last executing test programs: 32m21.126046842s ago: executing program 32 (id=1): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r4 = userfaultfd(0x80801) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x45, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) r5 = eventfd2(0x4, 0x0) write$eventfd(r5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) lseek(0xffffffffffffffff, 0x4, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000440)={0x24, &(0x7f0000000300)={0x20, 0x24, 0x78, {0x78, 0x24, "f34e04ebc007f9555b830869fef0761b81f7aebe19fc96a351cb5720b8358b8d01bd251c184762d250bcf5191321308ee724e92210003b800e3677fcf3da9cd9b6627085dd594845405cad5946fd38f78adea9053f08a496bafaa4541eab89bbcfa4f9bdc47d751071c92355f53f89d729c0a16c1b4d"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}, &(0x7f00000001c0)=ANY=[], &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x65, 0x1, {0x22, 0xa4a}}}}, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x1, 0x99, "24fe70c172bc1b1e1f5062b7f9d04a31259e0eb6bc3b47ec1e195f424d3ec9302d4b4ad82d5e10411960f94225c20d0208b79bf3dad3590a467575bbfd0d81fd9a89711762140b9a937e09bd781df78be16bfe871ec8e6de1d4a000553c584621f6dd92a77694f0336bc80b197a3003dc0ed89cc1b77da884769731eeaec8ccaf3dd8aac9eb232b2bc36577c42c730c3f72ab2aed32277fd46"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0xc}}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) close(0x3) syz_io_uring_setup(0x8d0, &(0x7f0000000280)={0x0, 0x8a73, 0x2, 0x0, 0x274}, &(0x7f0000000300), &(0x7f0000000180)) 31m10.091541496s ago: executing program 33 (id=170): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="10010000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000006c"], 0x110}, 0x1, 0x0, 0x0, 0xc1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2f, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) fsync(r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x1, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x32, @multicast2, 0x4e24, 0x0, 'fo\x00', 0xa, 0x0, 0xd}, 0x2c) 15m57.574556846s ago: executing program 6 (id=2899): r0 = memfd_create(&(0x7f0000000140)='[\v\xdbX\xae\x1b\x1a\xa9\xfd\xfa\xad\xd1m\x00\x00\xfb\xff\x00\x00\x81\x9eG\xb8,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf\x03:\x99\x04\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5\x124\xd6\xd5%N&\xf8#\x02\x00\x00\x00\x00\x00\x00 \x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00'/124, 0x1) write$binfmt_script(r0, &(0x7f0000000240), 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)={0x77359400}}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="90000000000201080000000000000000020000047c0003802c00018014000300fc010000000000000000000000000000140004000000000019000000000000000000000106000340fd0000000c00028005000100880000002c000180"], 0x90}, 0x1, 0x0, 0x0, 0x20004001}, 0x2400c084) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r3, @ANYBLOB="a8057604e4b320"], 0x38}}, 0x80) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x4866, 0x0, 0xb, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_complete(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) close(0xffffffffffffffff) write(r8, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x23}, &(0x7f00000002c0)=0xbad, 0x0, 0x6, 0x7, 0x8, 0x3ff, 0x10, 0x3}}], 0x58}, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xfffffffffffffffe) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f0000000940)={0xed, 0x0, 0x9}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 15m54.117079982s ago: executing program 6 (id=2906): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000000540)) 15m53.925373947s ago: executing program 6 (id=2909): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x80fff, @empty, 0xfffffffc}, {0xa, 0x4e1d, 0x3bb, @mcast2, 0x7}, r1, 0x10000007}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r1, 0x136b}}, 0x10) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000066a6600836ffff3b006f375d7152f009f6294e51ee19025b084d77c2a0c8ae95f26a19", @ANYRES16=0x0, @ANYBLOB="020026bd7000ffdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x20000806) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000090bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xffb3}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00003ab000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0x81, 0x63, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x85, &(0x7f0000005f40)={r8}, &(0x7f0000005e80)=0xfc9e) close_range(r5, 0xffffffffffffffff, 0x0) 15m51.275386463s ago: executing program 6 (id=2912): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) mount$tmpfs(0x0, 0x0, 0x0, 0x10a40a2, &(0x7f0000000040)=ANY=[@ANYBLOB="f4697a653d"]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 15m51.123841941s ago: executing program 6 (id=2915): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001000)={0xf, {"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", 0x1000}}, 0x1006) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 15m49.609966106s ago: executing program 6 (id=2918): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e1f, 0x61, @remote, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000480)="a4", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) syz_usb_connect(0x4, 0x24b, &(0x7f00000028c0)=ANY=[], 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r2], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 15m34.159673581s ago: executing program 34 (id=2918): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e1f, 0x61, @remote, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000480)="a4", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) syz_usb_connect(0x4, 0x24b, &(0x7f00000028c0)=ANY=[], 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r2], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 8m32.171998892s ago: executing program 4 (id=3773): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x4}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) mount(0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$vbi(&(0x7f0000002680), 0x2, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000028c0)={0x7, @raw_data="aed16f177b85cc5a977e22d2b485898fac605cb781869370ba561d1a6c2387201aa9fcd8c6bd71922a0a79542efef3368ead229628d21b941ad1887f3ea8fbf80fae365c88c5bf2e2ccb2cd6f75c6819b60485d8fa2c31d3199abc0514f265e3f0d40fce52e11000894b51b9b2d4251b1b726aabb3ca7367b53d52a066a5cbf3a59817c87924157c6a34c0cb742979a27896fdb98f6ebed75e3e05c2e856350bb36739d5e63a5f3b4d506eeb722b56b02defce9212b6d161e4d7f19e40d1e65edd7f68a192452281"}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034700)=""/102400, 0x19000) creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) 8m31.33043685s ago: executing program 3 (id=3776): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nl=@unspec, &(0x7f00000000c0)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xda, &(0x7f0000000180)=""/218, 0xf6054b9c49695e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000600)="23e8d32682044b1aea93aa4555b24dafb496d785d0dbf07b4316168cc5a6a8dd21f376d97d75ce4960fc9312fb9bdc83b7949c4f2a43ab467980eeb1b152c47e352bd726a5133cd8015eb017ad81487f280481d1f9c4c0ce0b6b9fea711f5c639afeb7d2d788954750788986380c0a98ee1f118b24199ede4094292b9f6b62dd2a1913cc58fd7a3ac49f633632ac7e8c521596401e51844dae173a238d87f07168a59c64c68f5c5b64581739ebbd9df4b0834a26e2190aab93a140b21dbae9762b89d98b48399d1a365f02", 0xcb}, {&(0x7f0000000940)="447ee3b4212bcf35d142a87fda51c05cb118230e7a8a5a6f798db6e01cacb544f783a87cf17cd21e4338f7de5c6650ac158eb6002be85f5b8ac59e399b42e5ce19a463fabafee56ad00b8ab03fd98a9dd0bcec9910762b65bfd84af48626bb83398890ed03555a7cfe19ad55a4acb18418366625066bad998fcec03d8e2299d8cb46dab90d5af855a252620a4263866013764f842f4f887a7b264257fe4b2bea9d83d004caa5907778082b6720553e7a", 0xb0}, {&(0x7f0000000a40)="8f02e3565c52b0383438d682e9cec9094f652e51e7f42678ebc6cd97fd941160dac5cd0d308a6c3cdbeb0581a389241e31c4c1a3c7abb00e34d43f71680a0dcff53558527d9a680a7b19d151801ceb713158d845ef407bf9a371b48e7f6ac0702843f9790c371494ced6dcc0d3114240afe13b182d361f3171c48c7811ec2880ff0265c73f3856f6dacb8316d99d42336a6bbe3c81a438269e71efb8db01d1d2d31720ab6b3ef7985caf53d23bc3ecd7a4bed188d07f39dc9bf0474e3af67cb61d8c4504697f065527e14f1c761e50139194aac59785aaa8ac9707f2c2fc7a", 0xdf}, {0x0}, {0x0}, {0x0}], 0x6, &(0x7f0000001d00)=[{0x18, 0x109, 0x400, "df"}, {0x40, 0x88, 0x101, "d5bf05e7729cfa9f9355fe9def836b05ede6f32877b284065ca11fc037ed04497d3106656f151acf318533b157"}, {0x10, 0x0, 0x8}], 0x68}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/85, 0x55}], 0x2}}], 0x2, 0x220, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x2, 0x0, 0x5}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb1", 0x11, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52161448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x40800) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 8m30.25919472s ago: executing program 4 (id=3777): mount(0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f00000001c0)=@rose) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034700)=""/102400, 0x19000) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/150, 0x96}, 0x9}], 0x1, 0x60002000, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x29, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 8m27.931690462s ago: executing program 3 (id=3778): r0 = syz_io_uring_setup(0x119, &(0x7f0000000300)={0x0, 0x10004, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x20044000, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc4b0}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7fffffff, 0x88}}]}]}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xe}, {0xffff, 0x6}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000000)=0x1e95) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000001240)=@ethtool_drvinfo={0x3, "b0558f6f0c5edba3df6d08c7aa4309128fe98abcd82fd6e67a2b2afb9b0fd758", "debbeb289abdff97ffe93ca71b5dbfb66cdbd4e2e1c446c947864fbdcca3ac0e", "2d2d3809545eded48f57bf6640bfae31847e6076e651108d7ea527b41e4a28f7", "245c1eb211b5dafa08e145f7c12e22720ba159fb76dd235ef8ce38c0b2e8df30", "f9731310faf1ba8c5098063162ed8572f22a622ecffcd8af14cd6e06809bbfae", "8f13fd88aa2eabeeebcfdc6f", 0x5, 0xbc, 0x3, 0x7, 0x2}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000002000)=""/102400, 0x19000) open(&(0x7f0000000100)='./file1\x00', 0x4c242, 0x18) mount$nfs4(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={[{'intr'}]}) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 8m25.84611907s ago: executing program 4 (id=3783): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x5a1000, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) fchown(r1, 0xee01, 0x0) 8m25.595103722s ago: executing program 4 (id=3784): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000000c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x3e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x9, '\x00', @p_u8=0x0}}) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000040)=0x4) 8m25.202806496s ago: executing program 3 (id=3785): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r1, 0xffffffffffffffff, 0x1d, 0x0, @void}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 8m24.87812114s ago: executing program 3 (id=3786): ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x84) 8m23.979084772s ago: executing program 4 (id=3788): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000640)='sys_enter\x00', r0}, 0x18) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01e26f3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a2, 0xc}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12015001d3123610fb092a6036fd011203010902120001050000000904020000aa21e1648288788c0cda21ea578453f0f886c2ae044095c87a1532ed725900"], 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000200), &(0x7f00000000c0)=0xfffffdd9) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xffffffffffffff6f, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r5, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2d, 0x0, &(0x7f0000000580)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') openat$cgroup(r6, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f0000000000)={0xf, 0xffffffff}) 8m23.914026849s ago: executing program 3 (id=3789): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x34, r3, 0x7d8ddfeef1d5a877, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "62a2f5ff881ba4be71928faa2cd17d47"}, @NL80211_ATTR_SSID={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c090) close_range(r0, r1, 0x0) 8m22.854749899s ago: executing program 3 (id=3790): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x4}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) mount(0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$vbi(&(0x7f0000002680), 0x2, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000028c0)={0x7, @raw_data="aed16f177b85cc5a977e22d2b485898fac605cb781869370ba561d1a6c2387201aa9fcd8c6bd71922a0a79542efef3368ead229628d21b941ad1887f3ea8fbf80fae365c88c5bf2e2ccb2cd6f75c6819b60485d8fa2c31d3199abc0514f265e3f0d40fce52e11000894b51b9b2d4251b1b726aabb3ca7367b53d52a066a5cbf3a59817c87924157c6a34c0cb742979a27896fdb98f6ebed75e3e05c2e856350bb36739d5e63a5f3b4d506eeb722b56b02defce9212b6d161e4d7f19e40d1e65edd7f68a192452281"}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034700)=""/102400, 0x19000) creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) 8m21.34941605s ago: executing program 4 (id=3791): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0x70, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x24, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x7f, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000080)=0x9) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r6 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r6, 0x400000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x24, 0x21, &(0x7f0000000500)="0771954a88b952b532247ae4369854e39a5d0bf10eaea5371ddc9bbd44cfa86faf1c57f3", &(0x7f0000000540)=""/33, 0x6, 0x0, 0x89, 0x4c, &(0x7f00000006c0)="42a5b651063ff85609c750bc4f348eca9f36554b14b0d4baaec5504abf088bef7dd864e24ff8bc8949731ed4e594a56be97b9459ef1d5e972dd58732c29160cc345bc36c5a64237fe1318d0d83232f4cebabf637912774672daefe6f54cf68f063a82f5cd096c264ca14c7fa00275bc7594e2df9a43a5a790156bfe6dcc3721e2ef5b4ec1ac8b94a46", &(0x7f0000000580)="edd8b756889b535de0afc7ade09d01f3b7294bd345a6511eb6e97ad89f8ec3c2d6f70086e8036179a6d2806b9f6f7533018e72caa64c9bce26541a219de470d2e57cf08561f192a722f3bef1", 0x7, 0x0, 0x2}, 0x50) 8m6.954924675s ago: executing program 35 (id=3790): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x4}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) mount(0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$vbi(&(0x7f0000002680), 0x2, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000028c0)={0x7, @raw_data="aed16f177b85cc5a977e22d2b485898fac605cb781869370ba561d1a6c2387201aa9fcd8c6bd71922a0a79542efef3368ead229628d21b941ad1887f3ea8fbf80fae365c88c5bf2e2ccb2cd6f75c6819b60485d8fa2c31d3199abc0514f265e3f0d40fce52e11000894b51b9b2d4251b1b726aabb3ca7367b53d52a066a5cbf3a59817c87924157c6a34c0cb742979a27896fdb98f6ebed75e3e05c2e856350bb36739d5e63a5f3b4d506eeb722b56b02defce9212b6d161e4d7f19e40d1e65edd7f68a192452281"}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034700)=""/102400, 0x19000) creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) 8m5.838966482s ago: executing program 36 (id=3791): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0x70, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x24, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x7f, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000080)=0x9) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r6 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r6, 0x400000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x24, 0x21, &(0x7f0000000500)="0771954a88b952b532247ae4369854e39a5d0bf10eaea5371ddc9bbd44cfa86faf1c57f3", &(0x7f0000000540)=""/33, 0x6, 0x0, 0x89, 0x4c, &(0x7f00000006c0)="42a5b651063ff85609c750bc4f348eca9f36554b14b0d4baaec5504abf088bef7dd864e24ff8bc8949731ed4e594a56be97b9459ef1d5e972dd58732c29160cc345bc36c5a64237fe1318d0d83232f4cebabf637912774672daefe6f54cf68f063a82f5cd096c264ca14c7fa00275bc7594e2df9a43a5a790156bfe6dcc3721e2ef5b4ec1ac8b94a46", &(0x7f0000000580)="edd8b756889b535de0afc7ade09d01f3b7294bd345a6511eb6e97ad89f8ec3c2d6f70086e8036179a6d2806b9f6f7533018e72caa64c9bce26541a219de470d2e57cf08561f192a722f3bef1", 0x7, 0x0, 0x2}, 0x50) 7m0.985477404s ago: executing program 5 (id=3906): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)) mmap(&(0x7f000003a000/0x3000)=nil, 0x3000, 0xb635773f06ebbee6, 0x410c870, 0xffffffffffffffff, 0x5022d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010d0000000708b5192100c7000000000109021b00022071ac00090400000107000009090585cf"], 0x0) r2 = accept$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x36) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmmsg(r3, 0x0, 0x0, 0x10043, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000810) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000906010200000000000000000000bc38f0412a1a9fd7b5d55ea42fa7aa9c5114"], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_LIST(r5, 0x0, 0x4800) removexattr(0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xfffff) r7 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) r8 = socket(0x0, 0x6, 0x16a2) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), r8) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000002c0)={0x0, 0x7, 0x5, 0x6, 0xca, 0x8003, &(0x7f00000006c0)="f3c098645805424addc79c7744764ad9b2bbe11a35ee3258b4f8c611bb10e32b251fe2f32c9033f75db9df155feda91461533511988006b572060d02a5609c618226943c32f2b34474073e896d60c7352ac06e16d9780f8081fa74dad19cac9547c2775a882f4ca8d6632639929340fc2c53774801075165dd06fa08206b7758249534c757c5b1f7dbccdc7572c9ff7d7bce5a700c5b176a482ec374a5d1f57a64c0c83f4eea297d09274f39114e96d5353a4a925f6f1d8062eb420eaa8300"/202}) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="060000007f38aa84e79667bd09bdd0a9cce6a95b4635c7c2b3be97dead510f56489d34d02809bde6ce1542bc75b0fce120cf541ccdd3", @ANYRES16=r9, @ANYBLOB="00012bbd7000ffdbdf2503000000060001004e210000050003000600000004000500"], 0x28}, 0x1, 0x0, 0x0, 0x24008091}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f00000000c0), 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x3}}, 0x10) 6m57.980876278s ago: executing program 2 (id=3911): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 6m57.856863453s ago: executing program 2 (id=3912): mkdir(0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x11e, 0x1, 0x0, 0x300) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0xf, 0x8) (fail_nth: 3) tee(0xffffffffffffffff, r2, 0x9, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) 6m57.741934578s ago: executing program 5 (id=3913): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x5, 0x4896, 0x81, 0x7c66, 0x6, "e732b283c85f4d150000060100c97c00", 0xa, 0x4}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000b00)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) lsetxattr$smack_xattr_label(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.SMACK64IPIN\x00', &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x9, 0x0) 6m57.404591212s ago: executing program 2 (id=3914): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r5 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) syz_usb_connect$uac1(0x2, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9b, &(0x7f0000000380)=@string={0x9b, 0x3, "9c7ed838019ce633304308786adb6c5815d25064da2ed9b4cd601cd486c6542e6d3daa598bfb72a76a78e155bf62c7b098774c8a8a296640f70857d26459ae229178fcfc573e90f1d40ef98e28e654dd10bd2abb9facf7c471e0cab1d46ea88dd6a9e881835779d44da14dde5d5b7fbd19e8da2fb27e98ed916ab1aac7f1a93c89a919abff5b91d8fa303ad5f58f1b0c3763ff6f184d937921"}}]}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0xfa, 0xff, 0x8, 0xff}, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[]) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x20002008, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x4}}, 0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @local}}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7}, 0x9c) 6m56.875868424s ago: executing program 5 (id=3915): socket(0x1e, 0x4, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000014010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0009490000005438b5d84095de9c94d798ab572d246b88d67bc5059b05e60f19b18c37472fab7434"], 0x0, 0x0, 0x0, 0x0}) 6m56.165935202s ago: executing program 5 (id=3916): syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000016c0)={0x0, 0x5b, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x1, 0x4, 0xffffffff}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="580100001000010000000008fbdbdf25ac1e0201000000000000000000000000fc020000000000000000000000000000000200004e2000000000200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000400000000000000ffffffffffffffff00000000000000000000000000000000000000000000000002000000000000000300000000000000000000805600000000000000000000000000000000000000000000000000000001040000090000000000000027bd7000000000000a000100900000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001700010000002dbd7000605fee4b2bbd70002bbd70000900000007000000"], 0x158}}, 0x24000058) 6m54.990330534s ago: executing program 5 (id=3917): socket$kcm(0x21, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010003000000000000000200000000000001040000000800100004a15f6f41ce8700006e2515a091c0102379a74743e91ca57d393dc40086e377a5f211366c1bed", @ANYRES32, @ANYBLOB], 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@private1}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x0, 0x0, 0x0, 0x0, 0x0}) 6m54.405402825s ago: executing program 5 (id=3918): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000af00)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000002580)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f00000004c0)={0x50, 0x0, r4, {0x7, 0x9}}, 0x50) write$FUSE_LK(r1, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, r4, {{0xa, 0xdcbb, 0x2, 0xffffffffffffffff}}}, 0x28) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xff97) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r7}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000480)=r8, 0x4) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x5}, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x2, 0x48081) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x1}, 0x8) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 6m54.234364341s ago: executing program 2 (id=3919): ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd7000"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) 6m54.193503845s ago: executing program 2 (id=3920): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 6m54.067507253s ago: executing program 2 (id=3921): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_io_uring_complete(0x0) recvfrom$ax25(r3, &(0x7f0000000180)=""/29, 0x1d, 0x2, &(0x7f0000000340)={{0x3, @bcast, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000500)={r6, 0x3ff}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r6, 0x4, 0x2ce9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000980)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) unshare(0x600) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x64}, 0x1, 0x0, 0x0, 0x4008840}, 0x24000000) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pwrite64(r8, &(0x7f0000000780), 0x0, 0x2a2) 6m38.746376917s ago: executing program 37 (id=3918): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000af00)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000002580)="5536182daefa2fc6ee10a1b2d4e27cff3c3e628d4656f7b27979e371b15b420c01ae674ddb8fff7b2bc41e7c5927065cd32f2ff7908ef7dd74cdc82f3799ab12edbbfd0b8f6d2194d7f72aec3a136e25c7bf733436bf6cbfc94431ad053a2ec4ccac5aaada8a41ac38c0e1849e599dce84e431ac501db105b4484146b338c0ae9124877ccb8273c7fbb32603251e2d66c71398a7a715bcbe5c9d87e41af55f837e2931c4c1b6b7bbc30dfedfe6e61a39e28f66bbe56496745fbe03f6035183257edac4b0fe3087e7f3e79c2152a07341f3ae9ec68e78875b6e12b5a2a1abbcca4d7963be818a7a31290cad5a025ccd05b609c7ac49ea85d49f354c1e76091a917966665e77471005a46a195b290c01bb7ddf4709e94543471d87a0a5047d3631b00862e1e9a00c60b83371cc16ba087463122a892a1b21786fe3d450c7ba97799d88126f09a698a421242e9c67c981ebc576f57ba3df22e0071db74fa22e97b0fbe589894931a4c4e0eda8bb9533c4ce503fba218d0ae43ab4b4d0c705e04442d093ca5299ae8499c6db904bda6c68105bc2a1cd8e16067215476e573745d1e99daa73400567a9978dd7bffb21429479ace30c95afdfaebd7faf74343cd58e14ce6d2fada5a1c665049eeaa717ee681666c8b63c6d54e66df86144f85d80dcaa3ae7a13b58d5f2b607029efbbf8593afc75e0ce0a875a5fbedecb425a22624a0bb8e2fd06212a1fdafb92430d309f8f68504484fb1246f3d7b0893d3dc9d0b6c8d7476b6aea871eb4f32c283e22435fccb221484409cc28a6609dd869b99547fc81b2e517809a5b77783f9fc11b5fe584b9f64c0fec35d3db21ae30d0b8b88d722dea4a376d2a610f0a9d08b311e2ed3ef5d72d0e040e41d3dc45e5a17d740c67db88d95b18c8610fed3302aef0c3c1871ff8a5ae1908bf9668f0bc8e5867f56cc59cd303bafabde6a4034a96ba66b98a910dfaaff712673dcbf84c5354f066126068de620f08be67e6034138dd9a312f9ff197fca56a77bad46e59edfd79dfa3aee4582bfe01ce2201f6569178be7a4bdd28e495114944e538ee7b8f11e0812d9f822cd9760316809eccb9b0bbc5f0630224a1534f88600bbb2af2882562e76d149b44780380b62241829e5734fdfff1a2b3a052f3504dffe04d4632e9fef82762fe1950fbaceeb961464dfe2699f0a898fc8783cfdde45ecc3a16f052c4777beb1fddb080fc802a8cc760d1a0d4606b669e78ee9ba1ac398914ed5096850dedc513e5c71eca19d51af9075151f4ca3d8a841b7b1d205f5f3d223f7e48685daa0836f93017935ad1d942c7392667145ccc1d4700f5d8fb2fc218fd6d70357667d339a28dba3360761857b19f9f91e56a0e0281af1042a409a4e2839f3d21b73a5c352b22e4ff06e563e92c00b48e7f8bcdbbbd398c65331298f779dafe875854e301394b0faac2126138908fa8598b4f5e58ed1ac451eb0187e20077099d12d745fcff0b7fb5e8b9fa65ac617ea6c953e8786229b67a604c46810876650f919e6bc6792db22ec0be29cff94e9c24eb6e1830f890bb4b6bcd74b39060506095b99b95f2a8addfb8dfe11f47479fd23cc7c0701ae00774c430b3b9f52ab2579d47a2c2095365aa569f55a1431f93e651c01f0d67ff9337708a72e352c0e699f14bf07f9b9c056897c78edcf34ade3dfd17a04446d565fb6e7c701a237fe1a3d932371654a43b56e7f5ccdadc0f506d746c3f0047b69c0c174cbbfe092f139c09c0e2e76d9a777142813cb78174630ea8d73301e3343b94856fe610777468a9fb4518a0cf68243a4bd715e38e3431a811f962edb1306d76d89e0aad9be5800e7bebb82ccaec2382c9c114c91aee013acca2d8ddf99465e760bd185453a9eb4e5a78383094603b749c6242ad227124ef4b7ec7506b8a76f714099c954f0b2f2d427af0451a7ea3d1dbfa8a3e644c3640d397de3ce942311deb73fad3a76cba773f416314e81e70bda715b342113a18a249300b43250cb3b3aa46ecabe42d0e8c1dc4be286e539c71f0d1c0b0e1795ae7428a3887f36b79e9c76401a5dd460f45b9d8277e04c7c1e615fb33d0fbc444421f3fd0bff4e045d790610aaa2b62945e4b398024c75680b5e12235c35f5b23ddd99454fe527acad6d08fb37c35d9ecc0a8b10e2c31fac786666eb2ad499ddb7d06c7526fb1c5412f6a0df003410e69b81fe523057b6b73cdecf0e5bc4d3b87757889fe49dbdb3ec79c7eb3a868480fc87528e80400de837cccd4a6345508386ada1833f57a20c56e973569bc7821088d343e80009b7b35390975323d24e764aa6c90d3dd5fdec08ed363dc9ab57de949282994cd3858f829c7e5e9a745261383db27c9c53e9e98e109fda6cbb88649ba40b5067470d73b7471d406e5ea8041f9fa25f5b6c919aef84f7595511141e9f090ee103b20a13b22c9a88348ed6d284c0d7a58326e0c4c9626d9a5390bae2be199b201ea136a9aac76e6125db9bf58f61e6a46f8145a9df1305415989435f51529da03f09a67e3629e6f6cb6b70407d9d848f554f1a7e63602e678e62d3b41b4bf4ddda713ed2c291536d8cc12a16bde144ef56acc17778b1aa8eeeeeb60c781365b615be4435c7158d926351cdb46b89fa82acb384c7318dcb2e51db8bdb223aff2c8f36d9e6b1135ad18f7e0b9d91a76972c3140f8e21dc71422de12a4f5d08624bdaeb983619a5ff82cf788c6b8a5fbf0f78e61ae4058d6e03a3d5130646dfc13686e356a1325434caac94ced659529181561fee7ce4f7e1e7945f119ad8474ea6b00257ceb7af2d9b3f9ad5782cd986f1b097d61bf26a6c48c3ab597e4678d609f3050eec9f3bbea1bc67314407521950526e6d71e34e35392067ac84b66badc82a54bb0dc8ed2f1050711ef2d47af5252075c0441aad6900539fcc649c1b1ffc70a1cc39e0c2136c764ba718d50f4800dc29769c4bc9a2fd0f43eb6ffb717a473ccb14ccd58bd506c4e4a0f4ea1158b59b3d6bf1a2d010c456c1f099bff69add46cc60fd2d9779f603ebb943ab8eb02627ac8aebdd52f25b069f64a61e90fa9ac979cb4c6cf0ebcd070099a1a6e6a747e8989e84afe090390953f988f2dcee405086ce51b1d2d8d249f45899b4e862008d28efad8aa5abd0912fa456aa9d3a918a0dd3420d7c4b04b9e3d65c41a1548b7caeef5fbcededf64697786a0bae73d2c5352658b871c806bd150c91bbf8f4735dddee9cfd3e152b5d44cbcce912a2809760e225b9018fa498c86ccb2359cb0834bcefab92c0468522648fbefbe25cf8d82b897371b5369e8f2972502574c0a3235066969c4d5d67fc312d6631702f66a113d22063ba2ac7d9ab387ad1e115e9c98275f3e0dacd2e8f0843f24687b297bf42bca11b89c6db2fc7026d364486ef2d614bc45d5cff0758d69fd48ea06b8a97667e4d7d30bf7f1c30b62287637f50468bf144fd177fdabcbd0d12b50c9cbd052dcd66993c72f48bd6086412ed5f9af3d44dffdf7c012aadd5cf7bd3b314f236660fa1c0e4773a4e9ccc36fd130ffda59a9bf41f7fbf79e5e3333365a3ed2e7714e50805bc70bc6fd20203cacbbeecb8e01a2ce626756cdbd01c53717c2e7b56b47e21f13209c2bf2b1b251e7a93f8a085dcc61d9ae82303a962441372ff7c0b8b8ba75bbf5b861ff7ddbc9781d40c90ae467bdeddfdf949e9a8b8c9fb7db3a9323d05d15bef19ce2e7634b84ac082d50e84b66f99f34b2f852fefe67faa403e848f3de110eb1d9faefa176c3cacd20c7f87d74e858a1a7bfc2c9e895541f691f99a2b8771c8755300ee74e3d6a048b30d02ca16202ecfc207a0b29302aabc1c5b57c7d0d31d43be5cb1f7230dc238fb701e7037aa00c9b57c6fc85baccaa56754d27b975872051566187b0983d93b9ec052edf3b33f7ddab343eac6f7aed97771e708e40a4cc6797f85d91a0debd5c6169895e895f67a10685af5e0b80b0e728731cbffbff8be603469d03bd47dbca4456108c79c029af16482c5c2590c1e0673c7e943699ea107d906a3e667fe7b2afaeb489548b6a11d9862e86a0b549a42b607ffeda6e3ba0f567b63b0be6edb9098cf3a44e6864c5e99fa5f475acb57e2b7343eb7fe3e8c139b515348b188defd2d3021fd27950d822f6df5f9c93584fd95f3f88c85231943ed4d511249f96447f7903779e4d8c4a680661fe5133d415b862e668441e8077bfb827293a9eb733e914f37a19e01ad4b014ef87ed5a5817ab8123af9fd863090b8e9a50ce29cf706b2182fd79660cbdbb53ba71b750e71a21d0ed01db3335cad91d5cb4d4648f46468b6e51f63e4088386913ae6b6cbf103947c32d25a8a825118cd6ce23f53ffe3c087114700e9a5932faf3d844fc6b323b3e722ed3ed75037bd9a7fd9d256b2b9a168e66802e284853a0d6b47d39675900f02f005050425731f9c2cb329f70d7a5ce2ee256212bf8b2ba9ece0df39c58f0fbac06c4da946787abf19dadb536bddbf7e51d89f22413575e064c6482d936a89d48be159aeb5055feb0577ced6c5334411d1d58a7e6d02eca6164d90fda39685fd619269fea7f21db51f6aa6961250e03c9e00788c178dabeb68f13dea29f8cdcf30478dbca15c4519bb342ba8b201019061bf8317022dbc5673fb4ed92ef1a1dea0a1a00cb3cbca291f7ebcbec27ea5e824f04b82f5644d4368cdf8026550bc2f86b83da6a265357eb548a9eec6622204b3dcd22440fec0e12819ade4ba53b53b1e6ab906fe0cacabb9c15e8b657475a0dad62dbcb1037aa8617787abce24a0aa4cf1b5c85c030a14277832a95d8b29a4ea86fb80148ece147ce4bf386995ac28e1ad1e2072f3f4fce5c05d9bdd0af118815d6ee89aabfa3f8173e6fa59dfa4a8c1ba7641291b3c18c6ccc4c3588d56d169d397facb4e67485610cc68197b3a43fe78b9458dc47e5057d5bc6b8e3b65bf414818b65d41ed7cfd7a35fe79c9851ef39c3e059fb3dffe331a791ce75728efcd58dd9b3ed1c93b128469afa648f4f91de6e39d5bef7a0e69bdf5b2202682d857847a64b33432ea0f33bbfd1948ad0b6c66d853fef1e6c0d712b86c40f79ff4d125baebf2a4b32dfc8bed2a697f745cfeb16303b4f8e866ee0bb6a5eb6c6ce513b5cb84e2b44854c72ed0cf2e838245be8d098a6943d845f5a8c07c1036da86cab0d5be4ce29545fade4323acf2085b7645107dd12d5b3af7bb37be1b291cbd6fe297c4b4a2a23280358711be91f21305c035bf1f57467a1853c999b3fb478b11c49cfac66429a76099633a54689047d66fd8bd6eebea94fc8007d9e2765e2969608a78d0b96d6b30360e81fb9df5262c8ff15f2fd7000756d8cda1db3847d6f793bf803b159344c57b480c87702cb3d1260692a19ebdceb2e05a2fe2eb5ac5cfa76551a04795915bfaba9849a623e46ac1832157d0ea5255b5cacd4efa844b0ce5f2f0e1a9dc4fb115fce2640ec6d03c5fe15b4837bd6e6127349f2b6b0fd61c82c96531714f5b623ce4e4978c4a0c86b3c17f50acdd67d283ec934ed36ba7360a10ffeeb7864113eeaa25cccc66613e0757782381614b8da3cd0a85cef7bc384969517c920e8454a5a0f112d1653b2828e895d0614e5bf4dec0ec863432cce9337ce7c29affa7f29fff97bd54a6947cc68df8fed17850209242c1c67d0d7aced2efec4b3c006678bcb8716e8e9e40d78781fd6cc5b5522b8ed2ec8cecb677849b778c0a2a17817a3dd2278080e109906dd4e99b772d5911893fa09ade4296876921d1e009e714df7e4973ab1d2e593d88ecf2151e97ec66176549d3af66652c8377e162454ce7cc8ab34397d31978e84aea92a3c0a8106a2a31e33a8dfe942819fa1f2c1272d0f3cbd7dae820642cbc00202455ab7fb81857ef050a1965a291001874b38397ed9a8e8106dcfcdfd80d0f5d0ef0d5775e53cc5aeb1d6bc13886f8f3491cd6af5dd77ace3689fa2bf56e9b4d1e4964f8fd8f0a4a8b5d7fb678f0f3adcb4a19b5168ac5aeee6f087af15af3bde52a9be0f550b21b10ce98da70445284d9db9416732e63b6efb3ced984c0df50c11aa677f822af7ad39b8b4c0d236e4b36a00ff73587b39f917d7effbb37b95a96e350a430d544d68623c80bf2cd2d689b4dc41e8ef374c393092a2619055f268fbdcb9de494e6582be90a4798bac801bcac8389c823759860e7c9d692f41ee2a6b9624da3c09a2c8e7cdeaa100ba8ca25a737046d8bb237b9546641cfbb2eac9bbee9e125b14dfabac642e634d32151c06ceb3ddbb3d3f038ab2efdd063152270449ed5eca2655cd0016147ebbd00003eb8cd25297350afbffae43cfd9867543b81da4510850b1afaa199d0477837017e9098bf5b3973efe218a88b3d2bb172fe77278088997758fdc1dbb0b1fb6af2ab9db1ddf3e3fbd8e8dd35f918779ccba75b3cdfa317fc6e3cbeaa8b11ce2a30cc53292bcb9dc2a18ca400c674360c041c97ee6aec1448a025c6b04ae9efb3a01d31e3f897cfd5dc94dac95c88b95a26676cc6153e203535891116a5f4ebf54c71cbbe3215a04c57c7ba874a1e203bc66d8161d5b556f661244d9d405a2e6baaedd0d0e4c7e093c2ac0e5ee83b7ddf91669dd59016f7cb53d19896fcc838dc008da4a5fdc0a4fac1a6d7f49b24bcc01467df04d8a3f3181cc4e811942a53daf784b59186a17756a8f3a41ad93035a893a4ff60dd8f54a533e94cf87864169287804df3aa38dc5ce6021a06c58d48985c562a0f51d8b32879f9fb7d4a1d3d442626810f151b161b7e35f9a0b3bec05979e381140f31c03ee6f5549e6e7f116be5e87e0a9ab71ee632f837e9a0f9ad1b4979304c26bad6e84eff0b5b79b667e3d74e354d04f5b2c237102e41a1a4dcac99cbb911d9484aebe6ab2cb539a1db3e3302fb833a44a2d725e858ea9a65d43bb7661842b655c51a1ff25207956e8c6c71667c79975d69f688dfa34c59771488028e3d7500ba0cb71ae5751a51b568e67bdf2abb63838aba5e5cfbbeaf02285f6cbe58428a92a6fc25abb01f8d55ecbd7cc0ea69cdfb188b79048dbea488493681b0e70234463ca3e425d24e2ae4d800ce3adb04ce69428b5f884f8dc83392c22e456a2e195b86d717ac45003a99ae9a59c94167eb04aba3612528f94dad3360b46bc456fbb78072eb7f96418c71bec09831b0a63e83816ffde0d9909c06e765a666c2c41b20c339e0d39107311830ae9ad912f0a85f2ec5ca66a79798a568dae14f76b6d59e6c0bc0f9ebdff29c0fce58367c9705bd4323d3c3e125cdb13da6e58f3fdb2751401014e393e3fc688f04080a90430e531767a7c4f3187ccb7b90880955e766aba6091c4e8fed36482bb5a63372350dd08fe84bf5afd1a30a0f8f4de7a640fa84b9c0447073a0b39bf875d0377c8a572adefec3e033fb3dad91b22bfe22c01f23f27ab0c6a1ce19d2f4f4235281cbca15dafe50f383ba89a8c46a666b106c1ac534955df71f4c560010934fd3eb68eebd55487defa1e024f75ac30139cd190bde1dc8684936bc23a1882ae469fc4af8730d29658f996f71c219526497918e359228b55849d952f4b2996fe5f45a6cfdf87da93bfada579479b18d05c4e964c85b88a7bfc6e4f2b5d6e98e00635e8bd2ebb9eb40b99a9e9db2f688b2d94b8cc8c5fb2a1928624fa5df1c228e6499d992453772084bcd33dda984d97e3857b6fee43c6666b3206ccfe3af52debe5659dc186edd194b90309213f5c4805f454c7e57bc759377aae9727e484391486be0849c5cdfa99c5a0d0687d6afdce97a32e01d45fef015e7c869ca190219a778b91d881a7b595313fb462e5bf78260c78285d6ccf5e4c50ed56ff28e3f49912773f0a58093f259b5cf4e7f607c51a81576fa95b97bf32d0e2e3511b5d784eba29a15246a97ccf608db456cd70adacc6c31913416f24f38dec3544ac2e88c409b5ff7771d873ea8d7a1868775c8b5502273c784cf945680fb14f143140b56462cd46874ffeacde7bf329fe8369df9c4b95a42535ea56ad6fa260f5c738eb9627f890f4a34f80bf3b8fe568d44c3895029b5f9557f17469a53fe4c0d581eb29029ff162ca906cd0e4bb81138be91a254752bf849232ed7042a82cda1e14dfbfdf74a09c17a9039749c789ab0242ed2d0249231c4ad70c23c805676968bdeb96c2d8886f784ecc3e42e6493e45aa20b6e8ede65c49136c9e9414a4371e3012bf596d55315be17ea9396b1df7f82db27f0d121f8aa66c40365fa686a46f430b4cd336da0d9937d5c26284bdcc6c4e0d5a6acc1be089e1a5d6ec422ad3961fb5c5c9836466c3366e6d3f2686b19b529549cacb6252b0d7a7f5df42ea2961ac59ba0b911311ccc4d83f8611f0c4b071544236037b2863d673303a4e3d428131b07f60eb2cd507dc43503456ce829aed8254bf0b51b38008d42e445acb0effc2ab7e4bc26ad76ffba1220f2e878fe9b5de39bf4f25a9ed468cdb100008ffac6bef401df4817b23463e771a3c834c32993274689c01004eb94b89bc44257b7d2b3936caab6d86937b5bb8f705d00fb6f091711222b6dc25eeaa0e350fe484337396162c86bf7d3a1ab82591ad35d393664617041142c0f8b528e947c092f28c3142493d056bd548910615e7300f041f5d01a2f00138ae5d7849244ef9215f5c9dd874e60ca4ad883f86e71690a510831e35c24de1e0d1261172bf4a8625af958febb7b109c5ca5bfffd4342c43ad02136c6eb117b4a6ea98c07a91279731c1228b01e6be755c1c1d095d3cdfe950ac32eee77327a0e7e342ccfc13c69ab6ab113b18c1abe72d39c03e351986cb3326b8b17ada5884aa7d0a553b0d35e32b8c09f1a4106f5d675a88a1508de4a0e9c598c082ae5b229b75579e39e297b225a852e3f6a7d0990a45fdf68771991acf9b7a5c04bc21a40c57817d500e8ebc6b5919219a4110395817c92bf9eb9c623606d4d98ed68dc0b51a0278b0addce8753f86316158bb4bd6a7a0c4c72b0d17b9545695e54826021a6ac44b4de1b4ea977b20af3c47b8860b0ed29a68c1a883777097d54b162cc58edc0f4de1afbbad7c340a5cd9f2f93133cb2a4babc2a688e2ddd580ef8d9d0846c269c265ce9d978aa233c73aa11eb78d3a67f4e7a3dd035ef5a1f832ada87c7dfa377b77215f8c23b1a78e4a7faa6d0c1a4a28a0ef7b32b36bd566d8c478d0133ab43f9c2a4829624eec535234eb89a177ca8d4e9d2d422f33a24d15044822e4a4c1bca5f470b8c8fde09fb69160297218398da27f4e80dbd480782ee75cecd20ad23fdbcc1d4a0acbc63241c1e2cf1a0b12949e42f707ba06b6fdbd8f336bd72d7f96ddf9ec2b5cfcc4c8da6e1ea573e97eeaea537511ac9fd2ae78eb18cb50c13b595f8b6d65ce8c08e9028fffff6b512080dbbd3fb5e5068538c05f73254969f9727db9bff0c6aeaaf83713812499308792a7fc8318e6b2996bcd1b072641be1eb8e028cbd6b0a5f1fa13bfe35b5cd0d2ca21d9cf8ed97f724ef73ab5a99d65befa38d636f2f827d229479377f25501f3a6ece12cb095549503b2299db7806d32751d4851d62b0c6a91e2e961d475d33a8874c96df52c75bb5a0569e892743937451f75345e0351bfa334d37aa43f01ad1ff984dec164faebc713de31470db5e536a0681a042ced0f9839d9ce89259349075961985171c27c410c99458d4c25614ea1d4252293c4f85b0d2ded9ac560cfd024c199d5f0f4bd47763690ba1bca88b8cc81059bb9fe82c955488523114db8c2caf8a63c0049e90ca524330b57edcf718f6a7aab0efe282079d198cc3c1294f35d1a1bf5f69a8838cfc5d4363f9ca9383f83e4f9576de3fac48866ddcde282e5e4ee3f852a063bd6423ac1fdc6201b1facd6c36609fa2faf96afc1c0b76fff27bce059ad6390fd1e3f735806ce654ed555a78ea8e59fb16ff5ac5ad183aab9de37c3d033b3018d591e7ff1a896de969f561260f797603df5fc232076ccdc2e1fe9fc789253a54af151dd50f89e777c2541591101720c893647bd4b3e6257de85251c9bcd700154e85db2a9e2c4d9d2e531a18bfaa05d16ce75f823e60416b3afebce16555536120d5f554fd13e861d74c4947a62d2d09473d8d75f03d354572b371b02e16f3976b1b0b235582ee38d938fe843b107c77c2acd88f34e1669816eb3867134b1c5fce5afad3c70f9bca972ed494577f2ba6362a6ee6b4720bd86938bb49490982a1b5ce6dd54b79f093ce27051530e1233f03d6641392d4fe7a1f7dcec8ba86d8f32f00f0ad50a29b1e17de07bd0205c0d893532c198f23656f7f5d1d9c0745b7e0b7e8afdd29c8fa1639a06039980d9a5fba11801db4e7868a9b77925a03a770aae3430b1ccbddb8bd766f51fef71ba25cf9184c9cfa6f9921d69066d09a656080f3c5fe475ccab94cdfccd76f3c7dada9236d1be861eb5fe6247ae9f97b7705bb71c375e8b98203c5bd224202c1aa714da47e0daf98fd3eca617f9a255df5dbe98a7520a1e6db9b88af893521f2ecf7fd2b08a7f3c5aeb77ebe6f52739b473840889c41315407477b82242d9a805f9aa200a129c4701d1c88ccd34871f356caf02da9937a88612a9755315914f4e8e1bf471a46c00650457cc06db168e5457fb3f9662994d901a1f58306156979aa795afacc1a7d6111cbea53e97fb71c7bbe44558fb06f8d78ee08e3678b5d218e13f79cf06f1da9f7e128647884589c487147b3edbdaffa16f9388568d3c8caa34a6b944e4f171842cdbb293474fcd5201b7440e05ddcf9e0b476773119516ef45077705e8bab5f877657205bf9eaaa7c86734b1b6c3661dfd4b9eb8590f962e17ad51b44058d558744e5b44cf9db280bff1062b2431d298064f11e7700ba4c8ece6f4df659d4880c4983db0152f1f903023672f6234620134bd5d1d888022da128a527d82e8fa1a562827a4f1592efe3b0bb78060626e8688ef3d5162afe9f1060123dbb1f93b7bdb6ad4ad6e1772bf8705cca424d9c42e4992eb5bef1ec7961bd4260d1e55e863fa9c8e0cb6d28b495fa37b5f59fd18cfcec6319288dd7363821e47ec46664e1994157319eb0d466b42fd9b5fac5ba979a9baf4f699dc539bf77852e18014074f88108b654219e4f9396696c94eb9fb9b360e59920f187029608bed76d09dd006f4033d384cd109726d51850202ba564599dbff7808591f834cc4084db29111de86a70217defa490e39c6e281650d15b1e44bb55164be0f6da58e838bf5f4d7cc2a23b818557ab1fad0fb2253c4da6af41591940b2608f6fa6bc25939ede95317ff96050bbc1f389235caa78adc0d801a56b2fb4cc41e73d5131552985b5af241722e0637f3b88e46b09ea875e5cf66f534666368ff8e46413e5ab557236134afa63478e18328d33b1a235deb2034955cdbb2bfd0e55fd885f380ae8efca1feea985a946519a712df1384f9e024efec61c30a6989aa3b5bd486366f3fccadc0add175c1cf0d2730ab97370eb47bcda4226ee140edbcd9b38b8ee913587125cb185adb4df18e80df2b0ea6e3e87dc8755fe6823ab5ee1feaebb1e6208cf3dd5ad5581f2388be92", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f00000004c0)={0x50, 0x0, r4, {0x7, 0x9}}, 0x50) write$FUSE_LK(r1, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, r4, {{0xa, 0xdcbb, 0x2, 0xffffffffffffffff}}}, 0x28) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xff97) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r7}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000480)=r8, 0x4) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x5}, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x2, 0x48081) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x1}, 0x8) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 6m38.629839975s ago: executing program 38 (id=3921): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_io_uring_complete(0x0) recvfrom$ax25(r3, &(0x7f0000000180)=""/29, 0x1d, 0x2, &(0x7f0000000340)={{0x3, @bcast, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000500)={r6, 0x3ff}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r6, 0x4, 0x2ce9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000980)={0x0, 0x1000, "6b4eb46923735db204939de99ade8c29ddad79c07bbac01e550577b31b0aeb5cafbdcb968e9618b395bef5b6788559c9ce1ffd7a145339714a0d2ed45f0e96be631517413a70f0e8fd343a90864fbd0f9771092c16911c7546c4c6bcb440f5be8675786a19574b3b8aa5050b5de6de46def20adb0ba4c5feefa5b5d2f52f331ea7e154c0b13902028adf0b87ffb0447f3708633880f6b6c50af22a76917c2122b19759db49f3515f8ac0a92bcb25ba986fc4e10ab66a1b7db806e254ff681f2921b60a0fd898a2ccf369c6a22eb4be283be8ee08a6215723670160e245651c1f11de2b735a5c5c03798ca4274a66c26c9291ab5eb14f1568b5a7b983b38abd42fbdd1568a05c309907bd6d81471b8677bb457c7f2a52b45032b97e847fc81ea45366d7219a936a56feff7802438f5406a0a61dcaa7b7d0937404012e6569983483056dca2b3495015f03aaec315b2f0db339bc2a28befbd82d2d966f210aae8f211801019c8dade239e6142bca608ffbc7107d983b267f5562b38c6a0a25f1527ee31d48c96df90d61c8c766bf9b8233d8e8bc82655595bc120e1480f1fe696222b652f77a8e0a584743c0226442206bf0789250e21aaa7efc74cdce43630ff21accae5f065b7f0182657cd4695295adee5bef32579f871fefd6adca90eb54a8c9a8e4d4d943180b5686b3c643433022d100c2abe0a349e83fc4f1de4edfe070ea6b5c44d2ac25e7c4f0b65a2a31c49d33615e526c67e522d1b3d525194b0a77894dadaad56cc56e6cdaea8a26fae8472795c09353c91695fdf1e0af5d6b6e8324ef7193586486ddb9cc508c24440a92d22d217dbb8a5821b8bba1d955c5f79a5c67a3df9d8571006bca16304dae348b3c9bd87dbc5cac02e7b0993036b6bd3fb992a70c2e54d91514586905f063eec0727b5d319c02df431b909c2675555ae649f02af7f2553e92f14d9f9acfae0d00d42be369899604501d0d0074635a01a6e068e3aca72d55352401802bb522a9eee525a7ba04cc596fa6373772039d713c8f421ba06b59a111fefa5dad7bd46a8bb12ce164cb8f0923fe81fc44426565e2ba2bdc0b9f3203d4a8e9f0bd0408784f35cc7512afed29deeea645b5c2495be5533e7136ea0f34d88b985504d9d874455f775654cb2c902d70ccbd2fef4219fa2553091af0b0cc8f22a2182a161fd80014cf4e23e36dcd3c84724f0316e186066fe796c1daeb2360de263ce8f4db3cb2e0d8e6cd3252d6a4b9ea4f96f86c5287f214bd731027b3aa0260b3ddbf8bbd5ee5d65d4fc3fee74d191586cf6e889872c6e046896631043e46c57ccd81a4630d20051a53b5ee2d6cc087bcc0a57d3e2f19d52d7ff637793d363239cad4f255c8b75e001fd22783b8e9b16b8a50a67528d1036d7028fddaba376d9ef60d86d049254cc481f50016b320137b4fabe5368c4203245bf3d5e85066bea4618763d0565b4c7bbe2649b1004876b8342014fb931ce32b7c6d2eeeac436b7aae0757f74a414270c8d5722e23ae3963e6ef2e813dee434c3097e338e7b3239201722065ebfbe8feeabe39990c5413806609f78fc26c711421d00855922c3bcd7935da7fba68ce3a0229bf0df513b34b5634ff52c6008e82bc3af8c1427ea3747590e1b37a1db2a7113c27bcb09be20f10482d0ee14d576ab6b449dca01a69a1ab14791b6ba0e75d0213be52bdf9e79fd193793fc074c4e5b8d826ef9937d6b70a6fd9097acbf153eadba23961eed062708092320e5b5e6a2f73ab3c971153b65bee3f67e7a32f340a730741f54bd494144c676c1a3a4f43b7d734930700bfae4bfdb9e60ab8256dadf2f726065e673207bb8809b1bf3ef823eb7c7fd602c8a16d56ca02e1b8c49d3048c79d95e47add7e4b7894868c5de3dc2277832d1e0ce7dfbb5aba326acfa817c0a1063668af68d566d8031f16d7f39d1dc20d41f545d0856f8147c48fe183c30efae7443872f08fc391c0d2f8d90424115d97998e69b7252fa845b23d57e24ee8cb25320e3bd364b8aadbd8cd26cd98c108b7df53b40c262f212e23b19c7a4d24818561136a6db88c9a7f8b5336a937ee371e30e336d094add02b20985b92180aafcaa883866db076c161fb8f886564118e4d3bc1a1ad21fb3df017e5b9ad2d2e5bf956ac972225e487b22ec7eab89b3c774587bbc7a216b9b0758d2054a2f9a605a0548ebd8053c83ce9ffe0e6a563e46b355d38983207fa1051c010c05ecb4a6e3568876d53f214cbf2d4e42635c52d2281d5028271eb041cc2bad351ded9dd382ba4409a5b93c4f1e7fc368e2b9ceda8f26df50d10ef38362f5e6c92951ae7cec256b8ae79f1996b1463a8bb5ef1f1fda62aafb320f8e7badb021569a2da963f8146d3f24fa653b1e633f68a877a3220b2d955a13c46851d96d7c1cb118bd15a140bf2d31b161dbfe49a94c5bd4b567913b29ce0e4a3930b55e7598d39d2f6fc2d31e42e8d049300962cae1b17cc10ccf1494cf8fcfe91293b7eae3799a18bce3fe91ed1b1f64e0a1f3e6e506f61770bfb14c04e42369e00f2521624eccc598f343f6f5a99368ff970ea51060c7b1f959fd82b46c7ef2dd2b6b4f134d180061ecd232d9a08b2992c1fac1f7af0d276870646bb3dc942317cb296031930a8cc6f18cdaa9797be537137fd091609b60d703f2c64efe5594cabfca022a33c1d9313ae50d52714cc7741e8ee9d65b5819666a4c41e5a1bcfbb9b4ccd2745eba6b88f928aa58d326c717c40675ff845c4521a6ca052bbd10a010ee450029fa2471b39571b89bd76a21e883dadaeb5692e4ddf9c0a51c3598b986484737c1888cc453dbe4c248d6fa73454de4ec15eb24a308e95bc9b9b53bdadd9b2d483906a009836fe0084205cb5a96d0209a57ccf5baa42ae929e2bf7e1177d2ed0dbe99e93e3fd6c0e7e2d06cfd11d8b4689bf5bda0378c0187640ee4706bb190945e31e172aea3e225e98f63db18ece453d5698e30f545a8ec4dbbb03f08a440466cda81f2d70ddb2ddde63aec9e3aa7a80bbb46d2012f7d3954cae506ec8fe5751ac0fafbbaec4cee9e542ae9535aadd86c7072089c870e7e8072f0fdcc902f9affc30fff0cbcf2c32724c2f9bae7031f35c0a19c93a65950d16793689343613b93ed122fc7ebfad3aad4e96fce80b1ade2e3b8fef0da74c289aadaed94ee7a93f43cf51fc103654b8cab5f2f6adc82c2eda0a7ac9eb686d00458557611056f3b76439488ab1d469aeea42a76e930ca85f0a0b9c214a1054a1c166e2d33f45c4d5b608a1b6be4ea166b94115a1fb17c2969935f50df7b009ee62d19ada2705e5d3c29252d631aaa446044481479de8c7245db02fe41b338b1a5b968867ed0c7d7cd6f724b24e3d786076d20a0e0fc8b355d52f202a29849d01201501aebc36c09e6d880efc5552662d2e823d49deb24f5e5e272f455a86ef14b1d56f804cea9b1158480d3f56eb9e81f1bac93cfc7521749fcea787f6118a6afbb47eac4e44734a2405d788e2070f2ca4d5cca8c0313f2ac2f4df933caa249c1f079b41f9882dbe1a4bcea39e5e7c743d6625f0c23c840ff4c565b8a1d454afd49a718e437aef711981c20a5c760dfb32b1f6d3a278b5ecfd288b63f75126247ff543b652e30f47015126d5786699121764856b10ecf3793ee5558153c9a065bf44da79256f94db1f657a32cb44d4965e0a05eeb875c643850dc2e06ced45409ac1f15bfa716b588e5e4866e21bb8ab77103ff66af6b2f94c32a16760e1dba35758ea873ce0a39cf369121e973703cb08efe61f3a03bf80fa478b87bc6dc8a61b7689f962e7f8337c765219847de5880bee86fd4f9127f2aa3c576199e5b0793cf5aa538000dbee1cbefc1765a9ef69cdaa7e6256c8c52ffe9126ea7fb59c5cdbf44395a61882ec3a72b08e580a9409dfce9cd1ebd60ff5c53bd49713854783a34d43eef2bbec813ff4b53187cd06c7fb04361ffe746e4c7c324bfd6ff1832375693b2b09b631f3be20250922a48cd47216f22cc16dc13d829141347cc58f34bfc53ed352ba2b374890e266b7a8826a1ab23b8741529d6ee59a2f669b39451a1cb66b1644ac2d2a7cce9774b4d59b308241308467a3d076632b7f937636bd7a125ae47f3b2ecb6801ede960b6014895e56cf9e59fff763dd1e8760acea026669ca2ca0d241fd682134d1ebd3160b3cceb9dbe26e1290c56e3ac5a6e4c0f98411e9356740acc0efee9ceeea69f1245264b4703ba1c3355b11e3de8259c03aa107ece593b98166732b70d8d7b3ce5e2cbdf193e2248f676e11469b70b15481e45de4e4ee9bb87e8683dd37a2b83b206383d6c893f64142f8b4fe77cab431237027b7ab0846372be935154ba2d057f1e28f94112fb5c49e0f4e79eb362b44641abdc0e57ebb4ef2cdc895134e092f839cd9ae4b60110d7c920fcae48833a0c5756058b407e0231c3b6f0a8a48bdca83578cc12890d8ef9992b5308328ec5dbf91b25c6f7826877ead2c88900f8fa0f48d4de97c5f46b2ea70a4e576e3c2a566608d9bfe61f5534da96a24c1b424fa2368570a2908383eb635c8fd52d8aaa77a04e8eddf8b8984d819bb42c123d8a05ba10525e89c06bbcc55a308b364e887bb59c7e35cf3f9ac0d0491a315b805d9fceb20065ee933e5897627943944ae9048cfe426812a00a4029f35766823c88fad02934654c9e7ae27992a495351410332b432de8c00a4040034c4a4cffe154337b05adfadc064d28a1bd24773e39e2a2dbf91c3cd7b814df351a67982c0c6c4950207a79df43c1c4e4f2175ee94866d97cdc1aded3a8bcfc580915b1dfd05141d3525b3baa3ff2717d40e93ba5147c60ccaae2073e93c3c0ed584b7912543351af6c3117f2b9f029b56d6409bd7cbd8944089a1c6b17ae9766f09a30bd25e4acc180ba14472871f2a2bf30d1b2b67c94bd533bdbb8d530b116e02b264ae26045a72390be62605b69c3e4c633c08873477fcc6a36ddc5ef3725c74719ecec50d0109a09781b6f3e11fda231913b292084056b55cb7312b314daaaaf9700c5aa9dd1789b008ff4ca17960da0b2d5cf4b213cefbd8ad9576a89e06361923bd526565a778b30a2dc3d96f1218a33719be4ff43fad30635751db55a59cab2f37a1fc56eba125b5f1faf8bc04a841fa341548b8f2f6fc8629acaaa2c21c592896cfa6c11b949a31d37bcec88a8f0915d23e289444fcc0bc00eb2b104cf94a369aa939a88c5ecf4039adca4b5d4f6ffdbc79b74fd8b7a8803a7a81c053ebf98ea5075f656deec501d7cef78b8629ee3b3f8313b03c60cfb93495934a89367d55d8f5fb10c8965c5e947cecadc69e95db510bd5a61cdea8740cad7463b8b6ec72bba98bc1c5d642f2a49f49741731fb6561642b6d8e95aef9770a318a7a0ee4dd48acc5709760ee64ef6fe17716980dd22aa3d4beb5f5693b828414cb34a39b2ef5fd506318e4e474b451330e311ef97e1c450dcf3d9ad5a6f3d9d0edf0c52e5b3ce3bb3b1445fc29a73cdb417d49c5ffcdc7eacc3b02325fb6960d97e18b0075b2c3c25b5c494bc66dd7d443dd0b7fba69aa026b03ea209ad5e77c039d2f4ef72b1565e8ef149a9120d36536f2947d2dd4c4d6f94a502c3ad177912bf1c6d220b4711ec9577045acbc56b8c0e1d9ca8e15029f1d370bdbff9da784781cd147eb3043a058e5e02b73b85bad77591cf0de9d9ef2b5bee90a458ac07bb2227e2fbb2e9626dc692e5dc4131f48db4a0952c43e843dcc4b67ad047d9e15a87dca3dcdc3bc3033793fea118086346d8"}, &(0x7f0000000100)=0x1008) unshare(0x600) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x64}, 0x1, 0x0, 0x0, 0x4008840}, 0x24000000) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pwrite64(r8, &(0x7f0000000780), 0x0, 0x2a2) 11.833060755s ago: executing program 0 (id=4430): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x27, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}}}}) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4, 0x7}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r4, 0xd, 0x5}, &(0x7f0000000040)=0xc) 11.658171795s ago: executing program 0 (id=4431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x22000040) 11.619987876s ago: executing program 0 (id=4433): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000040000000000000024000000850000004800000095", @ANYRESDEC=0x0], &(0x7f0000000040)='GPL\x00', 0x200, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000004c0)={0x100, {0x200, 0x2, 0xa, 0x3, 0x0, 0x6}}) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xd9, &(0x7f0000003e40)=""/217}, 0x94) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="00061c000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4af82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000240)) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x880, 0x0) fcntl$getown(r3, 0x9) r4 = socket$inet6_sctp(0xa, 0x2, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000340)=""/254, 0xfe}], 0x2, 0x6162, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000040)={{{@in=@remote, @in=@dev}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) 11.493906568s ago: executing program 9 (id=4435): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) 9.886056043s ago: executing program 8 (id=4442): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2240, 0x0) r1 = dup(r0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x5, 0x4}, &(0x7f0000000040)=0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00', 0x58}}, 0x6, 0x8}, 0x90) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 9.78760165s ago: executing program 8 (id=4445): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}}, 0x0) 9.659819826s ago: executing program 8 (id=4446): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006040), 0x400883) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x200) r6 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r3) ptrace(0x8, r6) r7 = syz_pidfd_open(r6, 0x0) process_mrelease(r7, 0x700000000000000) rt_sigaction(0xf, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000100)=[{r2, 0x80cd}, {r0, 0x2508}, {r7, 0x120}, {r1, 0x40}], 0x4, 0x7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r9, 0x0) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x874fd42a7836ef64, 0x4}) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0xc8339d6d21f2db2a}) 9.434093128s ago: executing program 9 (id=4447): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) listen(r0, 0xda90) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x3) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25) 8.659969351s ago: executing program 8 (id=4449): socket(0x1d, 0x3, 0x27) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000570800024000000002080006400000000208000740000000080900010073797a30000000000900020073797a3200000000140000001100014000000000000000000300000a"], 0x9c}}, 0x4) socket$inet6(0xa, 0x1, 0x6) r1 = socket$netlink(0x10, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) r4 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}, {}, {}, {}], 0x0, 0x0, 0x0}) r6 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x0, [0x0, 0x6]}, {0x80000000, 0x0, 0x93b5af377af9c20f, [0x10000003, 0x10008]}, 0x4, [0x4, 0x80000001]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={r5, &(0x7f0000000240), &(0x7f0000000380)}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002abd7000fcdbdf25010000000000000001410000001832e3f5f8cc70bee800006574683a6361696630000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xc081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='rpm_return_int\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001cc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='rpm_return_int\x00', r7, 0x0, 0x8}, 0x18) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) r10 = socket(0x40000000015, 0x5, 0x0) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_INSNLIST(r11, 0x8010640b, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0xa000005, 0xffffffffffffff19, 0x0, 0x0, 0x3}]}) bind$inet(r10, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 8.498080549s ago: executing program 7 (id=4450): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=@newtaction={0x114, 0x30, 0x401, 0x0, 0x0, {}, [{0x100, 0x1, [@m_xt={0xfc, 0x20, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xa8, 0x6, "1235805ecc1c5be7b65580765e8909bc920f4ee2fc36265823d68833f40eb034203ba4dbda3c6b89f0d6209afadfbe36474b97658ce06b0c84d1b0dda448136da9d230eed10cc3e34ce66d8c1d73fc520c89e69e790005e94cb3a021430656c1cf2672019cd33ea2b4c1892d8971dbbd86f8307841b42c5558aa8167a0d4559b12a2d01297571599c9077a816640f09d7446ac4d947ae6db806a822278caf4bcfc1a3d10"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x850}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) listen(r1, 0x80) 8.497653362s ago: executing program 9 (id=4451): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@host}) 8.479110859s ago: executing program 1 (id=4452): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x800) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x406242, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x4) sendmmsg$alg(r6, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 8.217451346s ago: executing program 0 (id=4453): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettaction={0x30, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$tun(r2, 0x0, 0xa2) (async) write$tun(r2, 0x0, 0xa2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x98, 0x0, 0xb49, 0x9, 0x9, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) (async) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000040)=0xa, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES64=r3], 0x0, 0xb, 0x0, 0x0, 0x89ff}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xdc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xdc) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r6, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) (async) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) 7.38784224s ago: executing program 7 (id=4454): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0xc7) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file1', [{0x20, '\',\':]..('}], 0xa, "74c5c61eda"}, 0x19) 7.230009293s ago: executing program 7 (id=4455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0xc, r2, 0x3}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x6, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 7.088257222s ago: executing program 1 (id=4456): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}}, 0x0) 7.005355921s ago: executing program 1 (id=4457): setreuid(0x0, 0xee00) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007081c000a0004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0xffc2}], 0x1}, 0x0) 6.936980915s ago: executing program 1 (id=4458): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x10) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8020000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xa}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c00)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, 0x0, 0x20004000) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x3a) r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x74, 0x2, 0xa, 0x202, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x5d, 0x6, "a028a829405d18d76fe3ce4b928955ec9b070711c8adc6c1d627613297d8e334c50a13d876d5b02f647a01a6acd67d1e3d60c1ee0655dbdde26da66bd9b2135c4eac356314277e031659432441493e78e793210453d4a20463"}]}, @NFT_MSG_DELRULE={0x9c, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8906}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}]}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}]}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x11c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xc8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2c62}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0xa4, 0x9, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x5c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x921}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff6}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xff}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x418}, 0x1, 0x0, 0x0, 0x4040815}, 0x10) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) syz_usb_control_io$sierra_net(r6, 0x0, &(0x7f0000000100)={0x1c, &(0x7f00000001c0)={0x40, 0xa, 0x2e, "be3eed58c272f0888c15904684730d54b93add028e0fa81de615a266538156897d49bc5ded8bee1008aa329dd548"}, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x2e, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x10000, @mcast1}, {0xa, 0x0, 0x0, @empty, 0x20000}, 0x0, {[0x0, 0x2, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x10e, 0xe}, {0x18, 0x110, 0xe, "ff79"}], 0x28}, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000000000000b000004000"]) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385a0700000000000000b6bc436a00", 0x10) 6.907800139s ago: executing program 9 (id=4459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) getgid() 6.762014367s ago: executing program 7 (id=4460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x190, r7, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde1cb637}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffac84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x49619e2b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x990}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x58000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) getgid() 5.764894966s ago: executing program 8 (id=4461): r0 = socket$inet6(0xa, 0x5, 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x8, 0xb}}}, 0x7) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1c4, r11, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f3b5379}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x869a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59e7c063}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x109d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b797869}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ea5b4df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x452e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5af51447}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x246d18cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f54fca2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b876345}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x538e44f8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6147c08c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb43f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ff09c01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe386}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x615d49d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13257210}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a774966}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf2e272f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x578d906}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ac67c1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x78, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33dd5d40}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e1822b7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c55}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73d1b081}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3474ad83}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52d424be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3994}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1399a457}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x357bbffa}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66c64f16}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56d29303}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49e69fed}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4}, 0x20000808) r12 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDADDIO(r12, 0x4b34, 0x9965) pwritev(r12, &(0x7f0000000940)=[{&(0x7f00000006c0)="31d9d0670a6eb4bffd6e284f5d404ebf45af3397d6b0040df147f5fb47963c8ab8435d694ed4900d3d6abab6c78fa0f161bde41743cb61e71b68e847c0903e6e7adad9441145efda171034cca28cfb385ad16c8a6b7aeb8220d6f14337e8ff1f", 0x60}, {&(0x7f0000000740)="bbbdc39869f156d3cf5799b37ee4dde5180086db670f0977d3212b8399f4432a5d52d3dd2d54ef57a68e3f50f01ff513f63df31a32fbbce79fe4c67c8423c1d24fb1ea731ec1bc495765dda56b5e93e017405463cbe8df64972b0fa4a3534ccf9e3e948b15f0cbd0b30bcd38258a060dcef72c760c50eb0cb6f19cd271bb908900df77b7a749e051764661168f6f3790877ff9413bb58bf8aaf57ec55244bce5df5f8c29e1e4b66f7a6799a6ee61c24cd7f516315e02e70d222954c9a75bb014962ca8286ab8220d6c69853afa24a96e49bb2fd1f2ebfef4a3d0050635b20e52d89d54b6007b", 0xe6}, {&(0x7f0000000840)="ecac057e63a1636705f2c10422103793d3f33cb11e2204531847bab23ef87252545a28eda947dbc55f653e1385a0739e5ef9b6b2125db8d049d39f7df0816b5c92095ddc0fb536d490db30b25edfbcd31a0f4197b78d71efcfce591ea9a4ff4ab22cb07e1e810b7b08fe5ddc0904a2363a1b16050c2ae8970faed7831cf4528c09b8f5081dc0ed9cc2d5559278ecec570033382f036c39305eca66f2", 0x9c}, {&(0x7f0000000900)="ced9fd2de26f7ea230b2a5", 0xb}], 0x4, 0x1, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r13, &(0x7f0000000cc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a00)={0x27c, r14, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4c}}}}, [@NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2a2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x40}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x82}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe430}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x20000000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e5}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xa13}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffffc}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x6, 0x97, 0x6, 0x3d734, 0x1, 0x1]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd0b5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x13b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffa}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x49}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x74, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xca, 0x40, 0xb2a3]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x3, 0x7, 0x7, 0x0, 0x0, 0x1, 0x3]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1739}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ab}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb602}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}]}, @NL80211_ATTR_CQM={0x78, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6858}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x2271, 0x1000, 0x2, 0x1, 0x2, 0x1, 0xfffffff9, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xffff9c6b, 0x80000001, 0x1, 0x3ff]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x6, 0xfffffeff]}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7, 0x7682659f]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x921, 0x6, 0x1ff, 0xfffffffb, 0xffffffff, 0xb2, 0xd10, 0x6]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5f5}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$nci(r15, &(0x7f0000000d40)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x6, {0x4, 0xb, "a0f679d449a1dd037d5562958271a149f6908f58d4a0ecb6d9a6da124d57a994c40699a6b654330a52234c1a820d2fd4a04179914078986a1550a0a15fcca7d4869e7163c360f9597fc8704e961fce6eff74a5116c23dd667dc5d172e1e8b1e4aed077"}}, 0x68) close_range(r13, r0, 0x2) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000dc0)={'wpan4\x00'}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f0000000e40)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r10, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x54}, 0x1, 0x0, 0x0, 0x44001}, 0x8000) 3.207434391s ago: executing program 9 (id=4462): socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x119, &(0x7f0000000300)={0x0, 0x10004, 0x80, 0x2000000, 0x3a2}, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r2, 0x803) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604000000014060100000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500600009078000f"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f00000004c0)={0x80000000, 0x8, 0x3c, "4e7fcfa35cd2dcffbe996dddd049c3e49a32db5de3f8cd524c878708368fbda8a9bb341bf46f2ecc1bc79588300322dcae709ae635c8ba5d2c338d77", 0x23, "2da7e81e511d3c2c15fb261eee1cfa396df5664e2664f8124a99437eb58f894aca2b139d288e45483c202ab776f9c9a2ccabd1c57f87e8f947e8f635", 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000001c0)="3f4e55f0ece2040300a8212c99e6a9c980dfa2dec3b949ca52c3818f857073d24328f39b4400"/47, 0xffffffffffffffbd) 2.417911287s ago: executing program 7 (id=4463): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) fanotify_init(0x0, 0x40000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x474083, 0x15, 0x8}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64], 0x38}}, 0x10) 2.398613196s ago: executing program 0 (id=4464): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=@newtaction={0x114, 0x30, 0x401, 0x0, 0x0, {}, [{0x100, 0x1, [@m_xt={0xfc, 0x20, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xa8, 0x6, "1235805ecc1c5be7b65580765e8909bc920f4ee2fc36265823d68833f40eb034203ba4dbda3c6b89f0d6209afadfbe36474b97658ce06b0c84d1b0dda448136da9d230eed10cc3e34ce66d8c1d73fc520c89e69e790005e94cb3a021430656c1cf2672019cd33ea2b4c1892d8971dbbd86f8307841b42c5558aa8167a0d4559b12a2d01297571599c9077a816640f09d7446ac4d947ae6db806a822278caf4bcfc1a3d10"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x850}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) listen(r1, 0x80) 2.379822231s ago: executing program 1 (id=4465): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0xc7) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file1', [{0x20, '\',\':]..('}], 0xa, "74c5c61eda"}, 0x19) 2.090163527s ago: executing program 9 (id=4466): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x3, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000884000/0x1000)=nil) setrlimit(0xc, &(0x7f0000000000)={0x4, 0x6}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="e8", 0x1}], 0x1}}], 0x1, 0x20004050) 1.892459252s ago: executing program 1 (id=4467): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) 764.791932ms ago: executing program 0 (id=4468): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x4010, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x80000001) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="89", 0x1) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f15000000fd07000003000000839d0000006100005f2e0036d456275eb9d645de533272de35eec844c5c352c4f8625379e861aebc38b75f254c7533b9baa1e1a6a390c95a"], 0x0, 0x37, 0x0, 0x9, 0x1000}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x50, r1, 0x4e4ff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) r6 = syz_open_dev$rtc(&(0x7f0000000000), 0x2, 0x101000) ioctl$RTC_IRQP_READ(r6, 0x8008700b, &(0x7f00000000c0)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000001c0)=0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 709.004577ms ago: executing program 8 (id=4469): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@host}) 0s ago: executing program 7 (id=4470): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000540), 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x6, @vbi={0x0, 0x5, 0x9, 0x0, [0x6], [0xc, 0x8], 0x1}}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x5, 0x0, &(0x7f0000000100)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a340)=""/102384, 0x18ff0) rt_sigqueueinfo(0x0, 0x11, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x10b100) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {0x0, 0x20}, {}, @control={0x0, 0x7, 0x8}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) r6 = getpgrp(0x0) ptrace$setsig(0x4203, r6, 0x3, &(0x7f0000000340)={0x15, 0x5, 0x100}) r7 = socket$inet6(0xa, 0x80003, 0x6) r8 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) syz_clone3(&(0x7f0000000600)={0x80880, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480), {0x1e}, &(0x7f00000004c0)=""/128, 0x80, &(0x7f0000000540)=""/125, &(0x7f00000005c0)=[r2, r6, r6, r2, r2, r6, r2, r6, r6, r2], 0xa}, 0x58) sched_getscheduler(r9) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000611979000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) kernel console output (not intermixed with test programs): latform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1849.030563][ T5997] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input86 [ 1849.372950][ C1] vkms_vblank_simulate: vblank timer overrun [ 1849.628864][ C0] igorplugusb 8-1:0.0: Error: urb status = -32 [ 1849.904744][ C1] vkms_vblank_simulate: vblank timer overrun [ 1851.103848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1851.424505][ C1] vkms_vblank_simulate: vblank timer overrun [ 1851.749277][T19929] hsr_slave_0: entered promiscuous mode [ 1851.757879][T19929] hsr_slave_1: entered promiscuous mode [ 1851.766796][T19929] debugfs: 'hsr0' already exists in 'hsr' [ 1851.766829][T19929] Cannot create hsr debugfs directory [ 1852.353890][T16972] usb 8-1: USB disconnect, device number 10 [ 1852.545891][ C1] vkms_vblank_simulate: vblank timer overrun [ 1852.637070][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1852.642568][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1852.660568][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1852.662047][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1852.690000][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1852.807916][ C1] vkms_vblank_simulate: vblank timer overrun [ 1853.709213][ C1] vkms_vblank_simulate: vblank timer overrun [ 1853.759772][ C1] vkms_vblank_simulate: vblank timer overrun [ 1854.012518][ C1] vkms_vblank_simulate: vblank timer overrun [ 1854.757436][ T5800] Bluetooth: hci5: command tx timeout [ 1854.958317][ C1] vkms_vblank_simulate: vblank timer overrun [ 1855.536003][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 1856.084825][ C1] vkms_vblank_simulate: vblank timer overrun [ 1856.874777][ C1] vkms_vblank_simulate: vblank timer overrun [ 1857.252386][T18740] Bluetooth: hci5: command tx timeout [ 1858.558153][ C0] vkms_vblank_simulate: vblank timer overrun [ 1858.593851][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.593941][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.915551][ C0] vkms_vblank_simulate: vblank timer overrun [ 1859.207062][ C0] vkms_vblank_simulate: vblank timer overrun [ 1859.303686][T18740] Bluetooth: hci5: command tx timeout [ 1859.557006][ C0] vkms_vblank_simulate: vblank timer overrun [ 1860.523970][ C0] vkms_vblank_simulate: vblank timer overrun [ 1860.563037][T17375] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1860.715835][T17375] usb 1-1: config 5 has an invalid interface number: 2 but max is 0 [ 1860.715869][T17375] usb 1-1: config 5 has no interface number 0 [ 1860.719172][T17375] usb 1-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 1860.719205][T17375] usb 1-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 1860.719228][T17375] usb 1-1: Product: syz [ 1860.719245][T17375] usb 1-1: Manufacturer: syz [ 1860.719262][T17375] usb 1-1: SerialNumber: syz [ 1860.761670][ C0] vkms_vblank_simulate: vblank timer overrun [ 1861.209867][T17375] ftdi_sio 1-1:5.2: FTDI USB Serial Device converter detected [ 1861.211005][T17375] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 1861.215436][T17375] usb 1-1: USB disconnect, device number 7 [ 1861.218049][T17375] ftdi_sio 1-1:5.2: device disconnected [ 1861.375809][T18740] Bluetooth: hci5: command tx timeout [ 1861.378245][ T5932] bridge_slave_1: left allmulticast mode [ 1861.378277][ T5932] bridge_slave_1: left promiscuous mode [ 1861.378578][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.558761][ T5932] bridge_slave_0: left allmulticast mode [ 1861.558807][ T5932] bridge_slave_0: left promiscuous mode [ 1861.559106][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.020784][ C0] vkms_vblank_simulate: vblank timer overrun [ 1862.355404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1865.939077][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1865.973958][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1865.995973][ T5932] bond0 (unregistering): Released all slaves [ 1866.662029][ C0] vkms_vblank_simulate: vblank timer overrun [ 1867.653121][ C0] vkms_vblank_simulate: vblank timer overrun [ 1867.773021][ C0] vkms_vblank_simulate: vblank timer overrun [ 1867.860661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1867.952962][ C0] vkms_vblank_simulate: vblank timer overrun [ 1867.984533][ C0] vkms_vblank_simulate: vblank timer overrun [ 1868.054216][ C0] vkms_vblank_simulate: vblank timer overrun [ 1868.124826][ C0] vkms_vblank_simulate: vblank timer overrun [ 1868.200356][T20093] chnl_net:caif_netlink_parms(): no params data found [ 1868.255626][T20168] FAULT_INJECTION: forcing a failure. [ 1868.255626][T20168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1868.255666][T20168] CPU: 0 UID: 0 PID: 20168 Comm: syz.0.4040 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1868.255693][T20168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1868.255706][T20168] Call Trace: [ 1868.255715][T20168] [ 1868.255727][T20168] dump_stack_lvl+0x189/0x250 [ 1868.255766][T20168] ? __pfx____ratelimit+0x10/0x10 [ 1868.255798][T20168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1868.255831][T20168] ? __pfx__printk+0x10/0x10 [ 1868.255879][T20168] should_fail_ex+0x46c/0x600 [ 1868.255916][T20168] _copy_to_user+0x31/0xb0 [ 1868.255945][T20168] simple_read_from_buffer+0xe1/0x170 [ 1868.255983][T20168] proc_fail_nth_read+0x1b6/0x220 [ 1868.256013][T20168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1868.256041][T20168] ? rw_verify_area+0x2ac/0x4e0 [ 1868.256069][T20168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1868.256095][T20168] vfs_read+0x206/0xa30 [ 1868.256134][T20168] ? __pfx_vfs_read+0x10/0x10 [ 1868.256158][T20168] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1868.256195][T20168] ? mutex_lock_nested+0x154/0x1d0 [ 1868.256219][T20168] ? fdget_pos+0x253/0x320 [ 1868.256259][T20168] ksys_read+0x14b/0x260 [ 1868.256289][T20168] ? __pfx_ksys_read+0x10/0x10 [ 1868.256322][T20168] ? do_syscall_64+0xbe/0xfa0 [ 1868.256357][T20168] do_syscall_64+0xfa/0xfa0 [ 1868.256384][T20168] ? lockdep_hardirqs_on+0x9c/0x150 [ 1868.256415][T20168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1868.256437][T20168] ? clear_bhb_loop+0x60/0xb0 [ 1868.256464][T20168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1868.256484][T20168] RIP: 0033:0x7ff2762be0dc [ 1868.256504][T20168] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1868.256524][T20168] RSP: 002b:00007ff27451e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1868.256549][T20168] RAX: ffffffffffffffda RBX: 00007ff276515fa0 RCX: 00007ff2762be0dc [ 1868.256564][T20168] RDX: 000000000000000f RSI: 00007ff27451e0a0 RDI: 0000000000000005 [ 1868.256587][T20168] RBP: 00007ff27451e090 R08: 0000000000000000 R09: 0000000000000000 [ 1868.256601][T20168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1868.256614][T20168] R13: 00007ff276516038 R14: 00007ff276515fa0 R15: 00007ffe8e6bc1f8 [ 1868.256653][T20168] [ 1868.735978][ C0] vkms_vblank_simulate: vblank timer overrun [ 1869.517846][T20174] ptrace attach of "./syz-executor exec"[19603] was attempted by "./syz-executor exec"[20174] [ 1870.010367][ T5932] hsr_slave_0: left promiscuous mode [ 1870.072953][ T5932] hsr_slave_1: left promiscuous mode [ 1870.074198][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1870.107854][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1870.383138][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1870.947547][ C0] vkms_vblank_simulate: vblank timer overrun [ 1870.983528][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1870.983575][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.983599][ T9] usb 8-1: Product: syz [ 1870.983616][ T9] usb 8-1: Manufacturer: syz [ 1870.983632][ T9] usb 8-1: SerialNumber: syz [ 1871.129984][T20182] nfs4: Deprecated parameter 'intr' [ 1871.240796][T18740] Bluetooth: hci4: command 0x0406 tx timeout [ 1871.384784][ C0] vkms_vblank_simulate: vblank timer overrun [ 1872.144052][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 1872.504160][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 1876.103721][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -ETIMEDOUT [ 1876.103795][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -110 [ 1876.103819][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1876.147258][ T9] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -110 [ 1876.169386][T20180] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1876.236183][ T8379] usb 8-1: USB disconnect, device number 11 [ 1876.604566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1876.623045][T17375] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1876.803510][ C0] vkms_vblank_simulate: vblank timer overrun [ 1877.121348][ C0] vkms_vblank_simulate: vblank timer overrun [ 1877.224424][ C0] vkms_vblank_simulate: vblank timer overrun [ 1877.239708][T17375] usb 1-1: Using ep0 maxpacket: 32 [ 1877.242227][T17375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1877.242262][T17375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1877.242296][T17375] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1877.242325][T17375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1877.297837][T17375] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1877.297875][T17375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.297898][T17375] usb 1-1: Product: syz [ 1877.297914][T17375] usb 1-1: Manufacturer: syz [ 1877.297930][T17375] usb 1-1: SerialNumber: syz [ 1877.335925][T17375] usb 1-1: config 0 descriptor?? [ 1877.358792][T17375] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input87 [ 1877.400102][ C0] vkms_vblank_simulate: vblank timer overrun [ 1877.481141][ C0] vkms_vblank_simulate: vblank timer overrun [ 1877.578978][T20192] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1877.839941][T20093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.840104][T20093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.840394][T20093] bridge_slave_0: entered allmulticast mode [ 1877.845847][T20093] bridge_slave_0: entered promiscuous mode [ 1877.854004][T20093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.854387][T20093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1877.854664][T20093] bridge_slave_1: entered allmulticast mode [ 1877.857858][T20093] bridge_slave_1: entered promiscuous mode [ 1877.897891][ C0] vkms_vblank_simulate: vblank timer overrun [ 1877.963473][ C0] vkms_vblank_simulate: vblank timer overrun [ 1878.556831][ C0] vkms_vblank_simulate: vblank timer overrun [ 1878.619912][ C0] vkms_vblank_simulate: vblank timer overrun [ 1878.826267][ C0] vkms_vblank_simulate: vblank timer overrun [ 1879.067817][ C0] vkms_vblank_simulate: vblank timer overrun [ 1879.143202][ C0] vkms_vblank_simulate: vblank timer overrun [ 1879.195466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1879.340087][ C0] vkms_vblank_simulate: vblank timer overrun [ 1880.335676][T20093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1880.394515][ T9] usb 1-1: USB disconnect, device number 8 [ 1880.416050][T20093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1880.538985][ C0] vkms_vblank_simulate: vblank timer overrun [ 1880.641913][T20217] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1880.703149][T20219] netlink: 'syz.7.4053': attribute type 3 has an invalid length. [ 1880.872773][T20093] team0: Port device team_slave_0 added [ 1881.167051][ C0] vkms_vblank_simulate: vblank timer overrun [ 1881.224506][ C0] vkms_vblank_simulate: vblank timer overrun [ 1881.335088][ C0] vkms_vblank_simulate: vblank timer overrun [ 1881.440516][ C0] vkms_vblank_simulate: vblank timer overrun [ 1881.562543][ C0] vkms_vblank_simulate: vblank timer overrun [ 1881.624340][ C0] vkms_vblank_simulate: vblank timer overrun [ 1881.721919][ C0] vkms_vblank_simulate: vblank timer overrun [ 1881.738693][T20093] team0: Port device team_slave_1 added [ 1882.083810][ C0] vkms_vblank_simulate: vblank timer overrun [ 1882.123208][ T8379] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1882.478357][ T8379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1882.478425][ T8379] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1882.478484][ T8379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1882.478540][ T8379] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1882.478765][ T8379] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1882.478821][ T8379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.560540][ C0] vkms_vblank_simulate: vblank timer overrun [ 1883.022984][ T8379] usb 1-1: config 0 descriptor?? [ 1883.080675][T20093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1883.080923][T20093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1883.080956][T20093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1883.254124][T20093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1883.254146][T20093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1883.254176][T20093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1883.299687][T20235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1883.301447][T20235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1883.307394][ T8379] hdpvr 1-1:0.0: unexpected answer of status request, len -32 [ 1883.307426][ T8379] hdpvr 1-1:0.0: device init failed [ 1883.307521][ T8379] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 1883.357484][ T9] usb 1-1: USB disconnect, device number 9 [ 1883.665828][ C0] vkms_vblank_simulate: vblank timer overrun [ 1884.558377][ C0] vkms_vblank_simulate: vblank timer overrun [ 1884.761434][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1884.791786][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1884.805987][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1884.807535][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1884.808517][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1885.474997][ C0] vkms_vblank_simulate: vblank timer overrun [ 1886.629652][T20093] hsr_slave_0: entered promiscuous mode [ 1886.630651][T20093] hsr_slave_1: entered promiscuous mode [ 1886.631288][T20093] debugfs: 'hsr0' already exists in 'hsr' [ 1886.631306][T20093] Cannot create hsr debugfs directory [ 1886.893386][ T5800] Bluetooth: hci1: command tx timeout [ 1887.279657][ C1] vkms_vblank_simulate: vblank timer overrun [ 1888.154700][ C1] vkms_vblank_simulate: vblank timer overrun [ 1888.574933][T18740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1888.582412][T18740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1888.606430][T18740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1888.622350][T18740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1888.626678][T18740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1888.626806][T17375] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1888.773216][T17375] usb 1-1: Using ep0 maxpacket: 16 [ 1888.792474][T17375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1888.792513][T17375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1888.792557][T17375] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1888.792575][T17375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.838086][T17375] usb 1-1: config 0 descriptor?? [ 1888.973243][ T5800] Bluetooth: hci1: command tx timeout [ 1889.145564][T17375] usbhid 1-1:0.0: can't add hid device: -71 [ 1889.145658][T17375] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1889.170206][T17375] usb 1-1: USB disconnect, device number 10 [ 1889.432601][ C1] vkms_vblank_simulate: vblank timer overrun [ 1890.168681][ C1] vkms_vblank_simulate: vblank timer overrun [ 1890.733117][ T5800] Bluetooth: hci0: command tx timeout [ 1891.053971][ T5800] Bluetooth: hci1: command tx timeout [ 1891.901556][ C1] vkms_vblank_simulate: vblank timer overrun [ 1892.262994][ T5997] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1892.425082][ T5997] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1892.425116][ T5997] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1892.425133][ T5997] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1892.427086][ T5997] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1892.427113][ T5997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.427126][ T5997] usb 1-1: Product: syz [ 1892.427136][ T5997] usb 1-1: Manufacturer: syz [ 1892.427145][ T5997] usb 1-1: SerialNumber: syz [ 1892.470850][ T5997] usb 1-1: config 0 descriptor?? [ 1892.473770][T20300] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1892.475359][T20300] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1892.477625][ T5997] usb 1-1: ucan: probing device on interface #0 [ 1892.686376][ T5997] usb 1-1: ucan: device protocol version -65533 is not supported [ 1892.686405][ T5997] usb 1-1: ucan: probe failed; try to update the device firmware [ 1892.823206][ T5800] Bluetooth: hci0: command tx timeout [ 1892.885553][ T5932] bridge_slave_1: left allmulticast mode [ 1892.885578][ T5932] bridge_slave_1: left promiscuous mode [ 1892.885763][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.944328][ T5932] bridge_slave_0: left allmulticast mode [ 1892.944354][ T5932] bridge_slave_0: left promiscuous mode [ 1892.944562][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.134426][ T5800] Bluetooth: hci1: command tx timeout [ 1893.205098][ C1] vkms_vblank_simulate: vblank timer overrun [ 1893.510436][ C1] vkms_vblank_simulate: vblank timer overrun [ 1893.578773][ C1] vkms_vblank_simulate: vblank timer overrun [ 1893.647659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1893.719934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1893.779436][ C1] vkms_vblank_simulate: vblank timer overrun [ 1893.848633][ C1] vkms_vblank_simulate: vblank timer overrun [ 1893.952611][ C1] vkms_vblank_simulate: vblank timer overrun [ 1894.029126][ C1] vkms_vblank_simulate: vblank timer overrun [ 1894.221678][ C1] vkms_vblank_simulate: vblank timer overrun [ 1894.718124][ C1] vkms_vblank_simulate: vblank timer overrun [ 1894.829491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1894.903096][ T5800] Bluetooth: hci0: command tx timeout [ 1894.975529][ C1] vkms_vblank_simulate: vblank timer overrun [ 1895.038231][ C1] vkms_vblank_simulate: vblank timer overrun [ 1895.109771][ C1] vkms_vblank_simulate: vblank timer overrun [ 1895.177856][ C1] vkms_vblank_simulate: vblank timer overrun [ 1895.181852][ T8379] usb 1-1: USB disconnect, device number 11 [ 1895.251545][ C1] vkms_vblank_simulate: vblank timer overrun [ 1895.324616][ C1] vkms_vblank_simulate: vblank timer overrun [ 1895.393616][ C1] vkms_vblank_simulate: vblank timer overrun [ 1895.513681][ C1] vkms_vblank_simulate: vblank timer overrun [ 1895.657876][ C1] vkms_vblank_simulate: vblank timer overrun [ 1895.730831][ C1] vkms_vblank_simulate: vblank timer overrun [ 1895.809021][ C1] vkms_vblank_simulate: vblank timer overrun [ 1895.905227][ C1] vkms_vblank_simulate: vblank timer overrun [ 1896.043775][ C1] vkms_vblank_simulate: vblank timer overrun [ 1896.104288][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1896.183693][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1896.226213][ T5932] bond0 (unregistering): Released all slaves [ 1896.512527][T20325] macsec1: entered promiscuous mode [ 1896.512545][T20325] macvlan1: entered promiscuous mode [ 1896.602248][T20325] macvlan1: left promiscuous mode [ 1896.976682][ T5800] Bluetooth: hci0: command tx timeout [ 1897.243047][ T5932] hsr_slave_0: left promiscuous mode [ 1897.263314][ T5932] hsr_slave_1: left promiscuous mode [ 1897.264070][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1897.317906][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1899.103045][T17375] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1899.298485][T17375] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1899.298526][T17375] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 1899.298572][T17375] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1899.298598][T17375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.405888][T17375] usb 1-1: config 0 descriptor?? [ 1899.660323][T20348] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1900.020987][T17375] ath6kl: Failed to submit usb control message: -71 [ 1900.021059][T17375] ath6kl: unable to send the bmi data to the device: -71 [ 1900.021075][T17375] ath6kl: Unable to send get target info: -71 [ 1900.022276][T17375] ath6kl: Failed to init ath6kl core: -71 [ 1900.024475][T17375] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1900.153596][T17375] usb 1-1: USB disconnect, device number 12 [ 1900.400694][ C0] vkms_vblank_simulate: vblank timer overrun [ 1900.544302][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 1900.674059][ C0] vkms_vblank_simulate: vblank timer overrun [ 1900.732683][T20367] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4096'. [ 1900.745079][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 1900.810591][ C0] vkms_vblank_simulate: vblank timer overrun [ 1900.822616][T20368] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4096'. [ 1900.893594][ C0] vkms_vblank_simulate: vblank timer overrun [ 1901.059752][ C0] vkms_vblank_simulate: vblank timer overrun [ 1901.180680][ C0] vkms_vblank_simulate: vblank timer overrun [ 1901.257349][ C0] vkms_vblank_simulate: vblank timer overrun [ 1901.482397][ C0] vkms_vblank_simulate: vblank timer overrun [ 1901.622252][ C0] vkms_vblank_simulate: vblank timer overrun [ 1901.893087][ C0] vkms_vblank_simulate: vblank timer overrun [ 1902.118951][ C0] vkms_vblank_simulate: vblank timer overrun [ 1902.222490][ C0] vkms_vblank_simulate: vblank timer overrun [ 1902.301251][ C0] vkms_vblank_simulate: vblank timer overrun [ 1902.474781][ C0] vkms_vblank_simulate: vblank timer overrun [ 1902.608517][ C0] vkms_vblank_simulate: vblank timer overrun [ 1902.689061][ C0] vkms_vblank_simulate: vblank timer overrun [ 1902.793805][ C0] vkms_vblank_simulate: vblank timer overrun [ 1902.852590][ C0] vkms_vblank_simulate: vblank timer overrun [ 1902.913749][ C0] vkms_vblank_simulate: vblank timer overrun [ 1902.983009][ C0] vkms_vblank_simulate: vblank timer overrun [ 1903.043344][ C0] vkms_vblank_simulate: vblank timer overrun [ 1903.113343][ C0] vkms_vblank_simulate: vblank timer overrun [ 1903.192592][ C0] vkms_vblank_simulate: vblank timer overrun [ 1903.272077][ C0] vkms_vblank_simulate: vblank timer overrun [ 1903.332887][ C0] vkms_vblank_simulate: vblank timer overrun [ 1903.403615][ C0] vkms_vblank_simulate: vblank timer overrun [ 1903.642419][ C0] vkms_vblank_simulate: vblank timer overrun [ 1903.727304][ C0] vkms_vblank_simulate: vblank timer overrun [ 1903.796609][ C0] vkms_vblank_simulate: vblank timer overrun [ 1904.150815][ C0] vkms_vblank_simulate: vblank timer overrun [ 1904.527426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1904.922057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1905.951726][ C0] vkms_vblank_simulate: vblank timer overrun [ 1905.997840][ C0] vkms_vblank_simulate: vblank timer overrun [ 1906.061540][T20244] chnl_net:caif_netlink_parms(): no params data found [ 1906.612047][T17375] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1907.735563][T17375] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 1907.735597][T17375] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1907.735622][T17375] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1907.735646][T17375] usb 1-1: config 0 has no interface number 0 [ 1907.735666][T17375] usb 1-1: config 0 has no interface number 1 [ 1907.735747][T17375] usb 1-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 1907.735779][T17375] usb 1-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1907.735811][T17375] usb 1-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 1907.735877][T17375] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 1907.735904][T17375] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 1907.735933][T17375] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 1907.735962][T17375] usb 1-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 1907.735992][T17375] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1907.736019][T17375] usb 1-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 1907.736050][T17375] usb 1-1: config 0 interface 66 has no altsetting 0 [ 1907.739350][T17375] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 1907.739380][T17375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.739403][T17375] usb 1-1: Product: syz [ 1907.739420][T17375] usb 1-1: Manufacturer: syz [ 1907.739437][T17375] usb 1-1: SerialNumber: syz [ 1907.743429][ C0] vkms_vblank_simulate: vblank timer overrun [ 1907.976867][ C0] vkms_vblank_simulate: vblank timer overrun [ 1907.985317][T17375] usb 1-1: config 0 descriptor?? [ 1908.002672][T17375] ljca 1-1:0.84: bulk endpoints not found [ 1908.079941][ C0] vkms_vblank_simulate: vblank timer overrun [ 1908.341193][T17375] ljca 1-1:0.66: probe with driver ljca failed with error -71 [ 1908.368011][T17375] usb 1-1: USB disconnect, device number 13 [ 1908.403628][ C0] vkms_vblank_simulate: vblank timer overrun [ 1908.494054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1908.572801][ C0] vkms_vblank_simulate: vblank timer overrun [ 1908.696583][ C0] vkms_vblank_simulate: vblank timer overrun [ 1908.754848][T20270] chnl_net:caif_netlink_parms(): no params data found [ 1908.764561][T20244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1908.764800][T20244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1908.765068][T20244] bridge_slave_0: entered allmulticast mode [ 1908.768175][T20244] bridge_slave_0: entered promiscuous mode [ 1908.873311][ C0] vkms_vblank_simulate: vblank timer overrun [ 1908.908631][T20244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.908770][T20244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1908.908952][T20244] bridge_slave_1: entered allmulticast mode [ 1908.910887][T20244] bridge_slave_1: entered promiscuous mode [ 1910.852443][T20244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1910.943357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1911.290479][ C0] vkms_vblank_simulate: vblank timer overrun [ 1911.395324][T20244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1911.513997][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1911.514029][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1911.514046][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1911.514061][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1911.514077][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1911.514093][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1911.514108][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1911.514124][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1911.514140][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1911.514156][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1911.521114][ T9] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1912.133047][ T8379] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 1912.170301][T20244] team0: Port device team_slave_0 added [ 1912.193396][T20270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.193558][T20270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.193856][T20270] bridge_slave_0: entered allmulticast mode [ 1912.206827][T20270] bridge_slave_0: entered promiscuous mode [ 1912.258658][T20244] team0: Port device team_slave_1 added [ 1912.259572][T20270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.259770][T20270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.260001][T20270] bridge_slave_1: entered allmulticast mode [ 1912.273701][T20270] bridge_slave_1: entered promiscuous mode [ 1912.330344][T20437] netlink: 'syz.0.4112': attribute type 5 has an invalid length. [ 1912.332446][ T8379] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1912.332477][ T8379] usb 8-1: config 1 has no interface number 0 [ 1912.332534][ T8379] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1912.332566][ T8379] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1912.332596][ T8379] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1912.332637][ T8379] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1912.332668][ T8379] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1912.410490][ T8379] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1912.410526][ T8379] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.410550][ T8379] usb 8-1: Product: syz [ 1912.410567][ T8379] usb 8-1: Manufacturer: syz [ 1912.410584][ T8379] usb 8-1: SerialNumber: syz [ 1912.449009][T20431] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1912.587698][T18740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1912.603397][T18740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1912.626193][T18740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1912.662392][T18740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1912.670798][T18740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1912.744404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1912.748510][T20444] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1912.949805][T20444] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1913.191308][ C0] vkms_vblank_simulate: vblank timer overrun [ 1913.456746][T20244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1913.456768][T20244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1913.456800][T20244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1913.514343][T20270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1913.545384][ T8379] cdc_ncm 8-1:1.1: failed GET_NTB_PARAMETERS [ 1913.545445][ T8379] cdc_ncm 8-1:1.1: bind() failure [ 1913.550086][T20244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1913.550115][T20244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1913.550148][T20244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1913.587826][ T8379] usb 8-1: USB disconnect, device number 12 [ 1913.618800][T20270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1914.090246][T20270] team0: Port device team_slave_0 added [ 1914.209281][T20270] team0: Port device team_slave_1 added [ 1914.485013][T20464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4118'. [ 1914.947191][ C0] vkms_vblank_simulate: vblank timer overrun [ 1914.980672][ T5800] Bluetooth: hci3: command tx timeout [ 1915.067538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1915.126054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1915.214740][ C0] vkms_vblank_simulate: vblank timer overrun [ 1915.250099][ C0] vkms_vblank_simulate: vblank timer overrun [ 1915.333854][ C0] vkms_vblank_simulate: vblank timer overrun [ 1915.445231][T20244] hsr_slave_0: entered promiscuous mode [ 1915.447060][T20244] hsr_slave_1: entered promiscuous mode [ 1915.448290][T20244] debugfs: 'hsr0' already exists in 'hsr' [ 1915.448320][T20244] Cannot create hsr debugfs directory [ 1915.477278][T20270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1915.477298][T20270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1915.477330][T20270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1915.689648][T20270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1915.689670][T20270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1915.689701][T20270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1916.589612][T20270] hsr_slave_0: entered promiscuous mode [ 1916.591627][T20270] hsr_slave_1: entered promiscuous mode [ 1916.605046][T20270] debugfs: 'hsr0' already exists in 'hsr' [ 1916.605081][T20270] Cannot create hsr debugfs directory [ 1917.055973][ T5800] Bluetooth: hci3: command tx timeout [ 1918.817866][ C0] vkms_vblank_simulate: vblank timer overrun [ 1919.147280][ T5800] Bluetooth: hci3: command tx timeout [ 1919.872128][ C0] vkms_vblank_simulate: vblank timer overrun [ 1920.969164][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.969352][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1921.099375][ C0] vkms_vblank_simulate: vblank timer overrun [ 1921.223147][ T5800] Bluetooth: hci3: command tx timeout [ 1921.732109][T20440] chnl_net:caif_netlink_parms(): no params data found [ 1922.859426][T20440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.862393][T20440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.862609][T20440] bridge_slave_0: entered allmulticast mode [ 1922.910131][T20440] bridge_slave_0: entered promiscuous mode [ 1922.931004][T20440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.931987][T20440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1922.932276][T20440] bridge_slave_1: entered allmulticast mode [ 1922.962520][T20440] bridge_slave_1: entered promiscuous mode [ 1923.296182][T20440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1923.301433][T20440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1925.341445][T20440] team0: Port device team_slave_0 added [ 1925.449751][T20440] team0: Port device team_slave_1 added [ 1927.175581][T20440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1927.175602][T20440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1927.175632][T20440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1927.203506][T20553] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4141'. [ 1927.400567][ T5932] bridge_slave_1: left allmulticast mode [ 1927.400602][ T5932] bridge_slave_1: left promiscuous mode [ 1927.401626][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.493974][ T5932] bridge_slave_0: left allmulticast mode [ 1927.494012][ T5932] bridge_slave_0: left promiscuous mode [ 1927.494405][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.576421][ T5932] bridge_slave_1: left allmulticast mode [ 1927.576457][ T5932] bridge_slave_1: left promiscuous mode [ 1927.576758][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.646232][ T5932] bridge_slave_0: left allmulticast mode [ 1927.646266][ T5932] bridge_slave_0: left promiscuous mode [ 1927.647854][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1929.664443][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1929.670696][T20571] binder: 20564:20571 ioctl c0306201 0 returned -14 [ 1929.958301][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1931.544179][ T5932] bond0 (unregistering): Released all slaves [ 1932.074040][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1932.185401][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1932.265879][ T5932] bond0 (unregistering): Released all slaves [ 1932.314458][T20440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1932.314474][T20440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1932.314493][T20440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1932.893354][T17375] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1933.721395][T17375] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1933.721437][T17375] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1933.721490][T17375] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1933.721517][T17375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.777689][T20593] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1933.777944][T20593] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1933.801591][T17375] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1934.621347][T20440] hsr_slave_0: entered promiscuous mode [ 1934.632174][T20440] hsr_slave_1: entered promiscuous mode [ 1934.680946][T20440] debugfs: 'hsr0' already exists in 'hsr' [ 1934.680996][T20440] Cannot create hsr debugfs directory [ 1934.832212][ T5932] hsr_slave_0: left promiscuous mode [ 1934.843152][ T5932] hsr_slave_1: left promiscuous mode [ 1934.844332][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1935.872374][T12468] usb 8-1: USB disconnect, device number 13 [ 1936.124118][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1936.334232][ T5932] hsr_slave_0: left promiscuous mode [ 1936.373141][ T5932] hsr_slave_1: left promiscuous mode [ 1936.373845][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1936.382074][T20611] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4158'. [ 1936.406914][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1936.426250][T20611] vcan0: tx drop: invalid da for name 0x0000020000000003 [ 1936.447540][T20611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1936.474516][ T5860] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1936.626235][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1936.626262][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1936.626292][ T5860] usb 1-1: New USB device found, idVendor=056a, idProduct=0068, bcdDevice= 0.00 [ 1936.626307][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.635986][ T5860] usb 1-1: config 0 descriptor?? [ 1937.201989][ T5860] usbhid 1-1:0.0: can't add hid device: -71 [ 1937.202143][ T5860] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1937.213362][ T5860] usb 1-1: USB disconnect, device number 14 [ 1939.203573][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 1940.273799][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 1940.349396][T20633] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4164'. [ 1940.352481][T20633] vcan0: tx drop: invalid da for name 0x0000020000000003 [ 1940.387760][T20633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1943.003052][T19740] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1943.093682][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 1943.165504][T19740] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1943.165535][T19740] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1943.165551][T19740] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1943.165577][T19740] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1943.165605][T19740] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1943.165620][T19740] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.169141][T19740] usb 8-1: config 0 descriptor?? [ 1943.303982][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 1943.439502][T20644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1943.440303][T20644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1943.442477][T19740] hdpvr 8-1:0.0: unexpected answer of status request, len -32 [ 1943.442499][T19740] hdpvr 8-1:0.0: device init failed [ 1943.442604][T19740] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -12 [ 1943.456643][T19740] usb 8-1: USB disconnect, device number 14 [ 1944.810602][T20653] FAULT_INJECTION: forcing a failure. [ 1944.810602][T20653] name failslab, interval 1, probability 0, space 0, times 0 [ 1944.810643][T20653] CPU: 0 UID: 0 PID: 20653 Comm: syz.0.4169 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1944.810670][T20653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1944.810684][T20653] Call Trace: [ 1944.810694][T20653] [ 1944.810704][T20653] dump_stack_lvl+0x189/0x250 [ 1944.810746][T20653] ? __pfx____ratelimit+0x10/0x10 [ 1944.810778][T20653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1944.810813][T20653] ? __pfx__printk+0x10/0x10 [ 1944.810857][T20653] ? __pfx___might_resched+0x10/0x10 [ 1944.810889][T20653] should_fail_ex+0x46c/0x600 [ 1944.810927][T20653] should_failslab+0xa8/0x100 [ 1944.810963][T20653] __kmalloc_noprof+0xcc/0x7d0 [ 1944.810993][T20653] ? kfree+0x51/0x950 [ 1944.811017][T20653] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1944.811052][T20653] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1944.811082][T20653] ? tomoyo_domain+0xda/0x130 [ 1944.811117][T20653] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1944.811154][T20653] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1944.811194][T20653] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1944.811236][T20653] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1944.811270][T20653] ? lockdep_hardirqs_on+0x9c/0x150 [ 1944.811338][T20653] ? __fget_files+0x2a/0x420 [ 1944.811375][T20653] ? __fget_files+0x3a6/0x420 [ 1944.811406][T20653] ? __fget_files+0x2a/0x420 [ 1944.811442][T20653] security_file_ioctl+0xcb/0x2d0 [ 1944.811466][T20653] __se_sys_ioctl+0x47/0x170 [ 1944.811494][T20653] do_syscall_64+0xfa/0xfa0 [ 1944.811521][T20653] ? lockdep_hardirqs_on+0x9c/0x150 [ 1944.811549][T20653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1944.811570][T20653] ? clear_bhb_loop+0x60/0xb0 [ 1944.811595][T20653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1944.811617][T20653] RIP: 0033:0x7ff2762bf6c9 [ 1944.811637][T20653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1944.811658][T20653] RSP: 002b:00007ff27451e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1944.811685][T20653] RAX: ffffffffffffffda RBX: 00007ff276515fa0 RCX: 00007ff2762bf6c9 [ 1944.811703][T20653] RDX: 0000200000000280 RSI: 00000000c058560f RDI: 0000000000000003 [ 1944.811719][T20653] RBP: 00007ff27451e090 R08: 0000000000000000 R09: 0000000000000000 [ 1944.811734][T20653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1944.811749][T20653] R13: 00007ff276516038 R14: 00007ff276515fa0 R15: 00007ffe8e6bc1f8 [ 1944.811789][T20653] [ 1944.811799][T20653] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1945.082983][T19740] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1945.233075][T19740] usb 8-1: Using ep0 maxpacket: 32 [ 1945.235502][T19740] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 1945.235522][T19740] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1945.235534][T19740] usb 8-1: config 0 has no interface number 0 [ 1945.235565][T19740] usb 8-1: config 0 interface 120 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1945.235583][T19740] usb 8-1: config 0 interface 120 has no altsetting 0 [ 1945.238922][T19740] usb 8-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76 [ 1945.238956][T19740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.238979][T19740] usb 8-1: Product: syz [ 1945.238996][T19740] usb 8-1: Manufacturer: syz [ 1945.239013][T19740] usb 8-1: SerialNumber: syz [ 1945.346689][T19740] usb 8-1: config 0 descriptor?? [ 1945.350745][T19740] rndis_host 8-1:0.120: skipping garbage [ 1945.350770][T19740] usb 8-1: bad CDC descriptors [ 1945.351758][T19740] cdc_acm 8-1:0.120: Zero length descriptor references [ 1945.351804][T19740] cdc_acm 8-1:0.120: probe with driver cdc_acm failed with error -22 [ 1946.627347][ T5997] usb 8-1: USB disconnect, device number 15 [ 1946.820504][T18740] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1946.859891][T18740] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1946.882303][T18740] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1946.905038][T18740] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1946.963269][T18740] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1948.476125][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1948.480827][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1948.506124][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1948.523374][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1948.533326][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1948.610174][T20661] chnl_net:caif_netlink_parms(): no params data found [ 1949.133040][ T5997] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1949.750800][ T5800] Bluetooth: hci5: command tx timeout [ 1949.975281][ T5997] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1949.975315][ T5997] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1949.975342][ T5997] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1949.975365][ T5997] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1949.975407][ T5997] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1949.975427][ T5997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.980707][ T5997] usb 1-1: config 0 descriptor?? [ 1950.379816][T20689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1950.395865][T20689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1950.420272][ T5997] hdpvr 1-1:0.0: unexpected answer of status request, len -32 [ 1950.420301][ T5997] hdpvr 1-1:0.0: device init failed [ 1950.420404][ T5997] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 1950.436774][ T5997] usb 1-1: USB disconnect, device number 15 [ 1950.671244][ T5800] Bluetooth: hci1: command tx timeout [ 1951.067681][T20701] netlink: 'syz.0.4183': attribute type 10 has an invalid length. [ 1951.104183][T20701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1951.105516][T20701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1951.120127][T20701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1951.120307][T20701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1951.120895][T20701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1951.121092][T20701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1951.128679][T20701] team0: Port device bridge0 added [ 1951.518390][T20711] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4185'. [ 1951.779037][ T5800] Bluetooth: hci5: command tx timeout [ 1952.731348][T20661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.733653][ T5800] Bluetooth: hci1: command tx timeout [ 1952.814720][T20661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.822081][T20661] bridge_slave_0: entered allmulticast mode [ 1952.874004][T20717] ptrace attach of "./syz-executor exec"[19644] was attempted by "./syz-executor exec"[20717] [ 1953.033886][T20661] bridge_slave_0: entered promiscuous mode [ 1953.409983][T20661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1953.410117][T20661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.410283][T20661] bridge_slave_1: entered allmulticast mode [ 1953.412059][T20661] bridge_slave_1: entered promiscuous mode [ 1953.923847][ T5800] Bluetooth: hci5: command tx timeout [ 1954.179902][T20661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1954.209032][T20661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1954.283165][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1954.329786][T20730] ieee802154 phy0 wpan0: encryption failed: -90 [ 1954.455216][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1954.455251][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1954.455278][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1954.455301][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1954.455330][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1954.455345][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.458679][ T9] usb 1-1: config 0 descriptor?? [ 1954.563146][T17375] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1954.696624][T20724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1954.698170][T20724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1954.723257][ T9] hdpvr 1-1:0.0: unexpected answer of status request, len -32 [ 1954.723283][ T9] hdpvr 1-1:0.0: device init failed [ 1954.723465][T17375] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1954.723531][T17375] usb 8-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 1954.723535][ T9] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 1954.723560][T17375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.748428][ T9] usb 1-1: USB disconnect, device number 16 [ 1954.789165][T17375] usb 8-1: config 0 descriptor?? [ 1954.794929][T20730] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1954.808540][T20661] team0: Port device team_slave_0 added [ 1954.813094][ T5800] Bluetooth: hci1: command tx timeout [ 1954.965029][T20661] team0: Port device team_slave_1 added [ 1954.966698][ T5932] bridge_slave_1: left allmulticast mode [ 1954.966728][ T5932] bridge_slave_1: left promiscuous mode [ 1954.969582][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1955.046270][ T5932] bridge_slave_0: left allmulticast mode [ 1955.046308][ T5932] bridge_slave_0: left promiscuous mode [ 1955.046818][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1955.117820][ T5932] bridge_slave_1: left allmulticast mode [ 1955.117846][ T5932] bridge_slave_1: left promiscuous mode [ 1955.118103][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1955.174740][ T5932] bridge_slave_0: left allmulticast mode [ 1955.174775][ T5932] bridge_slave_0: left promiscuous mode [ 1955.175068][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1955.202486][T17375] hid_parser_main: 73 callbacks suppressed [ 1955.202506][T17375] viewsonic 0003:0543:E621.0010: unknown main item tag 0x0 [ 1955.202525][T17375] viewsonic 0003:0543:E621.0010: item fetching failed at offset 3/5 [ 1955.228259][T17375] viewsonic 0003:0543:E621.0010: probe with driver viewsonic failed with error -22 [ 1955.268272][ T5932] bridge_slave_1: left allmulticast mode [ 1955.268310][ T5932] bridge_slave_1: left promiscuous mode [ 1955.268642][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1955.406935][ T9] usb 8-1: USB disconnect, device number 16 [ 1955.554101][ T5932] bridge_slave_0: left allmulticast mode [ 1955.554127][ T5932] bridge_slave_0: left promiscuous mode [ 1955.554310][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1956.003503][ T5800] Bluetooth: hci5: command tx timeout [ 1956.875818][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1956.893096][ T5800] Bluetooth: hci1: command tx timeout [ 1956.974037][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1957.045561][ T5932] bond0 (unregistering): Released all slaves [ 1957.263066][T17375] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1957.279092][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1957.353661][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1957.415376][ T5932] bond0 (unregistering): Released all slaves [ 1957.504563][T17375] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.504594][T17375] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1957.507029][T17375] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1957.507055][T17375] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.507068][T17375] usb 8-1: Product: syz [ 1957.507078][T17375] usb 8-1: Manufacturer: syz [ 1957.507088][T17375] usb 8-1: SerialNumber: syz [ 1957.734236][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1957.834022][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1957.876289][ T5932] bond0 (unregistering): Released all slaves [ 1959.106992][T17375] usb 8-1: 0:2 : does not exist [ 1959.202055][T17375] usb 8-1: USB disconnect, device number 17 [ 1959.841442][T20661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1959.841456][T20661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1959.841477][T20661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1960.124479][T20661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1960.124501][T20661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1960.124534][T20661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1960.958040][ T5932] hsr_slave_0: left promiscuous mode [ 1963.559468][ T5932] hsr_slave_1: left promiscuous mode [ 1963.571690][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1963.616784][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1964.233470][ T5932] hsr_slave_0: left promiscuous mode [ 1964.253475][ T5932] hsr_slave_1: left promiscuous mode [ 1964.254216][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1964.277368][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1964.415219][ T5932] hsr_slave_0: left promiscuous mode [ 1964.453710][ T5932] hsr_slave_1: left promiscuous mode [ 1964.454477][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1964.484065][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1964.599244][T20778] Invalid option length (1048467) for dns_resolver key [ 1965.194150][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 1965.367055][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 1966.803481][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 1966.983560][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 1968.363935][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 1968.543733][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 1969.226108][T20440] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1969.435643][T20440] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1970.937163][T20440] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1971.025455][T20661] hsr_slave_0: entered promiscuous mode [ 1971.027081][T20661] hsr_slave_1: entered promiscuous mode [ 1971.028200][T20661] debugfs: 'hsr0' already exists in 'hsr' [ 1971.028228][T20661] Cannot create hsr debugfs directory [ 1971.071125][T20440] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1971.226164][T20808] FAULT_INJECTION: forcing a failure. [ 1971.226164][T20808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1971.226205][T20808] CPU: 0 UID: 0 PID: 20808 Comm: syz.0.4214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1971.226231][T20808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1971.226245][T20808] Call Trace: [ 1971.226255][T20808] [ 1971.226265][T20808] dump_stack_lvl+0x189/0x250 [ 1971.226306][T20808] ? __pfx____ratelimit+0x10/0x10 [ 1971.226337][T20808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1971.226372][T20808] ? __pfx__printk+0x10/0x10 [ 1971.226432][T20808] should_fail_ex+0x46c/0x600 [ 1971.226471][T20808] _copy_to_user+0x31/0xb0 [ 1971.226500][T20808] simple_read_from_buffer+0xe1/0x170 [ 1971.226536][T20808] proc_fail_nth_read+0x1b6/0x220 [ 1971.226565][T20808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1971.226594][T20808] ? rw_verify_area+0x2ac/0x4e0 [ 1971.226621][T20808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1971.226647][T20808] vfs_read+0x206/0xa30 [ 1971.226685][T20808] ? __pfx_vfs_read+0x10/0x10 [ 1971.226718][T20808] ? do_send_specific+0x37/0x2c0 [ 1971.226744][T20808] ? do_send_specific+0x37/0x2c0 [ 1971.226766][T20808] ? do_send_specific+0x37/0x2c0 [ 1971.226793][T20808] ? do_send_specific+0x294/0x2c0 [ 1971.226826][T20808] ksys_read+0x14b/0x260 [ 1971.226857][T20808] ? __pfx_ksys_read+0x10/0x10 [ 1971.226889][T20808] ? do_syscall_64+0xbe/0xfa0 [ 1971.226927][T20808] do_syscall_64+0xfa/0xfa0 [ 1971.226956][T20808] ? lockdep_hardirqs_on+0x9c/0x150 [ 1971.226987][T20808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.227010][T20808] ? clear_bhb_loop+0x60/0xb0 [ 1971.227038][T20808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.227061][T20808] RIP: 0033:0x7ff2762be0dc [ 1971.227082][T20808] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1971.227102][T20808] RSP: 002b:00007ff27451e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1971.227127][T20808] RAX: ffffffffffffffda RBX: 00007ff276515fa0 RCX: 00007ff2762be0dc [ 1971.227145][T20808] RDX: 000000000000000f RSI: 00007ff27451e0a0 RDI: 0000000000000005 [ 1971.227160][T20808] RBP: 00007ff27451e090 R08: 0000000000000000 R09: 0000000000000000 [ 1971.227176][T20808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1971.227190][T20808] R13: 00007ff276516038 R14: 00007ff276515fa0 R15: 00007ffe8e6bc1f8 [ 1971.227229][T20808] [ 1971.649643][T20677] chnl_net:caif_netlink_parms(): no params data found [ 1975.080557][T18740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1975.126646][T18740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1975.132251][T18740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1975.169751][T18740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1975.170605][T18740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1975.207052][T20677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1975.207208][T20677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1975.207472][T20677] bridge_slave_0: entered allmulticast mode [ 1975.210782][T20677] bridge_slave_0: entered promiscuous mode [ 1975.296642][T20677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1975.296831][T20677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1975.297075][T20677] bridge_slave_1: entered allmulticast mode [ 1975.326413][T20677] bridge_slave_1: entered promiscuous mode [ 1975.962397][T20677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1976.000508][T20677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1976.586729][T20677] team0: Port device team_slave_0 added [ 1976.649999][T20677] team0: Port device team_slave_1 added [ 1977.036749][T20677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1977.036765][T20677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1977.036782][T20677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1977.113841][T20677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1977.113856][T20677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1977.113875][T20677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1977.226065][ T5800] Bluetooth: hci0: command tx timeout [ 1977.674127][T20661] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1979.000024][T20661] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1979.066472][T20677] hsr_slave_0: entered promiscuous mode [ 1979.071066][T20677] hsr_slave_1: entered promiscuous mode [ 1979.106773][T20677] debugfs: 'hsr0' already exists in 'hsr' [ 1979.106809][T20677] Cannot create hsr debugfs directory [ 1979.110870][T20661] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1979.151091][T20661] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1979.292991][ T5800] Bluetooth: hci0: command tx timeout [ 1979.773222][T12468] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 1979.795198][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4232'. [ 1979.923044][T12468] usb 8-1: device descriptor read/64, error -71 [ 1980.203107][T12468] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 1980.277194][T20847] chnl_net:caif_netlink_parms(): no params data found [ 1980.343091][T12468] usb 8-1: device descriptor read/64, error -71 [ 1980.455063][T12468] usb usb8-port1: attempt power cycle [ 1980.953974][T12468] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 1981.081411][T12468] usb 8-1: device descriptor read/8, error -71 [ 1981.330416][T12468] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 1981.490613][ T5800] Bluetooth: hci0: command tx timeout [ 1981.534023][T12468] usb 8-1: device descriptor read/8, error -71 [ 1981.568960][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.569049][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.761750][T12468] usb usb8-port1: unable to enumerate USB device [ 1982.015186][T20907] FAULT_INJECTION: forcing a failure. [ 1982.015186][T20907] name failslab, interval 1, probability 0, space 0, times 0 [ 1982.015225][T20907] CPU: 0 UID: 0 PID: 20907 Comm: syz.0.4238 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1982.015251][T20907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1982.015265][T20907] Call Trace: [ 1982.015275][T20907] [ 1982.015286][T20907] dump_stack_lvl+0x189/0x250 [ 1982.015322][T20907] ? __pfx____ratelimit+0x10/0x10 [ 1982.015353][T20907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1982.015385][T20907] ? __pfx__printk+0x10/0x10 [ 1982.015417][T20907] ? __lock_acquire+0xab9/0xd20 [ 1982.015455][T20907] should_fail_ex+0x46c/0x600 [ 1982.015489][T20907] ? skb_clone+0x212/0x3a0 [ 1982.015515][T20907] should_failslab+0xa8/0x100 [ 1982.015545][T20907] ? skb_clone+0x212/0x3a0 [ 1982.015577][T20907] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1982.015614][T20907] skb_clone+0x212/0x3a0 [ 1982.015647][T20907] __netlink_deliver_tap+0x404/0x850 [ 1982.015688][T20907] ? netlink_deliver_tap+0x2e/0x1b0 [ 1982.015715][T20907] netlink_deliver_tap+0x19c/0x1b0 [ 1982.015741][T20907] netlink_unicast+0x811/0xa10 [ 1982.015786][T20907] ? __pfx_netlink_unicast+0x10/0x10 [ 1982.015823][T20907] ? netlink_sendmsg+0x642/0xb30 [ 1982.015843][T20907] ? skb_put+0x11b/0x210 [ 1982.015871][T20907] netlink_sendmsg+0x805/0xb30 [ 1982.015907][T20907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1982.015935][T20907] ? __lock_acquire+0xab9/0xd20 [ 1982.015966][T20907] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1982.015996][T20907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1982.016019][T20907] __sock_sendmsg+0x21c/0x270 [ 1982.016048][T20907] sock_write_iter+0x27f/0x370 [ 1982.016075][T20907] ? __pfx_sock_write_iter+0x10/0x10 [ 1982.016132][T20907] vfs_write+0x5d5/0xb40 [ 1982.016165][T20907] ? __pfx_sock_write_iter+0x10/0x10 [ 1982.016195][T20907] ? __pfx_vfs_write+0x10/0x10 [ 1982.016236][T20907] ? __fget_files+0x2a/0x420 [ 1982.016276][T20907] ksys_write+0x14b/0x260 [ 1982.016306][T20907] ? __pfx_ksys_write+0x10/0x10 [ 1982.016339][T20907] ? do_syscall_64+0xbe/0xfa0 [ 1982.016376][T20907] do_syscall_64+0xfa/0xfa0 [ 1982.016404][T20907] ? lockdep_hardirqs_on+0x9c/0x150 [ 1982.016435][T20907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.016458][T20907] ? clear_bhb_loop+0x60/0xb0 [ 1982.016486][T20907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.016508][T20907] RIP: 0033:0x7ff2762bf6c9 [ 1982.016529][T20907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1982.016549][T20907] RSP: 002b:00007ff2744fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1982.016585][T20907] RAX: ffffffffffffffda RBX: 00007ff276516090 RCX: 00007ff2762bf6c9 [ 1982.016602][T20907] RDX: 0000000000000085 RSI: 0000200000000000 RDI: 0000000000000007 [ 1982.016617][T20907] RBP: 00007ff2744fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1982.016631][T20907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1982.016645][T20907] R13: 00007ff276516128 R14: 00007ff276516090 R15: 00007ffe8e6bc1f8 [ 1982.016686][T20907] [ 1982.782318][T20912] ptrace attach of "./syz-executor exec"[19644] was attempted by "./syz-executor exec"[20912] [ 1983.038717][T20847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1983.038867][T20847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.039069][T20847] bridge_slave_0: entered allmulticast mode [ 1983.040908][T20847] bridge_slave_0: entered promiscuous mode [ 1983.113513][T20847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1983.113601][T20847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.113798][T20847] bridge_slave_1: entered allmulticast mode [ 1983.143375][T20847] bridge_slave_1: entered promiscuous mode [ 1983.462680][T20847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1983.516052][T20847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1983.534600][ T5800] Bluetooth: hci0: command tx timeout [ 1983.545476][T20677] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1983.618786][T20925] nfs4: Deprecated parameter 'intr' [ 1983.693993][T20677] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1984.040915][T20677] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1984.077088][T20847] team0: Port device team_slave_0 added [ 1984.079677][T20677] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1984.263573][T20932] vcan0: tx drop: invalid da for name 0x0000020000000003 [ 1984.470299][T20932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1984.632770][T20847] team0: Port device team_slave_1 added [ 1985.830232][T20847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1985.830247][T20847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1985.830266][T20847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1985.849926][T20847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1985.849945][T20847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1985.849972][T20847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1986.555606][ T5932] bridge_slave_1: left allmulticast mode [ 1986.555756][ T5932] bridge_slave_1: left promiscuous mode [ 1986.558717][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1986.908235][T20953] ptrace attach of "./syz-executor exec"[19644] was attempted by "./syz-executor exec"[20953] [ 1987.036962][ T5932] bridge_slave_0: left allmulticast mode [ 1987.037124][ T5932] bridge_slave_0: left promiscuous mode [ 1987.057150][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1987.528211][ C0] vkms_vblank_simulate: vblank timer overrun [ 1987.803900][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1987.884203][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1987.950864][ T5932] bond0 (unregistering): Released all slaves [ 1987.983334][ T5860] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1988.068715][ C0] vkms_vblank_simulate: vblank timer overrun [ 1988.143638][ C0] vkms_vblank_simulate: vblank timer overrun [ 1988.163102][ T5860] usb 8-1: Using ep0 maxpacket: 32 [ 1988.165847][ T5860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1988.165878][ T5860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1988.165905][ T5860] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1988.165920][ T5860] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.169815][ T5860] usb 8-1: config 0 descriptor?? [ 1988.496174][T20847] hsr_slave_0: entered promiscuous mode [ 1988.497787][T20847] hsr_slave_1: entered promiscuous mode [ 1988.498844][T20847] debugfs: 'hsr0' already exists in 'hsr' [ 1988.498874][T20847] Cannot create hsr debugfs directory [ 1988.516592][T20661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1988.591069][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4253'. [ 1988.618101][ T5860] usbhid 8-1:0.0: can't add hid device: -71 [ 1988.618245][ T5860] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1988.642709][ T5860] usb 8-1: USB disconnect, device number 22 [ 1988.773686][ T5932] hsr_slave_0: left promiscuous mode [ 1988.794575][ T5932] hsr_slave_1: left promiscuous mode [ 1988.795388][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1988.834103][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1989.807072][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 1990.043957][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 1990.522523][ C0] vkms_vblank_simulate: vblank timer overrun [ 1990.592653][ C0] vkms_vblank_simulate: vblank timer overrun [ 1991.802100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1991.989900][T20982] ptrace attach of "./syz-executor exec"[19644] was attempted by "./syz-executor exec"[20982] [ 1992.759283][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 1992.759305][ T37] audit: type=1326 audit(2000001741.350:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20983 comm="syz.7.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 1992.759798][ T37] audit: type=1326 audit(2000001741.350:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20983 comm="syz.7.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 1992.760221][ T37] audit: type=1326 audit(2000001741.350:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20983 comm="syz.7.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 1992.765896][ T37] audit: type=1326 audit(2000001741.350:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20983 comm="syz.7.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 1992.966653][ T37] audit: type=1326 audit(2000001741.560:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20983 comm="syz.7.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 1992.966715][ T37] audit: type=1326 audit(2000001741.560:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20983 comm="syz.7.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 1993.068510][ C0] vkms_vblank_simulate: vblank timer overrun [ 1993.138060][ C0] vkms_vblank_simulate: vblank timer overrun [ 1993.308509][T20661] 8021q: adding VLAN 0 to HW filter on device team0 [ 1993.366180][T20993] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 1993.484251][ C0] vkms_vblank_simulate: vblank timer overrun [ 1993.555262][ C0] vkms_vblank_simulate: vblank timer overrun [ 1993.573975][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.574199][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1993.666631][ C0] vkms_vblank_simulate: vblank timer overrun [ 1993.696434][T17630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1993.696694][T17630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1993.834249][ C0] vkms_vblank_simulate: vblank timer overrun [ 1993.909878][ C0] vkms_vblank_simulate: vblank timer overrun [ 1993.927685][T20999] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4264'. [ 1994.592177][T20999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1994.951142][T20677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1995.129229][ C0] vkms_vblank_simulate: vblank timer overrun [ 1995.363107][ C0] vkms_vblank_simulate: vblank timer overrun [ 1995.397857][ C0] vkms_vblank_simulate: vblank timer overrun [ 1995.473308][ C0] vkms_vblank_simulate: vblank timer overrun [ 1995.550358][T20677] 8021q: adding VLAN 0 to HW filter on device team0 [ 1995.864378][ C0] vkms_vblank_simulate: vblank timer overrun [ 1996.278077][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1996.278252][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1996.465961][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1996.470068][ T7701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1996.533143][T17375] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1996.593031][ T8379] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1996.683504][T17375] usb 1-1: Using ep0 maxpacket: 32 [ 1996.686899][T17375] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 1996.686931][T17375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1996.686954][T17375] usb 1-1: config 0 has no interface number 0 [ 1996.687008][T17375] usb 1-1: config 0 interface 120 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1996.687040][T17375] usb 1-1: config 0 interface 120 has no altsetting 0 [ 1996.690940][T17375] usb 1-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76 [ 1996.690976][T17375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.690999][T17375] usb 1-1: Product: syz [ 1996.691016][T17375] usb 1-1: Manufacturer: syz [ 1996.691032][T17375] usb 1-1: SerialNumber: syz [ 1996.737978][ C0] vkms_vblank_simulate: vblank timer overrun [ 1996.848533][T17375] usb 1-1: config 0 descriptor?? [ 1996.869174][T17375] rndis_host 1-1:0.120: skipping garbage [ 1996.869362][T17375] usb 1-1: bad CDC descriptors [ 1996.870914][ T8379] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1996.870947][ T8379] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.870968][ T8379] usb 8-1: Product: syz [ 1996.870985][ T8379] usb 8-1: Manufacturer: syz [ 1996.871001][ T8379] usb 8-1: SerialNumber: syz [ 1996.905918][T17375] cdc_acm 1-1:0.120: Zero length descriptor references [ 1996.905970][T17375] cdc_acm 1-1:0.120: probe with driver cdc_acm failed with error -22 [ 1996.948100][ T8379] usb 8-1: config 0 descriptor?? [ 1996.967502][ T8379] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 023 [ 1996.977525][T20661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1997.090536][T16972] usb 1-1: USB disconnect, device number 17 [ 1997.307935][T20847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1997.354447][T20847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1997.377239][ T8379] (null): failure reading functionality [ 1997.434256][T20847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1997.464225][ T8379] i2c i2c-1: connected i2c-tiny-usb device [ 1997.504442][T20847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1997.660848][ T5997] usb 8-1: USB disconnect, device number 23 [ 1997.685772][T20677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1998.008255][T20661] veth0_vlan: entered promiscuous mode [ 1998.063311][T20661] veth1_vlan: entered promiscuous mode [ 1998.185235][T20847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1998.355345][T21057] bridge_slave_0: left allmulticast mode [ 1998.355382][T21057] bridge_slave_0: left promiscuous mode [ 1998.357969][T21057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1998.451158][T21057] bridge_slave_1: left allmulticast mode [ 1998.451202][T21057] bridge_slave_1: left promiscuous mode [ 1998.451493][T21057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1998.597700][T21057] bond0: (slave bond_slave_0): Releasing backup interface [ 1998.675048][T21057] bond0: (slave bond_slave_1): Releasing backup interface [ 1998.758434][T21057] team0: Failed to send options change via netlink (err -105) [ 1998.758812][T21057] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1998.759182][T21057] team0: Port device team_slave_0 removed [ 1998.809869][T21057] team0: Failed to send options change via netlink (err -105) [ 1998.810223][T21057] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1998.810604][T21057] team0: Port device team_slave_1 removed [ 1998.811354][T21057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1998.811375][T21057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1998.843114][T17375] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 1998.865446][T21057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1998.865470][T21057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1998.917675][T21057] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1998.963676][T20847] 8021q: adding VLAN 0 to HW filter on device team0 [ 1998.968292][T20661] veth0_macvtap: entered promiscuous mode [ 1999.005551][T17375] usb 8-1: config 250 has an invalid interface number: 173 but max is 0 [ 1999.005585][T17375] usb 8-1: config 250 has no interface number 0 [ 1999.005641][T17375] usb 8-1: New USB device found, idVendor=bd96, idProduct=bc92, bcdDevice=b7.10 [ 1999.005669][T17375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.009762][T20661] veth1_macvtap: entered promiscuous mode [ 1999.029503][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1999.029659][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1999.088382][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1999.088605][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1999.382740][ C0] vkms_vblank_simulate: vblank timer overrun [ 2000.455920][T20661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2000.599308][T20661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2000.678151][T20677] veth0_vlan: entered promiscuous mode [ 2000.684276][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.694207][ T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.701298][ T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.726518][ T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.796205][T20677] veth1_vlan: entered promiscuous mode [ 2001.600217][T17375] usb 8-1: string descriptor 0 read error: -71 [ 2001.618158][T17375] usb-storage 8-1:250.173: USB Mass Storage device detected [ 2001.710710][T20677] veth0_macvtap: entered promiscuous mode [ 2001.778702][T17375] usb 8-1: USB disconnect, device number 24 [ 2001.800271][ T7701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2001.800297][ T7701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2001.843470][T20677] veth1_macvtap: entered promiscuous mode [ 2002.168137][T20847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2002.182206][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2002.182230][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2002.223704][T20677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2002.336264][T20677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2002.429603][ T9630] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.476602][ T9630] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.520486][ T9630] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.543398][ T9630] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2003.355237][T20847] veth0_vlan: entered promiscuous mode [ 2003.822249][ T9630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2003.822275][ T9630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2003.922476][T20847] veth1_vlan: entered promiscuous mode [ 2004.141284][ T7701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2004.141310][ T7701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2004.358182][T20847] veth0_macvtap: entered promiscuous mode [ 2004.650099][T20847] veth1_macvtap: entered promiscuous mode [ 2004.762987][T20847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2004.779864][T21111] netlink: 'syz.8.4287': attribute type 11 has an invalid length. [ 2004.779991][T21111] netlink: 448 bytes leftover after parsing attributes in process `syz.8.4287'. [ 2004.811789][T20847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2004.898023][T17630] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.899106][T17630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.899677][T17630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.900190][T17630] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.432925][T17375] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2005.582031][T21124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2005.607387][T17375] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2005.607418][T17375] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2005.626146][T17375] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2005.626194][T17375] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2005.626216][T17375] usb 9-1: SerialNumber: syz [ 2005.881560][ T5800] Bluetooth: hci5: SCO packet for unknown connection handle 1629 [ 2006.090288][ C1] vkms_vblank_simulate: vblank timer overrun [ 2006.147436][T17375] usb 9-1: 0:2 : does not exist [ 2006.243420][T17375] usb 9-1: USB disconnect, device number 2 [ 2006.514650][ T3682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2006.514676][ T3682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2006.714356][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2006.714382][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2007.118732][ C1] vkms_vblank_simulate: vblank timer overrun [ 2007.328888][ C1] vkms_vblank_simulate: vblank timer overrun [ 2007.846861][ C1] vkms_vblank_simulate: vblank timer overrun [ 2008.304893][T21145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2008.552593][ C1] vkms_vblank_simulate: vblank timer overrun [ 2009.783288][ C1] vkms_vblank_simulate: vblank timer overrun [ 2010.286764][T21162] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4301'. [ 2010.331532][ C1] vkms_vblank_simulate: vblank timer overrun [ 2010.383099][T21162] vlan2: entered allmulticast mode [ 2010.383126][T21162] macvtap0: entered allmulticast mode [ 2010.383136][T21162] veth0_macvtap: entered allmulticast mode [ 2010.559170][ C1] vkms_vblank_simulate: vblank timer overrun [ 2014.026222][T21186] syz_tun: entered allmulticast mode [ 2014.052268][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4305'. [ 2014.382582][T21186] syz_tun (unregistering): left allmulticast mode [ 2016.554021][T21208] nfs4: Deprecated parameter 'intr' [ 2019.976276][T21232] binder: 21231:21232 ioctl c0306201 2000000003c0 returned -22 [ 2020.118187][T21234] binder: 21231:21234 ioctl c018aa3f 200000000200 returned -22 [ 2021.900891][T21232] syz.9.4319 (21232): drop_caches: 2 [ 2022.962960][T19740] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2023.153424][T19740] usb 10-1: Using ep0 maxpacket: 16 [ 2023.294741][T19740] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2023.294866][T19740] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2023.315775][T19740] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2023.315897][T19740] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.316039][T19740] usb 10-1: Product: syz [ 2023.316082][T19740] usb 10-1: Manufacturer: syz [ 2023.316100][T19740] usb 10-1: SerialNumber: syz [ 2023.416855][T19740] usb 10-1: config 0 descriptor?? [ 2023.524811][T19740] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2023.524852][T19740] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 2025.614948][T19740] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 2025.876924][T19740] em28xx 10-1:0.0: Config register raw data: 0x41 [ 2026.992954][T16494] usb 10-1: USB disconnect, device number 2 [ 2026.997283][T16494] em28xx 10-1:0.0: Disconnecting em28xx [ 2027.322478][T16494] em28xx 10-1:0.0: Freeing device [ 2027.722973][T21021] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 2027.879515][T21021] usb 8-1: Using ep0 maxpacket: 16 [ 2027.893316][T21021] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2027.893423][T21021] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2027.902745][T21021] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2027.950632][T21021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.950664][T21021] usb 8-1: Product: syz [ 2027.950682][T21021] usb 8-1: Manufacturer: syz [ 2027.950699][T21021] usb 8-1: SerialNumber: syz [ 2028.168635][T21021] usb 8-1: config 0 descriptor?? [ 2028.247258][T21021] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2028.247300][T21021] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 2028.483879][T21314] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4344'. [ 2029.716350][T21319] 9pnet_virtio: no channels available for device 127.0.0.1 [ 2029.891271][T21021] em28xx 8-1:0.0: chip ID is em2870 [ 2030.140277][T19740] usb 8-1: USB disconnect, device number 25 [ 2030.163155][T19740] em28xx 8-1:0.0: Disconnecting em28xx [ 2030.185928][T19740] em28xx 8-1:0.0: Freeing device [ 2030.992919][T21021] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2031.143925][T21021] usb 10-1: Using ep0 maxpacket: 8 [ 2031.149778][T21021] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2031.149814][T21021] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.149836][T21021] usb 10-1: Product: syz [ 2031.149853][T21021] usb 10-1: Manufacturer: syz [ 2031.149870][T21021] usb 10-1: SerialNumber: syz [ 2031.184612][T21021] usb 10-1: config 0 descriptor?? [ 2031.207763][T21021] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2031.403363][ T37] audit: type=1326 audit(2000001780.000:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21336 comm="syz.7.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd80744b779 code=0x7ffc0000 [ 2031.404118][ T37] audit: type=1326 audit(2000001780.000:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21336 comm="syz.7.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd80744b779 code=0x7ffc0000 [ 2031.404861][ T37] audit: type=1326 audit(2000001780.000:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21336 comm="syz.7.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd80744b779 code=0x7ffc0000 [ 2031.405697][ T37] audit: type=1326 audit(2000001780.000:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21336 comm="syz.7.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd80744b779 code=0x7ffc0000 [ 2031.406410][ T37] audit: type=1326 audit(2000001780.000:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21336 comm="syz.7.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd80744b779 code=0x7ffc0000 [ 2031.407116][ T37] audit: type=1326 audit(2000001780.000:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21336 comm="syz.7.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd80744b779 code=0x7ffc0000 [ 2031.407867][ T37] audit: type=1326 audit(2000001780.000:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21336 comm="syz.7.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd80744b779 code=0x7ffc0000 [ 2031.408592][ T37] audit: type=1326 audit(2000001780.000:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21336 comm="syz.7.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd80744b779 code=0x7ffc0000 [ 2031.409132][ T37] audit: type=1326 audit(2000001780.000:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21336 comm="syz.7.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 2031.409764][ T37] audit: type=1326 audit(2000001780.000:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21336 comm="syz.7.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 2032.447485][T21327] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2032.754535][T21021] gspca_sonixj: reg_w1 err -110 [ 2032.806313][T21021] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 2033.364516][ T5800] Bluetooth: hci0: link tx timeout [ 2033.364906][ T5800] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 2033.751632][T21352] FAULT_INJECTION: forcing a failure. [ 2033.751632][T21352] name failslab, interval 1, probability 0, space 0, times 0 [ 2033.751672][T21352] CPU: 1 UID: 0 PID: 21352 Comm: syz.0.4359 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2033.751699][T21352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2033.751712][T21352] Call Trace: [ 2033.751722][T21352] [ 2033.751732][T21352] dump_stack_lvl+0x189/0x250 [ 2033.751773][T21352] ? __pfx____ratelimit+0x10/0x10 [ 2033.751805][T21352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2033.751848][T21352] ? __pfx__printk+0x10/0x10 [ 2033.751884][T21352] ? __pfx___might_resched+0x10/0x10 [ 2033.751910][T21352] ? fs_reclaim_acquire+0x7d/0x100 [ 2033.751947][T21352] should_fail_ex+0x46c/0x600 [ 2033.751985][T21352] should_failslab+0xa8/0x100 [ 2033.752021][T21352] __kvmalloc_node_noprof+0x169/0x920 [ 2033.752053][T21352] ? traverse+0xde/0x580 [ 2033.752086][T21352] traverse+0xde/0x580 [ 2033.752120][T21352] ? seq_read_iter+0xb8/0xe20 [ 2033.752149][T21352] seq_read_iter+0xd09/0xe20 [ 2033.752180][T21352] ? __lock_acquire+0xab9/0xd20 [ 2033.752214][T21352] ? __asan_memset+0x22/0x50 [ 2033.752248][T21352] seq_read+0x36c/0x480 [ 2033.752285][T21352] ? __pfx_seq_read+0x10/0x10 [ 2033.752325][T21352] ? rw_verify_area+0x2ac/0x4e0 [ 2033.752351][T21352] ? __lock_acquire+0xab9/0xd20 [ 2033.752379][T21352] ? __pfx_seq_read+0x10/0x10 [ 2033.752406][T21352] vfs_read+0x206/0xa30 [ 2033.752449][T21352] ? __pfx_vfs_read+0x10/0x10 [ 2033.752479][T21352] ? __fget_files+0x2a/0x420 [ 2033.752514][T21352] ? __fget_files+0x2a/0x420 [ 2033.752543][T21352] ? __fget_files+0x3a6/0x420 [ 2033.752573][T21352] ? __fget_files+0x2a/0x420 [ 2033.752615][T21352] __x64_sys_pread64+0x196/0x220 [ 2033.752648][T21352] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2033.752682][T21352] ? do_syscall_64+0xbe/0xfa0 [ 2033.752717][T21352] do_syscall_64+0xfa/0xfa0 [ 2033.752745][T21352] ? lockdep_hardirqs_on+0x9c/0x150 [ 2033.752773][T21352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2033.752797][T21352] ? clear_bhb_loop+0x60/0xb0 [ 2033.752824][T21352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2033.752855][T21352] RIP: 0033:0x7ff2762bf6c9 [ 2033.752876][T21352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2033.752896][T21352] RSP: 002b:00007ff27451e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2033.752921][T21352] RAX: ffffffffffffffda RBX: 00007ff276515fa0 RCX: 00007ff2762bf6c9 [ 2033.752939][T21352] RDX: 0000000000000016 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2033.752954][T21352] RBP: 00007ff27451e090 R08: 0000000000000000 R09: 0000000000000000 [ 2033.752969][T21352] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 2033.752983][T21352] R13: 00007ff276516038 R14: 00007ff276515fa0 R15: 00007ffe8e6bc1f8 [ 2033.753022][T21352] [ 2033.799270][T21354] Bluetooth: MGMT ver 1.23 [ 2033.823985][ T5997] usb 10-1: USB disconnect, device number 3 [ 2034.173151][T16972] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2034.444805][T16972] usb 2-1: Using ep0 maxpacket: 8 [ 2034.449237][T16972] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 2034.449271][T16972] usb 2-1: config 0 has no interface number 0 [ 2034.449327][T16972] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2034.449357][T16972] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2034.449387][T16972] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 2034.449417][T16972] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 2034.449448][T16972] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2034.452718][T16972] usb 2-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 2034.452748][T16972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.452866][T16972] usb 2-1: Product: syz [ 2034.452885][T16972] usb 2-1: Manufacturer: syz [ 2034.452902][T16972] usb 2-1: SerialNumber: syz [ 2034.606192][T16972] usb 2-1: config 0 descriptor?? [ 2034.928128][T16972] iowarrior 2-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0 [ 2035.647036][T21350] Bluetooth: hci0: command 0x0406 tx timeout [ 2036.307045][ T5997] usb 2-1: USB disconnect, device number 16 [ 2037.963001][T16972] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2037.963205][ T5997] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 2038.031949][T21411] QAT: failed to copy from user. [ 2038.112957][T16972] usb 2-1: Using ep0 maxpacket: 32 [ 2038.115852][ T5997] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2038.116115][ T5997] usb 8-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 2038.116134][ T5997] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.121662][ T5997] usb 8-1: config 0 descriptor?? [ 2038.123368][T16972] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 2038.123399][T16972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.133527][T16494] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2038.136781][T16972] usb 2-1: config 0 descriptor?? [ 2038.293196][T16494] usb 1-1: Using ep0 maxpacket: 16 [ 2038.297581][T16494] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2038.297621][T16494] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2038.297662][T16494] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2038.297689][T16494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.344662][T16494] usb 1-1: config 0 descriptor?? [ 2038.606324][T16972] logitech 0003:046D:C29C.0011: unbalanced delimiter at end of report description [ 2038.608278][T16972] logitech 0003:046D:C29C.0011: parse failed [ 2038.608478][T16972] logitech 0003:046D:C29C.0011: probe with driver logitech failed with error -22 [ 2038.611781][T21402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.620196][T21402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2038.714140][ T5997] logitech 0003:046D:C50C.0012: unexpected long global item [ 2038.715170][ T5997] logitech 0003:046D:C50C.0012: parse failed [ 2038.715293][ T5997] logitech 0003:046D:C50C.0012: probe with driver logitech failed with error -22 [ 2038.926258][T16494] usbhid 1-1:0.0: can't add hid device: -71 [ 2038.926402][T16494] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2038.995502][T16494] usb 1-1: USB disconnect, device number 18 [ 2040.105912][ T5997] usb 2-1: USB disconnect, device number 17 [ 2040.753092][ T5860] usb 8-1: USB disconnect, device number 26 [ 2041.248065][T21432] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 2042.592869][ C0] vkms_vblank_simulate: vblank timer overrun [ 2042.723104][T16972] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2042.884325][T16972] usb 2-1: Using ep0 maxpacket: 16 [ 2042.887608][T16972] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2042.887647][T16972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2042.901682][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.901770][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.947004][T16972] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2042.947038][T16972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.947062][T16972] usb 2-1: Product: syz [ 2042.947078][T16972] usb 2-1: Manufacturer: syz [ 2042.947094][T16972] usb 2-1: SerialNumber: syz [ 2043.036832][T16972] usb 2-1: config 0 descriptor?? [ 2043.060442][T16972] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 2043.655191][ C0] vkms_vblank_simulate: vblank timer overrun [ 2043.960870][ C0] vkms_vblank_simulate: vblank timer overrun [ 2044.574902][ C0] vkms_vblank_simulate: vblank timer overrun [ 2045.107184][ C0] vkms_vblank_simulate: vblank timer overrun [ 2045.182919][T12468] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2045.456197][T17375] usb 2-1: USB disconnect, device number 18 [ 2045.623180][T12468] usb 1-1: device descriptor read/64, error -71 [ 2045.874871][ T37] kauditd_printk_skb: 937 callbacks suppressed [ 2045.874895][ T37] audit: type=1326 audit(2000001794.470:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21456 comm="syz.7.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 2045.874952][ T37] audit: type=1326 audit(2000001794.470:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21456 comm="syz.7.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 2045.880736][ T37] audit: type=1326 audit(2000001794.470:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21456 comm="syz.7.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 2045.880796][ T37] audit: type=1326 audit(2000001794.470:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21456 comm="syz.7.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 2045.880906][ T37] audit: type=1326 audit(2000001794.470:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21456 comm="syz.7.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 2045.880969][ T37] audit: type=1326 audit(2000001794.470:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21456 comm="syz.7.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 2045.881022][ T37] audit: type=1326 audit(2000001794.470:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21456 comm="syz.7.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 2045.881076][ T37] audit: type=1326 audit(2000001794.470:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21456 comm="syz.7.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 2045.901156][ T37] audit: type=1326 audit(2000001794.480:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21456 comm="syz.7.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 2045.913372][ T37] audit: type=1326 audit(2000001794.510:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21456 comm="syz.7.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8074af6c9 code=0x7ffc0000 [ 2046.012925][ T5860] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2046.019627][T21464] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4390'. [ 2046.212947][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 2046.217903][ T5860] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2046.217934][ T5860] usb 2-1: config 0 has no interface number 0 [ 2046.233699][ T5860] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2046.233734][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.233757][ T5860] usb 2-1: Product: syz [ 2046.233772][ T5860] usb 2-1: Manufacturer: syz [ 2046.233789][ T5860] usb 2-1: SerialNumber: syz [ 2046.293745][ T5860] usb 2-1: config 0 descriptor?? [ 2046.299465][ T5860] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2046.299496][ T5860] usb 2-1: selecting invalid altsetting 1 [ 2046.299512][ T5860] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2046.341236][ T5860] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2046.341839][ T5860] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2046.341902][ T5860] usb 2-1: media controller created [ 2046.419605][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2046.679806][T21474] use of bytesused == 0 is deprecated and will be removed in the future, [ 2046.679827][T21474] use the actual size instead. [ 2046.805029][ T5860] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2046.805098][ T5860] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2046.805629][ T5860] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2046.873027][T12468] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2047.049582][T12468] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2047.049619][T12468] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2047.049643][T12468] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2047.098246][T12468] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2047.098281][T12468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.098304][T12468] usb 1-1: Product: syz [ 2047.098320][T12468] usb 1-1: Manufacturer: syz [ 2047.098337][T12468] usb 1-1: SerialNumber: syz [ 2047.140537][ T5860] usb 2-1: USB disconnect, device number 19 [ 2047.170943][T12468] usb 1-1: config 0 descriptor?? [ 2047.173289][T21473] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2047.173561][T21473] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2047.198823][T12468] usb 1-1: ucan: probing device on interface #0 [ 2047.501450][T12468] usb 1-1: ucan: device protocol version -65533 is not supported [ 2047.501484][T12468] usb 1-1: ucan: probe failed; try to update the device firmware [ 2047.939449][ C0] vkms_vblank_simulate: vblank timer overrun [ 2048.352949][T12468] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 2048.502885][T12468] usb 8-1: Using ep0 maxpacket: 16 [ 2048.504885][T12468] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2048.504908][T12468] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2048.504933][T12468] usb 8-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 2048.504949][T12468] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.508278][T12468] usb 8-1: config 0 descriptor?? [ 2048.885676][T21499] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4403'. [ 2048.917531][T12468] holtek_mouse 0003:04D9:A081.0013: item fetching failed at offset 5/8 [ 2048.918508][T12468] holtek_mouse 0003:04D9:A081.0013: hid parse failed: -22 [ 2048.918596][T12468] holtek_mouse 0003:04D9:A081.0013: probe with driver holtek_mouse failed with error -22 [ 2049.120180][T12468] usb 8-1: USB disconnect, device number 27 [ 2049.304782][T21502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2049.304884][T21502] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2049.377953][T21502] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2049.378053][T21502] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2049.459176][T21502] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2049.459764][T21502] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2049.539583][T21502] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2049.615733][T21502] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2049.615883][T21502] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2049.674801][T21502] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2049.927245][T21519] FAULT_INJECTION: forcing a failure. [ 2049.927245][T21519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2049.927286][T21519] CPU: 1 UID: 0 PID: 21519 Comm: syz.1.4412 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2049.927315][T21519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2049.927329][T21519] Call Trace: [ 2049.927338][T21519] [ 2049.927348][T21519] dump_stack_lvl+0x189/0x250 [ 2049.927387][T21519] ? __pfx____ratelimit+0x10/0x10 [ 2049.927419][T21519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2049.927451][T21519] ? __pfx__printk+0x10/0x10 [ 2049.927496][T21519] should_fail_ex+0x46c/0x600 [ 2049.927532][T21519] _copy_to_user+0x31/0xb0 [ 2049.927559][T21519] simple_read_from_buffer+0xe1/0x170 [ 2049.927594][T21519] proc_fail_nth_read+0x1b6/0x220 [ 2049.927623][T21519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2049.927651][T21519] ? rw_verify_area+0x2ac/0x4e0 [ 2049.927678][T21519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2049.927716][T21519] vfs_read+0x206/0xa30 [ 2049.927754][T21519] ? __pfx_vfs_read+0x10/0x10 [ 2049.927778][T21519] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 2049.927814][T21519] ? mutex_lock_nested+0x154/0x1d0 [ 2049.927839][T21519] ? fdget_pos+0x253/0x320 [ 2049.927888][T21519] ksys_read+0x14b/0x260 [ 2049.927919][T21519] ? __pfx_ksys_read+0x10/0x10 [ 2049.927952][T21519] ? do_syscall_64+0xbe/0xfa0 [ 2049.927987][T21519] do_syscall_64+0xfa/0xfa0 [ 2049.928016][T21519] ? lockdep_hardirqs_on+0x9c/0x150 [ 2049.928044][T21519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.928067][T21519] ? clear_bhb_loop+0x60/0xb0 [ 2049.928095][T21519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.928117][T21519] RIP: 0033:0x7fb16cf6e0dc [ 2049.928137][T21519] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2049.928155][T21519] RSP: 002b:00007fb16b1ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2049.928179][T21519] RAX: ffffffffffffffda RBX: 00007fb16d1c5fa0 RCX: 00007fb16cf6e0dc [ 2049.928196][T21519] RDX: 000000000000000f RSI: 00007fb16b1ce0a0 RDI: 0000000000000006 [ 2049.928211][T21519] RBP: 00007fb16b1ce090 R08: 0000000000000000 R09: 0000000000000000 [ 2049.928224][T21519] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 2049.928238][T21519] R13: 00007fb16d1c6038 R14: 00007fb16d1c5fa0 R15: 00007ffd58a09298 [ 2049.928274][T21519] [ 2050.245564][T12468] usb 1-1: USB disconnect, device number 20 [ 2050.513065][ C0] vkms_vblank_simulate: vblank timer overrun [ 2051.253275][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 2051.253327][ T37] audit: type=1326 audit(2000001799.280:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21523 comm="syz.0.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2762bf6c9 code=0x7ffc0000 [ 2051.253646][ T37] audit: type=1326 audit(2000001799.280:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21523 comm="syz.0.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2762bf6c9 code=0x7ffc0000 [ 2051.253950][ T37] audit: type=1326 audit(2000001799.300:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21523 comm="syz.0.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2762bf6c9 code=0x7ffc0000 [ 2051.254399][ T37] audit: type=1326 audit(2000001799.300:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21523 comm="syz.0.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2762bf6c9 code=0x7ffc0000 [ 2051.254676][ T37] audit: type=1326 audit(2000001799.300:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21523 comm="syz.0.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2762bf6c9 code=0x7ffc0000 [ 2051.254967][ T37] audit: type=1326 audit(2000001799.320:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21523 comm="syz.0.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff2762bf6c9 code=0x7ffc0000 [ 2051.255413][ T37] audit: type=1326 audit(2000001799.320:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21523 comm="syz.0.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2762bf6c9 code=0x7ffc0000 [ 2051.255636][ T37] audit: type=1326 audit(2000001799.330:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21523 comm="syz.0.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2762bf6c9 code=0x7ffc0000 [ 2051.255950][ T37] audit: type=1326 audit(2000001799.340:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21523 comm="syz.0.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff2762bf6c9 code=0x7ffc0000 [ 2051.256233][ T37] audit: type=1326 audit(2000001799.370:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21523 comm="syz.0.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2762bf6c9 code=0x7ffc0000 [ 2051.725366][ T5800] Bluetooth: hci1: command 0x0405 tx timeout [ 2051.725726][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 2051.725758][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 2051.725862][ T5800] Bluetooth: hci5: command 0x0c1a tx timeout [ 2052.072961][T16972] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2052.262919][T16972] usb 2-1: Using ep0 maxpacket: 16 [ 2052.279873][T16972] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 2052.279908][T16972] usb 2-1: config 0 has no interface number 0 [ 2052.279966][T16972] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2052.279996][T16972] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2053.414591][T16972] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2053.414629][T16972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.414662][T16972] usb 2-1: Product: syz [ 2053.414678][T16972] usb 2-1: Manufacturer: syz [ 2053.414695][T16972] usb 2-1: SerialNumber: syz [ 2053.462126][T16972] usb 2-1: config 0 descriptor?? [ 2053.683321][T16972] usb 2-1: can't set config #0, error -71 [ 2053.686154][T16972] usb 2-1: USB disconnect, device number 20 [ 2053.773363][T21350] Bluetooth: hci5: command 0x0c1a tx timeout [ 2053.773407][T21350] Bluetooth: hci4: command 0x0406 tx timeout [ 2053.773437][T21350] Bluetooth: hci2: command 0x0406 tx timeout [ 2053.773464][T21350] Bluetooth: hci1: command 0x0405 tx timeout [ 2054.443350][ T5860] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 2054.595748][ T5860] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2054.595782][ T5860] usb 2-1: config 0 has no interface number 0 [ 2054.595840][ T5860] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2054.595867][ T5860] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2054.595897][ T5860] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2054.595927][ T5860] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2054.595966][ T5860] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 2054.595996][ T5860] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2054.596046][ T5860] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2054.596073][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.734164][ T5860] usb 2-1: config 0 descriptor?? [ 2054.735829][T21549] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2054.736185][T21549] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2054.794780][ T5860] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2055.010189][T21549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2055.021824][T21549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2055.208055][ C1] vkms_vblank_simulate: vblank timer overrun [ 2055.239243][T12468] usb 2-1: USB disconnect, device number 21 [ 2055.258240][T12468] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 2055.488800][ C1] vkms_vblank_simulate: vblank timer overrun [ 2056.331042][T21350] Bluetooth: hci5: command 0x0c1a tx timeout [ 2056.331121][ T5800] Bluetooth: hci1: command 0x0405 tx timeout [ 2056.331344][ C1] vkms_vblank_simulate: vblank timer overrun [ 2056.743159][T21575] sctp: [Deprecated]: syz.0.4430 (pid 21575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2056.743159][T21575] Use struct sctp_sack_info instead [ 2057.152930][T12468] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2057.351572][ C1] vkms_vblank_simulate: vblank timer overrun [ 2057.771322][T12468] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2057.771349][T12468] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2057.771367][T12468] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2057.782983][ T5997] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2057.829364][T12468] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2057.829447][T12468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.829472][T12468] usb 1-1: Product: syz [ 2057.829489][T12468] usb 1-1: Manufacturer: syz [ 2057.829507][T12468] usb 1-1: SerialNumber: syz [ 2057.877076][T12468] usb 1-1: config 0 descriptor?? [ 2057.878073][T21581] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2057.878191][T21581] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2057.880729][T12468] usb 1-1: ucan: probing device on interface #0 [ 2057.965939][ T5997] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2057.965978][ T5997] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.972473][ T5997] usb 10-1: config 0 descriptor?? [ 2058.007570][ T5997] cp210x 10-1:0.0: cp210x converter detected [ 2058.088291][T12468] usb 1-1: ucan: device protocol version -65533 is not supported [ 2058.088322][T12468] usb 1-1: ucan: probe failed; try to update the device firmware [ 2058.255447][T17375] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2058.409451][ T5997] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2058.409838][ C0] raw-gadget.1 gadget.9: ignoring, device is not running [ 2058.413094][ T5997] cp210x 10-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 2058.413125][ T5997] cp210x 10-1:0.0: GPIO initialisation failed: -32 [ 2058.427825][ T5997] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2058.440815][ T5997] usb 10-1: USB disconnect, device number 4 [ 2058.442899][T17375] usb 2-1: Using ep0 maxpacket: 32 [ 2058.456818][ T5997] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2058.457354][ T5997] cp210x 10-1:0.0: device disconnected [ 2058.479317][T17375] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 2058.479337][T17375] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2058.479349][T17375] usb 2-1: config 0 has no interface number 0 [ 2058.479379][T17375] usb 2-1: config 0 interface 120 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2058.479397][T17375] usb 2-1: config 0 interface 120 has no altsetting 0 [ 2058.503181][T17375] usb 2-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76 [ 2058.503222][T17375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.503245][T17375] usb 2-1: Product: syz [ 2058.503261][T17375] usb 2-1: Manufacturer: syz [ 2058.503283][T17375] usb 2-1: SerialNumber: syz [ 2058.568151][T17375] usb 2-1: config 0 descriptor?? [ 2058.580941][T17375] rndis_host 2-1:0.120: skipping garbage [ 2058.580968][T17375] usb 2-1: bad CDC descriptors [ 2058.583941][T17375] cdc_acm 2-1:0.120: Zero length descriptor references [ 2058.583989][T17375] cdc_acm 2-1:0.120: probe with driver cdc_acm failed with error -22 [ 2058.846001][ T5997] usb 2-1: USB disconnect, device number 22 [ 2058.981088][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 2058.981110][ T37] audit: type=1326 audit(2000001807.570:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21615 comm="syz.8.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915fd2f6c9 code=0x7ffc0000 [ 2058.981325][ T37] audit: type=1326 audit(2000001807.570:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21615 comm="syz.8.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915fd2f6c9 code=0x7ffc0000 [ 2058.982024][ T37] audit: type=1326 audit(2000001807.570:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21615 comm="syz.8.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f915fd2f6c9 code=0x7ffc0000 [ 2058.982195][ T37] audit: type=1326 audit(2000001807.570:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21615 comm="syz.8.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915fd2f6c9 code=0x7ffc0000 [ 2058.982457][ T37] audit: type=1326 audit(2000001807.570:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21615 comm="syz.8.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915fd2f6c9 code=0x7ffc0000 [ 2058.982641][ T37] audit: type=1326 audit(2000001807.570:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21615 comm="syz.8.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f915fd2f6c9 code=0x7ffc0000 [ 2059.046086][ T37] audit: type=1326 audit(2000001807.570:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21615 comm="syz.8.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915fd2f6c9 code=0x7ffc0000 [ 2059.046143][ T37] audit: type=1326 audit(2000001807.640:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21615 comm="syz.8.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f915fd2f6c9 code=0x7ffc0000 [ 2059.046192][ T37] audit: type=1326 audit(2000001807.640:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21615 comm="syz.8.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915fd2f6c9 code=0x7ffc0000 [ 2059.046237][ T37] audit: type=1326 audit(2000001807.640:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21615 comm="syz.8.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915fd2f6c9 code=0x7ffc0000 [ 2059.176849][ C1] vkms_vblank_simulate: vblank timer overrun [ 2059.341495][ C1] vkms_vblank_simulate: vblank timer overrun [ 2059.915583][T21628] netlink: 'syz.8.4449': attribute type 1 has an invalid length. [ 2059.915610][T21628] netlink: 232 bytes leftover after parsing attributes in process `syz.8.4449'. [ 2060.231958][T17375] usb 1-1: USB disconnect, device number 21 [ 2060.885514][T17375] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 2061.442926][T17375] usb 1-1: device descriptor read/64, error -71 [ 2061.540887][T21648] vxcan1: entered allmulticast mode [ 2061.541117][T21649] vxcan1: left allmulticast mode [ 2061.685199][T17375] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 2062.103748][T17375] usb 1-1: device descriptor read/64, error -71 [ 2065.529188][T17375] usb usb1-port1: attempt power cycle [ 2065.643683][ T5860] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2065.978955][T17375] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 2066.157132][ T5800] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 2066.182918][T17375] usb 1-1: device not accepting address 24, error -71 [ 2068.600434][T21703] ------------[ cut here ]------------ [ 2068.600451][T21703] WARNING: CPU: 0 PID: 21703 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 2068.600498][T21703] Modules linked in: [ 2068.600518][T21703] CPU: 0 UID: 0 PID: 21703 Comm: syz.0.4468 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2068.600545][T21703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2068.600559][T21703] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 2068.600592][T21703] Code: c7 c7 88 3a c5 8e 48 c7 c6 5f 1e da 8c 48 c7 c2 33 f4 d8 8c 4c 89 f9 e8 e2 35 f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 c4 fe 03 09 0f 1f 40 00 90 90 [ 2068.600612][T21703] RSP: 0018:ffffc9000549fd00 EFLAGS: 00010206 [ 2068.600632][T21703] RAX: f9a0fd6285f5ce00 RBX: ffff888057ad0f00 RCX: 0000000000000000 [ 2068.600651][T21703] RDX: 0000000000000000 RSI: ffffffff8b3ddd40 RDI: 00000000ffffffff [ 2068.600666][T21703] RBP: ffffc9000549fe68 R08: 0000000000000000 R09: ffffffff8ac2bb41 [ 2068.600682][T21703] R10: dffffc0000000000 R11: fffffbfff1dac6cf R12: 1ffff11004dd4d3d [ 2068.600698][T21703] R13: 0000000000000000 R14: ffff888057ad0f08 R15: ffff88804d5b0000 [ 2068.600713][T21703] FS: 0000555570f11500(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 2068.600730][T21703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2068.600746][T21703] CR2: 00007fd8074830c0 CR3: 0000000055c48000 CR4: 00000000003526f0 [ 2068.600776][T21703] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2068.600792][T21703] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2068.600808][T21703] Call Trace: [ 2068.600818][T21703] [ 2068.600830][T21703] do_exit+0x105/0x2300 [ 2068.600858][T21703] ? rt_mutex_slowunlock+0x493/0x8a0 [ 2068.600876][T21703] ? __pfx_do_exit+0x10/0x10 [ 2068.600895][T21703] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2068.600915][T21703] ? rt_spin_unlock+0x161/0x200 [ 2068.600932][T21703] do_group_exit+0x21c/0x2d0 [ 2068.600947][T21703] __x64_sys_exit_group+0x3f/0x40 [ 2068.600960][T21703] x64_sys_call+0x21f7/0x2200 [ 2068.600974][T21703] do_syscall_64+0xfa/0xfa0 [ 2068.600993][T21703] ? lockdep_hardirqs_on+0x9c/0x150 [ 2068.601011][T21703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2068.601024][T21703] ? clear_bhb_loop+0x60/0xb0 [ 2068.601053][T21703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2068.601066][T21703] RIP: 0033:0x7ff2762bf6c9 [ 2068.601078][T21703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2068.601089][T21703] RSP: 002b:00007ffe8e6bc558 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2068.601104][T21703] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff2762bf6c9 [ 2068.601113][T21703] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 2068.601121][T21703] RBP: 00007ffe8e6bc5bc R08: 0000000000000254 R09: 00000000000927c0 [ 2068.601131][T21703] R10: 00000000003ffb88 R11: 0000000000000246 R12: 00000000000000de [ 2068.601140][T21703] R13: 00000000000927c0 R14: 00000000001f8783 R15: 00007ffe8e6bc610 [ 2068.601161][T21703] [ 2068.601168][T21703] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2068.601180][T21703] CPU: 0 UID: 0 PID: 21703 Comm: syz.0.4468 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2068.601196][T21703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2068.601204][T21703] Call Trace: [ 2068.601210][T21703] [ 2068.601216][T21703] dump_stack_lvl+0x99/0x250 [ 2068.601235][T21703] ? __asan_memcpy+0x40/0x70 [ 2068.601251][T21703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2068.601271][T21703] ? __pfx__printk+0x10/0x10 [ 2068.601305][T21703] vpanic+0x237/0x6d0 [ 2068.601326][T21703] ? __pfx_vpanic+0x10/0x10 [ 2068.601359][T21703] panic+0xb9/0xc0 [ 2068.601381][T21703] ? __pfx_panic+0x10/0x10 [ 2068.601418][T21703] __warn+0x31b/0x4b0 [ 2068.601438][T21703] ? kcov_task_exit+0x13c/0x150 [ 2068.601470][T21703] ? kcov_task_exit+0x13c/0x150 [ 2068.601494][T21703] report_bug+0x2be/0x4f0 [ 2068.601514][T21703] ? kcov_task_exit+0x13c/0x150 [ 2068.601532][T21703] ? kcov_task_exit+0x13c/0x150 [ 2068.601548][T21703] ? kcov_task_exit+0x13e/0x150 [ 2068.601565][T21703] handle_bug+0x84/0x160 [ 2068.601578][T21703] exc_invalid_op+0x1a/0x50 [ 2068.601591][T21703] asm_exc_invalid_op+0x1a/0x20 [ 2068.601603][T21703] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 2068.601620][T21703] Code: c7 c7 88 3a c5 8e 48 c7 c6 5f 1e da 8c 48 c7 c2 33 f4 d8 8c 4c 89 f9 e8 e2 35 f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 c4 fe 03 09 0f 1f 40 00 90 90 [ 2068.601631][T21703] RSP: 0018:ffffc9000549fd00 EFLAGS: 00010206 [ 2068.601643][T21703] RAX: f9a0fd6285f5ce00 RBX: ffff888057ad0f00 RCX: 0000000000000000 [ 2068.601653][T21703] RDX: 0000000000000000 RSI: ffffffff8b3ddd40 RDI: 00000000ffffffff [ 2068.601662][T21703] RBP: ffffc9000549fe68 R08: 0000000000000000 R09: ffffffff8ac2bb41 [ 2068.601671][T21703] R10: dffffc0000000000 R11: fffffbfff1dac6cf R12: 1ffff11004dd4d3d [ 2068.601681][T21703] R13: 0000000000000000 R14: ffff888057ad0f08 R15: ffff88804d5b0000 [ 2068.601693][T21703] ? rt_spin_lock+0x1c1/0x3e0 [ 2068.601714][T21703] do_exit+0x105/0x2300 [ 2068.601738][T21703] ? rt_mutex_slowunlock+0x493/0x8a0 [ 2068.601762][T21703] ? __pfx_do_exit+0x10/0x10 [ 2068.601782][T21703] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2068.601801][T21703] ? rt_spin_unlock+0x161/0x200 [ 2068.601818][T21703] do_group_exit+0x21c/0x2d0 [ 2068.601833][T21703] __x64_sys_exit_group+0x3f/0x40 [ 2068.601845][T21703] x64_sys_call+0x21f7/0x2200 [ 2068.601859][T21703] do_syscall_64+0xfa/0xfa0 [ 2068.601876][T21703] ? lockdep_hardirqs_on+0x9c/0x150 [ 2068.601894][T21703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2068.601908][T21703] ? clear_bhb_loop+0x60/0xb0 [ 2068.601924][T21703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2068.601936][T21703] RIP: 0033:0x7ff2762bf6c9 [ 2068.601947][T21703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2068.601959][T21703] RSP: 002b:00007ffe8e6bc558 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2068.601972][T21703] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff2762bf6c9 [ 2068.601981][T21703] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 2068.601990][T21703] RBP: 00007ffe8e6bc5bc R08: 0000000000000254 R09: 00000000000927c0 [ 2068.602000][T21703] R10: 00000000003ffb88 R11: 0000000000000246 R12: 00000000000000de [ 2068.602008][T21703] R13: 00000000000927c0 R14: 00000000001f8783 R15: 00007ffe8e6bc610 [ 2068.602030][T21703] [ 2068.602207][T21703] Kernel Offset: disabled