8be12b423af86f022b59f0ce9aa158f07e15200631a66a8a53bf9ff795392a723d4268751a714383fc30cac6981b1848238c00ea61411df76afde6991b09023901c4cfd562891684fad3d825932bf184fec4859ff8b02cfc2405bc46bc89796294cd5b5ef58b218e395ddc33c96dd46df6437726eae36a54893f86e3", 0x9c}, {&(0x7f00000006c0)="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", 0x10f}], 0x2, 0x7, 0xfffffff) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 7.04558885s ago: executing program 8 (id=1435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) io_uring_enter(r3, 0x47f6, 0xeffd, 0x0, 0x0, 0x0) 5.739447693s ago: executing program 8 (id=1437): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f4f013d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f4f013d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x4a276012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x20000) get_mempolicy(&(0x7f0000000140), &(0x7f0000000400), 0x8, &(0x7f0000ff9000/0x4000)=nil, 0xf) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0300000007000000000000000400000000000000000003000000000008"], 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) (async) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) linkat(r7, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, 0x0, 0x1000) (async) linkat(r7, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, 0x0, 0x1000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r8, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x700, 0x6, 0x5, 0xff}, {0x3, 0x10, 0x5, 0x3}, {0x4, 0x85, 0x7, 0x6f19}, {0x6, 0xf7, 0xc7, 0xb7e}, {0x0, 0x7, 0x4, 0x50ca}, {0x2, 0x40, 0x0, 0x3}, {0x0, 0x3, 0x7, 0x2}, {0x100, 0x1, 0xb, 0x4}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0xfffffffffffffffe, r2, {0x7, 0x2b, 0xe, 0x40000, 0x7, 0x8, 0x7, 0x3, 0x0, 0x0, 0x10, 0xf448}}, 0x50) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0xfffffffffffffffe, r2, {0x7, 0x2b, 0xe, 0x40000, 0x7, 0x8, 0x7, 0x3, 0x0, 0x0, 0x10, 0xf448}}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 5.720295053s ago: executing program 9 (id=1438): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = open(&(0x7f0000000200)='./bus\x00', 0x8c880, 0x18f) fallocate(r0, 0x0, 0x0, 0x1000f4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x28) execve(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000880)}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x201, 0x4800003e, r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x800fffd, 0x7, 0x0) 5.686375062s ago: executing program 0 (id=1439): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000600000000000000000000030000000003000000000a040000000000000007000000000000000300000002000000040000000400000000000008030000000000ba2e5f00"], 0x0, 0x66}, 0x28) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="9d", 0x1}], 0x1) 5.027673201s ago: executing program 1 (id=1440): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6, 0x2}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) capget(&(0x7f0000001740)={0x20080522}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x18, r2, 0x200000}, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x40048c0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000001600"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="00006b00000000850000000c000000b7000000000000000000000400adcaeb7b000000000000000000a0"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0xc453, 0x100000000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x88}}, 0x40080) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000100)=""/251, 0xfb}], 0x1) 4.942041939s ago: executing program 0 (id=1441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x5d, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="d7079b8d", @ANYRESDEC=r3], 0x128}, 0x90) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) dup2(r1, r2) sendmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="91", 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x1}}], 0x2, 0x2040000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000200)={r8, 0x6}, &(0x7f0000000340)=0x8) r9 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3ff, 0x80400) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x40, 0x5, 0x3, "888340"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r9, &(0x7f0000003780)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000180)=""/127, 0x7f}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f0000000400)=""/235, 0xeb}, {&(0x7f00000002c0)=""/5, 0x5}], 0x5, &(0x7f0000000500)=""/21, 0x15}, 0x52d}, {{&(0x7f0000000600)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000680)=""/108, 0x6c}, {&(0x7f0000000700)=""/210, 0xd2}], 0x2, &(0x7f0000000800)=""/141, 0x8d}, 0x1}, {{&(0x7f00000008c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000940)=""/174, 0xae}, {&(0x7f0000000a00)=""/154, 0x9a}, {&(0x7f0000000ac0)=""/109, 0x6d}, {&(0x7f0000000b40)=""/255, 0xff}, {&(0x7f0000000c40)=""/11, 0xb}, {&(0x7f0000000c80)=""/212, 0xd4}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/119, 0x77}, {&(0x7f0000000e40)=""/81, 0x51}], 0x9, &(0x7f0000000f80)}, 0x4}, {{&(0x7f0000000fc0)=@xdp, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001040)=""/89, 0x59}], 0x1, &(0x7f0000001100)=""/4087, 0xff7}, 0x2}, {{&(0x7f0000002100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000003600)=[{&(0x7f0000002180)=""/201, 0xc9}, {&(0x7f0000002280)=""/107, 0x6b}, {&(0x7f0000002300)=""/89, 0x59}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/75, 0x4b}, {&(0x7f0000002500)=""/109, 0x6d}, {&(0x7f0000002580)=""/124, 0x7c}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x8, &(0x7f0000003680)=""/229, 0xe5}, 0xd3e}], 0x5, 0x100, &(0x7f00000038c0)={0x77359400}) 4.881105252s ago: executing program 9 (id=1442): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c00000000568887c0b0ba4487ffff"], 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a41, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, 0x0, 0x40081) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x20, 0x52, "acdaca03f6596a3f83eae60bb5bcd5784fd49b1202a00976d2f379ef338064b1a1872dba7e4c2a74e38bd0f7c32c31b878fc31ca2096a778fc81fbd5059db26c28b31df4728b879ae6d90cfd3346066aeaaa"}}) 4.827494612s ago: executing program 8 (id=1443): syz_emit_ethernet(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000"], 0x14}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socket$inet6(0xa, 0x0, 0x8001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r4], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r5}, &(0x7f0000000980), &(0x7f00000009c0)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r5, &(0x7f0000000680), &(0x7f0000000700)=""/168}, 0x20) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x11) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$llc_int(r8, 0x10c, 0x9, &(0x7f0000001b00), &(0x7f0000000000)=0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 4.73101725s ago: executing program 6 (id=1444): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="09000000000000000000000000000000712787e584d76a9a7b790b8add4fabfe62bf0c1821e97a21e56c470baca18adfbbb56672b5c587961dbd6a73a000000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYBLOB, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB="55b620a3ae731bd73e6db2ad8a8c435c8f8706f05eb549f53673699ab4fdba5805b605202f160fb938a7445b9e1c59f17f844ee93277a13fd3b786332a1955dd7c74be669f2a5889987ed5d6cbdd3b5c66e9242e21dcfab4dc665cf6741cb27fa8292a49dc7de5f47e668c02678cba7fb82939afc548be6a7b843b73b03b9cac26c5d9efb2e31842846ea46c01189f147b8b1759bbacb4f86f7969f3b027028e706b06c16ec3c4ffd67d56ffbf4baaa1180aa977a4ff468f5a37ef2216288d633263a53fb5de3d4156b829f0e2675f4bab17d5ce765b51a7cd34e98048b79570d11cad2bb4f8787cbb819e9da62429"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000340)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket(0xa, 0x3, 0x3a) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000008000080000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) sendmsg$RDMA_NLDEV_CMD_SET(r7, 0x0, 0x880) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000180)={0xfe00, 0x2, 0xa72f, 0x1}, 0x8) 3.398197531s ago: executing program 1 (id=1445): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 2.996986478s ago: executing program 9 (id=1446): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100182e000000000000280000002800000005000000000000000200000d00000000030000000200000002000000020000000000000000000005"], 0x0, 0x45, 0x0, 0x1}, 0x28) 2.903747203s ago: executing program 8 (id=1447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) 2.818880712s ago: executing program 1 (id=1448): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) 2.65851397s ago: executing program 6 (id=1449): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = io_uring_setup(0x5a3f, &(0x7f0000000080)={0x0, 0xc76a, 0x40, 0x1, 0x177}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x804, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x9, 0xf53, 0x80000000, 0x34524742, [0x1001, 0x7], [0x8009, 0x4], 0x1}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x1d, r1, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x101800) 2.599521311s ago: executing program 9 (id=1450): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x2000, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) r6 = syz_io_uring_setup(0x9e, 0x0, &(0x7f00000006c0), &(0x7f0000000280)) io_uring_enter(r6, 0x100847c0, 0x0, 0x10, 0x0, 0x0) 2.598972784s ago: executing program 8 (id=1451): r0 = semget$private(0x0, 0x3, 0x401) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0xbc, 0xc9}}}, 0x6) semop(r0, &(0x7f00000011c0)=[{0x3, 0x7fff, 0x1000}, {0x1, 0x8001, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001580)=[0x5]) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001c80)={{0x12, 0x1, 0x300, 0xc8, 0x5f, 0x62, 0x8, 0x423, 0xc, 0x2ebf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x0, 0x22, [{{0x9, 0x4, 0xff, 0x1, 0x0, 0x71, 0xc0, 0xd9, 0x8}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="17038d62d6be161673b44dbe0c690af8ef2e2f9e2e113c"]}, {0xda, &(0x7f0000000040)=@string={0xda, 0x3, "2498f94965e824f8b0737ad55cb1e1ee1a5203ab309abebb9147d6e10c9f19b91336e1beaed02d4c32adafc9a583d44151a368481ed7bbdbf48a17674d7114a938e2d3d5541a9f402f4d6ea7a59727961bb024f2af8df9298944091eabc95dda68cb4e5e42416843d0bec8fde47f33043939622a9a151652ef8610aa73198ac44d7f57cc118393ac543c0a5774400083091be62a02a45339c9600a9cfffcc812df07bad9faf9b30d8be825a8347dcea601a7a7f34ff7a0b5b8ef814edace7eb858979e3739c7ea5a662df918d5f4f74dde6ebf6536113816"}}]}) syz_usb_connect$cdc_ecm(0x4, 0x53, &(0x7f0000000940)=ANY=[@ANYBLOB="12015002020000102505a1a440000102030109024100010106d0000904000103020600050b2406000025c6462b7cd205240000000d240f01060000000700840107090582025a69ff02fe0905030240000e0608d93c99095dad433ce71f4e98ed48fc75b184ca0328987a464196cd477c8a431b758db85830367c8d779cab2ad1dc8c1f2d9a000000000000002719de72462075c5018cd0e4f03d6f8cc19da6da703ea382361891b96f20465fc43979ccaf5ada4ecea06f5f9f02d2b8d1fce8059b36932f44f0eef0648757"], &(0x7f0000000880)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x23, 0x9, 0x8, 0x10, 0x5}, 0x140, &(0x7f0000000240)={0x5, 0xf, 0x140, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x10, 0x5, 0x2, 0xf, 0x8001, [0x0, 0x0, 0x0, 0x0, 0x3f00]}, @ssp_cap={0x18, 0x10, 0xa, 0xa, 0x3, 0x65bbe4e, 0xf, 0x6, [0xc060, 0x30, 0xffff30]}, @generic={0x103, 0x10, 0x3, "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"}]}, 0x7, [{0x21, &(0x7f0000000900)=@string={0x21, 0x3, "820a24959925ea0aa608e3de186931437cc069074dc1e018099503d1dce53c"}}, {0x4f, &(0x7f00000003c0)=@string={0x4f, 0x3, "025bb90de978db9c702bab448df58ad59f41946faddf6a3a106da2626c3a4ab464864eefa833febe5a4b5fff5cb16fc3fd56652cb9c35836b56ea4060ac463b5fb6dbb893f56ef3b84763fad77"}}, {0xe7, &(0x7f0000000440)=@string={0xe7, 0x3, "6eba05dd2f13fd77b7ad167886dbf3eec79c3168517f9f687354a7499be3ac7d6d50b20f7c8335ee386596e5ff91f4507273f97609e0b74a4c85d4c2b7c201566b76348630e0aa9c6a72805fc4df8c4daa748fb2fec66aa162a89f063d54541caff906e76bf81fcb104a28d9403889a79648258e0ee1d4354f9ab24f008cfbd15a08c89f429f3236b45757c3a75d63c5d50639cf2dd3d8a9d61db172bbdb68f820177290b11ec93f77dff2224cea7cdd467c5d3b39bf68c937bf88884b35e20a37bfe67f00ce1be8ffd33834a174f1fc7e394bdfe87f6587c5d979f15a46c9aed329f0ccd3"}}, {0xc2, &(0x7f0000000540)=@string={0xc2, 0x3, "f97d734bd114625c463280f7064988ce6744288834426dd9feaecd0212d50be759de2b607a345337ebbb2a9fbbf3a8d2ba2fae740295a4b13d8888b3ecdc94848c5117293954bbfa1f0f45709f7b9ffc127ade42d19ba54a85eebeee5ae2ca79d0c4529786099a0c05edcfb52a33ed9ccddf8091b0a915c253f0f2c0ac5f8a9217f1c08ec238474820e0c93cba968a6535a9c46ae327bacf1fb619c2ebe23e1a6af8aefc7adcfd0b2e351d40b9387244521162c8aeb3858f18f952851eca0958"}}, {0x7f, &(0x7f0000000640)=@string={0x7f, 0x3, "8757d16271de43af6a38085dc72cb703c967d4ee9c50d858db6d0b98fcf80c7f0596a571145192190fa1d27f36f6348a0ffd1017f171fc3090fbe522707d341dd9f2d3117dd99888558c2140f446dc1a2f230e07189bbfe5b1ab20b11f152be3ed4f5652da4a3e2dbd1998dde3b3caa10ea3011656f53a0d5e56150d04"}}, {0xe9, &(0x7f00000006c0)=@string={0xe9, 0x3, "4de53c47e3ff4bdbf035fc14157f9f8174bd7745fadf4481aac1762fdab08c25e4a0752a4365998f42c455e12876f4c3a0e93400cc2ce2e1041554bb747f7745472aa470922920b432dcb3d46c0b2f88f9589c64ff2bf3fc204a353bb9bb569ab4452896d10d376812dd21baaf52e65231915f16c7dd23aaf3a317f1ef165928144116bfbc278172a85f27ace599cf815db8ce69fe0fc0b561e19dffb65e9a128d62fd7e250ea7751f5a9888f4deda0d5f45b3b484c8cd67f99526935af95f1536df44c44aa506adac58de4be62c3df06563c39ca3d7ff357e438cdfc2ba60ac804a41d803891c"}}, {0x77, &(0x7f00000007c0)=ANY=[@ANYBLOB="b003f7351bac36d652a865272c9151cd7f58a4c62048efe1ffd55bc2d237cf07774bacc2cd79761ab8ab3718ce48d46ea847e629e2fbc7a73e6e4b436713e9efeafe641c1d6624936e773c187180e820f0b65b5cca2cae5b14d4bcc0d5b49b33c3c8bd0a2429060000005c6ebea44084f4dd0ec1c72aa7089d0d047acbf00e9b29780c5561a020a30417f0b3d8b038d62fb941b8edf2571f601440facabf78d323a8a1982b1b7b0533d76c1cb1148a9a"]}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) semget$private(0x0, 0x3, 0x401) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0xbc, 0xc9}}}, 0x6) (async) semop(r0, &(0x7f00000011c0)=[{0x3, 0x7fff, 0x1000}, {0x1, 0x8001, 0x1000}], 0x2) (async) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001580)=[0x5]) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000001c80)={{0x12, 0x1, 0x300, 0xc8, 0x5f, 0x62, 0x8, 0x423, 0xc, 0x2ebf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x0, 0x22, [{{0x9, 0x4, 0xff, 0x1, 0x0, 0x71, 0xc0, 0xd9, 0x8}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="17038d62d6be161673b44dbe0c690af8ef2e2f9e2e113c"]}, {0xda, &(0x7f0000000040)=@string={0xda, 0x3, "2498f94965e824f8b0737ad55cb1e1ee1a5203ab309abebb9147d6e10c9f19b91336e1beaed02d4c32adafc9a583d44151a368481ed7bbdbf48a17674d7114a938e2d3d5541a9f402f4d6ea7a59727961bb024f2af8df9298944091eabc95dda68cb4e5e42416843d0bec8fde47f33043939622a9a151652ef8610aa73198ac44d7f57cc118393ac543c0a5774400083091be62a02a45339c9600a9cfffcc812df07bad9faf9b30d8be825a8347dcea601a7a7f34ff7a0b5b8ef814edace7eb858979e3739c7ea5a662df918d5f4f74dde6ebf6536113816"}}]}) (async) syz_usb_connect$cdc_ecm(0x4, 0x53, &(0x7f0000000940)=ANY=[@ANYBLOB="12015002020000102505a1a440000102030109024100010106d0000904000103020600050b2406000025c6462b7cd205240000000d240f01060000000700840107090582025a69ff02fe0905030240000e0608d93c99095dad433ce71f4e98ed48fc75b184ca0328987a464196cd477c8a431b758db85830367c8d779cab2ad1dc8c1f2d9a000000000000002719de72462075c5018cd0e4f03d6f8cc19da6da703ea382361891b96f20465fc43979ccaf5ada4ecea06f5f9f02d2b8d1fce8059b36932f44f0eef0648757"], &(0x7f0000000880)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x23, 0x9, 0x8, 0x10, 0x5}, 0x140, &(0x7f0000000240)={0x5, 0xf, 0x140, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x10, 0x5, 0x2, 0xf, 0x8001, [0x0, 0x0, 0x0, 0x0, 0x3f00]}, @ssp_cap={0x18, 0x10, 0xa, 0xa, 0x3, 0x65bbe4e, 0xf, 0x6, [0xc060, 0x30, 0xffff30]}, @generic={0x103, 0x10, 0x3, "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"}]}, 0x7, [{0x21, &(0x7f0000000900)=@string={0x21, 0x3, "820a24959925ea0aa608e3de186931437cc069074dc1e018099503d1dce53c"}}, {0x4f, &(0x7f00000003c0)=@string={0x4f, 0x3, "025bb90de978db9c702bab448df58ad59f41946faddf6a3a106da2626c3a4ab464864eefa833febe5a4b5fff5cb16fc3fd56652cb9c35836b56ea4060ac463b5fb6dbb893f56ef3b84763fad77"}}, {0xe7, &(0x7f0000000440)=@string={0xe7, 0x3, "6eba05dd2f13fd77b7ad167886dbf3eec79c3168517f9f687354a7499be3ac7d6d50b20f7c8335ee386596e5ff91f4507273f97609e0b74a4c85d4c2b7c201566b76348630e0aa9c6a72805fc4df8c4daa748fb2fec66aa162a89f063d54541caff906e76bf81fcb104a28d9403889a79648258e0ee1d4354f9ab24f008cfbd15a08c89f429f3236b45757c3a75d63c5d50639cf2dd3d8a9d61db172bbdb68f820177290b11ec93f77dff2224cea7cdd467c5d3b39bf68c937bf88884b35e20a37bfe67f00ce1be8ffd33834a174f1fc7e394bdfe87f6587c5d979f15a46c9aed329f0ccd3"}}, {0xc2, &(0x7f0000000540)=@string={0xc2, 0x3, "f97d734bd114625c463280f7064988ce6744288834426dd9feaecd0212d50be759de2b607a345337ebbb2a9fbbf3a8d2ba2fae740295a4b13d8888b3ecdc94848c5117293954bbfa1f0f45709f7b9ffc127ade42d19ba54a85eebeee5ae2ca79d0c4529786099a0c05edcfb52a33ed9ccddf8091b0a915c253f0f2c0ac5f8a9217f1c08ec238474820e0c93cba968a6535a9c46ae327bacf1fb619c2ebe23e1a6af8aefc7adcfd0b2e351d40b9387244521162c8aeb3858f18f952851eca0958"}}, {0x7f, &(0x7f0000000640)=@string={0x7f, 0x3, "8757d16271de43af6a38085dc72cb703c967d4ee9c50d858db6d0b98fcf80c7f0596a571145192190fa1d27f36f6348a0ffd1017f171fc3090fbe522707d341dd9f2d3117dd99888558c2140f446dc1a2f230e07189bbfe5b1ab20b11f152be3ed4f5652da4a3e2dbd1998dde3b3caa10ea3011656f53a0d5e56150d04"}}, {0xe9, &(0x7f00000006c0)=@string={0xe9, 0x3, "4de53c47e3ff4bdbf035fc14157f9f8174bd7745fadf4481aac1762fdab08c25e4a0752a4365998f42c455e12876f4c3a0e93400cc2ce2e1041554bb747f7745472aa470922920b432dcb3d46c0b2f88f9589c64ff2bf3fc204a353bb9bb569ab4452896d10d376812dd21baaf52e65231915f16c7dd23aaf3a317f1ef165928144116bfbc278172a85f27ace599cf815db8ce69fe0fc0b561e19dffb65e9a128d62fd7e250ea7751f5a9888f4deda0d5f45b3b484c8cd67f99526935af95f1536df44c44aa506adac58de4be62c3df06563c39ca3d7ff357e438cdfc2ba60ac804a41d803891c"}}, {0x77, &(0x7f00000007c0)=ANY=[@ANYBLOB="b003f7351bac36d652a865272c9151cd7f58a4c62048efe1ffd55bc2d237cf07774bacc2cd79761ab8ab3718ce48d46ea847e629e2fbc7a73e6e4b436713e9efeafe641c1d6624936e773c187180e820f0b65b5cca2cae5b14d4bcc0d5b49b33c3c8bd0a2429060000005c6ebea44084f4dd0ec1c72aa7089d0d047acbf00e9b29780c5561a020a30417f0b3d8b038d62fb941b8edf2571f601440facabf78d323a8a1982b1b7b0533d76c1cb1148a9a"]}]}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) 2.43206951s ago: executing program 6 (id=1452): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = open(&(0x7f0000000200)='./bus\x00', 0x8c880, 0x18f) fallocate(r0, 0x0, 0x0, 0x1000f4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(r1, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x28) execve(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000880)}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x201, 0x4800003e, r5, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x800fffd, 0x7, 0x0) 2.342245323s ago: executing program 1 (id=1453): prlimit64(0x0, 0x5, &(0x7f00000007c0)={0xffffffffffffffff, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x228941, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r8, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) pidfd_getfd(r7, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x30) 1.531455168s ago: executing program 9 (id=1454): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1000000, 0x8010002}) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x5c, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0xe4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) 148.488072ms ago: executing program 9 (id=1455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000030c0)=""/4103, 0x1007}], 0x1, &(0x7f0000000740)=""/185, 0xb9}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = creat(&(0x7f0000001e00)='./file0\x00', 0x41) lsetxattr$smack_xattr_label(&(0x7f0000002000)='./file0\x00', &(0x7f0000002040)='security.SMACK64EXEC\x00', 0x0, 0x0, 0x1) socket$alg(0x26, 0x5, 0x0) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f0000002080)={{0x2, 0x200, 0x3, 0xfffffff7, 0x9, 0xfffffffa}, 0x125, [0x0, 0x2, 0x5, 0x4dce, 0x8, 0x7, 0x7, 0xbeb, 0x8, 0x6fd, 0xd, 0x9, 0x6519, 0x66c, 0x200, 0x101, 0x4, 0x3, 0x5, 0x9f, 0x7ff, 0x92b3, 0x2, 0x8, 0xd1, 0x8, 0x4, 0x7e5e, 0x1ff, 0xffffffff, 0x7, 0x2, 0x101, 0x7, 0x496d6f98, 0x9, 0xff, 0x7, 0x8, 0x10000, 0x0, 0x8e3, 0xf, 0x0, 0x1, 0x7, 0x80000001, 0x32, 0x180, 0x0, 0xffffffff, 0x7, 0xff, 0x5, 0x4089, 0xf, 0x8001, 0x800, 0x3a, 0x0, 0x10001, 0x893, 0xfff, 0x7fff, 0x2, 0x101, 0x1, 0xffffffff, 0x5c45b4e9, 0x1, 0x10001, 0x6b8, 0xca, 0x80000001, 0xb7, 0xf, 0x6, 0x401, 0x400, 0xbf00000, 0x1, 0x2fe, 0x7, 0x1, 0x10000, 0x0, 0x2, 0xc5, 0x4, 0x0, 0x1, 0x2f62, 0x8, 0xf, 0xff, 0x10001, 0xa5c5, 0xffffffff, 0x4, 0x1, 0xf, 0x401, 0x9, 0x3, 0xd9d, 0x20, 0x5, 0x54a, 0x8, 0x8, 0x7, 0x6, 0x8001, 0x3, 0xfffffffa, 0x2, 0x6, 0x0, 0xca, 0xe26, 0xa, 0x80000001, 0x3, 0x6, 0x1, 0x0, 0x5, 0xcd, 0x80, 0x5, 0x8, 0x7fff, 0x0, 0xfffffff8, 0xef848003, 0x8b, 0x0, 0x1, 0xa, 0xf, 0x4, 0x1, 0x6, 0x100, 0x3, 0x2, 0x8000, 0x5, 0x2, 0x1, 0xfffffffd, 0x7f, 0x1, 0xe0d9, 0x10000, 0x0, 0x2, 0x3, 0x0, 0x1, 0xa, 0xfffffff8, 0x3, 0x70a9, 0x0, 0xff, 0xbe, 0x7, 0x6, 0x8000, 0x8, 0x3, 0x8, 0x1, 0x6, 0xee03, 0x3, 0xbfd6, 0xfffffffb, 0x1, 0xf, 0x2, 0x8001, 0x3, 0x2, 0x9, 0x3, 0x7, 0x5, 0xf, 0x3, 0x195e, 0x9, 0x21a7016d, 0x0, 0xb2c, 0x7f, 0xfffffff7, 0x3, 0x0, 0xfffff000, 0x6, 0xdf, 0x7f, 0xebd, 0x0, 0x7, 0x1, 0x5, 0xf5a, 0x8, 0xe5ae, 0x4, 0x401, 0x5, 0x2, 0xd0, 0x7f, 0x44, 0x4, 0x18f6, 0x3, 0x7, 0x8, 0x7, 0x3, 0x5, 0xa46, 0xfff, 0x3, 0xfffffc00, 0xa0, 0x5, 0x80000000, 0x101, 0x0, 0x3, 0x401, 0x8, 0xfffffffe, 0xffff, 0xffffffff, 0xffff8001, 0x0, 0x9, 0x6, 0x5, 0x3, 0x8, 0x8, 0x1, 0x7e, 0x7, 0x0, 0x8, 0x0, 0x40, 0x4, 0x0, 0x6333, 0xb, 0x0, 0x3, 0x3, 0x80000000, 0x5, 0xb, 0x9, 0x1000050, 0xd, 0x5, 0x7, 0x0, 0x9a33, 0x5, 0x9, 0x62d, 0x57ae, 0x5, 0x0, 0x1, 0x200, 0x3ff, 0x800, 0x2, 0xfffffc01, 0x8c2, 0x400, 0x0, 0x80, 0x7fffffff, 0x0, 0x3, 0x2, 0x1ff, 0x10000, 0x7, 0x80, 0x7fff, 0x5566a0e6, 0x3, 0x1, 0x8, 0xf7a3, 0x1, 0x2, 0x8, 0x1, 0x0, 0x6, 0x7fff, 0x26c1, 0xb, 0x800, 0xff, 0x10, 0x7, 0x9, 0x6, 0xffffffff, 0x4, 0x3, 0x8, 0x9, 0x1000, 0x5, 0x1, 0x80000000, 0x8, 0x9, 0x8, 0x2, 0x3, 0x1, 0x1, 0x1, 0x8000, 0xffff, 0x9, 0x35, 0x2, 0x0, 0x3, 0x6, 0xe3b, 0x3, 0xbf77, 0x7, 0xd, 0x5, 0xd, 0x9, 0x400, 0x7, 0x400, 0x5, 0x3, 0x2, 0xd, 0x800, 0x5, 0x4, 0x9, 0x3, 0x9, 0x5, 0x9, 0x4ba7, 0x7, 0x77d, 0x9, 0x2ea, 0x8, 0x6, 0x7f, 0x0, 0x8, 0x8, 0x4, 0x9, 0x7, 0x3, 0x6, 0x0, 0x60, 0x1, 0x3, 0x1, 0x76, 0x2, 0x80000000, 0xcc8, 0xf324, 0x5, 0x10, 0x5, 0x4, 0xffffff48, 0x2, 0x2000000, 0x7, 0x6, 0x7f, 0xc, 0x5, 0x9, 0x10, 0x7, 0x9, 0x800, 0x10, 0xe6, 0x5, 0x6, 0xff, 0x3ff, 0x2, 0x2, 0x4, 0x49b, 0x4927, 0x3a3, 0x6, 0x4, 0x5, 0x4, 0x81, 0x2, 0xfffffffb, 0x80000001, 0xfffffffe, 0x5, 0x4, 0x0, 0x7, 0xe, 0x1, 0xff, 0x5, 0x4, 0x7fffffff, 0x3, 0x8001, 0x0, 0x800, 0x21, 0x0, 0x4beb8a0a, 0x5, 0x7, 0x8, 0x4, 0x4, 0x7, 0x101, 0x2, 0x2d9, 0x3, 0x8, 0x6, 0x5, 0x1, 0x7fff, 0x50, 0x8157, 0x7, 0x4aa90, 0xffffaf46, 0x3, 0x0, 0x100, 0x8, 0x7, 0x10000, 0xd, 0x4002, 0xa, 0x7f, 0x9, 0x10001, 0x6, 0x868b, 0x0, 0x0, 0x9, 0x88, 0x5, 0x1000, 0x7ff, 0x0, 0x3, 0x8, 0x3, 0x0, 0x7, 0x1, 0x100, 0x3, 0x2172ddab, 0x8, 0x0, 0x68f4d9aa, 0x7, 0x7, 0x9, 0x7, 0x7, 0x3, 0x400, 0x2, 0x2, 0x7, 0x5, 0x5, 0x3d396e99, 0x1ff, 0x7, 0x100, 0x6, 0x2, 0x0, 0xcf6, 0x1, 0x401, 0x6, 0x8, 0x401, 0x7, 0xf, 0x2, 0x6, 0x10000, 0x8, 0x7fffffff, 0x7, 0x5, 0x3, 0x4, 0xbc2aedc, 0x3, 0x4ee1162b, 0x2, 0x8, 0x10, 0x7d, 0xc1, 0x2cb, 0x9, 0x1, 0x0, 0x4, 0x8, 0xffffffff, 0x10001, 0x25567807, 0x7f6, 0xff50, 0x71d5, 0xfffffff4, 0x9, 0x9, 0xfffffff8, 0x1, 0x2, 0x4, 0x6, 0x1, 0x5, 0x81, 0x3, 0x7, 0x7, 0xffff, 0x3, 0xfb, 0x3, 0xffffffff, 0x4, 0x4, 0x200, 0x9, 0x9, 0x10, 0x9, 0x5, 0x10001, 0x4, 0x0, 0x5, 0x10000, 0xb, 0xfffffffa, 0x2, 0x9, 0x6, 0x8, 0x6, 0x5, 0x6, 0x1, 0x2, 0x0, 0x66f, 0x0, 0x6, 0x4, 0x80000000, 0x9, 0x2, 0x5, 0x7, 0x8, 0x5, 0x4, 0x1, 0x8, 0x81, 0x10000, 0x7, 0x2, 0xfffff6d1, 0x80000000, 0x10001, 0x45, 0xa0, 0x80000001, 0x9, 0x9, 0x9361, 0x8, 0x200, 0x5, 0x5, 0x13b2, 0x3, 0x9, 0x3c7e, 0x6, 0x6, 0x4, 0xab7, 0xf, 0x400, 0xf53c, 0x8, 0x5, 0x7fffffff, 0x2, 0x8, 0x1, 0x5, 0x8, 0x6, 0x7, 0x81d, 0x9, 0xe95, 0xffff6f6d, 0x5, 0x7, 0x9, 0x8001, 0x1, 0x183, 0x408, 0x5, 0xf, 0x3, 0x60ed03bf, 0xe, 0x8, 0x6, 0x7f, 0x5, 0xb9, 0x1, 0x4, 0x3, 0x0, 0x1f, 0x3, 0x1, 0xe85, 0xffff7ce2, 0x0, 0x7, 0x8, 0xc7, 0x3, 0xffffffff, 0x2, 0x2, 0x4, 0x220, 0x7ff, 0xba07, 0xbd2, 0x8, 0x2, 0x7, 0x1, 0x6, 0x0, 0xfffffffb, 0x2, 0x80000000, 0x7fffffff, 0x2, 0xff, 0x9, 0x3, 0xd, 0x5, 0xfffffffb, 0xf15, 0x8, 0x7, 0x8, 0x0, 0x1c, 0xfff, 0x1ff, 0x9, 0x3, 0x1, 0x7905000, 0xe, 0xd9, 0xffff, 0x81, 0x9, 0xf184, 0x286, 0xaf88, 0x7, 0x6, 0x8, 0xc9d8, 0x699, 0x8, 0x3, 0x1, 0x4, 0x3, 0x2, 0x3, 0x5, 0xc80, 0x0, 0x3, 0x9, 0x7, 0xaef, 0x7, 0x2, 0x2, 0xff, 0x7, 0x9, 0x8000, 0x100, 0x9, 0x0, 0x37, 0xc2, 0x5, 0x3, 0x0, 0x6, 0x7, 0x7fff, 0x8, 0x5, 0x0, 0x6f8, 0x9, 0x1, 0x0, 0x5, 0x0, 0x1, 0x3946, 0x400, 0xf, 0x0, 0x1, 0x480000, 0x0, 0xffffffff, 0x6, 0x9, 0x4, 0x70, 0x0, 0x1, 0x2, 0x7, 0x2, 0x6, 0xfff, 0xed, 0x5, 0x7, 0xb, 0xd, 0x1, 0x7, 0x200, 0x9, 0x1, 0xb, 0x9, 0x40, 0x8001, 0xfed, 0x1, 0x3, 0x1, 0x4, 0x1, 0x8001, 0x1, 0xde2, 0x4, 0x697, 0x5, 0x8bc, 0x6, 0x100, 0x0, 0x0, 0x9, 0xfffffff7, 0x1, 0xbd800, 0x3, 0x81, 0xf, 0x0, 0x9, 0x3, 0x6, 0xb41, 0x2, 0x2, 0x5178, 0x0, 0x4, 0x8, 0x1, 0x5, 0x9, 0xc, 0x1, 0xa, 0x1518, 0xa570, 0x9, 0x8, 0x40, 0x21, 0x1, 0x4, 0x1, 0x8000, 0x203, 0xca3, 0x1, 0x80000000, 0x3, 0xfffffffe, 0xa2, 0x8, 0x1, 0x2, 0x400006, 0x4, 0x8, 0x1, 0x800, 0x35, 0x2, 0x0, 0x7, 0x4, 0x4, 0x8, 0x42, 0x1, 0x6, 0x6, 0x802, 0x5, 0xd, 0x9, 0x93, 0x5, 0x9, 0x4, 0x4, 0x0, 0x1, 0x401, 0x0, 0x9, 0x6f4756e8, 0x2, 0x9, 0x3, 0x9, 0x2, 0xfffffffe, 0x10000, 0x7ff, 0x22ed, 0x9, 0x7f, 0x7, 0x7, 0x1, 0x80000001, 0x6311b718, 0x7, 0x5, 0xfffffffd, 0x7, 0x10, 0x5dd2bde8, 0x101, 0x3, 0x7, 0x1, 0x6, 0x5, 0x80000001, 0x4, 0x2, 0x3, 0xdd, 0x2, 0x2, 0x892, 0x2, 0x2, 0x7, 0x1000, 0x270, 0x9, 0xda7, 0x2, 0x101, 0x1, 0x8, 0x1, 0x9000000, 0x3, 0xffff, 0x2d47, 0xe5de, 0xdaa5, 0xff, 0x2a0, 0x10, 0x8c5, 0xd, 0x0, 0x7ff, 0x9, 0xe64, 0x9, 0x8001, 0x8, 0x1, 0x1, 0x6, 0x8, 0xb0a, 0x80000001, 0x0, 0x3, 0x7, 0x9, 0x0, 0x5, 0x101, 0x1, 0x400, 0x7, 0x0, 0x474, 0x0, 0xfffffb53, 0x9, 0x3, 0x0, 0x3, 0x5, 0x0, 0x10001, 0x9, 0x6, 0x6, 0x80000001, 0x0, 0x86, 0xfff, 0xee, 0x1c9, 0x7, 0x7fff, 0xf, 0x400, 0x3, 0x6e, 0x3, 0x2, 0x9, 0x4, 0x8, 0x7d, 0xfda0, 0x57a95298, 0x10001, 0x3]}) munmap(&(0x7f0000256000/0x3000)=nil, 0x3000) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000004c0)={&(0x7f0000000000)=""/65, 0x328000, 0x0, 0x9}, 0x20) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = mq_open(&(0x7f0000000180)='+\x00', 0x40, 0x1a, &(0x7f00000001c0)={0x2a12, 0x7, 0xf, 0x9}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r7, &(0x7f00000002c0)=""/81, 0x51, 0x5, &(0x7f0000000380)={r8, r9+60000000}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000040)={0xd000, 0x10000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000540)={0x2}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x210000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYRES32=r6], 0x78) ioctl$F2FS_IOC_SEC_TRIM_FILE(r10, 0x4018f514, &(0x7f0000000500)={0x9, 0xb01c, 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000c2000000c200000003000000100000000000001202000000030000000180000f0200000003000000483b00000f000000ea9f0e0000000800001308000000060000008000000001feffff0e00000009000000400000000c00000008000000fdffffff09000000f8ffffff070000000400000004000000070000001000000000000080020000000b00000006000000000000000500000002000000050000000000000000000003000000000500000003000000f7ffffff010000000000000b04000000090000000000000c030000000000000000"], &(0x7f0000000240)=""/77, 0xdf, 0x4d, 0x0, 0x4, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1a00000003000000ffffffff0c00000001000000", @ANYRES32=r11, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="000000000000000a000000000000fe000000bc37cc7b03b13aa000b7fc4307e48145be6fcc589a8d134d2884376487bfe501101668fb34a02dde732fcc3028f3a05b85de05671521c46b9ac0ea4fa40000000000000000000000000022786c"], 0x50) 125.709091ms ago: executing program 6 (id=1456): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c00000000568887c0b0ba4487ffff"], 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a41, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048091}, 0x40081) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x20, 0x52, "acdaca03f6596a3f83eae60bb5bcd5784fd49b1202a00976d2f379ef338064b1a1872dba7e4c2a74e38bd0f7c32c31b878fc31ca2096a778fc81fbd5059db26c28b31df4728b879ae6d90cfd3346066aeaaa"}}) 0s ago: executing program 0 (id=1457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x150, 0x11, 0x148, 0x150, 0x10, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0xffffff00, 0xffffff00, 'nicvf0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x84, 0x3, 0x18}, 0x10, 0xe8, 0x150, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @rand_addr=0x10, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0xa, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x348) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x0, 0x8e, 0x1f, 0x5, 0xff, {0x6696, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f0000000ac0)="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", 0x0}, 0xfffffffffffffe2a) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='coredump_filter\x00') kernel console output (not intermixed with test programs): 0x10 [ 532.512882][T10245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.512906][T10245] ? __pfx__printk+0x10/0x10 [ 532.512940][T10245] ? __pfx___might_resched+0x10/0x10 [ 532.512964][T10245] ? fs_reclaim_acquire+0x7d/0x100 [ 532.512992][T10245] should_fail_ex+0x414/0x560 [ 532.513030][T10245] should_failslab+0xa8/0x100 [ 532.513053][T10245] __kmalloc_noprof+0xcb/0x4f0 [ 532.513084][T10245] ? kfree+0x4d/0x440 [ 532.513110][T10245] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 532.513139][T10245] tomoyo_realpath_from_path+0xe3/0x5d0 [ 532.513165][T10245] ? tomoyo_domain+0xda/0x130 [ 532.513195][T10245] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 532.513228][T10245] tomoyo_path_number_perm+0x1e8/0x5a0 [ 532.513262][T10245] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.513319][T10245] ? __lock_acquire+0xab9/0xd20 [ 532.513362][T10245] ? __fget_files+0x2a/0x420 [ 532.513387][T10245] ? __fget_files+0x2a/0x420 [ 532.513406][T10245] ? __fget_files+0x3a0/0x420 [ 532.513427][T10245] ? __fget_files+0x2a/0x420 [ 532.513452][T10245] security_file_ioctl+0xcb/0x2d0 [ 532.513488][T10245] __se_sys_ioctl+0x47/0x170 [ 532.513521][T10245] do_syscall_64+0xfa/0x3b0 [ 532.513542][T10245] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.513575][T10245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.513603][T10245] ? clear_bhb_loop+0x60/0xb0 [ 532.513629][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.513650][T10245] RIP: 0033:0x7feab1f8e929 [ 532.513670][T10245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.513689][T10245] RSP: 002b:00007feab2e20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.513713][T10245] RAX: ffffffffffffffda RBX: 00007feab21b5fa0 RCX: 00007feab1f8e929 [ 532.513730][T10245] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 532.513744][T10245] RBP: 00007feab2e20090 R08: 0000000000000000 R09: 0000000000000000 [ 532.513758][T10245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.513771][T10245] R13: 0000000000000000 R14: 00007feab21b5fa0 R15: 00007ffcaf54b678 [ 532.513805][T10245] [ 532.515710][T10245] ERROR: Out of memory at tomoyo_realpath_from_path. [ 534.625810][T10274] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 534.816937][T10282] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 534.859656][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 535.019355][ T9] usb 7-1: device descriptor read/64, error -71 [ 535.289687][ T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 535.333573][T10288] FAULT_INJECTION: forcing a failure. [ 535.333573][T10288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.389679][T10288] CPU: 1 UID: 0 PID: 10288 Comm: syz.0.1002 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 535.389712][T10288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.389726][T10288] Call Trace: [ 535.389735][T10288] [ 535.389745][T10288] dump_stack_lvl+0x189/0x250 [ 535.389776][T10288] ? __pfx____ratelimit+0x10/0x10 [ 535.389810][T10288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.389835][T10288] ? __pfx__printk+0x10/0x10 [ 535.389864][T10288] ? __might_fault+0xb0/0x130 [ 535.389909][T10288] should_fail_ex+0x414/0x560 [ 535.389948][T10288] _copy_from_user+0x2d/0xb0 [ 535.389975][T10288] ___sys_sendmsg+0x158/0x2a0 [ 535.390009][T10288] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.390081][T10288] ? __fget_files+0x2a/0x420 [ 535.390110][T10288] ? __fget_files+0x3a0/0x420 [ 535.390145][T10288] __sys_sendmmsg+0x227/0x430 [ 535.390181][T10288] ? __pfx___sys_sendmmsg+0x10/0x10 [ 535.390208][T10288] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 535.390261][T10288] ? ksys_write+0x22a/0x250 [ 535.390297][T10288] ? __pfx_ksys_write+0x10/0x10 [ 535.390325][T10288] ? rcu_is_watching+0x15/0xb0 [ 535.390358][T10288] __x64_sys_sendmmsg+0xa0/0xc0 [ 535.390391][T10288] do_syscall_64+0xfa/0x3b0 [ 535.390411][T10288] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.390445][T10288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.390468][T10288] ? clear_bhb_loop+0x60/0xb0 [ 535.390495][T10288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.390516][T10288] RIP: 0033:0x7feab1f8e929 [ 535.390536][T10288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.390555][T10288] RSP: 002b:00007feab2dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 535.390578][T10288] RAX: ffffffffffffffda RBX: 00007feab21b6080 RCX: 00007feab1f8e929 [ 535.390594][T10288] RDX: 0000000000000001 RSI: 0000200000004c00 RDI: 0000000000000004 [ 535.390609][T10288] RBP: 00007feab2dff090 R08: 0000000000000000 R09: 0000000000000000 [ 535.390623][T10288] R10: 0000000000004010 R11: 0000000000000246 R12: 0000000000000001 [ 535.390636][T10288] R13: 0000000000000000 R14: 00007feab21b6080 R15: 00007ffcaf54b678 [ 535.390669][T10288] [ 535.450201][ T9] usb 7-1: device descriptor read/64, error -71 [ 535.830114][ T9] usb usb7-port1: attempt power cycle [ 536.080064][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 536.230075][ T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 536.283609][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 536.297268][ T9] usb 7-1: device descriptor read/8, error -71 [ 537.070089][ T10] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 537.095961][ T10] usb 9-1: config 0 has no interface number 0 [ 537.118832][ T10] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 537.147128][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.157266][ T10] usb 9-1: Product: syz [ 537.166511][ T10] usb 9-1: Manufacturer: syz [ 537.176408][ T10] usb 9-1: SerialNumber: syz [ 537.184501][ T10] usb 9-1: config 0 descriptor?? [ 537.240708][ T10] radio-si470x 9-1:0.35: could not find interrupt in endpoint [ 537.282956][ T10] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 537.314307][ T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 537.384301][ T9] usb 7-1: device descriptor read/8, error -71 [ 537.429583][ T10] radio-raremono 9-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 537.591102][T10311] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 537.598099][T10311] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 537.637088][T10311] vhci_hcd vhci_hcd.0: Device attached [ 537.726617][ T10] radio-raremono 9-1:0.35: raremono_cmd_main failed (-71) [ 537.734743][ T9] usb usb7-port1: unable to enumerate USB device [ 537.741373][ T5951] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 537.755557][ T10] radio-raremono 9-1:0.35: V4L2 device registered as radio48 [ 537.772354][ T10] usb 9-1: USB disconnect, device number 9 [ 537.778990][ T10] radio-raremono 9-1:0.35: Thanko's Raremono disconnected [ 537.869433][ T5898] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 537.998839][T10312] vhci_hcd: connection reset by peer [ 538.169436][ T13] vhci_hcd: stop threads [ 538.313326][ T13] vhci_hcd: release socket [ 538.392119][ T13] vhci_hcd: disconnect device [ 538.555269][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 538.587711][ T5951] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 538.631701][ T5951] usb 1-1: config 1 has no interface number 1 [ 538.637958][ T5951] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 538.670123][ T5951] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 538.696936][ T5951] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 538.711458][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.722571][ T5951] usb 1-1: Product: syz [ 538.739311][ T5951] usb 1-1: Manufacturer: syz [ 538.750151][ T5951] usb 1-1: SerialNumber: syz [ 538.944282][ T977] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 539.340302][ T977] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.353828][ T977] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 539.457127][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 539.503708][ T977] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 539.575871][ T977] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.587893][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.596495][ T977] usb 7-1: Product: syz [ 539.603308][ T977] usb 7-1: Manufacturer: syz [ 539.609886][ T977] usb 7-1: SerialNumber: syz [ 539.664765][ T5951] usb 1-1: found format II with max.bitrate = 2, frame size=30167 [ 539.705723][ T5951] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 539.784526][ T5951] usb 1-1: USB disconnect, device number 17 [ 539.887475][T10339] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1019'. [ 540.071621][T10325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.330349][T10325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.441983][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1020'. [ 540.453749][T10348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.454080][T10325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.668793][T10348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.187142][T10354] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1022'. [ 541.386127][ T977] cdc_ncm 7-1:1.0: bind() failure [ 541.432107][ T977] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 541.439093][ T977] cdc_ncm 7-1:1.1: bind() failure [ 541.529666][ T977] usb 7-1: USB disconnect, device number 39 [ 542.242937][ T30] audit: type=1326 audit(2000000099.620:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.6.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a9f8e929 code=0x7fc00000 [ 542.949522][ T5951] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 543.384508][ T5951] usb 7-1: Using ep0 maxpacket: 16 [ 543.485135][ T5951] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.535232][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 543.539536][ T5898] vhci_hcd: vhci_device speed not set [ 543.570872][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 543.586236][ T5951] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 543.624798][ T5951] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.663615][ T5951] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 543.677414][ T5951] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 543.689095][ T5951] usb 7-1: Manufacturer: syz [ 543.754043][T10380] delete_channel: no stack [ 543.754537][ T5951] usb 7-1: config 0 descriptor?? [ 544.176106][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1033'. [ 548.729305][ T5898] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 549.137616][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 549.162120][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.221418][ T5951] rc_core: IR keymap rc-hauppauge not found [ 549.227492][ T5951] Registered IR keymap rc-empty [ 549.239409][ T5951] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 549.331368][ T5951] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 549.589380][ T5951] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 549.696846][ T5951] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input18 [ 549.805902][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 549.846217][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 549.966075][ T5898] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 549.969516][ T5951] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 550.033438][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.079389][ T5951] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 550.099814][ T5951] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 550.121606][ T5898] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 550.129468][ T5951] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 550.139957][ T5898] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 550.148329][T10430] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 550.156221][ T5898] usb 1-1: Manufacturer: syz [ 550.176745][ T5898] usb 1-1: config 0 descriptor?? [ 550.180608][ T5951] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 550.188224][T10430] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 550.219401][ T5951] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 550.275976][ T5951] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 550.301642][T10434] netlink: 120 bytes leftover after parsing attributes in process `syz.8.1048'. [ 550.329457][ T5951] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 550.351998][ T5951] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 550.399875][ T5951] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 550.598656][ T5951] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 550.610268][ T5951] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 551.519172][ T5951] usb 7-1: USB disconnect, device number 40 [ 552.379932][T10445] netlink: 'syz.8.1050': attribute type 4 has an invalid length. [ 555.855256][T10447] FAULT_INJECTION: forcing a failure. [ 555.855256][T10447] name failslab, interval 1, probability 0, space 0, times 0 [ 555.900082][ T5898] rc_core: IR keymap rc-hauppauge not found [ 555.919528][ T5898] Registered IR keymap rc-empty [ 555.924603][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 555.962232][T10447] CPU: 1 UID: 0 PID: 10447 Comm: syz.6.1051 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 555.962264][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 555.962277][T10447] Call Trace: [ 555.962286][T10447] [ 555.962295][T10447] dump_stack_lvl+0x189/0x250 [ 555.962325][T10447] ? __pfx____ratelimit+0x10/0x10 [ 555.962360][T10447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.962384][T10447] ? __pfx__printk+0x10/0x10 [ 555.962415][T10447] ? __pfx___might_resched+0x10/0x10 [ 555.962444][T10447] ? fs_reclaim_acquire+0x7d/0x100 [ 555.962472][T10447] should_fail_ex+0x414/0x560 [ 555.962510][T10447] should_failslab+0xa8/0x100 [ 555.962532][T10447] __kmalloc_noprof+0xcb/0x4f0 [ 555.962563][T10447] ? fib6_info_alloc+0x30/0xf0 [ 555.962592][T10447] fib6_info_alloc+0x30/0xf0 [ 555.962620][T10447] ip6_route_info_create+0x142/0x860 [ 555.962656][T10447] ip6_route_add+0x49/0x1b0 [ 555.962687][T10447] inet6_addr_modify+0xb3d/0x1480 [ 555.962735][T10447] ? rcu_is_watching+0x15/0xb0 [ 555.962767][T10447] ? __pfx_inet6_addr_modify+0x10/0x10 [ 555.962803][T10447] ? __lock_acquire+0xab9/0xd20 [ 555.962862][T10447] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 555.962882][T10447] ? ipv6_mc_up+0x3da/0x580 [ 555.962918][T10447] inet6_rtm_newaddr+0x900/0xd20 [ 555.962961][T10447] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 555.963024][T10447] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 555.963055][T10447] rtnetlink_rcv_msg+0x7cc/0xb70 [ 555.963085][T10447] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 555.963107][T10447] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 555.963127][T10447] ? ref_tracker_free+0x63a/0x7d0 [ 555.963157][T10447] ? __copy_skb_header+0xa7/0x550 [ 555.963188][T10447] ? __pfx_ref_tracker_free+0x10/0x10 [ 555.963233][T10447] netlink_rcv_skb+0x205/0x470 [ 555.963260][T10447] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 555.963286][T10447] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 555.963326][T10447] ? netlink_deliver_tap+0x2e/0x1b0 [ 555.963351][T10447] ? netlink_deliver_tap+0x2e/0x1b0 [ 555.963384][T10447] netlink_unicast+0x758/0x8d0 [ 555.963420][T10447] netlink_sendmsg+0x805/0xb30 [ 555.963457][T10447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.963493][T10447] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 555.963525][T10447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.963554][T10447] __sock_sendmsg+0x219/0x270 [ 555.963578][T10447] ____sys_sendmsg+0x505/0x830 [ 555.963612][T10447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.963652][T10447] ? import_iovec+0x74/0xa0 [ 555.963682][T10447] ___sys_sendmsg+0x21f/0x2a0 [ 555.963713][T10447] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.963789][T10447] ? __fget_files+0x2a/0x420 [ 555.963811][T10447] ? __fget_files+0x3a0/0x420 [ 555.963845][T10447] __x64_sys_sendmsg+0x19b/0x260 [ 555.963878][T10447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 555.963923][T10447] ? rcu_is_watching+0x15/0xb0 [ 555.963948][T10447] ? trace_sys_enter+0x25/0x120 [ 555.963975][T10447] do_syscall_64+0xfa/0x3b0 [ 555.963996][T10447] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.964030][T10447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.964053][T10447] ? clear_bhb_loop+0x60/0xb0 [ 555.964081][T10447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.964102][T10447] RIP: 0033:0x7f40a9f8e929 [ 555.964122][T10447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.964141][T10447] RSP: 002b:00007f40aaebe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.964165][T10447] RAX: ffffffffffffffda RBX: 00007f40aa1b5fa0 RCX: 00007f40a9f8e929 [ 555.964181][T10447] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009 [ 555.964195][T10447] RBP: 00007f40aaebe090 R08: 0000000000000000 R09: 0000000000000000 [ 555.964208][T10447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.964221][T10447] R13: 0000000000000000 R14: 00007f40aa1b5fa0 R15: 00007ffc37cb8bb8 [ 555.964256][T10447] [ 556.439076][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 556.498113][T10457] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1053'. [ 556.553051][ T5898] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 556.567192][ T5898] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input19 [ 556.615777][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 556.655377][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 556.684607][T10460] Illegal XDP return value 4294967294 on prog (id 237) dev N/A, expect packet loss! [ 556.696514][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 556.719465][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 556.739890][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 556.759723][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 556.779379][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 556.799356][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 556.819781][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 556.859667][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 556.877044][ T5951] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 556.937295][ T5898] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 556.976266][ T5898] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 557.009918][ T5898] usb 1-1: USB disconnect, device number 18 [ 557.084788][ T5951] usb 9-1: unable to get BOS descriptor or descriptor too short [ 557.126128][ T5951] usb 9-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 557.169884][T10471] loop6: detected capacity change from 0 to 1 [ 557.192685][ T6120] Dev loop6: unable to read RDB block 1 [ 557.205802][ T5951] usb 9-1: string descriptor 0 read error: -22 [ 557.227885][ T6120] loop6: unable to read partition table [ 557.240338][ T5951] usb 9-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=c5.3c [ 557.283686][ T6120] loop6: partition table beyond EOD, truncated [ 557.291485][ T5951] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.495143][T10471] Dev loop6: unable to read RDB block 1 [ 557.554106][T10471] loop6: unable to read partition table [ 557.706380][T10471] loop6: partition table beyond EOD, truncated [ 557.900459][T10471] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 557.910378][ T5951] usb 9-1: USB disconnect, device number 10 [ 557.970552][ T5206] Dev loop6: unable to read RDB block 1 [ 557.996488][ T5206] loop6: unable to read partition table [ 558.029682][ T5206] loop6: partition table beyond EOD, truncated [ 560.810784][T10503] virtio-fs: tag not found [ 562.966303][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.973257][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.092084][ T4655] kworker/u8:8 (4655) used greatest stack depth: 19448 bytes left [ 563.329517][T10531] No such timeout policy "syz1" [ 565.192788][ T5841] Bluetooth: hci1: ISO packet too small [ 565.846851][T10552] macvtap1: entered allmulticast mode [ 566.117687][T10552] veth0_macvtap: entered allmulticast mode [ 566.302997][ T30] audit: type=1326 audit(2000000123.660:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10554 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d198e929 code=0x7ffc0000 [ 566.470646][ T30] audit: type=1326 audit(2000000123.710:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10554 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d198e929 code=0x7ffc0000 [ 566.504675][ T30] audit: type=1326 audit(2000000123.740:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10554 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fe4d198e929 code=0x7ffc0000 [ 566.681153][ T30] audit: type=1326 audit(2000000123.880:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10554 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d198e929 code=0x7ffc0000 [ 566.707557][T10565] virtio-fs: tag not found [ 566.877308][ T30] audit: type=1326 audit(2000000123.880:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10554 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d198e929 code=0x7ffc0000 [ 566.986065][ T30] audit: type=1326 audit(2000000123.910:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10554 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe4d198e929 code=0x7ffc0000 [ 567.069353][ T5921] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 567.097732][ T30] audit: type=1326 audit(2000000123.910:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10554 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d198e929 code=0x7ffc0000 [ 567.180541][ T30] audit: type=1326 audit(2000000123.910:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10554 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d198e929 code=0x7ffc0000 [ 567.249819][ T5921] usb 9-1: Using ep0 maxpacket: 16 [ 567.283502][ T5921] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.306133][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 567.320883][ T30] audit: type=1326 audit(2000000123.910:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10554 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe4d198e929 code=0x7ffc0000 [ 567.376610][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 567.429424][ T30] audit: type=1326 audit(2000000123.910:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10554 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d198e929 code=0x7ffc0000 [ 567.455039][ T5921] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 567.503606][ T5921] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.535085][ T5921] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 567.544911][ T5921] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 567.559642][ T5921] usb 9-1: Manufacturer: syz [ 567.587212][ T5921] usb 9-1: config 0 descriptor?? [ 568.004494][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1083'. [ 571.057644][T10584] netlink: 'syz.7.1088': attribute type 6 has an invalid length. [ 571.436969][T10584] netlink: 'syz.7.1088': attribute type 7 has an invalid length. [ 571.669674][T10584] netlink: 'syz.7.1088': attribute type 8 has an invalid length. [ 571.678778][T10584] netlink: 'syz.7.1088': attribute type 8 has an invalid length. [ 571.687771][T10584] netlink: 'syz.7.1088': attribute type 4 has an invalid length. [ 571.920160][ T5921] rc_core: IR keymap rc-hauppauge not found [ 571.979310][ T5921] Registered IR keymap rc-empty [ 571.985837][ T5921] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 572.084913][ T5921] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 572.177247][ T5921] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 572.874756][ T5921] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input20 [ 572.887958][ T5841] Bluetooth: hci2: ISO packet too small [ 574.099138][T10604] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 574.188349][ T5921] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 574.235800][ T5921] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 574.289832][ T5921] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 574.373146][ T5921] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 574.449906][ T5921] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 574.529494][ T5921] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 574.558160][T10615] virtio-fs: tag not found [ 574.589779][ T5921] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 574.626777][ T5921] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 574.659671][ T5921] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 574.702412][ T5921] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 574.722653][T10620] FAULT_INJECTION: forcing a failure. [ 574.722653][T10620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.781037][ T5921] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 574.789885][T10620] CPU: 0 UID: 0 PID: 10620 Comm: syz.1.1098 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 574.789908][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.789918][T10620] Call Trace: [ 574.789927][T10620] [ 574.789935][T10620] dump_stack_lvl+0x189/0x250 [ 574.789957][T10620] ? __pfx____ratelimit+0x10/0x10 [ 574.789982][T10620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.790000][T10620] ? __pfx__printk+0x10/0x10 [ 574.790030][T10620] should_fail_ex+0x414/0x560 [ 574.790058][T10620] _copy_to_user+0x31/0xb0 [ 574.790079][T10620] bpf_test_finish+0x24e/0x700 [ 574.790105][T10620] ? __pfx_bpf_test_finish+0x10/0x10 [ 574.790128][T10620] ? slab_build_skb+0x273/0x3e0 [ 574.790150][T10620] bpf_prog_test_run_skb+0xed5/0x1560 [ 574.790181][T10620] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 574.790200][T10620] bpf_prog_test_run+0x2c7/0x340 [ 574.790219][T10620] __sys_bpf+0x4a4/0x860 [ 574.790245][T10620] ? __pfx___sys_bpf+0x10/0x10 [ 574.790278][T10620] ? ksys_write+0x22a/0x250 [ 574.790305][T10620] ? __pfx_ksys_write+0x10/0x10 [ 574.790325][T10620] ? rcu_is_watching+0x15/0xb0 [ 574.790348][T10620] __x64_sys_bpf+0x7c/0x90 [ 574.790371][T10620] do_syscall_64+0xfa/0x3b0 [ 574.790387][T10620] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.790410][T10620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.790426][T10620] ? clear_bhb_loop+0x60/0xb0 [ 574.790445][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.790461][T10620] RIP: 0033:0x7f51ef58e929 [ 574.790477][T10620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.790490][T10620] RSP: 002b:00007f51f0463038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 574.790507][T10620] RAX: ffffffffffffffda RBX: 00007f51ef7b5fa0 RCX: 00007f51ef58e929 [ 574.790518][T10620] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 574.790529][T10620] RBP: 00007f51f0463090 R08: 0000000000000000 R09: 0000000000000000 [ 574.790539][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.790548][T10620] R13: 0000000000000000 R14: 00007f51ef7b5fa0 R15: 00007ffc4f5ae318 [ 574.790571][T10620] [ 575.017827][ T5921] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 575.122032][ T5921] usb 9-1: USB disconnect, device number 11 [ 575.732608][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 576.219637][ T5951] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 576.239501][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 576.254632][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.289505][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.315985][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 576.332673][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 576.354438][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.369755][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 576.379764][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 576.387025][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 576.396315][ T10] usb 1-1: Manufacturer: syz [ 576.412039][ T5951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.432736][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.631235][ T5841] Bluetooth: hci2: ISO packet too small [ 576.910242][ T10] usb 1-1: config 0 descriptor?? [ 576.918115][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 576.930247][ T5951] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 576.945718][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.218949][ T5951] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 577.228469][ T5951] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 577.236716][ T5951] usb 2-1: Manufacturer: syz [ 577.258586][ T5951] usb 2-1: config 0 descriptor?? [ 577.358515][T10648] No such timeout policy "syz1" [ 579.442596][T10661] FAULT_INJECTION: forcing a failure. [ 579.442596][T10661] name failslab, interval 1, probability 0, space 0, times 0 [ 579.478509][T10661] CPU: 0 UID: 0 PID: 10661 Comm: syz.1.1109 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 579.478537][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 579.478547][T10661] Call Trace: [ 579.478554][T10661] [ 579.478561][T10661] dump_stack_lvl+0x189/0x250 [ 579.478584][T10661] ? __pfx____ratelimit+0x10/0x10 [ 579.478609][T10661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.478627][T10661] ? __pfx__printk+0x10/0x10 [ 579.478652][T10661] ? __pfx___might_resched+0x10/0x10 [ 579.478674][T10661] should_fail_ex+0x414/0x560 [ 579.478701][T10661] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 579.478720][T10661] should_failslab+0xa8/0x100 [ 579.478736][T10661] __kvmalloc_node_noprof+0x161/0x5f0 [ 579.478762][T10661] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 579.478785][T10661] bpf_test_run_xdp_live+0x18e/0x1b10 [ 579.478814][T10661] ? stack_depot_save_flags+0x40/0x900 [ 579.478846][T10661] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 579.478865][T10661] ? bpf_prog_test_run_xdp+0x37c/0x1000 [ 579.478883][T10661] ? bpf_prog_test_run+0x2c7/0x340 [ 579.478897][T10661] ? __sys_bpf+0x4a4/0x860 [ 579.478919][T10661] ? __x64_sys_bpf+0x7c/0x90 [ 579.478956][T10661] ? __lock_acquire+0xab9/0xd20 [ 579.478979][T10661] ? __might_fault+0xb0/0x130 [ 579.479009][T10661] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 579.479036][T10661] ? _copy_from_user+0x94/0xb0 [ 579.479055][T10661] ? bpf_test_init+0x133/0x170 [ 579.479071][T10661] ? xdp_convert_md_to_buff+0x5b/0x330 [ 579.479092][T10661] bpf_prog_test_run_xdp+0x713/0x1000 [ 579.479140][T10661] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 579.479177][T10661] ? __fget_files+0x2a/0x420 [ 579.479205][T10661] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 579.479233][T10661] bpf_prog_test_run+0x2c7/0x340 [ 579.479257][T10661] __sys_bpf+0x4a4/0x860 [ 579.479283][T10661] ? __pfx___sys_bpf+0x10/0x10 [ 579.479317][T10661] ? ksys_write+0x22a/0x250 [ 579.479350][T10661] ? __pfx_ksys_write+0x10/0x10 [ 579.479379][T10661] ? rcu_is_watching+0x15/0xb0 [ 579.479412][T10661] __x64_sys_bpf+0x7c/0x90 [ 579.479444][T10661] do_syscall_64+0xfa/0x3b0 [ 579.479463][T10661] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.479486][T10661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.479502][T10661] ? clear_bhb_loop+0x60/0xb0 [ 579.479520][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.479536][T10661] RIP: 0033:0x7f51ef58e929 [ 579.479550][T10661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.479564][T10661] RSP: 002b:00007f51f0463038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 579.479580][T10661] RAX: ffffffffffffffda RBX: 00007f51ef7b5fa0 RCX: 00007f51ef58e929 [ 579.479592][T10661] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 579.479602][T10661] RBP: 00007f51f0463090 R08: 0000000000000000 R09: 0000000000000000 [ 579.479612][T10661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.479621][T10661] R13: 0000000000000000 R14: 00007f51ef7b5fa0 R15: 00007ffc4f5ae318 [ 579.479644][T10661] [ 579.988963][ T5951] rc_core: IR keymap rc-hauppauge not found [ 579.995237][ T5951] Registered IR keymap rc-empty [ 580.000415][ T5951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.019425][ T5951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.065872][ T5951] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 580.085432][ T5951] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 580.107932][ T5951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.155482][T10668] virtio-fs: tag not found [ 580.165910][ T5951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.287718][ T10] rc_core: IR keymap rc-hauppauge not found [ 580.309330][ T10] Registered IR keymap rc-empty [ 580.314497][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.339424][ T5951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.374360][ T5951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.384507][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.412958][ T5951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.428369][ T10] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 580.472479][ T5951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.487620][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input22 [ 580.526487][ T5951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.557250][ T5951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.565093][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.589715][ T5951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.610905][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.629567][ T5951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 580.637061][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.674462][ T5951] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 580.689501][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.701438][ T5951] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 580.724570][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.740103][ T5951] usb 2-1: USB disconnect, device number 20 [ 580.769604][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.799889][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.829706][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.863830][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.889402][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.903386][T10666] netlink: 'syz.0.1111': attribute type 4 has an invalid length. [ 580.926014][T10674] FAULT_INJECTION: forcing a failure. [ 580.926014][T10674] name failslab, interval 1, probability 0, space 0, times 0 [ 580.963146][ T10] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 580.983724][T10674] CPU: 0 UID: 0 PID: 10674 Comm: syz.8.1113 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 580.983758][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 580.983772][T10674] Call Trace: [ 580.983781][T10674] [ 580.983791][T10674] dump_stack_lvl+0x189/0x250 [ 580.983822][T10674] ? __pfx____ratelimit+0x10/0x10 [ 580.983856][T10674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.983881][T10674] ? __pfx__printk+0x10/0x10 [ 580.983907][T10674] ? __mutex_unlock_slowpath+0x68a/0x700 [ 580.983946][T10674] should_fail_ex+0x414/0x560 [ 580.983983][T10674] should_failslab+0xa8/0x100 [ 580.984007][T10674] kmem_cache_alloc_noprof+0x73/0x3c0 [ 580.984040][T10674] ? skb_clone+0x212/0x3a0 [ 580.984076][T10674] skb_clone+0x212/0x3a0 [ 580.984111][T10674] __netlink_deliver_tap+0x404/0x850 [ 580.984153][T10674] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.984182][T10674] netlink_deliver_tap+0x19c/0x1b0 [ 580.984211][T10674] netlink_dump+0x8e4/0xe20 [ 580.984251][T10674] ? __pfx_netlink_dump+0x10/0x10 [ 580.984298][T10674] ? netlink_lookup+0x30/0x200 [ 580.984323][T10674] ? netlink_lookup+0x30/0x200 [ 580.984345][T10674] ? netlink_lookup+0x30/0x200 [ 580.984383][T10674] __netlink_dump_start+0x5cb/0x7e0 [ 580.984418][T10674] rtnetlink_rcv_msg+0x9eb/0xb70 [ 580.984445][T10674] ? __pfx_ipmr_rtm_dumplink+0x10/0x10 [ 580.984468][T10674] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 580.984491][T10674] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 580.984513][T10674] ? ref_tracker_free+0x63a/0x7d0 [ 580.984546][T10674] ? __pfx_rtnl_dumpit+0x10/0x10 [ 580.984569][T10674] ? __pfx_ipmr_rtm_dumplink+0x10/0x10 [ 580.984605][T10674] netlink_rcv_skb+0x205/0x470 [ 580.984633][T10674] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 580.984659][T10674] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 580.984700][T10674] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.984730][T10674] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.984763][T10674] netlink_unicast+0x758/0x8d0 [ 580.984799][T10674] netlink_sendmsg+0x805/0xb30 [ 580.984837][T10674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.984874][T10674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 580.984907][T10674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.984935][T10674] __sock_sendmsg+0x219/0x270 [ 580.984961][T10674] ____sys_sendmsg+0x505/0x830 [ 580.984996][T10674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.985036][T10674] ? import_iovec+0x74/0xa0 [ 580.985066][T10674] ___sys_sendmsg+0x21f/0x2a0 [ 580.985098][T10674] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.985168][T10674] ? __fget_files+0x2a/0x420 [ 580.985189][T10674] ? __fget_files+0x3a0/0x420 [ 580.985222][T10674] __x64_sys_sendmsg+0x19b/0x260 [ 580.985255][T10674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 580.985301][T10674] ? __pfx_ksys_write+0x10/0x10 [ 580.985330][T10674] ? rcu_is_watching+0x15/0xb0 [ 580.985360][T10674] ? do_syscall_64+0xbe/0x3b0 [ 580.985386][T10674] do_syscall_64+0xfa/0x3b0 [ 580.985406][T10674] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.985439][T10674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.985461][T10674] ? clear_bhb_loop+0x60/0xb0 [ 580.985488][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.985509][T10674] RIP: 0033:0x7f6c6038e929 [ 580.985529][T10674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.985547][T10674] RSP: 002b:00007f6c6112a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.985571][T10674] RAX: ffffffffffffffda RBX: 00007f6c605b5fa0 RCX: 00007f6c6038e929 [ 580.985587][T10674] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 580.985601][T10674] RBP: 00007f6c6112a090 R08: 0000000000000000 R09: 0000000000000000 [ 580.985614][T10674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.985627][T10674] R13: 0000000000000000 R14: 00007f6c605b5fa0 R15: 00007fffa9ec4528 [ 580.985661][T10674] [ 581.389861][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 581.432471][ T10] usb 1-1: USB disconnect, device number 19 [ 581.479959][T10676] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.487470][T10676] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.685601][T10676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.713887][T10676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.496268][T10676] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.558546][T10676] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.569623][T10676] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.578883][T10676] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.856574][ T5921] syz1: Port: 1 Link DOWN [ 583.199751][ T9049] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 583.200071][ T5921] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 583.481108][ T9049] usb 9-1: Using ep0 maxpacket: 16 [ 583.582381][ T9049] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.583761][ T5921] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 583.609553][ T9049] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 583.649721][ T9049] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 583.672425][ T5921] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 583.702241][ T9049] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 583.707930][ T5921] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 583.744232][ T9049] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.745836][ T5921] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 583.793702][ T9049] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 583.796839][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.830392][ T9049] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 583.849040][ T9049] usb 9-1: Manufacturer: syz [ 583.863722][ T9049] usb 9-1: config 0 descriptor?? [ 583.869181][T10695] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 583.939605][ T5898] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 584.162559][ T5898] usb 8-1: Using ep0 maxpacket: 16 [ 584.237986][ T5898] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.266295][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 584.297710][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 584.450695][ T5898] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 585.054750][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1119'. [ 586.230405][ T5898] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.643734][ T5921] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 587.906629][ T5921] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input23 [ 588.040807][ T5898] usb 8-1: string descriptor 0 read error: -71 [ 588.048400][ T5898] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 588.069278][ T5898] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 588.081978][ T5898] usb 8-1: config 0 descriptor?? [ 588.099926][ T5898] usb 8-1: can't set config #0, error -71 [ 588.106192][ T5921] usb 1-1: USB disconnect, device number 20 [ 588.112328][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 588.244826][ T5898] usb 8-1: USB disconnect, device number 23 [ 588.361176][T10717] netlink: 'syz.8.1127': attribute type 4 has an invalid length. [ 589.331865][T10715] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 589.499293][ T9049] rc_core: IR keymap rc-hauppauge not found [ 589.505295][ T9049] Registered IR keymap rc-empty [ 589.511892][ T9049] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 589.539373][ T9049] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 589.581119][ T9049] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 589.693953][ T9049] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input24 [ 589.843286][ T9049] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 589.901721][ T9049] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 589.970315][ T9049] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 590.175286][ T5841] Bluetooth: hci1: ISO packet too small [ 590.473421][T10733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1129'. [ 590.540210][ T9049] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 590.568475][ T9049] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 590.634894][ T9049] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 590.677911][T10739] openvswitch: netlink: IP tunnel TTL not specified. [ 590.703772][ T9049] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 590.787530][ T9049] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 590.799469][ T5898] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 590.856861][ T9049] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 590.897909][ T9049] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 591.169728][ T9049] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 591.193872][ T5898] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 591.283266][ T9049] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 591.312965][ T5898] usb 1-1: can't read configurations, error -22 [ 591.595737][ T5898] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 591.678414][ T9049] usb 9-1: USB disconnect, device number 12 [ 591.995943][ T5898] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 592.131020][ T5898] usb 1-1: can't read configurations, error -22 [ 592.147615][ T5898] usb usb1-port1: attempt power cycle [ 592.570369][ T5898] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 592.611727][ T5898] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 592.624974][ T5898] usb 1-1: can't read configurations, error -22 [ 592.775502][T10758] pimreg3: entered allmulticast mode [ 593.463076][ T5898] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 593.572373][ T5898] usb 1-1: device descriptor read/8, error -71 [ 593.680369][ T5898] usb usb1-port1: unable to enumerate USB device [ 593.717359][T10760] netlink: 'syz.7.1136': attribute type 4 has an invalid length. [ 594.969452][T10768] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1140'. [ 595.043289][ T5921] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 595.074192][T10774] binder: 10773:10774 ioctl c0306201 2000000003c0 returned -14 [ 595.321514][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 595.465741][ T5841] Bluetooth: hci3: ISO packet too small [ 595.613887][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.631401][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 595.646729][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 595.670656][ T5921] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 595.700234][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.783749][ T5921] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 595.873808][ T5921] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 595.892202][ T5921] usb 2-1: Manufacturer: syz [ 596.411864][ T5921] usb 2-1: config 0 descriptor?? [ 596.670214][T10790] virtio-fs: tag not found [ 598.119565][ T5921] rc_core: IR keymap rc-hauppauge not found [ 598.125523][ T5921] Registered IR keymap rc-empty [ 598.162762][ T5921] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.209373][ T5921] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.330470][ T5921] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 598.332734][ T5921] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input25 [ 598.344182][ T5921] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.384337][ T5921] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.399648][ T5921] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.420076][ T5921] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.439451][ T5921] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.469639][ T5921] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.489401][ T5921] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.509424][ T5921] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.529659][ T5921] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.549393][ T5921] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.551453][T10805] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1147'. [ 598.571004][ T5921] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 598.571026][ T5921] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 598.615885][ T5921] usb 2-1: USB disconnect, device number 21 [ 598.737575][T10807] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1146'. [ 599.427415][T10816] binder: 10815:10816 ioctl 40046210 0 returned -14 [ 599.720082][ T5921] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 600.009058][ T5841] Bluetooth: hci1: ISO packet too small [ 600.205625][ T5921] usb 1-1: config 253 has an invalid interface number: 250 but max is 2 [ 600.216466][ T5921] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 600.231019][ T5921] usb 1-1: config 253 has 2 interfaces, different from the descriptor's value: 3 [ 600.241155][ T5921] usb 1-1: config 253 has no interface number 0 [ 600.250115][ T5921] usb 1-1: config 253 has no interface number 1 [ 600.256511][ T5921] usb 1-1: config 253 interface 250 altsetting 37 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 600.270595][ T5921] usb 1-1: config 253 interface 2 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 600.284999][ T5921] usb 1-1: config 253 interface 250 has no altsetting 0 [ 600.292591][ T5921] usb 1-1: config 253 interface 2 has no altsetting 0 [ 600.306926][ T5921] usb 1-1: New USB device found, idVendor=0cf3, idProduct=0001, bcdDevice=cd.9c [ 600.318171][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.327537][ T5921] usb 1-1: Product: syz [ 600.332718][ T5921] usb 1-1: Manufacturer: syz [ 600.337394][ T5921] usb 1-1: SerialNumber: syz [ 600.555368][ T5921] usb 1-1: Could not find all expected endpoints [ 600.626585][ T5921] usb 1-1: Could not find all expected endpoints [ 600.690691][ T5921] usb 1-1: USB disconnect, device number 25 [ 600.940190][T10836] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 600.946781][T10836] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 601.037327][T10836] vhci_hcd vhci_hcd.0: Device attached [ 601.087581][T10840] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 601.094180][T10840] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 601.227915][ T5921] vhci_hcd: vhci_device speed not set [ 601.239613][T10840] vhci_hcd vhci_hcd.0: Device attached [ 601.267189][T10846] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13) [ 601.273951][T10846] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 601.392450][T10840] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 601.488205][ T5921] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 601.626596][T10851] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 601.639624][T10846] vhci_hcd vhci_hcd.0: Device attached [ 601.671232][T10836] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 601.677853][T10836] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 601.881263][T10836] vhci_hcd vhci_hcd.0: Device attached [ 602.691755][T10847] vhci_hcd: connection closed [ 602.693436][T10844] vhci_hcd: connection closed [ 602.693455][T10841] vhci_hcd: connection closed [ 602.694734][ T6195] vhci_hcd: stop threads [ 602.698834][T10838] vhci_hcd: connection reset by peer [ 602.812740][ T6195] vhci_hcd: release socket [ 602.837041][ T6195] vhci_hcd: disconnect device [ 602.853099][ T6195] vhci_hcd: stop threads [ 602.864687][ T6195] vhci_hcd: release socket [ 602.904600][ T6195] vhci_hcd: disconnect device [ 602.920087][ T6195] vhci_hcd: stop threads [ 602.949694][ T6195] vhci_hcd: release socket [ 602.961973][ T6195] vhci_hcd: disconnect device [ 602.987697][ T6195] vhci_hcd: stop threads [ 603.019421][ T6195] vhci_hcd: release socket [ 603.046029][ T6195] vhci_hcd: disconnect device [ 603.053397][ T977] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 603.241991][ T977] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 603.272194][ T977] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 603.318319][ T977] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 603.382812][ T977] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 603.419751][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.454339][T10860] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 604.946564][ T977] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 604.978267][ T977] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input26 [ 605.075759][ T977] usb 1-1: USB disconnect, device number 26 [ 605.075824][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 606.502621][T10889] FAULT_INJECTION: forcing a failure. [ 606.502621][T10889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.516290][T10889] CPU: 1 UID: 0 PID: 10889 Comm: syz.0.1166 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 606.516320][T10889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.516335][T10889] Call Trace: [ 606.516346][T10889] [ 606.516356][T10889] dump_stack_lvl+0x189/0x250 [ 606.516387][T10889] ? __pfx____ratelimit+0x10/0x10 [ 606.516423][T10889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.516448][T10889] ? __pfx__printk+0x10/0x10 [ 606.516478][T10889] ? __might_fault+0xb0/0x130 [ 606.516524][T10889] should_fail_ex+0x414/0x560 [ 606.516563][T10889] _copy_from_iter+0x1db/0x16f0 [ 606.516601][T10889] ? __pfx__copy_from_iter+0x10/0x10 [ 606.516624][T10889] ? proc_sys_call_handler+0x3f2/0x7c0 [ 606.516653][T10889] ? rcu_is_watching+0x15/0xb0 [ 606.516677][T10889] ? proc_sys_call_handler+0x3f2/0x7c0 [ 606.516704][T10889] ? trace_kmalloc+0x1f/0xd0 [ 606.516734][T10889] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 606.516767][T10889] ? proc_sys_call_handler+0x3f2/0x7c0 [ 606.516802][T10889] proc_sys_call_handler+0x454/0x7c0 [ 606.516839][T10889] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 606.516884][T10889] vfs_write+0x548/0xa90 [ 606.516922][T10889] ? __pfx_proc_sys_write+0x10/0x10 [ 606.516951][T10889] ? __pfx_vfs_write+0x10/0x10 [ 606.516995][T10889] ? __fget_files+0x2a/0x420 [ 606.517028][T10889] ksys_write+0x145/0x250 [ 606.517063][T10889] ? __pfx_ksys_write+0x10/0x10 [ 606.517101][T10889] ? do_syscall_64+0xbe/0x3b0 [ 606.517128][T10889] do_syscall_64+0xfa/0x3b0 [ 606.517159][T10889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.517181][T10889] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 606.517203][T10889] ? clear_bhb_loop+0x60/0xb0 [ 606.517230][T10889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.517252][T10889] RIP: 0033:0x7feab1f8e929 [ 606.517272][T10889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.517292][T10889] RSP: 002b:00007feab2dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 606.517316][T10889] RAX: ffffffffffffffda RBX: 00007feab21b6160 RCX: 00007feab1f8e929 [ 606.517333][T10889] RDX: 0000000000000002 RSI: 0000200000002240 RDI: 0000000000000009 [ 606.517346][T10889] RBP: 00007feab2dde090 R08: 0000000000000000 R09: 0000000000000000 [ 606.517360][T10889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.517373][T10889] R13: 0000000000000000 R14: 00007feab21b6160 R15: 00007ffcaf54b678 [ 606.517407][T10889] [ 606.808892][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1167'. [ 606.959386][ T5921] vhci_hcd: vhci_device speed not set [ 608.799428][ T977] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 609.909308][ T977] usb 9-1: device descriptor read/64, error -71 [ 610.037331][T10923] fuse: Bad value for 'fd' [ 610.160855][ T977] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 611.732041][T10933] No such timeout policy "syz1" [ 613.162293][T10948] xt_hashlimit: size too large, truncated to 1048576 [ 614.062283][T10957] xt_TCPMSS: Only works on TCP SYN packets [ 614.193730][T10963] FAULT_INJECTION: forcing a failure. [ 614.193730][T10963] name failslab, interval 1, probability 0, space 0, times 0 [ 614.269341][T10963] CPU: 0 UID: 0 PID: 10963 Comm: syz.1.1189 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 614.269374][T10963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 614.269388][T10963] Call Trace: [ 614.269397][T10963] [ 614.269407][T10963] dump_stack_lvl+0x189/0x250 [ 614.269438][T10963] ? __pfx____ratelimit+0x10/0x10 [ 614.269473][T10963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 614.269505][T10963] ? __pfx__printk+0x10/0x10 [ 614.269537][T10963] ? __pfx___might_resched+0x10/0x10 [ 614.269561][T10963] ? fs_reclaim_acquire+0x7d/0x100 [ 614.269588][T10963] should_fail_ex+0x414/0x560 [ 614.269626][T10963] should_failslab+0xa8/0x100 [ 614.269649][T10963] __kmalloc_noprof+0xcb/0x4f0 [ 614.269681][T10963] ? iovec_from_user+0x87/0x250 [ 614.269712][T10963] iovec_from_user+0x87/0x250 [ 614.269743][T10963] __import_iovec+0x163/0x7f0 [ 614.269781][T10963] import_iovec+0x74/0xa0 [ 614.269813][T10963] ___sys_sendmsg+0x1e7/0x2a0 [ 614.269847][T10963] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.269917][T10963] ? __fget_files+0x2a/0x420 [ 614.269937][T10963] ? __fget_files+0x3a0/0x420 [ 614.269970][T10963] __x64_sys_sendmsg+0x19b/0x260 [ 614.270004][T10963] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.270044][T10963] ? __pfx_ksys_write+0x10/0x10 [ 614.270074][T10963] ? rcu_is_watching+0x15/0xb0 [ 614.270104][T10963] ? do_syscall_64+0xbe/0x3b0 [ 614.270130][T10963] do_syscall_64+0xfa/0x3b0 [ 614.270150][T10963] ? lockdep_hardirqs_on+0x9c/0x150 [ 614.270184][T10963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.270206][T10963] ? clear_bhb_loop+0x60/0xb0 [ 614.270233][T10963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.270254][T10963] RIP: 0033:0x7f51ef58e929 [ 614.270273][T10963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.270293][T10963] RSP: 002b:00007f51f0463038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.270317][T10963] RAX: ffffffffffffffda RBX: 00007f51ef7b5fa0 RCX: 00007f51ef58e929 [ 614.270333][T10963] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0000000000000003 [ 614.270347][T10963] RBP: 00007f51f0463090 R08: 0000000000000000 R09: 0000000000000000 [ 614.270365][T10963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.270378][T10963] R13: 0000000000000000 R14: 00007f51ef7b5fa0 R15: 00007ffc4f5ae318 [ 614.270412][T10963] [ 617.270041][ T9049] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 617.679104][ T9049] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 618.445634][ T9049] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 618.457926][ T9049] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 618.471783][ T9049] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 618.483969][ T9049] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.687532][T10987] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 618.785752][T10997] No such timeout policy "syz1" [ 620.142270][ T9049] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 620.182461][ T9049] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input27 [ 620.434169][ T5951] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 620.497703][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 620.506051][ T9049] usb 7-1: USB disconnect, device number 41 [ 620.870675][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 620.902204][ T5951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.941094][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 621.023995][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 621.035067][ T5951] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 621.048293][ T5951] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.067567][ T5951] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 621.086290][ T5951] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 621.115406][ T5951] usb 1-1: Manufacturer: syz [ 621.143834][ T5951] usb 1-1: config 0 descriptor?? [ 624.456998][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.909944][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.449725][ T5951] rc_core: IR keymap rc-hauppauge not found [ 625.455919][ T5951] Registered IR keymap rc-empty [ 625.520385][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 625.571197][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 625.791035][ T5951] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 625.815352][ T5951] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input28 [ 626.280740][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 626.500225][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 626.540038][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 626.581871][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 626.619338][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 626.851824][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 626.919523][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 627.259298][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.139477][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.189342][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.245746][ T5951] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 628.294804][ T5951] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 628.385533][ T5951] usb 1-1: USB disconnect, device number 27 [ 628.581990][ T5921] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 628.730317][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'. [ 629.123320][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 629.276887][ T5921] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 629.320319][ T5921] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 629.347289][ T10] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 629.374628][ T5921] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 629.398767][ T10] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 629.417932][ T5921] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 629.427133][ T10] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 629.451950][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.466634][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 629.553450][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.563190][T11046] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 629.913535][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1215'. [ 630.432718][T11056] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 630.437158][T11048] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 632.728284][ T10] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 632.813104][ T10] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input29 [ 632.871127][ T5921] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 632.892848][ T5921] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input30 [ 632.930777][ T10] usb 2-1: USB disconnect, device number 22 [ 632.936816][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 633.410305][ T5921] usb 7-1: USB disconnect, device number 42 [ 633.416318][ C0] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 633.722319][T11074] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1217'. [ 634.079420][ T5951] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 634.249708][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 634.273458][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 634.300974][ T5951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.327359][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 634.364765][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 634.375012][ T5951] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 634.392054][ T5951] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 634.413960][ T5951] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 634.438802][ T5951] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 634.459098][ T5951] usb 1-1: Manufacturer: syz [ 634.480706][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 634.498567][ T5951] usb 1-1: config 0 descriptor?? [ 634.521586][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.731077][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 634.771392][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 634.784048][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 634.879416][T11087] virtio-fs: tag not found [ 635.003550][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 635.101582][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 635.117550][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 635.713875][ T10] usb 2-1: Manufacturer: syz [ 636.144806][ T10] usb 2-1: config 0 descriptor?? [ 638.421706][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 639.869419][ T10] rc_core: IR keymap rc-hauppauge not found [ 639.876265][ T10] Registered IR keymap rc-empty [ 639.899623][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 639.929801][ T5951] rc_core: IR keymap rc-hauppauge not found [ 639.964188][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 639.975383][ T5951] Registered IR keymap rc-empty [ 640.022121][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.060630][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 640.080365][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.181201][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 640.200930][ T5951] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 640.306812][ T5951] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input32 [ 640.379053][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 640.407607][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.459320][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.466666][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 640.515207][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.539450][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 640.610305][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.659647][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 640.689636][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.710123][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 640.717537][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.745183][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 640.809452][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.825962][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 640.869378][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.888329][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.102450][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 641.109879][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.173516][ T5951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 641.183878][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 641.531144][ T5951] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 641.541593][ T10] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 641.564316][T11121] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 641.575546][T11121] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 641.585955][T11121] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 641.593916][T11121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 641.602243][T11121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 641.624537][ T5951] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 641.633391][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 641.668243][ T5951] usb 1-1: USB disconnect, device number 28 [ 641.681073][ T10] usb 2-1: USB disconnect, device number 23 [ 642.081870][ T5951] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 642.391612][ T5951] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 642.423338][ T5951] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 642.454964][ T5951] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 642.495179][ T5951] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 642.519456][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.563008][T11110] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 642.721513][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.248214][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.679494][T11121] Bluetooth: hci3: command tx timeout [ 643.797574][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.928710][ T5951] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 643.939881][ T5951] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input33 [ 643.989688][ T5951] usb 1-1: USB disconnect, device number 29 [ 643.995831][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 644.468439][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.717482][T11119] chnl_net:caif_netlink_parms(): no params data found [ 645.765893][T11121] Bluetooth: hci3: command tx timeout [ 645.788584][ T49] bridge_slave_1: left allmulticast mode [ 645.794463][ T49] bridge_slave_1: left promiscuous mode [ 645.804901][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.874640][ T49] bridge_slave_0: left allmulticast mode [ 645.910884][ T49] bridge_slave_0: left promiscuous mode [ 645.928927][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.811841][ T10] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 646.999436][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 647.007477][ T10] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 647.039635][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.108841][ T10] usb 7-1: config 0 descriptor?? [ 647.141934][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 647.217124][T11174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1247'. [ 647.314771][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 647.314836][ T30] audit: type=1326 audit(2000000204.690:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11173 comm="syz.0.1247" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feab1f8e929 code=0x0 [ 647.845279][T11121] Bluetooth: hci3: command tx timeout [ 647.879301][ T9463] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 647.928502][ T49] bond1 (unregistering): (slave geneve2): Releasing active interface [ 648.188420][ T49] geneve2 (unregistering): left allmulticast mode [ 648.235110][ T9463] usb 1-1: Using ep0 maxpacket: 8 [ 648.245672][ T9463] usb 1-1: config 168 has an invalid descriptor of length 97, skipping remainder of the config [ 648.267762][ T49] batman_adv: batadv0: Removing interface: vxlan0 [ 648.275754][ T9463] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 97, changing to 10 [ 648.289833][ T9463] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 648.318548][ T9463] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.334744][ T9463] usb 1-1: config 168 has an invalid descriptor of length 97, skipping remainder of the config [ 648.348303][ T9463] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 97, changing to 10 [ 648.367985][ T9463] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 648.380949][ T9463] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.396003][ T9463] usb 1-1: config 168 has an invalid descriptor of length 97, skipping remainder of the config [ 648.407066][ T9463] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 97, changing to 10 [ 648.427632][ T9463] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 648.439705][ T9463] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.456504][ T9463] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 648.486716][ T9463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.495443][ T9463] usb 1-1: Product: syz [ 648.500405][ T9463] usb 1-1: Manufacturer: syz [ 648.505227][ T9463] usb 1-1: SerialNumber: syz [ 648.673820][ T10] gspca_nw80x: reg_r err -110 [ 648.683580][ T10] nw80x 7-1:0.0: probe with driver nw80x failed with error -110 [ 648.992164][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.016251][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.028178][ T49] bond0 (unregistering): Released all slaves [ 649.220378][ T49] bond1 (unregistering): Released all slaves [ 649.249461][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 649.448012][ T10] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 649.507122][ T10] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 649.604939][ T10] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 649.853345][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 649.863028][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.888215][T11185] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 649.919707][T11121] Bluetooth: hci3: command tx timeout [ 650.037076][T11119] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.071205][T11119] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.109704][T11119] bridge_slave_0: entered allmulticast mode [ 650.124256][T11119] bridge_slave_0: entered promiscuous mode [ 650.268191][T11119] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.268430][T11119] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.269104][T11119] bridge_slave_1: entered allmulticast mode [ 650.424741][T11119] bridge_slave_1: entered promiscuous mode [ 650.760432][ T9463] adutux 1-1:168.0: interrupt endpoints not found [ 650.819545][ T9463] usb 1-1: USB disconnect, device number 30 [ 650.866762][ T10] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 650.872080][ T10] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input34 [ 650.898538][T11199] FAULT_INJECTION: forcing a failure. [ 650.898538][T11199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.898598][T11199] CPU: 0 UID: 0 PID: 11199 Comm: syz.0.1252 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 650.898627][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 650.898641][T11199] Call Trace: [ 650.898650][T11199] [ 650.898661][T11199] dump_stack_lvl+0x189/0x250 [ 650.898691][T11199] ? __pfx____ratelimit+0x10/0x10 [ 650.898726][T11199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.898751][T11199] ? __pfx__printk+0x10/0x10 [ 650.898780][T11199] ? __might_fault+0xb0/0x130 [ 650.898826][T11199] should_fail_ex+0x414/0x560 [ 650.898865][T11199] _copy_from_user+0x2d/0xb0 [ 650.898892][T11199] kstrtouint_from_user+0xc4/0x170 [ 650.898918][T11199] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 650.898959][T11199] proc_fail_nth_write+0x88/0x240 [ 650.898984][T11199] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 650.899015][T11199] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 650.899041][T11199] vfs_write+0x27b/0xa90 [ 650.899083][T11199] ? __pfx_vfs_write+0x10/0x10 [ 650.899117][T11199] ? __fget_files+0x2a/0x420 [ 650.899145][T11199] ? __fget_files+0x3a0/0x420 [ 650.899163][T11199] ? __fget_files+0x2a/0x420 [ 650.899198][T11199] ksys_write+0x145/0x250 [ 650.899233][T11199] ? __pfx_ksys_write+0x10/0x10 [ 650.899258][T11199] ? rcu_is_watching+0x15/0xb0 [ 650.899288][T11199] ? do_syscall_64+0xbe/0x3b0 [ 650.899314][T11199] do_syscall_64+0xfa/0x3b0 [ 650.899337][T11199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.899357][T11199] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 650.899380][T11199] ? clear_bhb_loop+0x60/0xb0 [ 650.899407][T11199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.899428][T11199] RIP: 0033:0x7feab1f8d3df [ 650.899447][T11199] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 650.899467][T11199] RSP: 002b:00007feab2e20030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 650.899490][T11199] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feab1f8d3df [ 650.899505][T11199] RDX: 0000000000000001 RSI: 00007feab2e200a0 RDI: 0000000000000007 [ 650.899519][T11199] RBP: 00007feab2e20090 R08: 0000000000000000 R09: 0000000000000000 [ 650.899533][T11199] R10: 0000000000001000 R11: 0000000000000293 R12: 0000000000000001 [ 650.899547][T11199] R13: 0000000000000000 R14: 00007feab21b5fa0 R15: 00007ffcaf54b678 [ 650.899580][T11199] [ 650.949698][ T9049] usb 7-1: USB disconnect, device number 43 [ 650.978438][T11195] loop6: detected capacity change from 0 to 524287999 [ 651.678861][ T10] usb 2-1: USB disconnect, device number 24 [ 651.688277][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 651.955298][ T977] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 652.049727][ T49] hsr_slave_0: left promiscuous mode [ 652.070254][ T49] hsr_slave_1: left promiscuous mode [ 652.099365][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 652.106121][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.487366][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.500166][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.573367][ T977] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 652.612381][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.662210][ T977] usb 1-1: config 0 descriptor?? [ 653.160850][ T977] glorious 0003:22D4:1503.0006: unknown main item tag 0x0 [ 653.168240][ T977] glorious 0003:22D4:1503.0006: unknown main item tag 0x0 [ 653.189512][ T977] glorious 0003:22D4:1503.0006: unknown main item tag 0x0 [ 653.197576][ T977] glorious 0003:22D4:1503.0006: unknown main item tag 0x0 [ 653.323480][ T977] glorious 0003:22D4:1503.0006: unknown main item tag 0x0 [ 653.324335][T11202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.579749][ T977] glorious 0003:22D4:1503.0006: hidraw0: USB HID v0.05 Device [Glorious Model I] on usb-dummy_hcd.0-1/input0 [ 653.586642][T11202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.056693][ T49] pimreg3 (unregistering): left allmulticast mode [ 654.107925][ T977] usb 1-1: USB disconnect, device number 31 [ 654.118169][ T49] pim6reg (unregistering): left allmulticast mode [ 654.119391][T11215] fido_id[11215]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:22D4:1503.0006/report_descriptor': No such device [ 655.692849][ T49] team0 (unregistering): Port device team_slave_1 removed [ 655.965388][ T49] team0 (unregistering): Port device team_slave_0 removed [ 656.393842][T11119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.467365][T11119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.741484][T11119] team0: Port device team_slave_0 added [ 656.750467][T11232] netlink: 'syz.6.1262': attribute type 4 has an invalid length. [ 656.808661][T11119] team0: Port device team_slave_1 added [ 656.964615][T11238] Scaler: ================= START STATUS ================= [ 657.003151][T11238] Scaler: ================== END STATUS ================== [ 657.061650][T11119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.082266][T11119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.090569][T11246] virtio-fs: tag not found [ 657.108282][ C0] vkms_vblank_simulate: vblank timer overrun [ 657.184226][T11119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.199832][T11119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.207079][T11119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.235657][T11119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.429760][ T977] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 657.913346][ T977] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.002532][ T977] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.269390][ T977] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 658.274444][T11119] hsr_slave_0: entered promiscuous mode [ 658.303468][T11119] hsr_slave_1: entered promiscuous mode [ 658.308940][ T977] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 658.335824][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.336985][T11119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 658.369770][T11243] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 658.412930][T11119] Cannot create hsr debugfs directory [ 658.688684][T11253] virtio-fs: tag not found [ 659.905415][ T977] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 660.082722][ T977] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input35 [ 660.987570][ T977] usb 2-1: USB disconnect, device number 25 [ 660.993711][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 661.004595][ T5918] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 661.145444][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1270'. [ 661.154598][T11264] netlink: 'syz.6.1270': attribute type 20 has an invalid length. [ 662.423403][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 662.453806][ T5918] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 662.475240][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.485236][ T5918] usb 1-1: Product: syz [ 662.494567][ T5918] usb 1-1: Manufacturer: syz [ 662.500159][ T5918] usb 1-1: SerialNumber: syz [ 662.545909][ T5918] usb 1-1: config 0 descriptor?? [ 662.588355][ T5918] rtl8150 1-1:0.0: couldn't find required endpoints [ 662.613955][ T5918] rtl8150 1-1:0.0: probe with driver rtl8150 failed with error -5 [ 662.662605][T11274] netlink: 'syz.6.1273': attribute type 15 has an invalid length. [ 662.724992][T11275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1272'. [ 662.822401][T11274] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1273'. [ 663.115177][T11274] bond0: option resend_igmp: invalid value (196616) [ 663.130344][ T977] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 663.149357][T11274] bond0: option resend_igmp: allowed values 0 - 255 [ 663.224566][T11278] netlink: 'syz.8.1275': attribute type 4 has an invalid length. [ 663.311020][T11119] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 663.325801][ T977] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 663.341530][ T977] usb 2-1: can't read configurations, error -22 [ 663.378665][T11119] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 663.421258][T11119] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 663.491528][T11119] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 663.636850][ T977] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 663.819429][ T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 663.999519][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 664.032085][ T10] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 664.061946][ T10] usb 9-1: config 0 has no interface number 0 [ 664.082232][ T10] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 664.101161][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.119748][ T10] usb 9-1: Product: syz [ 664.128353][ T10] usb 9-1: Manufacturer: syz [ 664.134127][T11119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.142554][ T10] usb 9-1: SerialNumber: syz [ 664.163545][ T10] usb 9-1: config 0 descriptor?? [ 664.182808][ T10] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 664.248288][ T977] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 664.339664][ T977] usb 2-1: can't read configurations, error -22 [ 664.360317][ T9049] usb 1-1: USB disconnect, device number 32 [ 664.369380][ T977] usb usb2-port1: attempt power cycle [ 664.410904][ T10] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 664.455631][T11119] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.474029][ T10] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 664.524509][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.531854][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.543390][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.550687][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.726172][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1277'. [ 664.739498][ T977] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 664.820390][ T977] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 665.741496][ T977] usb 2-1: can't read configurations, error -22 [ 665.980458][T11298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.073055][T11298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.167828][ T977] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 669.901457][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 669.909658][ T10] usb 9-1: USB disconnect, device number 15 [ 669.941242][ T977] usb 2-1: device descriptor read/8, error -71 [ 669.970327][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 670.059712][ T977] usb usb2-port1: unable to enumerate USB device [ 670.108640][T11119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 670.163186][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 670.229090][ T10] quatech2 9-1:0.51: device disconnected [ 670.325705][T11307] virtio-fs: tag not found [ 670.505444][T11314] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1283'. [ 670.729751][ T977] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 671.421789][ T977] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 671.521339][ T977] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 671.642389][ T977] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 671.699260][ T977] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 671.785388][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.839994][T11308] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 671.848401][T11119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.750843][ T977] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 673.811652][ T977] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input36 [ 674.659847][T11348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1290'. [ 674.701735][ T977] usb 2-1: USB disconnect, device number 30 [ 674.707768][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 675.589706][ T9049] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 675.850534][ T9049] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 675.858564][ T9049] usb 1-1: can't read configurations, error -22 [ 675.961343][T11359] virtio-fs: tag not found [ 676.219733][ T9049] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 676.339035][T11362] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 677.113334][ T9049] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 677.130954][T11119] veth0_vlan: entered promiscuous mode [ 677.969672][ T9049] usb 1-1: can't read configurations, error -71 [ 677.969926][T11119] veth1_vlan: entered promiscuous mode [ 678.014822][T11119] veth0_macvtap: entered promiscuous mode [ 678.026258][T11119] veth1_macvtap: entered promiscuous mode [ 678.030304][ T9049] usb usb1-port1: attempt power cycle [ 678.146430][T11119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.236835][T11119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.256153][T11119] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.272285][T11119] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.287284][T11119] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.301398][T11119] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.379275][T11373] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 679.138531][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.167515][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.300688][ T7138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.319403][ T7138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.468906][T11387] ubi: mtd0 is already attached to ubi31 [ 680.421128][T11395] virtio-fs: tag not found [ 680.580807][ T5965] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 680.867292][ T5965] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 680.931719][ T5965] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 680.958951][ T5965] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 680.995739][ T5965] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 680.998838][ T30] audit: type=1804 audit(2000000238.360:506): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.1304" name="bus" dev="ramfs" ino=32967 res=1 errno=0 [ 681.523060][T11121] Bluetooth: hci1: ISO packet too small [ 681.529413][ T30] audit: type=1804 audit(2000000238.370:507): pid=11396 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.1304" name="bus" dev="ramfs" ino=32967 res=1 errno=0 [ 681.734029][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.798335][T11405] No such timeout policy "syz1" [ 682.040941][T11392] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 682.759352][ T5965] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 682.799107][ T5965] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input37 [ 682.900804][ T5965] usb 1-1: USB disconnect, device number 36 [ 682.906864][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 682.948006][T11413] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1308'. [ 683.013570][T11413] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1308'. [ 683.034518][T11413] ip6gretap1: entered allmulticast mode [ 683.226233][T11418] can0: slcan on ttyS3. [ 683.309213][T11418] can0 (unregistered): slcan off ttyS3. [ 683.340062][ T977] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 683.521373][T11418] Falling back ldisc for ttyS3. [ 683.877164][ T977] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 683.908884][ T977] usb 7-1: config 0 has no interface number 0 [ 683.921521][ T977] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 683.960711][ T977] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 684.214947][ T977] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 684.224632][ T977] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 684.269318][ T977] usb 7-1: Product: syz [ 684.285166][ T977] usb 7-1: SerialNumber: syz [ 684.380905][ T977] usb 7-1: config 0 descriptor?? [ 684.461612][T11429] netlink: 'syz.1.1313': attribute type 4 has an invalid length. [ 684.517889][ T977] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 684.551290][ T977] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input38 [ 684.717400][T11433] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1315'. [ 685.384972][T11121] Bluetooth: hci3: ISO packet too small [ 685.968617][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.975602][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.321377][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 686.321701][ T10] usb 7-1: USB disconnect, device number 44 [ 686.328678][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 686.562773][ T10] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 686.642220][T11449] No such timeout policy "syz1" [ 687.552621][T11453] No such timeout policy "syz1" [ 689.589259][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 689.636287][T11471] netlink: 'syz.8.1327': attribute type 4 has an invalid length. [ 689.813259][ T10] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 689.850747][ T9463] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 689.911237][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 690.055095][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 690.100904][T11475] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 690.120394][ T9463] usb 10-1: Using ep0 maxpacket: 16 [ 690.276871][ T9463] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 690.292299][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 690.344336][ T9463] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 690.368457][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.378418][ T9463] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 690.434324][ T9463] usb 10-1: config 0 interface 0 has no altsetting 0 [ 690.443781][T11459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 690.465795][ T9463] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 690.485699][ T9463] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.525687][ T9463] usb 10-1: Product: syz [ 690.544860][ T9463] usb 10-1: Manufacturer: syz [ 690.563861][ T9463] usb 10-1: SerialNumber: syz [ 690.748281][T11121] Bluetooth: hci5: ISO packet too small [ 691.182887][ T9463] usb 10-1: config 0 descriptor?? [ 691.238984][ T10] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 691.280288][ T10] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input39 [ 691.453450][ T9463] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input40 [ 691.466903][ T10] usb 1-1: USB disconnect, device number 37 [ 691.472943][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 691.486679][ T5191] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 691.534774][ T5191] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 691.561212][ T5191] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 691.577075][T11486] can0: slcan on ttyS3. [ 691.583524][ T5191] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 691.638345][T11470] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 691.667150][T11470] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 692.119007][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.269766][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.319508][ T9463] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 692.398432][T11496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.268351][ T9463] usb 9-1: Using ep0 maxpacket: 16 [ 693.380089][ T9463] usb 9-1: config 0 interface 0 has no altsetting 0 [ 693.407202][T11486] can0 (unregistered): slcan off ttyS3. [ 693.432055][ T9463] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 693.491465][T11486] Falling back ldisc for ttyS3. [ 693.504680][T11496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.606167][ T9463] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.870297][ T9463] usb 9-1: config 0 descriptor?? [ 694.760861][ T10] usb 10-1: USB disconnect, device number 2 [ 695.718079][ T9463] usbhid 9-1:0.0: can't add hid device: -71 [ 695.725298][ T9463] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 695.794328][ T9463] usb 9-1: USB disconnect, device number 16 [ 695.998819][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1337'. [ 698.884233][ T9049] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 699.078666][ T9049] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 699.221140][ T9049] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 699.345398][ T9049] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 699.441486][ T9049] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 699.542621][ T9049] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.552378][ T5965] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 699.632307][T11541] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 699.734026][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1352'. [ 700.045010][ T5965] usb 7-1: Using ep0 maxpacket: 32 [ 700.242380][ T5965] usb 7-1: config 0 has no interfaces? [ 700.268072][ T5965] usb 7-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=11.66 [ 700.300983][ T9049] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 700.318827][ T5965] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.341496][ T9049] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input41 [ 700.357608][ T5965] usb 7-1: Product: syz [ 700.369565][ T5965] usb 7-1: Manufacturer: syz [ 700.381903][ T5965] usb 7-1: SerialNumber: syz [ 700.601776][ T5965] usb 7-1: config 0 descriptor?? [ 702.086836][ T9049] usb 10-1: USB disconnect, device number 3 [ 702.092899][ C1] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 702.259891][ T10] usb 7-1: USB disconnect, device number 45 [ 703.289852][T11579] virtio-fs: tag not found [ 703.674015][T11121] Bluetooth: hci2: ISO packet too small [ 704.218842][ T9049] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 704.260855][T11596] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1362'. [ 704.390967][ T9049] usb 2-1: Using ep0 maxpacket: 16 [ 704.403222][ T9049] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.432400][ T9049] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 704.466219][ T9049] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 704.480713][ T9049] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 704.492166][ T9049] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.222387][ T9463] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 705.224979][ T9049] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 705.375757][ T9049] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 705.459590][ T9049] usb 2-1: Manufacturer: syz [ 705.523551][ T9049] usb 2-1: config 0 descriptor?? [ 705.679582][ T9463] usb 1-1: Using ep0 maxpacket: 16 [ 706.022726][ T9463] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.163507][ T9463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 706.255096][ T9463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 710.348021][ T9463] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 710.369516][ T9463] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.090758][ T9463] usb 1-1: string descriptor 0 read error: -71 [ 711.097085][ T9463] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 711.107039][ T9463] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 711.123961][ T9463] usb 1-1: config 0 descriptor?? [ 711.228129][ T9463] usb 1-1: can't set config #0, error -71 [ 711.239331][ T5951] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 711.249232][ T9049] rc_core: IR keymap rc-hauppauge not found [ 711.291373][ T9463] usb 1-1: USB disconnect, device number 38 [ 711.300233][ T9049] Registered IR keymap rc-empty [ 711.325059][ T9049] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.423102][ T5951] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 711.446102][ T9049] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.507520][ T5951] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 711.509690][ T9049] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 711.531042][ T5951] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 711.531104][ T5951] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 711.531131][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.538365][T11621] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 711.633002][ T9049] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input42 [ 711.696359][ T9049] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.764142][ T9049] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.863561][ T9049] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.849337][ T9049] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.869742][ T9049] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.889476][ T9049] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 712.909380][ T9049] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 713.849076][ T9049] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 713.869329][ T9049] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 713.889744][ T9049] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 713.914031][ T9049] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 714.847691][ T9049] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 714.867789][ T9049] usb 2-1: USB disconnect, device number 31 [ 715.427563][ T5951] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 715.505921][ T5951] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input43 [ 715.610268][ C0] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 715.622273][ T5951] usb 7-1: USB disconnect, device number 46 [ 716.460665][ T5951] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 716.713015][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 716.752756][ T5951] usb 7-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 716.793452][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.854550][ T5951] usb 7-1: config 0 descriptor?? [ 716.990701][ T9463] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 717.219576][ T9463] usb 9-1: Using ep0 maxpacket: 16 [ 717.349574][ T9463] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.705833][ T9463] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 717.720364][ T5951] glorious 0003:258A:0036.0007: unknown main item tag 0x1 [ 717.742652][ T5951] glorious 0003:258A:0036.0007: reserved main item tag 0xd [ 717.750288][ T9463] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 717.768032][ T5951] glorious 0003:258A:0036.0007: item fetching failed at offset 4/5 [ 717.786308][ T9463] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 718.153952][ T5951] glorious 0003:258A:0036.0007: probe with driver glorious failed with error -22 [ 718.169318][ T9463] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 718.198806][ T5951] usb 7-1: USB disconnect, device number 47 [ 718.206869][ T9463] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 718.231805][ T9463] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 718.242892][ T9463] usb 9-1: Manufacturer: syz [ 718.945175][ T9463] usb 9-1: config 0 descriptor?? [ 719.555295][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1381'. [ 721.979505][ T9463] rc_core: IR keymap rc-hauppauge not found [ 722.030403][ T9463] Registered IR keymap rc-empty [ 722.035495][ T9463] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 722.100541][ T9463] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 722.195590][ T9463] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 722.481940][ T9463] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input44 [ 723.259404][ T9463] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 723.289356][ T9463] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 723.329965][ T9463] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 723.419755][ T9463] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 723.446815][ T9463] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 723.615524][T11697] smk_cipso_doi:679 remove rc = -2 [ 724.218503][ T9463] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 724.709331][ T9463] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 724.730916][ T9463] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 724.759525][ T9463] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 724.788572][ T9463] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 724.829654][ T9463] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 724.838675][ T9463] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 726.350111][ T9463] usb 9-1: USB disconnect, device number 17 [ 728.246656][T11728] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1398'. [ 728.271936][T11719] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 728.530206][T11734] input: syz1 as /devices/virtual/input/input45 [ 730.728285][T11761] sctp: [Deprecated]: syz.8.1406 (pid 11761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 730.728285][T11761] Use struct sctp_sack_info instead [ 730.789317][ T5921] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 730.800183][ T9463] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 731.139365][ T9463] usb 2-1: Using ep0 maxpacket: 16 [ 731.921471][ T5921] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 731.935043][ T9463] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.949349][ T9463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 731.960414][ T5921] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 731.974287][ T9463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 731.984072][ T5921] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 732.404118][ T9463] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 732.419346][ T5921] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 732.434783][ T9463] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.459347][ T5921] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.475091][T11756] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 732.486843][ T9463] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 732.566925][ T9463] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 733.559709][ T9463] usb 2-1: Manufacturer: syz [ 733.581429][ T9463] usb 2-1: config 0 descriptor?? [ 734.482133][ T5921] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 735.340102][ T5921] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input46 [ 735.402828][ C0] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 735.412659][ T5921] usb 10-1: USB disconnect, device number 4 [ 737.200133][ T9463] rc_core: IR keymap rc-hauppauge not found [ 737.214311][ T9463] Registered IR keymap rc-empty [ 737.247925][ T9463] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 737.303407][ T9463] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 737.356081][ T9463] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 737.404873][ T9463] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input47 [ 737.579363][ T5921] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 737.675108][ T9463] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 737.889304][ T9463] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 738.629297][ T5921] usb 10-1: Using ep0 maxpacket: 8 [ 738.640115][ T9463] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 739.143209][ T9463] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 739.208080][ T9463] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 739.252133][ T9463] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 739.265589][ T5921] usb 10-1: device descriptor read/all, error -71 [ 739.309585][ T9463] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 739.349850][ T9463] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 739.577422][ T9463] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 740.340473][ T9463] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 740.393279][ T9463] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 740.967961][ T9463] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 741.015337][ T9463] usb 2-1: USB disconnect, device number 32 [ 742.819250][ T5921] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 743.017735][ T5921] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 743.263100][ T5921] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 743.482541][ T30] audit: type=1804 audit(2000000300.850:508): pid=11853 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.1430" name="/newroot/313/bus/file0" dev="overlay" ino=1672 res=1 errno=0 [ 743.529204][ T5921] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 743.541926][ T5921] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 743.551443][ T5921] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.563761][T11836] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 744.227430][ T30] audit: type=1804 audit(2000000301.230:509): pid=11858 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1430" name="/newroot/313/bus/file0" dev="overlay" ino=1672 res=1 errno=0 [ 744.424494][ T5921] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 745.051584][ T5921] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input48 [ 745.099404][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 745.164348][ T5921] usb 10-1: USB disconnect, device number 7 [ 745.170388][ C0] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 745.309644][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 745.329413][T11870] xt_bpf: check failed: parse error [ 745.357368][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 745.388710][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 745.419333][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.458298][ T10] usb 1-1: config 0 descriptor?? [ 745.562793][ T10] hso 1-1:0.0: Can't find BULK IN endpoint [ 745.863354][T11877] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 745.890309][T11877] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 745.926381][ T10] usb 1-1: USB disconnect, device number 39 [ 746.853022][T11883] fuse: Unknown parameter 'user_O' [ 746.878788][T11881] fuse: Unknown parameter 'user_O' [ 746.916309][T11881] loop4: detected capacity change from 0 to 7 [ 747.084453][T11887] virtio-fs: tag not found [ 747.303555][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.313112][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.453746][T11881] Dev loop4: unable to read RDB block 7 [ 747.487348][T11881] loop4: AHDI p1 p2 [ 747.503092][T11881] loop4: partition table partially beyond EOD, truncated [ 747.515223][T11881] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 747.787188][T10633] udevd[10633]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 748.805229][T11907] can0: slcan on ptm0. [ 749.449212][ T5918] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 749.522920][T11898] can0 (unregistered): slcan off ptm0. [ 749.655282][ T5918] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 749.734624][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.794117][ T5918] usb 1-1: Product: syz [ 749.798360][ T5918] usb 1-1: Manufacturer: syz [ 749.882605][ T5918] usb 1-1: SerialNumber: syz [ 749.951534][ T5918] usb 1-1: config 0 descriptor?? [ 749.989065][ T5918] ch341 1-1:0.0: ch341-uart converter detected [ 750.201859][ T5918] usb 1-1: failed to receive control message: -121 [ 750.246061][ T5918] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 750.340744][T11928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 751.019222][ T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 751.070257][T11930] virtio-fs: tag not found [ 751.470642][ T30] audit: type=1400 audit(2000000308.840:510): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=11927 comm="syz.1.1453" path="socket:[35101]" dev="sockfs" ino=35101 [ 751.509269][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 751.518491][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 751.546302][ T10] usb 9-1: config 8 has an invalid interface number: 255 but max is 0 [ 752.345504][ T10] usb 9-1: config 8 has no interface number 0 [ 752.353579][ T10] usb 9-1: config 8 interface 255 has no altsetting 0 [ 752.364049][ T10] usb 9-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 752.403176][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.430499][ T9463] usb 1-1: USB disconnect, device number 40 [ 752.460900][ T9463] ch341 1-1:0.0: device disconnected [ 752.466897][ T10] usb 9-1: Product: syz [ 752.472209][ T10] usb 9-1: Manufacturer: 頤䧹现핺녜刚ꬃ騰뮾䞑鼌뤙㘓뻡킮䰭괲즯莥䇔ꍑ䡨휞諴朗煍ꤔ헓ᩔ䂟䴯Ꝯ鞥阧뀛趯⧹䒉ḉ즫쭨幎䅂䍨뻐﷈翤г㤹⩢ᖚ刖蛯ꨐᥳ쒊罍챗茑겓㱔圊䁴茀ᬉ⫦ꐂ㥓惉鰊ﳿወߟ狀ඳꠥ紴ꛎ꜁떠亁컚롾靘㞞윹嫪ⵦ᣹䷷滞斿ᄶᘸ [ 752.575445][ T10] usb 9-1: SerialNumber: syz [ 753.303829][T11950] x_tables: ip_tables: osf match: only valid for protocol 6 [ 753.315640][T11950] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 753.327602][T11950] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 753.336055][T11950] CPU: 0 UID: 0 PID: 11950 Comm: syz.0.1457 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 753.348168][T11950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 753.358255][T11950] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190 [ 753.365245][T11950] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 ff bb 60 fd 4c 8b 7b 08 48 89 d8 48 c1 e8 [ 753.384899][T11950] RSP: 0018:ffffc9000be77118 EFLAGS: 00010202 [ 753.391011][T11950] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000 [ 753.399019][T11950] RDX: ffffc9000d05e000 RSI: 0000000000000341 RDI: 0000000000000058 [ 753.407034][T11950] RBP: dffffc0000000000 R08: ffff88802c005a00 R09: 0000000000000002 [ 753.415047][T11950] R10: 00000000ffffffff R11: ffffffff898022a0 R12: 0000000000000000 [ 753.423054][T11950] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff88807a6cc800 [ 753.431057][T11950] FS: 00007feab2dde6c0(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 753.440025][T11950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 753.446652][T11950] CR2: 000000110c3332a5 CR3: 000000006a640000 CR4: 00000000003526f0 [ 753.454669][T11950] Call Trace: [ 753.457981][T11950] [ 753.460950][T11950] drr_qlen_notify+0x2c/0xf0 [ 753.465593][T11950] qdisc_tree_reduce_backlog+0x299/0x480 [ 753.471281][T11950] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 753.477074][T11950] sfq_init+0x1a0f/0x2530 [ 753.481460][T11950] ? __pfx_sfq_init+0x10/0x10 [ 753.486184][T11950] qdisc_create+0x7a9/0xea0 [ 753.490730][T11950] tc_modify_qdisc+0x1426/0x2010 [ 753.495703][T11950] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 753.501042][T11950] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 753.506444][T11950] rtnetlink_rcv_msg+0x77c/0xb70 [ 753.511424][T11950] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 753.516567][T11950] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 753.522146][T11950] ? ref_tracker_free+0x63a/0x7d0 [ 753.527215][T11950] ? __copy_skb_header+0xa7/0x550 [ 753.532289][T11950] ? __pfx_ref_tracker_free+0x10/0x10 [ 753.537719][T11950] netlink_rcv_skb+0x205/0x470 [ 753.542530][T11950] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 753.548037][T11950] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 753.553374][T11950] ? netlink_deliver_tap+0x2e/0x1b0 [ 753.558609][T11950] ? netlink_deliver_tap+0x2e/0x1b0 [ 753.563847][T11950] netlink_unicast+0x758/0x8d0 [ 753.568648][T11950] netlink_sendmsg+0x805/0xb30 [ 753.573472][T11950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.578815][T11950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 753.584155][T11950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.589480][T11950] __sock_sendmsg+0x219/0x270 [ 753.594199][T11950] ____sys_sendmsg+0x505/0x830 [ 753.599006][T11950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 753.604340][T11950] ? import_iovec+0x74/0xa0 [ 753.608881][T11950] ___sys_sendmsg+0x21f/0x2a0 [ 753.613601][T11950] ? __pfx____sys_sendmsg+0x10/0x10 [ 753.618856][T11950] ? __fget_files+0x2a/0x420 [ 753.623481][T11950] ? __fget_files+0x3a0/0x420 [ 753.628201][T11950] __x64_sys_sendmsg+0x19b/0x260 [ 753.633184][T11950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 753.638691][T11950] ? rcu_is_watching+0x15/0xb0 [ 753.643507][T11950] ? do_syscall_64+0xbe/0x3b0 [ 753.648228][T11950] do_syscall_64+0xfa/0x3b0 [ 753.652764][T11950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.658864][T11950] ? asm_sysvec_call_function_single+0x1a/0x20 [ 753.665055][T11950] ? clear_bhb_loop+0x60/0xb0 [ 753.669780][T11950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.675710][T11950] RIP: 0033:0x7feab1f8e929 [ 753.680162][T11950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.699805][T11950] RSP: 002b:00007feab2dde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.708260][T11950] RAX: ffffffffffffffda RBX: 00007feab21b6160 RCX: 00007feab1f8e929 [ 753.716262][T11950] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 000000000000000d [ 753.724266][T11950] RBP: 00007feab2010b39 R08: 0000000000000000 R09: 0000000000000000 [ 753.732273][T11950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.740278][T11950] R13: 0000000000000000 R14: 00007feab21b6160 R15: 00007ffcaf54b678 [ 753.748298][T11950] [ 753.751357][T11950] Modules linked in: [ 753.755592][T11950] ---[ end trace 0000000000000000 ]--- [ 753.761323][T11950] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190 [ 753.768475][T11950] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 ff bb 60 fd 4c 8b 7b 08 48 89 d8 48 c1 e8 [ 753.788287][T11950] RSP: 0018:ffffc9000be77118 EFLAGS: 00010202 [ 753.794530][T11950] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000 [ 753.802747][T11950] RDX: ffffc9000d05e000 RSI: 0000000000000341 RDI: 0000000000000058 [ 753.810855][T11950] RBP: dffffc0000000000 R08: ffff88802c005a00 R09: 0000000000000002 [ 753.819012][T11950] R10: 00000000ffffffff R11: ffffffff898022a0 R12: 0000000000000000 [ 753.827217][T11950] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff88807a6cc800 [ 753.835449][T11950] FS: 00007feab2dde6c0(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 753.844605][T11950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 753.851344][T11950] CR2: 000000110c3332a5 CR3: 000000006a640000 CR4: 00000000003526f0 [ 753.859439][T11950] Kernel panic - not syncing: Fatal exception in interrupt [ 753.866939][T11950] Kernel Offset: disabled [ 753.871281][T11950] Rebooting in 86400 seconds..