last executing test programs: 3m53.57352901s ago: executing program 0 (id=381): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = gettid() ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x9, 0xfffff758, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x20, 0x6, 0x3}}) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x2) syz_open_dev$swradio(0x0, 0x1, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000540)={0x208000, 0x6, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, &(0x7f0000000740)="252237e8d16b294825d36199bdd8a817d15a4cc81eba8c7937db6461dbfe8c6518694e2a92266354a391b113bc6f896c9ed1e42a2562b1f1ba881503e297c0d36cb033ca6d08aa6ce9e4725936abfc8f08ac97f52f1abe077ccd58021e685926de948e9a17d9d9cbbc9c4cc10ee937e4dcb0ff01a6362c7d1fd0bd53860064e9ce17f371abfe9fc21865f71121fb33982d4a8bc98ec144a04594d659a71137c7677e37d0ac2fde95632aa8b80c3d5b70992df7e6a84e24ee80e3a8b4115a35c8b010e6f35fa415a3b5ff09697730ef022325104a290cc7aab0a3b96726e58af43175647aa112c6a1a93b31242f29", 0xee, 0x4008004, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000005, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000500)="1cc1110ec1e9abc89b00", 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) io_uring_enter(0xffffffffffffffff, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36) write$uinput_user_dev(r8, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0xd492, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x80, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0xfffffffc, 0x200, 0x0, 0x2], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87a, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x10, 0x5, 0x10, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) 3m47.792928727s ago: executing program 0 (id=393): syslog(0x2, 0x0, 0x0) syslog(0xa, &(0x7f0000000000)=""/251, 0xfb) syslog(0x9, &(0x7f0000000100)=""/146, 0x92) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x30200, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000740), 0x408180) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x23, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000400)='syzkaller\x00', 0x2308, 0xc7, &(0x7f0000000440)=""/199, 0x41100, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x0, 0x6b8, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000780)=[r2, r3, r4, r5, r6], &(0x7f00000007c0)=[{0x5, 0x3, 0xf, 0x1}, {0x0, 0x4, 0x10, 0xc}, {0x2, 0x2, 0x5, 0x1}, {0x4, 0x2, 0x8, 0x8}, {0x2, 0x2, 0xc, 0xb}], 0x10, 0x4d5adb4f}, 0x94) syslog(0x4, 0x0, 0x0) r7 = dup(r2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CSA_IES={0x3c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x5, 0x8001, 0x9, 0x400, 0xfbe2, 0x4, 0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x1, 0x3ca, 0x9, 0x8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0x6, 0x3, 0xc, 0xc2, 0x9, 0x7, 0x6, 0x4, 0x101, 0x5]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r8, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7b, 0x59}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) mq_getsetattr(r6, &(0x7f0000000c00)={0x100000000, 0x8, 0x1a, 0x8}, &(0x7f0000000c40)) writev(r4, &(0x7f0000000ec0)=[{&(0x7f0000000c80)="9708620743ff", 0x6}, {&(0x7f0000000cc0)="d362d773ce23f3e4f5758cc4", 0xc}, {&(0x7f0000000d00)="030fbb60aec42b1b47464b11b1ede7a407ce0eaa5a9b9660424ae4785f392a07effccc4a1f6c7f6245ac0b7d3fafd24fece5549e2a08df07848b8943835be1c677bc687e4465f7521885650c8467086e431223e5b1e782048c34fe64f7e3f37514981f7f25c9192cfbe87d24cbc12f73b879dda106b612187542588571584636df7c29b6291249631debe9", 0x8b}, {&(0x7f0000000dc0)="4472489a93f080ef678abe1bd6da0bc28060ad7c7b93d656f0211154389c40dc0c2e45fdf7d5e96783e3e684d2db2f70719ef5087468b0a5b63703c0f78b45747a55d3d8763fc412d9573e36d00f717a928a319dccc4a74e5c1e3ed437ffc252108e93bed60f45f0ce17abbdbffd6886545ecf69a36276c3fd553a49e12bf4f1578f4ccd4e549a875fe6b6abb981b88da6906d52c21483f37022faf3be82c44d64872a24185c865e59dfc1f188fb3b681ce8e97202a1d841c7da2ddf3a2b2e3c6f56e0019d7466483bd9955986e5d943d151726676645cec", 0xd8}], 0x4) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000001700)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000016c0)={&(0x7f0000000f40)={0x760, r8, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4a}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x3ec, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x214, 0x4, 0x0, 0x1, [{0x210, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x8a, 0x1, "c6af26769326a2534ea15cfa32502ab4e524e824cd8848c48cd8bf484cbfc061d00b67a204887ad6aca89eb4dbfa854b7243de7928323f62bcacea3946c82171ab64d05bd0d43f16d90dc30d872d77ec2dd219b39543a3b8bc163045939343e784ce6e96dbd3fe2664f0e823f8cbfaa81429bb4b4a7670fc34accfa26bff9f4ac872659b624b"}, @NL80211_PKTPAT_MASK={0xe5, 0x1, "6a38d3c0e7d9208011d000f24d700bf1d990d7868ca09269b9a0402b16c390ca18bf40e3a497a6915c6bbdeda37725fd5fb7d6dd824dded1de0bd1a2e6e3b6e3ccc27047fa4d472bf222f2abf53bafbdead18db7a026ae483a16ea075fa4be8e619c68ceabb0aeeaf6404f843c1067b6434f2c8d6102e03f639563e4c0a6019cce507db6f90f4ab966141609dd0dbd32d43d12ab1593a063b8a3df39e69e2df8e58c9ccd9015085e77eeeffdba932d718f0b6bf7e9684c52e1d9d7f69abf6ce2c58c3d9cc77e3d479a95e7186e1844931df8a80a775f6fe5773d9100d6fbeb6844"}, @NL80211_PKTPAT_PATTERN={0x90, 0x2, "44a620c4cc3d10ada82061524f06e3925fadc0396d516ff5b1ce5ff0f6d9153fb3f0fcd299781b2ed96223c57a51552be29494c370154764c9739ede3c0eb7c4aac53ffe9a0bd7b418c553285ccc8d09a83334ad85c7d15760288df44634624f7b4644540c7b7b3d3dc9a50541996cb4bd8f4e0e206b019ce05c46563e4d3d952f1de5ca68eb1e3f3e1f72f0"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xaf}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1bc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x5}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x9}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x9c, 0x6, "6823c23e4d9185a6d6870ef6dbfe9f83c593029c6a42f7e9138a2218510b44d6358d5bff15b8a37c36600d4eb6da873713034cedf4d16d3de835baca1276e348ad8d2e5f833c6ebf011ed89643382704b7b75fddba91cc20f77074dcc589a3a6acc493e45dba91ed23f5193ba93c79f0d19b5aaa700f882f12aca63c29b507da0ff34c6a08c025384d7f87458cf75db685620b7c4d9f7ec4"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xb1, 0xb, "e4c0fc3c8588d8531ea331e1319773c25fc8d7bdb899feb1c680d7b88f9c5ca8759d66ed1ab9ecc68d8f415c9177f2767134cde2dedfa64ecf5e11e02b7be958fd5f5694ab347aca5b5cf37fba43ad8c52091d8d508c9c40b27caf0f11cb2232021553d5d6312c0edeb53af90134597c696a500849708787a870ae362ccd853c9a08527143b1866183476d509b89ce945b7063978f3c3e784e0660f7070eeb842a05ed0c1296a65be58346c643"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @private=0xa010101}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x3d, 0x8, {0x2, 0x80, "80bc1db104a14d54940e9e952ddf373e9468e4beb5861d6ec9b78c981998f10ba46f4880c4eacf47aeafe48752bc5080fe"}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x3, 0x0, 0x400}}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2bc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x24, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x6, 0x0, 0x100}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x505}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @private=0xa010100}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x27c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x400}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0x23f, 0x2a, [@measure_req={0x26, 0xb9, {0xe7, 0x2, 0xff, "016e6148e3b7d607de97032ead8a57d4e437aa331a94473fc955ad922bca9bfa954298dbbbcbc8f10c6b60a5a6dcbad9860e695f488ca5024bd661b38f5b3d12e6d6f9be40ffd410babeabd5d605fa6ada35298e13b8b2058038c240c3bbfba3e87dd37874384e2abef963c332f4eb1a5b4307d61fc045bf8bfd737d99db2e65224c06c1b9a7d1879c30ed9d1c9ab27b58e7420830f4308311b38e796fa86242aafa08fb5130ea1252c4d4039ef10307ebef50cf635c"}}, @fast_bss_trans={0x37, 0x17e, {0x8, 0xa, "f571a62e517c4a9f49671ded1487ea91", "ec2d6f037f5304153ec40903051ec715d57cfc815adf44cfae55760af1f5c39f", "6635874641589f50a5e4db6409393d302024e34affbc527844cf24632688f509", [{0x2, 0x21, "fc9b856b992d7a88e4e3c898ea09038f612b36d3bae7e21cc3cf00f7f08aaa94e9"}, {0x2, 0x1e, "15aa831e5ee2aa12d90c39e7911649e87099a84dc7d21666a94b316ab7a6"}, {0x2, 0x21, "bc67e058f604b0dc682d7abf8c05b24d4fac4567410aaa5b44212d7d62812173cc"}, {0x3, 0x19, "27972d131ada034ac198a3bbaed09db07fab825a92811d5461"}, {0x3, 0x25, "d6ff39defe687cac93d63da6c2b9a1f638b642afacce4af6ed5d5e5329d65a6d3c2a0759bc"}, {0x3, 0x22, "407bf2837b0563152f5673846fbd5a43e662a7e0b79bef60129549457758fbd11eef"}, {0x2, 0x28, "38ee6c6a42c62d637c912b426ee007832852e0564d2691018c0413e5acec9abe7176a1c21c19bd40"}, {0x1, 0x23, "fcc29753382c5ab5bd89223c32c4391fcc43f2f590e241c529197795faf17d31ff7c49"}, {0x3, 0x2, "20ea"}, {0x4, 0xb, "11810e09359813131bac98"}]}}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="7d6a9049581a"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x7c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x5c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x1}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x27, 0xb, "5d199101d23a84eed4abef7668f42b762360c0612ed5b37643145b0727f98dc7ceb54d"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x7, 0x8000, 0x3}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @local}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x5}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @remote}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}]}, 0x760}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={r1, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001740)="a9c40922763acdf75d6448811592ba2502dd93f5784afa609b2ba2f20208407d6a8f278cd3e4d49e20ba579bc972f36bf43e46ebde19cff315ba808ea36487c9e7f32027b46de66ad43df5aad5a5b3bc95ea4e4ca63c4d9dcbd9f978422a4c69b35565ffb8e694d66ae8bd0069288b51c17b5b20ecccdd1f87dd985ab6eae0fe70594b49103a5c9011d3ddc5145c64bba243365e2ab004fb", 0x98}, {&(0x7f0000001800)="04976167b3b1dfc0c0eedd65a04f8170ab8624bafced438a3053bc48202673b714179ff1b02d722c7edb7bea6da318cbb08795e8ae452876719ca056197020fef34c9ce8a1064b12d5f8f41d9753f729368a8c6e25d50faf44fb5f6fe4263a5578c16a27d625c83db3c053f63181e001744dda2a2d9936c91d08222767b5cedae9", 0x81}, {&(0x7f00000018c0)="776661f426efb59882e02c630fe9ffcbd8d0a3bc8242906df6da527e91bb95b5e661852188b10732478810abfdbfa2e0d14a2586915bc1c14723f527509140c0ae33c7939850164dceacd40e928b5645f901ec3fcf8b99f1a4aae7534d49c243bd5ec5c85ea6f772fef8c8b92acc192788ed2c561261edb84a236a7fff5914896fb1f8e5c2cf5e4e64360d06f903b16877b16f8efcf9802620e0ec6977c40ae1bd6642e35dc371084490e9", 0xab}], 0x3, &(0x7f0000001a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @local, @remote}}}], 0x20}, 0x40) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000001b00)=@arm64={0x4, 0x9, 0x2, '\x00', 0x9}) splice(r7, &(0x7f0000001b40)=0x3, r7, &(0x7f0000001b80)=0x8, 0x8, 0x5) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d18, &(0x7f0000001bc0)=0x3c) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x11, r5, 0x8000000) 3m47.611605148s ago: executing program 0 (id=395): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x38011, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000580)={0x5, 0x6, {r0}, {0x0}, 0x5, 0x7fffffff}) lstat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000680)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresuid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f0000000740)) sendmmsg$unix(r2, &(0x7f0000000780)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)="ed8bb011f9553113d1197bce33ed23362a133917c7ffb5347bdcdd11a7b8b676848549ef0b3427bd3610ceebd949937f49c174b3363b28f5d8c5ee75c941d51572099e59f65a81fe8a1cdc4b07e07da3ef647a3bae440529fd88de5590268f58002276659017283fe1a871c1ed1d45c046feb50c65d6989da3effe00143131dfb6c20e9b48d8053d13515bdfba2aa6c2d755419ff976a38f7a3de914c141f2ee99d25d371eaeafe1103eb1fbf03fd0d9c9673f56a0a63cf1550031f3af63f0e1e09f1ded328083831e7d18cda35e7e8d7f9cf8e4bf3c08006523b98e5e", 0xdd}, {&(0x7f00000002c0)="4a7a087a212ca9778828c49805a1df7d4fb5eb96ec24c272df7e03be41a2fe3bda173d890c10", 0x26}], 0x2, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {r0, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r0, r5, r7}}}, @cred={{0x1c, 0x1, 0x2, {r0, r9, r4}}}, @cred={{0x1c, 0x1, 0x2, {r8, r6, r4}}}, @cred={{0x1c, 0x1, 0x2, {r0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0xc0, 0x40891}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@private0, @in=@dev}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xffffff48) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYRES16=r13, @ANYBLOB="01002ad17000fbdbdf251b00000004000180"], 0x18}}, 0x0) close_range(r10, r11, 0x2) 3m46.614590199s ago: executing program 0 (id=398): bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f000000cffc)=0x1, 0x7, 0x4, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x1, 0x5, 0x0, 0x0, &(0x7f00000001c0)=0x2, 0x3000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x802, 0x6b929545a606890f) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESHEX=r1]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000007e9161590017000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) 3m45.620235497s ago: executing program 0 (id=402): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xf) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r8) 3m45.1096003s ago: executing program 0 (id=404): creat(&(0x7f0000000300)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mmap(&(0x7f0000162000/0x3000)=nil, 0x3000, 0xb635773f04ebbee2, 0x8071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000161000/0x4000)=nil, 0x4000, 0x6, &(0x7f0000000080)=0x2, 0xa, 0x3) r2 = dup(r1) (async) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0xa}}, 0x20) (async) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000480)={0x0, "dcfdaee58f046b21f2df7ae606766190a1fd0c11ecb7b1557f27df9e168692f9cf31bfaa5d30a516ff3c20ad89fa03c7aff4a19d9350d53a1d546ed0adb77913", 0x1d}, 0x48, 0xfffffffffffffffa) keyctl$instantiate(0xc, r3, &(0x7f0000000280)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', ']}]{#(!}'}, 0x20, 0xfffffffffffffff8) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 3m29.31820828s ago: executing program 32 (id=404): creat(&(0x7f0000000300)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mmap(&(0x7f0000162000/0x3000)=nil, 0x3000, 0xb635773f04ebbee2, 0x8071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000161000/0x4000)=nil, 0x4000, 0x6, &(0x7f0000000080)=0x2, 0xa, 0x3) r2 = dup(r1) (async) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0xa}}, 0x20) (async) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000480)={0x0, "dcfdaee58f046b21f2df7ae606766190a1fd0c11ecb7b1557f27df9e168692f9cf31bfaa5d30a516ff3c20ad89fa03c7aff4a19d9350d53a1d546ed0adb77913", 0x1d}, 0x48, 0xfffffffffffffffa) keyctl$instantiate(0xc, r3, &(0x7f0000000280)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', ']}]{#(!}'}, 0x20, 0xfffffffffffffff8) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1m36.939081342s ago: executing program 2 (id=869): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0xb, 0x1, 0x9}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x30c, 0x0, 0x8}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') preadv(r5, &(0x7f0000000500)=[{&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x5, 0xfff80001) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$isdn_base(0x22, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x400000}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) 1m36.893958509s ago: executing program 2 (id=870): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xf) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x3d, 0x8a, 0x8, 0x2770, 0x9120, 0x6c77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xb0, 0xe2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x12) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r8) 1m36.272550598s ago: executing program 2 (id=873): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f8ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000002004000001ed000062030000000000f53e440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c500000057bd81cb2af0b176275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e5b5b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb9134658fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9a958f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f94fefe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e924d6b1594af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e70300000000000000fee18a22da19fcdb4c2890cda1f96b952511e34cb14ea4a10a6f1dbaa69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde20300accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933f638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00000000000000003542591d17b5e8d9be772914cf4e3129e7929aa238bd99c3ddd895e33d8cf6c3d6cc883f0319aec94fb4cffde7a6d1fa1bcc03ead3912c2a68ca172adf3f9417207ea83d03a108d2ae15ee38c06dc98a0d1696b7c7fe142440776889154a93888972462439ae33b24c90e13c8f80d4e32716e96825d7bbdd97e4bae368d009b4611619a778f547fa1c92cc656a89728a6a1758b98fd27e1f5e1b446506d8947ca82bac7c2f00"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="fc92afa257", 0x5}, {0x0}], 0x2) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x80000000, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) (async) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) (async) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) (async, rerun: 32) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) (rerun: 32) write$P9_RSTATu(r1, 0x0, 0x0) 1m36.126066494s ago: executing program 2 (id=874): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f7680009050100000401ff070905021008"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x6, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x400, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xd7, 0x3, 0x4, 0x9, 'QDm\v'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x6, 0x4, "85"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x2, 0x4, "", "8a2d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x0, 0x5, {0x7, 0x25, 0x1, 0x80, 0x5, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x3, 0x6, {0x7, 0x25, 0x1, 0x80, 0x5, 0x2}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xff, 0x2a, 0xba, 0xff}, 0x3c, &(0x7f0000000100)={0x5, 0xf, 0x3c, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "27393ec33603f116bd24a4d804e0e8ac"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x0, 0xe3, 0xafa, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x2, 0xf00f, 0x0, [0x3f0f, 0x0, 0x0]}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x180a}}]}) 1m35.591206345s ago: executing program 2 (id=879): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@getlink={0x34, 0x12, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2e82, 0x2}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406"], 0x0) 1m34.681703921s ago: executing program 2 (id=881): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a2401000000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000018c0), 0x80082) write$binfmt_misc(r3, &(0x7f0000002280)="3e1a309b0dfcbabac11693177e58e396523e92a59a810d6165408188ac31a24f23b5eb", 0x23) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r1, 0x3, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000001) r8 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, &(0x7f0000000400)={0x14, &(0x7f00000003c0)={0x40, 0xa, 0x22, {0x22, 0x5, "5c341b617778384362b092c15d0049a7a68e666d9b1541d5e6b0c6becc7bcf80"}}, &(0x7f0000000480)={0x0, 0x3, 0x4e, @string={0x4e, 0x3, "02d83b69b193e1da1fb9837c33a235f4d490ef7ac5eb4424c300f26ae44490f415a8f30dcdd7dbbe0cacfcc24146558faf2c3df576331be83d5ea8e849c41295550a2d1d2ed88090855b8782"}}}, &(0x7f0000000700)={0x34, &(0x7f0000000500)={0x20, 0x9, 0x23, "4deff9f713fb0447dff1b51530417aed7320be464ebcf1535d20bc034fc77d886e13c9"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000680)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000006c0)={0xc0, 0xa2, 0x2f, "1ddef6e2791ad1658786dcd88bbd8725ba60fc6e3db65e7d06b587ac58c09553ead3c7287f69db14e53d530a59a15f"}}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1m34.301592065s ago: executing program 4 (id=885): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) 1m34.18217379s ago: executing program 4 (id=886): syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201b4a90b0cc433e6e75cef5853b145dcb100029b96351042070920903f0102060000000000000004c050090483080239ee87070905"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000006, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0xb77, 0x3014, 0x0, 0x3, 0x9, 0x1, 0x164ae0bc5ce04ee5}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0) syz_usb_connect(0x5, 0x48, &(0x7f0000000580)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023600010d019002090432a70201039e08090508061000060408042387ac0725010305f80427050702000204026607250101030300"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 1m31.060155248s ago: executing program 4 (id=896): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) 1m30.9082179s ago: executing program 4 (id=897): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000032000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000007a0000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000095000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x832, 0xd4, &(0x7f0000000040)=""/212, 0x0, 0x8, '\x00', r2}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x1c0) flock(r4, 0x5) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r6, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x0) ptrace(0x10, r5) io_submit(0x0, 0x0, &(0x7f00000008c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r7], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r8, @ANYRES16=r8, @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x4081) ptrace$setregs(0xd, r5, 0x20000002, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) capset(&(0x7f0000000480)={0x20080522}, &(0x7f0000000280)={0xcf1, 0x0, 0x0, 0x7e, 0xffffffff}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r3, 0x0, &(0x7f0000000180)="f1", 0x1, 0xfffffffffffffffd}) sched_getscheduler(0xffffffffffffffff) 1m30.550082971s ago: executing program 4 (id=900): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x321840, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', 0x0, 0x0) open(0x0, 0x60102, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x38, r8, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x0) 1m30.364913038s ago: executing program 4 (id=902): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x145000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x18c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0x6d, 0x7, 0x1, 0x0, "b8b881d4eacd0997d93e7dc924692bf0594aa5f3346861abc6d69075658bfa5d7742529c01d27ab4951e1a6a46df9e56dc7de6c5e5b03d9887342bde21904d4e31cca1967fffe535cb9c6ea9ff9664ce3c1a16f757ab6cbe508bae609f126fcc21e85af1356a26fe63"}, @NFTA_RULE_USERDATA={0xa8, 0x7, 0x1, 0x0, "05c55701e645fd27c44a32c328b07ea369c9d5178e6df3840e075864b4ff6b794c3dd73ee78ffd79a5d05e53970fa57f433bf54bf4a71a429b55b16caeebb673a62e28e84a16eb51b95346453e51a979922010065829e7aca344516c513777babb5938ecdcc63adbf67f67a9ddb5d3104f0c8e6000302533a063852bdeafb3c1223a6a3e9a304a797328b42a848ba5f3b62bf5744c8d493190838bdaf66706765433b84d"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x18c}, 0x1, 0x0, 0x0, 0x814}, 0x4801) r3 = socket$inet(0x2, 0x5, 0x5) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0xcb, "fba482244fe506d4086012699b8dbc18fa55d398338309ddb65420a3d256c7116f05e0ec813782e0546f8d805ea8a691f744960b3fffc4a0ac492e7cc408c75f8c88bf6225eedba2c58da83e17ac21bee3e7fcd6d031eb1cb85aa9d222c0f15311081ec3214912cb3e2f326d5bfb31944fb6888cb078f678af0742eed75502597b4e0582ad1b3f8885213a4f3e1126b99abded82019feac9ab705284ddbb44beeb41856d75e87360d3a6c08da379e4f09556feae945bca087d1fdb51a57f7c07eff2eda83749fec4578529"}, &(0x7f0000000480)=0xd3) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0)={r4, 0x6}, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000500)={"d597908a936cdf0590c73f18e4bf0a6a", 0x0, 0x0, {0x9492, 0x800}, {0xa0, 0x1}, 0x8, [0x82, 0x80000001, 0x7, 0x10000, 0x0, 0xe, 0xb275, 0xfffffffffffffff8, 0xe, 0x2, 0x1, 0x6a9, 0x10, 0x5, 0x1ac3, 0x9]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000600)={{r1}, r5, 0x14, @unused=[0xff75, 0xf3, 0xfffffffffffff801, 0xffff], @subvolid=0x8}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000001640)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x7, 'lo\x00'}) socket$pptp(0x18, 0x1, 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001780)={0x3, &(0x7f0000001740)=[{0x1ff, 0x5, 0x40}, {0x2, 0x4, 0x3}, {0x2, 0xc, 0x8}]}) ioctl$F2FS_IOC_DEFRAGMENT(r8, 0xc010f508, &(0x7f00000017c0)={0x3, 0x80000001}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001800)={r4, 0x2, 0x9d6}, &(0x7f0000001840)=0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000001a80)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a40)={&(0x7f00000018c0)={0x144, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1a}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}]}, @NFQA_CT={0x4c, 0xb, 0x0, 0x1, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x9, 0x3}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x4}]}}]}, @NFQA_EXP={0xb8, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8001}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x20040090) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000001b40)={r10, 0x3b, "837c653b7d3751bcbb2af9a05814f525c63ecebfdac1620524d3d374b8b2a703dd3a2c8d7a9fb3493cee98018dfaab258859ced98e875eccdfe4d4"}, &(0x7f0000001bc0)=0x43) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000001c00)={r12, 0x6, 0x7, [0x1, 0x18, 0x3, 0x7, 0x3, 0xfc01, 0xda]}, 0x16) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000010}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x38, 0x17, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) pread64(r6, &(0x7f0000001d40)=""/96, 0x60, 0x7f) socket$nl_audit(0x10, 0x3, 0x9) r13 = socket$unix(0x1, 0x2, 0x0) connect$unix(r13, &(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 1m30.100673702s ago: executing program 33 (id=902): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x145000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x18c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0x6d, 0x7, 0x1, 0x0, "b8b881d4eacd0997d93e7dc924692bf0594aa5f3346861abc6d69075658bfa5d7742529c01d27ab4951e1a6a46df9e56dc7de6c5e5b03d9887342bde21904d4e31cca1967fffe535cb9c6ea9ff9664ce3c1a16f757ab6cbe508bae609f126fcc21e85af1356a26fe63"}, @NFTA_RULE_USERDATA={0xa8, 0x7, 0x1, 0x0, "05c55701e645fd27c44a32c328b07ea369c9d5178e6df3840e075864b4ff6b794c3dd73ee78ffd79a5d05e53970fa57f433bf54bf4a71a429b55b16caeebb673a62e28e84a16eb51b95346453e51a979922010065829e7aca344516c513777babb5938ecdcc63adbf67f67a9ddb5d3104f0c8e6000302533a063852bdeafb3c1223a6a3e9a304a797328b42a848ba5f3b62bf5744c8d493190838bdaf66706765433b84d"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x18c}, 0x1, 0x0, 0x0, 0x814}, 0x4801) r3 = socket$inet(0x2, 0x5, 0x5) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0xcb, "fba482244fe506d4086012699b8dbc18fa55d398338309ddb65420a3d256c7116f05e0ec813782e0546f8d805ea8a691f744960b3fffc4a0ac492e7cc408c75f8c88bf6225eedba2c58da83e17ac21bee3e7fcd6d031eb1cb85aa9d222c0f15311081ec3214912cb3e2f326d5bfb31944fb6888cb078f678af0742eed75502597b4e0582ad1b3f8885213a4f3e1126b99abded82019feac9ab705284ddbb44beeb41856d75e87360d3a6c08da379e4f09556feae945bca087d1fdb51a57f7c07eff2eda83749fec4578529"}, &(0x7f0000000480)=0xd3) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0)={r4, 0x6}, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000500)={"d597908a936cdf0590c73f18e4bf0a6a", 0x0, 0x0, {0x9492, 0x800}, {0xa0, 0x1}, 0x8, [0x82, 0x80000001, 0x7, 0x10000, 0x0, 0xe, 0xb275, 0xfffffffffffffff8, 0xe, 0x2, 0x1, 0x6a9, 0x10, 0x5, 0x1ac3, 0x9]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000600)={{r1}, r5, 0x14, @unused=[0xff75, 0xf3, 0xfffffffffffff801, 0xffff], @subvolid=0x8}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000001640)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x7, 'lo\x00'}) socket$pptp(0x18, 0x1, 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001780)={0x3, &(0x7f0000001740)=[{0x1ff, 0x5, 0x40}, {0x2, 0x4, 0x3}, {0x2, 0xc, 0x8}]}) ioctl$F2FS_IOC_DEFRAGMENT(r8, 0xc010f508, &(0x7f00000017c0)={0x3, 0x80000001}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001800)={r4, 0x2, 0x9d6}, &(0x7f0000001840)=0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000001a80)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a40)={&(0x7f00000018c0)={0x144, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1a}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}]}, @NFQA_CT={0x4c, 0xb, 0x0, 0x1, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x9, 0x3}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x4}]}}]}, @NFQA_EXP={0xb8, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8001}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x20040090) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000001b40)={r10, 0x3b, "837c653b7d3751bcbb2af9a05814f525c63ecebfdac1620524d3d374b8b2a703dd3a2c8d7a9fb3493cee98018dfaab258859ced98e875eccdfe4d4"}, &(0x7f0000001bc0)=0x43) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000001c00)={r12, 0x6, 0x7, [0x1, 0x18, 0x3, 0x7, 0x3, 0xfc01, 0xda]}, 0x16) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000010}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x38, 0x17, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) pread64(r6, &(0x7f0000001d40)=""/96, 0x60, 0x7f) socket$nl_audit(0x10, 0x3, 0x9) r13 = socket$unix(0x1, 0x2, 0x0) connect$unix(r13, &(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 1m19.676717635s ago: executing program 34 (id=881): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a2401000000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000018c0), 0x80082) write$binfmt_misc(r3, &(0x7f0000002280)="3e1a309b0dfcbabac11693177e58e396523e92a59a810d6165408188ac31a24f23b5eb", 0x23) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r1, 0x3, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000001) r8 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, &(0x7f0000000400)={0x14, &(0x7f00000003c0)={0x40, 0xa, 0x22, {0x22, 0x5, "5c341b617778384362b092c15d0049a7a68e666d9b1541d5e6b0c6becc7bcf80"}}, &(0x7f0000000480)={0x0, 0x3, 0x4e, @string={0x4e, 0x3, "02d83b69b193e1da1fb9837c33a235f4d490ef7ac5eb4424c300f26ae44490f415a8f30dcdd7dbbe0cacfcc24146558faf2c3df576331be83d5ea8e849c41295550a2d1d2ed88090855b8782"}}}, &(0x7f0000000700)={0x34, &(0x7f0000000500)={0x20, 0x9, 0x23, "4deff9f713fb0447dff1b51530417aed7320be464ebcf1535d20bc034fc77d886e13c9"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000680)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000006c0)={0xc0, 0xa2, 0x2f, "1ddef6e2791ad1658786dcd88bbd8725ba60fc6e3db65e7d06b587ac58c09553ead3c7287f69db14e53d530a59a15f"}}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 14.258716272s ago: executing program 5 (id=1174): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2) 13.919157953s ago: executing program 5 (id=1178): bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f000000cffc)=0x1, 0x7, 0x4, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x1, 0x5, 0x0, 0x0, &(0x7f00000001c0)=0x2, 0x3000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x802, 0x6b929545a606890f) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESHEX=r1]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000007e9161590017000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) 12.799922576s ago: executing program 5 (id=1182): socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) timer_create(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0), 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="2d5a8bfaec0503d4ee82255ccc79459d336c02f6846ffa083727a27fef8e41f33ff61428dc81376619b5746876cab40bea6b76e7a18d9f0f45c5f33c3f3e548879927a89cca1b9829ff887d45cae3a0012b8eec038b982c41410eb0cffe4204a0387ae9ad2d2eb6f904feaea4325a355611cfdb7ac6c3495a4bcfa6a2c3285bf50ca4a25c77f383bdb14c2f038ba311fefcbe3d334550fb18a5f462cec0e41bf00e3ef37c78bb0086cbdc72b561eb2e285a15002dbb8b7a858d33bdfef916ce90eca18739db369eb9aa302efdba714da8bbd0baaeb55eb585585542cdfe62755b7dd303c01c44de59f83de2b9edf1e60279b16bc7ee4c277e23701b7d58fdad36e8d91c111be46581f230b4cbbe8b9ad764cd3e067d7b7c5e1082a55c86f7cbc77e049085b2749b2ead86b176e4c8d2498a331f1118c5ed72ab0fc4228c8214e0e48fd1f265ccfd3311eff1f9548d1217c02de43ebc6c896afbf6065592ce3bafbc138524c4ffa429c33265cc8ebfc69e1adf360f97ec2edbab35cdc965dfadfa522a591734e25f91a44023ceeaac091534ec097d7a6f9a8efe84829719e41c101ee103c7b8c6d7fb630da2ffdd692d13e9212539b8484ea7fbccc74ecd6b44e08852505badf79984da7ffd06e78b05b453e89bbeb44fb0e72d527ee63aee52eebf2e4049705c41ead90017d7a512146287226941b20b4a603d1f5d9e6c559d55c5f6de7e9159e121dbbabdcdae8f359f66c218fb24d20c3b56ca3b4a2639b4b54e0775f29c731a3fd33331a76c280df2bea7fb0778648bc55257c42cb1a4ae173a21e33a782943d733e570595aea49f391ced7df117548032f44d611d1fcafe7c08fcca48ef9bb719d41c2cde9eca1727feb7bcc14757316a3fb315eb0adf3b60f5d6cfe231e4dca32f1cd2a74a68e44b1c09471f135d6abf0d7d417a42323923ced88d39902998a177bda4d7ac9e5479f0ae49f5fe51818fa13dd9131d219658ed2de42587f415396aa610998f2b166a053cd272ef751e5447122c03f33800268f63503a237fd62235c65fa995ced4facfc61959a7b64f7ef4bced8cbc10222a18aaee1fcc282163cafc4bf899a7de76ac61499fa1bdf6e6599a9b6e46d202230ee0be421b38ba66b85c7e5cb73e26085f8b62b4141f8728515f12019e1738bc5b278074c56be74033511b21e97a727c8a5f9c186af9777574f52d957082122dcadefe3c376f73a33e41094ad7cd404b50e963a200b57cbf4329e59c5b5a42f8700613e30af94109d5562262792e77df91e7e75c40080f8ca071449bc999762d483c30a4eee68e89be2d138a4b64af3c0211c3540227d85801dc16d1bb669a16b243fa98ef40edb5b5fe05c50f8702434c4d2663e874aec996463c6d946fd1391096b02198e88f5e568300d6c4848b4fe7273af633cc6fbf6a5e37feea56cfc20a0b42a5c6266c805823bac41f8d4eb43c6c4673a4b6a8dd303fe922ade7af649cb21c2919390a9ee62a08131ea21840adc9cc023e2aab908ea6bf2d41e52918ed6423677933cd1729cfda6423e540aae3f043a1296b6eb9350d38e07abed7d1ea7249b1b67d17322050d01589c9787f4e5a904c5cfb25e047f3e46de5222121c2af122bd3a3b2b0f35ea0a81d3a862d77217e992cc74f678617223cad5ba21afdc58e6af17e7b4ee3a506f34069d2931ac62d47f86f1983d7204a32544ae0b738cd5ab3efb940ad752ebbb59cd28d98cd6e0441f020ab2d68cbe90fa44be7f7191c2f5748c418dde668ee87d579baed4358b5c47e03a89ddb98fd4209fda85a277460ca20cc6de67c0f35e39d3fcfc070530140f648b50dbd3236d8e5b5e63be12191cd67b9ef128440d8794dc452b5a16f250c9e378d52b1132efc4b1ec8a7a3fd04ef82154de056ee5054fb15dff8df06bdca1dc8b1c1d4175c967445105954d10f0fc94acf39b68105d188593584333312eb6fad6371cdbbbf16e88bed86600d9dac851661dd3cc64f9bac0b2b81ad2564274b5bcc040f065f3fc055f7e254f8954304140782b9a2390bb61fd82d7a99ddf96468f3ef43113b767552969d71190265b76c1358c4e16a21ff959631a19c6f5a686b7884d75aca2810decbfd9fe0520f3b322a80838a2e633e1c2a79df01786f605750b84e2b04b7204ca6022973fca4ab0c8c67caee2349a6b839aa6bebc862f2f8246fc293e0f14a375581036becf081e4fd6b0cc2f7465fe7f932890884794215838558c0ae6de81efd624c5290bdf52e95e4d5b1eaf280d76eb0ceddf438bcf1d4b83e8eec3aaacbd7ea0421ac84f08a480ae48edb7c23c3f94dc59a44b3c5712800789fa3b2b938bed137505d2b247a4c4a9bd5ceddb900cb9a502d10dbd620a7ef84fbf49081d52419e5d08ddd5a1873f6d3ea6a822400ffdad29899bfaf73ce3d8ff182b3ca8ef1c39fc34b93767b9a13401427c440edd2e5f801655e60dc4c5b4ba84e504421b758e0b4c743fd1a1b6be27702e751960b431f1d7a7fd68a9ab198a5c6dbbee137283e6d6c69eedba5345e551e4421f3dfc1c957bbf413c48f64871521789487707278c69eb71c33a6999d7e497dc3d7d022f008addc112c116637f6d29c9247de134eb860cd3e5af369ee474883e7a20c40ba02160ec19dcb717cd3f4f3f0293195242fa814042ad751c774728a797a8c483e0562a2cca698053c1b66c0310affdb6e5767ab6db583ac415119f1760bed5f405c5cfb63b2ccfd5dc9d119fc82a86f98551d92f02410fdddd450f0a661ce041fa39aaba50cda470d3080dec7345a54abe2a7630a7fac84bf95c30a0dff1225f7b1aebb41daec68ceff2b0f502e7433f395aeea75c1ba88229b44fa5c6fa2647e44db139eca1f2b7142b6c23d4879603bb5617e94de0d5353d1b17dfb960eb1c11c67d0d1e1cae94699cc9397b79150dacbbc7361261d5445f237210d2ab8120fe721072394b77df46894595b8fd56f034318e90e3cad94f1655911b9bcc0bd15c628c0248e134295f3ff69cf8ea536b4b7a6c11b4e04955f9f1d9bac2ad39d81ec929b0d29999ae5a865bcc2cffc8fb42af6e486ca12a4c83461c6a72b3c88e4f3d1a9c1f13adc6defbf0110746e39b1d01a5129f996a2af48bc52f06a32764d8d8dd984c5dc4e8bca0ffbbc7e4cd226cc278b35ed16bed6e8aca4a1c18120eef0966dd5327f252462477d43cbd1497654ddd3358d24883d9ddde40f1bc8c5610370841b1cb13e84162cc6d0818987350c22362b12c0f315dbc5dbc33c224bf8d57410f2621b9c45d6857b0bed5aae750db0dd4c6cf50bfd6d5e0c816a9d8951402a1c50ad8169fd94427b42c58399c6d72b1f213e009af4f650e5ef67d2f48c7dc3ef74a8ee453ab84118f2f0e4ff2b8130169ccac37198b337205cae506e8d70acba86aab28caa8117b1231d9c4b631fa3aeceb3c236182e25299392f1ed986106071097314a9b9bd0f30d853e8b4044c00f04b45b2923b572a6a41cb5293cc8dfdbeff56a1375a33bac7b220056a6f6a292035b17a3c3fd55897548c68ad7886ef432cef353da3da8deaea09df078569c042258dfc0763d54be89302b11a6d24f4086028b82520fb6d967b78b611a7e9661a92b1a8f12d407d2289e85a82bd0b7c742055acd2396ba8d101e91ce2e9f387e909fe6da3109e1937b1e12515f23c8f1b739d4c40a287cae3bf59e901fff2ba0de0a36a304428e9febe42a01dea2eacae9416a72ddabb98d2e69c70ea9edfc57cd81fc4217ec353caf01a1a61b925102f866b4090b6447cfd8eeff2a3a49e30fe0a4fff77fe1a225dbdb2fac338526c7438631b69ead8781b86801f530b04b1544be2c22aff4ac89b0ce4353526905e59e18f7f01c221e42354a5269e0e28afa29f38bcab3923fe8d64fbf81433991b0bb9df6fc4c28ba175871d87bb5ce6cf5bf4572bb873c044f0aeb2981e34a005df55d354db0353f6433f76adde2c124793a1da43aca0e62a744992ed8efa8571a26857aa65a21cfc3507471ab75525cedb559c430b5d03a5c4e923f7fbec50d0eb10fc40b3d7986245f4c6888a53df7fe7fdcc11261e70d8cca04baff938f8446bd9048baba31085f20746c5f0e00d816dca934804ea2877cca51b5c0e31dfeefb9e91e41189d67412a09af16b4cb709e6fee71b2766a71c8397578516b656633bb620dfc8bc15de4ea5f75f6845ea44805442125adef9377e98b5d8e73f3a0bfbd330467daf10d9f7a95cd6fd4827fa1b062898fa454437bf185b9e0d98c9d10a5db80364bca446205739b23a1e7e860647ed30e2b72524da94a5f70dcbcd67d8df08f0d57583011d5487669c5a45905125186590322dbe481e820a6a6c29c136fa4301ade06baddca45f0d5ce913b5b763d293da4afaa450b17ff4933e4478fbba9ad9e6e5eafe9fdeb82b7d65bc92f6690d03a49923810558b5e0f5bf47e7d000a5e132217c174445565d57d29f02e71d7205b8ec10330fea51d972fc5c81b1b36775816082f979b5b1fe3601c9c8e8fa0c3504bfa30e3603d5a0f3a7cbd27d744b27cdbf318acbed70697519605453df106123e1a6148c9146154986e288d8a70b6fed1667cc1e0b199067c704a6d41ba751b53102ebca01b3ce90226847808646c95f3eb231b6af0b0f329bd997db5a4d3ff18edf0203e351fcfa8c8ae2be6953472bbb3f40bb6ab3f8f2128d11a3bba133f0204e2e0df189cc8d2cb8af81d0941a37c2165112ed452008930bcc607fa6fe3ad1def902d89c7330e6042f6f86c3a75665ec603b6e392b417a0d907d42e6534db72adbad4266c6601d7b8bf8d9cde807088f76b07c06840d0806eb89aa545292284bf050e732e547ed54417b3ec7e7a7c5e8454a56f5092ea8cb27e74e0672c2951647e29dadbdea86d2a4d9e53ab01c9d21e902fc9c6ff4c317b3c0398561364e880e2b079d79a27d6dcc3d586abc043477981bd36746f5570840536bef104a158e2461296717d247b6004565ffb8eb9bb5258c65032f0b472c4f3667a17e3ff65b45c91e2411b5990f054e0c2a05fc175d2db7fb32ca32e4c11b46f08bae1614e2add96133ab383c1e78f4e3f21ed3010a35c76ad88714b526d3a5ba799e6f7bf9d5696e7b42c8c264162a28831baaef180f40489ad681af6c0a674cc7b65e8b8ab704d15546f70ed1e67f7643bbc8d0b8482024b8f320b5bdccb1014f5e1a34c6c795428660f026d93dd5dcabf2330dc62894bfe48fde6b931ba55dc2a222a27a3906ba5b98476321b6d27217fd58ad93b616aac91b139729d91de6f8ef49402e2741b8dd821f4cbaf7c4662ac782b255dc438164e54c417044e9bf5e13a8247777726dacea4341d8ba03bad17070dd0f07da13179d29ac00aefa41aaf4688e99eb395205f6d6d71999b3718f7f2d618117334977a92b15ed52e45e7d5df7a22be9cf0e008c41257d99b2426068c48de100b8e3019b624ce2f2849c35b74fe5ecc4478b2968a97cfcb759fc73c8cd21bda084646dadee926a4f606768749a89e11be2a23985631c922a73ba93f3619dcc4621c8da57697420859210aa43ec06feb649b9f1362fe9553f9d552b77203085d9a4da629f03fbf339bd8ccae6c411f6d8f131232575d28af2a2690529080f02a5a74fe59d1255039f09b8d565a4838930f88d6129389f2312a2ebcf0fe7d8b6dea3484cea9a1628349218b8ccefdea2b6c37676acc2a082fb73b19705e98079c1de7776cb830e79c0081a2da4059714f19587d10223fc50ea8434f1c7919a77acd7c5b20ac9fe8ad9d348e2c5bdb57fac1ec0c31a1688e22aab4f1a81826f3a47bd364505d35975c105a152aa8e42b2422a100ad3d3184d286884552143051b79294aba34bfc5cc332f0b6aa3bf186776ceb8861336ed97b85b9a7d548bf7b7a907256c7c6a2427d92aff68ba18544b95a75564029387fd2569943f8d54e64cc621123105eb56bcfaea06e38af31a05ef38302d2b6178121d52309865c5ec1147159c07b4d4e1ece24f6a1f63a492c617870c96dcabf43b73055d749e465cdbb965b18091eee65bd423f249d934ae904c2129b93d116353fe014e1afbcab5f74766a806451855bc28494653b9a863b9707c2a0fce3eb4b55c4220078651a94d3b9c6e92f4995dd56ec17d144b07bfb1b955b557d14774e64f400e0075781381b33d73a60f6b96cddbda0962b2a609e6bca56a109847bc13798be711d3779d5a8c6541bd247fe3b7477a1378cdafece044db3f31810bc95f8fb4ae7a8815303faac03651a13924308c06c8e86506b7d186a717a1bda1d7cdea2b8b682d37f954f488a8e0d65f868a81b1af4b8f7331ba84414a7ada82e81e06e76ddfa0aca0ca9a53a5de0bcdcbb77284bab522ffb6f803e95f116ac1670c50acd36d80f170e8e7e05163f050dc89dd93bf9160a545174472376e1fcbb945e9294f796a09ca78452683b8bd39049d118acc24ef0dc18ef88899dd7c27a3585e914e6f6bc8bb1950c061c722134243cf151785bc19dada45b90d97cb83bc60885a908d0c13be9e54f1929fe1f76fb9886808caf0442aca4539a42078bfee82418d611f4c432fcbc5242c35a396c17c1b93b98b277a9c8ef0143643e120c0de4b7c6beb0a582789b81a9d3a0b8f96a332c89764283d84ec5e6b8350683a2b4eebcb214a7ad430ff9ebcfc1d850717a8d38b8e35e67fea4b8f14938cc3eeacbee30616c09e848ebae3cefb8f2a904f2b3d1252019ec914278942d9b914f95574031cf21f412aa7500f3955db7b9ef9403750058d75e53d16803d4463f7884df1e361d34ce646e20b3427a45cd307283f1ff00cca6c841fb9b06543bf1a254b21ff421331facb2f08a484904ea25e049597c8b0a2140e8ed2906d574e73165ec5591c89b5dc08e5943ff7399f76b1df90947a9479b1aab40abf8ebadfa1455b6dcac672f495a64b6230fd3fe948ce6c16cb87e11ac7affc9047ef33fa64585c1dce3bab4fecc0c7d81b5ea73aed3ef63fafc880b6e2ba09d0df6d626e817075d5f330d91cec4bcf4829c20192bc0ef7f728f52dd3e074bafda4f8cd8465311a9124baad61bd73ca76a0d0d1b80cb7a5e429067ed4707b64d38613008c8af3ffcedfeb8cda26def8bef7cf947af23939d18adbf56715f90c2df716eb037d536cd36bc2b832c57f4a319f392e1ab37e02dfb392bd52b02801665c8ea28edfcb153f267dcfbd671d4eaa0d56335f7ce5eccda6b9f74621a1b322f1f3a60b00196a65327b36419394e776b2e1c1479f5f902c5918adfa5b112bfaf786eeea1abae7c8c9d3e3fe737c23092143376808b5e26cf896fb5202572533facacaac10ec26cab819f74cd372c95d50a9b6560da69c1b22d5c15759b7ab1d8118e672bea9af7e8a30458ccaa1586ed2720d5465e139fe3dfc0bc95107061471cdf28a42aa8149848a147a1710407021d13e611b36ad3624de35c4dc5a02ba8ae724b2d8cd85f15094e1893c98052cee135d0c1c11a73297775fb517abbb471a8b100cb51d8815acac16703b56f8aadae334601a84fc306efa08aeb2afbad94632b5f209603cf5e5ca634bd74ed2e525580ddd2f2ee65241788f5e867b44d7ecd71f5858d269ffda98d93860d8f1c26c47df1199f95991b54808bc26c0ab67b40745b8dfed41838e2c5594413d2c6022abe3c1f132e9f7c8c69e50729325d37e7502519d53d7e1bf0bc8f62d216fc9c88b197cfa1571ce8368cc1b4b625559cab7e8397c6c7bf537bc8b9d604f4bdb04cab86d349e4a33f92eaa07378eac07ed8d51aea9c15ef4c4b0e0a16f9c794701a1b74b58beb15cc165a4dc1a13a0886f55cba2b977447b61c01e1295a4221e19321201f1df0d25c9e14bc4433678e48a5081de7c81f79a6370843bf0d6e3e5192c1ddc0bad14a11ada8006e4f6549da3a877a991351610eb0c5bb6228d266baa27eab2b9bf4455fc54aed3c74c12590835e498c11efdc63dde52a62d8f3a3c978152018182b3e4cbd00fff317d06f8e9475b4c7506dcc5547d8ace2b71024aa0e2220936d2bd05163b8f15bc429378fec52ac39d167200758884056dc14d3329b1d47f477a217eabb651fa97e05451cd6e861996648ab439c9aa6fa032e9083b8c0f87890c88c50dd5a6e6be8c4a4361f3b4c3181c570407dd1d2d835a87dd4b24f55a649c3e478bc002f30894d06411dc4dd8277f796976b8b2884ed371013225bbd95955827741331777da30b1b3370fb4d0bb914d97660f7e06759ba54b5697a4f7cfb67035867f39e53306eb55b31ba660769ce6993b2f44a7173576766ed20992d04e6b4aff20c138102537a142ceeac3804fb0a4eaddeddb6bcc69007c5531f0ba6851854d8d836a51e8d644c7b79e071f19986090d2404b562a17e1ec1da775c171373bcf5d2c3d7dd64a587d66e42b6963d892df898766648f37c8d10ca249e28368c388f4e70a80b2992a0a390a2d51a17a0c1774fec2d399a2b0a99c802012fff6300c4275d1305b9a9d0f8144df64da9016f16369e813dafc7cff55c5a60602141fcaa62d9fc0b93df6524d8692be3c7ded5354b63014686e98ef2b5947eda93e0cd232d3fdea943d3bc92a6f2835c55aca33dcd087b7260bc68def6ce96ef5d536b61006a595219382d8b8365eb92eab44e677109971bc4dfd077a56ff1f27e9b80edffb5ecac7bde5dc2a74c30a24b9cd1b0d4356ec424350e364d0dc929d657a8626a22111d4a0f360fe33be72a1f2c4f5c1b9843145ddff70d583a9b433cab33b10d93531aab7bb8a53c738aae79222481b135eca9441f47068299deabdc9c4f77e5d4ea286e8300eb5956368d0499691dbab1499baef30bb6c4a9bb0159635dc1774203fda828bf804e8f526ffb55abd8700915232964b7f219a7bb221efa6428089263ab753eb421a1952bc780289a85ebb9b510dec67a826ccce1cdfbb29a3a55f4e1068ca2c077544efac686d77c67c927430c3ac78c7c8b1f834be9a689fdab38f1401797dba32a284f5c5f9ed13d34d8a001cfeeeb7de12aaeae7706004f96a293e52106fd945428e7e98915070b1584a323bd8f00b9803ce189c9c0af032752d979df57a5098458c7de034db79f43d27bcb720078b05e5f364f2d789343fb6fc8b2cab810b1745fa36aaccf5d27fc7f06ab821268d83e697870632814319533373f24584b35b2ba9dd9b52a4a2e559c90b1b87549530a64fdbba5587242535fd0d600fa6e8497369a5587627182c62da4a47bc6ea99f7aaa765e3b74b7d9c48e779c8b13a2535d03ef8ac4bf3fc9e6eda5628034e7e453fbd6153b8b8e9f693c5dfa37f6a0a2542e6f86ebd2ae926822d7b31963c8879557dfa2a869ba3c5dc2dfcb60bc0a0c9816c2c4c58bdc09c2d76a007e68c38fd8b88709e5c49341630e333e13413c3e60c0d768d4c98bcb297e819ceb0f8b229d3037ac95639344bf42ee7f77922a6ac039837356dfd7c0ba3c5393548369bd71b4824326eaeb80a9c249504a08bfc164af220047cdf054d928a8d929a2fb621665122062dbd5cdde82b8289e0d510246e0bc30d34d8e96703f75c75328f99437be474315d8cb55066badbc0ee852c8ef28e1de7f5b58dda97742db5f708c6be3279d700ba147f1519485020336c260d825920870739fdb288f22b980fb7bcbf147b1a95fcc3d8d1899749d928eea8d47cccc1fbbdd5729a3f2f73d2ae352eb3e043405bcb7fa12b2a80d6a3f0178a18cbc5794fd65f0caddaff57616dfed94884a48b27b181c55200d9ecdfbb082dcd2952089938e134eecb40c2f95cb7808fc7da09282787edb1939e75bc8e284c01239a895246be025c8e0168ae83f5adc62f4f81ddbf6ba9b5fce3ddd111eb61c42777a8c303abe291aa9ef383ef1d6c26c4f8698375cc76a7e078ac948f2e84de084fdb380d38d2e1810ce8118999554c06f8d583bd37003b407dd7b41a3b14f10a5ae7c2e8fdd087cc322ddc399fe38cc542bc957b38b0fda34a3ee5c6a97d25629d26a75de211fe1cc4ca63880caa8f85f3bd489c39cf30eac81784e4456a775dee3045df2a1875623a4fbf227cf90cd237721a6dff29d26a16306e4033cc644e35cba3cc4e45cfd0cefc9c8d8a0f35bf31a8319b54fb549554c7089b9334a9867d51d71aae1f342d5602ef2d394e6c8a8aa6c15121d8c8b3abe3416367dcc276c048c65311ad70df0ecf0cf817a1a27e1dc50fedea83de8a8bb7746e23be2f335c9cda9a7f08d72b9debc35d49e9ec4c9815040c38c11375dd7f2897b20479343b86b51c317e0e90f9465d8c425857e1831931714284c60f68036134304558e53d2d42813a42a3017ab21feab6132f3a2f8c5670a1076dab6136cd6836b52d7ee54639758085438831dcd8157ccae47784a35364babff9299e4eaa389931199b4901f12185a0d228473d4a147d88e55bd11f8ed2957b7f2f3efb3e444f0aec9bef1f68cffbdac04698cc277706f2ffdd263586b84c645f1721ee3008b398918fdfb9b06b98078447c0edd7c058524825a1124e9af37fa9cb77302aded60eca394c866397c3bc18f8277d9277921abd06b61b1445f43cd7f0b5b2c023832f6d67f86d9b6ff9985edee1ec2572486b43d3be834d5b60d208b1187ca7cc8b17133f55314ee640268d5337d7dcdf1742cb543d63ae3c09e312ac05b5d585d9437bf16bd560ef739f12c878178757e1f675a8671becae2bf03f87de4bc40b4b7a3aa6e2f28f015332b10b9fe426ebd45d7a26e769bb05eb2866bb34c56b079a5bd23352bcb08c379b400512b0d8438ee5371171ccbf2921c1e150fffb5885286f933f4393088ba21c47b15d1a35de27dbd02e58859aa080f87d0a857e92d0f52c549c04cd9368c94a8024e184773cb3431d854c2855e93ac9f24d5e45d11c2acfb03755e7f279b368e2e31b3653a7d7e2e102ac67f363c195272e2896bec544f669f2d25ae8638ac30da6ed52404b32b8ee9f0f2909ef6b4e2db3a6ea88b8a6f2f2c025959efb7b94005eb307aae01af8a19ee6178270be09d93837793b43bcdab98b9c04b6bfea7ac2217c11aeec277bc199b67ac24b7352299e7fec85aa151029d14441b56bb6031cdc72a1a90ef537c6d2bce7ffc7c366a88f8bc87cd8ef4e91b5ad9d85ed84f9b85f029252ad5ff13d564d842ef310feaba90974e40889e7cb753eb44ef96bc4c25b021fe50e9957a9c3cc9904aa920fc8a8e82a826b945559b57591fa1a26c380afe65d930f9bd9a3d93f57324d28c2741e728cbd106dccdf66863e49db8a0df1398ba8594fa5102b8157e4b987f4339820df5a7aa2b1c47ed0211437ee3d81dcbffa500dc4b743d49028581234c7e9db2e951d5bf3e3c448ce58bf94a2f7ef95eda07daae00bef1794d27330927b2460778fdee580efe431ee244aae452cd60100b6c9f0cd5e79e170a7b149abfcc26b77d33c35311c95e3ba0752eabce3d1310a8aa45ecd1659e4e855919d153ebeb434581a6d352508771b030acd3fee51badf6767a7931bbba2cf195bd98fd096a6be14d7172cf1dbe3a82bae73a29223c623c090cbc5fffe8f3291", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000), 0x2480, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="1895d434180000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018430000080000000000000000000000850000003300000004178100090000008510000004000000186a00001000000000000000ffffff7f9500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[r4, r4, r4, r3, r4], &(0x7f00000003c0)=[{0x3, 0x5, 0x2, 0x6}, {0x4, 0x7, 0x1, 0x8}, {0x1, 0x5, 0xe, 0x7}, {0x5, 0x5, 0xf, 0x3}, {0x5, 0x5, 0xe, 0xa}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, 0x0, &(0x7f0000000040)=r5}, 0x20) r6 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) (async) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) 11.621613175s ago: executing program 5 (id=1186): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000157, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000040c2e7c042dcd30304001f0004001f80080004800400658000"/48], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000240)='anon_inodefs\x00', 0x0) fsmount(r4, 0x0, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x400000) 7.555392729s ago: executing program 5 (id=1196): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002f99cf110e10690a1d5030102f601090212002a0181000909041b", @ANYRESDEC=0x0], 0x0) 6.205979674s ago: executing program 1 (id=1200): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000003af3850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x4) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000480)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.181413163s ago: executing program 3 (id=1201): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r1 = memfd_create(&(0x7f0000000400)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x2) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r2 = landlock_create_ruleset(&(0x7f00000003c0)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) r4 = socket$alg(0x26, 0x5, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000040)) bind$alg(r4, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22602, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') (async) memfd_create(&(0x7f0000000400)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x2) (async) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) landlock_create_ruleset(&(0x7f00000003c0)={0x0, 0x3, 0x3}, 0x18, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) readlinkat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) (async) socket$alg(0x26, 0x5, 0x0) (async) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000040)) (async) bind$alg(r4, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22602, 0x0) (async) 5.825918621s ago: executing program 3 (id=1203): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES8, @ANYRES32, @ANYRES64], 0x0, 0x0}) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x0, 0xa9bc}, &(0x7f0000000140)) 5.741798087s ago: executing program 6 (id=1204): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000005400)=ANY=[@ANYBLOB="18000000000010000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x50}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000), 0x2) timerfd_create(0x3, 0x80800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406c256e0000000000000109022400010000000009042000010300220009210000000122030009058103"], 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000043c0)=ANY=[@ANYBLOB="400000001f0021072cbd7000fcdbdf25fe880000000000000000000000000001000004d208643c00000000000000100000000000000000000800000006350000"], 0x40}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x1, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004800) pread64(0xffffffffffffffff, 0x0, 0x0, 0x41e) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$loop(0x0, 0xd5, 0x400) ioctl$LOOP_SET_STATUS(r6, 0x4c02, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000000000080"], 0x0}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600894f0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) 5.443305272s ago: executing program 7 (id=1205): bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f000000cffc)=0x1, 0x7, 0x4, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x1, 0x5, 0x0, 0x0, &(0x7f00000001c0)=0x2, 0x3000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x802, 0x6b929545a606890f) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESHEX=r1]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000007e9161590017000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777d"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) 5.228885721s ago: executing program 1 (id=1206): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf889077c111c77030761c0f5d6baccf58dd38bdc0889b556691", 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e7760112d01b2746540dc8a0e9087bde26b530a321fd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d923eaffee045993ff1eb3757b9ec29b8416714cab16f748d946c85b66802f01", 0x8b}, {&(0x7f0000001a80)="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", 0x2dc}], 0x2}}], 0x3, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf889077c111c77030761c0f5d6baccf58dd38bdc0889b556691", 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e7760112d01b2746540dc8a0e9087bde26b530a321fd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d923eaffee045993ff1eb3757b9ec29b8416714cab16f748d946c85b66802f01", 0x8b}, {&(0x7f0000001a80)="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", 0x2dc}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x69, 0x7, {}, {0xffffffffffffffff}, 0x9, 0xfff}) getgroups(0x8, &(0x7f00000001c0)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={r1, r2, r3}, 0xc) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.137690037s ago: executing program 3 (id=1207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) (async) socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='swiotlb_bounced\x00', r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='swiotlb_bounced\x00', r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x2, 0x3, 0xf7}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r6) (async) shmdt(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) gettid() r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r8) (async) r9 = dup(r8) write$UHID_INPUT(r1, 0x0, 0x43) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400deff01010500000000000000000003000009"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400deff01010500000000000000000003000009"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f00000001c0)={0x1, 'pimreg\x00', 0x1}, 0x18) 4.405477394s ago: executing program 5 (id=1208): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac0000001e00000126bd7000fedbdf25ff020000000000000000000000000001000004d30a00ff00fc000000000000000000000000000000ff0300000000000028001a00e0000001000000000000000000000000fc000000000000000000000000000000020006071c000400feff4e224e220000ac1414bb00000000000000000000000014000e0000000000000000000200000000000000080018000700000008000c00c686000004001100c9fd28701171833a7da32be5fcff204fd650eb2c88041b92b5e8c23aed59dc2688a1a43f3148307d3bbcd4eca780071d5da6bf6eef8c92743af5157fc4c703ba52d42614834054ea2cc7048531c44836b61f8a8d6aefc5901403ede485d3915b787393ee4f757517d3dc5ba0372768b8e7f7a197ed3d080c01e11047245fbb9fb40ae0cf268b62444fe90689026ca637484c35d58c2f41e703ae30374253081abcf5dc1fcbef29ab9a07d277eaa9f7ce38f220d1ab704cbc97c93ada2ea3cccd"], 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0xe3b) fsopen(&(0x7f0000000180)='nfs4\x00', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket(0x1e, 0x4, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000000)={0xffffffff, 0x1020082}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) (async) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x48000) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x48000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r6, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000044}, 0x4008800) socket$xdp(0x2c, 0x3, 0x0) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xb8}}, 0x2004000) tee(r1, r7, 0x4, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac000000100001042bbd7000fadbb5dda6a81c61", @ANYRES32=0x0, @ANYBLOB="90010000000000008c00198005000600f600000005000600010000000b0002002d5b212c2b7b0000050006000300000014000400f744ddb59b5bd11a9f4bd1da4dd6681014000400295880046c4df35bb09473ed95e9b98b130002002f6465762f6370752f232f6d737200001400050037baa1afd9eb9f5996194b745744c57214000400fdf50a7e6f541504866adb650f753b1f"], 0xac}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRES64=r6], 0x50}}, 0x0) 4.383135651s ago: executing program 1 (id=1209): r0 = syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x20, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x10, 0x39, 0xf8, {0x7, 0x25, 0x1, 0x1, 0x2, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x7, 0x1, {0x7, 0x25, 0x1, 0x3, 0x8, 0x8}}}}}}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xa, 0x0, 0x7fffffff}]}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x25, &(0x7f00000000c0)) r6 = dup2(r2, r1) write$cgroup_pressure(r4, &(0x7f0000000100)={'full', 0x20, 0x9, 0x20, 0x9}, 0x2f) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f0000000dc0)={0x2c, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0003f0000000f0031db1fb94cb121a49b007de14874090b8846332179cba1c"], 0x0, 0x0, 0x0}, 0x0) 4.129753745s ago: executing program 7 (id=1210): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="370200007d02000005"], 0xe9) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[], 0x78) close(r5) r7 = syz_open_dev$video(&(0x7f0000000000), 0x8000, 0x0) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f0000000040)={0x7, @capture={0x0, 0x0, {0x1, 0x2a}, 0x3, 0xb7}}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r9, 0xc008af12, &(0x7f0000000480)) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000007f000000000000000000000018012000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b718b8d503000007000000850000000600000089000000110000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x18) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x18, r11, 0x801, 0x0, 0x3, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x18}}, 0x40800) 3.121609115s ago: executing program 3 (id=1211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0), 0x111}}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xacd2}], 0x1, 0x12040, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x11) 3.121018372s ago: executing program 7 (id=1212): r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000440)={0x0, 0x860c, 0x8, 0x8}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() (async) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0xb) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00'}, 0x18) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x48880}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="de"}) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x18, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, {[@window={0x3, 0x3, 0xf}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x18, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, {[@window={0x3, 0x3, 0xf}]}}}}}}}}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.280949745s ago: executing program 7 (id=1213): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000007ffffff10000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (rerun: 32) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xfffffffb, {0x2a00, 0x80010000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00f9607208100a610000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) (async, rerun: 64) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) eventfd(0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r6 = userfaultfd(0x1) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000090000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x40) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x9, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x40804) (async) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x114}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) (rerun: 64) 2.142580897s ago: executing program 3 (id=1214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x8, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x7, 0xfffffffffffffffe], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000006c0)={{0x100000, 0x4, 0xc, 0x7, 0xb, 0x35, 0x0, 0x81, 0x0, 0x7f, 0xc, 0x8}, {0xeeee8000, 0x1000, 0x7, 0x8, 0x0, 0x2, 0x2, 0x27, 0x4, 0xff, 0x8, 0x2}, {0x100000, 0x10000, 0x3, 0x5, 0x8, 0x1, 0x3, 0x9, 0x2, 0x6, 0x4, 0xff}, {0x1000, 0xeeef0000, 0xf, 0x5, 0xc, 0xa0, 0xb, 0x6d, 0x9, 0x1, 0x3, 0x82}, {0xdddd0000, 0x100000, 0xb, 0xf, 0x1, 0x9, 0xa6, 0x80, 0x5, 0x9, 0x8, 0x3}, {0xf000, 0x8000000, 0xd, 0xfe, 0x7, 0x88, 0xf, 0x4, 0x7, 0x3, 0x3, 0x8}, {0x8000000, 0xffff1000, 0x0, 0x40, 0xf7, 0x8, 0x4, 0x6, 0x3, 0x83, 0x9b, 0x4}, {0x7d46bc715e501fe, 0x100000, 0x8, 0x3, 0x2, 0x5, 0x7, 0x1c, 0x9, 0x7, 0x3, 0x5}, {0x4}, {0x100000}, 0x1, 0x0, 0x2000, 0x80, 0x3, 0x2000, 0xf000, [0x104, 0x9, 0x4f28, 0x200]}) ioctl$KVM_CAP_SYNC_REGS(r2, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.986108534s ago: executing program 7 (id=1215): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000180)={0x1, 0x5e3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x684, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f0, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000001c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB], 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x100}) syz_io_uring_setup(0x6c1, &(0x7f0000000380)={0x0, 0x5b06, 0x4000, 0x1, 0xec}, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r9, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 1.943411956s ago: executing program 6 (id=1216): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000003af3850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x4) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000480)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.801342832s ago: executing program 6 (id=1217): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0x9c, &(0x7f00000002c0)={0x0, 0x89ba, 0x80, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x880, &(0x7f0000000380)=ANY=[@ANYBLOB="736d61636b66736861743d2e2c009d632cb59f94f71a5c8e0c14f3030d1aba05652a8c4c3cb587"]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r10, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0xc, 0x40, 0xe0fd}, 0x9, 0x1, 0x0, 0xc, 0x0, 0x6}}) alarm(0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.677873632s ago: executing program 3 (id=1218): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4f2000fcc73bc57a2c4c9f7efb0b02086454726968f640046635705429f7c2fe7e9a3e5fcb06c6fd0ab00585f987fc8c653bf2039dabfce2267c73bae4f4fb27b517f4a9e3c6ba46e9a9f365365527875d5ae70d646e79eafe59fbd4b3b00542eb1792975f007bb56297c46e4c2db47f7a6855f2", @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000007e0000000c0099006d91000015000000"], 0x20}}, 0x4000054) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x29, 0xa, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000097dd6cccd22c16d1fc72b81d1d3f488862edb4834a2c3b87e5286a", @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf254b0000000600eb0005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000080) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000001800007800c00018008000140ff7fffff0c00148000000140ac1414bb0c0002800800014064010101822d2b0c4d795d95d91d01991e3070b56e00198e45bdd256bca419acba64ed"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 955.497155ms ago: executing program 6 (id=1219): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0xb, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 954.962753ms ago: executing program 6 (id=1220): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xffffff1d) fanotify_init(0x2, 0x0) 954.322457ms ago: executing program 1 (id=1221): shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x8, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a\xdd\x05\xdc\xb8\xff\xb4v\x1f\xe3\xb6)\x1dM\x1e\xf9\x97\xffLW\x82\t\xf7\xb4\xe2fP\b\n\xdd\x03\x9d&\xd2\xce0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x190, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x128, 0x190, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x2000000}}, @common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00', 0x12, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010004b04"], 0x8a}}, 0x40) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX=r3, @ANYRESDEC], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 951.959744ms ago: executing program 6 (id=1222): syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000ede84205a08090047a30102030109022d0001000000000904eb00027916fd000905010800040704970904"], 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000ede84205a08090047a30102030109022d0001000000000904eb00027916fd000905010800040704970904"], 0x0) (async) 354.70707ms ago: executing program 1 (id=1223): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="1f0000000d"], 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x100) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000007800128009000100766c616e00000000680002800c0003000000000000000000580004800c00ff0f00000000000000000c00010000000000030000000c00010001000000090000000c0001000e000000050000005fff0100c0010000030000000c000100ff070005000000000c000100666e00000900000014000300766c616e30"], 0xac}, 0x1, 0xba01}, 0x0) 270.994601ms ago: executing program 1 (id=1224): socket$tipc(0x1e, 0x5, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x83, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000936e21bdda8075e0544561d0fe177159223ea87387986578560dfc4bb8b81144db28f00cef13f6b58792008dabb99aa9ad16b5c6d020"], 0x0}, 0x0) 0s ago: executing program 7 (id=1225): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffdfffb77b, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x107, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, 0x0, 0x44044800) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x7}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x6, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0x10, &(0x7f0000000440)={&(0x7f00000003c0)=@can={{0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "309848b7acb1cadd"}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x8010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x80, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffd}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x3}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\a\x00\x00\t\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4005094) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x7, 0x71da}) kernel console output (not intermixed with test programs): valid interface number: 52 but max is 0 [ 211.062205][ T7629] veth1_vlan: entered promiscuous mode [ 211.068663][ T5917] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 211.123911][ T5917] usb 2-1: config 0 has no interface number 0 [ 211.145241][ T5917] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.184834][ T5917] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 211.204556][ T5917] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.222739][ T5917] usb 2-1: config 0 interface 52 has no altsetting 0 [ 211.233792][ T5917] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 211.243892][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 211.249564][ T7629] veth0_macvtap: entered promiscuous mode [ 211.255036][ T5917] usb 2-1: Product: syz [ 211.278846][ T5917] usb 2-1: SerialNumber: syz [ 211.295630][ T5917] usb 2-1: config 0 descriptor?? [ 211.361943][ T7629] veth1_macvtap: entered promiscuous mode [ 211.434895][ T7629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.482663][ T7629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.510736][ T7629] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.525470][ T5917] input: syz (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input12 [ 211.539930][ T7629] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.550732][ T7629] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.562771][ T7629] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.731567][ T5917] usb 2-1: USB disconnect, device number 15 [ 211.899067][ T7645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.924170][ T7645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.121397][ T7645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.132370][ T7645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.348267][ T7834] tipc: Enabling of bearer rejected, failed to enable media [ 212.967310][ T7837] netlink: 51 bytes leftover after parsing attributes in process `syz.5.462'. [ 213.058264][ T7836] usb usb8: usbfs: process 7836 (syz.5.462) did not claim interface 0 before use [ 213.589280][ T7858] sp0: Synchronizing with TNC [ 213.603680][ T7858] usb usb8: usbfs: process 7858 (syz.5.512) did not claim interface 0 before use [ 213.681759][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 215.587536][ T7876] netlink: 36 bytes leftover after parsing attributes in process `syz.3.517'. [ 215.599030][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'. [ 216.680416][ T7882] tipc: Enabling of bearer rejected, failed to enable media [ 220.244318][ T7899] usb usb8: usbfs: process 7899 (syz.1.524) did not claim interface 0 before use [ 220.291683][ T7899] usb usb8: selecting invalid altsetting 32 [ 220.965894][ T7917] fuse: Unknown parameter '0x0000000000000003' [ 221.054311][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.528'. [ 221.896925][ T7926] binder: 7922:7926 unknown command 0 [ 221.902358][ T7926] binder: 7922:7926 ioctl c0306201 200000000080 returned -22 [ 222.010531][ T5847] Bluetooth: min 0 < 6 [ 222.022801][ T7930] binder: 7922:7930 ioctl c01c64ae 2000000001c0 returned -22 [ 222.030923][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.533'. [ 222.040038][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 222.802863][ T5924] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 222.986110][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 223.008755][ T5924] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 223.037341][ T5924] usb 6-1: config 0 has no interface number 0 [ 223.079145][ T5924] usb 6-1: config 0 interface 18 has no altsetting 0 [ 223.113437][ T5924] usb 6-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=7a.1a [ 223.137760][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.307754][ T5924] usb 6-1: Product: syz [ 223.336225][ T5924] usb 6-1: Manufacturer: syz [ 223.495904][ T5924] usb 6-1: SerialNumber: syz [ 223.524399][ T5924] usb 6-1: config 0 descriptor?? [ 223.572366][ T5924] ums-sddr55 6-1:0.18: USB Mass Storage device detected [ 223.705004][ T7962] fuse: Unknown parameter '0x0000000000000003' [ 223.842981][ T5944] usb 6-1: USB disconnect, device number 2 [ 224.076366][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 225.629108][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 225.649663][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.845453][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 225.905794][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.230698][ T7995] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 227.284020][ T8000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.553'. [ 227.535126][ T8003] fuse: Unknown parameter 'fd0x0000000000000003' [ 228.475479][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 229.530317][ T8032] can0: slcan on ttyS3. [ 230.007030][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 230.051343][ T8037] libceph: resolve '400' (ret=-3): failed [ 230.246161][ T8032] can0 (unregistered): slcan off ttyS3. [ 231.740716][ T8065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.755573][ T8065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.821207][ T5953] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 233.552021][ T5953] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.640870][ T5953] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 233.690017][ T5953] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 233.779731][ T5953] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.844103][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.884881][ T5953] usb 5-1: can't set config #27, error -71 [ 233.929417][ T5953] usb 5-1: USB disconnect, device number 15 [ 234.676095][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 235.806616][ T8110] netlink: 'syz.5.576': attribute type 10 has an invalid length. [ 235.843753][ T8108] netlink: 52 bytes leftover after parsing attributes in process `syz.5.576'. [ 235.858966][ T8110] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 235.876310][ T8108] unsupported nlmsg_type 40 [ 235.881208][ T8108] netlink: 52 bytes leftover after parsing attributes in process `syz.5.576'. [ 235.977287][ T8108] netlink: 52 bytes leftover after parsing attributes in process `syz.5.576'. [ 236.011228][ T8117] x_tables: duplicate underflow at hook 2 [ 236.026109][ T8116] x_tables: duplicate underflow at hook 2 [ 236.078330][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.107222][ T8119] batadv_slave_0: entered promiscuous mode [ 236.113079][ T8119] batadv_slave_0: entered allmulticast mode [ 236.334521][ T5917] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 236.484493][ T5896] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 236.506606][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 236.516768][ T5917] usb 2-1: config 5 has an invalid interface number: 201 but max is 2 [ 236.534375][ T5917] usb 2-1: config 5 has an invalid interface number: 137 but max is 2 [ 236.564927][ T5917] usb 2-1: config 5 has an invalid interface number: 189 but max is 2 [ 236.600684][ T5917] usb 2-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 236.631289][ T5917] usb 2-1: config 5 has no interface number 0 [ 236.670990][ T5917] usb 2-1: config 5 has no interface number 1 [ 236.680915][ T5896] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 236.700816][ T5917] usb 2-1: config 5 has no interface number 2 [ 236.709719][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.725836][ T5917] usb 2-1: config 5 interface 201 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 236.745970][ T5896] usb 6-1: Product: syz [ 236.770770][ T5896] usb 6-1: Manufacturer: syz [ 236.811416][ T8138] random: crng reseeded on system resumption [ 236.832212][ T5917] usb 2-1: config 5 interface 201 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 236.851610][ T5896] usb 6-1: SerialNumber: syz [ 236.978988][ T5917] usb 2-1: config 5 interface 201 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 237.113303][ T5917] usb 2-1: config 5 interface 201 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 237.232698][ T5917] usb 2-1: config 5 interface 201 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 237.257933][ T5896] usb 6-1: config 0 descriptor?? [ 237.348190][ T5896] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 237.360960][ T5917] usb 2-1: config 5 interface 201 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 237.528047][ T5917] usb 2-1: config 5 interface 201 altsetting 8 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 237.660838][ T5888] usb 6-1: USB disconnect, device number 3 [ 237.664180][ T5917] usb 2-1: config 5 interface 137 altsetting 163 has a duplicate endpoint with address 0x4, skipping [ 237.790932][ T5917] usb 2-1: config 5 interface 137 altsetting 163 has a duplicate endpoint with address 0xD, skipping [ 237.823380][ T5917] usb 2-1: config 5 interface 137 altsetting 163 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 237.844166][ T5917] usb 2-1: config 5 interface 137 altsetting 163 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 237.893750][ T5917] usb 2-1: config 5 interface 137 altsetting 163 has a duplicate endpoint with address 0x5, skipping [ 237.947511][ T8150] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 238.087066][ T5917] usb 2-1: config 5 interface 137 altsetting 163 has a duplicate endpoint with address 0xF, skipping [ 238.098880][ T5917] usb 2-1: config 5 interface 137 altsetting 163 has a duplicate endpoint with address 0x8, skipping [ 238.120102][ T5917] usb 2-1: config 5 interface 137 altsetting 163 has an invalid descriptor for endpoint zero, skipping [ 238.256136][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.585'. [ 238.505454][ T5917] usb 2-1: config 5 interface 137 altsetting 163 has a duplicate endpoint with address 0xF, skipping [ 238.516510][ T5917] usb 2-1: config 5 interface 137 altsetting 163 has a duplicate endpoint with address 0xA, skipping [ 238.528131][ T5917] usb 2-1: config 5 interface 137 altsetting 163 has a duplicate endpoint with address 0x5, skipping [ 238.742302][ T5917] usb 2-1: config 5 interface 137 altsetting 163 has an invalid descriptor for endpoint zero, skipping [ 238.764192][ T5917] usb 2-1: config 5 interface 137 altsetting 163 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 238.822892][ T5917] usb 2-1: config 5 interface 137 altsetting 163 has a duplicate endpoint with address 0x9, skipping [ 238.867012][ T5917] usb 2-1: config 5 interface 189 altsetting 252 has a duplicate endpoint with address 0xE, skipping [ 238.906606][ T5917] usb 2-1: config 5 interface 189 altsetting 252 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 238.946846][ T5917] usb 2-1: config 5 interface 201 has no altsetting 0 [ 238.966848][ T5917] usb 2-1: config 5 interface 137 has no altsetting 0 [ 238.979963][ T5917] usb 2-1: config 5 interface 189 has no altsetting 0 [ 239.001143][ T5917] usb 2-1: Dual-Role OTG device on HNP port [ 239.012136][ T5917] usb 2-1: New USB device found, idVendor=1740, idProduct=9801, bcdDevice= f.51 [ 239.049348][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.084835][ T5917] usb 2-1: Product: syz [ 239.109172][ T5917] usb 2-1: Manufacturer: syz [ 239.132119][ T5917] usb 2-1: SerialNumber: syz [ 239.190731][ T5917] usb 2-1: can't set config #5, error -71 [ 239.309037][ T8166] libceph: resolve '400' (ret=-3): failed [ 239.520900][ T5917] usb 2-1: USB disconnect, device number 17 [ 239.774327][ T5944] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 239.935314][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 239.967550][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.996041][ T1561] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 240.016381][ T5944] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 240.041730][ T8177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.594'. [ 240.044870][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.077765][ T5944] usb 6-1: config 0 descriptor?? [ 240.173960][ T1561] usb 5-1: Using ep0 maxpacket: 32 [ 240.185946][ T1561] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 240.207874][ T1561] usb 5-1: config 0 has no interface number 0 [ 240.225718][ T1561] usb 5-1: config 0 interface 12 has no altsetting 0 [ 240.246712][ T1561] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 240.262240][ T1561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.278509][ T1561] usb 5-1: Product: syz [ 240.283070][ T1561] usb 5-1: Manufacturer: syz [ 240.289982][ T1561] usb 5-1: SerialNumber: syz [ 240.302820][ T1561] usb 5-1: config 0 descriptor?? [ 240.538150][ T5944] input: HID 041e:3100 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:3100.0007/input/input15 [ 240.662135][ T8193] tipc: Enabled bearer , priority 0 [ 241.051297][ T1561] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 241.141747][ T1561] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 241.190874][ T5944] creative-sb0540 0003:041E:3100.0007: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.5-1/input0 [ 241.244639][ T1561] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 241.306965][ T1561] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 241.338781][ T5944] usb 6-1: USB disconnect, device number 4 [ 241.364741][ T1561] usb 5-1: USB disconnect, device number 16 [ 241.455689][ T8191] tipc: Disabling bearer [ 241.501051][ T8195] fido_id[8195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 241.671137][ T8188] usb usb8: usbfs: process 8188 (syz.1.599) did not claim interface 0 before use [ 242.527170][ T8213] libceph: resolve '400' (ret=-3): failed [ 242.548072][ T8217] netlink: 104 bytes leftover after parsing attributes in process `syz.4.605'. [ 242.950950][ T8217] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.986636][ T8222] loop8: detected capacity change from 0 to 8 [ 243.067900][ T8217] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.087363][ T8222] Dev loop8: unable to read RDB block 8 [ 243.092980][ T8222] loop8: unable to read partition table [ 243.103900][ T8222] loop8: partition table beyond EOD, truncated [ 243.110798][ T8222] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 243.172919][ T8217] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.272492][ T5888] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 243.298812][ T8217] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.402919][ T8217] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.419471][ T8217] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.434722][ T8217] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.450381][ T8217] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.476455][ T8229] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 243.513540][ T5888] usb 4-1: device descriptor read/64, error -71 [ 243.764308][ T5888] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 244.308163][ T8248] veth1_macvtap: left promiscuous mode [ 244.313988][ T8248] macsec0: entered promiscuous mode [ 244.344483][ T8248] veth1_macvtap: entered promiscuous mode [ 244.352760][ T8248] macsec0: left promiscuous mode [ 244.765354][ T5888] usb 4-1: device descriptor read/64, error -71 [ 244.884857][ T5888] usb usb4-port1: attempt power cycle [ 245.245252][ T5952] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 245.274541][ T5888] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 245.304285][ T5888] usb 4-1: device descriptor read/8, error -71 [ 245.459694][ T5952] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 245.499479][ T5952] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 245.536716][ T5952] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.553089][ T5952] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.564959][ T5888] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 245.575468][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.586012][ T5952] usb 5-1: Product: syz [ 245.596045][ T5952] usb 5-1: Manufacturer: syz [ 245.604260][ T5888] usb 4-1: device descriptor read/8, error -71 [ 245.611911][ T5952] usb 5-1: SerialNumber: syz [ 245.728390][ T5888] usb usb4-port1: unable to enumerate USB device [ 247.603328][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 247.609884][ T8262] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 247.736744][ T8262] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 248.282962][ T8262] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.400173][ T8262] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 248.821946][ T8262] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.912765][ T5952] usb 5-1: 0:2 : does not exist [ 248.926641][ T8262] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 249.049599][ T8262] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.064998][ T5952] usb 5-1: USB disconnect, device number 17 [ 249.070508][ T8262] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 249.238086][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.267126][ T8262] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 249.295187][ T8262] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 249.999869][ T8322] veth1_macvtap: left promiscuous mode [ 250.005589][ T8322] macsec0: entered promiscuous mode [ 250.034511][ T8322] veth1_macvtap: entered promiscuous mode [ 250.042460][ T8322] macsec0: left promiscuous mode [ 250.613637][ T8262] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 250.619588][ T8262] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 250.864803][ T8332] ªªªªªª: renamed from vlan0 (while UP) [ 252.856296][ T8380] veth1_macvtap: left promiscuous mode [ 252.861843][ T8380] macsec0: entered promiscuous mode [ 252.874383][ T8381] veth1_macvtap: entered promiscuous mode [ 252.880249][ T8381] macsec0: left promiscuous mode [ 252.909809][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 252.909825][ T30] audit: type=1400 audit(1755956652.874:68): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=8382 comm="syz.1.641" name="139" dev="tmpfs" ino=737 [ 252.949044][ T8385] binder: BINDER_SET_CONTEXT_MGR already set [ 252.972424][ T30] audit: type=1400 audit(1755956652.884:69): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=8382 comm="syz.1.641" name="video36" dev="devtmpfs" ino=1044 [ 252.992014][ T8385] binder: 8384:8385 ioctl 4018620d 200000000040 returned -16 [ 253.093431][ T8385] binder: 8384:8385 ioctl c0306201 2000000001c0 returned -22 [ 253.112074][ T8392] fuse: Bad value for 'fd' [ 253.115215][ T30] audit: type=1400 audit(1755956652.944:70): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=8382 comm="syz.1.641" opid=8382 ocomm="syz.1.641" [ 253.277700][ T8400] trusted_key: syz.3.645 sent an empty control message without MSG_MORE. [ 253.721512][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 254.063999][ T8414] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.126850][ T5917] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 254.228583][ T8405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.273380][ T5917] usb 4-1: device descriptor read/64, error -71 [ 254.311329][ T8405] usb usb8: usbfs: process 8405 (syz.5.647) did not claim interface 0 before use [ 254.315113][ T8414] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.441678][ T8414] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.552405][ T5917] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 254.552489][ T8414] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.659251][ T8414] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.674072][ T8414] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.688829][ T8414] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.704846][ T8414] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.722711][ T5917] usb 4-1: device descriptor read/64, error -71 [ 254.862897][ T5917] usb usb4-port1: attempt power cycle [ 254.942194][ T8437] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 254.997571][ T8437] cramfs: wrong magic [ 255.253906][ T5917] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 255.333635][ T8443] veth1_macvtap: left promiscuous mode [ 255.339302][ T8443] macsec0: entered promiscuous mode [ 255.371229][ T8443] veth1_macvtap: entered promiscuous mode [ 255.380616][ T8443] macsec0: left promiscuous mode [ 255.643356][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.650517][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.776952][ T5917] usb 4-1: device descriptor read/8, error -71 [ 256.042273][ T5924] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 256.050069][ T5917] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 256.196203][ T5917] usb 4-1: device descriptor read/8, error -71 [ 256.322148][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 256.335288][ T5917] usb usb4-port1: unable to enumerate USB device [ 256.365421][ T5924] usb 2-1: config 8 has an invalid interface number: 203 but max is 0 [ 256.392690][ T5924] usb 2-1: config 8 has no interface number 0 [ 256.406520][ T5924] usb 2-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 256.445745][ T5924] usb 2-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 256.531940][ T5924] usb 2-1: config 8 interface 203 altsetting 1 endpoint 0x88 has invalid wMaxPacketSize 0 [ 256.562198][ T5924] usb 2-1: config 8 interface 203 altsetting 1 bulk endpoint 0x88 has invalid maxpacket 0 [ 256.602465][ T5924] usb 2-1: config 8 interface 203 has no altsetting 0 [ 256.645449][ T5924] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 256.661916][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.680391][ T5924] usb 2-1: Product: syz [ 256.695366][ T5924] usb 2-1: Manufacturer: syz [ 256.722196][ T5924] usb 2-1: SerialNumber: syz [ 256.735908][ T8445] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 256.976920][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.016766][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.103285][ T5924] port100 2-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 257.122055][ T5888] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 257.164930][ T5924] usb 2-1: USB disconnect, device number 18 [ 257.304046][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 257.337961][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.375179][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.403595][ T5888] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 257.418316][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.447578][ T5888] usb 4-1: config 0 descriptor?? [ 257.670490][ T8465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.658'. [ 258.458024][ T8504] veth1_macvtap: left promiscuous mode [ 258.463592][ T8504] macsec0: entered promiscuous mode [ 258.474329][ T8504] veth1_macvtap: entered promiscuous mode [ 258.480292][ T8504] macsec0: left promiscuous mode [ 258.629284][ T8500] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.657140][ T5888] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 258.686569][ T8500] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.889008][ T5888] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 258.940908][ T8500] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.484225][ T5888] ft260 0003:0403:6030.0008: failed to retrieve system status [ 259.506866][ T5888] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -32 [ 259.547091][ T5888] usb 4-1: USB disconnect, device number 19 [ 259.584571][ T8500] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.739403][ T8500] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.759372][ T8500] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.778050][ T8500] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.796895][ T8500] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.564533][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.676'. [ 260.701144][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.676'. [ 261.239136][ T8543] fuseblk: Bad value for 'group_id' [ 261.246087][ T8543] fuseblk: Bad value for 'group_id' [ 261.581631][ T1561] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 261.747977][ T8564] veth1_macvtap: left promiscuous mode [ 261.753784][ T8564] macsec0: entered promiscuous mode [ 261.779061][ T8564] veth1_macvtap: entered promiscuous mode [ 261.786977][ T8564] macsec0: left promiscuous mode [ 261.883820][ T1561] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 262.026315][ T1561] usb 5-1: config 0 has no interface number 0 [ 262.188316][ T1561] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 262.234120][ T1561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.256112][ T1561] usb 5-1: Product: syz [ 262.260319][ T1561] usb 5-1: Manufacturer: syz [ 262.269180][ T1561] usb 5-1: SerialNumber: syz [ 262.286150][ T1561] usb 5-1: config 0 descriptor?? [ 262.583305][ T1561] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 262.794296][ T1561] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 262.898769][ T1561] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 262.923127][ T1561] usb 5-1: media controller created [ 262.939803][ T1561] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.963582][ T8569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.684'. [ 263.183748][ T1561] DVB: Unable to find symbol dib7000p_attach() [ 263.198610][ T1561] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 263.237940][ T1561] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 263.326356][ T8582] wireguard: wg0: Could not create IPv4 socket [ 263.330395][ T1561] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 263.347052][ T1561] usb 5-1: media controller created [ 263.356393][ T1561] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.480941][ T1561] dib0700: the master dib7090 has to be initialized first [ 263.569417][ T1561] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 264.421767][ T8588] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.660976][ T1561] rc_core: IR keymap rc-dib0700-rc5 not found [ 264.740639][ T8603] sctp: [Deprecated]: syz.3.694 (pid 8603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.740639][ T8603] Use struct sctp_sack_info instead [ 264.780697][ T8588] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.971279][ T1561] Registered IR keymap rc-empty [ 264.985004][ T1561] dvb-usb: could not initialize remote control. [ 265.068418][ T8609] veth1_macvtap: left promiscuous mode [ 265.074142][ T8609] macsec0: entered promiscuous mode [ 265.111600][ T8609] veth1_macvtap: entered promiscuous mode [ 265.121270][ T8609] macsec0: left promiscuous mode [ 265.558691][ T1561] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 265.570932][ T8588] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.606516][ T1561] usb 5-1: USB disconnect, device number 18 [ 265.745792][ T8588] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.786382][ T1561] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 265.897993][ T8588] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.915924][ T8588] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.933062][ T8588] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.947379][ T8588] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.450803][ T5896] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 266.645361][ T5896] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 266.687730][ T5896] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 266.737239][ T5896] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 266.796336][ T5896] usb 2-1: config 220 has no interface number 2 [ 266.831181][ T5896] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 266.909203][ T5896] usb 2-1: config 220 interface 0 has no altsetting 0 [ 266.945601][ T5896] usb 2-1: config 220 interface 76 has no altsetting 0 [ 266.983399][ T5896] usb 2-1: config 220 interface 1 has no altsetting 0 [ 267.013343][ T5896] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 267.039304][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.050872][ T5888] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 267.055508][ T5896] usb 2-1: Product: syz [ 267.063255][ T5896] usb 2-1: Manufacturer: syz [ 267.067947][ T5896] usb 2-1: SerialNumber: syz [ 267.186977][ T8630] netlink: 76 bytes leftover after parsing attributes in process `syz.2.702'. [ 267.200952][ T5888] usb 5-1: device descriptor read/64, error -71 [ 267.332610][ T5896] usb 2-1: selecting invalid altsetting 0 [ 267.351192][ T5896] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 267.365733][ T5896] usb 2-1: No valid video chain found. [ 267.387759][ T5896] usb 2-1: selecting invalid altsetting 0 [ 267.405163][ T5896] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 267.431321][ T5896] usb 2-1: USB disconnect, device number 19 [ 267.540690][ T5888] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 267.597409][ T8638] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 267.604145][ T8638] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 267.615282][ T8638] vhci_hcd vhci_hcd.0: Device attached [ 267.690742][ T5888] usb 5-1: device descriptor read/64, error -71 [ 267.729563][ T8638] vhci_hcd vhci_hcd.0: port 0 already used [ 267.818364][ T5888] usb usb5-port1: attempt power cycle [ 268.515544][ T8639] vhci_hcd: connection closed [ 268.518146][ T7652] vhci_hcd: stop threads [ 268.528012][ T7652] vhci_hcd: release socket [ 268.534357][ T7652] vhci_hcd: disconnect device [ 268.582795][ T5924] usb 44-1: enqueue for inactive port 0 [ 268.679088][ T5888] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 268.715782][ T5888] usb 5-1: device descriptor read/8, error -71 [ 268.971321][ T5888] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 269.011424][ T5888] usb 5-1: device descriptor read/8, error -71 [ 269.071777][ T5924] usb usb44-port1: attempt power cycle [ 269.151378][ T5888] usb usb5-port1: unable to enumerate USB device [ 269.650825][ T7645] Bluetooth: hci6: Frame reassembly failed (-90) [ 269.664522][ T8689] tmpfs: Bad value for 'mpol' [ 269.672331][ T5924] usb usb44-port1: unable to enumerate USB device [ 269.710911][ T8689] netlink: 44 bytes leftover after parsing attributes in process `syz.1.716'. [ 269.780497][ T8689] netlink: 44 bytes leftover after parsing attributes in process `syz.1.716'. [ 270.225594][ T5952] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 271.054026][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 271.075863][ T5952] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.106302][ T5952] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.140200][ T5952] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.347382][ T5952] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.370368][ T5952] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.379609][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.854016][ T8723] ptrace attach of "./syz-executor exec"[5851] was attempted by " [ 271.869481][ T5850] Bluetooth: hci6: command 0xfc11 tx timeout [ 272.040247][ T5847] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 272.300258][ T5952] usb 5-1: GET_CAPABILITIES returned 0 [ 272.324605][ T5952] usbtmc 5-1:16.0: can't read capabilities [ 273.405646][ T5924] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 273.789908][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 273.802089][ T5924] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 273.834508][ T5924] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 273.862815][ T5924] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 273.889615][ T5924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 273.918410][ T5924] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 273.955963][ T5924] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.965515][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 273.987723][ T5924] usb 2-1: SerialNumber: syz [ 274.016922][ T8737] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 274.024884][ T8737] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 274.247838][ T8757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.305873][ T8757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.343286][ T5910] usb 2-1: USB disconnect, device number 20 [ 274.511494][ T5924] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 274.684312][ T5924] usb 4-1: device descriptor read/64, error -71 [ 274.816432][ T8768] overlayfs: failed to resolve './file1': -2 [ 275.101494][ T5910] usb 5-1: USB disconnect, device number 23 [ 275.199772][ T5924] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 275.315831][ T8776] input: syz0 as /devices/virtual/input/input17 [ 275.429992][ T5924] usb 4-1: device descriptor read/64, error -71 [ 275.440617][ T8774] Bluetooth: MGMT ver 1.23 [ 275.591057][ T5924] usb usb4-port1: attempt power cycle [ 276.077088][ T8781] xt_TCPMSS: Only works on TCP SYN packets [ 276.423317][ T5910] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 276.581296][ T5924] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 276.610257][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.734'. [ 276.648986][ T5924] usb 4-1: device descriptor read/8, error -71 [ 276.780280][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 276.796599][ T5910] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.814509][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.840245][ T5910] usb 2-1: config 0 has no interface number 0 [ 276.873949][ T5910] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 276.892072][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.900291][ T5924] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 276.911853][ T5910] usb 2-1: Product: syz [ 276.919570][ T5910] usb 2-1: Manufacturer: syz [ 276.930103][ T5910] usb 2-1: SerialNumber: syz [ 276.935428][ T5924] usb 4-1: device descriptor read/8, error -71 [ 276.949689][ T5910] usb 2-1: config 0 descriptor?? [ 276.959701][ T8792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.737'. [ 276.984920][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 277.001882][ T5910] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.038129][ T8794] mmap: syz.4.736 (8794): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 277.057030][ T5910] snd-usb-audio 2-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 277.066969][ T5924] usb usb4-port1: unable to enumerate USB device [ 277.121953][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.136807][ T8792] bridge1: entered promiscuous mode [ 277.172752][ T8792] bridge1: entered allmulticast mode [ 277.175008][ T8774] netlink: 72 bytes leftover after parsing attributes in process `syz.1.733'. [ 277.337002][ T5924] usb 2-1: USB disconnect, device number 21 [ 277.953612][ T5917] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 278.122885][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 278.139056][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.196574][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.230677][ T8824] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 278.246251][ T5917] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 278.293161][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.302521][ T8827] sctp: [Deprecated]: syz.3.745 (pid 8827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.302521][ T8827] Use struct sctp_sack_info instead [ 278.371516][ T5917] usb 5-1: config 0 descriptor?? [ 278.748654][ T8844] usb usb8: usbfs: process 8844 (syz.5.749) did not claim interface 0 before use [ 278.813793][ T5917] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 278.823500][ T5917] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 278.830399][ T5917] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 278.837201][ T5917] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 278.859336][ T5917] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 278.936436][ T8848] veth1_macvtap: left promiscuous mode [ 278.942066][ T8848] macsec0: entered promiscuous mode [ 278.965752][ T8848] veth1_macvtap: entered promiscuous mode [ 278.973857][ T8848] macsec0: left promiscuous mode [ 279.514015][ T5917] savu 0003:1E7D:2D5A.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 279.566993][ T8804] veth3: entered promiscuous mode [ 279.629294][ T5917] usb 5-1: USB disconnect, device number 24 [ 279.917336][ T8854] fido_id[8854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 280.184023][ T30] audit: type=1326 audit(1755956680.187:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb6f8ebe9 code=0x7fc00000 [ 280.628670][ T30] audit: type=1326 audit(1755956680.547:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5eb6f8ebe9 code=0x7fc00000 [ 280.736451][ T30] audit: type=1326 audit(1755956680.547:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb6f8ebe9 code=0x7fc00000 [ 280.805791][ T30] audit: type=1326 audit(1755956680.547:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb6f8ebe9 code=0x7fc00000 [ 280.832403][ T30] audit: type=1326 audit(1755956680.547:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb6f8ebe9 code=0x7fc00000 [ 280.886961][ T30] audit: type=1326 audit(1755956680.547:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb6f8ebe9 code=0x7fc00000 [ 280.995806][ T8879] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 281.116927][ T30] audit: type=1326 audit(1755956680.547:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb6f8ebe9 code=0x7fc00000 [ 281.559002][ T30] audit: type=1326 audit(1755956680.547:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb6f8ebe9 code=0x7fc00000 [ 281.813157][ T30] audit: type=1326 audit(1755956680.547:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb6f8ebe9 code=0x7fc00000 [ 281.857288][ T30] audit: type=1326 audit(1755956680.547:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb6f8ebe9 code=0x7fc00000 [ 282.148967][ T8893] netlink: 146300 bytes leftover after parsing attributes in process `syz.3.760'. [ 282.166851][ T8893] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 282.439157][ T43] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 282.783441][ T8901] veth1_macvtap: left promiscuous mode [ 282.789510][ T8901] macsec0: entered promiscuous mode [ 282.815294][ T8901] veth1_macvtap: entered promiscuous mode [ 282.823621][ T8901] macsec0: left promiscuous mode [ 283.263495][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 283.278810][ T43] usb 4-1: config 0 has no interface number 0 [ 283.293392][ T43] usb 4-1: too many endpoints for config 0 interface 1 altsetting 120: 154, using maximum allowed: 30 [ 283.307198][ T43] usb 4-1: config 0 interface 1 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 154 [ 283.320782][ T43] usb 4-1: config 0 interface 1 has no altsetting 0 [ 283.327701][ T43] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 283.337456][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.429310][ T43] usb 4-1: config 0 descriptor?? [ 284.552413][ T43] usb 4-1: string descriptor 0 read error: -71 [ 285.087618][ T43] usb 4-1: selecting invalid altsetting 1 [ 285.102010][ T43] dvb_ttusb_budget: ttusb_init_controller: error [ 285.298548][ T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 285.600423][ T8929] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 285.627967][ T43] DVB: Unable to find symbol cx22700_attach() [ 285.783729][ T43] DVB: Unable to find symbol tda10046_attach() [ 285.817305][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 285.857195][ T43] usb 4-1: USB disconnect, device number 24 [ 285.900876][ T8940] bridge0: entered promiscuous mode [ 285.919604][ T8940] macsec1: entered promiscuous mode [ 286.162186][ T8948] libceph: resolve '4' (ret=-3): failed [ 286.450920][ T8950] netlink: 240 bytes leftover after parsing attributes in process `syz.4.772'. [ 286.497307][ T8941] mkiss: ax0: crc mode is auto. [ 286.606440][ T8941] netlink: 44 bytes leftover after parsing attributes in process `syz.4.772'. [ 286.762137][ T8964] Bluetooth: MGMT ver 1.23 [ 287.854566][ T8978] usb usb8: usbfs: process 8978 (syz.4.782) did not claim interface 0 before use [ 288.110510][ T8990] tipc: Enabling of bearer rejected, already enabled [ 288.829391][ T8995] sctp: [Deprecated]: syz.2.788 (pid 8995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.829391][ T8995] Use struct sctp_sack_info instead [ 290.077079][ T5910] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 290.428204][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 290.443497][ T5910] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=88.ea [ 290.452906][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.497920][ T5910] usb 6-1: Product: syz [ 290.518617][ T5910] usb 6-1: Manufacturer: syz [ 290.523249][ T5910] usb 6-1: SerialNumber: syz [ 290.583682][ T5910] usb 6-1: config 0 descriptor?? [ 290.603194][ T5910] ati_remote 6-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 290.734037][ T9038] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 290.810962][ T5910] usb 6-1: USB disconnect, device number 5 [ 291.376823][ T9043] tipc: Started in network mode [ 291.381834][ T9043] tipc: Node identity 7f000001, cluster identity 4711 [ 291.389580][ T9043] tipc: Enabled bearer , priority 10 [ 292.003625][ T9060] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 292.032192][ T9060] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 292.392286][ T9071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.597883][ T5924] tipc: Node number set to 2130706433 [ 292.881457][ T9078] program syz.1.809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.007576][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.042599][ T9087] sctp: [Deprecated]: syz.5.811 (pid 9087) Use of int in max_burst socket option deprecated. [ 294.042599][ T9087] Use struct sctp_assoc_value instead [ 294.068856][ T9091] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 294.097596][ T9091] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 294.118004][ T9091] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 294.130003][ T9091] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 295.431107][ T9103] tipc: Enabling of bearer rejected, already enabled [ 297.209895][ T9150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.304392][ T9157] comedi comedi0: mpc624: I/O port conflict (0xee,16) [ 300.858929][ T9187] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 300.983348][ T9187] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 301.012433][ T9190] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 301.066308][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.076132][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.165210][ T9190] bridge0: entered allmulticast mode [ 301.826014][ T9196] syz.4.836 (9196) used obsolete PPPIOCDETACH ioctl [ 301.911927][ T9196] netlink: 68 bytes leftover after parsing attributes in process `syz.4.836'. [ 302.277645][ T5888] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 302.590892][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 302.590909][ T30] audit: type=1326 audit(1755956702.600:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9207 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb6f8ebe9 code=0x7ffc0000 [ 302.645794][ T5888] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 302.665004][ T5888] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 302.707841][ T30] audit: type=1326 audit(1755956702.600:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9207 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f5eb6f8ebe9 code=0x7ffc0000 [ 302.742403][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.829237][ T30] audit: type=1326 audit(1755956702.600:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9207 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb6f8ebe9 code=0x7ffc0000 [ 302.852879][ T5888] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.873075][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.888683][ T5888] usb 2-1: Product: ဟèˆÛ¿ì³•ì¼¦ë”¯î­‘ݱ⠨ⳤ쨈葒è†ê¤¨è‹žè¤˜ëš¿î„ƒåˆŠî¿á…ƒå‡žîž¸é¿‚穇耄९篜乯⮸츂鼡ã³ì¡Žæ¬¡ï™­î„费ἢ≽ï¥å·á‰â¥ï¡çµ†â’¢ì´‚藃㥨賑鰆 [ 302.906722][ T30] audit: type=1326 audit(1755956702.600:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9207 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f5eb6f8ebe9 code=0x7ffc0000 [ 302.929184][ T5888] usb 2-1: Manufacturer: ïŸè¬©éš—ê³ï¢†å…²ï—‰ë«²ê‹â–‹ï¸°ä·ã´é£°ä‰³ï¶®å¯…쀲ȫ˾횂媃ū๺ã¡ë¹ ê¢•êº©ä«µá°Šæ±°ã¢³éªžê•¹î¾†î–˜çŒ“㤆蓅â¥ì©¯á˜¢ìˆŠâ««ë£­èƒ˜àµ£á”¾è‚퓡䟌﫩뢇బᡑ⺅馳䠱äµí‡šîˆ¥á°‰é£ƒêž†áŽ§á”‡âŽ€ë¼•ë¦™ä¥›êš·å‚¦ï§¼ïƒ¹ã¸µë‡ŽéŸ¥ê »áˆ°ê¨™å¥¶ç—·ï†¤â¶ží–¡ì²†ãµç¼¯áˆã–ä¡ã‰ï´á” [ 302.981612][ T30] audit: type=1326 audit(1755956702.600:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9207 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb6f8ebe9 code=0x7ffc0000 [ 303.056110][ T5888] usb 2-1: SerialNumber: Ћ [ 303.085824][ T30] audit: type=1326 audit(1755956702.600:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9207 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f5eb6f8ebe9 code=0x7ffc0000 [ 303.295479][ T30] audit: type=1326 audit(1755956702.600:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9207 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb6f8ebe9 code=0x7ffc0000 [ 303.332104][ T30] audit: type=1326 audit(1755956702.600:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9207 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5eb6f8ebe9 code=0x7ffc0000 [ 303.536959][ T30] audit: type=1326 audit(1755956702.600:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9207 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb6f8ebe9 code=0x7ffc0000 [ 303.847149][ T30] audit: type=1326 audit(1755956702.600:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9207 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5eb6f8ebe9 code=0x7ffc0000 [ 303.887354][ T5888] usb 2-1: 0:2 : does not exist [ 304.092675][ T5888] usb 2-1: USB disconnect, device number 22 [ 304.141381][ T5917] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 304.144679][ T9230] lo speed is unknown, defaulting to 1000 [ 304.180142][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.367203][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 304.394903][ T5917] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 304.416586][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.619006][ T9238] netlink: 'syz.1.850': attribute type 10 has an invalid length. [ 304.619012][ T9243] netlink: 'syz.1.850': attribute type 10 has an invalid length. [ 304.637290][ T9243] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.637349][ T5917] usb 4-1: config 0 descriptor?? [ 304.647207][ T9243] bond0: (slave team0): Enslaving as an active interface with an up link [ 304.663249][ T9224] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 304.789902][ T9245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.852'. [ 304.833891][ T9245] netlink: 'syz.2.852': attribute type 30 has an invalid length. [ 304.861260][ T9245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.852'. [ 304.892460][ T9245] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 304.916324][ T9245] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 305.095164][ T9251] fuse: Bad value for 'fd' [ 305.118713][ T5917] belkin 0003:050D:3201.000A: unbalanced collection at end of report description [ 305.141772][ T5917] belkin 0003:050D:3201.000A: parse failed [ 305.160906][ T5917] belkin 0003:050D:3201.000A: probe with driver belkin failed with error -22 [ 305.350796][ T5952] usb 4-1: USB disconnect, device number 25 [ 305.358959][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 306.436469][ T5888] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 306.603254][ T5917] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 306.605522][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 306.616873][ T5888] usb 2-1: too many configurations: 143, using maximum allowed: 8 [ 306.637867][ T5888] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 306.666074][ T5888] usb 2-1: can't read configurations, error -61 [ 306.806079][ T5888] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 306.813977][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 306.862351][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.895274][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.940618][ T5917] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 306.954221][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.967926][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 306.975404][ T5917] usb 4-1: config 0 descriptor?? [ 306.997848][ T5917] hub 4-1:0.0: USB hub found [ 307.156114][ T5888] usb 2-1: too many configurations: 143, using maximum allowed: 8 [ 307.172994][ T5888] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 307.180668][ T5888] usb 2-1: can't read configurations, error -61 [ 307.188874][ T5888] usb usb2-port1: attempt power cycle [ 307.456634][ T5917] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 307.645795][ T5917] usbhid 4-1:0.0: can't add hid device: -71 [ 307.700340][ T5917] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 307.770906][ T5917] usb 4-1: USB disconnect, device number 26 [ 307.788475][ T43] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 307.971256][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 307.979271][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 307.990127][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.003431][ T5888] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 308.006686][ T5910] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 308.023781][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 308.035300][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 308.049732][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 308.056074][ T5888] usb 2-1: too many configurations: 143, using maximum allowed: 8 [ 308.067215][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 308.075922][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 308.090941][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.103325][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 308.119200][ T5888] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 308.126967][ T5888] usb 2-1: can't read configurations, error -61 [ 308.134745][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 308.151830][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 308.159570][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 308.171032][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.182756][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 308.189633][ T5910] usb 5-1: config 0 has no interfaces? [ 308.193932][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 308.214452][ T43] usb 6-1: string descriptor 0 read error: -22 [ 308.214452][ T5910] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.214477][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.225943][ T43] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 308.257659][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.257731][ T5910] usb 5-1: config 0 descriptor?? [ 308.265977][ T5888] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 308.287325][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 308.300509][ T5888] usb 2-1: too many configurations: 143, using maximum allowed: 8 [ 308.331844][ T43] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 308.350461][ T5888] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 308.363892][ T5888] usb 2-1: can't read configurations, error -61 [ 308.370955][ T5888] usb usb2-port1: unable to enumerate USB device [ 308.508707][ T9297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.521625][ T9297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.534896][ T5888] usb 6-1: USB disconnect, device number 6 [ 308.566125][ T5910] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 308.649977][ T5917] usb 5-1: USB disconnect, device number 25 [ 308.737451][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.748586][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.758457][ T5910] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 308.767677][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.779562][ T5910] usb 4-1: config 0 descriptor?? [ 309.214112][ T5910] kye 0003:0458:5010.000B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 309.256737][ T5910] kye 0003:0458:5010.000B: item fetching failed at offset 5/7 [ 309.265515][ T9330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.276812][ T5910] kye 0003:0458:5010.000B: parse failed [ 309.289486][ T5910] kye 0003:0458:5010.000B: probe with driver kye failed with error -22 [ 309.401671][ T9312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.432272][ T9312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.456102][ T5924] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 309.511135][ T5910] usb 4-1: USB disconnect, device number 27 [ 309.716471][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 309.860005][ T5924] usb 2-1: config 1 interface 0 has no altsetting 0 [ 310.193832][ T9342] netlink: 'syz.3.880': attribute type 1 has an invalid length. [ 310.226830][ T9342] netlink: 128 bytes leftover after parsing attributes in process `syz.3.880'. [ 310.254584][ T9342] netlink: 'syz.3.880': attribute type 2 has an invalid length. [ 310.270435][ T5924] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40 [ 310.282732][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.291201][ T9342] netlink: 'syz.3.880': attribute type 1 has an invalid length. [ 310.291614][ T5924] usb 2-1: Product: syz [ 310.303333][ T5924] usb 2-1: Manufacturer: syz [ 310.308376][ T5924] usb 2-1: SerialNumber: syz [ 310.378048][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 310.521857][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.550745][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.632934][ T5924] usbhid 2-1:1.0: can't add hid device: -71 [ 310.653336][ T5924] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 310.692418][ T5924] usb 2-1: USB disconnect, device number 27 [ 311.055554][ T43] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 311.205557][ T43] usb 5-1: device descriptor read/64, error -71 [ 311.571437][ T9373] netlink: 96 bytes leftover after parsing attributes in process `syz.1.890'. [ 311.845513][ T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 312.351864][ T9384] xt_l2tp: v2 sid > 0xffff: 262144 [ 313.077354][ T43] usb 5-1: device descriptor read/64, error -71 [ 313.202009][ T43] usb usb5-port1: attempt power cycle [ 313.527851][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 313.527863][ T30] audit: type=1804 audit(1755956713.541:152): pid=9393 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.894" name="/" dev="pidfs" ino=9393 res=1 errno=0 [ 313.552798][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.638713][ T43] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 313.666800][ T43] usb 5-1: device descriptor read/8, error -71 [ 313.911780][ T9395] netlink: 'syz.1.895': attribute type 4 has an invalid length. [ 313.924983][ T9395] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.895'. [ 315.217876][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.227663][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.235982][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.244034][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.252280][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.267996][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.275425][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.282773][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.291099][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.298855][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.349664][ T9433] lo speed is unknown, defaulting to 1000 [ 315.913052][ T9449] tmpfs: Bad value for 'nr_inodes' [ 316.050645][ T9433] chnl_net:caif_netlink_parms(): no params data found [ 316.175999][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.183268][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.194227][ T9433] bridge_slave_0: entered allmulticast mode [ 316.207046][ T9433] bridge_slave_0: entered promiscuous mode [ 316.215623][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.222765][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.241558][ T9433] bridge_slave_1: entered allmulticast mode [ 316.254140][ T9433] bridge_slave_1: entered promiscuous mode [ 316.320735][ T9433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.366812][ T9433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.421630][ T9433] team0: Port device team_slave_0 added [ 316.430610][ T9433] team0: Port device team_slave_1 added [ 317.085547][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.115938][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.284009][ T7654] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.345113][ T5847] Bluetooth: hci1: command tx timeout [ 317.766384][ T7654] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.803219][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.822787][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.886188][ T5910] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 317.956024][ T9433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.969603][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.984740][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.073562][ T9433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.090716][ T7654] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.109888][ T5910] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 318.129185][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.184673][ T5910] usb 6-1: Product: syz [ 318.186542][ T9484] FAULT_INJECTION: forcing a failure. [ 318.186542][ T9484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.188899][ T5910] usb 6-1: Manufacturer: syz [ 318.243766][ T5910] usb 6-1: SerialNumber: syz [ 318.251112][ T7654] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.252520][ T5910] usb 6-1: config 0 descriptor?? [ 318.273891][ T9484] CPU: 0 UID: 0 PID: 9484 Comm: syz.3.921 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 318.273906][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.273916][ T9484] Call Trace: [ 318.273921][ T9484] [ 318.273927][ T9484] dump_stack_lvl+0x189/0x250 [ 318.273944][ T9484] ? __pfx____ratelimit+0x10/0x10 [ 318.273960][ T9484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.273971][ T9484] ? __pfx__printk+0x10/0x10 [ 318.273984][ T9484] ? __might_fault+0xb0/0x130 [ 318.274003][ T9484] should_fail_ex+0x414/0x560 [ 318.274018][ T9484] _copy_from_user+0x2d/0xb0 [ 318.274033][ T9484] ___sys_recvmsg+0x12e/0x510 [ 318.274047][ T9484] ? __pfx____sys_recvmsg+0x10/0x10 [ 318.274070][ T9484] ? __fget_files+0x3a0/0x420 [ 318.274087][ T9484] do_recvmmsg+0x307/0x770 [ 318.274102][ T9484] ? __pfx_do_recvmmsg+0x10/0x10 [ 318.274118][ T9484] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 318.274140][ T9484] __x64_sys_recvmmsg+0x190/0x240 [ 318.274152][ T9484] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 318.274165][ T9484] ? do_syscall_64+0xbe/0x3b0 [ 318.274178][ T9484] do_syscall_64+0xfa/0x3b0 [ 318.274188][ T9484] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.274199][ T9484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.274208][ T9484] ? clear_bhb_loop+0x60/0xb0 [ 318.274221][ T9484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.274230][ T9484] RIP: 0033:0x7f0d6db8ebe9 [ 318.274243][ T9484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.274260][ T9484] RSP: 002b:00007f0d6ea26038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 318.274272][ T9484] RAX: ffffffffffffffda RBX: 00007f0d6ddb6090 RCX: 00007f0d6db8ebe9 [ 318.274279][ T9484] RDX: 0000000000000005 RSI: 00002000000011c0 RDI: 0000000000000003 [ 318.274286][ T9484] RBP: 00007f0d6ea26090 R08: 0000000000000000 R09: 0000000000000000 [ 318.274292][ T9484] R10: 0000000040010041 R11: 0000000000000246 R12: 0000000000000001 [ 318.274298][ T9484] R13: 00007f0d6ddb6128 R14: 00007f0d6ddb6090 R15: 00007fff801d8fc8 [ 318.274314][ T9484] [ 318.479951][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.519388][ T9433] hsr_slave_0: entered promiscuous mode [ 318.526624][ T9433] hsr_slave_1: entered promiscuous mode [ 318.532726][ T9433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.542062][ T9433] Cannot create hsr debugfs directory [ 319.505919][ T5910] usb 6-1: Firmware version (0.0) predates our first public release. [ 319.514164][ T5910] usb 6-1: Please update to version 0.2 or newer [ 319.520716][ T5847] Bluetooth: hci1: command tx timeout [ 320.035101][ T5910] usb 6-1: USB disconnect, device number 7 [ 320.138785][ T7654] bridge_slave_1: left allmulticast mode [ 320.174300][ T7654] bridge_slave_1: left promiscuous mode [ 320.227842][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.260313][ T7654] bridge_slave_0: left allmulticast mode [ 320.270130][ T7654] bridge_slave_0: left promiscuous mode [ 320.287487][ T9500] input: syz0 as /devices/virtual/input/input18 [ 320.296802][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.904175][ T7654] dvmrp17 (unregistering): left allmulticast mode [ 321.198339][ T9510] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.927'. [ 321.224504][ T9510] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.927'. [ 321.332426][ T7654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.358407][ T7654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.388423][ T7654] bond0 (unregistering): Released all slaves [ 321.435825][ T7654] bond1 (unregistering): Released all slaves [ 321.584354][ T5847] Bluetooth: hci1: command tx timeout [ 321.633769][ T7654] _ÐZ`Ô€@: left promiscuous mode [ 321.669236][ T9517] fuse: Bad value for 'fd' [ 321.830698][ T7654] tipc: Left network mode [ 321.881736][ T9433] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 322.138206][ T9433] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 322.255357][ T9433] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 322.326542][ T9433] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 322.326907][ T43] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 323.394801][ T43] usb 4-1: no configurations [ 323.399449][ T43] usb 4-1: can't read configurations, error -22 [ 323.664076][ T5847] Bluetooth: hci1: command tx timeout [ 324.861386][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.882208][ T9433] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.910875][ T7659] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.918066][ T7659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.932433][ T43] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 325.076998][ T7659] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.084201][ T7659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.282014][ T7654] hsr_slave_0: left promiscuous mode [ 325.314156][ T7654] hsr_slave_1: left promiscuous mode [ 325.342240][ T7654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.381745][ T7654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.400850][ T7654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.418317][ T7654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.522849][ T7654] veth1_macvtap: left promiscuous mode [ 325.537232][ T7654] veth0_macvtap: left promiscuous mode [ 325.554030][ T7654] veth1_vlan: left promiscuous mode [ 325.569515][ T7654] veth0_vlan: left promiscuous mode [ 325.901979][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 325.912121][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 325.920585][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 325.951406][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 325.969174][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 326.065428][ T5924] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 326.203818][ T5924] usb 6-1: device descriptor read/64, error -71 [ 326.293055][ T7654] team0 (unregistering): Port device team_slave_1 removed [ 326.326836][ T5888] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 326.346681][ T7654] team0 (unregistering): Port device team_slave_0 removed [ 326.443812][ T5924] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 326.495510][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.507866][ T5888] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 326.517418][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.542303][ T5888] usb 4-1: config 0 descriptor?? [ 326.577082][ T5924] usb 6-1: device descriptor read/64, error -71 [ 326.695156][ T5924] usb usb6-port1: attempt power cycle [ 326.775277][ T9562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.792971][ T9562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.874633][ T5953] lo speed is unknown, defaulting to 1000 [ 326.881266][ T5953] infiniband 3yz0: ib_query_port failed (-19) [ 327.033816][ T5924] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 327.074185][ T5924] usb 6-1: device descriptor read/8, error -71 [ 327.326024][ T5924] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 327.364581][ T5924] usb 6-1: device descriptor read/8, error -71 [ 327.494352][ T5924] usb usb6-port1: unable to enumerate USB device [ 327.546301][ T9559] chnl_net:caif_netlink_parms(): no params data found [ 327.883734][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 327.899845][ T9559] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.932999][ T9590] fuse: Bad value for 'fd' [ 327.942169][ T9559] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.959285][ T9559] bridge_slave_0: entered allmulticast mode [ 327.967243][ T9559] bridge_slave_0: entered promiscuous mode [ 328.008299][ T9433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.055650][ T9559] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.064959][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 328.070287][ T5847] Bluetooth: hci6: command tx timeout [ 328.083186][ T9559] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.095559][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.106477][ T9559] bridge_slave_1: entered allmulticast mode [ 328.108216][ T9559] bridge_slave_1: entered promiscuous mode [ 328.124011][ T43] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 328.133111][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.185676][ T43] usb 2-1: config 0 descriptor?? [ 328.430196][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'. [ 328.803295][ T43] creative-sb0540 0003:041E:3100.000C: unknown main item tag 0x0 [ 328.886093][ T9559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.889984][ T43] creative-sb0540 0003:041E:3100.000C: item fetching failed at offset 3/5 [ 329.016762][ T9559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.058412][ T43] creative-sb0540 0003:041E:3100.000C: parse failed [ 329.065292][ T43] creative-sb0540 0003:041E:3100.000C: probe with driver creative-sb0540 failed with error -22 [ 329.419455][ T9559] team0: Port device team_slave_0 added [ 329.433244][ T43] usb 2-1: USB disconnect, device number 28 [ 329.505098][ T9559] team0: Port device team_slave_1 added [ 329.631431][ T9559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.660562][ T9559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.710922][ T9559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.735817][ T9559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.752595][ T9559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.812516][ T9559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.056963][ T9559] hsr_slave_0: entered promiscuous mode [ 330.067571][ T9559] hsr_slave_1: entered promiscuous mode [ 330.075707][ T9559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.123987][ T9559] Cannot create hsr debugfs directory [ 330.154211][ T5847] Bluetooth: hci6: command tx timeout [ 330.184579][ T9645] fuse: Bad value for 'fd' [ 330.272741][ T9433] veth0_vlan: entered promiscuous mode [ 330.326453][ T9433] veth1_vlan: entered promiscuous mode [ 330.424633][ T9656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.436470][ T9657] fuse: Bad value for 'fd' [ 330.479398][ T9656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.567259][ T9433] veth0_macvtap: entered promiscuous mode [ 330.601806][ T9433] veth1_macvtap: entered promiscuous mode [ 330.963061][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.035142][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.048167][ T1561] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 331.063663][ T5917] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 331.070333][ T30] audit: type=1326 audit(1755956731.073:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9654 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6db8ebe9 code=0x50000 [ 331.094269][ T30] audit: type=1326 audit(1755956731.073:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9654 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6db8ebe9 code=0x50000 [ 331.133952][ T30] audit: type=1326 audit(1755956731.073:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9654 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6db8ebe9 code=0x50000 [ 331.167055][ T30] audit: type=1326 audit(1755956731.073:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9654 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6db8ebe9 code=0x50000 [ 331.174740][ T9433] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.203389][ T30] audit: type=1326 audit(1755956731.073:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9654 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6db8ebe9 code=0x50000 [ 331.225176][ T30] audit: type=1326 audit(1755956731.073:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9654 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6db8ebe9 code=0x50000 [ 331.247150][ T30] audit: type=1326 audit(1755956731.073:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9654 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6db8ebe9 code=0x50000 [ 331.251987][ T9433] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.270207][ T1561] usb 2-1: Using ep0 maxpacket: 16 [ 331.278041][ T5917] usb 6-1: too many configurations: 221, using maximum allowed: 8 [ 331.293710][ T9433] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.298606][ T30] audit: type=1326 audit(1755956731.073:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9654 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6db8ebe9 code=0x50000 [ 331.302581][ T9433] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.330253][ T30] audit: type=1326 audit(1755956731.073:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9654 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6db8ebe9 code=0x50000 [ 331.354844][ T5917] usb 6-1: config 0 has an invalid interface number: 144 but max is 0 [ 331.362897][ T30] audit: type=1326 audit(1755956731.073:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9654 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6db8ebe9 code=0x50000 [ 331.363016][ T5917] usb 6-1: config 0 has no interface number 0 [ 331.397941][ T1561] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.403835][ T5917] usb 6-1: too many endpoints for config 0 interface 144 altsetting 71: 167, using maximum allowed: 30 [ 331.412267][ T1561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 331.432064][ T1561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 331.442302][ T1561] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 331.447024][ T5917] usb 6-1: config 0 interface 144 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 167 [ 331.458395][ T1561] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.474539][ T5917] usb 6-1: config 0 interface 144 has no altsetting 0 [ 331.523584][ T5917] usb 6-1: config 0 has an invalid interface number: 144 but max is 0 [ 331.535877][ T1561] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 331.536736][ T5917] usb 6-1: config 0 has no interface number 0 [ 331.562574][ T5917] usb 6-1: too many endpoints for config 0 interface 144 altsetting 71: 167, using maximum allowed: 30 [ 331.562591][ T1561] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 331.578992][ T5917] usb 6-1: config 0 interface 144 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 167 [ 331.602268][ T1561] usb 2-1: Manufacturer: syz [ 331.622564][ T5917] usb 6-1: config 0 interface 144 has no altsetting 0 [ 331.631442][ T1561] usb 2-1: config 0 descriptor?? [ 331.636371][ T9559] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 331.650946][ T5917] usb 6-1: config 0 has an invalid interface number: 144 but max is 0 [ 331.664027][ T5917] usb 6-1: config 0 has no interface number 0 [ 331.677028][ T9559] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 331.703804][ T5917] usb 6-1: too many endpoints for config 0 interface 144 altsetting 71: 167, using maximum allowed: 30 [ 331.720029][ T9559] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 331.743748][ T5917] usb 6-1: config 0 interface 144 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 167 [ 331.762907][ T9559] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 331.779584][ T5917] usb 6-1: config 0 interface 144 has no altsetting 0 [ 331.792852][ T5917] usb 6-1: config 0 has an invalid interface number: 144 but max is 0 [ 331.844056][ T5917] usb 6-1: config 0 has no interface number 0 [ 331.850193][ T5917] usb 6-1: too many endpoints for config 0 interface 144 altsetting 71: 167, using maximum allowed: 30 [ 332.600169][ T5888] usbhid 4-1:0.0: can't add hid device: -32 [ 332.603646][ T5847] Bluetooth: hci6: command tx timeout [ 332.609094][ T5888] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 332.646836][ T5917] usb 6-1: config 0 interface 144 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 167 [ 332.664833][ T5917] usb 6-1: config 0 interface 144 has no altsetting 0 [ 332.682150][ T5917] usb 6-1: config 0 has an invalid interface number: 144 but max is 0 [ 332.691391][ T5917] usb 6-1: config 0 has no interface number 0 [ 332.699007][ T5917] usb 6-1: too many endpoints for config 0 interface 144 altsetting 71: 167, using maximum allowed: 30 [ 332.711853][ T5917] usb 6-1: config 0 interface 144 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 167 [ 332.728317][ T5917] usb 6-1: config 0 interface 144 has no altsetting 0 [ 332.737862][ T5917] usb 6-1: config 0 has an invalid interface number: 144 but max is 0 [ 332.758831][ T5917] usb 6-1: config 0 has no interface number 0 [ 332.763996][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.771360][ T5917] usb 6-1: too many endpoints for config 0 interface 144 altsetting 71: 167, using maximum allowed: 30 [ 332.792234][ T7644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.808125][ T5917] usb 6-1: config 0 interface 144 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 167 [ 332.834573][ T5917] usb 6-1: config 0 interface 144 has no altsetting 0 [ 332.838209][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.841549][ T7644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.862820][ T5917] usb 6-1: config 0 has an invalid interface number: 144 but max is 0 [ 332.871180][ T5917] usb 6-1: config 0 has no interface number 0 [ 332.876886][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.885180][ T5917] usb 6-1: too many endpoints for config 0 interface 144 altsetting 71: 167, using maximum allowed: 30 [ 332.900791][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.925764][ T5917] usb 6-1: config 0 interface 144 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 167 [ 332.949206][ T7644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.962635][ T5917] usb 6-1: config 0 interface 144 has no altsetting 0 [ 332.975444][ T7644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.989255][ T5917] usb 6-1: config 0 has an invalid interface number: 144 but max is 0 [ 333.000640][ T5917] usb 6-1: config 0 has no interface number 0 [ 333.026064][ T5917] usb 6-1: too many endpoints for config 0 interface 144 altsetting 71: 167, using maximum allowed: 30 [ 333.076334][ T5917] usb 6-1: config 0 interface 144 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 167 [ 333.096278][ T9559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.117620][ T5917] usb 6-1: config 0 interface 144 has no altsetting 0 [ 333.136242][ T5917] usb 6-1: New USB device found, idVendor=13d8, idProduct=4ba0, bcdDevice=da.5c [ 333.161588][ T5917] usb 6-1: New USB device strings: Mfr=247, Product=215, SerialNumber=107 [ 333.175626][ T9559] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.192282][ T5917] usb 6-1: Product: syz [ 333.208299][ T5917] usb 6-1: Manufacturer: syz [ 333.222006][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.222146][ T5917] usb 6-1: SerialNumber: syz [ 333.229178][ T7661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.259364][ T7661] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.266595][ T7661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.281539][ T5917] usb 6-1: config 0 descriptor?? [ 333.515313][ T5917] usb 6-1: USB disconnect, device number 12 [ 333.980182][ T1561] rc_core: IR keymap rc-hauppauge not found [ 334.012807][ T1561] Registered IR keymap rc-empty [ 334.018228][ T1561] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 334.073395][ T5917] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 334.102861][ T1561] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 334.119072][ T9559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.147931][ T1561] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 334.234753][ T1561] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 334.243373][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 334.280815][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.283499][ T1561] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 334.332832][ T1561] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 334.332900][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.373004][ T1561] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 334.405756][ T1561] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 334.423132][ T5917] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 334.432200][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.443236][ T1561] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 334.475661][ T5917] usb 7-1: config 0 descriptor?? [ 334.483322][ T1561] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 334.501943][ T5917] hub 7-1:0.0: USB hub found [ 334.524021][ T1561] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 334.563071][ T1561] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 334.602570][ T1561] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 334.622964][ T5850] Bluetooth: hci6: command tx timeout [ 334.634368][ T1561] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 334.671775][ T9727] binder: 9726:9727 ioctl c00c620f 200000000500 returned -22 [ 334.690550][ T1561] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 334.722351][ T1561] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 334.728693][ T5917] hub 7-1:0.0: 1 port detected [ 334.784636][ T1561] usb 2-1: USB disconnect, device number 29 [ 334.970077][ T5917] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 334.994398][ T5917] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 335.032604][ T5917] usbhid 7-1:0.0: can't add hid device: -71 [ 335.113475][ T5953] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 335.227143][ T9559] veth0_vlan: entered promiscuous mode [ 335.368546][ T5953] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 335.445402][ T5953] usb 6-1: config 0 has no interface number 0 [ 335.487486][ T9559] veth1_vlan: entered promiscuous mode [ 335.520212][ T5953] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 335.628093][ T5917] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 335.677826][ T5953] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 335.682356][ T5917] usb 7-1: USB disconnect, device number 2 [ 335.701272][ T5953] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 335.720827][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.735624][ T9559] veth0_macvtap: entered promiscuous mode [ 335.761419][ T5953] usb 6-1: Product: syz [ 335.786689][ T9559] veth1_macvtap: entered promiscuous mode [ 335.822510][ T9559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.873158][ T5953] usb 6-1: Manufacturer: syz [ 335.874112][ T9559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.877783][ T5953] usb 6-1: SerialNumber: syz [ 335.954268][ T9559] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.964055][ T5953] usb 6-1: config 0 descriptor?? [ 335.989742][ T9559] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.146042][ T9559] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.155103][ T9559] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.172769][ T5953] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 336.180075][ T5953] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 336.219139][ T5953] usb 6-1: USB disconnect, device number 13 [ 337.485604][ T9761] affs: No valid root block on device nullb0 [ 338.470470][ T7646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.549070][ T7646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.755657][ T9768] hub 8-0:1.0: USB hub found [ 338.761730][ T9768] hub 8-0:1.0: 1 port detected [ 338.871894][ T7659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.889500][ T7659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.974225][ T9804] netlink: 24 bytes leftover after parsing attributes in process `syz.5.981'. [ 341.094099][ T9805] input: syz1 as /devices/virtual/input/input21 [ 341.101015][ T9805] input: failed to attach handler leds to device input21, error: -6 [ 341.632119][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.981'. [ 342.007041][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.982'. [ 342.055627][ T5924] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 342.583465][ T5924] usb 6-1: config 0 has an invalid interface number: 212 but max is 0 [ 342.619861][ T5924] usb 6-1: config 0 has no interface number 0 [ 342.690703][ T5924] usb 6-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88 [ 342.737028][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.787441][ T5924] usb 6-1: config 0 descriptor?? [ 342.809514][ T5924] quatech2 6-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected [ 343.011411][ T9804] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 343.865959][ T5924] usb 6-1: qt2_attach - failed to power on unit: -71 [ 343.881857][ T5924] quatech2 6-1:0.212: probe with driver quatech2 failed with error -71 [ 343.893264][ T5924] usb 6-1: USB disconnect, device number 14 [ 344.055781][ T9842] netlink: 52 bytes leftover after parsing attributes in process `syz.1.984'. [ 344.082952][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 344.143424][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 344.191324][ T9842] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 344.201467][ T9842] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 344.579871][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.988'. [ 344.761788][ T9854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.780175][ T9854] 9pnet: Unknown protocol version 9p [ 345.762152][ T890] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 345.803189][ T9875] syzkaller1: entered promiscuous mode [ 345.825093][ T9875] syzkaller1: entered allmulticast mode [ 345.941868][ T890] usb 7-1: Using ep0 maxpacket: 32 [ 345.960872][ T890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.341788][ T890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.371452][ T890] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 346.380768][ T890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.438182][ T890] usb 7-1: config 0 descriptor?? [ 347.346404][ T890] usbhid 7-1:0.0: can't add hid device: -71 [ 347.380562][ T890] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 347.414546][ T890] usb 7-1: USB disconnect, device number 3 [ 349.813992][ T9944] input: syz1 as /devices/virtual/input/input22 [ 350.368071][ T9958] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.427906][ T9961] netlink: 'syz.3.1012': attribute type 10 has an invalid length. [ 350.447489][ T9961] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1012'. [ 350.508321][ T9958] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.614183][ T9968] netlink: 'syz.5.1013': attribute type 1 has an invalid length. [ 350.614526][ T9958] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.679993][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1013'. [ 350.687495][ T9968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.725707][ T9958] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.780036][ T9968] erspan0: entered allmulticast mode [ 351.006832][ T9958] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.095119][ T9958] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.139842][ T9958] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.204188][ T9958] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.310864][ T5953] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 351.407184][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 351.407201][ T30] audit: type=1326 audit(1755956751.425:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9988 comm="syz.3.1018" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d6db8ebe9 code=0x0 [ 351.531067][ T5953] usb 7-1: Using ep0 maxpacket: 16 [ 351.533244][ T5953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.533275][ T5953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.533298][ T5953] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 351.533338][ T5953] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 351.533361][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.536335][ T5953] usb 7-1: config 0 descriptor?? [ 352.987816][T10005] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 354.514472][ T5953] usbhid 7-1:0.0: can't add hid device: -71 [ 354.530310][ T5953] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 354.597490][ T5953] usb 7-1: USB disconnect, device number 4 [ 355.382766][T10049] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1028'. [ 355.567194][T10049] geneve2: entered promiscuous mode [ 355.627268][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 355.634213][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 355.640759][T10049] geneve2: entered allmulticast mode [ 355.926242][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 356.494435][T10051] ceph: No mds server is up or the cluster is laggy [ 356.550429][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 356.770323][ T1561] IPVS: starting estimator thread 0... [ 356.910369][T10068] IPVS: using max 31 ests per chain, 74400 per kthread [ 359.549057][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1056'. [ 360.120312][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.144267][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.189491][T10167] netlink: 'syz.3.1060': attribute type 1 has an invalid length. [ 360.208867][T10167] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1060'. [ 360.219399][T10167] netlink: 97 bytes leftover after parsing attributes in process `syz.3.1060'. [ 360.399363][T10171] bond_slave_0: entered promiscuous mode [ 360.405464][T10171] bond_slave_1: entered promiscuous mode [ 360.495470][T10171] bond_slave_0: left promiscuous mode [ 360.501181][T10171] bond_slave_1: left promiscuous mode [ 366.593137][T10224] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 366.616112][T10224] overlayfs: missing 'lowerdir' [ 366.846985][T10229] veth1_macvtap: left promiscuous mode [ 366.852982][T10229] macsec0: entered promiscuous mode [ 366.863565][T10229] veth1_macvtap: entered promiscuous mode [ 366.869612][T10229] macsec0: left promiscuous mode [ 367.075091][ T30] audit: type=1326 audit(1755956767.097:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10222 comm="syz.1.1073" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe94e78ebe9 code=0x0 [ 368.839017][ T5953] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 368.918158][ T43] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 369.217303][T10260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1080'. [ 369.245266][ T5953] usb 8-1: Using ep0 maxpacket: 8 [ 369.250594][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 369.263304][ T5953] usb 8-1: no configurations [ 369.268165][ T5953] usb 8-1: can't read configurations, error -22 [ 369.274921][ T43] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 369.308816][ T43] usb 2-1: config 0 has no interface number 0 [ 369.315055][ T43] usb 2-1: config 0 interface 184 has no altsetting 0 [ 369.325398][ T43] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 369.335088][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.343850][ T43] usb 2-1: Product: syz [ 369.348183][ T43] usb 2-1: Manufacturer: syz [ 369.353219][ T43] usb 2-1: SerialNumber: syz [ 369.359025][ T5944] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 369.377705][ T43] usb 2-1: config 0 descriptor?? [ 369.386363][ T43] smsc75xx v1.0.0 [ 369.429173][ T5953] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 369.508934][ T5944] usb 7-1: Using ep0 maxpacket: 8 [ 369.525924][ T5944] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 369.536347][ T5944] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 369.544993][ T5944] usb 7-1: Product: syz [ 369.553055][ T5944] usb 7-1: Manufacturer: syz [ 369.557772][ T5944] usb 7-1: SerialNumber: syz [ 369.568441][ T5944] usb 7-1: config 0 descriptor?? [ 369.578823][ T5953] usb 8-1: Using ep0 maxpacket: 8 [ 369.587620][ T5953] usb 8-1: no configurations [ 369.597592][ T5953] usb 8-1: can't read configurations, error -22 [ 369.604788][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 369.616087][ T5953] usb usb8-port1: attempt power cycle [ 369.622200][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 369.633521][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 369.644439][ T43] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 370.078927][ T5953] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 370.163814][ T5953] usb 8-1: Using ep0 maxpacket: 8 [ 370.171124][ T5953] usb 8-1: no configurations [ 370.188415][ T5953] usb 8-1: can't read configurations, error -22 [ 370.225271][ T5944] usb 7-1: USB disconnect, device number 5 [ 370.282051][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.414574][ T5953] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 370.449205][ T5953] usb 8-1: Using ep0 maxpacket: 8 [ 370.455224][ T5953] usb 8-1: no configurations [ 370.472205][ T5953] usb 8-1: can't read configurations, error -22 [ 370.495669][ T5953] usb usb8-port1: unable to enumerate USB device [ 370.887691][T10316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.915244][T10311] veth1_macvtap: left promiscuous mode [ 370.920903][T10311] macsec0: entered promiscuous mode [ 370.930457][T10311] veth1_macvtap: entered promiscuous mode [ 370.936440][T10311] macsec0: left promiscuous mode [ 371.686420][ T5917] usb 2-1: USB disconnect, device number 30 [ 371.818109][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.874864][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.551165][ T30] audit: type=1326 audit(1755956772.558:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10355 comm="syz.7.1097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc04898ebe9 code=0x0 [ 372.598438][ T5917] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 372.944884][ T5917] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.978338][ T5917] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 372.987411][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.059550][ T5917] usb 7-1: config 0 descriptor?? [ 373.083720][ T5917] pwc: Askey VC010 type 2 USB webcam detected. [ 373.412296][T10373] veth1_macvtap: left promiscuous mode [ 373.417810][T10373] macsec0: entered promiscuous mode [ 373.428291][T10373] veth1_macvtap: entered promiscuous mode [ 373.434253][T10373] macsec0: left promiscuous mode [ 373.698941][ T5917] pwc: recv_control_msg error -32 req 02 val 2b00 [ 373.773635][ T5917] pwc: recv_control_msg error -32 req 02 val 2700 [ 373.830602][T10385] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1103'. [ 373.861440][T10388] tipc: Started in network mode [ 373.866531][T10388] tipc: Node identity 7f000001, cluster identity 4711 [ 373.877903][T10388] tipc: Enabled bearer , priority 10 [ 373.901364][T10388] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1102'. [ 374.054511][ T5917] pwc: recv_control_msg error -32 req 02 val 2c00 [ 374.212352][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1103'. [ 374.278153][ T5917] pwc: recv_control_msg error -32 req 04 val 1000 [ 374.415590][ T5917] pwc: recv_control_msg error -32 req 04 val 1300 [ 374.869564][T10399] netlink: 'syz.1.1104': attribute type 1 has an invalid length. [ 374.877440][T10399] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1104'. [ 374.898625][ T5896] tipc: Node number set to 2130706433 [ 375.007192][T10400] No such timeout policy "syz0" [ 375.418663][ T5917] pwc: recv_control_msg error -32 req 02 val 2000 [ 375.646548][ T5917] pwc: recv_control_msg error -71 req 02 val 2100 [ 375.650459][ T5917] pwc: recv_control_msg error -71 req 04 val 1500 [ 375.651413][ T5917] pwc: recv_control_msg error -71 req 02 val 2500 [ 375.658875][ T5917] pwc: recv_control_msg error -71 req 02 val 2400 [ 375.659581][ T5917] pwc: recv_control_msg error -71 req 02 val 2600 [ 375.665095][ T5917] pwc: recv_control_msg error -71 req 02 val 2900 [ 375.665557][ T5917] pwc: recv_control_msg error -71 req 02 val 2800 [ 375.673624][ T5917] pwc: recv_control_msg error -71 req 04 val 1100 [ 375.674422][ T5917] pwc: recv_control_msg error -71 req 04 val 1200 [ 375.690594][ T5917] pwc: Registered as video103. [ 375.692843][ T5917] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input24 [ 375.751262][ T5917] usb 7-1: USB disconnect, device number 6 [ 376.022573][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1108'. [ 376.207055][T10401] tty tty30: ldisc open failed (-12), clearing slot 29 [ 377.026541][ T30] audit: type=1804 audit(1755956777.038:223): pid=10429 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.1110" name="/newroot/22/file0" dev="tmpfs" ino=132 res=1 errno=0 [ 378.465467][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.472755][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.958226][ T5910] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 379.259947][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.320231][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.352743][ T5910] usb 2-1: New USB device found, idVendor=07c0, idProduct=1524, bcdDevice= 0.00 [ 379.412215][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.455062][ T5910] usb 2-1: config 0 descriptor?? [ 379.750817][T10464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.805655][T10464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.101106][ T5944] usb 2-1: USB disconnect, device number 31 [ 380.289708][T10513] FAULT_INJECTION: forcing a failure. [ 380.289708][T10513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.357022][T10513] CPU: 0 UID: 0 PID: 10513 Comm: syz.7.1128 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 380.357049][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.357065][T10513] Call Trace: [ 380.357076][T10513] [ 380.357085][T10513] dump_stack_lvl+0x189/0x250 [ 380.357112][T10513] ? __pfx____ratelimit+0x10/0x10 [ 380.357133][T10513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.357155][T10513] ? __pfx__printk+0x10/0x10 [ 380.357193][T10513] should_fail_ex+0x414/0x560 [ 380.357220][T10513] _copy_to_user+0x31/0xb0 [ 380.357248][T10513] simple_read_from_buffer+0xe1/0x170 [ 380.357274][T10513] proc_fail_nth_read+0x1df/0x250 [ 380.357301][T10513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.357327][T10513] ? rw_verify_area+0x258/0x650 [ 380.357356][T10513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.357383][T10513] vfs_read+0x200/0x980 [ 380.357416][T10513] ? __pfx___mutex_lock+0x10/0x10 [ 380.357437][T10513] ? __pfx_vfs_read+0x10/0x10 [ 380.357467][T10513] ? __fget_files+0x2a/0x420 [ 380.357494][T10513] ? __fget_files+0x3a0/0x420 [ 380.357513][T10513] ? __fget_files+0x2a/0x420 [ 380.357544][T10513] ksys_read+0x145/0x250 [ 380.357563][T10513] ? __pfx_ksys_read+0x10/0x10 [ 380.357578][T10513] ? rcu_is_watching+0x15/0xb0 [ 380.357605][T10513] ? do_syscall_64+0xbe/0x3b0 [ 380.357631][T10513] do_syscall_64+0xfa/0x3b0 [ 380.357659][T10513] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.357679][T10513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.357698][T10513] ? clear_bhb_loop+0x60/0xb0 [ 380.357722][T10513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.357741][T10513] RIP: 0033:0x7fc04898d5fc [ 380.357758][T10513] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 380.357775][T10513] RSP: 002b:00007fc0498c4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.357796][T10513] RAX: ffffffffffffffda RBX: 00007fc048bb5fa0 RCX: 00007fc04898d5fc [ 380.357811][T10513] RDX: 000000000000000f RSI: 00007fc0498c40a0 RDI: 0000000000000004 [ 380.357824][T10513] RBP: 00007fc0498c4090 R08: 0000000000000000 R09: 0000000000000000 [ 380.357836][T10513] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 380.357848][T10513] R13: 00007fc048bb6038 R14: 00007fc048bb5fa0 R15: 00007ffe55ea5108 [ 380.357881][T10513] [ 380.585986][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.412276][T10558] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.622094][ T1561] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 382.904157][ T1561] usb 8-1: Using ep0 maxpacket: 16 [ 382.992242][ T1561] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 383.053190][ T1561] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 383.062622][ T1561] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.076823][ T1561] usb 8-1: config 0 descriptor?? [ 383.093434][ T1561] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input25 [ 383.106442][T10558] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.236426][T10558] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.303803][T10558] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.375991][ T1561] bcm5974 8-1:0.0: could not read from device [ 383.412092][T10558] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.426562][T10558] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.440968][T10558] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.455565][T10558] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.491327][ T5193] bcm5974 8-1:0.0: could not read from device [ 383.552963][ T1561] input: failed to attach handler mousedev to device input25, error: -5 [ 383.583836][ T5193] bcm5974 8-1:0.0: could not read from device [ 383.717827][ T5193] bcm5974 8-1:0.0: could not read from device [ 383.845615][ T1561] usb 8-1: USB disconnect, device number 6 [ 384.902603][T10601] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1144'. [ 386.705343][T10640] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 387.632010][T10656] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.882367][T10656] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.009569][T10656] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.050566][T10663] veth1_macvtap: left promiscuous mode [ 388.056176][T10663] macsec0: entered promiscuous mode [ 388.075865][T10663] veth1_macvtap: entered promiscuous mode [ 388.081971][T10663] macsec0: left promiscuous mode [ 388.130298][T10656] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.473668][T10656] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.494076][T10656] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.514416][T10656] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.538071][T10656] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.629192][T10673] input: syz1 as /devices/virtual/input/input27 [ 391.186920][T10717] syzkaller1: entered promiscuous mode [ 391.223048][T10717] syzkaller1: entered allmulticast mode [ 391.837771][T10728] tipc: Started in network mode [ 391.842897][T10728] tipc: Node identity 7f000001, cluster identity 4711 [ 391.853775][T10728] tipc: Enabled bearer , priority 10 [ 392.439952][T10746] input input28: cannot allocate more than FF_MAX_EFFECTS effects [ 393.024989][ T43] tipc: Node number set to 2130706433 [ 393.303253][T10752] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.861945][T10752] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.010393][T10752] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.266246][T10752] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.488353][T10768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.525971][T10768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.964678][T10752] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.984942][T10752] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.002710][T10752] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.019021][T10752] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.247252][ T30] audit: type=1326 audit(1755956795.250:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10776 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa51d18ebe9 code=0x7ffc0000 [ 395.282800][ T30] audit: type=1326 audit(1755956795.260:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10776 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa51d18ebe9 code=0x7ffc0000 [ 395.338468][ T30] audit: type=1326 audit(1755956795.300:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10776 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa51d18ebe9 code=0x7ffc0000 [ 395.361018][ T30] audit: type=1326 audit(1755956795.300:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10776 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa51d18ebe9 code=0x7ffc0000 [ 395.399284][T10778] syz.6.1189 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 395.548147][ T30] audit: type=1326 audit(1755956795.300:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10776 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa51d18ebe9 code=0x7ffc0000 [ 395.570453][ T30] audit: type=1326 audit(1755956795.300:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10776 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa51d18ebe9 code=0x7ffc0000 [ 395.627342][ T30] audit: type=1326 audit(1755956795.300:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10776 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa51d18ebe9 code=0x7ffc0000 [ 395.649110][ T30] audit: type=1326 audit(1755956795.410:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10776 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa51d18ebe9 code=0x7ffc0000 [ 395.671712][ T30] audit: type=1326 audit(1755956795.690:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10776 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa51d18ebe9 code=0x7ffc0000 [ 396.567483][T10793] tipc: Enabling of bearer rejected, already enabled [ 397.053574][T10794] veth1_macvtap: left promiscuous mode [ 397.061261][T10794] macsec0: entered promiscuous mode [ 397.084417][T10796] overlayfs: missing 'lowerdir' [ 397.089798][T10798] overlayfs: missing 'lowerdir' [ 397.098154][T10794] veth1_macvtap: entered promiscuous mode [ 397.104532][T10794] macsec0: left promiscuous mode [ 397.500012][T10812] random: crng reseeded on system resumption [ 397.667198][ T5953] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 397.919365][ T5953] usb 6-1: Using ep0 maxpacket: 16 [ 398.012494][ T5953] usb 6-1: config 1 has too many interfaces: 42, using maximum allowed: 32 [ 398.106479][ T5953] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 42 [ 398.222211][ T5953] usb 6-1: config 1 has no interface number 0 [ 398.325001][ T5953] usb 6-1: too many endpoints for config 1 interface 27 altsetting 48: 48, using maximum allowed: 30 [ 398.474972][ T5953] usb 6-1: config 1 interface 27 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 398.625390][ T5953] usb 6-1: config 1 interface 27 has no altsetting 0 [ 398.704341][ T5953] usb 6-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 398.736394][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 398.814459][ T5953] usb 6-1: Product: syz [ 398.921266][T10833] block nbd6: NBD_DISCONNECT [ 399.195279][ T5953] usb 6-1: Manufacturer: syz [ 399.199945][ T5953] usb 6-1: SerialNumber: syz [ 399.452303][ T5953] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 399.486308][ T5917] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 399.677295][ T5917] usb 7-1: config 0 has an invalid interface number: 32 but max is 0 [ 399.754920][T10847] tipc: Enabling of bearer rejected, already enabled [ 399.798965][ T5917] usb 7-1: config 0 has no interface number 0 [ 399.891496][ T5917] usb 7-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 400.110662][ T5917] usb 7-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.264503][ T5917] usb 7-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 400.422178][ T5953] usb 6-1: USB disconnect, device number 15 [ 400.671416][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.726107][ T5917] usb 7-1: config 0 descriptor?? [ 401.767908][ T890] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 401.811376][T10870] binder: 10868:10870 ioctl 4018620d 0 returned -22 [ 401.876072][T10840] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 402.566811][ T5917] usbhid 7-1:0.32: can't add hid device: -71 [ 402.572941][ T5917] usbhid 7-1:0.32: probe with driver usbhid failed with error -71 [ 402.595169][ T890] usb 2-1: Using ep0 maxpacket: 8 [ 402.604241][ T890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 402.616363][ T5917] usb 7-1: USB disconnect, device number 7 [ 402.627032][ T890] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 402.653539][ T890] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 402.665790][ T890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 402.692711][ T890] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 402.736888][ T890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.770002][ T890] usb 2-1: Product: syz [ 402.774180][ T890] usb 2-1: Manufacturer: syz [ 402.789185][ T890] usb 2-1: SerialNumber: syz [ 402.849983][T10885] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 403.171124][ T890] usb 2-1: 0:2 : does not exist [ 403.197069][T10897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.268266][T10897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.336576][T10888] veth1_macvtap: left promiscuous mode [ 403.342119][T10888] macsec0: entered promiscuous mode [ 403.354200][T10888] veth1_macvtap: entered promiscuous mode [ 403.360188][T10888] macsec0: left promiscuous mode [ 403.376220][ T890] usb 2-1: USB disconnect, device number 32 [ 403.599847][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.615204][T10900] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1218'. [ 404.070419][T10910] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 404.115280][T10910] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 404.195733][T10909] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 404.291484][ T890] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 404.576513][ T890] usb 7-1: Using ep0 maxpacket: 32 [ 404.583307][ T890] usb 7-1: config 0 has an invalid interface number: 235 but max is 0 [ 404.599139][ T890] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.621115][ T890] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 404.644828][ T890] usb 7-1: config 0 has no interface number 1 [ 404.658253][ T890] usb 7-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 404.680786][ T890] usb 7-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.723181][ T890] usb 7-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 404.741719][ T890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.750219][ T890] usb 7-1: Product: syz [ 404.759670][ T890] usb 7-1: Manufacturer: syz [ 404.765122][ T890] usb 7-1: SerialNumber: syz [ 404.773558][ T890] usb 7-1: config 0 descriptor?? [ 404.878074][ T5953] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 405.082917][T10908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.687827][T10908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.832468][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 511.839487][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5824/1:b..l P5503/1:b..l P5208/1:b..l [ 511.850208][ C0] rcu: (detected by 0, t=10502 jiffies, g=37545, q=663 ncpus=2) [ 511.857945][ C0] task:udevd state:R running task stack:22952 pid:5208 tgid:5208 ppid:1 task_flags:0x40054c flags:0x00004006 [ 511.872519][ C0] Call Trace: [ 511.875815][ C0] [ 511.878764][ C0] __schedule+0x16aa/0x4c90 [ 511.883303][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 511.888610][ C0] ? __pfx___schedule+0x10/0x10 [ 511.893561][ C0] ? irqentry_exit+0x74/0x90 [ 511.898201][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 511.903511][ C0] preempt_schedule_irq+0xb5/0x150 [ 511.908641][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 511.914372][ C0] ? __lock_acquire+0xab9/0xd20 [ 511.919254][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 511.925079][ C0] irqentry_exit+0x6f/0x90 [ 511.929512][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.935508][ C0] RIP: 0010:lock_acquire+0x5f/0x360 [ 511.940720][ C0] Code: 89 44 24 58 0f 1f 44 00 00 65 8b 05 af 56 fe 10 83 f8 08 0f 83 b8 01 00 00 89 c0 48 0f a3 05 58 7a 02 0e 73 16 e8 f1 f0 08 00 <84> c0 75 0d f6 05 93 64 ec 0d 01 0f 84 d7 01 00 00 83 3d 79 ab 02 [ 511.960349][ C0] RSP: 0018:ffffc9000387f258 EFLAGS: 00000202 [ 511.966437][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 12023ba9a5109300 [ 511.974417][ C0] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0 [ 511.982400][ C0] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: 0000000000000000 [ 511.990383][ C0] R10: ffffc9000387f418 R11: ffffffff81acfd40 R12: 0000000000000002 [ 511.998367][ C0] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000000 [ 512.006441][ C0] ? unwind_next_frame+0xa5/0x2390 [ 512.011571][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 512.017751][ C0] ? lock_acquire+0x5f/0x360 [ 512.022360][ C0] ? unwind_next_frame+0xa5/0x2390 [ 512.027483][ C0] ? do_syscall_64+0x2bd/0x3b0 [ 512.032262][ C0] ? unwind_next_frame+0xa5/0x2390 [ 512.037475][ C0] unwind_next_frame+0xc2/0x2390 [ 512.042421][ C0] ? unwind_next_frame+0xa5/0x2390 [ 512.047546][ C0] ? unwind_next_frame+0xa5/0x2390 [ 512.052670][ C0] ? exit_to_user_mode_loop+0x75/0x110 [ 512.058148][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 512.064346][ C0] arch_stack_walk+0x11c/0x150 [ 512.069132][ C0] ? do_syscall_64+0x2bd/0x3b0 [ 512.073920][ C0] stack_trace_save+0x9c/0xe0 [ 512.078617][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 512.084005][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.090096][ C0] ? __lock_acquire+0xab9/0xd20 [ 512.094955][ C0] kasan_save_track+0x3e/0x80 [ 512.099650][ C0] ? kasan_save_track+0x3e/0x80 [ 512.104519][ C0] ? kasan_save_free_info+0x46/0x50 [ 512.109729][ C0] ? __kasan_slab_free+0x62/0x70 [ 512.114673][ C0] ? kfree+0x18e/0x440 [ 512.118762][ C0] ? vm_area_free+0x81/0x210 [ 512.123359][ C0] ? exit_mmap+0x53f/0xb50 [ 512.127781][ C0] ? __mmput+0x118/0x410 [ 512.132038][ C0] ? exit_mm+0x1da/0x2c0 [ 512.136293][ C0] ? do_exit+0x648/0x22e0 [ 512.140643][ C0] ? do_group_exit+0x21c/0x2d0 [ 512.145418][ C0] ? get_signal+0x125e/0x1310 [ 512.150100][ C0] ? arch_do_signal_or_restart+0x9a/0x750 [ 512.155833][ C0] ? exit_to_user_mode_loop+0x75/0x110 [ 512.161307][ C0] ? do_syscall_64+0x2bd/0x3b0 [ 512.166130][ C0] kasan_save_free_info+0x46/0x50 [ 512.171170][ C0] __kasan_slab_free+0x62/0x70 [ 512.175941][ C0] ? vm_area_free+0x81/0x210 [ 512.180546][ C0] kfree+0x18e/0x440 [ 512.184468][ C0] vm_area_free+0x81/0x210 [ 512.188904][ C0] exit_mmap+0x53f/0xb50 [ 512.193158][ C0] ? uprobe_clear_state+0x20f/0x290 [ 512.198374][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 512.203144][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 512.208801][ C0] ? __pfx_exit_aio+0x10/0x10 [ 512.213499][ C0] ? uprobe_clear_state+0x274/0x290 [ 512.218709][ C0] ? mm_update_next_owner+0xa7/0x870 [ 512.224017][ C0] __mmput+0x118/0x410 [ 512.228201][ C0] exit_mm+0x1da/0x2c0 [ 512.232287][ C0] ? __pfx_exit_mm+0x10/0x10 [ 512.236895][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 512.242364][ C0] ? rcu_is_watching+0x15/0xb0 [ 512.247146][ C0] do_exit+0x648/0x22e0 [ 512.251330][ C0] ? do_raw_spin_lock+0x121/0x290 [ 512.256371][ C0] ? __pfx_do_exit+0x10/0x10 [ 512.260995][ C0] do_group_exit+0x21c/0x2d0 [ 512.265602][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.270814][ C0] get_signal+0x125e/0x1310 [ 512.275353][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 512.280919][ C0] ? fput_close_sync+0x119/0x200 [ 512.285876][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 512.292065][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 512.297537][ C0] exit_to_user_mode_loop+0x75/0x110 [ 512.302835][ C0] do_syscall_64+0x2bd/0x3b0 [ 512.307443][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.313517][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 512.319679][ C0] ? clear_bhb_loop+0x60/0xb0 [ 512.324370][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.330280][ C0] RIP: 0033:0x7f95728a7407 [ 512.334709][ C0] RSP: 002b:00007fff5ce2d840 EFLAGS: 00000202 ORIG_RAX: 00000000000000e8 [ 512.343139][ C0] RAX: fffffffffffffffc RBX: 00007f957300c880 RCX: 00007f95728a7407 [ 512.351122][ C0] RDX: 0000000000000008 RSI: 00007fff5ce2d9a0 RDI: 000000000000000b [ 512.359105][ C0] RBP: 00000000000000b9 R08: 0000000000000000 R09: 0000000000000000 [ 512.367084][ C0] R10: 0000000000000bb8 R11: 0000000000000202 R12: 0000000000000000 [ 512.375073][ C0] R13: 000055975691c100 R14: 0000559787e2f5d0 R15: 0000000000000000 [ 512.383080][ C0] [ 512.386108][ C0] task:dhcpcd state:R running task stack:21384 pid:5503 tgid:5503 ppid:1 task_flags:0x40054c flags:0x00004006 [ 512.399624][ C0] Call Trace: [ 512.402916][ C0] [ 512.405863][ C0] __schedule+0x16aa/0x4c90 [ 512.410400][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 512.415698][ C0] ? finish_task_switch+0x26b/0x950 [ 512.420924][ C0] ? __pfx___schedule+0x10/0x10 [ 512.425786][ C0] ? irqentry_exit+0x74/0x90 [ 512.430403][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 512.435704][ C0] preempt_schedule_irq+0xb5/0x150 [ 512.440831][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 512.446593][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 512.452416][ C0] irqentry_exit+0x6f/0x90 [ 512.456848][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 512.462841][ C0] RIP: 0010:preempt_schedule_common+0x91/0xd0 [ 512.468921][ C0] Code: 42 80 3c 38 00 74 08 4c 89 f7 e8 4a 5c b8 f6 49 89 1e bf 01 00 00 00 e8 bd ad ff ff 65 8b 05 76 de 34 07 65 ff 0d 6f de 34 07 <65> 48 8b 1c 25 08 90 9c 92 48 89 d8 48 c1 e8 03 42 80 3c 38 00 0f [ 512.488543][ C0] RSP: 0018:ffffc9000390f620 EFLAGS: 00000246 [ 512.494629][ C0] RAX: 0000000000000001 RBX: ffffffff8b67b10e RCX: 72742a291ae3ac00 [ 512.502616][ C0] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0 [ 512.510605][ C0] RBP: ffffc9000390f6b8 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 512.518591][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 512.526579][ C0] R13: ffff888030e18080 R14: ffff88802ef732e0 R15: dffffc0000000000 [ 512.534572][ C0] ? preempt_schedule+0xae/0xc0 [ 512.539452][ C0] preempt_schedule+0xae/0xc0 [ 512.544142][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 512.549536][ C0] preempt_schedule_thunk+0x16/0x30 [ 512.554762][ C0] _raw_spin_unlock_irqrestore+0xfd/0x110 [ 512.560506][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 512.566864][ C0] __wake_up_common_lock+0x190/0x1f0 [ 512.572175][ C0] ? sock_def_wakeup+0x20/0x260 [ 512.577047][ C0] sock_def_wakeup+0x15b/0x260 [ 512.581832][ C0] unix_release_sock+0x758/0xd30 [ 512.586798][ C0] ? __pfx_unix_release_sock+0x10/0x10 [ 512.592277][ C0] ? down_write+0x162/0x1f0 [ 512.596803][ C0] ? __pfx_down_write+0x10/0x10 [ 512.601672][ C0] ? do_raw_spin_lock+0x121/0x290 [ 512.606724][ C0] unix_release+0x92/0xd0 [ 512.611076][ C0] sock_close+0xc3/0x240 [ 512.615333][ C0] ? __pfx_sock_close+0x10/0x10 [ 512.620194][ C0] __fput+0x449/0xa70 [ 512.624205][ C0] task_work_run+0x1d1/0x260 [ 512.628819][ C0] ? __pfx_task_work_run+0x10/0x10 [ 512.633968][ C0] do_exit+0x6b5/0x22e0 [ 512.638152][ C0] ? do_raw_spin_lock+0x121/0x290 [ 512.643203][ C0] ? __pfx_do_exit+0x10/0x10 [ 512.647834][ C0] do_group_exit+0x21c/0x2d0 [ 512.652450][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.657671][ C0] get_signal+0x125e/0x1310 [ 512.662211][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 512.667782][ C0] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 512.673781][ C0] ? sock_def_wakeup+0x20/0x260 [ 512.678649][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 512.684840][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 512.690314][ C0] exit_to_user_mode_loop+0x75/0x110 [ 512.695612][ C0] do_syscall_64+0x2bd/0x3b0 [ 512.700220][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.705433][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.711516][ C0] ? clear_bhb_loop+0x60/0xb0 [ 512.716210][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.722117][ C0] RIP: 0033:0x7f6d1bd0c5d7 [ 512.726545][ C0] RSP: 002b:00007ffc9ac3e1a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000030 [ 512.734981][ C0] RAX: 0000000000000000 RBX: 0000564dcfe80cb0 RCX: 00007f6d1bd0c5d7 [ 512.742973][ C0] RDX: 0000000000000571 RSI: 0000000000000001 RDI: 000000000000001b [ 512.751044][ C0] RBP: 0000000000000000 R08: 00000000000003a0 R09: 0000000000000000 [ 512.759022][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc9ac4e3f0 [ 512.767005][ C0] R13: 0000564dcfe771f0 R14: 00007ffc9ac3e201 R15: 0000000000000000 [ 512.775097][ C0] [ 512.778123][ C0] task:syz-executor state:R running task stack:21512 pid:5824 tgid:5824 ppid:5823 task_flags:0x40050c flags:0x00004006 [ 512.791630][ C0] Call Trace: [ 512.794919][ C0] [ 512.797862][ C0] __schedule+0x16aa/0x4c90 [ 512.802400][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 512.807697][ C0] ? finish_task_switch+0x26b/0x950 [ 512.812921][ C0] ? __pfx___schedule+0x10/0x10 [ 512.817787][ C0] ? irqentry_exit+0x74/0x90 [ 512.822405][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 512.827707][ C0] preempt_schedule_irq+0xb5/0x150 [ 512.832835][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 512.838577][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 512.844401][ C0] irqentry_exit+0x6f/0x90 [ 512.848828][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 512.854826][ C0] RIP: 0010:preempt_schedule_common+0x11/0xd0 [ 512.860903][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 49 bf 00 00 00 00 00 fc ff df eb 0d <48> f7 03 08 00 00 00 0f 84 9b 00 00 00 65 ff 05 db de 34 07 65 8b [ 512.880523][ C0] RSP: 0018:ffffc90003f8f280 EFLAGS: 00000246 [ 512.886607][ C0] RAX: 1ffff1100f884b40 RBX: ffff88807c425a00 RCX: 9ead5bca38b99a00 [ 512.894591][ C0] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0 [ 512.902580][ C0] RBP: ffffc90003f8f328 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 512.910564][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 000055555f6c4000 [ 512.918548][ C0] R13: dffffc0000000000 R14: ffff88807c426ee0 R15: dffffc0000000000 [ 512.926552][ C0] preempt_schedule+0xae/0xc0 [ 512.931245][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 512.936641][ C0] preempt_schedule_thunk+0x16/0x30 [ 512.941866][ C0] _raw_spin_unlock+0x3f/0x50 [ 512.946562][ C0] unmap_page_range+0x3842/0x41c0 [ 512.951655][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 512.957045][ C0] ? unmap_vmas+0x144/0x580 [ 512.961574][ C0] ? unmap_vmas+0x144/0x580 [ 512.966093][ C0] unmap_vmas+0x399/0x580 [ 512.970461][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 512.975351][ C0] exit_mmap+0x248/0xb50 [ 512.979606][ C0] ? uprobe_clear_state+0x20f/0x290 [ 512.984820][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 512.989593][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 512.995254][ C0] ? __pfx_exit_aio+0x10/0x10 [ 512.999956][ C0] ? uprobe_clear_state+0x274/0x290 [ 513.005169][ C0] ? mm_update_next_owner+0xa7/0x870 [ 513.010479][ C0] __mmput+0x118/0x410 [ 513.014562][ C0] exit_mm+0x1da/0x2c0 [ 513.018652][ C0] ? __pfx_exit_mm+0x10/0x10 [ 513.023255][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 513.028728][ C0] ? rcu_is_watching+0x15/0xb0 [ 513.033512][ C0] do_exit+0x648/0x22e0 [ 513.037694][ C0] ? do_raw_spin_lock+0x121/0x290 [ 513.042739][ C0] ? __pfx_do_exit+0x10/0x10 [ 513.047361][ C0] do_group_exit+0x21c/0x2d0 [ 513.051969][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.057182][ C0] get_signal+0x125e/0x1310 [ 513.061719][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 513.067290][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 513.073459][ C0] ? __se_sys_pselect6+0x291/0x300 [ 513.078600][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 513.084076][ C0] exit_to_user_mode_loop+0x75/0x110 [ 513.089381][ C0] do_syscall_64+0x2bd/0x3b0 [ 513.093986][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.100070][ C0] ? asm_common_interrupt+0x26/0x40 [ 513.105283][ C0] ? clear_bhb_loop+0x60/0xb0 [ 513.109979][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.115907][ C0] RIP: 0033:0x7fea61b8e9ac [ 513.120334][ C0] RSP: 002b:00007ffc5d89ba50 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 513.128769][ C0] RAX: fffffffffffffdfe RBX: 00007ffc5d89bb80 RCX: 00007fea61b8e9ac [ 513.136753][ C0] RDX: 0000000000000000 RSI: 00007ffc5d89bb80 RDI: 0000000000000026 [ 513.144737][ C0] RBP: 00007ffc5d89bdc0 R08: 00007ffc5d89ba80 R09: 00007ffc5d89ba90 [ 513.152718][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc5d89be20 [ 513.160696][ C0] R13: 0000000000000000 R14: 00007ffc5d89bfd0 R15: 00007ffc5d89bc10 [ 513.168705][ C0] [ 513.171747][ C0] rcu: rcu_preempt kthread starved for 10632 jiffies! g37545 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 513.182950][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 513.192928][ C0] rcu: RCU grace-period kthread stack dump: [ 513.198819][ C0] task:rcu_preempt state:R running task stack:26888 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 513.212329][ C0] Call Trace: [ 513.215614][ C0] [ 513.218556][ C0] __schedule+0x16aa/0x4c90 [ 513.223108][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 513.228419][ C0] ? __pfx___schedule+0x10/0x10 [ 513.233281][ C0] ? irqentry_exit+0x74/0x90 [ 513.237897][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 513.243202][ C0] preempt_schedule_irq+0xb5/0x150 [ 513.248326][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 513.254071][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 513.259903][ C0] irqentry_exit+0x6f/0x90 [ 513.264334][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 513.270330][ C0] RIP: 0010:preempt_count_sub+0x65/0x170 [ 513.275982][ C0] Code: ff ff ff 7f 39 cf 7f 2a 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 5e 65 8b 05 64 ad 0b 11 f7 df 65 01 3d 5b ad 0b 11 <5b> 5d e9 44 80 d8 09 cc 90 e8 6d 14 25 03 85 c0 74 39 48 c7 c0 34 [ 513.295605][ C0] RSP: 0018:ffffc90000157a10 EFLAGS: 00000257 [ 513.301691][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 513.309672][ C0] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: 00000000ffffffff [ 513.317657][ C0] RBP: 1ffff11003a5cb43 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 513.325644][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffff88801d2e5a2c [ 513.333632][ C0] R13: dffffc0000000000 R14: 1ffff11003a5cb40 R15: ffff88801d2e6c88 [ 513.341636][ C0] schedule+0x16f/0x360 [ 513.345810][ C0] schedule_timeout+0x12b/0x270 [ 513.350686][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 513.356080][ C0] ? __pfx_process_timeout+0x10/0x10 [ 513.361388][ C0] ? prepare_to_swait_event+0x341/0x380 [ 513.366955][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 513.371825][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 513.376771][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.381983][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 513.387277][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 513.392496][ C0] ? finish_swait+0xcd/0x1f0 [ 513.397107][ C0] rcu_gp_kthread+0x99/0x390 [ 513.401710][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 513.406920][ C0] ? __kthread_parkme+0x7b/0x200 [ 513.411880][ C0] ? __kthread_parkme+0x1a1/0x200 [ 513.416936][ C0] kthread+0x70e/0x8a0 [ 513.421044][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 513.426269][ C0] ? __pfx_kthread+0x10/0x10 [ 513.430893][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.436109][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.441320][ C0] ? __pfx_kthread+0x10/0x10 [ 513.445939][ C0] ret_from_fork+0x3fc/0x770 [ 513.450550][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 513.455681][ C0] ? __switch_to_asm+0x39/0x70 [ 513.460467][ C0] ? __switch_to_asm+0x33/0x70 [ 513.465253][ C0] ? __pfx_kthread+0x10/0x10 [ 513.469862][ C0] ret_from_fork_asm+0x1a/0x30 [ 513.474661][ C0] [ 513.477691][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 513.484025][ C0] CPU: 0 UID: 0 PID: 10900 Comm: syz.3.1218 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 513.494016][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.504086][ C0] RIP: 0010:finish_task_switch+0x26b/0x950 [ 513.509916][ C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 ff 1a d7 09 e8 da b7 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 513.529539][ C0] RSP: 0018:ffffc9000479f5f8 EFLAGS: 00000282 [ 513.535623][ C0] RAX: 1f5bcfc93c22d000 RBX: 0000000000000000 RCX: 1f5bcfc93c22d000 [ 513.543613][ C0] RDX: 0000000000000000 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 513.551601][ C0] RBP: ffffc9000479f650 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 513.559586][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffff888020bebc00 [ 513.567570][ C0] R13: dffffc0000000000 R14: ffff88807cf3da00 R15: ffff8880b863a9d8 [ 513.575554][ C0] FS: 00007f0d6ea266c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 513.584493][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.591087][ C0] CR2: 0000564dcfe760a0 CR3: 000000002869e000 CR4: 00000000003526f0 [ 513.599071][ C0] Call Trace: [ 513.602360][ C0] [ 513.605306][ C0] __schedule+0x16b2/0x4c90 [ 513.609847][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 513.615151][ C0] ? __pfx___schedule+0x10/0x10 [ 513.620013][ C0] ? irqentry_exit+0x74/0x90 [ 513.624633][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 513.629940][ C0] preempt_schedule_irq+0xb5/0x150 [ 513.635066][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 513.640808][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 513.646639][ C0] irqentry_exit+0x6f/0x90 [ 513.651069][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.657064][ C0] RIP: 0010:preempt_count_add+0x0/0x1a0 [ 513.662626][ C0] Code: c1 7c 97 48 8b 3c 24 e8 2e 2c 8f 00 eb 8c e9 f1 fe ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 49 bf 00 00 00 00 00 fc ff df 48 c7 c0 [ 513.682243][ C0] RSP: 0018:ffffc9000479f9e0 EFLAGS: 00000202 [ 513.688324][ C0] RAX: 0000000000000001 RBX: ffff888020bebc00 RCX: 0000000000000000 [ 513.696307][ C0] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: 0000000000000001 [ 513.704288][ C0] RBP: 1ffff1100417d783 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 513.712270][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffff888020bebc2c [ 513.720257][ C0] R13: dffffc0000000000 R14: 1ffff1100417d780 R15: ffff888020bece88 [ 513.728264][ C0] schedule+0x15e/0x360 [ 513.732442][ C0] __futex_wait+0x1c3/0x3e0 [ 513.736972][ C0] ? __pfx___futex_wait+0x10/0x10 [ 513.742017][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 513.747938][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 513.753252][ C0] ? migrate_enable+0x29c/0x3c0 [ 513.758127][ C0] futex_wait+0x104/0x360 [ 513.762480][ C0] ? __pfx_futex_wait+0x10/0x10 [ 513.767371][ C0] do_futex+0x333/0x420 [ 513.771547][ C0] ? __pfx_do_futex+0x10/0x10 [ 513.776241][ C0] ? __tun_chr_ioctl+0xe05/0x1df0 [ 513.781288][ C0] __se_sys_futex+0x36f/0x400 [ 513.785986][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 513.791207][ C0] ? __fget_files+0x2a/0x420 [ 513.795817][ C0] ? __secure_computing+0xe2/0x2a0 [ 513.800940][ C0] ? __x64_sys_futex+0x21/0xf0 [ 513.805724][ C0] do_syscall_64+0xfa/0x3b0 [ 513.810239][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.815452][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.821532][ C0] ? clear_bhb_loop+0x60/0xb0 [ 513.826227][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.832134][ C0] RIP: 0033:0x7f0d6db8ebe9 [ 513.836556][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.856177][ C0] RSP: 002b:00007f0d6ea260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 513.864606][ C0] RAX: ffffffffffffffda RBX: 00007f0d6ddb6098 RCX: 00007f0d6db8ebe9 [ 513.872588][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0d6ddb6098 [ 513.880567][ C0] RBP: 00007f0d6ddb6090 R08: 0000000000000000 R09: 0000000000000000 [ 513.888546][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.896527][ C0] R13: 00007f0d6ddb6128 R14: 00007fff801d8ee0 R15: 00007fff801d8fc8 [ 513.904525][ C0] [ 513.989112][ T890] kaweth 7-1:0.235: Firmware present in device. [ 514.019245][ T890] kaweth 7-1:0.235: Error reading configuration (-32), no net device created [ 514.030691][ T890] kaweth 7-1:0.235: probe with driver kaweth failed with error -5 [ 514.305064][ T890] kaweth 7-1:0.0: Firmware present in device. [ 514.374363][ T890] kaweth 7-1:0.0: Error reading configuration (-32), no net device created [ 514.384294][ T890] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 515.132769][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 515.139110][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.222508][ T5953] usb 2-1: device not accepting address 33, error -71 [ 515.245115][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 515.251440][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.563849][ T5917] usb 7-1: USB disconnect, device number 8 [ 516.894716][ T9345] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 517.162018][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 517.398620][ T7646] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.510735][ T7646] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.607680][ T7646] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.672700][ T5944] usb 4-1: USB disconnect, device number 30 [ 517.687229][ T7646] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.785865][ T7646] bridge_slave_1: left allmulticast mode [ 517.791539][ T7646] bridge_slave_1: left promiscuous mode [ 517.797300][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.807803][ T7646] bridge_slave_0: left promiscuous mode [ 517.814610][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.144881][ T7646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.156313][ T7646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.168113][ T7646] bond0 (unregistering): (slave team0): Releasing backup interface [ 518.177309][ T7646] bond0 (unregistering): Released all slaves [ 518.192939][ T7646] bond1 (unregistering): Released all slaves [ 518.278057][ T7646] tipc: Disabling bearer [ 518.283614][ T7646] tipc: Left network mode [ 518.489984][ T7646] hsr_slave_0: left promiscuous mode [ 518.495871][ T7646] hsr_slave_1: left promiscuous mode [ 518.501617][ T7646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.509462][ T7646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.524930][ T7646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.538067][ T7646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.575446][ T7646] veth1_macvtap: left promiscuous mode [ 518.580962][ T7646] veth0_macvtap: left promiscuous mode [ 518.586974][ T7646] veth1_vlan: left promiscuous mode [ 518.592560][ T7646] veth0_vlan: left promiscuous mode [ 519.980515][ T7646] team0 (unregistering): Port device team_slave_1 removed [ 520.013440][ T7646] team0 (unregistering): Port device team_slave_0 removed [ 520.710919][ T7646] IPVS: stop unused estimator thread 0... [ 520.819659][ T7646] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.887711][ T7646] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.929134][ T7646] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.993809][ T7646] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.137770][ T7646] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.197977][ T7646] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.256799][ T7646] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.295938][ T7646] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.415012][ T7646] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.478185][ T7646] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.525385][ T7646] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.568883][ T7646] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.660569][ T7646] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.709386][ T7646] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.778002][ T7646] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.825700][ T7646] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0