last executing test programs: 2m24.516284314s ago: executing program 2 (id=409): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x10, 0x1, @none, 0x6, 0x7, 0x7, 0x7f, 0x2, 0x0, 0xa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}]}}}}, 0x1d) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000900)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1c, 0x8, 0x0, 0x0, 0x1000, {[@sack={0x5, 0x1a, [0x0, 0x8, 0x1, 0x5, 0x0, 0xcac]}, @sack={0x5, 0x6, [0x9]}, @exp_fastopen={0xfe, 0xd, 0xf989, "499ea6c280067fe4a5"}, @mss={0x2, 0x4, 0x5}, @fastopen={0x22, 0x12, "f157034ee90058f425e48588873ab03d"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @local, 0x3}, @timestamp={0x8, 0xa, 0x7, 0x8}, @nop, @window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) 2m24.110305274s ago: executing program 2 (id=411): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@generic='I']}, 0x18}}, 0x0) (fail_nth: 9) 2m23.522095706s ago: executing program 2 (id=413): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x74, 0x5, 0x2}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xb3, 0x72, 0x31, 0x40, 0x5032, 0xbc7, 0x4e1c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf5, 0x0, 0x0, 0x49, 0xc0, 0xce}}]}}]}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) 2m21.497767252s ago: executing program 2 (id=417): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000008d386000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000004000a0000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000000000000000000000000000003002b00000000000000000000000000000000000000000000000000000000000000000000000000010000000000000084010500ac1414aa000000000000000000000000000004d53c00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000007f000001000000000000000000000000000004d43c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000ac1414bb000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa0000000033"], 0x23c}}, 0x0) 2m21.496611897s ago: executing program 2 (id=419): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0x0) 2m21.491647305s ago: executing program 2 (id=423): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES64], 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r1, r1, 0x0, 0x400000000003f) (async, rerun: 32) r2 = dup(r1) (rerun: 32) fallocate(r2, 0x11, 0x8000000, 0x100000003fc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000200001000000000000000000020000002500000200000000080004"], 0x2c}}, 0x0) (async) r3 = userfaultfd(0x801) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x15, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], "223427d5c9a46b9fa14172170a013589317d2af31b"}}}}}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f0000000380)={0xdb, 0x0, 0x7fff}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) syz_usb_connect$cdc_ncm(0x6, 0xa9, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x2, 0x1, 0x2, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "6b784293"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x80, 0xf}, {0x6, 0x24, 0x1a, 0x3, 0x19}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x3, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3f, 0x3, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x40, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x2}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x62, 0xa2, 0x83, 0x8, 0x5}, 0x10e, &(0x7f0000000300)={0x5, 0xf, 0x10e, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc7, 0x10, 0xbe, 0x942, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x81, 0x68, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x1, 0xbf}, @generic={0x7, 0x10, 0x4, "c00424ad"}, @generic={0xe3, 0x10, 0x4, "e03e1d975a1a23b0f71ceed3cd9dc207fb47ff9dca213b40737f44c51440e369bb8142f4cb283de716dc13df8ef0ac4b47b2841c75d881c1b931337a0d364c1cdddd1746afdbbe9b0ad5a64509cf3664544c8217a9cdb2186eccd695b6ab777ce59dc234e358105ffd831def0d263b8d6cffbc5abb70bf9bd5c0cdce7ed2e001b6e718a4e7ae8e6150e48dd6133c94cb7c2edddc7604d231daf424d79bd7b526c930762b12c5b18a9feb4af849bf8f91b582682cb5a7899fd46c814aab7b805c8732840c7fe2949773f44dab2a86244e021a56a966ecf6dca965912a7881a4fb"}]}}) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000440)={0x5c9dd0b39c80d652, 0x2, 0xeeee0000, 0x2000, &(0x7f0000e78000/0x2000)=nil}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async, rerun: 32) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async, rerun: 32) r6 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) (rerun: 32) bind$can_j1939(r6, &(0x7f00000004c0)={0x1d, r7, 0x3, {0x2, 0x1, 0x4}, 0xfe}, 0x18) (async) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000500)={0x9, {0xd, 0x3, 0x4, 0x80000001}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) r8 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x10) (async) syz_usb_control_io(r0, 0x0, 0x0) 2m6.49794596s ago: executing program 32 (id=423): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES64], 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r1, r1, 0x0, 0x400000000003f) (async, rerun: 32) r2 = dup(r1) (rerun: 32) fallocate(r2, 0x11, 0x8000000, 0x100000003fc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000200001000000000000000000020000002500000200000000080004"], 0x2c}}, 0x0) (async) r3 = userfaultfd(0x801) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x15, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], "223427d5c9a46b9fa14172170a013589317d2af31b"}}}}}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f0000000380)={0xdb, 0x0, 0x7fff}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) syz_usb_connect$cdc_ncm(0x6, 0xa9, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x2, 0x1, 0x2, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "6b784293"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x80, 0xf}, {0x6, 0x24, 0x1a, 0x3, 0x19}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x3, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3f, 0x3, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x40, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x2}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x62, 0xa2, 0x83, 0x8, 0x5}, 0x10e, &(0x7f0000000300)={0x5, 0xf, 0x10e, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc7, 0x10, 0xbe, 0x942, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x81, 0x68, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x1, 0xbf}, @generic={0x7, 0x10, 0x4, "c00424ad"}, @generic={0xe3, 0x10, 0x4, "e03e1d975a1a23b0f71ceed3cd9dc207fb47ff9dca213b40737f44c51440e369bb8142f4cb283de716dc13df8ef0ac4b47b2841c75d881c1b931337a0d364c1cdddd1746afdbbe9b0ad5a64509cf3664544c8217a9cdb2186eccd695b6ab777ce59dc234e358105ffd831def0d263b8d6cffbc5abb70bf9bd5c0cdce7ed2e001b6e718a4e7ae8e6150e48dd6133c94cb7c2edddc7604d231daf424d79bd7b526c930762b12c5b18a9feb4af849bf8f91b582682cb5a7899fd46c814aab7b805c8732840c7fe2949773f44dab2a86244e021a56a966ecf6dca965912a7881a4fb"}]}}) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000440)={0x5c9dd0b39c80d652, 0x2, 0xeeee0000, 0x2000, &(0x7f0000e78000/0x2000)=nil}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async, rerun: 32) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async, rerun: 32) r6 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) (rerun: 32) bind$can_j1939(r6, &(0x7f00000004c0)={0x1d, r7, 0x3, {0x2, 0x1, 0x4}, 0xfe}, 0x18) (async) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000500)={0x9, {0xd, 0x3, 0x4, 0x80000001}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) r8 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x10) (async) syz_usb_control_io(r0, 0x0, 0x0) 1m17.029509817s ago: executing program 4 (id=617): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40080c1) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000500)={0x0, 0x9}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000580)={0xfff9, 0xd, 0x4, 0x8000, 0x39b6, 0x73a, 0xf4, 0x1ff, r1}, 0x20) syz_usb_connect(0x0, 0x63, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdc03, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) getsockname(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0xfc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x22d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}}]}, 0x88}}, 0x20000000) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b7"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) syz_emit_ethernet(0x9e, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x1d, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @dev, @local, {[@ra={0x94, 0x4, 0x20}, @ssrr={0x89, 0x3}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@private}, {@multicast2}, {@empty, 0x6}, {@broadcast}]}, @timestamp={0x44, 0x24, 0x0, 0x0, 0x0, [0x9, 0x7f, 0x7ff, 0x1, 0x3, 0xfffffe00, 0x80000000, 0x9]}]}}}}}}}, 0x0) 1m13.819000969s ago: executing program 4 (id=631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x2a, 0x3, 0x8, 0x9, 0x1, 0x2, 0x5}, 0x0) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x3100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x3ff}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x256b5c06d61fe660, 0x0, 0x5}}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="925bb68c5eb20f1248", 0x9}, 0x1, 0x0, 0x0, 0xb9fb632c8619d8b9}, 0xee) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xffffff27, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020a4a5025a800fffe24000480200001800700010063740000140002800800024000413d9d18745a4aa35f171124d06600000408000140000000090900010073797a30000000000900020073797a320000000014"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x480) 1m11.235085516s ago: executing program 4 (id=638): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000001c0)={0x2, 0x2}, 0x2) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m10.611116688s ago: executing program 4 (id=642): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRESOCT=r0, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x1004) 1m10.422611117s ago: executing program 4 (id=643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000000c0)={0x6, 0x6, 0x2, {0x3, @vbi={0x8, 0x6, 0xffff8001, 0x3032344d, [0x2, 0x8], [0x7ff, 0x5], 0x108}}, 0x5}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000580)=@x86={0x8f, 0x1b, 0x4, 0x0, 0x3, 0xb, 0xb, 0x6, 0xb, 0x3, 0x2a, 0x4, 0x0, 0x8000, 0x6, 0x1b, 0x80, 0x2c, 0x2, '\x00', 0x1e, 0xb}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 1m9.877546095s ago: executing program 4 (id=644): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f00000001c0)=@usbdevfs_connect) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000022c0)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) gettid() r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats\x00') write$apparmor_current(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r8, r8, 0x0, 0x200000) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd6, &(0x7f0000000240), &(0x7f00000003c0)=0x4) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newspdinfo={0x1c, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x2, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m5.496093001s ago: executing program 0 (id=665): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @mcast1, 0x1}, {0xa, 0x0, 0xb, @mcast1}, r2}}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r7}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606f492704c79d65f40a40e07fff024bb00000000", 0x29) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m4.50715136s ago: executing program 0 (id=669): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000900)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1c, 0x8, 0x0, 0x0, 0x1000, {[@sack={0x5, 0x1a, [0x0, 0x8, 0x1, 0x5, 0x0, 0xcac]}, @sack={0x5, 0x6, [0x9]}, @exp_fastopen={0xfe, 0xd, 0xf989, "499ea6c280067fe4a5"}, @mss={0x2, 0x4, 0x5}, @fastopen={0x22, 0x12, "f157034ee90058f425e48588873ab03d"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @local, 0x3}, @timestamp={0x8, 0xa, 0x7, 0x8}, @nop, @window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) 1m4.295010756s ago: executing program 0 (id=670): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000180)) 1m3.926736428s ago: executing program 0 (id=673): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m3.673030509s ago: executing program 0 (id=675): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = epoll_create(0x6) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4b, 0xe6, 0x82, 0x10, 0xbfd, 0x104, 0xf104, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x8, [{{0x9, 0x4, 0xa7, 0x0, 0x1, 0x76, 0x2d, 0xbc, 0x0, [], [{{0x9, 0x5, 0x8a, 0x2, 0x200, 0x2, 0x4}}]}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x1, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4, &(0x7f0000000000)=[{0x2, 0x1}, {0x80000000, 0x40, 0xffff}], 0x2, 0x199c, 0x32, 0x8, 0x8, 0x1}) r6 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r7 = socket$inet(0x2, 0x1, 0x100) getsockopt(r7, 0x1, 0xc, &(0x7f0000000280)=""/151, &(0x7f0000000340)=0x97) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x1, 0x0) fchdir(r8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000280)={0x2, 'tunl0\x00', 0x1}, 0x18) r9 = openat(r8, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0xfffffffe, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040000) r10 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) write(r10, &(0x7f0000000140)='/', 0x1) sendfile(r10, r10, &(0x7f0000001000), 0xfec) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 1m2.012131671s ago: executing program 5 (id=682): r0 = socket$inet6(0xa, 0x80001, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 1m1.678129611s ago: executing program 5 (id=683): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000072043f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x7000000, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m1.480394092s ago: executing program 5 (id=684): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="2014040000000426fd9802598073f36760ac56487e3ab631d9698da8d6d71865e904fe1893db722d7fec825c99bc57091dae1ae60700dfaf7000000000000000001aa55c447c4146daa1776069dcf48b4f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000008c0)={0x40, 0x1, 0x4, "a38fb778"}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) get_robust_list(0x0, 0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') fremovexattr(r3, &(0x7f0000000600)=@known='system.posix_acl_default\x00') sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1m0.322768383s ago: executing program 0 (id=689): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r3, 0x7, &(0x7f0000019080)=""/33}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r4 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r5, 0x0, 0x0, 0xc, 0xd4ba) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x1001) 1m0.32020775s ago: executing program 1 (id=690): syz_usb_connect(0x2, 0x6b1, &(0x7f0000000680)={{0x12, 0x1, 0x141, 0x41, 0x76, 0x9f, 0x20, 0xb3b, 0x1630, 0x92b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69f, 0x1, 0x1, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0xe1, 0x4, 0xb, 0x1a, 0xdc, 0x47, 0x0, [], [{{0x9, 0x5, 0x80, 0x0, 0xa0, 0x7, 0x1, 0x2}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x8, 0xc9, 0x7, [@generic={0x9e, 0x21, "256e5b88e6094d206f0600cc7cf8ab7118ac01e7742f62dd100315a34b7f9e4771e36208b6de40a9b9caba2f5e6be03472403af808a8922e6a59f477ce61d27159d1f45acbcf537c655cb26557dfa2552ed2bb1d62726e0857065d4e81948a699d9b98b78eb4b2343191dd0b32260ae2439131d3e74427de8457e107e8d2fbe0bacecbb26a6d981dcab3b98ac191e6e8f35bf0b8435fbaa9b2623c64"}, @generic={0xee, 0xe, "a08e026ce31b2038773d1f803bff0ba3b89adfed0c48715de24b800e677b93657ff575aff7745390e40c6d460221d34c0f292bb95ed0cc720e68fae217f84562abb754ad84626ed90a4578be2ad2bf314ed98d0bedacda1464e50a61faa257df1c6d1a62bc63349ee1f5e61169aebf0cc559ac2d9cfc080d70882a7cd7c54052516f1e1223a58b75c5ff41f3a527f6d0b658aeee305b1530799b03d1adf88f7baea277d43dc7ef666bc59d63fadf5c77ed97d9555a9a11fe33ec5baa2f354ba71ae841f02accbb9c1f672c6c54531998c2ee59eaa75f16bdc2df618a14bf4a903619bf8b9399b9981f2c6b30"}]}}, {{0x9, 0x5, 0x9, 0x1f, 0x400, 0x4, 0x40, 0xf, [@generic={0xfb, 0x1, "a2381938764a93e0de8ca2d7ade0e402477cc1fe6bae0819f95e324c734d9bc9333266a01e5336d7f3a25b30441f3d4aa6eca0f3e5ac7efd0299feec4de4aaae2b4639992eaeae067523a31481a75eb7ca0f8d666e18a13f29d01b899081357c4332d9ce336efe53d177f44482af5f70d70aea28138ee913ae1e9ba04f899865c51400042e75a61a927507287c2acf0894a274057187c8e743c7bbe12e94d3755213f8bc58722d7d3eaac8aad5884c4537c0266e70325ad731ba58c008e194d92a90db642f4c73681edd50eebab619d778d05cccd924f45c19aaa02cb1b5e86688db41433a77c11e3c7071e482fa96b359ead92ff30134978f"}, @generic={0xf2, 0x8, "10f2c51ab4e81636b486feef7791f52c1c803b4663e169e83cac19d1b327240d30b9f7bef438593254113a0bfa97f1f0b407d29ffa71e30d846744ab36de0cafe7fe358c44a88f9784e05073d30b22166c49b8e7ee46eb0a7beb523a1c5521e9c4e9673c7b6908e6578c26e34003ce45ee5ac871e51e164dfec1743726755b5ec912c3d1566743803bb74888ff668ef7de5e7357311dbfd77dc551f44070061cbeae9d4fb75ccf76039713b5618e7528a214d4ca4eb85239c94729e5881187faf2aec5018dd394b7c036ae402d7f13b87487a8ac1fdaabb66a02358195082fda79b4b9654bb77ac8b09a63c879a280a4"}]}}, {{0x9, 0x5, 0xcebe6dc95285e3ee, 0x3, 0x10, 0x4, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x9}, @generic={0xf7, 0xe, "eba98f35f1ec9f612cb0f5f7c997f1f312421e837d577a3d70c26e4d3260f1d982345fb8fec6c3191c2d00575f90b7b9c33d3e213f46198b104e61b02d51f1a25f296fb5a9f55f6761831339fcacb8e273627ad3be5568b34f4f546ac8c43b8367607ed86bc4575044db7c7291622c9d2d685445910dd716225b353997836e2ef68fe9f77fb535055db154c54587122725f1c86fcb9108102b74c2cc5aca66f4b19e84f0d4ee7c4d9756a8a45e05c12b90169048522cb2ff131fb7def7c7f493f85a2c023c32279607e5080d7ee37968229b41c2df36655f0642de35fa212fc99d2b8b2945e06dcbdaa642612a81c2c19201cbcf70"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x4, 0xa4, 0x2, [@generic={0x5f, 0x7, "1bc063100aff46a964291ad3426b039110eb0ee523c4852d84404759d30ce247b53f76c66c40c22cb6b33572350b4b95c49196392d4e78fa23ddce028f205941077255df0df4ad6e746bb0451cba22ef4fdcacd2bfebac0bb4b778733e"}, @generic={0x1d, 0xd, "7d7edb2750b4234360da43247f828ee91948ca054ca09ef9efc4ee"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x38, 0x9, 0x7}}, {{0x9, 0x5, 0xe, 0x19, 0x10, 0x6, 0x3f, 0x4}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0xa, 0x6, 0x9, [@generic={0x8a, 0xf, "945a138d24d6deadeb107c2f2f4015500a9f6348f1501231ebcce5edb6df297022b0cd8555f34a640a7b7a92906c4fd1c751d2dbbeeebc9f1b6d6a3f3392c18a70757125ed1389fe74faac08007c03feea7be730e1cc2e1f945edb4c2746c05faf6c26f47fc534fd406fbd809121dccdb961383eb364371e309d86f746ec93c10d6c6ae594014341"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0xe, 0x0, 0x8, [@generic={0xad, 0x2, "1a72b5224306d5f6eac8998889952501835715b9dcf64272a8fd2d538c285f22d4542972e325f31dc9fde1c34fcaf42e6219952e41f6c44439dfdb8db817d11e8363f02db68eab27b6eb04404aaa6bb704772428966da18b904023606b30cb5dd453290be52fa6effab6471b05305aab03c57b5130116daf6e4737f9765a059f2859b9703a5b3195f14ada21cfa452d44e9f72b405113d183e1b801b735251e0a04a7f27861b07ae9f7366"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x7, 0x9, 0xca}}, {{0x9, 0x5, 0x7, 0xc, 0x600, 0x90, 0x9, 0x5c}}]}}]}}]}}, 0x0) 58.549951635s ago: executing program 1 (id=698): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d330887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b3365959bfc9a240d2567f3988f7ef31952013fffe8d178708c523c921b1b9b39070d075d0936cd3b78130d9b61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r4 = socket$kcm(0x29, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000200000000000000040000000000000010000000fcffff7a20"], 0x24, 0x0) kexec_load(0xfff, 0x5, &(0x7f0000000800)=[{&(0x7f0000000180)="6e63cebc454dc20a1e1c09b8e76191fe4ca6c62b622435b2378835ea2b3dad39b628f561f96530f108a9e97c7f77d48c45da", 0x32, 0xccf, 0x1}, {&(0x7f0000000200)="66547930bb42c2c393a8b91618", 0xd, 0x8001, 0x5}, {&(0x7f0000000700)="b93842561d3fcbaaaf2db998e5274dbb859c2431c354ff5c8c09641a03bb00dbcb7037cd823cffe0d811bd85bc9b4270f423f60a3cfb766251f4fb7ca3c35a95f39e413eb582bb1357498da7c0616b7cfcb445d99d639020738b4d6b85f5a09dc54b33d5c364587cea88ede4584b97ef19f6af8a6441846b75bd4fbe279b74da1256a29ac1e2bfdc0217216a27f4fe65ee55662d6bb9869205f3d1a13ed1c60c784b26f29d7c6632b6212009636395c7c60b73afa822e5b346af7232b7bc5e6a6b687e0f1fe665978587", 0xca, 0x6, 0x7}, {&(0x7f0000000240)="03ab333508de1b38657267989df866fe20788aec8f5794fd1be866454c86e325a3cc60db940ac2fe4c", 0x29, 0x61, 0x9}, {&(0x7f0000002800)="fc22d047c9bde4bcaed3f321d080fd71d347d17b30ad480625141163a8fae2588ba007a951bd9018587836dea9404ab50485cfec5314dff0d203f4533a816f7c11f92d563471c25a8dd17aad598d1fb95a37fe459ea539c3621480d667e493d7eac139ab1fabe474268b40c3c529f5d13a295624cb69e28f3a4d21ecbf5c3b12f921ea7495f91d0ab7d65bf44e4c8b2cfd7dfbfdfd54258acb241b930f4de26c921cf891dac91bf703acf40f682744d9d3ca2d2cb79e7d0f466ba72bb6aaa34ea6013bee08e45704fa2404aae4fac680570baf8c37a44f8e62d5003aea7227636eea29733ecc7640cd56460c5461ad4538c9654c107d51b6a01593079b1d20e2cccc1c684b9197e1f306ad2aa5c3a0c40fae59587db4e9216ae88a1c16327a62a2c54f7a65ac2cc0dab25aecc97a1ffad6e7167d05fc693a2866df8a57d9fc8c77c81877a56a2cd6e17e994380529ddfdd8ab1f7106cb41977cc9c245d8646b89e8184baca3bc96a87b614dd637048addaa6c114778fe2b2f7638a219bd6e67b8ed56cc719ef60eccc35c3833eb358b8b5bd7b8068343a5cc039916e4c98da33ed5fe877f9b199fe272fb43c079b9b4df187bc955625fcf1bb680571f9f11528321e621d45ad4e077387ef13a173f96175427516015e87f1c6dce4e1adfc1c30a84b09157a8c0b7dfa1b5b933fdd44c9a240b036ec89f368de4abc78c27582b7a99b5f2d121bf1005ec3fb474d4b8f539a892a87d3b310a601da6c44af2da6430d9ec259e19ecf414a6e93be511f10959b0738b71303a593befb2be4d859d2b4f8f2cf7cc252834c5fcc333f65ece3be8ac40af12625cb3437655e3281202c9a01aed27ab5f42963ec6aee6da55af71aff70fdb4681341ee7e9919bcd846c8d34ee24f13d107a83b2a2d413461e58cea005ec2c0dbf8e033f0c089fe05ad2f69b1e213b0f22b8ec82d3ae7ebfb6b51356aeca4871d3275fb12a8061c209b72860f2b33dc403b9a227cfb2bca9aefc24f5288432e86283c88559574af70dc86f3825fb60b0f1e693ec821d1332e39281aada34906699f17d7a116af6be0224ad6e59ad28aff0880f715d35924a0064f5581d6c716cb902a376c06efb2f1f0993654d677326c2ab80aca0685503f75aefd4fbd2bfafe312d32164aa87d3178827f80c57b7684894473e904077f46869e0a7e5e3edffa14082462f3d3ce5c86cfb08aa72c5583bd07bf3be58f04f522e43b485b064f2f9e15934b7786059f1fbd99e04fea626195d31ca0d985e336f7409fba645f550f3b42d0a109b8980d5d7203b219d5672a08cfc1b28a040951a38d0df363da231ca6440595ca5f44724224f0b6efa66ec3e69dfcb22685698c68494d2cd13faa6b22ed9285071dc7a1806a5025be4f5d1de71509be1819b262c8953bb0fee01f3f4a7b297859901dcb086c1679961b42b8039e3e065652b7067b703c5ea23029b0fcf93b5f1b445315b52f8174e4f30dc319979ebf5c1a9026eb520f78caed7891f31c7fe7aee8324c5ba5564858d2a6860aae284d72dee85b754125c031fb67ff77f222bda67dc9f4c83d48a6dd8b51fbec1467e75e3a201aecda693ab42e000993640899a7293e329b66f1da0bb4e7eeffdf6001df35d724afb459a11806fd6607299217cbbe5d3d09ac39918ae122a79288a19cd4481e85f11bfdc7bc0bfc8df53c062610bc86297d3d8fbbc6de8f18450931708337059f6a5c2460b4a40e8105d51b95cce25daf553c972f7ce411b2135e18bfc73b7fad2d6b6bafe77e2b55fd1b06c947171e609231461ec4aed24bcd13a8645f458c881d3dd7021d1d38752dfeb0e70c72725279018067927e71644b1e76378be6df43d8058209b7127a3600a2ed33340b8b6dacdfd56e2fd5fc97fb32e4a1b8e2166b757553fa915f3c459de14f3efddebe0ba64c26bf92bcfb70806e08f616cb1dd0431ebf1e6ef357e12523816dd7102c11b3222f3fb1e79a2bc29e2f0f1ef868b4e099b5af0505b3191b31f5abaa5c6750a72f351e1c8f8a87aa7a12971e4b04e4dc142a97d069db36afb7ea9470a3a5a554a2a6a4f4128eba95b578ebb515b2a90eb985eac2150d2d2ed954a9f788d6245c043c734b1705a4552175f51bb01955f0f4f6fc8fd1f44cf4e4ff22776049dc20311d85854fa93324bfcd90ce5168c1eda025aaf8e8cb788fd3a873c4a4b7cead0ef4c6a98ce11e122ab1d76c75ffdb9cc72e52a73cea9452dda47e5552885fad292b41591530624c0960064de66e5302e78fd44f4e15471225aa3e31d5ad1fd88ceee915d4173fe4dce8a690b4e53a7be2abc9f0bb6cf76abcce243a6ae1d300c492a3127cb77079c4e3dd8868361764c29afa2c2a798e474186def75145c45a37e10e82ab8cbdc7437f688993b8dc91ccef661a848f027acc37b914e73fcd2224ba07222164c74b169e49cf91bd927fbddc5ad3f41c221f9e4e1f15f4474e0f0093919eaa030c0c8edb34dfcead86d9b5a5557a497d0dcde73841b379ed2301298681ddb27887d49681d46a96e53af81df9da9081dd9e702be5de4d557be6ff7c5ceb8887001182c1432baac943222ad16fa86ab80de6f42ec07ebaca25541733f7aa36b8effdf26b9d6bb9d400b5ca19d813c0846a2e7d52d3a81d6c470085490654832199e35abb890a83bd5ecb5daf8e0b074e49453e95c3f41803075e3cfb4a3d476120b816e0f4590a19adb9d882ce4ab58db2b81366f817e813d5e3f73a31cacf29c274c02ce23fc00ebdbb39ad31736dbef12a9f17827d46479e5e28b88c822215f4107182c34e8431b783ebe14229fb79038aebcc84765afba271b4affd8e426e20dec04ead6d187ea827e7c5af999652c31f3e02398590461f55b50ed4c2e404d02787e07e568cb85dc9372bc057eab9e8283ebf2af177103b39dc9ec1eded1e3c7254e8179bf3fffe89a084661e0195b52eead76b3bb480eea0266745babf705c63086923db2ed42015490e30867b2b04e3e2f18d15cb03b120e7e89e5d6369b78fed4be3a2f9852e34a0abf3fe3c4f9929b6022e4eae3b8b0cda51763898e96d5b70f06c306a18dea3266a4df17931f57296bb5e49ac93795ae204c3285fe5efffc2746c45fe5667d8cb870f8019e571d5996a6a13156e2d96472897474885fed50687bd13312b821941d3827c3d8f0d5ecc3fa6fdb86505b7477e8555a5b3ea7c4eceaa0dde911307344fa92ab8bbfc671f472ca5bf5d42025fc9d33144220f8b63bd6ac3184922b022a574ee4674074af4bf99923ecc857fedf233e3794f81343fdd09f98235a2bbf7b8f994e209415b10a2082d8f3a4d0d89331605c905a2c1bdc60b4a096206c856ccbcbf033d7e294a40abd6541cf7223fd08f0e38f4b2d97963c5f7abb13da93de0c32edf400827bbd22930f7756c2db1fc977c863d601cebfa2ed918f25db6dd49fae1f0a6cf6189306e27fb906cf5d71d1484a9682fe7dd3326181eac484473bb1783acca136d51961c8ab14557ec22d1db92a2b2c8cb902374eed174398a45d6349f9591cb3d6aca7cd616398abe158c10c9de5d47233fc199b117661ede3a16c93ae2586cfde346e69220b4740a42661979537b2fbc930286ecb37d197bb0903c40f0354dafa2e63ab10bb7a84b69ae2796043b8478cdb70e1dc4f64f7161301b2f5d7cda6d01c45363f525a6576af4463b0202e702aabe1020ab386235d338ccac578d25e0c4f74c9c9028b7bcd62a8ea1c3d4640609c897388eb2e52f4e00277ac8211cf199a4553d08e7ea1a48ffceb04d1cb35c10d36d1d30f6fe0cb1181b98113b6c4bf35635e3590792841e2303ba524d09d7caad0b9cfb1ba5b50407a390b0ae4c11d96a48f21bcfcd2f2d12197aec645a01b835381610df7af79715d018e13bdc7ecebf7123295d8013dbbc0ecc8802ed3b2dd7fae7eef5ddb028637d8afbd4d0ddde9e0a454491c101e2fd3e2920d2572e71508ce4e9888c3f9151e6325ec550c827fe169b5ae01360a347d784c6ef0b533760f96cdc8dd0e91feb2b6525129950b874b5c783c9ae97f0e686c0e247f9293cabd132f5082ddaa6131efff7ff6a0749d663cf7eed3bc1fea66a11cf6718889d2fba65e5b3d9d9624b19d416cb1f59c5a35bd6041431d32281e3a0ca49565ccea29ed872aba2e2d34294b1ba8e77c3ff1800fd577e038840c81de59eb3fd2911fea03f4560cfe950dbe207f7d076531876835fb8f33de5859315dc846288c6759f62f4a459780b10f040f8bbf58c16d3e166308b7c0c2bf42e9256554257c879fd988a1587145e5cd69dff725763776b9bfef6775bebb4cd3ce727f32bbcae1105b628f18dd535bdfa81ebf43440a9c58eda3d294174ae106de388e52690e0eb9cece710946a5936d7e66d16912c751eb33710a6664be67630b50ac36d35d9115126cd2da2a8e8adba2168194f45dd6f223ef2e669136f40c08d727a26bbfe09cfc2164d9769eb523be75b461c17ba6ed8e0c51c8dff43888ae21d0f9a44ec11d4c11fcc538592043db1401da4b75720220693fe18020cd61a7e97b4a29022820f39ac36bab3d7c10d747572c393c1215d9a3168fd1da514de7da6db5cd6801bafae12119e238ce5ad0dddfea154216bcbdc6bdb8e73c10bdfa18d146e519ce941fe96268a89be4310c7a392c18d4b1eafe0f291a80b32816090ef4c7b2f2e247737fa111d10efbb71cc97d6403d95185af8d2f8bfbd0347d6756e504f35f8defda5ea1da3390cc4e085c5c4c2a55fa05dbf164590a7461545a46e6f04cc594c199a250583177449f3bbb1de934b14771c966a5eeea38ae6ece3413b707eb72dfb07287a73a8a4c027f2eb37cbefe3fc1f6b1df661f80c332ac0ad4a51704e1b6844bd53ed771e2fb3ef072fa9ebfc60c79b44e97aea76788afe948816cdf302f154fb9c2bf3a820f51a75961ea9daf8e5dfb899717cb17d2c1e44dd8a4c31f0dbc280e542d67ff12db39371fbb69c237686b2274372450ec84dd72754fd22c409a34f167d7147039f905b1c8c3250b5ea3f56142a13c98661f565578feb9f49bfee265260915b0d636888c0c3ce47a5a8d7f0ee4f029682d14e51fa5f06b2357b4e9c2b71cacdf387cf3163dc6509da442e30662acf2d3b5637da071c8a1f5d38e8d49d59ee041cb34516c6d37b38f54b0f1280f137e4b1311baedc9a415c1a2d4588f83424618567d8d8767b19434507393069ef22b912a4b0d811c8abdb7fe9077bb161ba2fe41a97d63f77c78e025278ea239fd3ed4fe5beb2756582fd4e8694c9e6916398309af317e3cdf33d1641e43b64af9a3469ad68959c521db3aabbfb2c50025dceec65876561f445bb09d1a1df0de4855e09d34bc32db5e7c771e4965206add67683bf096a7cdeab1d45ca9da167188a4861813644fdadaeb45fef967511c701d4d7fbd76728eb510cfce4f057236f06a5398a0944e49743eaf753bae98f11dbe74390af4cf24e81717e12e7292b9f32d5ac9515e39fb4794f4bd9db54bbefe9133e02faca9c9467a9ce3e2a797da88b6f65ada39191f6029faf2d46212f91e0f3567ec9f2ef19305ab613ff3d48b6386b37fad62827ac74f841eaf157d4a2fbe79a9769759ab7284c393eff4c0c59a8d074898907da0cd114a89d777e6e3b131de10a969c46c07afa1ae5f1f3b88a1c4a8414db2e88618420381d695eae0d545b5c5b99a0608b351ad215d8f28d480f90f8ac12d2b7d24360234e8ef4cc8403b512f9db7b6d19b2488e0c2980cdf0234f008253", 0x1000, 0xffff, 0x80000000}], 0x320000) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000080)={0x2, 0x0, 0x3, {0x100, 0xffffffff}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r8 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x4000000000006, 0x321702) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r8, 0xc008551b, &(0x7f0000000180)=ANY=[]) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r7, r6}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x24, 0x0, 0x1046100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="1827dacb7cd53e01b4852de2d748e21fa033071acb841f449efc23d452101807ae5c485596338a6d31388444ae8ade7b60a85a37d3db29ef19ae4c4d4db9c2c82c7908debb2e2b5ebef336aad77bef942d064955079af4e914f372cec8ed0440f6ee0bded3c565283bdb75124011227712d5f01e8c1eb86cf69205a8b5b374edee58ebaf09d62191cf41190260c30a719bbc9bc29be0d60c678791de6b236c9b5a057247c281937c2b2ae747c858532113e0a1e7af49298ef54f15572301d3c907b02529bc470beab8f9208cf92b17a9df99ceff90a1e384d6bda3fe823d8eff0e2229a43c31781935de69466b1082c0f88d3716f234e1d6e17e1360f6621e686d661af20eaf08cc97c261590ac3291667a87bbf66f86d9005f034ea5517b2187b6dfecebc1cb8fc4dab511a2890a68ed185483c548168803f353520cc6f820d1349ac985e12a3ff6e8a78b29ed97213962fca3ba7d04d1ab4dbcfe93a88831f784ed278d079eb3e2e69d3161600fc7b0dae825b510a59c14315fc6ca0ce68dafd088f02a92ae0ab3f15ca1a863b640e8e4a89407a8b8d752892e1f8b0e793d430c3ec46cbe2b6a4bdad728c34e734864aeac2b6b2eb51c3a2f9e6773c5834166511086dc35847cfa17974889795ed305353d41c9399bb95936a3c1be1099f21795cfc04d9699929eca65a0edcae5d4e564404e5292dc15f40d78d94be9e8dca92983bc71729ab30a70455bbfd5a98d97cab9778d9b7b69fb20019e7e7c7bc17c84da1dab53a187a116ac229e00312c95b1074afff18a8771a4ab47be2205745836dc3cc1ce531fe697e9a734698fb2343b331ad9f13214d1d7d511dc646fb8b3b70fb4611e6d102a0e2bda6311ca824537f699efdefbd8a3a523e26272f07abd75504188edc788af9c75aabf77f4ac883573f63ded319fa5a8b6317d4490391879629446fa5ea4c695f3db9739f7bc1da7a19f3e1c0ccca98307b3a7a38272b7455c8957b17138c9e170c27895fcf47eb5530948b7cc43d61a621293b0c83dc893f02def2b42a8bd7ad6c9cdfeb7a3bde141e98e5af7500b07d85c6314949b754c88cc666bdaaec89271f56ec11bfa0aa337feb1140b8a07fbd5c79bdd0239f8aa1d454c0e5a16e99d38d1212ff709bb1964c317c98bfef37b56944666f0320ec85b5b1e07731de5584901f8c65e14fd2ba83b500fdbb137c7cdf91d66400688a5da6405ca7e0b8107ed65be0ef5c6234b62f613e7e76d6f3d5cc12bde4342391524e25bab6ec0a358c6c66b7cdbdd9301f91589af65cb7c02fe8271a798c5e122fef9e7581d28884d33d01f0475c9ac052d2d014bdc09e2738487742f7bff40facf2e96dcdfefa336c46923b77b334daf7b01a9fd5d957a29b83adf6f23acc507a58dabe6b2804532bc1a865a01b1126127f7c6a8029531db8a51d8472c0abffca5be97b9b5433ad220ab9ad65cf94a1167f3fb2b8804ce66f9f5cae212724b2b3a04343580f5919f446f40eaa0177f25ebe68ee7c7a35d9d5ef6e1cb220eaf8ad9b269b15c2ab9692c345f3c3bd5965f06adfdfa2d672b5e3184ebe192f73e70e829adfac2e6318d238dceb6e3d7d1422d57ff7124793b92966bd229c0725b0d591e59c57f98841b5ffad16d0ae903406014d3e632d0654e9084f870e124046f3ebae3ecbf5c5365aa32ebf169ccf1243dc8fb296cef006d5f00447ecd2980abb98e3b6e6bf6181e5df7994ea1c1273784af0d92a57394c71926dc143228a8ade103ff61860d21ffd467b2c41bbbd2490dd36add865828fb64396f16831a3a74f57ee2254cc93b25b7219bc00339a2518be3caa4765ed63295c84f1d59144e96aacfb57c6441f64f29729bb7d68127ae2472bbf089570003b1e820191878ab6f53db01c180751e34672cf5a96edfefe164580d6101672281b59f58f3c7b1222f2b6d19c8a8e5f9ad539045f7dbadaa767f993da974dae20744bf5ad0e0ec71ee97696659981e067463c78bd9337b8bcfc070e7e5b47303eaaf9651c19f19a15eab8e2c47041828be50994b5695ee5fbc9a9ecacf9de714215eb7992c07f262db8843937934fdf6fdd31d0f3a44f074f3a1dd6622dbdb3364df79d5ec90ead64c29e05a6c5358cc6b9d8493b7e1c53a91c37aa3653cf2002072461f4b99fcdec142e53b87f61ea55cdb834dd4e03f2f57a206cabe2f3f3cbfad3b4117bf4434718022b09a8419959a9bb97fba50a6b3b9a844cd1301de7bae89f8d1bf549b88dd2bd0697e70ce89cc2e383221ca2ae9d3671a730466c250a8963f6411a42ecc85a00c01b2b43c39432d5065a5fd11c29a23169891cd674cf3a31e82587a26c8d48aa3debeaf067a26669599fae850126dd516512e0cf5ab556b5582add7d2f665723a2244007ddc302f0ec29da73578a80c998849be2f766a334c7ade4dd46f37d648899da5cf7437af2d6e8d03d934903387c4c7e260909d59b546dfac9ffdce11fb92e5bb6ff6836fa0e6d0c5942b4660fdd68d3cc8a76ce0960584dbf634695ca75752b19067ba535e4779189b111c9a3e0ea877067c046d10021b0e60eae8d5dd7536b4474d8ab74679e2d8e68bc9208db5561e28d0bec177cda1e2f944a4cd97b6432033ce40063cbced6b36e486b096adffd699c9fdf58d5ec54bf4afdf52493fbfcd91e807da31ff675b567058697aa088118a6ecf1b7c7dceba3ba87d59d882fce3b3b676763ed658e991c4fd5746946815af0a2c1e96aeb27383cf6638d6d7e1932b3a028250fee18db7c46acd7fab33ab22ff91cf78029a4ed96494151652213fb7dcca0a8944568bf84aded113e20e6897d6b8f6f9fe5f6975c7cbf999d15ce5f8d50454d58e7a5b285fce4ef9d14758cf4a9619b17275fa66f2c6c48d44da95657708062bec9b633ba2df082766f549c5c1b661fc8a5f7b8b6699503da733a66df44f116c4a470b73648cb64bf04101e7bc1d048d230addbf22a5b98aea08beda847e33552faf771d9b181f610ce34530543096257856ea3a08276bec1ea40e7bf6957143623ef47b5c41e61d076eef0a5195431b49beab9fd7f07b1a153491a7250a889b26ce657df550b226fb94cb5f52306f47ee3af4627ef0cdc0c50536af7b386440b878ed5d672670abdb3ea3e3c3c031e67293104a4d6476cf325f6fe4762ce2351dffac116387baadb82f987cab7fe88ce1be7d44ccd572bfd29114d2ce4d5e90f4d6bf7be39ce25ab7de52815e4059d783564d518dd208714de1c524ff69a4ec5f29bb631eff605cc6f30a0bcfba44810a3a6fc263891791b51cb4be0d60d3d0798e38b01b9a21150589a436fb4df4584bf6e7094176884921bbb0f87b1bcdfb6df8aef8f58393800816c15647650448da0ba5bb76f7bf76c3be83aceab79eedae80e1fb46a2557a9485aa7a8053a5835e609fdf54222f5b43cba63c9508dbbd0e22953768f88e2070236d7255f682464d09c7ba12b2e8787a1bc889af686d2c355961d8f92f877bb09baef09d70b5b306047d8d3cb97fb06ba8d09bfbae02314dddf98092b6ef275743e9deb391995003d83b549ecd604daa9bd34ef311aeced5db504242241c0717f8302efedcd3fd43686a7ee21c73ba3c5af98c93d09158c9011e11bc4b51a3a4e904c4b6ced1a786adf310073405c27df6aae6d5da4398d78622ba9144ad09902da49b77046ad22fd303f07c1533f271eb82794b402382d2971f46c7907069907a7afb9e94dd4071685f91cfca10d86aad7c385e4d90f0d44d37588a8f1f267c1d8445634ca4194d1a0c5894a6d00cae3af3aec991cfefda59e3f46c0a6e2fac55b35259a9960ec7dbd1c7dd128368393f0de1e0994ba1f5b41762c22213f56bbf4c2cca458dd5731f9379f0651ba61fbf17a5861eb417e20a7fc9df12c6771f5ab322213ec95beff96dc1811dd0f45be8fb1ed93c2cc01e694620b550e45bd265fb357f52699cf9ca3ddf331fe4d11c5e97bb57631d9c7620b5c19562c85ef8e04ecd5cd5b713fbd94b6b76331a83f304cd8ae1a903ffa722cf5697b1e1bde206735656ce57254744daff8013f47f9aa4f062d8c5956fa8df5ee79d6e6ffbc0c47cd0c99517a6d92fe8ad18c001be4b55af7a6533712c6a2ccb7e813016e7cb74a94bf2a2ce9b3b440faae19210d43320cb81a6472d1da775ca27f2b5bbe5964271eefccdfa0bd6b163357af4539fdb5d5e2e7e1795040776d4d75b70928b8efa954556f4d225bd9b6f9e5a71a8e7a3ef5c36d459233c66650ada1c55dfa02bca3997f93b92028881d9c3ec0e7e1a42c587482b0cfbc77e8520c6ca0f3e5127c96b41056b7279d9e62358e39dc95e779affaaaddc8e9ee66ba336feca8b957ccb4f352c0d162390e3bde27b15132407c97c3a6b5f1704e1e559ee12655a71d7dce3711c8af907d7d2875e2407ff8c59c5457678058d3d00a7971d239c1b1c67dac3ff3fbcc2d8c8035e31040118ac46ba5110a16aedd0b7f731a4f86a63a697501a664946eaf7da6d3cc2a296f294ee765b8f26363ba6116e0ea0ef8eabb0f1e7cc429611194cf0bb66463d26a82dd118cbbd3f1040dca2f5f82ac5eb5df41a4658fcb34b68066c5708a4a16c48fd290b32e392e7f5b662f4e3fa2d79a814f52824cf737872604672bdaf80fc527deb1f690339c92b6c6c6c8635de5a2e1a7ff617d0f1c11bc3a3504d0de94d77678025ab5bea511d783df148e58b0793251db3b7b9e03bb201be89d5939c0a60ab548460d543d015082e00ad9d05418c327ebafbad7924aaf70e5fa6eb0be359b65ac2fbbcad495b17712e033cbf1853d1e2450ac4c8d19287074e76ca3d087d376b0f861b525d4949098dd4e3a3cc50118c8587adf6587ed9aa0352b7d812fe66bb64eb0c0f4d46822aa9c3d4848454d49b61cca24d7d6b82fafc5d8eb4e40e3665f24a95182b70b22c5f9303a49d1278f25de9855246c729fc8ba300fad799a949b9b0ce303477d22337d599d4c8441461d25725965183210a729fc59c4e5ddb45c0b9db06a09619e6009aa0653cd1e8b06d0e55c133d5022dcf91f12a21e9f977de2485f886c5133a8837987e7bc90662156b0250cc76cb03ad9fa36733ef371479ea9c1313682866b963f1f96bba8c658e2c6a10e5e29d8a07d4999b735bdef7f60326aa64fc198c3f2670fa4a44717fc613f1282fc324fd9476e6da7866cb6ce1efa8a1577088f2aa757584b8ade9f2ba34a2287870da2cc7704008b6e057eaf8bfe2fd0d6d60cf03e1751d2284c6439ee6079708451e64b1f7e7dc8400ae99e0d834a7daba6c3a8219812adff0760129e18a41eb0448c57a909714cd395933436e9ae040277f213e30ab7b6e7e3109642ffa051b3c423f6ffa7830c75d229acd617d6bc1f7948f09238f5437ff4fb302034fec1fed96c55c46c7d70d6ab3018c1a3d76120077f815fa67ec8815f44fd0cae7d1509d217a432ce904c778f201a508fdea4672e9cff797bd1d0f58d46f39396e148573ae9b2468e4ee5bd9a5abce8166333c524f0a104da2e3c99ddbc51fc6f4e7c628af79c93d0fbe61b1c4a72b11fe423597f126467a01ee6dad848f24abdfe453592f02c84e017fe553f27e639f88824d70aeeaca54758184f95f12d696291798046bb075fefd6876e8ef893f5b9340e21fc63c67feb6f03055f2f394a591164a61b1aab14c468998175b75974543e79b241dc69a6e346374dec5eebae154e36f29d17273e608ce69d539a5e4702f474bad66fbf3348f0c859bf884576faeeac754e290ec97e863526e55420da72b6b6cd209e6685ffb64e9865d00eb017c843d3c0cf3ab26f53f76316fbe009f0b2c4932b0694fecf1a148dbead458ca9f5f6d678d6c6fbd23fb6aea9e951914300eaaaf69bf35d4ce11c0349a02aa14529a083e701eac0177d4ddb305a9f9a5cf8bacd96327a161bb8b877813ea022d62bac8f0ab9eb5e9d145dda4b1fe79c0bee34c8bbfe866ba376d3a71b9809adda06e64eafaa6cf53fff8ed63e15525fd409e13b1809ae6e6e937acf858a59d2073b304171d5ab35ec92f66fbb2d4e34d46e886c3546c1026d0ff27821a15aa397dbc686540d546ea66fb43dcb9beaeadde6250cfe8e563f9033b432018c88bec07279c6a0228f3eb11031d3435d95c9c1789a5338f74aa6db2c853c87f8f2397f9067fa59774770f64b8ae42b9a07f85f1bcabbc6d3b3456a253bdb73ad3de0aa416589b722053c81db90e7b66a835d636615701e6869fef016bfaba9da0a869005ffc3174b605fdabdb8c7346262ce78a64aa7036960913edfffad202d664d1771018de43b6548a6672f48979b8e30017a93da2c093266306e09eb203fb37d7d54466fb26d4414ba88346d02d8811f100dcb0a3e50ae46247b986b928f12c1ad506c6b33b49d7e6955ae9619f73c79b72a95b053d53c4c54d36dceb8ae780b321aa41b5d61caa21a6c65329f08da522bbbb3d07501b39cc6bfbe4a2ef8054d7c57666bc805ed451517a1432b958141f3ce94752a67a17aadb41590037da8efdb251eb56de30b0e0e75adfbf4e06d4777f843a8d7c31e2ab62d98764217491d46960d67d3ee1213d150c28e75d1f440d41ffc3cf876554e2d4a354f70fce17e4c0fdc64992c32e785263ca4ffcab57d3d46d220627ed05f1628551e9843137996bc7a0b773e1ccfe5364216a8003757ffdc052d93793a3463baf4eef5dd283826f8510bb1f20505a6e61cb3d571d0f77e67ff3c0aa5ca91f6d68c7e0d2d79c649b091b30b2911c5c47157c9c531296eba681e039eaecab83722cc2fd5b91913a463ba9f693e34da60b1adb8ee9f4a83fa67e25f19e4cd6e19ed1381cba8b5b4591109637ae1f7f29b5495fc5f8057da565d937e7577735bd98fe626ce8568897d240f054ad69c8e0ca424d1be51b17d5e639253fb2fe6791e01edcf9c4f8404233d7f98b52c31c4996b6b63112d0126036ca20cf52a2da2478683c41bfd8fb5b34de59d5e87b5075e5e1d78ad06c6a2f6e662145be3d30d140b62c49df203350ea4412c97aaeec7aaa00d81b89f3b7295607840de2a8386f52012b5c4e6e0e1986565bc4f99b6bc10f3a2ab59783a8b9f3c696f741af0f51b6592c68ddff861fc7d2b16876b05a54eae9ec0e170fbf26d9358941c6cba50a5c41e77f72c7f41e0bbf6023f04f7701f676a64cb63ea1a8d373ee6a99ba56449699ccdf8a11dc7d840d695cd5ef987f74e5b16594cc8c6c2251c47b429281b6e34c0288c7242052ac3c9c63213f6ddb08726001e0afe1fb312d463db8722f1617972dc7f365de498027ef0b5c6d100e583348cd777a2afbfd60ef59969c8f88358b6995c177a7d7e69d86b11e36f42bae8c9af599d3f828447c31004000163bb74ef20f656f6a1c8159bd0f867f2e283c10656a40a397b2e514c19efb5d5a5f54316509801bd8208a2c84b2ef13e54d7b8af8787b826b50095a15e33a5e8e306454312a83af7869b7ba0039ca601751b580a9190435d35a8ce9d8e9558ca1bcea3cc3604f4e991aee79fd0d2393b9f87e8dac7782e837e1de5e88a7c79385a2b14556041f49c1113df43efd8aea14c4b651d713fc9989b2fd77ce13a98efef5e83cc6843d313117753d82870c5efec8cc6fd855ab6e0fc6d48c66874fdcb2d007db7fbb9371da3836eb23da1106283a20e32617bcaba574b7b6298d48334eaeef905ff348c2bfbc1c83a88d6915b644d1854161ab4f1d1db12e74de2853e48d1a10f9835c226bca6944d0de6a18e0e07df45ad72a7d354045a6997ffdee010e37091a3a5280e5db8aeea0245217a6f1160a6287d9a28c0eeabaebe755b9485da5b7ccb85166ed902e63200e5e8ac464124bef0196eddee6cfe90fce770b416817e1ca78494786bdaeafa3538841f74bbdb2585d63f667ef227287efa56c030c0999e9ead590f1ce383a138233235494ecec0aed97c803b4d7c4fb80ac9a3bcb1dd2bab51382a94195bee034c3f3d3d9efc44add83ec580a5cfe8f5942b1694b0ab3ef4b2d9f7c0b8634b056c6b6eeb946be1825fa452abdbc1545cd94774abed3fdc2b0399929298221030f6cd0a2b38490f5e4bfd53ee20de10eeb2ffacca980d40e0885cb91c94a4d81a61d863efd0f7a12da233e1dacf7af728950892ef887abcc5e4d08c6b57834a1e5dd1dfc69418fc681b47d8cd34c6a3846b0e1afdc7c7f9033ff817a72ac617c0a1e59e4e6ea40bd668c499f221c5f63700e74b68ba3045b4460f0fa60308cf8964d95237d888d5c1b1be0fa7bd2703eaeb0d2914b8d22cbd8693c16f21bb72566f38aa97e86f212557d40e10b285e1d4de0b153c8f91e168e9d0031bb7ee7fec5f0c3fbf15bc6fbceeae6dd363b7e9835b175b0be16a3348a2c2d07468449fbb2fcfca9e7d8b72b623355715a6a1edc87ea4c699ffeacb2277fbb5658a1eb12d0a7a93bf100ab11cf49b35c16a14044ac8e5bd69af05b252325f0eca41f90681b4a1ec399096939a96685926655a0c4d172d06646c87f35b65c0d7654882b79838f78c35febbdb378f9f28d7e6ba1c1fa191bbcdbf991731f546439a966e4f7a15c77367161bde14b731c9f2b91114fa46e02e70f07d3c40988e8140866ed3dcd98ef5524700deb75c1a6414016da0ce6845e936a8692b7beac01bc855a72a490c667c3b755ffaaa57af54af1bd07ae7b203be85f3653aa63cc5ae10f6e585c7bd8a5257604e82fad6c7be6f1a47eb665c1422c03d3263f351671a48bd5eed22077b8c16e706f009880941c29b90c29a11ef008a371b29200f32523b9847d911fab4ee1468bf98a49ff73703e2d9d7bbf6ae37459c3cb502541f304e1d5918518a06225b65f3b38b91f8e0b49a29ef9aacca369ce5cf8b45738e29118ab06078b885189acf4d0a5200b86cb2269dde90dfada27975dbe6ded12232c0faf7ea12ecacbdf416cff8632e48346478a75c0279c1920b7556fc6670704d5d97912c75d3a9cffe6891abdf747a6850ba7d9668e56c7e7ecc03c5c388e886bc984c8bfd9f470b7e4ea4d146c3c28e4f8ff82b9558266343036e6239a26f567f7633911ccc51522c29ff3ca36ad5b8cfd6ec1c86ae08f30d87a503c909e66dc278e9d14f3fae4bfa4813f315b1610ed76fc149d92f319044e813c3769d4978637e0ee732d3bb86e9fa584181f41d4304c07a1cb71d10f07da649288275a213eff161c536c7366d4c010cf9a4b1c2f2940607dc7468e51204c6983c554d616d48f93ae51e6a7769b3285785ae7bcba3cfb27879df1d7f1f18849a70814eb51df6d1d8cbe80b736cb38326f7db7a06e49cd4fe41b3f7a9156cfac9222ac23d13765e7f2910a365fb23a208f192cfca97b2b8a3de44a2d90d3c865bec109f4bdfb1d37216cf5f71a27c39a83b5562b0c06d76b46b2d8f5b15cb1765d6c78d065d24bedf72405dcb8e795fe183196a6b620f918a2dd7fdfac142aa653fd431ec153e3daac8f615a45b3a0d665d5fe36efb6e2f18b8399429e4f363748eddd5cd2a637e9a0a553fac6d05a3e2bd1b26f2f99433f8f59a3691417a4f35ff7d46a22e39e94641d942706850cb2843ff4a34122e37dcc8224ae9f6ab7f64ff4a0bcb0aaff2f429e4f0f5fcf90ab6a2c45e8f2408d9bbd4f60d6b01a0cf527895e1cd063b178b8973930b9488d81d3f0f7985b900d0a894c29642b809ef39294bfaaa5401f5ed50cbb91a047b60ad54b323a2f2ada04d19d6dbda02e0f22d4d6520f9db2263181c97c9bb74dd8a90adedc80bfd064eb103f67d02ea17571f870c779470bb6460c658da4c502b9a10c8050fc26ad5cc1ae1eb02f0d703d05b48f48ab8c9f9a1bd000181ccf929d45544b44e9a3cd0bcd412ad639323283ed229e5486a2a93babb165880a0a7329834bb51a0631cba5caa30637ca3f07074051c608b7c7170c8c415c2eb88bd6a798bd86953ff71052506ccf0e2357deff6cef24de5b7f68a17082c08d096e43fbe727ab0ab1aa27a703ccd58168039e50dce2d400ed7f2a217c1eea7b29455fbf910d36db324d1c6b53343a78484883ad100a0b5b28c74ab6296df5bf8048fb916e8ddda0ded3f5b08d262b9b1cb1ecb149c02a21490ebebe8856c844d448d2a3878dcc930c3c88d9addf73917e9d3f878fb12fba3e602cfde199a0e69eab56e3d4ffa01135b3145baa613be01f0b94af5bd3b8b432339c954f52b8551fd13790bc1ee18be226b819d8001a3da8e097f84c166e4002e4c1043d3a3721f05105cd17a278b9509d7a04826e8a5b4956bbf976ffb4857fd88da99cfea8d2e0a1c4f52f71f87cbee8c02fbf59b12bdaccb67d0b95f0a56693eafafeefce1953d708b56532ed5bbe12626a3d041c031b48a47b34c504f7dd57e21147b920c058385ddc8cbea5332086c269b0d5c2439f30fa431f88d1a10e25eba0df70d8617ecd5546314ffeae9c4baab872ab82a45eeaf0e1e1533e8a6189c324f31b652aeadc52981b66161313999c5a7bd7c79ef4ee55c7cb00ebd9637ffe01924508a44ab72ab16b70b8b815ce7d27772db315122f4a5a7679af5ac685c26320a71cdd8066b19f749705e2e35d1d9166ecb066053dd05a759270e119944cf99b918cb5e4e6c931031ae2eeffe349ac246c92174091c687c58879e1f05c43b010f7ec3f204c106cf60740b0bc2d355f57bbaec7d060dedab9aebaa4094e72ebffbf61cdfb7d69fbd146daea59339fa83c19c5f75b866af5e7f387740e675e1e2ba29c261d9e7237c6e9ef1b39a8fdacb44de0eaff5f4f9e3e42b75d0a37834eab0cf47acf65e882f0962e01982e783c0dae7efbc95dccb235562e5a2e04fd2b4b43388c0292e6e8198c6df0348920d6e1c8acdd2e892d3f7aef7703824dbb08695642f0e444ade6c4f1ec1e267feb5135cccd50fcde643acb66dbd18f507496957ced435e0db0a8e8441a8e2ebc365f995c32399f7d180b6faeb85ee1921b95f82f3194bed7d157e842257d2da26dfac90f32fb53147e48e232d5115f1cd12b45c55330b29775ab776599afa504b7fe114cd7fb3ab4eb6c30becb82f448b284b20010bea918019af99b2a9ccab1585aec19fd1abe8365a6023f96dddf1a37cce2734bb6585143729850bcd811787bd07cb5fdd57cc987f9278b7f5ef3c7529a9b6d20d18cc4446f1036cf7635da6732986c38df4785e2e428f14b84957319772bdbb7d2d2d20321e522b1ec6c807f3a3f575643d4b71e1bbd1e843b5816aa68900298f5058c65a9fe1022978a44a77bde2b99e221de97cd7fa6a2ea440220bac20e3e4c1e4224958aca15681d3a18f74218114c3e5eefa1fc16de8c07f1d1297b0e772d05f205337175c1dbe88dfc876dcfce367304afac68c41b98ed2ba3f04fd1b37db27dd5d9c9aafaeadfcc44585908ea655ffce1fc2516b060256777e8953e2a6861ec4460034691aed001ea2971627615fc7972773d6a8c343117bae3fc68cfd1f187c478c0f52e86b118c65c39848a8c582ed908fb1242ad3455288cc858e52e119d368e00783c2b8c2916ba564a3501326baefe1dcadac8b4b8b666f20a3a245ca171b43af", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x1, 0xfffffffffffffffd, 0x1, 0x0, 0x3, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, r11, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, r11, &(0x7f00000008c0)={0xee, 0x3, 0x1, 0x4}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x8000, 0x20, 0xda, 0xfffffffc, {{0x1b, 0x4, 0x3, 0x4, 0x6c, 0x68, 0x0, 0xb4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0x1f, 0x1f, [@loopback, @rand_addr=0x64010102, @multicast2, @multicast1, @multicast2, @empty, @private=0xa090102]}, @end, @timestamp_prespec={0x44, 0x24, 0x50, 0x3, 0x7, [{@empty, 0x100}, {@local, 0x100}, {@local, 0x1}, {@rand_addr=0x64010102, 0x58bd1196}]}, @end, @ssrr={0x89, 0x13, 0xd3, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010102]}]}}}}}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_DISCONNECT(r13, 0x0, 0x4000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000007b15e5c37f6341f8746766fd020000000000", @ANYRES8=r12], &(0x7f00000001c0)='GPL\x00', 0x5, 0xaf, &(0x7f0000000640)=""/175, 0x40f00, 0x30, '\x00', r12, 0x25, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0xd, 0x1, 0x211}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0xf, 0xb}], 0x10, 0x4, @void, @value}, 0x94) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r1, r0}) close(r4) 57.879412261s ago: executing program 1 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYBLOB="be262c2be995595c2a12ff8f959417cf8b2a109f7308a7db1c426389a6499e7e3cf775f798ff03106300da20f63475cdf4be9b7f454c8154c805c80f48b6d8265650bc97f27f2b2cbf928c09e856fee32d035f671e2dca8e96751cb184adf3f33afdb17014f84f2039c7282d5952eae28636f53a7483e14d1d19d29826"], 0x24}, 0x1, 0x0, 0x0, 0x8054}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2b, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xa0}}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r5, 0x0, 0xd, 0x0, &(0x7f0000000040)) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000009c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000a00)={0x48, 0x5, r8}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="ffff0000000000000f3a0000f7ffff08abf92effffffffff", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="02000000040000000100"/28], 0x50) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r10, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r11}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x48}}, 0x0) (async) r14 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r1, 0xffffffffffffffff}, 0x4) (async) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x3, 0x81, 0x6, 0x0, 0x0, r1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x18, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x7, 0x0, 0x2, 0xb, 0x8, 0x1, 0xfffffffffffffff0}, @ldst={0x0, 0x3, 0x2, 0x5, 0x7, 0xffffffffffffffff, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x5}, @generic={0x6, 0xf, 0x1, 0x857, 0x10001}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x54000000}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x4f, &(0x7f0000000380)=""/79, 0x41100, 0x40, '\x00', r13, @fallback=0x11, r14, 0x8, &(0x7f00000006c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x4, &(0x7f00000007c0)=[r1, r15, r7, r1, r1, r16, r1], &(0x7f0000000800)=[{0x2, 0x4, 0x1}, {0x1, 0x5, 0xe, 0xc}, {0x0, 0x2, 0x1, 0x2}, {0x1, 0x1, 0x5, 0xe}], 0x10, 0xdd, @void, @value}, 0x94) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000d0b0040000000000000030000000900000094cd5e1f1452686b8f239991c0314fcb2ab8ad868eb72e348aaf37696750c5a4191d24e38170e16451b0e90feac59ebf0c51918611b2236aa805550373a42804d1fbbd7b16807c98c17c3743378b032cf06303f7eb811bac2da1409affd3ac4420af7d3923a4a6cdbe06f9aff0373a1dae1cdc98dffd13fadff341b84821bd7fe436b4cceac2cecd37a460112ba00fd017ee00b45913475c0f8f21e6cce94d84f365647cbee58e"], 0x18}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xffffff0b, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xd1}, 0x8040004) 57.877600851s ago: executing program 5 (id=701): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x1fa2) 57.653607068s ago: executing program 1 (id=702): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect$uac1(0x1, 0xb8, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0xe, 0xd0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x1}, [@extension_unit={0x8, 0x24, 0x8, 0x4, 0x5, 0x7b, "ff"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x4, 0x1, 'bb'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0xff, 0x15, "6d0d40610753ea29"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xc, 0x1, 0xf3, {0x7, 0x25, 0x1, 0x0, 0x6, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6f, 0x3, 0xa, 0xfe, "", '9T'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x5, 0xc2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xc0, 0x4, 0x33, 0x2, "0b1cfa472ea49656"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x1, 0x1, {0x7, 0x25, 0x1, 0x81, 0x7, 0x4}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x8, 0x0, 0x5, 0x10, 0x1}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1001}}, {0x102, &(0x7f00000006c0)=@string={0x102, 0x3, "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"}}]}) bind$alg(r2, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18}, 0x14000012) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newchain={0x24, 0x64, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0x9, 0xd}, {0xf, 0x9}}}, 0x24}}, 0x40) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) recvmsg$can_raw(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/53, 0x35}], 0x1}, 0x40000142) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'macvtap0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) socket$alg(0x26, 0x5, 0x0) (async) syz_usb_connect$uac1(0x1, 0xb8, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0xe, 0xd0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x1}, [@extension_unit={0x8, 0x24, 0x8, 0x4, 0x5, 0x7b, "ff"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x4, 0x1, 'bb'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0xff, 0x15, "6d0d40610753ea29"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xc, 0x1, 0xf3, {0x7, 0x25, 0x1, 0x0, 0x6, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6f, 0x3, 0xa, 0xfe, "", '9T'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x5, 0xc2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xc0, 0x4, 0x33, 0x2, "0b1cfa472ea49656"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x1, 0x1, {0x7, 0x25, 0x1, 0x81, 0x7, 0x4}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x8, 0x0, 0x5, 0x10, 0x1}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1001}}, {0x102, &(0x7f00000006c0)=@string={0x102, 0x3, "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"}}]}) (async) bind$alg(r2, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r2, 0x0, 0x0, 0x0) (async) sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18}, 0x14000012) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newchain={0x24, 0x64, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0x9, 0xd}, {0xf, 0x9}}}, 0x24}}, 0x40) (async) openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x40800, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) (async) recvmsg$can_raw(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/53, 0x35}], 0x1}, 0x40000142) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'macvtap0\x00'}) (async) 57.586924236s ago: executing program 5 (id=703): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000900)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1c, 0x8, 0x0, 0x0, 0x1000, {[@sack={0x5, 0x1a, [0x0, 0x8, 0x1, 0x5, 0x0, 0xcac]}, @sack={0x5, 0x6, [0x9]}, @exp_fastopen={0xfe, 0xd, 0xf989, "499ea6c280067fe4a5"}, @mss={0x2, 0x4, 0x5}, @fastopen={0x22, 0x12, "f157034ee90058f425e48588873ab03d"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @local, 0x3}, @timestamp={0x8, 0xa, 0x7, 0x8}, @nop, @window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) 57.551321673s ago: executing program 5 (id=704): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a6876", 0x10, 0xfffffffffffffffe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) sendfile(r7, r7, 0x0, 0x40008) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r11, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r12, 0x1000, &(0x7f0000001540)=""/4096}) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r14 = dup(r13) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r13, r15, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 54.739280778s ago: executing program 33 (id=644): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f00000001c0)=@usbdevfs_connect) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000022c0)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) gettid() r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats\x00') write$apparmor_current(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r8, r8, 0x0, 0x200000) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd6, &(0x7f0000000240), &(0x7f00000003c0)=0x4) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newspdinfo={0x1c, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x2, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 54.482252511s ago: executing program 1 (id=712): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140), &(0x7f0000000240)=0x8) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100005800c000a"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x2d, &(0x7f0000000100)}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r6, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/98, 0x62}], 0x2) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r7 = syz_open_pts(r6, 0x42) r8 = dup3(r7, r6, 0x0) write$UHID_INPUT(r8, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002200)}}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0502103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r4, 0xc86f, 0x80000}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000816000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000001200)=ANY=[@ANYRES8=r8, @ANYRES32=r9, @ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES16=r6, @ANYRESOCT=r8], &(0x7f0000001280)='syzkaller\x00', 0x80000004, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 54.28527011s ago: executing program 1 (id=713): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/98, 0x62}], 0x2) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000040), 0x4) r4 = syz_open_pts(r2, 0x42) r5 = dup3(r4, r2, 0x0) write$UHID_INPUT(r5, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) r8 = dup(r7) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x20, 0x0, 0xb, 0x28c, 0x0, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffc, 0xfffc, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffb}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300), &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xaa, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), 0x0, 0x0, 0x9b, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008001700ffffffff"], 0x24}}, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020b02080700000029bd7000fcdbdf2505000700ff0000000a004e22000000fa00f8ec039ea99d5fc5337ea51836e15d000000000000000000000000000001a509000000000000"], 0x38}}, 0x20000000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002200)}}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 48.271839839s ago: executing program 3 (id=723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000ac0)={0x18, 0x0, 0x3, 0x301, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x8}, [@generic="e791ccd8"]}, 0x18}, 0x1, 0x0, 0x0, 0x20008002}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x7, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @remote}, "0500000080000000"}}}}}, 0x0) 48.090479507s ago: executing program 3 (id=724): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000900)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1c, 0x8, 0x0, 0x0, 0x1000, {[@sack={0x5, 0x1a, [0x0, 0x8, 0x1, 0x5, 0x0, 0xcac]}, @sack={0x5, 0x6, [0x9]}, @exp_fastopen={0xfe, 0xd, 0xf989, "499ea6c280067fe4a5"}, @mss={0x2, 0x4, 0x5}, @fastopen={0x22, 0x12, "f157034ee90058f425e48588873ab03d"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @local, 0x3}, @timestamp={0x8, 0xa, 0x7, 0x8}, @nop, @window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) 47.989384821s ago: executing program 3 (id=725): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f00000001c0)=0xffff7ff7, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e1c, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000290018"], 0x40, 0x7ffffff7}}], 0x1, 0x0) 47.850976423s ago: executing program 3 (id=726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) mmap(&(0x7f0000817000/0x1000)=nil, 0x1000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x600800, 0x140) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) 45.595138918s ago: executing program 3 (id=730): r0 = socket$inet6(0xa, 0x80001, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 44.591427493s ago: executing program 34 (id=689): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r3, 0x7, &(0x7f0000019080)=""/33}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r4 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r5, 0x0, 0x0, 0xc, 0xd4ba) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x1001) 44.544829411s ago: executing program 3 (id=732): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x1, 0x1, 0x1}, {0x1}}, {{0xdd00000, 0x1}, {0x4}}], 0x10) close(r3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)="00a1a4f6ab5fa87669f21978401f7811767c2be80c57c5cd3acd2a7ff24aa2ea5ae7a6cafe2c4b44fd282279dec16d2cd2c03a6803a0780af904eae39961426b18b0cc36", 0x44}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000280), &(0x7f0000000300)=[r6], &(0x7f0000000340)}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 42.087693086s ago: executing program 35 (id=704): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a6876", 0x10, 0xfffffffffffffffe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) sendfile(r7, r7, 0x0, 0x40008) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r11, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r12, 0x1000, &(0x7f0000001540)=""/4096}) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r14 = dup(r13) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r13, r15, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 39.16264921s ago: executing program 36 (id=713): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/98, 0x62}], 0x2) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000040), 0x4) r4 = syz_open_pts(r2, 0x42) r5 = dup3(r4, r2, 0x0) write$UHID_INPUT(r5, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) r8 = dup(r7) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x20, 0x0, 0xb, 0x28c, 0x0, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffc, 0xfffc, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffb}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300), &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xaa, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), 0x0, 0x0, 0x9b, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008001700ffffffff"], 0x24}}, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020b02080700000029bd7000fcdbdf2505000700ff0000000a004e22000000fa00f8ec039ea99d5fc5337ea51836e15d000000000000000000000000000001a509000000000000"], 0x38}}, 0x20000000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002200)}}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 32.210171455s ago: executing program 6 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000017c0), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000001840)={0x0, 0x1, 0x8, '\x00', &(0x7f0000001800)=0x8}) r2 = socket$inet6(0xa, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @broadcast}], 0x20) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0x4, &(0x7f0000ffd000/0x3000)=nil, 0x6) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f00000002c0)) ioctl(r6, 0xff, &(0x7f0000000100)="02c4362599d33af135b65b730bc3b6ad22d8dd9a339a3eca52b00f559376570a83df5ff67f50e727329d5956b49aa991e9edb2d59ed63ce5acef5889d4a0bbc2993d4c90b21e5d4d99f88475473c26f56adbb558391e9c488daa3e42272d1bec240f671c88f663185c2dac01a5ee6f19d6ddef6bbb06a868447d3f7198a4eeecb547426c9d52a80c45ba379934042831408d0567a8313ae5fe30a8bd11b81105256a5977fe75d208a2") ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0xc0000101, 0x0, 0x2}, {0x138, 0x0, 0x9}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x70, r8, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x6, 0x2]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x10004880) 31.591061366s ago: executing program 6 (id=755): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r4) syz_usb_connect$cdc_ncm(0x4, 0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003020000ff2505a1a44000010203010902610002010e10550904000001020d00000a240600411aa8a0083705240001800d240f0100000000fbfff9ff0006241a0000080905810398c5467a2881d5e1f501497eff030608210904010000020d000009040101"], 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d010140000102030109025f0003010380f40904000000010100000a24010f0003020102090401000001020000090401010101020000090501090000f7090607250183020c000904020000010200000904020101010200000905820940002606"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f00000001c0)={'veth0_macvtap\x00', 0xc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={'poly1305-simd\x00'}}) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a000000000000000000a4c10300060000000e00020000ebdf000009000000000000000002000100000000000000000200000000030005003c00000002000000e0000001"], 0x50}}, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x50a101, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0x9) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r9, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r6, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x8100, r9}, 0x14) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ipvlan0\x00', 0x10) 30.83206582s ago: executing program 8 (id=734): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2084) writev(r2, &(0x7f00000036c0)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f00000034c0)="03d8e6eddc6d09a18cfabc5e6b7217587224a49a185c7d63cdfe02a2f8c827e2dff597b22393c5145ab15baeb03cbc9d23", 0x2f}], 0x2) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x24) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x84, &(0x7f0000000000), 0x90) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) clock_gettime(0x0, 0x0) write$input_event(r5, &(0x7f00000001c0)={{}, 0x12, 0x40, 0x1}, 0x18) socket$igmp(0x2, 0x3, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x4a0000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f00000000c0)={0xc}) 29.389823488s ago: executing program 37 (id=732): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x1, 0x1, 0x1}, {0x1}}, {{0xdd00000, 0x1}, {0x4}}], 0x10) close(r3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)="00a1a4f6ab5fa87669f21978401f7811767c2be80c57c5cd3acd2a7ff24aa2ea5ae7a6cafe2c4b44fd282279dec16d2cd2c03a6803a0780af904eae39961426b18b0cc36", 0x44}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000280), &(0x7f0000000300)=[r6], &(0x7f0000000340)}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 29.089175326s ago: executing program 6 (id=762): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000900)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1c, 0x8, 0x0, 0x0, 0x1000, {[@sack={0x5, 0x1a, [0x0, 0x8, 0x1, 0x5, 0x0, 0xcac]}, @sack={0x5, 0x6, [0x9]}, @exp_fastopen={0xfe, 0xd, 0xf989, "499ea6c280067fe4a5"}, @mss={0x2, 0x4, 0x5}, @fastopen={0x22, 0x12, "f157034ee90058f425e48588873ab03d"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @local, 0x3}, @timestamp={0x8, 0xa, 0x7, 0x8}, @nop, @window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) 28.839303744s ago: executing program 6 (id=763): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=""/32, 0x20}], 0x1}, 0x1a024) r4 = socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) sched_setattr(r5, 0x0, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r0, 0xb5dd) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0xc) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x201, 0x4800003e, r7, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x3, 0x78a}, 0x8) unlink(&(0x7f00000000c0)='./file0\x00') dup2(r6, r7) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) unshare(0x42040200) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x1000, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 28.642121332s ago: executing program 9 (id=740): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000072043f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x700, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 28.261282473s ago: executing program 8 (id=765): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) r1 = socket(0x2b, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f000000b800)=ANY=[@ANYBLOB="00020201"], 0x18) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0xffffff08, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x30, 0x2, @ib={0x1b, 0x1c, 0xfffffffb, {"4d4dd6db41574cbd1d2976e1fc992dff"}, 0x2, 0x8000000000200, 0xa}}}, 0xa0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) sendmmsg$inet6(r1, &(0x7f000000d100)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, 0x0}}], 0x1, 0x20008000) 28.224103984s ago: executing program 9 (id=766): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x1c, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb}}, 0x1c}}, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async, rerun: 32) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x50, r6, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2f}]}, 0x50}}, 0x4000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000004c0)={&(0x7f0000000240), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x2, 0x70bd2a, 0x25d7dbff, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x42) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)=0x7ffd) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x2, 0x6, 0x1101, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$lock(r9, 0x5, &(0x7f00000039c0)={0x2, 0x0, 0x4}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0xeb, 0x81, 0x67c, 0x1b, @rand_addr=' \x01\x00', @remote, 0x8000, 0x7800, 0x2, 0x3}}) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000001fcffffff0300000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0200140012800c0001006d616376746170000400028008000500", @ANYRES32=r12, @ANYBLOB="0800040044a3de4ebdc52b9d45e5000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48095) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20082bbd7000ffdbdf25190000005c000180140002006d6163766c616e3100000000000000001400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r4, @ANYRESDEC=r8, @ANYRES32=r10, @ANYBLOB="0800030002000000080003000100000008000100", @ANYRESHEX=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="ef84a1a26bafa80e3d27192c8adcba1e3003dd1f0de122519b5efbaf1801aea471828e99a579e1670e69b08c63aed44136968000409a3ec152"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x48084) (async) r14 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x8000) fchdir(r14) 27.62022985s ago: executing program 9 (id=767): syz_emit_vhci(0x0, 0x9) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) socket$kcm(0xa, 0x5, 0x0) io_uring_setup(0x4d57, &(0x7f0000000200)={0x0, 0xcd41, 0x1, 0x80000013, 0x143}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x8001, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003b40)=[{{&(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000740)=""/198, 0xc6}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4, &(0x7f0000000180)=""/25, 0x19}}, {{&(0x7f0000001840)=@ieee802154, 0x80, &(0x7f0000001900)=[{&(0x7f0000000280)=""/57, 0x39}, {&(0x7f00000018c0)}], 0x2, &(0x7f0000001940)=""/141, 0x8d}, 0x14}, {{&(0x7f0000001a00)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001a80)=""/70, 0x46}, {&(0x7f0000001b00)=""/166, 0xa6}, {&(0x7f0000001bc0)=""/18, 0x12}, {&(0x7f0000001c00)=""/221, 0xdd}, {&(0x7f0000001d00)=""/214, 0xd6}, {&(0x7f0000001e00)=""/230, 0xe6}, {&(0x7f0000001f00)=""/244, 0xf4}, {&(0x7f0000002000)=""/56, 0x38}, {&(0x7f0000002040)=""/6, 0x6}, {&(0x7f0000002080)=""/193, 0xc1}], 0xa, &(0x7f0000002240)=""/55, 0x37}, 0x730a}, {{&(0x7f0000002280)=@phonet, 0x80, &(0x7f0000003500)=[{&(0x7f0000002300)=""/103, 0x67}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/106, 0x6a}, {&(0x7f0000003400)=""/35, 0x23}, {&(0x7f0000003440)=""/178, 0xb2}], 0x5, &(0x7f0000003580)=""/236, 0xec}, 0x9}, {{&(0x7f0000003680)=@llc, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000003700)=""/79, 0x4f}, {&(0x7f0000003780)=""/190, 0xbe}, {&(0x7f0000003840)=""/68, 0x44}, {&(0x7f00000038c0)=""/209, 0xd1}, {&(0x7f00000039c0)=""/122, 0x7a}, {&(0x7f0000003a40)=""/17, 0x11}], 0x8, &(0x7f0000003b00)=""/61, 0x3d}, 0x5}], 0x5, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001a00010000000000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="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"/371], 0x4c}}, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x40000) ioctl$TCSETS(r0, 0x40045431, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x4000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) getpgrp(r2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1dd1ec02e92e85f03d09028a000301ffa006090400000001"], 0x0) 26.943315873s ago: executing program 8 (id=768): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 26.668913108s ago: executing program 8 (id=769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x48) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = syz_io_uring_setup(0x4ea1, &(0x7f0000000280)={0x0, 0x681c, 0x20, 0x3, 0xdf}, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) io_uring_enter(r1, 0x4c40, 0xdb58, 0x20, &(0x7f0000000140)={[0x7]}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000300)={0x200000, 0x200000, 0xfffffffe}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)={0x40, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r8, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c4, r8, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x51}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x952c8067}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x86}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x835}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2bf}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x76}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x721a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5c}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3e76}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4008040}, 0x40010) umount2(&(0x7f0000000340)='./file0\x00', 0x2) 24.474671642s ago: executing program 6 (id=774): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r1, &(0x7f0000000300)="fec96b1890e924f0e68a5720c990384ffbdf05ecba334fb8", 0x18, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000000c0)=@ctrl_frame=@cf_end={{}, {0x5}, @broadcast}, 0x10) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000000c0)=@ctrl_frame=@cf_end={{}, {0x5}, @broadcast}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x490100, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xbc, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffffff, 0x6c}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4873dd34cde92995745690871295beeded0594ebd2feeadd"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "aee7e2db7f9a67c7cbf99c76fa6a28463857ace4978fb89e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ee00884afac83df0533be00effb6b6dfd68a95a944f9f53a"}]]}, 0xbc}, 0x1, 0x0, 0x0, 0x44001}, 0x5) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000200)={0x15}) (async) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r9, 0x3b88, &(0x7f00000002c0)={0xc, r10}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f00000010c0)={0x28, 0x2, r10, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000001}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f00000010c0)={0x28, 0x2, r10, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000001}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r10, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r9, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r9, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r9, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0xffffffffffffffb1) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x4, 0x5, 0x9, 0xe55, 0x6, 0x0, 0x101, 0x4, 0x0, 0x6, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x66], 0x1, 0x1000d6}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 23.991897185s ago: executing program 9 (id=775): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000500)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000021c0)="388219d25a8985d3a909841c8e956469a15e906a4fad26298b696426a81fcf0d6134c5dfa3dac33b6ea4c5d859c2e1333584935ed9d80c184939089e0cb436417aef5dcfb0c878732c6827d278c2910d390115e202c3162f4711bda810555b179a84d7df9f870f6c7510312f0255ce1bef6e875780543aaaebfbdf8208ee5dfd0de60437108b819a35569013870ba0bd0700000000000000c69ac3d0f174042b37d31f7821f65636376ab7bac88a99fc39c60286cac8d3edb5ac4c768a68a43fc77a52adea3b7397aaa2433cad989958c9a6118c72006208f95199efe7d08508913b00711053120551466066aebc0f3f5c6fdb9693ae6c2dc5fa839b808b8789cb1f88514918a6aa1d1a76eb131ebf84a0edaa97fbbcff14101f79a159222f4b4f31942f18bd6f1d393d3e298803a8435d214fe2f7bb31e02e2a75370bffa78d6752c8a6221b50162f7ec7174c258e4b65bf2797b4f7b7fec7488a0675990a075f7ec74b93fd845a6a9e12b0baeda5c81ce23be3b4cc15b493d4b9ae40736c55fcb8266f33760fd09c80bee60e1d5269770dd67c34d6c7ee57d67558f6421b3002c66df981a3114be6e62d4ff999c7985aa767f0a073eb499257c7b1b977f18dfae99f3be0664bb0c0d96fe4f3b1df5d904744570d01b517cccdbf17dada77ad37099ff69c040c0826cb23a80391f341749f2c21c32b5977b796b6af2d7194f1af44f2e0a84bf102b28dff97fa723c6792e16807939429c921dcd26d375fe58c59bb76e3d5227a5c4e2331337c3592a7d84ac45b1bd268a9d66fc2fd03aa23a7bcd7ab711c4fca2958883260b5d5741b145717012d4aa15f2d49b54660a46ec7cd7f9181213acb61074c65189bda02ac65f0e916f9b9260fc4cfc4bad08afb07fde1c2dfbe7807835958ac127021a7a2da901700483f8e5809a51fcb9a455fcc58d4dd8745ad4af3567fa9ee1b8750543117a970bd98d2595da38f3ea455b1611d32870677b0e0605ac387ca068892e1fb81411f901a1137ab9f5b78d350aeec44957e54e28f9ceb6d5ce046237b979ce4f7e7211167a6d3a3e99b151c08bc2a1593174e18196290e16e517e3ac66dceb7b1cabca97c38a6aefe048aff9fb203e1e58e5343062cd36b65198005d0b8ae336a47e8e4372a73aee7131804013d24e3d9bcd5ae2dd7baf036d571ba12ea7f17976e3e20887d8f24db24b2eb3c5e3f3b9ca8611ad4f4be7aa435c9641f290fb478168d3e204edb8181eebe3acb2552ddfa1f01d368d6604c03f84cbe78ce58284dc3b99aef5936adce8fb81118af0ef5a236391b9856bed6d1bc6cf02990c48b7f6c917efdab113ce0851f87258fb0d3f8633c6d41f33cf76f54492c4a1dcd4459153cd28c6473351371c73d73dd8f9a22f175959febadb76a866a9625b926fa1a12b32ba97df3c2e3b5d6893fab9a6352f168c423b38db9d13895afe3a017d27c84b7c20363f4e8a81f0af52c5368b856ecab23f52cf87f1ee3f73bdefc424b253c9c55f91df8a02b7df35a7c7defb7d260e4edf040503ed18f16aaf742b2c30ffb7f0108a48f50a7e603e24e0399c309781689118b2f1c23721e2528a3f020a4a43cf5439d169b4c116c284aac82ca2a5cecafb97d9dffb2b56af3cd73fe9ca2553ad33c12add00f01fbf7e11f8b30d3bee0096418b1bfdf2f458d8534c3660da46483bcf884088c171d105ff05e441d018dcc495eb35ea1f921f98ad1f5a0bc0f5cf69450b70bbb2a24d427511baf0638d3b4da0fbdcbe126e2e9e415b81fb12239b424f8f553d73520aff5f212fad8a15760759dd4726bd2d05eda93ddb10cc2ae01977d1030480fddea6045be4a5983fb67a263bdb86f722592880e4feaf9767dc5352cd898da96b647eacb41d7c97a1e2bf1e48b548172a06ff21962e79ff3724b94c3e339dae7ac1e67225846da5e1399639885fea22620c9501dbb4b8ec62292c1b8392e20ad72bdd72c85d5aff8e7432117097bb4cc173de0f8dfed12134024d92c2c8512cbb96b31f156d759770467abf602e3a580bb0ee26137229e11df6986f33c8de3921b81ecc56f600f6fbe39787b72293d567c3d396ea4d65baa3fae1a25df344c5f33ec1fdcafefc0bee2c5cdf59dbb0408e99ca27f7a6872bfd2c20e11bd8c5b9a38fa98f30b5a56eb3dd10be3cfc60f43264a40ba7e91676920540b87d9b4f88b59f6ed8b66d5144930f0f4d3748084923b27082d8a175f955687cc1598d02937af997018a871db6e0c1db1e2e4431e452cdb0110c65bea7da6c8a9e4a66f0957fcdf1b8c7cb4d808b896ff217db472709690bf7ff4d4ca912017fd57812e1dac1c4d1db8d5113739e917bfba37581118e950ba1a77aa124b4de0611ab834f8a82794bbd0b0b14ef60031642a6bfe152975b1aee3b466d3d9780c0c3b47aacaa8630a117b25409bb49af1f4b6105f0002b84325dce613054b6402d68e16bf3baa7ec6e9bc39cf324759f92cb82492e9b653015f1d795145fa911ed77ac5acbcff00cbbc2db04d2753c937dac0d09dbba128dc2f5c5918febb6ffaca8feb5bdd2c54853b9efe9b93f5356ab3bfe67bad1985e4c7e32c23e47140c540acdf30aaa966627923dc904f334a309789e17af70c2094ae28375a9414233115a635bb783ff422cd130b9efd41dd1c667d571241dab5d773f83e897787094f130f51c6c34f5af6d67ec94e57c5f9c37aba10f0a0433fa55b6ca2ce88b5ff1f44985312efc85fd31cfbf2412431763ec5ed6f39a799171aad1db74fa5c04295f5476446e5c148ddd3062a8ec4e773dba59139e9d0eb72b327cdc6b306bd475ca92ee5310d72c0906faab2950cec8f8619e009cb8c52e75fbec8aa4ce2736b3326583d365da32284f2b5f5d3c849623d15da5e6b2d780de22cf3504e5f06bc502a174db330d72214849ebd6887bdf4e7763db928b159698ef4e0755946d3a3508f92f332dae105a4c177d3ece1c7360dbade67e339934509e2f38b4f5022f5584255163d152f07b987ba838e45d1e62f14e46c45fe9e8a34dc4ba572081e96e9a33f31509d9bd0a362dace52d3a877fd238890d658ff776224609529e4ad4dc5d9138b3a2750dcafbd04de7d3d94d2b00128db71571ca361e4e257dcbecafa1f236c5c7990a37933a62ad28f575d5641b672fbd6b67b52075cc8daf420e4fe703326c05795ec388f6bfcdefeedf0d50617e086f749f7c37aaae655c5e059cdf0a1d2140273b3e6a22f6f79f843e3a4d05e92565260d354d068a71cc9ac41556e795c84291490821f5e5134ec03faf8b1073b774eb6e81a48f16ab2c2b4ecc0ca758cfcf4d2301f524a2dafa7a1a0cccf08b325dde92ee365c23ac818e673e60d887f8a24e3395e02379341b2a21959d01812f2d2de3eed3616e1d38249b4ccb0bfff4049725324c5d3dae738673e8849a889badf69237f98878efdb3c3136db8a902b83a7fbf62f08501f1e55c2fdee54fbb8e824648e58bd8f45e729261c6e75637e454b14b3e7175ef81551e9ce6609d7b7e9e53467aec2ce5b34a1761ad6a510838bf2611722885251732ba1aa8782a4316619bd49194fc0ecb67b3ec0f199e6af276bfa9cae0769d2779f6579792dd100bbc9b8bcd94bfe7bf1fb985789917c2d83b14a8b028d79236e0b01f1cfa00b34554148643a9ec25053baa4b56a1dfec6c84c1767989f2a400beaf4373daaa7f578846ba90de1bf47a921a0dd4f22746ea82800bb2d51bb80d916148b1fbe8e7ebb79cf11c8bf588e2a0b95f6984e866c623a9015371d5d3495a3f3d9b42ee7828f1a3dce118a648342d0b0b8e17dc9cbc95c16fc7410f5a7ade7bf921279611e6f2cec5c945e4115142075287203b65f8a3b14d026c465b83a4447891dacbc37de3f23b801abd1a628973b5858a9fcfcb1c3923eaddc6fa3787f28f5ed0f2e1df91bf9d7396891b4efbe008e0818cb57d3eb178844e98db8b09fc859c11427adb4a92630aafc2ce7ae644f077bbfe3a899b6014be74be9277177d10c72f0b13998fb666af0cf0b28757c5ae8f5021c00adb414d16aea5cb23f22c7f526d8266e4b67b85f124704769e1187c3415acbf81cb3c2d5cc04d95edbd75bfdd32847e984a55d4dc1a7d3781bad2b6b62a576c10ff471e107add2a74e59ab11071bf5fb57c0cc34a45dc8796fe47000811cfea6cfb22c22e2b4656efd5ced8da97ca0179a6c3a4d58a7bd77260516107a9a72036c92c2dc800d825c3f45c6123a0332d37d7e29f84184e19decc59102950da0b0cef36160153f5a453c9c7fcfe2e145aae343fb9bb726bc3aefb9a604708d3ab1c5f51228ef8987a00ab2abfee2f3c1a38c48797035d43f74d1d6ac26df34926ce8d95d1d57f9e442398822b5014367dd8dde2db00ea5972dc8e782a7a193744d3bfa0298f353207e442716d26ba943821a6b0d2e112bd7033d7df3c99f0d875dca45f466567c198c16039b00f1125b77c1c560ac21ca70db4a642ed58f5f55db9acf206fcb3adb31731d9efb1b7dd9cc124858bc8fd9fe2651e31f152f05d2be376f3854d3de9dc464541bbdab3902773b3b5b2a14a20c0e80ae3a2ca02ddb584fab1767af0428969d4a9035cef9092d8d3bb48b8be88bac57d53c6e50b07fa51e0d9351159eb97741e09f55317c802fdb0cb172fa79b2ad25fd55613dbcad1f070a407facbcce6a229f4bc88de1ab99dea251a677209e9bc08fdb2e0299535beea1189044ab8c69c9196fb9d39b6c609c0c815ec929a01cd974d08b6f0e301991101ccb8c7e591f9cf1dd6fb6cfa17d6925d13bf18508103c44a52efb3701176d31e34207aed48792f5d7c4ddb6bb3bf6f0869f528363b7e0650b06b0e4caf53dc30157e80ae1e2432b60a1c64088eec7013a213ed65340adddf6940d277e87802729c3a6dc9c3d5919d835fd55642e15ffce4a9bd8553be5ec276d0867311f2b0e11173eedf0d7d5dcac0d44f8076ffd9ce8e90f828c4443c8b602db35ca19220f2cbc295e8fda0602e6437a46abc775da4237bede18196bb1e1106220235fd2072fa4375fd8bffa037afeddedc4477b315799176a23f47f48afc652fff5083c917ed1b4097cddd186921531357cd0da18996a152639692f5a2bf4c7745c3b640d7ca69e236edca95934c36ca4b9236d9cbbd3f248b948c942f65dfce17167628b4eb0c5893512c2d8439812bcea8d5fe6a229264723b66e4f2cb6f970139415440dde9946c5ad40032a1c5a18c248d35b73100d8f38aac9c5c302354a9db4e8d99a2d845f54a767c4a0623d40b998e28d454aff7defc9bb4cd3673374a33e641a6614c6b5546b3f70ed288f53def2e49baa32d1afb93b4c04a22b5c9ac3a23f1e0cb423eab40f51e2b3c170b501dc517abbac962784e1bd151815494d04e336ae2f16064ca27c7d776f8c5974a76e9b3d313446336e696e24202b2cb94603e2929906ad4000b13f0f7e7ecf6c2d7243e12d0aba4fb5d4a30de4e2c5a0ea8ade6d79bef8dead7b49ceaf6d7157a427382570771040c084c9feba727019c3b03dae0c5880b0a2dbd8150b743f987b5019b421c5d164150592ae0646217618c92e7876e6c4a2b0ecdfde08f04265e0bfa096a2d6f83953af12209e892a9a326368e0270f8e669ed5aca72579d1d6b806eaba059bb28c7f80fc1ce39b994e6816cac5df5cf9d40582bf9301b12deeb09a2eeab9c8a83a7d44d04a87ae0d4a590cb5f5e3824dc381fc56aca6787be5899aa3694f3b9a872b61dd5876c0f8ff3c81f38b4e52792254edfb954b157abd7b2ae2f4f8caee5b78886894e467e38a93c26cbc546022371b44360a317513341933a0db7ba88929844489e51259a489854f8160ad46594a19cbe799515f396168505520a5288d00f8093d3aef119d94a7863e67c9a7d6f900ba9834fd886044513ee1853713c2a4b5121487db6e7424a0b7f19895e5cf5e41e69c34b3378bae46e2e1c7d29c1cfe1bd0370bc2c0649ea144cd1d4d40fa57160cf856f3fb3dd3cd9ff014b4194837af58189305226b534e1a82297adb14e7af42693fa5065873cbb7fd7ceef5a41d8a63c1ec4a0b214182c5ee3cb9430f6dd7cd57fa56e1b6df932c683905f111867e5bc229bedbb3099a72644d96c38aef3e93268dcab401a2882f1f48c63dc068fc102adf0c8e8a1debdf454919cf7042c6b80955bd63cbc27d785e06ef360feb725748e8359e1fe6d64851ad9faf834d28e6273db6830eb655e6ca3d0d437dee2bd6d0ffbe9aac4e54af0e8436ab653f8d6580acb7388634f342b36fac1feb35526eeeb8602a31a65843c18a9bd463c365e42192f6aadaa1a6e4991e9340258532f4f4811788d8662925405b76db6aba7965aee669441818c5e96a3d945d81baebd00ba2d97414f1840b3dfc7d34d9fb13877d241744cad6a367dea3ff5c4f29fd41e06f85c67c614cfa307463b3a8550a5a31cadc8c7111f1236c9113b18c631cf9ede683818be932fc0c8f389457a05c1b02e7a380b27b10853c79d9495ffa702aa01a1953f269c952e4ee95b001c5ebbba33c902a7d3aa81ac9ff01b1f9ed97a6f280f3caae24cf236e41993cf991e7d8f3ff50a173997179a190d92a26beaef64eae0ebf824b485962089f8675c2cc176c2c052948176937a4074f2506edb7e60a65149ab319f76fff07cfde46f6799869202d735e5ae9f91f4d23150de807efd933ecab245fe128554664fc8a3f411a9e45e050ea40c68e45f57403dc62b3a6908df7f6d8cf9ef45133e56b5682757415093b49b86630758075103fe98f1d380f58829b796b9ea4f06499beaa81108976a3a70174c3542eb2130070b1c4354166049b412b2256be40a9d20e18a2600540e1e1c15549892310c09870dbf70874be181a0ed4009592bea754fe30ff3cd96a551071d7ce21c6cfd3e449dd8c39bd97ed47b16bf00096578342112fd1aaef915962aa9a3141276c7442aab367fdaa02b2db13bb1e1be5c7486464196541d584096200520a6a57a228466fef61e2f6f678ba9f3733f6ae80bdd6bf67dda5b13bb7c8d05d20825566ee3ddfb9c94dc270aebe3d5a24933ba6befcb65226de3f2d8fc6fb518a36bb655289d2daa616121a4ce08c9f4effc5127c90d93369d8345357c67e3bdc024263fd43d090b8f1643c75236ce000ba02001c5974035f733ecb05f35d3d205027b393b4bf33dd86050a9e2c8f779de8947a38ee7b2b2b39d427cf48a359f10bc0fbd50763c8f4727ba82a55f6c2e944b71f8e05626bef8e7598c55cd4e587686446adf394282e312d48e02b9ce324b8523b33978c9ed7e67b886479c8c36d136d276b34de843ccb98d624daee93cd3d5db695189a5b1f730091b6339d8ecb93485f9091b46e998ff1efad6d647a2b6d5f4647e84835cb1d863386a337c9ef4ec0ad827fd0acff7498422f8277052c53f0a7001b3771a19241b1d14021d6dbae44dc7fd92365012d1ced3c4f494699e398c404d8ffa5a6cd824e2f7638a4087693dc5191a7c6fb4fd29967e27988234c015a33db9ac71a416a8469f871b7da09c95f3331576c1b4f4c72b7b127ad2e48a57e28804efe74f8145aeaef16c03e2c3e99fe3ccaddded1da622fc62172e8f55d04e1305df63e789774d3640e6cf36ed53c2fcdeef189178dde1b60c640742c68d8d06cae2538b7b7d0ffe1905037537a754ba44950c4194c8013b5a4eb2a2b6406f9795d70e4321c7ab7e630381ce04e2e4f15e49153842118abb5179e246e41ffa49ed2b39b62ea47001f35229be23d332a81b5d47f88a5737b480f27ca75a653efa3afa257ef05e1b4da1cb84653b074e9aace9f6f4b94f48cf50b3fe2b1658d30e3f288b6d6a1164f3c9153b0f185c10a64c861889dc3faf8bebd6caab6f751a31109756cbc8b9a62384faa1a88b2ef8803855414dcc209329752a65b05a0784be9837e3a4a7cdc49b302a1e3e9be08080b6af5049702613b777e55b0033eab3ad76024a6132522289df20d753b595a48b1d116e792b51c9840541f16f56ef185a3c14e64b7e293c178ade690abeffc9d8f908bab3db2460d7f692e48dbdda353b6df648a98411bd8c70f95f6fb27390e6d3241f36fea36c0aea9198cd40fcc23b181d41fd91cf66570aaaf0688a4eff348b6f0e4c8bbda629cf269eafe2d60cab7108dbaeb0119ed441b7c4b379d0198be27dc6de0b53acca37dd9e5a40a558d8405de127fdd4b381a83d6d33b11061ef5428c08a8c64e73a3a6ccb11037cda942aa937f1ec14a9e2088acbb7b5489d173ce08ea04febb1cd93d7c0e1b3fb2facf8536e6568ea349647e2e449fe220516f5e94ab5727a91b92f9ac957cadb2e107b101c286e521d7742b86dc53df904cd29e6b7488ac8d149226254976858d25d388eb6842271f051a082e18d0549232dd0fdc8da13aaa44f925dc3f462a188cdc8e1573bf989d25243f975a7765cbe01e84ae4654fa60e20a39f89b53f008796c5360ca8ad4cd9adf0bac7862002f9a02a30aebadb738673bb12edb7f61755ca16defb8aca9bbcbf2fd39cd556369050407d4a7077b14cf922f3597af3e967ae63f1c1e8a6b6d10fcdb8aca23c2596b72155962438889005fb8a835153ac594f1a8edfef2ffc66db8d642beee43524f6f271a1c24824c92ad58531251df443d712615f7fff6a385298183cfce80296dc95ef4728b5b1b98549460efaa2d230453f8156b4c6d76e5bce6aa9e1b4da827a96949af8681edd094d0d63dc3b582a156480b1800130ec5543c40be0c561d90bb379db82a4b59b657b05333c958908bc65b3a26fa8d745d579b09b5fd5e2223e7c182bc7610d414a379ff9a8922909340433ac17b77130ed417bf23e4ae48ca4a834b038f977d0deefe1291e76395c35b4107b2de4178b1051251cacb6bff04fd2d092d6ae2a72b25213605ab08b71fe478927cf82353ebcf382630cee84d03bd38227bf8b12c1bca16686ec9ffe61aed4635328f39ee09aafebf30da052e0e4bf28da6badd62636022b130dc4f1e196ffce2051d3e7f80ae29a38abf6367f2555d93f6ad2ab346f3037737ca141dad639771645fd683361c2b67abf0b04c1846dff0ce319ae12a9c79a7bad5e8e6fac23ce85860d1201e69319c41924d87066f6f320006bb3fe802d04a5bedbf50dd15e22df446cd94be3486047315f9ba0fea5af6915ea399075704308653b03f29d4e99419a1a7f848302a46537a297f6331abc7c36df88bb535096135b971d41c4335eb8d2a9eac87061d16f2e6899662d327deb8fd788661d6d151a7e4d3f8cb8312a0b8b60807cb6abc7bad6b66e8d5a492cef77759055e15c7c37a20c751b9571e02ad40b65c0b17668eda7ef989f8bde821d2e9c7a119cac9ca3e925f51cf6c2bab2a406699555099e016944554222144a3e970220e01bfe3b152c955ee4e21716c1e521a4bb0228dcd9b0a237f8fc2ccf9b4ecd8d6e2eec4508cd6c6453db134def3be0808a9f0df28960e28385611ec490cdabd63cd76bc53fe10d67af82c755721f6ba406969969008dc072d1a3c0a64a95f5265e9529575bf1038fe0df1925bc40bd7d8831e891aab8f888d1906681a08fccac5bb4cb3c7e67ccdeff175b76d9bd7029f53e0ee15d8845504476940d05b87156cce1d5ed93671d5ee0ce0874f0606f7d09d15cf16d98a1cbb456a5704cffc0a3918ef543a6e9a67e965c4fbb8186991ac3ca2218244cdc44af93a08763e04cce549c5ab00146278a63c2c94859a91544efc6559061cf781ce86969f8b1f5b65389ab3b19c0cc41ddd39e614803b06599b8653ed64cf8e3605c69afc879ae03e6cc5f80f88fedae281d1adf53a9204c491204edb99d1106b68ccb21004d51c419842f3e1564b5a4e01e71a47135178d8d045b07c045cba01436cd0ce6a1ce9a480b1bd6eb48fe2888214ca31766f5c5144edf8bdf7edefe015cf95bc6834bb06aa157b76f9fbcbade1ceb547fa678ff33a24ed4cca831654c0b03bd1a52ceca4287171d524e37d42899a4c5c66da0586ffb7b4aead7cdf892ce24d66eaff3530dcca213f70cec1d24cd59bbdc12e3f6f4bd4d0a2b232fa5f9ce2c70aa529fc85d4d2183f4c20f154da58103cfeffd477901d188ea888aad45f778dc48969936ce7519d2e1f0e14b2fc8b02340af1f83119cb69ab38e5122223950d5045479cbfb0b989013e2b1b995d6c45656b8124e8fc54f7daf9409ff4ad5babdc9789e3d420cccb792bf06a75cbf2bcc8b45a394e62dce6ed5188495c0de5a86d00694fc70a41b1cede2e986a33c13a7bc88d9c79775dbb624b9d66c577466547183ca48a0279ccfc7bffe699d0f4f82bca906d0118865e8851b75f9914ae12a368c0e2881fbf8c1f4374c37fce575034bdac4a06e022e62b34874966952f0ffb6c9fc8138eff8e07ad630635772e84993af6d71dc3eb534bdb00475eeb433da5b6cdf9051a8898a8893ef0ea4102aa24968c2c8be9b5b02e07c075f59c3398e08876054135ad6be1c51a5e98e1400edcca8061640a0d20b3f7a92acff856d20703f70c2159f91f9419d34cfb87f890b578bed938ec52eb1b45fbef56828774cba3704e0a22b1fff7ff6bb94620c9f0317728ee32d09615d186138238fc529247e80fcf71e9269e72fa25962695e40a38a816c2eb5d5e3f169e5c54ae20cecdc206b8cc093f6f5d3461268ff8a7154bafe92cf145aa415556cd9c6b4f5693050d00d6e1f5441c67b4c3abf561803ef525f4e199b2cdd03b806c0d8606ecaf25ca51a750dab89d91aaab170fcb7b6f50766ab8f11cf177bd75e58d432c051cdafccde5fd81233f524d37a6ae391da09b381d46b1333a07d5632b9f83c1aa8cd44f417320550d5b9ae5118502ff8fe89fffba8e0cf4f8fa4c096ea4937b7b3ea6f9dc0fc13e2e2b4ca172c97b67a58404a335436658063a9bd1c71422e9ee5ef345df6534be0b0482273c4750b9ae92c463bb87e7de173b40a8709a4018bdbe9e799b0a95c5946dc424efaac67eb3fe869d49e040d94d42c1c7680c47c9bba3344f7034d68394e65f6d31b9e5b21a763429432b91b85e274a5675011b2d5442f1d329ccf1220275ba714738022742135bb9674a2544d23b09c93d1d07f35738abf59f44b894048faf09bf0467b9d8171afe57ee10c828640fed3801dc8711e0b678b30f42f396be642975cc2724110d48a59d3ae7160781b7a3f4973fc2d720440408ffced0e2b62728e7ef1f5228fab181fb9b7a1077e376df6c5aeba81e9fe3fc9f82919bf476f1e97c64da1aaa0fc7d1e0b31d8519717717a1ca1856bae339cb612e4880d0aed31500c80e63fc888389c20be12e73cb3299f7a23cfcfd47834ce9b0d92d7b732d15b2df232158cc9b690a0c7e9fd2c511bbce0a6aced586059a9446019ac26ce6eb9ab507dfb24c58acfe596dc2d67ff19569211078498f31e7998135b47a5e2f39b23e474bf74484690c080fc1b818474094d960fe89d45b43c926cc0e6b60bdf3fed333ade75161441c622005e243964d6603a29888a5e921a713e7403785a86103c7fa700", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0xfffffffffffffffd, 0x200, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x200, 0xbaa4, 0x5, 0x8000, 0x0, r2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x3, 0x9}) socket$inet(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'dvmrp1\x00'}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100004776b8087909700217a801020301090212000100000000090400000009b62a003eae8cf893cb521cbde3b5862f40a920b7ac"], 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) (async) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000010000)={0x29}) (async) r8 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000000)={0x1, r8}) (async) chmod(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) (async) ioctl$KVM_GET_TSC_KHZ(r8, 0xaea3) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000010140), 0x48c02, 0x0) ioctl$TUNATTACHFILTER(r9, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async) socket$inet_tcp(0x2, 0x1, 0x0) 23.88482104s ago: executing program 9 (id=776): r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x40}, {r2, 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x1000000, 0x0}) r4 = socket(0x15, 0x3, 0xfffffffd) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r8, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000a57000/0x1000)=nil, 0x1000, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x54, 0x2e, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0x5, 0xfff3}, {0x10, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xa5}, {0x8}, {0x8, 0xb, 0xa7}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 23.483439237s ago: executing program 8 (id=777): r0 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x30, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x91, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x3, 0x4, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x653f9243375284b8, 0x0, 0x2, 0xa}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xc, 0xfb, 0xb0, 0x10, 0x8}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x2, 0x8, 0x4}]}, 0x4, [{0xd3, &(0x7f0000000100)=@string={0xd3, 0x3, "2ba36857332ea4aedbb8b22a07cf3706d60770276e1286a753e85d74bbffbed262dffc81b517eee136b9e5388a618e0ec214db87bba4a99f68286a99084f5088ce6d6ce46f82bc05c1dcbbb818819c749907ce867cabd4d92f27da2a7b520d9193b56f7c6a9524a1f314a0c5665b30fa63e8be346e5344ce6212e954fcb9fc61e06acb5b102656e81751ba0cd4a253afcf6b5a77bc636f1cbeee2643b141231b753c403e4ed4680a0abfe3e1e35eea8660066e92ac9d9a41710585d93f9df9199eca0b4e6962a1fa93e8edd37087686109"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x419}}, {0xfe, &(0x7f0000000280)=@string={0xfe, 0x3, "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"}}]}) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f0000000400)={0x20, 0x6, 0xa6, {0xa6, 0x1b663a07d0a0a264, "d3878111c81fbca9415f5522460b6bf9dd31292a226c85e9ecfb142f3fc7ba85a64f83c0e61a097141998b2c3f73df11bf021ad58124fd2114940dc1a7c57a83d3320bd9608c5ceab693bf678ffd6f973d7622888715917ccf6cffe522694d7b2c29c33f7a906b487bac0c1ee3f3ee7c0935b24663df5202e4fe988f2b709bb10ef5b3ad99725af31b5b8f0b1fe8f13874b374df7a0583b2fe07ba33cc7c56895810d851"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000500)={0x0, 0xf, 0x135, {0x5, 0xf, 0x135, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x9, 0xc9}, @ptm_cap={0x3}, @generic={0xf2, 0x10, 0x1, "c74e5ae57edd92535bffc53cbc88ca434d4e5492198b7ee1edf3d35a264c246f01c5d873c5bb956a8e6eebe8106756d618ac6472e61569df34507705a56557db1112345cb7686570b3a51cafaff102bfe04cddff630b69c81c8624b4f7497e92e0c24d6e9423f4484f7b120ec45e66d0d682f6811dba20693582ab66549d3e35df09ed5d9430dc7e3dc90d7bb73e8787c5599b7505ab0dfdaea84703481aee3080e4da3b40a9bbad5ccc521342d5b0f4b9d4c12f75d1d38c557e7157179f29b6b2c59f19e28ed3dbd5bee51337ad0d8f4302eeba42e45bdba8f691d8d05c2a1bd7e539a1ce63c0e6dd782b2367d26f"}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x9, 0xf000, 0x9, [0x3f00, 0x0]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x9, 0xf00f, 0x0, [0xf, 0x101ff30, 0x3f3f, 0xc000, 0xc0]}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x74, 0x7, 0x2, "f3be36cd", "79839894"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0xfe, 0xb1, 0x0, 0x8, 0x4}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x40, 0x16, 0x61, "79d39f3c0bffda3f65dccb6b706c25c5fdd7b57f9468531162650edd515126f3d73086b5635fc450ab70c03f6621fb14dbcde9ef5f1126bd8927d03f1ab6cef77668d09292f6c5f6cf0a1a12588bf54433b3e7b2d8d7eed5066c2c4c7dc4f17ac2"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x60, 0x8}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0xd6}, &(0x7f0000000900)={0x40, 0xb, 0x2, "c7ed"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000980)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "c638"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x9a}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x4}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) process_madvise(r1, 0x0, 0x0, 0x19, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599", @ANYBLOB="500a7458b4f5e6065841d3c6eea9ad80090eeb93c8d00d"], 0x0) 23.203023636s ago: executing program 6 (id=778): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, 0xffffffffffffffff, 0x0}]) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc000000000000000000000000000000060015000200000088cd9e45270fc44141ef3703705f19e2a6474ad9b3c17b14a0ae5646d7398fcee658e688547c67b1020b3fe40725977c398e8bc20e17e87a76060fd9b946cac5b324a67fd1a6bf002cff1480b2d8a193b1f71b209a5b5126423a0f75009e279dccf6d8ca14cd2cc59338d02a8471ee8c2e5ed49c5e4a1a87b4a536347e8be50e9c04728b"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) 21.79331051s ago: executing program 8 (id=779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003580)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xfffffd24}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40010) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac010000120a01020000000000000000020000000900020073797a300000000008000440000000000900010073797a3014000000080003"], 0x1d4}}, 0x4) inotify_add_watch(r4, 0x0, 0x80000802) 17.667134023s ago: executing program 7 (id=781): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 17.487453013s ago: executing program 7 (id=782): socket$kcm(0x10, 0x2, 0x4) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000010000000000080000000000000", @ANYRES32], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac005c00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 17.298043875s ago: executing program 7 (id=783): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f0000000100), 0x0, 0xffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x68, @loopback, 0xc2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000380)={r6, 0x1c, "bf7fa159ea60785a5fcfa8d2d836dbcbaacf8bcee9219a5f2bb4a5f2"}, &(0x7f0000000400)=0x24) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x2400c084) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040084) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) (async) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r10, &(0x7f0000000580)='1\x00', 0x2) (async) prctl$PR_GET_TSC(0x43, &(0x7f0000000180)) write$sysctl(r10, &(0x7f0000000000)='2\x00', 0x2) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 16.371037885s ago: executing program 7 (id=784): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x22) ioctl$KVM_CAP_VM_TYPES(r0, 0x4068aea3, &(0x7f0000000280)={0xeb, 0x0, 0x6e2b39db77ceaa9b}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x62, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r3, 0x0, &(0x7f0000000040)="21742534a9489182fb87d4f979e437916ba40cb533ab920c", 0x18}) 16.259175189s ago: executing program 7 (id=785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x4000) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2) r2 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, 0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x48}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r3, &(0x7f0000002680)={0x2020}, 0x2020) mknod$loop(0x0, 0x8fff, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) execve(0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) 15.086154516s ago: executing program 7 (id=786): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0xff7f}}, 0x20}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0xa, 0x0, &(0x7f0000000100)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x1bc, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3a}}}}, [@NL80211_ATTR_TESTDATA={0x23, 0x45, "7326d93d12fb6911fc873c1841c74750f67f8e0c88466e19835ee61c402e02"}, @NL80211_ATTR_TESTDATA={0x52, 0x45, "47bdc93dd13bd1c2a51cd57495e8b160c9cc6277a7d44418058e7adf67cedfe2c3cfac58d84e4d80441ca7e339b468f76a93765f2776297d45096ed747adbd18a7e81ae81742a960c29a952bed3a"}, @NL80211_ATTR_TESTDATA={0xff, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x1b, 0x45, "5c6dd8f55a051278315a67ba898262166eef061f04d65b"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8010}, 0x240480d0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) 8.529845858s ago: executing program 38 (id=776): r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x40}, {r2, 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x1000000, 0x0}) r4 = socket(0x15, 0x3, 0xfffffffd) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r8, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000a57000/0x1000)=nil, 0x1000, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x54, 0x2e, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0x5, 0xfff3}, {0x10, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xa5}, {0x8}, {0x8, 0xb, 0xa7}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 7.542104011s ago: executing program 39 (id=778): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, 0xffffffffffffffff, 0x0}]) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc000000000000000000000000000000060015000200000088cd9e45270fc44141ef3703705f19e2a6474ad9b3c17b14a0ae5646d7398fcee658e688547c67b1020b3fe40725977c398e8bc20e17e87a76060fd9b946cac5b324a67fd1a6bf002cff1480b2d8a193b1f71b209a5b5126423a0f75009e279dccf6d8ca14cd2cc59338d02a8471ee8c2e5ed49c5e4a1a87b4a536347e8be50e9c04728b"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) 6.027070636s ago: executing program 40 (id=779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003580)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xfffffd24}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40010) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac010000120a01020000000000000000020000000900020073797a300000000008000440000000000900010073797a3014000000080003"], 0x1d4}}, 0x4) inotify_add_watch(r4, 0x0, 0x80000802) 0s ago: executing program 41 (id=786): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0xff7f}}, 0x20}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0xa, 0x0, &(0x7f0000000100)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x1bc, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3a}}}}, [@NL80211_ATTR_TESTDATA={0x23, 0x45, "7326d93d12fb6911fc873c1841c74750f67f8e0c88466e19835ee61c402e02"}, @NL80211_ATTR_TESTDATA={0x52, 0x45, "47bdc93dd13bd1c2a51cd57495e8b160c9cc6277a7d44418058e7adf67cedfe2c3cfac58d84e4d80441ca7e339b468f76a93765f2776297d45096ed747adbd18a7e81ae81742a960c29a952bed3a"}, @NL80211_ATTR_TESTDATA={0xff, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x1b, 0x45, "5c6dd8f55a051278315a67ba898262166eef061f04d65b"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8010}, 0x240480d0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): atman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.460874][ T7943] batman_adv: batadv0: Interface activated: dummy0 [ 232.503838][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 232.547191][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.583948][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.613737][ T7960] vlan2: entered allmulticast mode [ 232.644110][ T7952] program syz.5.475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.665713][ T7960] gretap0: entered allmulticast mode [ 232.835091][ T7967] nlmon0: Master is either lo or non-ether device [ 233.025288][ T7973] loop2: detected capacity change from 0 to 7 [ 233.060743][ T7973] Dev loop2: unable to read RDB block 7 [ 233.093116][ T7973] loop2: unable to read partition table [ 233.127913][ T7973] loop2: partition table beyond EOD, truncated [ 233.166585][ T7973] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 233.391489][ T7983] FAULT_INJECTION: forcing a failure. [ 233.391489][ T7983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.425701][ T7983] CPU: 0 UID: 0 PID: 7983 Comm: syz.1.540 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 233.425730][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.425743][ T7983] Call Trace: [ 233.425751][ T7983] [ 233.425758][ T7983] dump_stack_lvl+0x189/0x250 [ 233.425783][ T7983] ? __lock_acquire+0xaac/0xd20 [ 233.425805][ T7983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.425825][ T7983] ? __pfx__printk+0x10/0x10 [ 233.425839][ T7983] ? __might_fault+0xb0/0x130 [ 233.425865][ T7983] should_fail_ex+0x414/0x560 [ 233.425883][ T7983] _copy_from_user+0x2d/0xb0 [ 233.425904][ T7983] ___sys_sendmsg+0x158/0x2a0 [ 233.425925][ T7983] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.425969][ T7983] ? __fget_files+0x2a/0x420 [ 233.425987][ T7983] ? __fget_files+0x3a0/0x420 [ 233.426012][ T7983] __x64_sys_sendmsg+0x19b/0x260 [ 233.426033][ T7983] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.426064][ T7983] ? do_syscall_64+0xba/0x210 [ 233.426085][ T7983] do_syscall_64+0xf6/0x210 [ 233.426103][ T7983] ? clear_bhb_loop+0x45/0xa0 [ 233.426120][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.426135][ T7983] RIP: 0033:0x7faf4a18e969 [ 233.426148][ T7983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.426160][ T7983] RSP: 002b:00007faf4b0cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.426176][ T7983] RAX: ffffffffffffffda RBX: 00007faf4a3b5fa0 RCX: 00007faf4a18e969 [ 233.426186][ T7983] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 233.426195][ T7983] RBP: 00007faf4b0cc090 R08: 0000000000000000 R09: 0000000000000000 [ 233.426204][ T7983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.426212][ T7983] R13: 0000000000000000 R14: 00007faf4a3b5fa0 R15: 00007faf4a4dfa28 [ 233.426233][ T7983] [ 233.622112][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.979800][ T7992] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 233.993699][ T7992] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 234.059604][ T7992] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 234.126440][ T7998] loop2: detected capacity change from 0 to 7 [ 234.161686][ T7992] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 234.169942][ T7992] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 234.178095][ T7992] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 234.185936][ T7992] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 234.193731][ T7992] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 234.201643][ T7992] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 234.209522][ T7992] netlink: 'syz.0.541': attribute type 3 has an invalid length. [ 234.566535][ T7998] Dev loop2: unable to read RDB block 7 [ 234.645299][ T7998] loop2: unable to read partition table [ 234.687571][ T7998] loop2: partition table beyond EOD, truncated [ 234.722138][ T7998] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 235.285062][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 235.410670][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 235.736098][ T30] audit: type=1326 audit(1746987160.628:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz.3.546" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe446f8e969 code=0x0 [ 236.005139][ T8021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.061620][ T8021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.596100][ T5915] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 236.827764][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.862489][ T8038] loop2: detected capacity change from 0 to 7 [ 236.881128][ T7752] Dev loop2: unable to read RDB block 7 [ 236.896130][ T5915] usb 6-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 236.908411][ T7752] loop2: unable to read partition table [ 236.924688][ T7752] loop2: partition table beyond EOD, truncated [ 236.943106][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.987788][ T8038] Dev loop2: unable to read RDB block 7 [ 236.996153][ T8038] loop2: unable to read partition table [ 237.017256][ T5915] usb 6-1: config 0 descriptor?? [ 237.030903][ T8038] loop2: partition table beyond EOD, truncated [ 237.055748][ T8038] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 237.156051][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.553'. [ 237.169507][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.178650][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.215808][ T8044] team0: Device gtp0 is of different type [ 237.269332][ T8046] fuse: Bad value for 'fd' [ 237.590844][ T8052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.670777][ T5915] usbhid 6-1:0.0: can't add hid device: -71 [ 237.686973][ T5915] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 237.736431][ T8052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.788153][ T5915] usb 6-1: USB disconnect, device number 2 [ 237.986695][ T5890] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 238.006649][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.015444][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.038535][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.141476][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.159624][ T5890] usb 4-1: config 0 has no interfaces? [ 238.170297][ T5890] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 238.179804][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.213330][ T5890] usb 4-1: Product: syz [ 238.241577][ T5890] usb 4-1: Manufacturer: syz [ 238.299674][ T5890] usb 4-1: SerialNumber: syz [ 238.372361][ T5890] usb 4-1: config 0 descriptor?? [ 238.495768][ T838] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 238.679528][ T838] usb 2-1: Using ep0 maxpacket: 32 [ 238.710233][ T838] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.743466][ T838] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 239.113737][ T838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 239.142409][ T838] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 239.238803][ T8073] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 239.252261][ T8073] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 239.278099][ T838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.393360][ T838] usb 2-1: config 0 descriptor?? [ 239.651033][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.689140][ T8060] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 239.695962][ T8060] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 239.714782][ T8082] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 239.721351][ T8082] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 239.775072][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.786174][ T8082] vhci_hcd vhci_hcd.0: Device attached [ 239.806126][ T8060] vhci_hcd vhci_hcd.0: Device attached [ 239.989212][ T8084] vhci_hcd: connection closed [ 239.995424][ T8079] vhci_hcd: connection closed [ 240.003959][ T7194] vhci_hcd: stop threads [ 240.013296][ T24] usb 35-2: new low-speed USB device number 2 using vhci_hcd [ 240.029002][ T838] usbhid 2-1:0.0: can't add hid device: -71 [ 240.036025][ T8054] Invalid logical block size (4) [ 240.070595][ T7194] vhci_hcd: release socket [ 240.086719][ T838] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 240.131498][ T838] usb 2-1: USB disconnect, device number 28 [ 240.132820][ T7194] vhci_hcd: disconnect device [ 240.188230][ T30] audit: type=1326 audit(1746987165.078:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8089 comm="syz.1.561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf4a18e969 code=0x0 [ 240.195012][ T7194] vhci_hcd: stop threads [ 240.344228][ T7194] vhci_hcd: release socket [ 240.365915][ T7194] vhci_hcd: disconnect device [ 241.400216][ T5889] usb 4-1: USB disconnect, device number 34 [ 241.445194][ T5200] Dev loop6: unable to read RDB block 7 [ 241.478156][ T5200] loop6: unable to read partition table [ 241.508381][ T5200] loop6: partition table beyond EOD, truncated [ 241.564944][ T8104] netlink: 44 bytes leftover after parsing attributes in process `syz.1.564'. [ 241.623576][ T8106] validate_nla: 43 callbacks suppressed [ 241.623592][ T8106] netlink: 'syz.3.565': attribute type 3 has an invalid length. [ 241.645911][ T8104] netlink: 43 bytes leftover after parsing attributes in process `syz.1.564'. [ 241.662147][ T8106] netlink: 'syz.3.565': attribute type 3 has an invalid length. [ 241.673086][ T8104] netlink: 'syz.1.564': attribute type 5 has an invalid length. [ 241.689235][ T8106] netlink: 'syz.3.565': attribute type 3 has an invalid length. [ 241.706243][ T8106] netlink: 'syz.3.565': attribute type 3 has an invalid length. [ 241.717692][ T8106] netlink: 'syz.3.565': attribute type 3 has an invalid length. [ 241.755406][ T8104] netlink: 43 bytes leftover after parsing attributes in process `syz.1.564'. [ 241.766153][ T8106] netlink: 'syz.3.565': attribute type 3 has an invalid length. [ 241.804255][ T8106] netlink: 'syz.3.565': attribute type 3 has an invalid length. [ 241.830228][ T8112] loop2: detected capacity change from 0 to 7 [ 241.859557][ T8112] Dev loop2: unable to read RDB block 7 [ 241.873798][ T8112] loop2: unable to read partition table [ 241.884960][ T8106] netlink: 'syz.3.565': attribute type 3 has an invalid length. [ 241.893301][ T8112] loop2: partition table beyond EOD, truncated [ 241.905853][ T8112] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 241.985693][ T5889] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 242.076979][ T8106] netlink: 'syz.3.565': attribute type 3 has an invalid length. [ 242.139148][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 242.156371][ T5889] usb 2-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config [ 242.293816][ T5889] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 242.390015][ T5889] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.447345][ T5889] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.505722][ T5889] usb 2-1: config 1 interface 1 has no altsetting 0 [ 242.523819][ T5889] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.536566][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.555818][ T5889] usb 2-1: Product: syz [ 242.564508][ T5889] usb 2-1: Manufacturer: syz [ 242.574778][ T5889] usb 2-1: SerialNumber: syz [ 242.591656][ T30] audit: type=1326 audit(1746987167.448:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.0.569" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd3b38e969 code=0x0 [ 242.952827][ T5889] usb 2-1: USB disconnect, device number 29 [ 243.207586][ T7752] udevd[7752]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.293826][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.436975][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.675708][ T5890] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 244.787839][ T8152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.888317][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 244.896701][ T8152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.911437][ T5890] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 244.936604][ T5890] usb 2-1: config 0 has no interface number 1 [ 245.003906][ T5890] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 245.086401][ T5890] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 245.164975][ T5890] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 245.179391][ T24] vhci_hcd: vhci_device speed not set [ 245.274757][ T5890] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 245.334824][ T5890] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.460336][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 245.545720][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 245.580845][ T30] audit: type=1326 audit(1746987170.478:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.4.574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81c898e969 code=0x0 [ 245.615750][ T5890] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 245.895973][ T5890] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 245.963218][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.981665][ T5890] usb 2-1: Product: syz [ 246.005851][ T5890] usb 2-1: Manufacturer: syz [ 246.010606][ T5890] usb 2-1: SerialNumber: syz [ 246.691272][ T5891] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 246.806694][ T5890] usb 2-1: config 0 descriptor?? [ 246.812567][ T8149] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 246.879436][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.892064][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.971359][ T5890] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 247.000029][ T5891] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 247.019767][ T5891] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 247.056439][ T5891] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.103120][ T5890] usb 2-1: USB disconnect, device number 30 [ 247.121465][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.386745][ T8183] udevd[8183]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.607614][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.666239][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.215016][ T30] audit: type=1326 audit(1746987173.108:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe446f8e969 code=0x7ffc0000 [ 248.292849][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 248.306578][ T8206] team_slave_0: entered promiscuous mode [ 248.312316][ T8206] team_slave_0: entered allmulticast mode [ 248.635685][ T30] audit: type=1326 audit(1746987173.158:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe446f8d2d0 code=0x7ffc0000 [ 248.752943][ T5889] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 248.773996][ T5915] usb 6-1: USB disconnect, device number 3 [ 248.844518][ T30] audit: type=1326 audit(1746987173.158:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe446f8e56b code=0x7ffc0000 [ 248.993159][ T30] audit: type=1326 audit(1746987173.158:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe446f8e56b code=0x7ffc0000 [ 249.015253][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.062930][ T5889] usb 4-1: config 0 has an invalid interface number: 140 but max is 0 [ 249.072745][ T5889] usb 4-1: config 0 has no interface number 0 [ 249.154458][ T5889] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01 [ 249.174464][ T30] audit: type=1326 audit(1746987173.388:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe446f8e56b code=0x7ffc0000 [ 249.196617][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.229150][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.256454][ T5889] usb 4-1: Product: syz [ 249.260715][ T5889] usb 4-1: Manufacturer: syz [ 249.265330][ T5889] usb 4-1: SerialNumber: syz [ 249.306135][ T30] audit: type=1326 audit(1746987173.388:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe446f8e56b code=0x7ffc0000 [ 249.328267][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.372027][ T5889] usb 4-1: config 0 descriptor?? [ 249.476632][ T30] audit: type=1326 audit(1746987173.528:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe446f8e56b code=0x7ffc0000 [ 249.498745][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.605834][ T5891] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 249.670114][ T5889] as10x_usb: device has been detected [ 249.682404][ T30] audit: type=1326 audit(1746987173.588:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe446f8e56b code=0x7ffc0000 [ 249.717843][ T5889] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 249.811833][ T30] audit: type=1326 audit(1746987173.708:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe446f8e56b code=0x7ffc0000 [ 249.843125][ T5889] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 249.866166][ T5891] usb 6-1: config 0 has no interfaces? [ 249.896878][ T5891] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 249.982851][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.021054][ T30] audit: type=1326 audit(1746987173.718:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe446f8e56b code=0x7ffc0000 [ 250.051181][ T5891] usb 6-1: Product: syz [ 250.076517][ T5891] usb 6-1: Manufacturer: syz [ 250.092254][ T5889] as10x_usb: error during firmware upload part1 [ 250.103737][ T5891] usb 6-1: SerialNumber: syz [ 250.117751][ T5889] Registered device Elgato EyeTV DTT Deluxe [ 250.121132][ T5891] usb 6-1: config 0 descriptor?? [ 250.136946][ T5889] usb 4-1: USB disconnect, device number 35 [ 250.286232][ T5889] Unregistered device Elgato EyeTV DTT Deluxe [ 250.297306][ T5889] as10x_usb: device has been disconnected [ 250.668824][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 251.027704][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.055314][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.110238][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.164416][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.964304][ T8263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.594'. [ 252.093183][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.116162][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.130844][ T5891] usb 6-1: USB disconnect, device number 4 [ 253.246473][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 253.246494][ T30] audit: type=1326 audit(1746987178.148:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.4.597" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81c898e969 code=0x0 [ 253.300287][ T8281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.353989][ T8281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.665650][ T30] audit: type=1326 audit(1746987178.558:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.5.598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc22698e969 code=0x0 [ 254.145714][ T5890] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 254.278942][ T8293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.601'. [ 254.346255][ T5890] usb 4-1: device descriptor read/64, error -71 [ 254.554920][ T8296] netlink: 44 bytes leftover after parsing attributes in process `syz.1.602'. [ 254.595687][ T5890] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 254.751000][ T5890] usb 4-1: device descriptor read/64, error -71 [ 254.865995][ T5890] usb usb4-port1: attempt power cycle [ 255.227701][ T5890] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 255.276430][ T5890] usb 4-1: device descriptor read/8, error -71 [ 255.537729][ T5890] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 255.600076][ T5890] usb 4-1: device descriptor read/8, error -71 [ 255.661128][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.668019][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.717933][ T5890] usb usb4-port1: unable to enumerate USB device [ 256.395038][ T30] audit: type=1326 audit(1746987181.288:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.4.613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81c898e969 code=0x0 [ 256.595963][ T838] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 256.779245][ T838] usb 6-1: Using ep0 maxpacket: 8 [ 256.798783][ T838] usb 6-1: unable to get BOS descriptor or descriptor too short [ 256.817712][ T838] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 256.838133][ T838] usb 6-1: config 0 has no interface number 0 [ 256.844301][ T838] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 257.042730][ T838] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 257.137371][ T5889] raw-gadget.2 gadget.2: failed to queue reset event [ 257.177913][ T838] usb 6-1: config 0 interface 88 has no altsetting 0 [ 257.213213][ T838] usb 6-1: string descriptor 0 read error: -22 [ 257.215719][ T5889] raw-gadget.2 gadget.2: failed to queue resume event [ 257.231170][ T838] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 257.348737][ T838] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 257.357023][ T5889] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 257.364836][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 257.427212][ T838] usb 6-1: config 0 descriptor?? [ 257.442552][ T5889] raw-gadget.2 gadget.2: failed to queue reset event [ 257.470334][ T838] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input14 [ 257.578928][ T5889] raw-gadget.2 gadget.2: failed to queue resume event [ 257.676733][ T5890] usb 6-1: USB disconnect, device number 5 [ 257.687226][ T5889] usb 3-1: device descriptor read/64, error -32 [ 257.857872][ T5889] raw-gadget.2 gadget.2: failed to queue suspend event [ 257.861386][ T8180] udevd[8180]: Error opening device "/dev/input/event4": No such file or directory [ 257.902434][ T5889] raw-gadget.2 gadget.2: failed to queue reset event [ 257.980561][ T8180] udevd[8180]: Unable to EVIOCGABS device "/dev/input/event4" [ 258.005733][ T5889] raw-gadget.2 gadget.2: failed to queue resume event [ 258.023867][ T8180] udevd[8180]: Unable to EVIOCGABS device "/dev/input/event4" [ 258.087001][ T5889] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 258.180401][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 258.210949][ T5889] raw-gadget.2 gadget.2: failed to queue reset event [ 258.252712][ T8346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.271076][ T8346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.348807][ T5889] raw-gadget.2 gadget.2: failed to queue resume event [ 258.546229][ T5889] usb 3-1: device descriptor read/64, error -32 [ 258.666110][ T5889] raw-gadget.2 gadget.2: failed to queue suspend event [ 258.676641][ T5889] usb usb3-port1: attempt power cycle [ 258.702567][ T5889] raw-gadget.2 gadget.2: failed to queue disconnect event [ 258.732229][ T5889] raw-gadget.2 gadget.2: failed to queue reset event [ 258.745698][ T838] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 258.807649][ T5889] raw-gadget.2 gadget.2: failed to queue resume event [ 258.835224][ T5889] raw-gadget.2 gadget.2: failed to queue reset event [ 258.955819][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 258.996360][ T838] usb 2-1: Using ep0 maxpacket: 32 [ 259.020720][ T838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 259.049511][ T838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 259.057299][ T5889] raw-gadget.2 gadget.2: failed to queue resume event [ 259.077545][ T838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 259.110494][ T838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 259.123774][ T24] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 259.134424][ T5889] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 259.146946][ T838] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 259.165709][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.166041][ T838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.199757][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 259.207308][ T5889] usb 3-1: device descriptor read/8, error -32 [ 259.207511][ T838] usb 2-1: Product: syz [ 259.226584][ T24] usb 6-1: config 0 descriptor?? [ 259.235187][ T838] usb 2-1: Manufacturer: syz [ 259.251385][ T838] usb 2-1: SerialNumber: syz [ 259.258723][ T24] gspca_main: spca508-2.14.0 probing 8086:0110 [ 259.283312][ T838] usb 2-1: config 0 descriptor?? [ 259.304313][ T838] usb 2-1: no audio or video endpoints found [ 259.315881][ T5889] raw-gadget.2 gadget.2: failed to queue suspend event [ 259.338247][ T5889] raw-gadget.2 gadget.2: failed to queue reset event [ 259.457798][ T24] gspca_spca508: reg_read err -32 [ 259.475864][ T5889] raw-gadget.2 gadget.2: failed to queue resume event [ 259.486524][ T24] gspca_spca508: reg_read err -32 [ 259.494692][ T24] gspca_spca508: reg_read err -32 [ 259.555737][ T5889] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 259.568464][ T838] usb 2-1: USB disconnect, device number 31 [ 259.596215][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 259.603598][ T5889] usb 3-1: device descriptor read/8, error -32 [ 259.725719][ T5889] raw-gadget.2 gadget.2: failed to queue suspend event [ 259.733082][ T5889] usb usb3-port1: unable to enumerate USB device [ 259.829218][ T24] gspca_spca508: reg_read err -71 [ 259.834767][ T24] gspca_spca508: reg write: error -71 [ 259.869291][ T24] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 259.925361][ T24] usb 6-1: USB disconnect, device number 6 [ 260.427347][ T8368] netlink: 1500 bytes leftover after parsing attributes in process `syz.1.624'. [ 260.575496][ T30] audit: type=1326 audit(1746987185.468:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.3.625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe446f8e969 code=0x0 [ 260.757210][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 260.939319][ T24] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.969082][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 260.983522][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 261.005843][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.076799][ T24] usb 2-1: config 0 descriptor?? [ 261.123657][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.146305][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.199285][ T8390] netlink: 60 bytes leftover after parsing attributes in process `syz.4.631'. [ 261.708331][ T24] apple 0003:05AC:027A.0006: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 262.445986][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880483fc000: rx timeout, send abort [ 262.497923][ T24] usb 2-1: USB disconnect, device number 32 [ 262.683894][ T8410] fido_id[8410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 262.735745][ T5889] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 262.955139][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880483fc000: abort rx timeout. Force session deactivation [ 263.036590][ T5889] usb 6-1: config index 0 descriptor too short (expected 8192, got 77) [ 263.047859][ T5889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.082553][ T5889] usb 6-1: config 0 has no interfaces? [ 263.180386][ T5889] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 263.246402][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.286324][ T5889] usb 6-1: Product: syz [ 263.290539][ T5889] usb 6-1: Manufacturer: syz [ 263.316062][ T5889] usb 6-1: SerialNumber: syz [ 263.394755][ T5889] usb 6-1: config 0 descriptor?? [ 263.796000][ T8419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.639'. [ 263.806798][ T8421] loop2: detected capacity change from 0 to 7 [ 263.854415][ T8421] Dev loop2: unable to read RDB block 7 [ 263.880247][ T8421] loop2: unable to read partition table [ 263.907300][ T8421] loop2: partition table beyond EOD, truncated [ 263.933528][ T8421] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 264.271036][ T8424] validate_nla: 45 callbacks suppressed [ 264.271052][ T8424] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 264.336640][ T8427] netlink: 88 bytes leftover after parsing attributes in process `syz.4.642'. [ 264.624852][ T838] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 264.857742][ T838] usb 2-1: Using ep0 maxpacket: 32 [ 264.879348][ T838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 265.007550][ T838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 265.065710][ T838] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 265.112109][ T838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 265.182367][ T838] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 265.215740][ T838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.275096][ T838] usb 2-1: Product: syz [ 265.294964][ T30] audit: type=1326 audit(1746987190.178:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.0.645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd3b38e969 code=0x0 [ 265.316820][ T838] usb 2-1: Manufacturer: syz [ 265.321451][ T838] usb 2-1: SerialNumber: syz [ 265.407901][ T8439] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.644' sets config #0 [ 265.417909][ T8439] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.644' sets config #1 [ 265.489771][ T838] usb 2-1: config 0 descriptor?? [ 265.849035][ T5889] usb 6-1: USB disconnect, device number 7 [ 266.532216][ T8458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.651'. [ 267.286499][ T838] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 267.364526][ T5915] usb 2-1: USB disconnect, device number 33 [ 267.520910][ T838] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.545324][ T838] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.586896][ T838] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 267.607939][ T838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 267.641760][ T838] usb 6-1: SerialNumber: syz [ 267.790579][ T8475] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 267.888223][ T8467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.920199][ T8467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.961462][ T838] usb 6-1: 0:2 : does not exist [ 267.974368][ T838] usb 6-1: unit 5 not found! [ 268.017301][ T838] usb 6-1: USB disconnect, device number 8 [ 268.093355][ T8183] udevd[8183]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.566943][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.625970][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.645745][ T30] audit: type=1326 audit(1746987193.528:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.5.660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc22698e969 code=0x0 [ 268.702701][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.721520][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.789415][ T8488] FAULT_INJECTION: forcing a failure. [ 268.789415][ T8488] name failslab, interval 1, probability 0, space 0, times 0 [ 268.806063][ T8493] loop2: detected capacity change from 0 to 7 [ 268.822191][ T8488] CPU: 0 UID: 0 PID: 8488 Comm: syz.5.660 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 268.822220][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.822244][ T8488] Call Trace: [ 268.822252][ T8488] [ 268.822261][ T8488] dump_stack_lvl+0x189/0x250 [ 268.822300][ T8488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.822330][ T8488] ? __pfx__printk+0x10/0x10 [ 268.822356][ T8488] ? __pfx___might_resched+0x10/0x10 [ 268.822375][ T8488] ? fs_reclaim_acquire+0x7d/0x100 [ 268.822409][ T8488] should_fail_ex+0x414/0x560 [ 268.822444][ T8488] should_failslab+0xa8/0x100 [ 268.822472][ T8488] __kmalloc_noprof+0xcb/0x4f0 [ 268.822496][ T8488] ? kfree+0x4d/0x440 [ 268.822515][ T8488] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 268.822546][ T8488] tomoyo_realpath_from_path+0xe3/0x5d0 [ 268.822574][ T8488] ? tomoyo_domain+0xda/0x130 [ 268.822605][ T8488] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 268.822637][ T8488] tomoyo_path_number_perm+0x1e8/0x5a0 [ 268.822673][ T8488] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 268.822724][ T8488] ? __lock_acquire+0xaac/0xd20 [ 268.822772][ T8488] ? __fget_files+0x2a/0x420 [ 268.822802][ T8488] ? __fget_files+0x3a0/0x420 [ 268.822826][ T8488] ? __fget_files+0x2a/0x420 [ 268.822857][ T8488] security_file_ioctl+0xcb/0x2d0 [ 268.822889][ T8488] __se_sys_ioctl+0x47/0x170 [ 268.822913][ T8488] do_syscall_64+0xf6/0x210 [ 268.822940][ T8488] ? clear_bhb_loop+0x45/0xa0 [ 268.822965][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.822985][ T8488] RIP: 0033:0x7fc22698e969 [ 268.823003][ T8488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.823021][ T8488] RSP: 002b:00007fc227743038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.823042][ T8488] RAX: ffffffffffffffda RBX: 00007fc226bb6080 RCX: 00007fc22698e969 [ 268.823057][ T8488] RDX: 0000200000000080 RSI: 0000000040182103 RDI: 0000000000000003 [ 268.823070][ T8488] RBP: 00007fc227743090 R08: 0000000000000000 R09: 0000000000000000 [ 268.823083][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.823095][ T8488] R13: 0000000000000000 R14: 00007fc226bb6080 R15: 00007fc226cdfa28 [ 268.823127][ T8488] [ 268.823134][ T8488] ERROR: Out of memory at tomoyo_realpath_from_path. [ 268.885861][ T8493] Dev loop2: unable to read RDB block 7 [ 269.075406][ T8493] loop2: unable to read partition table [ 269.081349][ T8493] loop2: partition table beyond EOD, truncated [ 269.096168][ T8493] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 269.195926][ T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 269.339506][ T8497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.664'. [ 269.383725][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 269.397272][ T24] usb 2-1: config 9 has an invalid interface number: 29 but max is 2 [ 269.420991][ T24] usb 2-1: config 9 has an invalid interface number: 4 but max is 2 [ 269.440768][ T24] usb 2-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 269.467788][ T8499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.487869][ T24] usb 2-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 269.505398][ T8499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.528204][ T24] usb 2-1: config 9 has no interface number 0 [ 269.559734][ T24] usb 2-1: config 9 has no interface number 1 [ 269.577271][ T24] usb 2-1: config 9 interface 29 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 269.597551][ T8499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.618454][ T24] usb 2-1: too many endpoints for config 9 interface 4 altsetting 3: 85, using maximum allowed: 30 [ 269.630166][ T8499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.649776][ T24] usb 2-1: config 9 interface 4 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 85 [ 269.680286][ T8499] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 269.695542][ T8499] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 269.719368][ T24] usb 2-1: config 9 interface 29 has no altsetting 0 [ 269.755927][ T24] usb 2-1: config 9 interface 4 has no altsetting 0 [ 269.773434][ T24] usb 2-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=ba.02 [ 269.783756][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.792204][ T24] usb 2-1: Product: à  [ 269.803181][ T24] usb 2-1: Manufacturer: 朲웱빴é™ã¡è°ŒÚ½å­â¡¢éº·ï±¨ã‹—êˆãŸ”å¶ê–‡î©Žç¯‚鎧֯➱㬰劈ä¨åµ Þ–瘓饊跬㮴閵陛䎩ç«ç»‹â¼¿à²˜æ‹éŸ•í¸äŒ‘鷤䱮̖௶⯄閎è¼æ«›Ï†ê¤”䕑肗蓀Ⱨ븢뺅ᔣ꓂Վ⊲抅桑鶂ᶀ쀿éŠê¬‚媘暓⧳瘈ቜ둷棃 [ 269.846498][ T24] usb 2-1: SerialNumber: ã  [ 269.975866][ T5889] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 270.126163][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 270.135946][ T24] usb 2-1: USB disconnect, device number 34 [ 270.147346][ T5889] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 270.178252][ T5889] usb 6-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 270.207565][ T5889] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 270.234317][ T5889] usb 6-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 270.258106][ T5889] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 270.270430][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.297587][ T5889] usb 6-1: Product: syz [ 270.331677][ T5889] usb 6-1: Manufacturer: syz [ 270.342398][ T5889] usb 6-1: SerialNumber: syz [ 270.380184][ T5889] hso 6-1:6.0: Can't find BULK OUT endpoint [ 270.575484][ T8503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.603748][ T5889] usb 6-1: USB disconnect, device number 9 [ 270.807899][ T8513] usb usb8: usbfs: process 8513 (syz.0.670) did not claim interface 0 before use [ 270.970632][ T8519] loop2: detected capacity change from 0 to 7 [ 270.986903][ T8519] Dev loop2: unable to read RDB block 7 [ 270.999698][ T8519] loop2: unable to read partition table [ 271.012969][ T8519] loop2: partition table beyond EOD, truncated [ 271.050525][ T8519] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 271.086171][ T8520] No buffer was provided with the request [ 271.452664][ T30] audit: type=1326 audit(1746987196.338:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.5.677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc22698e969 code=0x0 [ 271.645764][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.676'. [ 271.655475][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.710617][ T8533] FAULT_INJECTION: forcing a failure. [ 271.710617][ T8533] name failslab, interval 1, probability 0, space 0, times 0 [ 271.724397][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.776914][ T8533] CPU: 0 UID: 0 PID: 8533 Comm: syz.5.677 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 271.776945][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.776957][ T8533] Call Trace: [ 271.776965][ T8533] [ 271.776973][ T8533] dump_stack_lvl+0x189/0x250 [ 271.777010][ T8533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.777040][ T8533] ? __pfx__printk+0x10/0x10 [ 271.777063][ T8533] ? __pfx___might_resched+0x10/0x10 [ 271.777082][ T8533] ? fs_reclaim_acquire+0x7d/0x100 [ 271.777115][ T8533] should_fail_ex+0x414/0x560 [ 271.777141][ T8533] should_failslab+0xa8/0x100 [ 271.777169][ T8533] __kmalloc_noprof+0xcb/0x4f0 [ 271.777194][ T8533] ? tomoyo_encode+0x28b/0x550 [ 271.777222][ T8533] tomoyo_encode+0x28b/0x550 [ 271.777253][ T8533] tomoyo_realpath_from_path+0x58d/0x5d0 [ 271.777280][ T8533] ? tomoyo_domain+0xda/0x130 [ 271.777311][ T8533] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 271.777342][ T8533] tomoyo_path_number_perm+0x1e8/0x5a0 [ 271.777440][ T8533] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 271.777491][ T8533] ? __lock_acquire+0xaac/0xd20 [ 271.777541][ T8533] ? __fget_files+0x2a/0x420 [ 271.777574][ T8533] ? __fget_files+0x3a0/0x420 [ 271.777600][ T8533] ? __fget_files+0x2a/0x420 [ 271.777631][ T8533] security_file_ioctl+0xcb/0x2d0 [ 271.777666][ T8533] __se_sys_ioctl+0x47/0x170 [ 271.777691][ T8533] do_syscall_64+0xf6/0x210 [ 271.777719][ T8533] ? clear_bhb_loop+0x45/0xa0 [ 271.777745][ T8533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.777765][ T8533] RIP: 0033:0x7fc22698e969 [ 271.777784][ T8533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.777802][ T8533] RSP: 002b:00007fc227722038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.777824][ T8533] RAX: ffffffffffffffda RBX: 00007fc226bb6160 RCX: 00007fc22698e969 [ 271.777840][ T8533] RDX: 0000200000000080 RSI: 0000000040182103 RDI: 0000000000000003 [ 271.777854][ T8533] RBP: 00007fc227722090 R08: 0000000000000000 R09: 0000000000000000 [ 271.777867][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.777880][ T8533] R13: 0000000000000000 R14: 00007fc226bb6160 R15: 00007fc226cdfa28 [ 271.777912][ T8533] [ 271.777937][ T8533] ERROR: Out of memory at tomoyo_realpath_from_path. [ 271.871189][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.176828][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.295710][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 273.467416][ T10] usb 2-1: config 0 has no interfaces? [ 273.479367][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 273.509042][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.540035][ T10] usb 2-1: Product: syz [ 273.563005][ T10] usb 2-1: Manufacturer: syz [ 273.580839][ T10] usb 2-1: SerialNumber: syz [ 273.608207][ T10] usb 2-1: config 0 descriptor?? [ 273.755685][ T838] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 273.835069][ T8546] fuse: Unknown parameter '184467440737095516150x00000000000000070177777777777777777777700000000000000000000000' [ 273.893884][ T10] usb 2-1: USB disconnect, device number 35 [ 273.926059][ T838] usb 6-1: Using ep0 maxpacket: 32 [ 273.939580][ T838] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 273.962351][ T838] usb 6-1: config 0 has no interface number 0 [ 273.982782][ T838] usb 6-1: config 0 interface 184 has no altsetting 0 [ 274.006948][ T838] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 274.018827][ T838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.028477][ T838] usb 6-1: Product: syz [ 274.032675][ T838] usb 6-1: Manufacturer: syz [ 274.038016][ T838] usb 6-1: SerialNumber: syz [ 274.053068][ T838] usb 6-1: config 0 descriptor?? [ 274.065130][ T838] smsc75xx v1.0.0 [ 274.696217][ T838] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 274.708227][ T838] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 274.795025][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.691'. [ 274.875909][ T24] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 275.098665][ T24] usb 2-1: config 1 has an invalid interface number: 225 but max is 0 [ 275.115979][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 275.125997][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 275.134730][ T24] usb 2-1: config 1 has no interface number 0 [ 275.141395][ T24] usb 2-1: config 1 interface 225 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 275.167896][ T24] usb 2-1: config 1 interface 225 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 275.200928][ T24] usb 2-1: config 1 interface 225 altsetting 4 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 275.221420][ T24] usb 2-1: config 1 interface 225 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 275.243610][ T24] usb 2-1: config 1 interface 225 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 275.255222][ T24] usb 2-1: config 1 interface 225 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 275.272324][ T24] usb 2-1: config 1 interface 225 has no altsetting 0 [ 275.281999][ T24] usb 2-1: New USB device found, idVendor=0b3b, idProduct=1630, bcdDevice=92.b1 [ 275.303562][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.335917][ T24] usb 2-1: Product: syz [ 275.340136][ T24] usb 2-1: Manufacturer: syz [ 275.365464][ T24] usb 2-1: SerialNumber: syz [ 275.413451][ T8568] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 275.517444][ T8581] loop2: detected capacity change from 0 to 7 [ 275.529292][ T8184] Dev loop2: unable to read RDB block 7 [ 275.545330][ T8184] loop2: unable to read partition table [ 275.553929][ T8184] loop2: partition table beyond EOD, truncated [ 275.569712][ T8581] Dev loop2: unable to read RDB block 7 [ 275.578591][ T8581] loop2: unable to read partition table [ 275.584613][ T8581] loop2: partition table beyond EOD, truncated [ 275.592719][ T8581] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 275.729372][ T24] usb 2-1: USB disconnect, device number 36 [ 275.944668][ T30] audit: type=1326 audit(1746987200.838:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe446f8e969 code=0x7ffc0000 [ 275.949016][ T8585] FAULT_INJECTION: forcing a failure. [ 275.949016][ T8585] name failslab, interval 1, probability 0, space 0, times 0 [ 275.991465][ T8585] CPU: 1 UID: 0 PID: 8585 Comm: syz.3.697 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 275.991494][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.991507][ T8585] Call Trace: [ 275.991515][ T8585] [ 275.991524][ T8585] dump_stack_lvl+0x189/0x250 [ 275.991562][ T8585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.991593][ T8585] ? __pfx__printk+0x10/0x10 [ 275.991620][ T8585] ? __pfx___might_resched+0x10/0x10 [ 275.991643][ T8585] should_fail_ex+0x414/0x560 [ 275.991669][ T8585] should_failslab+0xa8/0x100 [ 275.991698][ T8585] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 275.991726][ T8585] ? __alloc_skb+0x112/0x2d0 [ 275.991756][ T8585] __alloc_skb+0x112/0x2d0 [ 275.991784][ T8585] audit_log_start+0x152/0x870 [ 275.991811][ T8585] ? __pfx_audit_log_start+0x10/0x10 [ 275.991835][ T8585] ? migrate_enable+0x29c/0x3c0 [ 275.991861][ T8585] ? __pfx_migrate_enable+0x10/0x10 [ 275.991889][ T8585] audit_seccomp+0x64/0x190 [ 275.991924][ T8585] __seccomp_filter+0x9aa/0x1a40 [ 275.991964][ T8585] ? ksys_write+0x1cb/0x250 [ 275.991987][ T8585] ? __pfx___seccomp_filter+0x10/0x10 [ 275.992018][ T8585] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 275.992045][ T8585] ? __pfx_vfs_write+0x10/0x10 [ 275.992070][ T8585] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.992107][ T8585] ? __fget_files+0x3a0/0x420 [ 275.992144][ T8585] ? ksys_write+0x1f0/0x250 [ 275.992166][ T8585] ? rcu_is_watching+0x15/0xb0 [ 275.992200][ T8585] ? __secure_computing+0xe2/0x2a0 [ 275.992233][ T8585] syscall_trace_enter+0xaa/0x160 [ 275.992263][ T8585] do_syscall_64+0xcf/0x210 [ 275.992290][ T8585] ? clear_bhb_loop+0x45/0xa0 [ 275.992316][ T8585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.992335][ T8585] RIP: 0033:0x7fe446f8e969 [ 275.992355][ T8585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.992373][ T8585] RSP: 002b:00007fe447e2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 275.992395][ T8585] RAX: ffffffffffffffda RBX: 00007fe4471b5fa0 RCX: 00007fe446f8e969 [ 275.992410][ T8585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 275.992421][ T8585] RBP: 00007fe447e2d090 R08: 000000000000d4bd R09: 0000000000000000 [ 275.992434][ T8585] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 275.992447][ T8585] R13: 0000000000000000 R14: 00007fe4471b5fa0 R15: 00007fe4472dfa28 [ 275.992477][ T8585] [ 275.992502][ T8585] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 276.016769][ T30] audit: type=1326 audit(1746987200.838:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe446f8d2d0 code=0x7ffc0000 [ 276.032314][ T8585] audit: out of memory in audit_log_start [ 276.075794][ T30] audit: type=1326 audit(1746987200.838:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe446f8d41f code=0x7ffc0000 [ 276.514278][ T30] audit: type=1326 audit(1746987201.008:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe446f8d37c code=0x7ffc0000 [ 276.514335][ T30] audit: type=1326 audit(1746987201.008:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe446f8d41f code=0x7ffc0000 [ 276.514406][ T30] audit: type=1326 audit(1746987201.008:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe446f8d5ca code=0x7ffc0000 [ 276.514454][ T30] audit: type=1326 audit(1746987201.008:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe446f8e969 code=0x7ffc0000 [ 276.514500][ T30] audit: type=1326 audit(1746987201.008:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe446f8e969 code=0x7ffc0000 [ 276.687664][ T54] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 276.827969][ T838] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 276.843615][ T54] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 276.851061][ T838] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 276.862642][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.869685][ T54] usb 4-1: config 0 descriptor?? [ 276.890423][ T54] cp210x 4-1:0.0: cp210x converter detected [ 276.907067][ T838] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 276.965875][ T838] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 277.008481][ T838] usb 6-1: USB disconnect, device number 10 [ 277.150503][ T8599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.159337][ T8599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.179320][ T5836] Bluetooth: hci4: Malformed Event: 0x13 [ 277.576298][ T838] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 277.750327][ T838] usb 2-1: Invalid ep0 maxpacket: 16 [ 277.905688][ T838] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 278.076132][ T838] usb 2-1: Invalid ep0 maxpacket: 16 [ 278.089335][ T838] usb usb2-port1: attempt power cycle [ 278.455828][ T838] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 278.497574][ T838] usb 2-1: Invalid ep0 maxpacket: 16 [ 278.645696][ T838] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 278.687138][ T838] usb 2-1: Invalid ep0 maxpacket: 16 [ 278.699456][ T838] usb usb2-port1: unable to enumerate USB device [ 279.488972][ T54] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 279.525907][ T54] cp210x 4-1:0.0: querying part number failed [ 279.546862][ T54] usb 4-1: cp210x converter now attached to ttyUSB1 [ 279.564328][ T54] usb 4-1: USB disconnect, device number 40 [ 279.581186][ T54] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 279.611805][ T54] cp210x 4-1:0.0: device disconnected [ 279.707949][ T8609] loop2: detected capacity change from 0 to 7 [ 279.721144][ T8183] Dev loop2: unable to read RDB block 7 [ 279.728370][ T8183] loop2: unable to read partition table [ 279.734341][ T8183] loop2: partition table beyond EOD, truncated [ 279.748582][ T8609] Dev loop2: unable to read RDB block 7 [ 279.754190][ T8609] loop2: unable to read partition table [ 279.764987][ T8609] loop2: partition table beyond EOD, truncated [ 279.772999][ T8609] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 280.202623][ T5845] usb 5-1: USB disconnect, device number 24 [ 280.654801][ T56] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.663749][ T56] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.672825][ T56] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.688390][ T56] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.695835][ T54] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 280.705023][ T56] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.856765][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 280.886168][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 280.907074][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 280.924478][ T54] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 280.955618][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 280.995611][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 281.056198][ T54] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 281.065292][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.103131][ T54] usb 4-1: Product: syz [ 281.116655][ T54] usb 4-1: Manufacturer: syz [ 281.121303][ T54] usb 4-1: SerialNumber: syz [ 281.154650][ T54] usb 4-1: config 0 descriptor?? [ 281.165291][ T8628] chnl_net:caif_netlink_parms(): no params data found [ 281.179481][ T8621] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 281.264318][ T54] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 281.296126][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 281.327620][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 281.380256][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 281.406238][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 281.519511][ T8184] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 281.549593][ T8628] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.561516][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 281.582369][ T8628] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.601308][ T8628] bridge_slave_0: entered allmulticast mode [ 281.608905][ T8621] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 281.621758][ T8628] bridge_slave_0: entered promiscuous mode [ 281.637763][ T8628] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.645140][ T8628] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.653772][ C1] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 281.657226][ T8628] bridge_slave_1: entered allmulticast mode [ 281.670195][ T8628] bridge_slave_1: entered promiscuous mode [ 281.677417][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 281.694944][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 281.771900][ T8628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.786870][ T8628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.849891][ T8628] team0: Port device team_slave_0 added [ 281.866577][ T8628] team0: Port device team_slave_1 added [ 281.927314][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.941415][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.972969][ T8628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.994653][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.002292][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.032526][ T8628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.131465][ T8628] hsr_slave_0: entered promiscuous mode [ 282.143739][ T8628] hsr_slave_1: entered promiscuous mode [ 282.157111][ T8628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.167740][ T8628] Cannot create hsr debugfs directory [ 282.507238][ T8628] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.531562][ T8628] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.554584][ T8628] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 282.582470][ T8628] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 282.734448][ T8628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.776136][ T5836] Bluetooth: hci6: command tx timeout [ 282.792006][ T8628] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.814891][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.822131][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.852241][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.859467][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.992947][ T8628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.095999][ T8628] veth0_vlan: entered promiscuous mode [ 283.120664][ T8628] veth1_vlan: entered promiscuous mode [ 283.174097][ T8628] veth0_macvtap: entered promiscuous mode [ 283.194070][ T8628] veth1_macvtap: entered promiscuous mode [ 283.222437][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.234879][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.246297][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.257869][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.289525][ T54] usb 4-1: USB disconnect, device number 41 [ 283.321288][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.346613][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.365987][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.384105][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.413437][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.429812][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.440262][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.452202][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.486913][ T8628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.519274][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.555827][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.581986][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.604610][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.627941][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.661492][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.686172][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.711033][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.729236][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.765135][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.778845][ T8628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.790690][ T8628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.851509][ T8628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.937345][ T8628] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.948245][ T8628] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.957289][ T8628] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.967871][ T8628] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.039283][ T8647] netlink: 'syz.3.717': attribute type 1 has an invalid length. [ 284.172983][ T8649] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 284.182799][ T8649] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 284.478664][ T7195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.488956][ T7195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.622870][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.640897][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.865884][ T5836] Bluetooth: hci6: command tx timeout [ 285.140255][ T5200] Dev loop6: unable to read RDB block 7 [ 285.146124][ T5200] loop6: unable to read partition table [ 285.186269][ T5200] loop6: partition table beyond EOD, truncated [ 285.443021][ T8654] loop2: detected capacity change from 0 to 7 [ 285.475212][ T8183] Dev loop2: unable to read RDB block 7 [ 285.485636][ T8183] loop2: unable to read partition table [ 285.491498][ T8183] loop2: partition table beyond EOD, truncated [ 285.525435][ T8654] Dev loop2: unable to read RDB block 7 [ 285.546249][ T8654] loop2: unable to read partition table [ 285.553368][ T8654] loop2: partition table beyond EOD, truncated [ 285.581654][ T8654] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 285.715722][ T838] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 285.875818][ T838] usb 7-1: Using ep0 maxpacket: 32 [ 285.892503][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 285.933577][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 285.963746][ T838] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 285.988176][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 285.999951][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 286.018563][ T838] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 286.028242][ T8661] loop2: detected capacity change from 0 to 7 [ 286.035343][ T838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.043441][ T838] usb 7-1: Product: syz [ 286.045124][ T8183] Dev loop2: unable to read RDB block 7 [ 286.047759][ T838] usb 7-1: Manufacturer: syz [ 286.047779][ T838] usb 7-1: SerialNumber: syz [ 286.066872][ T838] usb 7-1: config 0 descriptor?? [ 286.082429][ T8655] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 286.101200][ T8183] loop2: unable to read partition table [ 286.103601][ T838] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input18 [ 286.120493][ T8183] loop2: partition table beyond EOD, truncated [ 286.135231][ T5185] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 286.167640][ T8661] Dev loop2: unable to read RDB block 7 [ 286.176278][ T8661] loop2: unable to read partition table [ 286.185056][ T5185] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 286.202569][ T8661] loop2: partition table beyond EOD, truncated [ 286.225738][ T8661] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 286.253624][ T8180] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 286.321379][ T5185] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 286.349305][ T5185] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 286.401089][ T5185] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 286.432953][ T8655] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 286.475296][ T5185] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 286.547585][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 286.662018][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.723'. [ 286.937627][ T5836] Bluetooth: hci6: command tx timeout [ 288.473891][ T10] usb 7-1: USB disconnect, device number 2 [ 288.487250][ T5200] Dev loop6: unable to read RDB block 7 [ 288.502235][ T5200] loop6: unable to read partition table [ 288.519200][ T5200] loop6: partition table beyond EOD, truncated [ 288.586226][ T8675] netlink: 'syz.6.727': attribute type 4 has an invalid length. [ 288.614073][ T8675] netlink: 152 bytes leftover after parsing attributes in process `syz.6.727'. [ 288.666957][ T8675] : renamed from bond0 (while UP) [ 288.816654][ T5200] Dev loop6: unable to read RDB block 7 [ 288.825176][ T5200] loop6: unable to read partition table [ 288.847239][ T5200] loop6: partition table beyond EOD, truncated [ 289.016201][ T5836] Bluetooth: hci6: command tx timeout [ 289.030377][ T5200] Dev loop6: unable to read RDB block 7 [ 289.036170][ T5200] loop6: unable to read partition table [ 289.042037][ T5200] loop6: partition table beyond EOD, truncated [ 289.107404][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 289.107423][ T30] audit: type=1326 audit(1746987214.008:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.6.729" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1086f8e969 code=0x0 [ 289.344999][ T8683] random: crng reseeded on system resumption [ 290.452585][ T5889] usb 1-1: USB disconnect, device number 2 [ 290.497083][ T5889] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 290.512800][ T5889] cypress_m8 1-1:0.35: device disconnected [ 290.912499][ T56] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 290.929072][ T56] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 290.937157][ T56] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 290.945188][ T56] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 290.955648][ T56] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 291.254684][ T8691] chnl_net:caif_netlink_parms(): no params data found [ 291.462315][ T8691] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.481682][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.489830][ T8691] bridge_slave_0: entered allmulticast mode [ 291.514624][ T8691] bridge_slave_0: entered promiscuous mode [ 291.532323][ T8691] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.551623][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.564780][ T8691] bridge_slave_1: entered allmulticast mode [ 291.586265][ T8691] bridge_slave_1: entered promiscuous mode [ 291.651125][ T8691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.689022][ T8691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.764267][ T8691] team0: Port device team_slave_0 added [ 291.797176][ T8691] team0: Port device team_slave_1 added [ 291.874800][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.882664][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.923319][ T8691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.938554][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.953729][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.992842][ T8691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.078728][ T8691] hsr_slave_0: entered promiscuous mode [ 292.119695][ T8691] hsr_slave_1: entered promiscuous mode [ 292.137812][ T8691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.145626][ T8691] Cannot create hsr debugfs directory [ 292.565703][ T54] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 292.663969][ T8691] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 292.681646][ T8691] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 292.715891][ T8691] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 292.720878][ T54] usb 7-1: Using ep0 maxpacket: 16 [ 292.739769][ T8691] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 292.758267][ T54] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.797350][ T54] usb 7-1: config 0 has no interfaces? [ 292.813770][ T54] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.850582][ T54] usb 7-1: config 0 has no interfaces? [ 292.873340][ T54] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.903345][ T54] usb 7-1: config 0 has no interfaces? [ 292.928089][ T54] usb 7-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 292.945636][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 292.953672][ T54] usb 7-1: Product: syz [ 292.975932][ T54] usb 7-1: Manufacturer: syz [ 292.993321][ T54] usb 7-1: config 0 descriptor?? [ 293.016810][ T5836] Bluetooth: hci7: command tx timeout [ 293.035301][ T8691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.060057][ T8691] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.072927][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.080132][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.123511][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.130710][ T7195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.273591][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.274329][ T8691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.298485][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.390527][ T8691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.511978][ T8691] veth0_vlan: entered promiscuous mode [ 293.530501][ T5915] usb 7-1: USB disconnect, device number 3 [ 293.563609][ T56] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 293.564744][ T8691] veth1_vlan: entered promiscuous mode [ 293.578451][ T56] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 293.588023][ T56] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 293.608427][ T56] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 293.617469][ T56] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 293.678468][ T8691] veth0_macvtap: entered promiscuous mode [ 293.698813][ T8691] veth1_macvtap: entered promiscuous mode [ 293.780356][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.791026][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.803037][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.813883][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.824342][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.838832][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.849075][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.859939][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.871065][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.890093][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.901264][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.912332][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.922775][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.933597][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.949977][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.978262][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.997974][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.014242][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.033206][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.065732][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.082446][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.102408][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.113771][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.124081][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.134905][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.149181][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.159932][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.170331][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.181601][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.194736][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.272656][ T8691] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.304569][ T8691] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.339014][ T8691] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.360847][ T8691] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.783813][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.818641][ T7194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.833911][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.862899][ T7194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.902813][ T8703] chnl_net:caif_netlink_parms(): no params data found [ 295.095729][ T5836] Bluetooth: hci7: command tx timeout [ 295.126268][ T54] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 295.191696][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.218094][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.240141][ T8703] bridge_slave_0: entered allmulticast mode [ 295.271381][ T8703] bridge_slave_0: entered promiscuous mode [ 295.284198][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.295811][ T54] usb 7-1: Using ep0 maxpacket: 32 [ 295.301266][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.317178][ T8703] bridge_slave_1: entered allmulticast mode [ 295.325458][ T8703] bridge_slave_1: entered promiscuous mode [ 295.332309][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 295.385727][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 295.395454][ T54] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 295.418409][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 295.429853][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 295.491686][ T54] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 295.520654][ T8703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.536243][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.544290][ T54] usb 7-1: Product: syz [ 295.561497][ T54] usb 7-1: Manufacturer: syz [ 295.567771][ T8703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.588434][ T54] usb 7-1: SerialNumber: syz [ 295.596937][ T54] usb 7-1: config 0 descriptor?? [ 295.608926][ T8714] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 295.630222][ T54] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input19 [ 295.656060][ T5836] Bluetooth: hci8: command tx timeout [ 295.703205][ T5185] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 295.878439][ T5185] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 295.966933][ T8714] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 296.022267][ T8703] team0: Port device team_slave_0 added [ 296.070116][ T8184] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 296.107808][ T8703] team0: Port device team_slave_1 added [ 296.113777][ C0] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 296.137741][ T5185] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 296.179717][ T5185] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 296.228944][ T5185] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 296.281336][ T5185] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 296.396941][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.404132][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.475779][ T8703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.512312][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.537868][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.585771][ T54] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 296.633533][ T8703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.658307][ T56] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 296.672612][ T56] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 296.683403][ T56] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 296.695408][ T56] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 296.722968][ T56] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 296.764332][ T54] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.795718][ T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.824994][ T54] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.838416][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.854773][ T54] usb 8-1: Product: syz [ 296.859567][ T54] usb 8-1: Manufacturer: syz [ 296.864268][ T54] usb 8-1: SerialNumber: syz [ 296.893294][ T54] usb 8-1: selecting invalid altsetting 1 [ 296.932162][ T8703] hsr_slave_0: entered promiscuous mode [ 296.947711][ T8703] hsr_slave_1: entered promiscuous mode [ 296.961345][ T8703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.973618][ T8703] Cannot create hsr debugfs directory [ 297.186087][ T5836] Bluetooth: hci7: command tx timeout [ 297.474413][ T54] cdc_ncm 8-1:1.0: SET_CRC_MODE failed [ 297.525942][ T54] usb 8-1: selecting invalid altsetting 1 [ 297.569252][ T54] cdc_ncm 8-1:1.0: bind() failure [ 297.636890][ T54] usb 8-1: USB disconnect, device number 2 [ 297.736330][ T5836] Bluetooth: hci8: command tx timeout [ 297.804665][ T24] usb 7-1: USB disconnect, device number 4 [ 297.986214][ T54] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 298.148611][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.153878][ T8736] chnl_net:caif_netlink_parms(): no params data found [ 298.177345][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.197810][ T54] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 298.225679][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.257250][ T54] usb 8-1: config 0 descriptor?? [ 298.306404][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 298.319679][ T8703] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 298.402341][ T8703] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 298.422142][ T8703] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 298.471265][ T24] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 298.491332][ T8703] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 298.495616][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.525994][ T24] usb 7-1: Product: syz [ 298.531760][ T24] usb 7-1: Manufacturer: syz [ 298.559254][ T24] usb 7-1: SerialNumber: syz [ 298.583592][ T24] usb 7-1: config 0 descriptor?? [ 298.595111][ T24] ch341 7-1:0.0: ch341-uart converter detected [ 298.661186][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.677248][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.687787][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.699733][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.708492][ T8736] bridge_slave_0: entered allmulticast mode [ 298.720736][ T8736] bridge_slave_0: entered promiscuous mode [ 298.743108][ T54] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.7-1/input0 [ 298.762368][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.769706][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.779856][ T5836] Bluetooth: hci9: command tx timeout [ 298.781176][ T8736] bridge_slave_1: entered allmulticast mode [ 298.819882][ T8736] bridge_slave_1: entered promiscuous mode [ 299.025826][ T24] usb 7-1: failed to send control message: -71 [ 299.032131][ T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 299.085984][ T24] usb 7-1: USB disconnect, device number 5 [ 299.093705][ T24] ch341 7-1:0.0: device disconnected [ 299.131274][ T8736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.172480][ T8736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.258151][ T5836] Bluetooth: hci7: command tx timeout [ 299.440004][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.746'. [ 299.446097][ T8736] team0: Port device team_slave_0 added [ 299.501376][ T8736] team0: Port device team_slave_1 added [ 299.659181][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.683161][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.775861][ T8736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.808385][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.815382][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.821189][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.6.748'. [ 299.867450][ T5836] Bluetooth: hci8: command tx timeout [ 299.873015][ T8736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.109673][ T8736] hsr_slave_0: entered promiscuous mode [ 300.121870][ T8736] hsr_slave_1: entered promiscuous mode [ 300.136849][ T8736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.156452][ T8736] Cannot create hsr debugfs directory [ 300.219125][ T8768] netlink: 'syz.6.750': attribute type 1 has an invalid length. [ 300.304339][ T8703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.654991][ T54] isku 0003:1E7D:319C.0007: couldn't init struct isku_device [ 300.681084][ T54] isku 0003:1E7D:319C.0007: couldn't install keyboard [ 300.690377][ T8703] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.714640][ T54] isku 0003:1E7D:319C.0007: probe with driver isku failed with error -71 [ 300.747582][ T54] usb 8-1: USB disconnect, device number 3 [ 300.800122][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.807338][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.853500][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.860715][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.873815][ T5836] Bluetooth: hci9: command tx timeout [ 301.204079][ T8703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.226175][ T8703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.302279][ T8736] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 301.346994][ T8736] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 301.389445][ T54] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 301.409936][ T8736] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 301.450468][ T8736] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 301.505486][ T8703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.566070][ T54] usb 8-1: Using ep0 maxpacket: 32 [ 301.597638][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 301.639694][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 301.672418][ T54] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 301.703726][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 301.734501][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 301.783318][ T8703] veth0_vlan: entered promiscuous mode [ 301.841260][ T54] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 301.866597][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.874639][ T54] usb 8-1: Product: syz [ 301.884790][ T8703] veth1_vlan: entered promiscuous mode [ 301.915026][ T54] usb 8-1: Manufacturer: syz [ 301.915768][ T5836] Bluetooth: hci8: command tx timeout [ 301.958758][ T8736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.983988][ T8736] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.985668][ T54] usb 8-1: SerialNumber: syz [ 302.000963][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.008266][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.029312][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.752'. [ 302.041129][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.048350][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.048385][ T54] usb 8-1: config 0 descriptor?? [ 302.078192][ T8773] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 302.147414][ T8703] veth0_macvtap: entered promiscuous mode [ 302.172484][ T8703] veth1_macvtap: entered promiscuous mode [ 302.228779][ T54] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input20 [ 302.235159][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.276079][ T5185] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 302.304613][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.330112][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.356833][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.377652][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.395477][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.415467][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.439357][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.449728][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.462434][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.472556][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.491765][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.501949][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.513392][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.523332][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.534056][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.556861][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.585075][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.620347][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.678735][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.717878][ T8180] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 302.750280][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.772773][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.796767][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.817875][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.852761][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.886337][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.915111][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.925175][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.937561][ T5836] Bluetooth: hci9: command tx timeout [ 302.943144][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.954619][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.965297][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.975219][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.985938][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.997810][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.012602][ T5185] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 303.156950][ T8703] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.166169][ T5185] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 303.186292][ T8703] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.205786][ T8703] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.235758][ T8703] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.296438][ T5185] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 303.348814][ T5185] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 303.458042][ T8736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.467198][ T5185] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 303.597656][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.618411][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.676218][ T5891] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 303.725129][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.730212][ T8736] veth0_vlan: entered promiscuous mode [ 303.734127][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.805430][ T8736] veth1_vlan: entered promiscuous mode [ 303.849374][ T5891] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 303.897760][ T838] usb 8-1: USB disconnect, device number 4 [ 303.924176][ T5891] usb 7-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 303.958074][ T5891] usb 7-1: config 220 has no interface number 2 [ 303.965332][ T5891] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 303.995372][ T5891] usb 7-1: config 220 interface 0 has no altsetting 0 [ 304.024220][ T8736] veth0_macvtap: entered promiscuous mode [ 304.034132][ T5891] usb 7-1: config 220 interface 76 has no altsetting 0 [ 304.082314][ T8736] veth1_macvtap: entered promiscuous mode [ 304.089813][ T5891] usb 7-1: config 220 interface 1 has no altsetting 0 [ 304.133104][ T5891] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 304.166120][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.199432][ T5891] usb 7-1: Product: syz [ 304.204210][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.218567][ T5891] usb 7-1: Manufacturer: syz [ 304.223187][ T5891] usb 7-1: SerialNumber: syz [ 304.240193][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.266763][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.306725][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.318246][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.328845][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.338813][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.349411][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.360409][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.373398][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.388678][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.400913][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.411204][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.422812][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.434083][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.445036][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.455305][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.531331][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.551238][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.593082][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.607194][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.618441][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.629921][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.642993][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.679712][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.702369][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.749499][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.761966][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.780536][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.797355][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.839115][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.861641][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.915696][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.941402][ T8794] netlink: 16 bytes leftover after parsing attributes in process `syz.7.758'. [ 304.960651][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.985578][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.014458][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.015744][ T5836] Bluetooth: hci9: command tx timeout [ 305.030553][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.074585][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.126943][ T5891] usb 7-1: selecting invalid altsetting 0 [ 305.147401][ T5891] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 305.175112][ T8736] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.190230][ T5891] usb 7-1: No valid video chain found. [ 305.195849][ T8736] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.195917][ T8736] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.195947][ T8736] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.332770][ T5891] usb 7-1: selecting invalid altsetting 0 [ 305.346545][ T5891] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 305.413488][ T5891] usb 7-1: USB disconnect, device number 6 [ 305.776884][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.784748][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.965422][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.005938][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.636900][ T54] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 306.688725][ T8816] wg1: entered promiscuous mode [ 306.693646][ T8816] wg1: entered allmulticast mode [ 306.836563][ T5915] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 306.848804][ T54] usb 7-1: config 0 has no interfaces? [ 306.974131][ T54] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 307.025873][ T5915] usb 8-1: Using ep0 maxpacket: 32 [ 307.033712][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 307.049829][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.054530][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 307.097391][ T54] usb 7-1: Product: syz [ 307.101614][ T54] usb 7-1: Manufacturer: syz [ 307.113669][ T5915] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 307.136577][ T56] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 307.148002][ T54] usb 7-1: SerialNumber: syz [ 307.152882][ T56] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 307.160987][ T56] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 307.169558][ T56] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 307.201212][ T56] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 307.209656][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 307.221065][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 307.237691][ T54] usb 7-1: config 0 descriptor?? [ 307.243048][ T5915] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 307.268764][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.293972][ T5915] usb 8-1: Product: syz [ 307.301564][ T5915] usb 8-1: Manufacturer: syz [ 307.306356][ T5915] usb 8-1: SerialNumber: syz [ 307.315188][ T5915] usb 8-1: config 0 descriptor?? [ 307.340523][ T8814] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 307.385119][ T5915] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input21 [ 307.388295][ T5185] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 307.394364][ T5185] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 307.401075][ T5185] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 307.406478][ T5185] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 307.540062][ T8811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.541510][ T8811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.688795][ T8814] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 308.129558][ T8184] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 308.144545][ T8832] netlink: 16 bytes leftover after parsing attributes in process `syz.8.768'. [ 308.212617][ T5185] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 308.469514][ T5185] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 308.737744][ T8825] chnl_net:caif_netlink_parms(): no params data found [ 309.299790][ T8827] netlink: 'syz.9.767': attribute type 3 has an invalid length. [ 309.311360][ T5889] usb 8-1: USB disconnect, device number 5 [ 309.338614][ T5836] Bluetooth: hci10: command tx timeout [ 309.353680][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.9.767'. [ 309.401885][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.419017][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.439819][ T8825] bridge_slave_0: entered allmulticast mode [ 309.457533][ T8825] bridge_slave_0: entered promiscuous mode [ 309.521987][ T8825] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.528944][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.529192][ T8825] bridge_slave_1: entered allmulticast mode [ 309.568118][ T8825] bridge_slave_1: entered promiscuous mode [ 309.798942][ T8825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.816576][ T5891] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 309.834418][ T8825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.007597][ T5891] usb 10-1: too many configurations: 61, using maximum allowed: 8 [ 310.036867][ T5891] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.051380][ T8850] netlink: 16 bytes leftover after parsing attributes in process `syz.7.772'. [ 310.076442][ T5891] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.091024][ T8825] team0: Port device team_slave_0 added [ 310.107413][ T5891] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.132548][ T5891] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.188841][ T8825] team0: Port device team_slave_1 added [ 310.208971][ T5891] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.242642][ T5891] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.283700][ T5891] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.336228][ T54] usb 7-1: USB disconnect, device number 7 [ 310.375941][ T5891] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.389147][ T5891] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.399948][ T5891] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.410743][ T5891] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.447041][ T5891] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.492515][ T8856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.634577][ T5891] usb 10-1: unable to read config index 6 descriptor/start: -71 [ 310.646436][ T5891] usb 10-1: can't read configurations, error -71 [ 310.695264][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.8.769'. [ 310.750106][ T8842] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 311.035311][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.044738][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.101715][ T8825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.208576][ T5899] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 311.379700][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.395822][ T5899] usb 8-1: Using ep0 maxpacket: 8 [ 311.406872][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.432788][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.452332][ T5836] Bluetooth: hci10: command tx timeout [ 311.462709][ T8825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.738963][ T5899] usb 8-1: unable to get BOS descriptor or descriptor too short [ 311.818850][ T5899] usb 8-1: config 8 has an invalid interface number: 24 but max is 1 [ 311.864962][ T5899] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 311.875353][ T5899] usb 8-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 311.884526][ T5899] usb 8-1: config 8 has no interface number 0 [ 311.892197][ T5899] usb 8-1: config 8 interface 24 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 311.903245][ T5899] usb 8-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 311.914871][ T5890] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 311.941446][ T5899] usb 8-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 311.985847][ T5899] usb 8-1: config 8 interface 24 has no altsetting 0 [ 312.075730][ T5890] usb 9-1: Using ep0 maxpacket: 8 [ 312.085494][ T5890] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 312.103741][ T5899] usb 8-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 312.113884][ T5899] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.122030][ T5890] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 29706, setting to 64 [ 312.122423][ T5899] usb 8-1: Product: syz [ 312.151783][ T5890] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 312.167301][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.183233][ T5899] usb 8-1: Manufacturer: syz [ 312.191453][ T5890] usb 9-1: Product: syz [ 312.194750][ T5899] usb 8-1: SerialNumber: syz [ 312.205714][ T5890] usb 9-1: Manufacturer: syz [ 312.229815][ T5890] usb 9-1: SerialNumber: syz [ 312.271987][ T5890] usb 9-1: config 0 descriptor?? [ 312.323020][ T5890] streamzap 9-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0250 [ 312.438547][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.449156][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.511610][ T5890] usb 9-1: USB disconnect, device number 2 [ 313.362114][ T8881] netlink: 368 bytes leftover after parsing attributes in process `syz.8.779'. [ 313.498426][ T5836] Bluetooth: hci10: command tx timeout [ 313.871871][ T5899] vmk80xx 8-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 313.908183][ T5899] vmk80xx 8-1:8.24: probe with driver vmk80xx failed with error -22 [ 313.950006][ T5899] usb 8-1: USB disconnect, device number 6 [ 314.315796][ T5899] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 314.486074][ T5899] usb 8-1: Invalid ep0 maxpacket: 64 [ 314.627708][ T5899] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 314.795899][ T5899] usb 8-1: Invalid ep0 maxpacket: 64 [ 314.805431][ T5899] usb usb8-port1: attempt power cycle [ 315.178051][ T5899] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 315.208091][ T5899] usb 8-1: Invalid ep0 maxpacket: 64 [ 315.345760][ T5899] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 315.379261][ T5899] usb 8-1: Invalid ep0 maxpacket: 64 [ 315.385115][ T5899] usb usb8-port1: unable to enumerate USB device [ 315.575936][ T5836] Bluetooth: hci10: command tx timeout [ 317.104003][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.115622][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.402167][ T8896] loop6: detected capacity change from 0 to 7 [ 317.421771][ T8896] Dev loop6: unable to read RDB block 7 [ 317.433654][ T8896] loop6: unable to read partition table [ 317.448706][ T8896] loop6: partition table beyond EOD, truncated [ 317.476400][ T8896] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 318.522779][ T8903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.543817][ T8903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.929041][ T8911] netlink: 'syz.7.786': attribute type 1 has an invalid length. [ 326.890687][ T56] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 326.899448][ T56] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 326.910205][ T56] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 326.918649][ T56] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 326.929370][ T56] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 327.793281][ T5833] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 327.803424][ T5833] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 327.811463][ T5833] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 327.821350][ T5833] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 327.835357][ T5833] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 329.019226][ T56] Bluetooth: hci11: command tx timeout [ 329.409679][ T5833] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 329.419592][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 329.426576][ T5833] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 329.435400][ T5833] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 329.447032][ T5833] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 329.454832][ T5833] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 329.896662][ T5833] Bluetooth: hci12: command tx timeout [ 331.099633][ T5833] Bluetooth: hci11: command tx timeout [ 331.496330][ T5833] Bluetooth: hci13: command tx timeout [ 331.976008][ T5833] Bluetooth: hci12: command tx timeout [ 333.175859][ T56] Bluetooth: hci11: command tx timeout [ 333.585832][ T56] Bluetooth: hci13: command tx timeout [ 334.068036][ T56] Bluetooth: hci12: command tx timeout [ 334.540652][ T56] Bluetooth: hci5: command 0x0406 tx timeout [ 335.256647][ T5833] Bluetooth: hci11: command tx timeout [ 335.319908][ T56] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 335.328954][ T56] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 335.337404][ T56] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 335.347564][ T56] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 335.355346][ T56] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 335.657547][ T56] Bluetooth: hci13: command tx timeout [ 336.135859][ T5833] Bluetooth: hci12: command tx timeout [ 337.418353][ T5833] Bluetooth: hci14: command tx timeout [ 337.735827][ T5833] Bluetooth: hci13: command tx timeout [ 339.495956][ T5833] Bluetooth: hci14: command tx timeout [ 341.575775][ T5833] Bluetooth: hci14: command tx timeout [ 343.656002][ T5833] Bluetooth: hci14: command tx timeout [ 367.602408][ T56] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 367.619424][ T56] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 367.629730][ T56] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 367.637971][ T56] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 367.645925][ T56] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 369.735978][ T5833] Bluetooth: hci15: command tx timeout [ 371.815833][ T5833] Bluetooth: hci15: command tx timeout [ 373.905953][ T5833] Bluetooth: hci15: command tx timeout [ 375.977904][ T56] Bluetooth: hci15: command tx timeout [ 378.551090][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.557545][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.191297][ T56] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 388.200335][ T56] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 388.208330][ T56] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 388.216549][ T56] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 388.224401][ T56] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 388.311825][ T5833] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 388.321207][ T5833] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 388.373980][ T5833] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 388.390105][ T5833] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 388.397986][ T5833] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 389.909261][ T56] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 389.919979][ T56] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 389.936877][ T56] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 389.945123][ T56] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 389.960261][ T56] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 390.297081][ T5833] Bluetooth: hci16: command tx timeout [ 390.455886][ T5833] Bluetooth: hci17: command tx timeout [ 392.068185][ T5833] Bluetooth: hci18: command tx timeout [ 392.375797][ T5833] Bluetooth: hci16: command tx timeout [ 392.555848][ T5833] Bluetooth: hci17: command tx timeout [ 394.135828][ T5833] Bluetooth: hci18: command tx timeout [ 394.455758][ T5833] Bluetooth: hci16: command tx timeout [ 394.626089][ T5833] Bluetooth: hci17: command tx timeout [ 395.952568][ T56] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 395.963775][ T56] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 395.972173][ T56] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 395.985419][ T56] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 396.006191][ T56] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 396.216186][ T5833] Bluetooth: hci18: command tx timeout [ 396.545822][ T5833] Bluetooth: hci16: command tx timeout [ 396.695923][ T5833] Bluetooth: hci17: command tx timeout [ 398.055983][ T5833] Bluetooth: hci19: command tx timeout [ 398.295882][ T5833] Bluetooth: hci18: command tx timeout [ 400.135783][ T5833] Bluetooth: hci19: command tx timeout [ 402.216371][ T5833] Bluetooth: hci19: command tx timeout [ 404.299897][ T5833] Bluetooth: hci19: command tx timeout [ 406.216074][ T5833] Bluetooth: hci6: command 0x0406 tx timeout [ 416.461357][ T5140] Bluetooth: hci7: command 0x0406 tx timeout [ 416.467574][ T56] Bluetooth: hci8: command 0x0406 tx timeout [ 421.576217][ T5833] Bluetooth: hci9: command 0x0406 tx timeout [ 427.567034][ T5833] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 427.589646][ T5833] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 427.598949][ T5833] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 427.609064][ T5833] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 427.625794][ T5833] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 429.096145][ T31] INFO: task syz.4.644:8439 blocked for more than 143 seconds. [ 429.108380][ T31] Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 [ 429.121968][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 429.140688][ T31] task:syz.4.644 state:D stack:26744 pid:8439 tgid:8433 ppid:5849 task_flags:0x440140 flags:0x00004004 [ 429.176118][ T31] Call Trace: [ 429.179566][ T31] [ 429.182769][ T31] __schedule+0x16e2/0x4cd0 [ 429.215979][ T31] ? schedule+0x165/0x360 [ 429.220979][ T31] ? __pfx___schedule+0x10/0x10 [ 429.275629][ T31] ? schedule+0x91/0x360 [ 429.279961][ T31] schedule+0x165/0x360 [ 429.284156][ T31] ? rwsem_down_read_slowpath+0x568/0x880 [ 429.313077][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.318901][ T31] rwsem_down_read_slowpath+0x552/0x880 [ 429.324526][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 429.331019][ T31] ? page_cache_ra_order+0x445/0xc70 [ 429.345653][ T31] down_read+0x98/0x2e0 [ 429.350420][ T31] page_cache_ra_order+0x445/0xc70 [ 429.356329][ T31] filemap_get_pages+0x43c/0x1eb0 [ 429.361432][ T31] ? __pfx_filemap_get_pages+0x10/0x10 [ 429.367401][ T31] ? stack_trace_save+0x9c/0xe0 [ 429.372292][ T31] ? __pfx___might_resched+0x10/0x10 [ 429.378035][ T31] ? stack_depot_save_flags+0x40/0x910 [ 429.383551][ T31] filemap_splice_read+0x4fc/0xbc0 [ 429.389184][ T31] ? __pfx_filemap_splice_read+0x10/0x10 [ 429.394882][ T31] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 429.405946][ T31] ? alloc_pipe_info+0x374/0x4d0 [ 429.413394][ T31] ? __pfx_filemap_splice_read+0x10/0x10 [ 429.434663][ T31] splice_direct_to_actor+0x4a6/0xcc0 [ 429.445781][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 429.451471][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 429.465685][ T31] ? __pfx_aa_file_perm+0x10/0x10 [ 429.470878][ T31] do_splice_direct+0x181/0x270 [ 429.487310][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 429.492745][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 429.499155][ T31] ? bpf_lsm_file_permission+0x9/0x20 [ 429.504577][ T31] ? security_file_permission+0x75/0x290 [ 429.510625][ T31] ? rw_verify_area+0x258/0x650 [ 429.518832][ T31] do_sendfile+0x4da/0x7d0 [ 429.523327][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 429.528532][ T31] ? do_seccomp+0x1bf/0xd90 [ 429.533108][ T31] __se_sys_sendfile64+0x13e/0x190 [ 429.540793][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.546015][ T31] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 429.551703][ T31] ? do_syscall_64+0xba/0x210 [ 429.556727][ T31] do_syscall_64+0xf6/0x210 [ 429.561264][ T31] ? clear_bhb_loop+0x45/0xa0 [ 429.566189][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.572117][ T31] RIP: 0033:0x7f81c898e969 [ 429.576656][ T31] RSP: 002b:00007f81c67d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 429.585108][ T31] RAX: ffffffffffffffda RBX: 00007f81c8bb6160 RCX: 00007f81c898e969 [ 429.593381][ T31] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000000000000d [ 429.602387][ T31] RBP: 00007f81c8a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 429.610521][ T31] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 429.621787][ T31] R13: 0000000000000000 R14: 00007f81c8bb6160 R15: 00007f81c8cdfa28 [ 429.632347][ T31] [ 429.635471][ T31] INFO: task syz.0.689:8565 blocked for more than 143 seconds. [ 429.650769][ T31] Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 [ 429.667046][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.688458][ T31] task:syz.0.689 state:D stack:25272 pid:8565 tgid:8565 ppid:5850 task_flags:0x440040 flags:0x00000004 [ 429.705728][ T31] Call Trace: [ 429.709067][ T31] [ 429.712033][ T31] __schedule+0x16e2/0x4cd0 [ 429.722469][ T31] ? schedule+0x165/0x360 [ 429.726967][ T31] ? __pfx___schedule+0x10/0x10 [ 429.731872][ T31] ? schedule+0x91/0x360 [ 429.745703][ T5836] Bluetooth: hci20: command tx timeout [ 429.769673][ T31] schedule+0x165/0x360 [ 429.773909][ T31] ? rwsem_down_read_slowpath+0x568/0x880 [ 429.785755][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.791281][ T31] rwsem_down_read_slowpath+0x552/0x880 [ 429.805617][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 429.811754][ T31] ? page_cache_ra_order+0x445/0xc70 [ 429.827848][ T31] ? cgroup_rstat_updated+0x144/0xb50 [ 429.833307][ T31] down_read+0x98/0x2e0 [ 429.837846][ T31] page_cache_ra_order+0x445/0xc70 [ 429.843030][ T31] ? maybe_unlock_mmap_for_io+0x225/0x2d0 [ 429.848961][ T31] do_sync_mmap_readahead+0x4b5/0x5f0 [ 429.854376][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 429.860427][ T31] ? count_memcg_event_mm+0x348/0x3a0 [ 429.865953][ T31] ? __filemap_get_folio+0x9a6/0xaf0 [ 429.871272][ T31] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 429.876929][ T31] ? filemap_fault_recheck_pte_none+0x75/0x2d0 [ 429.883118][ T31] filemap_fault+0x62a/0x1200 [ 429.888035][ T31] ? __pagetable_ctor+0x253/0x340 [ 429.893100][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 429.898486][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.903301][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 429.908986][ T31] __do_fault+0x135/0x390 [ 429.913372][ T31] __handle_mm_fault+0x17f9/0x5380 [ 429.925588][ T31] ? __lock_acquire+0xaac/0xd20 [ 429.930526][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 429.940742][ T31] ? lock_vma_under_rcu+0xf8/0x710 [ 429.946763][ T31] ? lock_vma_under_rcu+0xf8/0x710 [ 429.951926][ T31] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 429.957715][ T31] handle_mm_fault+0x3f6/0x8c0 [ 429.962521][ T31] do_user_addr_fault+0xa81/0x1390 [ 429.969734][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.974551][ T31] ? trace_irq_disable+0x37/0x110 [ 429.980469][ T31] exc_page_fault+0x68/0x110 [ 429.985109][ T31] asm_exc_page_fault+0x26/0x30 [ 429.990141][ T31] RIP: 0033:0x7fcd3b3566d8 [ 429.994589][ T31] RSP: 002b:00007fcd3b6dfb88 EFLAGS: 00010206 [ 430.002139][ T31] RAX: 0000200000000080 RBX: 0000000000000004 RCX: 00756d6d6f692f76 [ 430.010445][ T31] RDX: 000000000000000b RSI: 6d6f692f7665642f RDI: 0000200000000080 [ 430.018777][ T31] RBP: 00007fcd3b5b7ba0 R08: 00007fcd3b200000 R09: 0000000000000001 [ 430.029268][ T31] R10: 0000000000000001 R11: 0000000000000009 R12: 00007fcd3b5b5fac [ 430.055157][ T31] R13: 00007fcd3b5b5fa0 R14: fffffffffffffffe R15: 00007fcd3b6dfca0 [ 430.080001][ T31] [ 430.083103][ T31] INFO: task syz.5.704:8604 blocked for more than 144 seconds. [ 430.146027][ T31] Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 [ 430.153720][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.166399][ T31] task:syz.5.704 state:D stack:25272 pid:8604 tgid:8604 ppid:7676 task_flags:0x440040 flags:0x00000004 [ 430.178586][ T31] Call Trace: [ 430.181902][ T31] [ 430.184865][ T31] __schedule+0x16e2/0x4cd0 [ 430.189660][ T31] ? schedule+0x165/0x360 [ 430.194059][ T31] ? __pfx___schedule+0x10/0x10 [ 430.205843][ T31] ? schedule+0x91/0x360 [ 430.210143][ T31] schedule+0x165/0x360 [ 430.214324][ T31] ? rwsem_down_read_slowpath+0x568/0x880 [ 430.220567][ T31] schedule_preempt_disabled+0x13/0x30 [ 430.227370][ T31] rwsem_down_read_slowpath+0x552/0x880 [ 430.236842][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 430.242978][ T31] ? page_cache_ra_order+0x445/0xc70 [ 430.248439][ T31] ? cgroup_rstat_updated+0x144/0xb50 [ 430.253865][ T31] down_read+0x98/0x2e0 [ 430.258129][ T31] page_cache_ra_order+0x445/0xc70 [ 430.263299][ T31] ? maybe_unlock_mmap_for_io+0x225/0x2d0 [ 430.274204][ T31] do_sync_mmap_readahead+0x4b5/0x5f0 [ 430.285448][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 430.297266][ T31] ? count_memcg_event_mm+0x348/0x3a0 [ 430.302690][ T31] ? __filemap_get_folio+0x9a6/0xaf0 [ 430.321088][ T31] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 430.331853][ T31] ? filemap_fault_recheck_pte_none+0x75/0x2d0 [ 430.346928][ T31] filemap_fault+0x62a/0x1200 [ 430.351666][ T31] ? __pagetable_ctor+0x253/0x340 [ 430.365967][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 430.371148][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.377126][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 430.382474][ T31] __do_fault+0x135/0x390 [ 430.387305][ T31] __handle_mm_fault+0x17f9/0x5380 [ 430.392461][ T31] ? __lock_acquire+0xaac/0xd20 [ 430.397794][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 430.403295][ T31] ? lock_vma_under_rcu+0xf8/0x710 [ 430.408922][ T31] ? lock_vma_under_rcu+0xf8/0x710 [ 430.414083][ T31] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 430.420994][ T31] handle_mm_fault+0x3f6/0x8c0 [ 430.437401][ T31] do_user_addr_fault+0xa81/0x1390 [ 430.442582][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.456233][ T31] ? trace_irq_disable+0x37/0x110 [ 430.461343][ T31] exc_page_fault+0x68/0x110 [ 430.476916][ T31] asm_exc_page_fault+0x26/0x30 [ 430.481830][ T31] RIP: 0033:0x7fc226854fe1 [ 430.486586][ T31] RSP: 002b:00007fc226cdfb50 EFLAGS: 00010246 [ 430.492705][ T31] RAX: 00002000000000c0 RBX: 0000000000000004 RCX: 0000000000000000 [ 430.501114][ T31] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000555573a943c8 [ 430.516271][ T31] RBP: 00007fc226cdfc58 R08: 0000000000000000 R09: 0000000000000000 [ 430.524309][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fc226bb5fac [ 430.541901][ T31] R13: 00007fc226bb5fa0 R14: fffffffffffffffe R15: 00007fc226cdfca0 [ 430.550189][ T31] [ 430.553426][ T31] INFO: task syz.1.713:8625 blocked for more than 144 seconds. [ 430.659676][ T31] Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 [ 430.667453][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.676199][ T31] task:syz.1.713 state:D stack:25272 pid:8625 tgid:8625 ppid:7628 task_flags:0x440040 flags:0x00000004 [ 430.688252][ T31] Call Trace: [ 430.691558][ T31] [ 430.694516][ T31] __schedule+0x16e2/0x4cd0 [ 430.711090][ T31] ? schedule+0x165/0x360 [ 430.716421][ T31] ? __pfx___schedule+0x10/0x10 [ 430.721330][ T31] ? schedule+0x91/0x360 [ 430.727566][ T31] schedule+0x165/0x360 [ 430.731770][ T31] ? rwsem_down_read_slowpath+0x568/0x880 [ 430.748307][ T31] schedule_preempt_disabled+0x13/0x30 [ 430.753826][ T31] rwsem_down_read_slowpath+0x552/0x880 [ 430.759972][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 430.766458][ T31] ? page_cache_ra_order+0x445/0xc70 [ 430.771885][ T31] ? cgroup_rstat_updated+0x144/0xb50 [ 430.779367][ T31] down_read+0x98/0x2e0 [ 430.783589][ T31] page_cache_ra_order+0x445/0xc70 [ 430.789347][ T31] ? maybe_unlock_mmap_for_io+0x225/0x2d0 [ 430.795116][ T31] do_sync_mmap_readahead+0x4b5/0x5f0 [ 430.800993][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 430.823572][ T31] ? count_memcg_event_mm+0x348/0x3a0 [ 430.832067][ T31] ? __filemap_get_folio+0x9a6/0xaf0 [ 430.847271][ T31] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 430.852888][ T31] ? filemap_fault_recheck_pte_none+0x75/0x2d0 [ 430.871431][ T31] filemap_fault+0x62a/0x1200 [ 430.877566][ T31] ? __pagetable_ctor+0x253/0x340 [ 430.882647][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 430.888405][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.893229][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 430.898965][ T31] __do_fault+0x135/0x390 [ 430.903350][ T31] __handle_mm_fault+0x17f9/0x5380 [ 430.908930][ T31] ? __lock_acquire+0xaac/0xd20 [ 430.913841][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 430.920701][ T31] ? lock_vma_under_rcu+0xf8/0x710 [ 430.934876][ T31] ? lock_vma_under_rcu+0xf8/0x710 [ 430.943157][ T31] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 430.954807][ T31] handle_mm_fault+0x3f6/0x8c0 [ 430.960218][ T31] do_user_addr_fault+0xa81/0x1390 [ 430.965374][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.970580][ T31] ? trace_irq_disable+0x37/0x110 [ 430.976909][ T31] exc_page_fault+0x68/0x110 [ 430.981543][ T31] asm_exc_page_fault+0x26/0x30 [ 430.987936][ T31] RIP: 0033:0x7faf4a054fe1 [ 430.992400][ T31] RSP: 002b:00007faf4a4dfb50 EFLAGS: 00010246 [ 430.998879][ T31] RAX: 00002000000001c0 RBX: 0000000000000004 RCX: 0000000000000000 [ 431.007290][ T31] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00005555653b63c8 [ 431.015295][ T31] RBP: 00007faf4a4dfc58 R08: 0000000000000000 R09: 0000000000000000 [ 431.029632][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 00007faf4a3b616c [ 431.038139][ T31] R13: 00007faf4a4dfc80 R14: fffffffffffffffe R15: 00007faf4a4dfca0 [ 431.046547][ T31] [ 431.052745][ T31] INFO: task syz.1.713:8629 blocked for more than 145 seconds. [ 431.079314][ T31] Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 [ 431.088500][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.098869][ T31] task:syz.1.713 state:D stack:25880 pid:8629 tgid:8625 ppid:7628 task_flags:0x440140 flags:0x00004004 [ 431.110935][ T31] Call Trace: [ 431.114241][ T31] [ 431.117379][ T31] __schedule+0x16e2/0x4cd0 [ 431.121948][ T31] ? schedule+0x165/0x360 [ 431.126355][ T31] ? __pfx___schedule+0x10/0x10 [ 431.131310][ T31] ? schedule+0x91/0x360 [ 431.145566][ T31] schedule+0x165/0x360 [ 431.149785][ T31] ? rwsem_down_read_slowpath+0x568/0x880 [ 431.168734][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.174263][ T31] rwsem_down_read_slowpath+0x552/0x880 [ 431.183141][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 431.189437][ T31] ? page_cache_ra_order+0x445/0xc70 [ 431.194976][ T31] ? cgroup_rstat_updated+0x144/0xb50 [ 431.202623][ T31] down_read+0x98/0x2e0 [ 431.214698][ T31] page_cache_ra_order+0x445/0xc70 [ 431.221060][ T31] ? maybe_unlock_mmap_for_io+0x16a/0x2d0 [ 431.227170][ T31] do_sync_mmap_readahead+0x4b5/0x5f0 [ 431.232582][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 431.238621][ T31] ? count_memcg_event_mm+0x348/0x3a0 [ 431.244038][ T31] ? __filemap_get_folio+0x9a6/0xaf0 [ 431.250433][ T31] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 431.262984][ T31] ? filemap_fault_recheck_pte_none+0x75/0x2d0 [ 431.269260][ T31] filemap_fault+0x62a/0x1200 [ 431.273983][ T31] ? __pagetable_ctor+0x253/0x340 [ 431.280108][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 431.285345][ T31] ? rcu_is_watching+0x15/0xb0 [ 431.291250][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 431.296921][ T31] __do_fault+0x135/0x390 [ 431.301300][ T31] __handle_mm_fault+0x17f9/0x5380 [ 431.309211][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 431.314846][ T31] ? find_vma+0xe7/0x160 [ 431.319362][ T31] ? __pfx_find_vma+0x10/0x10 [ 431.324170][ T31] handle_mm_fault+0x3f6/0x8c0 [ 431.330159][ T31] do_user_addr_fault+0x764/0x1390 [ 431.335335][ T31] exc_page_fault+0x68/0x110 [ 431.340201][ T31] asm_exc_page_fault+0x26/0x30 [ 431.345092][ T31] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 431.351001][ T31] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 431.374964][ T31] RSP: 0018:ffffc900050efb98 EFLAGS: 00050246 [ 431.381155][ T31] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 431.390308][ T31] RDX: ffffc9000e5c1000 RSI: ffffc900050efc78 RDI: 0000200000000100 [ 431.402551][ T31] RBP: ffffc900050efdf0 R08: ffffc900050efc7f R09: 1ffff92000a1df8f [ 431.423857][ T31] R10: dffffc0000000000 R11: fffff52000a1df90 R12: ffffc900050efc80 [ 431.443541][ T31] R13: ffffc900050efc60 R14: 0000200000000100 R15: ffffc900050efc78 [ 431.454682][ T31] set_fd_set+0x70/0xa0 [ 431.476467][ T31] core_sys_select+0x731/0x990 [ 431.481657][ T31] ? __pfx_core_sys_select+0x10/0x10 [ 431.497025][ T31] ? __pfx_set_user_sigmask+0x10/0x10 [ 431.502485][ T31] ? fput+0xa0/0xd0 [ 431.506941][ T31] __se_sys_pselect6+0x27a/0x300 [ 431.511972][ T31] ? __pfx___se_sys_pselect6+0x10/0x10 [ 431.529857][ T31] ? __x64_sys_pselect6+0x21/0xf0 [ 431.534957][ T31] do_syscall_64+0xf6/0x210 [ 431.546091][ T31] ? clear_bhb_loop+0x45/0xa0 [ 431.550824][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.566431][ T31] RIP: 0033:0x7faf4a18e969 [ 431.570892][ T31] RSP: 002b:00007faf4b0ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 431.580262][ T31] RAX: ffffffffffffffda RBX: 00007faf4a3b6080 RCX: 00007faf4a18e969 [ 431.588810][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 431.597156][ T31] RBP: 00007faf4a210ab1 R08: 0000200000000280 R09: 0000000000000000 [ 431.605163][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.615011][ T31] R13: 0000000000000000 R14: 00007faf4a3b6080 R15: 00007faf4a4dfa28 [ 431.623349][ T31] [ 431.626780][ T31] INFO: task syz.1.713:8630 blocked for more than 145 seconds. [ 431.634375][ T31] Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 [ 431.789350][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.798365][ T31] task:syz.1.713 state:D stack:26104 pid:8630 tgid:8625 ppid:7628 task_flags:0x440040 flags:0x00004004 [ 431.815734][ T5836] Bluetooth: hci10: command 0x0406 tx timeout [ 431.816016][ T56] Bluetooth: hci20: command tx timeout [ 431.826145][ T31] Call Trace: [ 431.830620][ T31] [ 431.842847][ T31] __schedule+0x16e2/0x4cd0 [ 431.850619][ T31] ? schedule+0x165/0x360 [ 431.854995][ T31] ? __pfx___schedule+0x10/0x10 [ 431.865717][ T31] ? schedule+0x91/0x360 [ 431.872168][ T31] schedule+0x165/0x360 [ 431.878552][ T31] ? rwsem_down_read_slowpath+0x568/0x880 [ 431.884319][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.890328][ T31] rwsem_down_read_slowpath+0x552/0x880 [ 431.896240][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 431.902356][ T31] ? page_cache_ra_order+0x445/0xc70 [ 431.908162][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 431.914348][ T31] ? cgroup_rstat_updated+0x144/0xb50 [ 431.920298][ T31] down_read+0x98/0x2e0 [ 431.924502][ T31] page_cache_ra_order+0x445/0xc70 [ 431.930100][ T31] ? maybe_unlock_mmap_for_io+0x16a/0x2d0 [ 431.936177][ T31] do_sync_mmap_readahead+0x4b5/0x5f0 [ 431.941591][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 431.947924][ T31] ? count_memcg_event_mm+0x348/0x3a0 [ 431.953347][ T31] ? __filemap_get_folio+0x9a6/0xaf0 [ 431.959073][ T31] ? filemap_map_pages+0x1370/0x1740 [ 431.964485][ T31] ? filemap_fault_recheck_pte_none+0x75/0x2d0 [ 431.974075][ T31] filemap_fault+0x62a/0x1200 [ 431.979307][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 431.984458][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 432.001061][ T31] ? __handle_mm_fault+0x280a/0x5380 [ 432.024370][ T31] __do_fault+0x135/0x390 [ 432.028919][ T31] __handle_mm_fault+0x363e/0x5380 [ 432.034096][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 432.041082][ T31] ? __pfx___might_resched+0x10/0x10 [ 432.046513][ T31] handle_mm_fault+0x3f6/0x8c0 [ 432.051323][ T31] __get_user_pages+0x16f0/0x2a40 [ 432.058062][ T31] ? mt_find+0x15c/0x5f0 [ 432.062374][ T31] ? __pfx___get_user_pages+0x10/0x10 [ 432.077786][ T31] populate_vma_page_range+0x26b/0x340 [ 432.083316][ T31] ? __pfx_populate_vma_page_range+0x10/0x10 [ 432.089623][ T31] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 432.095646][ T31] ? down_read+0x1ad/0x2e0 [ 432.100148][ T31] __mm_populate+0x24c/0x380 [ 432.104787][ T31] ? __pfx___mm_populate+0x10/0x10 [ 432.110163][ T31] ? up_write+0x1c4/0x420 [ 432.114542][ T31] vm_mmap_pgoff+0x3f0/0x4c0 [ 432.119315][ T31] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 432.124455][ T31] ? __fget_files+0x2a/0x420 [ 432.129147][ T31] ? __fget_files+0x2a/0x420 [ 432.133766][ T31] ? __fget_files+0x2a/0x420 [ 432.138515][ T31] ksys_mmap_pgoff+0x51f/0x760 [ 432.143326][ T31] do_syscall_64+0xf6/0x210 [ 432.148158][ T31] ? clear_bhb_loop+0x45/0xa0 [ 432.152876][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.158852][ T31] RIP: 0033:0x7faf4a18e969 [ 432.163292][ T31] RSP: 002b:00007faf4b08a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 432.172089][ T31] RAX: ffffffffffffffda RBX: 00007faf4a3b6160 RCX: 00007faf4a18e969 [ 432.185564][ T31] RDX: 0000000001000006 RSI: 0000000000b36000 RDI: 0000200000000000 [ 432.193584][ T31] RBP: 00007faf4a210ab1 R08: 0000000000000009 R09: 0000000000000000 [ 432.220442][ T31] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 432.234843][ T31] R13: 0000000000000000 R14: 00007faf4a3b6160 R15: 00007faf4a4dfa28 [ 432.253414][ T31] [ 432.260207][ T31] [ 432.260207][ T31] Showing all locks held in the system: [ 432.275575][ T31] 3 locks held by kworker/0:1/10: [ 432.282742][ T31] #0: ffff88801a081d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 432.297545][ T31] #1: ffffc900000f7c60 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 432.410302][ T31] #2: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00 [ 432.420427][ T31] 1 lock held by khungtaskd/31: [ 432.425316][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 432.435907][ T31] 3 locks held by kworker/u8:3/53: [ 432.441061][ T31] #0: ffff88802fd82948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 432.454340][ T31] #1: ffffc90000bf7c60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 432.469073][ T31] #2: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 432.478930][ T31] 4 locks held by kworker/u8:4/68: [ 432.488938][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 432.500220][ T31] #1: ffffc90001587c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 432.511211][ T31] #2: ffffffff8f2e7f50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 432.522242][ T31] #3: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x79/0x270 [ 432.550992][ T31] 2 locks held by getty/5591: [ 432.571434][ T31] #0: ffff888030a0b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 432.595592][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 432.615982][ T31] 3 locks held by kworker/0:5/5899: [ 432.621229][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 432.647597][ T31] #1: ffffc9000453fc60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 432.665830][ T31] #2: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 432.692191][ T31] 4 locks held by syz.2.423/7369: [ 432.705681][ T31] 1 lock held by syz.4.644/8439: [ 432.710655][ T31] #0: ffff88802295abc0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 432.731651][ T31] 1 lock held by syz.0.689/8565: [ 432.738290][ T31] #0: ffff88802295abc0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 432.749634][ T31] 1 lock held by syz.5.704/8604: [ 432.754594][ T31] #0: ffff88802295abc0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 432.775782][ T31] 1 lock held by syz.1.713/8625: [ 432.780773][ T31] #0: ffff88802295abc0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 432.797269][ T31] 1 lock held by syz.1.713/8629: [ 432.802250][ T31] #0: ffff88802295abc0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 432.813141][ T31] 1 lock held by syz.1.713/8630: [ 432.818229][ T31] #0: ffff88802295abc0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 432.829120][ T31] 1 lock held by syz.3.732/8688: [ 432.834081][ T31] #0: ffff88802295abc0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 432.844948][ T31] 2 locks held by syz-executor/8825: [ 432.850619][ T31] #0: ffffffff8f808e10 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 432.860723][ T31] #1: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 432.870825][ T31] 1 lock held by syz.9.776/8867: [ 432.877582][ T31] #0: ffff88802295abc0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 432.890461][ T31] 1 lock held by syz.9.776/8868: [ 432.899153][ T31] #0: ffff88802295abc0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 432.911240][ T31] 2 locks held by syz.9.776/8869: [ 432.916636][ T31] #0: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1d90 [ 432.926406][ T31] #1: ffff88802295abc0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 432.938051][ T31] 1 lock held by syz.9.776/8870: [ 432.943025][ T31] #0: ffff88802295abc0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 432.969856][ T31] 1 lock held by syz.6.778/8876: [ 432.974846][ T31] #0: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_delroute+0x107/0x2f0 [ 433.005064][ T31] 1 lock held by syz.8.779/8879: [ 433.018709][ T31] #0: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1d90 [ 433.035577][ T31] 1 lock held by syz.8.779/8880: [ 433.040555][ T31] #0: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 433.060433][ T31] 2 locks held by syz.7.786/8911: [ 433.072242][ T31] #0: ffffffff8f7f07e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 433.082855][ T31] #1: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 433.101630][ T31] 1 lock held by syz.7.786/8912: [ 433.109627][ T31] #0: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 433.118860][ T31] 2 locks held by syz.7.786/8913: [ 433.123911][ T31] #0: ffffffff8f80d870 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 433.134832][ T31] #1: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 433.144035][ T31] 2 locks held by syz-executor/8917: [ 433.149609][ T31] #0: ffffffff8f2e7f50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 433.159363][ T31] #1: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 433.170034][ T31] 2 locks held by syz-executor/8922: [ 433.175461][ T31] #0: ffffffff8f2e7f50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 433.197847][ T31] #1: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 433.218103][ T31] 2 locks held by syz-executor/8925: [ 433.223426][ T31] #0: ffffffff8f2e7f50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 433.233239][ T31] #1: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 433.244367][ T31] 2 locks held by syz-executor/8929: [ 433.249936][ T31] #0: ffffffff8f2e7f50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 433.259686][ T31] #1: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 433.270518][ T31] 2 locks held by syz-executor/8933: [ 433.276119][ T31] #0: ffffffff8f2e7f50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 433.287009][ T31] #1: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 433.297794][ T31] 2 locks held by syz-executor/8947: [ 433.313803][ T31] #0: ffffffff8f2e7f50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 433.324379][ T31] #1: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 433.340462][ T31] 2 locks held by syz-executor/8948: [ 433.348564][ T31] #0: ffffffff8f2e7f50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 433.358392][ T31] #1: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 433.369298][ T31] 2 locks held by syz-executor/8951: [ 433.374615][ T31] #0: ffffffff8f2e7f50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 433.384610][ T31] #1: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 433.395463][ T31] 2 locks held by syz-executor/8955: [ 433.401474][ T31] #0: ffffffff8f2e7f50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 433.418513][ T31] #1: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 433.430913][ T31] 2 locks held by syz-executor/8964: [ 433.436611][ T31] #0: ffffffff8f2e7f50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 433.446447][ T31] #1: ffffffff8f2f4a88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 433.471424][ T31] [ 433.473796][ T31] ============================================= [ 433.473796][ T31] [ 433.493849][ T31] NMI backtrace for cpu 1 [ 433.493875][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 433.493899][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.493912][ T31] Call Trace: [ 433.493920][ T31] [ 433.493929][ T31] dump_stack_lvl+0x189/0x250 [ 433.493960][ T31] ? __wake_up_klogd+0xd9/0x110 [ 433.493986][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.494021][ T31] ? __pfx__printk+0x10/0x10 [ 433.494054][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 433.494077][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 433.494095][ T31] ? _printk+0xcf/0x120 [ 433.494119][ T31] ? __pfx__printk+0x10/0x10 [ 433.494141][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 433.494164][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 433.494187][ T31] watchdog+0xfee/0x1030 [ 433.494215][ T31] ? watchdog+0x1de/0x1030 [ 433.494248][ T31] kthread+0x70e/0x8a0 [ 433.494275][ T31] ? __pfx_watchdog+0x10/0x10 [ 433.494298][ T31] ? __pfx_kthread+0x10/0x10 [ 433.494323][ T31] ? __pfx_kthread+0x10/0x10 [ 433.494346][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.494367][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.494390][ T31] ? __pfx_kthread+0x10/0x10 [ 433.494412][ T31] ret_from_fork+0x4b/0x80 [ 433.494432][ T31] ? __pfx_kthread+0x10/0x10 [ 433.494455][ T31] ret_from_fork_asm+0x1a/0x30 [ 433.494489][ T31] [ 433.494497][ T31] Sending NMI from CPU 1 to CPUs 0: [ 433.653150][ C0] NMI backtrace for cpu 0 [ 433.653172][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 433.653193][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.653204][ C0] RIP: 0010:validate_chain+0x1c/0x2140 [ 433.653225][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 81 ec e0 00 00 00 49 89 cf 65 48 8b 05 14 ec d6 10 <48> 89 84 24 d8 00 00 00 8b 46 20 89 c1 81 e1 00 80 04 00 81 f9 00 [ 433.653240][ C0] RSP: 0018:ffffc90000147668 EFLAGS: 00000082 [ 433.653256][ C0] RAX: 4cca3b217790fd00 RBX: 0000000000000000 RCX: 3df1592f76153240 [ 433.653268][ C0] RDX: 0000000000000001 RSI: ffff88801b68c6f0 RDI: ffff88801b68bc00 [ 433.653279][ C0] RBP: ffff88801b68c6f0 R08: 0000000000000000 R09: 0000000000080000 [ 433.653291][ C0] R10: 0000000000000000 R11: ffffffff84be856a R12: 0000000000000001 [ 433.653302][ C0] R13: 3df1592f76153240 R14: 0000000000000001 R15: 3df1592f76153240 [ 433.653314][ C0] FS: 0000000000000000(0000) GS:ffff8881260cb000(0000) knlGS:0000000000000000 [ 433.653327][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.653338][ C0] CR2: 000055ddb2dc6018 CR3: 0000000027bb8000 CR4: 00000000003526f0 [ 433.653352][ C0] DR0: 000000000000000e DR1: 000000000000000c DR2: 000000000000000e [ 433.653362][ C0] DR3: 00000000000000b4 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 433.653373][ C0] Call Trace: [ 433.653379][ C0] [ 433.653387][ C0] ? rcu_core+0xc34/0x1710 [ 433.653410][ C0] ? stack_depot_save_flags+0x40/0x910 [ 433.653434][ C0] ? rcu_core+0xc34/0x1710 [ 433.653456][ C0] ? kasan_save_track+0x4f/0x80 [ 433.653473][ C0] ? kasan_save_track+0x3e/0x80 [ 433.653489][ C0] ? kasan_save_free_info+0x46/0x50 [ 433.653512][ C0] ? __kasan_slab_free+0x62/0x70 [ 433.653530][ C0] ? slab_free_after_rcu_debug+0x127/0x290 [ 433.653550][ C0] __lock_acquire+0xaac/0xd20 [ 433.653575][ C0] ? debug_object_deactivate+0x9a/0x250 [ 433.653599][ C0] lock_acquire+0x120/0x360 [ 433.653620][ C0] ? debug_object_deactivate+0x9a/0x250 [ 433.653649][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 433.653667][ C0] ? debug_object_deactivate+0x9a/0x250 [ 433.653696][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 433.653712][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 433.653729][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.653750][ C0] debug_object_deactivate+0x9a/0x250 [ 433.653778][ C0] rcu_core+0xc2d/0x1710 [ 433.653808][ C0] ? __pfx_rcu_core+0x10/0x10 [ 433.653831][ C0] ? rcu_qs+0xc4/0x170 [ 433.653853][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 433.653874][ C0] ? sched_clock_cpu+0x74/0x430 [ 433.653903][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 433.653925][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 433.653958][ C0] handle_softirqs+0x283/0x870 [ 433.653985][ C0] ? run_ksoftirqd+0x9b/0x100 [ 433.654004][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 433.654027][ C0] ? preempt_schedule_common+0x83/0xd0 [ 433.654047][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 433.654073][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 433.654097][ C0] run_ksoftirqd+0x9b/0x100 [ 433.654114][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 433.654139][ C0] smpboot_thread_fn+0x53f/0xa60 [ 433.654165][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 433.654193][ C0] kthread+0x70e/0x8a0 [ 433.654213][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 433.654238][ C0] ? __pfx_kthread+0x10/0x10 [ 433.654256][ C0] ? __pfx_kthread+0x10/0x10 [ 433.654274][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.654290][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.654308][ C0] ? __pfx_kthread+0x10/0x10 [ 433.654326][ C0] ret_from_fork+0x4b/0x80 [ 433.654342][ C0] ? __pfx_kthread+0x10/0x10 [ 433.654361][ C0] ret_from_fork_asm+0x1a/0x30 [ 433.654382][ C0] [ 434.032516][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 434.039414][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 434.051262][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.061345][ T31] Call Trace: [ 434.064650][ T31] [ 434.067606][ T31] dump_stack_lvl+0x99/0x250 [ 434.072238][ T31] ? __asan_memcpy+0x40/0x70 [ 434.076857][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.082096][ T31] ? __pfx__printk+0x10/0x10 [ 434.086739][ T31] panic+0x2db/0x790 [ 434.090678][ T31] ? __pfx_panic+0x10/0x10 [ 434.095127][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 434.100966][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 434.106371][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 434.112562][ T31] watchdog+0x102d/0x1030 [ 434.116925][ T31] ? watchdog+0x1de/0x1030 [ 434.121381][ T31] kthread+0x70e/0x8a0 [ 434.125489][ T31] ? __pfx_watchdog+0x10/0x10 [ 434.130199][ T31] ? __pfx_kthread+0x10/0x10 [ 434.134818][ T31] ? __pfx_kthread+0x10/0x10 [ 434.139436][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.144675][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.149909][ T31] ? __pfx_kthread+0x10/0x10 [ 434.154533][ T31] ret_from_fork+0x4b/0x80 [ 434.158979][ T31] ? __pfx_kthread+0x10/0x10 [ 434.163596][ T31] ret_from_fork_asm+0x1a/0x30 [ 434.168404][ T31] [ 434.171793][ T31] Kernel Offset: disabled [ 434.176125][ T31] Rebooting in 86400 seconds..