last executing test programs: 45m48.434715375s ago: executing program 0 (id=1): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) 45m47.342912271s ago: executing program 0 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x7e, &(0x7f00000002c0), 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000300010000", 0x7) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) 45m32.248617979s ago: executing program 32 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x7e, &(0x7f00000002c0), 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000300010000", 0x7) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) 42m56.905849119s ago: executing program 2 (id=365): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000040)={0x1, @sdr={0x34325842, 0x7}}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x1, 0xc9}}}, 0x6) 42m54.980456138s ago: executing program 2 (id=368): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r1, 0x265a, 0x10000, 0xc0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x3, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x16) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="010002006401010000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbmon(0x0, 0xba, 0x280802) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x82) socket(0x23, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000040)=""/62, 0x3e) read$qrtrtun(0xffffffffffffffff, &(0x7f00000004c0)=""/57, 0x39) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 42m51.342942515s ago: executing program 2 (id=375): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r0 = socket(0x1e, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="51e657b8220ca193c9de9030c3c7175ae0132383bf66bd1ea5bd07a8092f5c1c356ef81ebc8a3ed11284c75e4991ca84a0eda6ac4148ace258f78bc2340c45834bc28c93523f00c13f7bda920d040647a60c2f548c6d1556573b", 0x5a}, {&(0x7f00000002c0)="ee3714aa7756572d12ad3cd80207f0ea76a0bc", 0x13}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) getpeername$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003d00), 0x0, 0x48800) shutdown(r3, 0x1) 42m49.273795465s ago: executing program 2 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x290) write$cgroup_int(r1, &(0x7f00000000c0)=0x1c3, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYRESHEX=r1], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2, 0x0, 0x3}, 0x18) r3 = inotify_init1(0x80000) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x10000a0) r5 = dup(r3) io_uring_enter(r1, 0x3b85, 0x5430, 0x44, &(0x7f00000001c0)={[0x8]}, 0x8) bind$rds(r1, &(0x7f00000003c0)={0x2, 0x4e22, @local}, 0x10) inotify_rm_watch(r5, r4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) r7 = dup(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) sched_setscheduler(0x0, 0x2, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x0, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) write$uinput_user_dev(r9, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x7}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0xffdffffe, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x2c40000, 0x5, 0x0, 0x0, 0xfffffffd, 0x6da47515, 0x2, 0x0, 0x4, 0x6, 0xfffffffd, 0x7, 0x0, 0x4, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x2], [0x10, 0xffffffff, 0x7, 0x200000, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9876, 0x17, 0x0, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x0, 0xfffffffc, 0x0, 0x100, 0x0, 0x103, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0x80000001, 0x7fffffff, 0x10, 0x7fffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x18c, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x3, 0x4000000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x800000, 0x100007], [0x10000, 0x6, 0x0, 0x0, 0x3, 0x1, 0xa000000, 0x3ff, 0x9, 0xffff7fff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfbfffffc, 0x2af, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x400, 0x0, 0x82ce, 0x80, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x1000007, 0x0, 0x0, 0x0, 0xb, 0x40000000], [0xb2a, 0x81, 0x0, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x0, 0x0, 0x80, 0x0, 0x3, 0x3, 0x2, 0x5, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x1b9, 0x40000000, 0x9, 0x3, 0x0, 0x2, 0x6, 0xbfb6, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0xfffffffb, 0x0, 0xfffffffe, 0x5, 0x400, 0x7, 0x9, 0x0, 0x8000, 0x6, 0x1000000, 0x4, 0x3, 0x3]}, 0x45c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x804) r11 = socket$inet(0x2, 0x2, 0x1) connect$inet(r11, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) 42m44.985171399s ago: executing program 2 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x7ff}]}]}, 0x28}}, 0x0) 42m44.432955284s ago: executing program 2 (id=390): socket$netlink(0x10, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x104}, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x1, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "72657eb3097c889f"}, 0x6}}]}, 0x2c}}, 0x20008030) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000040)={0x0, 0x1, @stop_pts=0x5}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3101) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000940)) 42m25.729465369s ago: executing program 33 (id=390): socket$netlink(0x10, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x104}, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x1, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "72657eb3097c889f"}, 0x6}}]}, 0x2c}}, 0x20008030) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000040)={0x0, 0x1, @stop_pts=0x5}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3101) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000940)) 42m5.591793364s ago: executing program 3 (id=451): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @main=@item_012={0x2, 0x0, 0xb, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) r2 = epoll_create(0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = dup2(r2, r3) close_range(r4, 0xffffffffffffffff, 0x0) 42m0.571106888s ago: executing program 3 (id=459): r0 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) r1 = dup(r0) read$FUSE(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=r0, @ANYBLOB="96dbb0ddad9100e891923cf41728ad8e337b751096007234909824a6f50e58768d436a5202670eb601646abdfe23cc8e3485fbfac04ba2b9af2045894e281d4be6e75a8389ad0000000000000000000000000000000000000000000000e51c32209245f877ea5c02c861347c6ff516acfe47cca20289a7cf5029c1cb30dade6acbd8fe69d636dfa0163fa36e3c53"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x71, r2}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900734c01000000", @ANYRES32, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 42m0.504811664s ago: executing program 3 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x401, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) getpgrp(0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) syz_emit_ethernet(0xe73, &(0x7f0000001180)=ANY=[], 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$dri(0x0, 0x1ff, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fc"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) sendto$packet(r6, 0x0, 0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x158) 41m50.544543289s ago: executing program 3 (id=475): syz_open_dev$dri(0x0, 0x1ff, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wlan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_VP_INDEX(r0, 0x4068aea3, &(0x7f0000000140)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 41m47.439547602s ago: executing program 3 (id=484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280), 0x80) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0xffffffeb, 0x200, 0x489c, 0x1}, 0x3c) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 41m43.7403579s ago: executing program 3 (id=489): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) socket(0x2, 0x80805, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="018d00"}) 41m28.614735782s ago: executing program 34 (id=489): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) socket(0x2, 0x80805, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="018d00"}) 37m2.662999657s ago: executing program 5 (id=1010): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 36m55.672030619s ago: executing program 5 (id=1016): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r0, 0x0, 0x0) 36m55.621656278s ago: executing program 5 (id=1017): r0 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r0, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 36m55.42481754s ago: executing program 5 (id=1018): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x2a401, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read$FUSE(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000040), 0x49, 0xc10) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421, 0x0, 0x6, 0x2}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0x40505331, &(0x7f0000000180)={0xf, 0x0, 0x0, 'queue1\x00'}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'pcl818\x00', [0x8001, 0xfffffff4, 0x1, 0x7, 0x3, 0xccb, 0x8, 0x8000ab, 0xe, 0x8000, 0xffffffff, 0xbefa, 0x5, 0x1, 0x81d, 0xffffffff, 0x400001, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0x9, 0x20001e58, 0x5, 0x2, 0x3c, 0xa, 0x2, 0x4, 0xd, 0x9]}) 36m54.005856428s ago: executing program 5 (id=1019): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x6d, 0xbb, 0x8, 0x3, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x40, 0x7, 0xf185}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$6lowpan_control(r7, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x5, 0x0, 0x0, r8}) syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0xfffeffff, 0x7, 0x0, 0x100, 0x0, 0x40500004, r2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000d40)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x40000000, 0x0, 0x3834}, 0x8}) 36m52.929594179s ago: executing program 5 (id=1020): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000380)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) unshare(0x66000080) syz_usb_connect(0x0, 0x3b, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\t\x00\x00'], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB="9b00000000000000070000faffffff0000000000", @ANYRES32, @ANYRES16=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @free_buffer], 0x0, 0x0, &(0x7f0000000140)}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r5, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000040)={[{0x2, 0x1, 0x81, 0x7f, 0x6, 0x7, 0x1, 0x7f, 0x7, 0x5, 0x7f, 0x92, 0x80000}, {0x8ab, 0x0, 0x1, 0x40, 0x7, 0x9, 0x8, 0xfa, 0x0, 0x6d, 0x6, 0x9, 0xa32}, {0x5, 0x6, 0x78, 0xa1, 0xd, 0x8, 0x6, 0x1, 0x1, 0x5, 0x1, 0xff, 0x7}], 0x7}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 36m37.564072243s ago: executing program 35 (id=1020): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000380)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) unshare(0x66000080) syz_usb_connect(0x0, 0x3b, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\t\x00\x00'], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB="9b00000000000000070000faffffff0000000000", @ANYRES32, @ANYRES16=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @free_buffer], 0x0, 0x0, &(0x7f0000000140)}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r5, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000040)={[{0x2, 0x1, 0x81, 0x7f, 0x6, 0x7, 0x1, 0x7f, 0x7, 0x5, 0x7f, 0x92, 0x80000}, {0x8ab, 0x0, 0x1, 0x40, 0x7, 0x9, 0x8, 0xfa, 0x0, 0x6d, 0x6, 0x9, 0xa32}, {0x5, 0x6, 0x78, 0xa1, 0xd, 0x8, 0x6, 0x1, 0x1, 0x5, 0x1, 0xff, 0x7}], 0x7}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 29m32.38496775s ago: executing program 1 (id=1904): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001480), 0x121142, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[], 0xf4}, 0x1, 0x0, 0x0, 0x404}, 0x40000) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00M\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYRES32, @ANYRESHEX=r1], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="2aba0ff41868b4928b43128fde3774ddda8f36adc7061e3a489fa83c72c32fc4fc71517e328c62d8", @ANYRES64=0x0], 0x10) 29m28.948863081s ago: executing program 1 (id=1909): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) time(&(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fcntl$getown(r0, 0x9) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000480)="129adf16b30d19ec37813284e422ab0610bc72f08111dd50e698f2aacb60b529d0082e298f758edae93d0bceeaa1a35be0efd0a5825c37d159c40513cc54", &(0x7f0000000040)=""/7, 0x4}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r3, 0x0, 0x0, 0x40000021, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f00000000c0)=""/24, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) 29m25.670332955s ago: executing program 1 (id=1915): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x55a97588810c4848, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000010c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 29m18.166424279s ago: executing program 1 (id=1920): ptrace$setregset(0x4205, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0xc094) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) 29m16.90095204s ago: executing program 1 (id=1921): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000200402152ee03451035db90a10e1607e57a0b3ad9a962c55f619e719576b2b665f67852", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf253100000008000300", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x98002, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000002140), 0x1ad, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) setrlimit(0x9, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 29m14.276995516s ago: executing program 1 (id=1925): socket$inet(0x2, 0x6000000000000001, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000600)={0x0, 0x0, 0x9}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x10) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731a", 0x8c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x1, 0x7, 0x401, 0x6, 0x5, 0x9, 0x200, 0x0, 0x5, 0x7, 0xfffffffffffffff3, 0x8, 0x1ba900000000, 0x4, 0x6, 0x4], 0x100000, 0x49000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x8, r8, 0x0, 0x7, 0x145975, 0x53, 0x0, 0x10005}) 28m59.16046649s ago: executing program 36 (id=1925): socket$inet(0x2, 0x6000000000000001, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000600)={0x0, 0x0, 0x9}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x10) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731a", 0x8c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x1, 0x7, 0x401, 0x6, 0x5, 0x9, 0x200, 0x0, 0x5, 0x7, 0xfffffffffffffff3, 0x8, 0x1ba900000000, 0x4, 0x6, 0x4], 0x100000, 0x49000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x8, r8, 0x0, 0x7, 0x145975, 0x53, 0x0, 0x10005}) 1m0.944233059s ago: executing program 6 (id=7484): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000200), &(0x7f00000001c0)) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/73, 0x49}], 0x1) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) 59.887045781s ago: executing program 6 (id=7488): unshare(0x2a020400) r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 59.631992835s ago: executing program 6 (id=7490): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000cc0)="f773091228a43a58c864f1e0366b07de21fe64fbd0bf85a894f8d30ff6cc5256c4d3abd726c119dbebd0ddca6ad62fdbc55f46668ec0858ba96bf6733f0be147e9108ebf89278ca74e07fed107889459c0a5e30616db71c6973818d14e3571c410aef47e6e54ba02e48ec733ebc921795a1f431faeecbc65696ffb9e08760f45650f650d24af651d9986b956d8dd66017f17012f2358b5f69dd63f9aa5fad2ab7ee6df7c99f0b5601e1dab2ed5ca6aa237c52a838d7d51293628dde608fc4ec691b6e2023ff6a6813c505fc81bd0a0de800a5bd701a401ed07139dfa917e524c7d8fd47094122e9acb0382682d0b2adc54ab61c2d9aac6b5b0d50623187e31ca089585dab35411759db09bc44178011883cd0d5ab3fc6f8be3d0e71f083fb911a229995801eeab83581aa5bde0db85ff5c77aa311fdc9f9b4b4de0a96d371b6371ace3923e5557c7e911f522e132bae799ec6d11a43ff7420d4833d306f261ab6636b1f7d250829700456e3aa69bdfa28f24acd27b4df16cf417a7bbb852fe7b50e3841708110ab82af1e1145c542afb83cd7b542c6e310a86cdb76d492955312ae6665c95f36a0683bd12a394d6a45a0f38fcde7d665c4afbb329f3486e1b21af321b3f933d585d885485e6d9448b35e0f8d825365ce26af6cb8fb7466b66491e34b5313019beb3b2934b369daaa16b73734d3f787dcbe3115a3da3804aca82335ac9b20823728a6ee0d292dbcebb103ecdec0d27ae3a3ad5e0040cb78abfddfe16f98397c5f1f910372454722a612a0cc91ea8f709544f22c4e3bd70840745638d83b74197c0b22331e3b107af26097a37c8dd2b91e5156af1a33e06846eb15aa2fe95b6df98bfa7fe28693e0ed082aacb3181b657f81790d4556506f8f2a3753bfbd2949429dc3cd1e11291e82dc3db974a13d88d9cb4242165201f3d9b130c128d057bb9167f12859fbef6de8216d70eec7d3706b9013f9b8f61d8059ab50904b66a32376840d8c3e714bd6ae87640f352ca2b4fa2c1cd83f28d5de889f1454605fdd49c7a7cf1af226895ad6ce6612063d88ae60f5b8af22ef1306f55205152f0e72f2edee901bd89136eebed01475edd572f5a4da8b34bc6db8f29944cc720cf2b03cd2f768a34a81fdd58693fe859edfb2799b3f90cae32b6d2c577dfb9e03ab2bb25a41f53a42c11c89a615bf1c44f5c61084c70882a55fb3039792e9fff127b323c0783c506b6e4b7079cf27f67fdb191256b7c908e1e30a8f72072ac4323337062da5132369135408bf74e1b1f6c1bae332f75291d7a4f4aad4b9f70be298868305486c519434652da2535ff7924324472fb23c84558a5b1578ae94c8805becdb99eba47add535fcb7a72ad9b5d631b824a35d58807ea066bbe53859c50b5adb3508ccb3ae974ee187e40dbfc09a326b06a6004aa81c6c91eadf97ccc77cf9ccf4ed92199d95c2c8d5c965594e306d4e8b78d99d2ab0d282890c9d34639d719488b8d5fd3832a01f1a5f75449f460688e63825421aecef8a43a187739d8b1e14e54c658d57e4cf607430ea530720b3308609b57a9148ad5b921d94b6bb775880d492bb515bbd30caeb4ab8fc8b0c392a6c76dc63ca136d6e76e49a0878ea9577831e7bb3b4e3915b09222d3ccbec1b3dc4b1fd1515f302ba48d15adb9fd7aeb26fe553a60dcf82ff70b6c5d7389c54194e46bf7768584acbc18c7fd7fe0fdb11dd32a322f0ae97b481da34b47d0abc16c6d12f8e9d12db2dee5a1d66d5876bc6e100e02f3a921088947fc1d0a4d8e4e878e92cee18ceb78c7d9bf0204cc515eb8185b985e967134a1400b6a5b945b3ff86f62c2da8fe6dc8628ad36910b863a4b7cc519d853e6e3c6aff4d91862dc8c1364a8559f0c58f88a90ca4bc4a9d1aa2026229d46482819df72902a8d77615042340d758bb49153eb695823d43ef50e10e700a7303a4b798499464f39412a7b2cd7c460717364c595f3711d9ccb710075ae301100ce9f0c5d8b6ccf4f673112e2a7c2b29e56ab556d3e9dc0e777da840e1e304a24227bc9d1ba3c31f2bfc39b6ffe06e7dfc08ffbb799f56c5e9b4ce9120d10bc52d4d105167b30be7d4afa0007c59c3324121568fd4f48778d7b17a1ef117036520d25367253d763dd2f1369ef6562afeaa89dcbdd433ef80f92c41143cfeaf46325f2191b1b29b6a457e0a88e7a54dfede8e186ad4fd4d3eab77136d9e403dda03ddfb24708d648840427087481424d21b25a52922a359129ce109fec903fd33f03ea6176cb7cb64567d08204902acd1f1d0146c7c8ef5ca24d04209f2b55974ed7e11eb081beed06eb03ddb5ae80e3424d52741a5e7c8c89006a62f6ba37a7e39b75566b8d57cb11fd23ff73f7f251bfcfb74336760296a801488f77a8f0a830eb4ca2987be3ce42e2aad2f4a975d95eaf0834fbab05a7e97837c0d49ba31c93b2cd3ea05319ce1d223df3a08fc35d6d99bbc863602bc84d26926241ff70d7715d27d60b201315264f2ee3ed0ee2d1959228d9b388019151580a4a68449fd37cd2c894d749a0a281c4e458f5bfc76189e7c2ae21e318a99792090e7bb8bc73ead76439a4408b2ca49678ed93ececfdaedde0bea7f8df33910ab08518829435e642bad3aa9e373fdeb80c981e8f6f11602a8cb23b25dd718296c698aa602889638041b286c3234ae10d7d0c8ff1fe301735a467475db85fe88d155f4a8ac86937392129141f2784ff559c7dc79f0fc6a43c940fe735d91c74e3975415969548a9d7e996b5d6a0801e09519ab3852e8c5cc23f380be09fb7fd37e0cbc9f540a613aa289cce31fa3ee913e364a8a8fc1490087863222160b6899e32a391e090d41bfc961943d03f7b2f8e49750a04a20f2e2ca2951498e0fa8cf0d33d022d490704015c0a83ffb9f44114e37a386f2c7f940cce802edca5ff4ddeae0666167c2a466aecd919629185f491a210d407ebd09600406178ecc818a7cc4867ff14234efad41453027f6cbc62b4649fea7b227ede841e9816d98636c2a2c950680983d2375233a7dd64dc71c9733f5502ff4016724506ff026ba71df2623446f083df9e6df6e7fb701da63c640f8599e09cd7ea1b818bc34349a051430fe5791df7724eda9eae0adb53ec1e844565abe44063a465bb2ea15fa53342cd1229f0b6092c7d544dd0ffb9cadda6930115a66a5ae892f3661e32eb3ace734f4386da1ed040dfb0155ee3f079ec72a3bd8da69b943250a3d33fdc8f4666d77c680db12e0aacd2ea7adf4b00f86733ed27d3c7d677f6a7b60c3657a599a7a36c88e5c805eb7bc022613b6ed3489ac3217bc25e862973d9b3f2235049452aeeac96f3e40044df6d2dbde64b819bf1ee67c6a03566e1e5c8d123adc7eb0410be047cfecce48a5eaf41a718f5d1b78c17fbb6fbcf003f6b1dba0a00558ae60e6413c271bb0dbf733aedd68eab4f8d884bb46b5fd833dd718e6c4ea58ff44f4137372494ae1c74d2ce3cd66526518a798f095fa804088d18d2695740e930b8d57eb55ade001c1cc9c734b77da57482e024503a1ea9e2a43943a308b5285d622ab623b860603122b41fcc249f224212cfbdc8dbc15e791ea6f51c44154619c98661664b11a34d20ecec388d69f5b32fc674d0ddf2b1365c8709a529b2eb3ba0a0547bdde3adcd272e0a41de9904999fd890b75fed8e60f1f00bc8aac46d8043ff2451541f644f270d9fc65a0b772078b05a6ce60c0df8b2540d89d052fae472867edf3b03a252bfe8e9ca3d2e31c7950851d2e7e7273c0109f2ac002747d277b6c9e6a9bd51d57c59b178a6e329c81c7bf2f5c5d345b2e990093b2e47f79807a62017fcd34efc671c7c6270a1a80f60fba3fbabb48f294ee3b1425b6e8c0fe7b14c31c2b0100d8c5f50349cff1e4e0d3aaee1f4afe10f5c234c1c4ba670111ba0d29694811f3dc242a73a9b042535f3ae8ec5b94240fd091cdfa157e7d27bf26412cdbe54ef55eb5d7183ca5ef0a9f5e81aa6dbf705e3a0d542a7573ec99ae67293970aceb8ca52c9eb5786196cb61947436581745df8a5ca11706001844f581317d43e29fc6eb1d1b011278eb4d77cc6a2e1defabaf87177a162f6269abd97503cc26aa73a18a5954e88692b63e34ba673a6b302ea2a59679ef60094c3db6f3874dab8affd12a7d12c53e77efa807d3ad845b908438b59461da39c072c6ef2fb1889f9a9e39a9256bdc71179c98399e60df6b8224a30e22ffd9010488cbc101ef020ea78a90977fe35586b4140339bffbcf32d81b04f789a195a44f289f44c714e6163afada072871122aaf6f60da967554de66cc4ecbf50aef5d02af874873ae5a36a576eb5dfd749b6168e395ce5817d6275b25d6c6ecdc6d8c4a39fa98f749d6584ec0312bd781a0a14fca35c8b0ac2cdb5a4b15d03966ce40cae66ded0cf7afbc5f1a580bcc596360f9253a70f05ebf3a58ca30b05b6edf4367d988e6dde2cedf37237ebd56da02edcebd9ba841c210ab52bdd869fbf3a783b44670483a012419a50c0114863a97d9f152e63a3ffffc4c83710ef02a3a9c718450f4e8f918c2c551d477a88e91c67bf1337a52f4d680e9607a295feafe09e1a0c5e3c1a18c5390a6a84fa19dbfa2abe421021b471f1e80811a4ba036a9a457fa323b7fa65e666a08f673ca92a02c03d6eba96604f770444b96297307bc23f6a928f0da3d97f522125592c092bb32f97882a59603b268167e970bda981299524929e111e31b3301285cfd9bbbf0263d7e2e19cd42e56920565eb5f45f99455b0851dcefd6d91575ec4e273afaad0f7e831d46a8d5f95244e06febe9d9c76fe2de20e561b11d39a4884d29e68773aa85327279e667884f8d4f965e8b12815076da686c02d17a32bc97de630508b06b091a7fa705bd705a3b5e85975db69d4198f23547686cbd42dfeb495d2c0c2c4c155dd1c8c0522836b271015c8f23a5c129e49c0def56c0fd2a5d010583b4d2849b97dffa9d28dbf783be484de51b8c1facf821d8f6a295caa97f5245c8b3fbe71b47a3390f2c2ab9f6ee41ab082c6ddaed769ddbd9188c970be2843f4fdfe32d3b9242628e3a1d037746b564b4bf6cbc37824444a78605c010a00f2f8abded984e664c63a10cb24e0c1d2d53873d519475651d73e1e228fba31b3165de6572c3f4ca692b73652bb77c423a191d45e90b122e0a66b956302ff7bacccce85e7428d8c574ef3d78884495c95f1416c3f500f5be2c0a70303ee19d4e81c1360db322a0400f311caffe568d07adaf9d6bd6f136f0886db4fc6c2cb956b79064b61afe3abd2ca638c62bf89ba91cfab89aeb6fb4eee6b8a6a321076ed5efbeb369259390e780454eb1666c4fe8366b00765b5639e20827349f4df49c90bf5dd320b36510fedf5c18f59ee14e1a8e436f02506d6c6c3c8c3328eff00bcb66ea3a99f2e9cb20f0efcfb09876f7860ce4294de8c5ce007604031a8dadaa20955701736218a159845f8cc7a485412bebaf653462459380a2cb0900721d570391f8e62869546a610e8478d9536d473945a46d9a89686d1dba43690a5a4dcad2d4fbacd877e38495d4a1696bbf46ae8fc6a764faf7c67101a785d259ac8a6df1c7fbd006e9327e24d8fa4c569a5e37fc047521cf520e2bf11dff07f6c47442db2fe7a94a7b557454363043ad4fb00d2842a16a2b25fcdd5aa38d585600cf81e9d202822c4571a12668cc202ef3af5704337bd134b99c6df8538316c9e423032e4c3b73b1e26571b9890ee5a5f9885321281c1371614b57464647c8d5387dcc9878ba4f9c4f65cb3d34fcde5b5fa1610c28f50ddf5a1ccd682ddf4590adc3d3f98b8f98fcd1845dadfb142dde12116bf36d7b738d930e10c3317a0222914e059370b463611c7e8d37bab1f834ba690c98af9924540256cb073ce89d05715e50cb79948451c8c4fbb07f497e860ed293803689ba1895af65c8d97c276e2cd0e7bdbe50655293462dbe64499184a7b8a89a454e38219b5e979c98badc75513d7a6862e2db939347d9941d906432ae41b67df54c2c92568d847fbaef8773dd466bdaf52bffde53fdc2514ae006e19a9599e0fde9c5772c3b30ce30d8fd5e0f91fdd8c66a8884575adc7d2970321520722ab1ddeaa64aa21855f9263d0b51d2b2df0ab28cd32d709c0984ed7f0ef4ced427e99230553a0b0453b1f6daa0ff63cd7750cbdb5f3373ea044ead7c91acfcfdac09648c06f4520a6766d530b37ad2aea22b50419b26f3a40df01f4970a104df6893d6e0b6b3cf88eac9c3edd9e724c5357283e933173dce77bbf70c99367b68e55cb0a3e16d1696c571b483640c33b9f229d837fd1d303608ea286643ccf46dfbd26d2484c79827c6cf896e4904a1febc39932c76a17606c0a62010932fe29877c00dcf7d65fb006594d8869bbe7f78138a78a125a475da225920235b47ba8bd631815926f7a5c4ff69d61c39b26b078760dbceefaea9aa5f08c97d2e97bd478d014ee739db93824bfa7d3167f789624e5a98873422a0176c8b2a69eb5a01dfdb22ac1cb7f9294df6ac1245d50ec44fbdfaeb145c9bacad2abc7e160993afbad2abcb9c1019cfe0e358d1c44676cf002cf844d83de959c3c3f074bad5ac0326d0ca4864b2fd724beb5338e81fa81fd178e14e267c06189ac51fc6a248398986d25d6791c98d330b37a59b3d9c46f94e6170ec499fb3f27443c185e261761d9fac5fa44bc4912c41f93a642b89d51afa016c87d086a145255e808082a2036ead976bd2b78079f8410dfd8fbd15048e3264f15491204529f6b0e5dd560caa9113f9491433b9ba54dba2fcd648928717a1499582e6acba3dd28364b368a1e16b13a2cdaf13ef8b0d4046f8c2a5f280d538b0efe3297bcc226c17688be16315383fe043a7c51a8bb02497277bb1dcc9a16db9d04dabfb0bf6eb9f408d18266fa45d2fbbe3b18b89d6dc7c5b947b741925ac93991554216773ac5e0dc903d966e8fab10ae2eb22e002aebdea2d800ba75fe33082561b9222997bcfd8d246dcee7c46ba0a12a361880b6c4bbcf966a2ac0600d69d39c6c43c783859e5212dea9944a658c6fcf33df2be59da18f1385d3425bfcafda04071b83539311884d4cc8db5838dd84c3d8355292fee226e5a69c6c9a31f1b5406cebd486ffd050928f3916d748f159436fe37dbef68656842624063833cd1811151e9f05dc5ca63191587f51274b6ba07ad44e104a20dd2fc6d43e0274c35f926b56591cee7670856d5d5194df8bdbf608f77cd8701f0ef26a0e38e4cca58e4cc699065d27eb74bd6f89755779f3b2a73a3a0d0f655755dc7cb91772bbe0b89d360353335e545d8c3133260b2ade1814e2fb4e9bea7db3e30fb62c936544a91170ec2f86e3ae75319da0d873a05dc9f0e14bc709028e11da854a03d3941a51e6f3e0d363528c9d203fa5166d9aba23a49df941d5c902aaa68a3b99a709e9d9e3adc96b581494fd2c7e4605af5891261533ee403218c6901a37dec5e2d65dcfec9449cefef4eb4c4b793f34c9b0187ac1e9302c880149843a66feddfcfe47c5e33eaf1ab1eb0ed48cab980df0fe3e11c46a27d2be9972af5ecef3081f77ffb8640a8f3694085228f7400dbf177931fed7a9fada79fcb76251e5b64087e3e4d4fe0a5b86d7e6ddf47fcd131f68796de8c9e86bd6b08cf54ffdd5e10389e0d2122d72de173535a09defea837a519f96e1e795e6e767a2ea7ebcb44e96a11a2910bfc1b5221012732bca14534a2a97afb0faca2bee78f96b59930e27b7b410b53889a190ba70fd1b5fa4418f8fe6df52457a9f814eab291bd45471c20fdf973c0f75bb052417b69592e83cf8cb34b7b8189c01ade45736c77cfde6f44448b78e02ef376d75fd2f95fb0dd91f9321837777f5f514f083bab481b66639af323383a4d715a0c3a216536c52d3fb3933895e1709b25a84a8637a125a5fede40a90d84218efed8b65c021bffc279a4b30fd0cb390a95d1225862f37df93bc97f1192e725bc38e81ca4a4d59f18afc9d89793d3834e1781a8d5e4d521aa3c34b4335817f0dd88771a31d3336e14645323ad54c728cf1b0fe515602c064b41885ff14ff394d4deef3c5de136fec1a05e3662cf61f29a74e9da23f116585d85d3806d015fc8783c08916546e18c92c737f31a7d35c72b3bea01fd852e7dc6d68f24bc787ef7b7df2c4acff86981597a7dd2aadbf40e26109a10e856a78929e698c308960d999783134d7f5abf90a9ecf67e496818ee42afe66888b41707047ecf3374be56e6be6d878531057d4b16b7ca749ec672842c057868ca4c0f9e69e6d92432d6331c4c32db2a93d50a690a0659d4c9bc6fd75f7201f943c603bf7caed8d218ebcf947ea685c0710c26aa11ec886480983e06b9be0168313de87b0e068f98bd14f2066e3fc3a058c32ca0da2a1b449814755e935ab360b15bc91f5d44e54ba2a8db07d1c3854f6b38efa006263300f2113c6d3481868e08d406545a25a8dc75b01e429853e26747023913298e7b5b174c8dfd4e36a81061ba46beeaa200d6003b9f0cf50caf3d5b06632d25fe7ba91d2a97f7562555a67876e334c642e48e753ce6f12a78329c381a1349cf5d89413d04a6b93c566aa2e335f4f0732567388a9df0b3084d57f6393eaf5c20fd7c3c29981500dfd3573a16ee4bc56836b5c3e75ebdce347e46f3d1247a936df69a259fb35ff4372b774f960aa4e8d84e4ae54caaea634d37d2d4f3a276e15176e1f00a906b2fe6ceaec16cba278d0eacdfac9dbbe5af60c5f923ce670315bbc29ac72e9f848d2c168949d7fae8d19fb86ac5511c36035c6c101063cd5b8b9902f8f51b6de2e59da3e5ddb25eb6e9dcd0a64492da36f8a61c9e2b33dd731f0423fd407048346d5a19fbb84c1d23e34f5e43afb32f3c6b85c550dae394285b233ec5ae2ac8646e2804f2c59e870caf6fae5d6df810bf6bd64562b288af75a5d42478475dd72e81651453558e4f7370cea3def6439ccc1ff644e7d0e9c5c286b8aa1881b5bf641ceef24f557b68bb7532af2139b5a890cddf0b1e26328070a43fe509609fdc6de4dfcf8f2f4a79ada37a05b9a2bcac4df7774a79f6aa569b4dd4cfcd944d64982c13349f5a880baa7b5f20aa55af6077299c6d53e0c6ea063d45d8217d72104012b5d82ec46fde056dfc94e6cc9d61bbd1bf08401d1ee163f3d7f88d3481c0f395765e6653d6678dd73a71d411e0ea02608b226357ead909c8d5643527dcd1e0f0b7a785cf691b59812593bcba54624fa2ad1db9547b78bdfe0d6ba2dbc3298dd0c539260235adb385a00989685705cf3631ae545dfd8e2813d5a2ae507f357ef3ed5dd46a868e04cfca7d01edf77c19c6d4477b9a57c7629dff4afef542d19a1b559e55488a3083ad29b98019bc54cc59299e30aa5cdf96e073ae593f644ca0e7f334b1979d16b436e624747e9c86cd985d126bc7495dc27d010347f7a76266894de2ec5d2c9e460e723b0857313e17a17a6a2ad9983867cb78dc5dd3eec56056fcf4a76acf11af6e74fa9c08dc30df7590fccc00e8e972736397ba8680fd56f2fd3758d628c3c93c4222ded9de6b2341cd49325af64d48de4e1c62dea24b19e82f3ae3cf1212671774b510d2e2c18141b5b0ca54376d311443bf5bea59d9f07cb83767904e644a5cb77830f4f7f92de93dd6498ad091384d8899fea4d539ea6dd9178b07bcb47704e37ce6412ab52e24108c890848f9ae08f3c7bd72362cea73dfd0ffc8b77baab1fb43f9b2247f3c20e1a67839ddb28ba7ebef67abe121c3f55d1b63cf32698e068ed11b514f23b8762d55e6394613bb895b5f6bd256ca0732acb067f916bdce9120dffa8a9473815ccd35b3d622ee25ffb98bbdbd17955a0694cac0a64254ae997a9a15137b7f923f611a1adaea3fb6ef547d5a3be44a14be44202b1679968ded791d3a7632cdf4cd3c762d022cc3109e0b10b62b3e779836756ca3bb65a1c8a7fff871113f1975b556831aaaba1850acf0953383e223d3371ae4753a323dda2ea9298cf94c15abb084f8548672b257225544adb2b5eb8fa348a32a20f15d6873bf5dabde8fd89a76903d6f75e0c57c4d6918a3c3120ba5e5cb955cf224a17bd49bb08212d585ce979199247a40757ab81d9e1fbddbb14f015908a9aee690382cb07557beb1b157f5a3b279615d5b7c64a83d229a87cd16a6d401c06dc84ae286075c4d634e6f91dc7a284bbfc1795acedb1fd43c5c2e8ed6fa237e3d06a69b4fb83aa47a12e4ef83a5c5741d85d8342247d4d979601b66867313b1b8f19f769d13c9fbf6c1b2e272d0b0e875743c138ef0c014e1d8985642b029d35aa073d283da1367e869561913a1a0463cf3cc6c41835dcb60d69f6f71aafeede9bc6987c4a68c9e0fb3c1986433e6e45d23a5b03ec664b00cf6a207a8e7dccf7d493bee9a44331e8c1ed92d5cec7afd206d3a3cb78f213b4d2aa8c1c9b0730d818747ddf1027aeb8684944c5b9696ea935f55b5be94f69bdcecc50186cff82a73de8bd231314d9217b6089b8cd8a292793f1fdec1c5af1a2df89c1e300d2fb93516d56060e08f7e4c50b5f227325d0908677653d64dc5cf838f39e271ad79f0033b6b2a5611d5d1f9bb984e6f7d735c5bf0924d873e20e5869bd6d94d9f0994a78614dec3f36325299d189293dc5a4df8cbad29d1fd7f9b51c1c9e48e2238aaff3243cd346deb4ba8545af524776300f648c6728b0f97d17f7ec45daddd62478890a166e7db997047df69ded08cc4d9d8297259dc4100c88359c880dc855ffd5ef3b0922a5b00dae3daeb70441e15dffb415adafaaafb5f5c03b610a3c9903662c236e23baf01337a669f5e174cca1ec79ad7f3cd8635fdcea958cb67400bd01dd03a845fe820f0e7f19776867f247e9c2536ad2776de00480246ace33002c284d7a8929d1e708da9059212ae6d7da49afb9222c97983529158f69bbdbd8f502daae24aef87d0d8a4085dd0740ad1f33178b52447f43192acab0b9aa777262142ec29befefc95de9637f3cb7dff186af2020378870015feadf7b4bf66959cc81543ae33312e4ae3e9c152a65eb76df86b788d11a8534227a8d7e330ef48f5a1069ce4152bc6b311e4636d480272527fcc60c5c3aebbb513d06246ef52e33e7cca789f106ca53df689353c3a518c6dd4719a073f83ea70e1b37c312d216ef26f806f13ddb40e12e3c8b31ccab1440fcd2a2f2f7766997a610a1ad51108163ab4da30219c9a5a2545b19041bdff4e2569f3c281784ac3982de68af9405d634ea1c8d814d0f15b946a1e2130a2995e2d2330be135f21bf5abeb851c65cc3227aff2ce2d88325436409d725a5523253a722af8360a0dee622adc4690ae49f6c3445d2bc4ae75595874849b54798724a0a9f6161caeb83ad17c2d7325524d9acb94e80c7626458167e624f62e9dbf2c49ea52f8c978481f6fdce7222a4c353d8a77034d7a3e3237d253ce3402553ae63a4519298e96b534bab3aadba3dbae70c07fa06e03f89b711e1deb0e9f4dacbad30374777a2710dec408fb8531acb5d89376c07b5673cac6e361935", 0x2000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='map_files\x00') ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000001e80)={0x800, 0x10}) 59.10997443s ago: executing program 7 (id=7491): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0x8fa}], 0x1, 0x40000000, 0x0) 58.731928727s ago: executing program 8 (id=7493): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1, 0x6242) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xed6, 0x4, 0x10, 0xfffffff7, 0x13, "4ca86f9c3bc93e60e0a255076b5e266d108b42"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="d9161b0d76411a8c9d14c22628873ad67e98023e1f1fbd795e3db2ed543c0bee88783f22a0d3f6d0556aaae78bf66305896d4572eb4d519d0e3018184722b9237759aee010f546e225f9cc6a6e26968e4b6ee1d11be5a72ff298b687815616e92119d68250d21f7b0f8cf1daf1022c158ba74610812ef982c5051bc94950f354ed822e3031e23a3680e54f21dc2d110cbcd9ef69fe6a7e529caad098ce", 0x9d}, {&(0x7f0000000300)="3fab14f67f52acc652a0542973af50d533e116dab638d1fed7ffee7686834821981331601b76a44f86d3afe74850a62729d9352a562799fea6d01b61e532c448968e47c01c4c84089355511cfd2d199c2164dfe1dfd77b1221330d28cf470cdaebafe67bf2a6f760e0d251f15fd1654856e68d57f844abde4ab701a85ad8cec3335989fc98e2062ccc5bd771c02c02d8a5632344627f8305e0191c91cc0548142f7b7dc457c60066880b8d970600d1549985f087a159ffff655a5e8ffadbf4", 0xbf}, {&(0x7f00000003c0)="14ce8f646a1f2d71a2abe0ea7a2acaf098aa41c7af15868e82f877af15b428ed15b3c42b61ce78c4dc3373adc35400077ab98fdfea9eb0b64bdc882bb49f1e47f4934ddf6adbd7d22a81c6d18c2274dfa042c6d1fc0c4ddb28cdb9325d80bf586c569219b076bc6abef100f5bb25bf5f932d3fe4aefa2e729d25b03b7763128ec24bc4f73a6493519faab5e8c497ca6a0b39a7a7434eab4ad14aa1b50ad8ceab4b0acc047f3f8a255a00e610a40fd4d4723c4af334f41f4e7fab057e90fe85c66a90dbcf9a06477b4cc7aed79c67ee8d92ad88b4fef911fc", 0xd8}], 0x3) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x4, 0x1, @value=0x2001020}) preadv(r0, 0x0, 0x0, 0x2, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002280)=ANY=[@ANYBLOB="38020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a008000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff01000000000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe"], 0x238}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0xe000}) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r3, 0x407, 0x6) 57.770447352s ago: executing program 7 (id=7495): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0x6c2) msgsnd(r5, &(0x7f0000000340)={0x3}, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', 0x0, 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@loopback, @in=@empty}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe4) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x55, 0xfffffffc) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) 56.848719243s ago: executing program 7 (id=7497): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x128, 0x11, 0x148, 0x0, 0x10, 0x1ec, 0x2a8, 0x2a8, 0x1ec, 0x2a8, 0xac, 0x0, {[{{@uncond, 0x10, 0xcc, 0x128, 0x1c, {}, [@common=@ttl={{0x24}, {0x1, 0x3}}, @common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x96, 0xffff8733, 0x7, {0x800}}}]}, @common=@inet=@HMARK={0x24, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xffffffff, 0xff, 0x63ed1e6f422d753a, 0xffffff00], 0x4e20, 0x4e26, 0x4e21, 0x4e20, 0x5, 0x6, 0x8, 0x7, 0x3}}}, {{@ip={@private, @rand_addr=0x64010100, 0xff, 0x0, 'wlan0\x00', 'ip_vti0\x00', {}, {}, 0x6}, 0x0, 0x9c, 0xc4, 0x0, {}, [@common=@addrtype={{0x2c}, {0x854, 0x90, 0x1, 0x3}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0xffffffffffffffff}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2dc) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, &(0x7f0000000000)=0x56) r3 = socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="e4e5f63d0c5a57", @ANYRES16=r5, @ANYBLOB="02002abd7000fddbdf254c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a7000500000000000000a400a90056596f794abb826306d131a35e9998e48cff78e997fb7a8d470ce930fb4ed91ccf7029bf8e77cca075c348644de0e75c0cd8671d9d54703fbba2bd664e4682c06bce88178225f12b9b258133c90ff5192bfbe1e92063929191d162c62a7fa10eeec5635949159a073c5018fec9544ec58c5e21187ab7ff2c4052aba7b80be572d56a1cdfed710b5bfb2b75216f75cddee1111ac2341ec7a6a7739b817e6d2340"], 0xe4}, 0x1, 0x0, 0x0, 0x8}, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) preadv(r7, &(0x7f0000001380)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1, 0x9, 0x401) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) 56.821502034s ago: executing program 8 (id=7498): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/73, 0x49}], 0x1) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) 56.797949125s ago: executing program 6 (id=7499): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x40001, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x2c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[]) 55.766350511s ago: executing program 8 (id=7501): syz_open_dev$vbi(&(0x7f0000000700), 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000190a01040000000000000000020000000900020073797a3200000005000000007308003000000000"], 0x2c}}, 0x8004) 55.764099093s ago: executing program 6 (id=7502): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, 0x0) r2 = syz_open_pts(r0, 0x80) dup3(r2, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 55.043523806s ago: executing program 6 (id=7504): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="90020000000000000008000000000000040000000020000000000000000000000900000000000000020000000000000000000000fcffffff00000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000400000000000000200000000c0000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0220000000000000000000000000000000000000080000000000000001000000000000000000000000000000020000000000000003000000000000000200000000000000cd0f00000000000003000000020000000200000000000000090000000000000001000000000000000e000000000000000000000000000000ffffffffffffffff010000000500000002000000001000000c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000008000000000000000400000000000000be00000000000000020000000a0000002c2b00000000000005000000000000000000000000000000ffffffffffffff7f0000000000003000030000000800000001000000000000000900000000000000030000000000000002000000000000000700000000000000940000000000000002000000050000009a0e000000400000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0700000006000000000000000600000000000000ffffffff000000000500000004"], 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="b0000000000000000100000000000000010000000000000003000000000000000d00000000000000a2000000000000000700000000000000040000000000000008000000000000000400000000000000060000000000000048ffffffffffffff0a0000000000000002000000080000000500000000200000ed000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0200000049000000000000000100000000000000f7ffffffffffffff08000000030000002e"], 0x0, 0x0, 0x0}) getuid() lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000180)={0x0}) 50.019893012s ago: executing program 7 (id=7509): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548010203010902120001049570810904008100ffffff22"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f00000000c0)=0xffffffff00000001) 48.193520652s ago: executing program 8 (id=7512): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x109702, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = syz_io_uring_setup(0x1327, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x40204, 0x39, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4040845}, 0x40000) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 45.845697806s ago: executing program 7 (id=7513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(gcm_base(ecb(cast5),sha256-asm))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee", 0x1f) r2 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003bc0)=""/111, 0x6f}, {&(0x7f0000000600)=""/4095, 0xfff}], 0x2}, 0x10000) lsm_get_self_attr(0x68, 0xffffffffffffffff, &(0x7f00000000c0), 0x1) sendmmsg$alg(r2, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001880)="2cbddd39dad9edc182feabcec21043acf4901b5df84f6709085697efcd0fcbfd23a6ee947703d4caecd6891f8ef08b05deb5c46024483e03e2f5b82ceb60e8c70a3daccd2cc4d80d591400b3b86e89d92e93a7f80fa9422943323f143a75765e287ff71a12b15aa80efc2142c9193a1ac1ffcb5f8e6646e54443915586a7978e", 0x80}], 0x1, 0x0, 0x0, 0x15}], 0x1, 0x4000000) unshare(0x2c020400) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="50cccff119910154a918e2ef377456d03d30fddbf445fe32a24dc25ff6bdafedde90d3679b1c5448e96dbd0116db28ac6d5c5cca31b143a143eb78ece88aa944a8b35416e7e90b", 0x47}, {&(0x7f0000001600)="115ac3e3c195004709212606974be3d5fe18dcf01f83a3f78603bbc654062e06922ff22c9c9aa30ddd2dbf53663345cbca80ef2ba60dd2b6a19c761bb93c41965e0dbce6df58250f9897e5568cf2fd297d9eea2a3452433884a6ce517ba83d8754d78a94e2e725f62370464d826823548a23e9767acff647615f1ed269177b625818a13359248f374314849d22cb3492dd95d7b49238dbcf9d456fe05400bf84574ee7afeee97961e1b0a8d8aea78c9b74d98cb76ec18e0872a77110a543499c87dee241e45296", 0xc7}], 0x2}, 0x24000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x9908}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0xa}]}, 0x28}}, 0x0) 45.527013012s ago: executing program 4 (id=7514): r0 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, 0x24) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 43.85600267s ago: executing program 7 (id=7517): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cp'], 0x5) 40.855521937s ago: executing program 8 (id=7519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x5}}, 0x0, 0x0, 0x5, 0x0, "00ec2ff093289349bb89de25b87376f64276337642b890d33cb5b5b423d46229bc1c7ac135fee1b32aa3b47debd38b6d889a8c986b33eb000000000000000000000000000000000300"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 40.160175829s ago: executing program 8 (id=7520): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 39.735902377s ago: executing program 4 (id=7521): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_setup(0x281, &(0x7f0000000100)=0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f00000003c0)=[{}], 0x0, 0x0) r1 = memfd_create(&(0x7f0000000600)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 36.005416463s ago: executing program 4 (id=7527): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r3, &(0x7f00000005c0)=[{&(0x7f0000000380)="286662069d7e12f53e206fb9cae4f51e8092", 0x12}], 0x1, 0x2, 0x4) 35.807947341s ago: executing program 4 (id=7528): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x7c}}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00'}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x9f5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 28.424381379s ago: executing program 37 (id=7517): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cp'], 0x5) 25.063881736s ago: executing program 38 (id=7520): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 21.593541114s ago: executing program 9 (id=7541): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r7], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x3, 0x5}, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0xc, {{0xa, 0x4e22, 0x1000, @mcast1={0xff, 0x7}, 0x288e}}, {{0xa, 0x0, 0x40000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}}}, 0x104) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x8a0, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x830, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x74c, 0x9, 0x0, 0x1, [@m_xt={0x1f0, 0x7, 0x0, 0x0, {{0x7}, {0x16c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xb7, 0x6, {0xe60b, 'raw\x00', 0x7, 0x9, "168e51211cb0dac1567328a23adecd528e86128d70a7db97853a2c78627cdda91304290adbec04a3a96b3d9e303a29496aa41cfabf6c14c943dc391fa80b8d8b326812c0b47c0e1ad7e6170ebaaccfe1dc20069e4154d85deddbbce8c087b5548d7f25e21fabf5690e19c02b7bb5ec46704f9612da60faae427bc3ffdf74e48fcb47940a8ae09829bbf8a115a6"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TARG={0x8e, 0x6, {0xffff, 'raw\x00', 0xe, 0x1, "0129802a0b60f2b583aff63df8785b506e15fc39b254636b7feaa39c02cb49e0a41da7a8575d4f710ec2db08ab8b34cb582bf22aa732548853e6fe2e5128c273f0ee78e2f0bdec236e6394eef6dac5f305646df0c5c7e7b6bfc848b33baa6334138c8fc9"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8}]}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x478, 0x1c, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x3ff, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x1, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x0, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x8, 0x3, 0x5, 0x8, 0x6, 0x10, 0x5, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0xfff, 0x8, 0xd, 0xfff, 0xffff, 0xd, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x7f, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x4d, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x2, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xd, 0xffffffff, 0x101, 0x1, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x0, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0xfffffffd, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x4, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0xe0, 0x1f, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xff, 0x5, 0x80, 0x5}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x43f4}, @TCA_MPLS_LABEL={0x8, 0x5, 0x37b99}, @TCA_MPLS_LABEL={0x8, 0x5, 0x30e9}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x80b, 0x8, 0x6, 0x0, 0x5}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x53, 0x6, "96986d955fa653444a3d601379169839058212418f8681f2327b9b105bd5e31418412b10ab51efbf536d6faa7284fcdcbb6732089908467917f254c5f0de058b4c6d1dda345d1da5e7e1ac23a4576a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 20.527979388s ago: executing program 39 (id=7528): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x7c}}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00'}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x9f5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17.747018033s ago: executing program 9 (id=7543): sendmsg(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="896b790f6fb8", 0x6}], 0x1}, 0x2) r0 = socket(0x18, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000140)="9725db874b5776d5676fed1ea73f98a0c434268a8320db3eab6b66f85fc6c3e3784eea0d000000f442060b0f73d3d47237f91da5d2059c1266e040db88846420792a1aba3070fb930a29ddebb11cfe86730eec721e0af6bcf4d00a107421406cd3f2d2d584ca988b787135219952d8f7402de7b9291c788fea559f86c9da5ffed0c9559630", 0x85}], 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FIONREAD(r0, 0x8020697a, &(0x7f00000001c0)) 17.631392678s ago: executing program 9 (id=7544): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/73, 0x49}], 0x1) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) 16.726560404s ago: executing program 9 (id=7545): openat$null(0xffffff9c, &(0x7f00000000c0), 0x28100, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.292484566s ago: executing program 9 (id=7546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(gcm_base(ecb(cast5),sha256-asm))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee", 0x1f) r2 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003bc0)=""/111, 0x6f}, {&(0x7f0000000600)=""/4095, 0xfff}], 0x2}, 0x10000) lsm_get_self_attr(0x68, 0xffffffffffffffff, &(0x7f00000000c0), 0x1) sendmmsg$alg(r2, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001880)="2cbddd39dad9edc182feabcec21043acf4901b5df84f6709085697efcd0fcbfd23a6ee947703d4caecd6891f8ef08b05deb5c46024483e03e2f5b82ceb60e8c70a3daccd2cc4d80d591400b3b86e89d92e93a7f80fa9422943323f143a75765e287ff71a12b15aa80efc2142c9193a1ac1ffcb5f8e6646e54443915586a7978e", 0x80}], 0x1, 0x0, 0x0, 0x15}], 0x1, 0x4000000) unshare(0x2c020400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="50cccff119910154a918e2ef377456d03d30fddbf445fe32a24dc25ff6bdafedde90d3679b1c5448e96dbd0116db28ac6d5c5cca31b143a143eb78ece88aa944a8b35416e7e90b", 0x47}, {&(0x7f0000001600)="115ac3e3c195004709212606974be3d5fe18dcf01f83a3f78603bbc654062e06922ff22c9c9aa30ddd2dbf53663345cbca80ef2ba60dd2b6a19c761bb93c41965e0dbce6df58250f9897e5568cf2fd297d9eea2a3452433884a6ce517ba83d8754d78a94e2e725f62370464d826823548a23e9767acff647615f1ed269177b625818a13359248f374314849d22cb3492dd95d7b49238dbcf9d456fe05400bf84574ee7afeee97961e1b0a8d8aea78c9b74d98cb76ec18e0872a77110a543499c87dee241e45296", 0xc7}], 0x2}, 0x24000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x9908}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0xa}]}, 0x28}}, 0x0) 15.584114721s ago: executing program 9 (id=7547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 40 (id=7547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 7][ T993] usb 8-1: USB disconnect, device number 78 [ 2548.849491][ T993] mcba_usb 8-1:0.0 can0: device disconnected [ 2549.302298][T30193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6425'. [ 2549.374524][T28258] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 2549.534174][T28258] usb 9-1: Using ep0 maxpacket: 8 [ 2549.537609][T28258] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2549.537640][T28258] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2549.537662][T28258] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2549.537694][T28258] usb 9-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 2549.537715][T28258] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2549.542940][T28258] usb 9-1: config 0 descriptor?? [ 2550.493566][T28258] usbhid 9-1:0.0: can't add hid device: -71 [ 2550.493648][T28258] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2550.553684][T28258] usb 9-1: USB disconnect, device number 66 [ 2551.019511][T30221] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6434'. [ 2551.241714][T30225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6438'. [ 2551.422797][T30227] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6437'. [ 2552.595585][T30248] binder: BINDER_SET_CONTEXT_MGR already set [ 2552.595595][T30248] binder: 30247:30248 ioctl 4018620d 200000000040 returned -16 [ 2554.201550][T25993] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 2554.427573][T25993] usb 8-1: Using ep0 maxpacket: 8 [ 2554.431397][T25993] usb 8-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2554.431451][T25993] usb 8-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2554.431464][T25993] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2554.431483][T25993] usb 8-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 2554.431495][T25993] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2554.483628][T25993] usb 8-1: config 0 descriptor?? [ 2554.782788][T30273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2554.794115][T30273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2555.003843][T30273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2555.015524][T30273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2555.172478][T25993] usbhid 8-1:0.0: can't add hid device: -71 [ 2555.172556][T25993] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2555.205094][T25993] usb 8-1: USB disconnect, device number 79 [ 2556.088520][T30283] netlink: 288 bytes leftover after parsing attributes in process `syz.6.6455'. [ 2556.154447][T30284] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6454'. [ 2556.311449][T30282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2556.649255][ C1] vkms_vblank_simulate: vblank timer overrun [ 2557.558064][T30308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6459'. [ 2557.965161][T30292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6457'. [ 2557.965299][T30292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6457'. [ 2557.965347][T30292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6457'. [ 2557.965392][T30292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6457'. [ 2557.965437][T30292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6457'. [ 2557.965481][T30292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6457'. [ 2557.965526][T30292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6457'. [ 2558.772246][T30324] fuse: Bad value for 'fd' [ 2559.174165][T28258] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 2559.386434][T28258] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2559.387924][T28258] usb 9-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2559.391618][T28258] usb 9-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2559.391644][T28258] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2559.391662][T28258] usb 9-1: Product: syz [ 2559.391675][T28258] usb 9-1: Manufacturer: syz [ 2559.391688][T28258] usb 9-1: SerialNumber: syz [ 2560.295522][T28258] usb 9-1: reset high-speed USB device number 67 using dummy_hcd [ 2560.446283][T28258] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2560.676167][T28258] usb 9-1: USB disconnect, device number 67 [ 2560.933762][T30351] 8021q: VLANs not supported on vcan0 [ 2561.508217][T30371] __nla_validate_parse: 199 callbacks suppressed [ 2561.508235][T30371] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6476'. [ 2561.552972][T30371] bridge0: port 2(bridge_slave_1) entered disabled state [ 2561.553223][T30371] bridge0: port 1(bridge_slave_0) entered disabled state [ 2562.687383][T30386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6482'. [ 2563.045665][T30391] netlink: 384 bytes leftover after parsing attributes in process `syz.6.6485'. [ 2563.047092][T30391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2563.047534][T30391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2563.995563][T30399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6487'. [ 2563.995600][T30399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6487'. [ 2563.995626][T30399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6487'. [ 2563.995653][T30399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6487'. [ 2563.995680][T30399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6487'. [ 2563.995707][T30399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6487'. [ 2563.995731][T30399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6487'. [ 2564.964125][T25993] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 2565.114134][T25993] usb 10-1: Using ep0 maxpacket: 16 [ 2565.115855][T25993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2565.115937][T25993] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2565.115957][T25993] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 2565.118082][T25993] usb 10-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2565.118162][T25993] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2565.118181][T25993] usb 10-1: Product: syz [ 2565.118189][T25993] usb 10-1: Manufacturer: syz [ 2565.118196][T25993] usb 10-1: SerialNumber: syz [ 2565.127412][T25993] usb 10-1: config 0 descriptor?? [ 2565.213164][T30433] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2565.279118][T25993] mcba_usb 10-1:0.0 can0: failed tx_urb -90 [ 2565.279240][T25993] mcba_usb 10-1:0.0 can0: Failed to send cmd (169) [ 2565.279301][T25993] mcba_usb 10-1:0.0 can0: failed tx_urb -90 [ 2565.279323][T25993] mcba_usb 10-1:0.0 can0: Failed to send cmd (169) [ 2565.279331][T25993] mcba_usb 10-1:0.0: Microchip CAN BUS Analyzer connected [ 2565.438850][T25993] usb 10-1: USB disconnect, device number 53 [ 2565.440579][T25993] mcba_usb 10-1:0.0 can0: device disconnected [ 2567.880025][T30498] __nla_validate_parse: 95 callbacks suppressed [ 2567.880044][T30498] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6512'. [ 2569.168700][T30507] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6513'. [ 2571.074184][ T993] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2571.261528][ T993] usb 5-1: too many configurations: 67, using maximum allowed: 8 [ 2571.290707][ T993] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2571.290737][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2571.290755][ T993] usb 5-1: Product: syz [ 2571.290769][ T993] usb 5-1: Manufacturer: syz [ 2571.290781][ T993] usb 5-1: SerialNumber: syz [ 2571.323831][ T993] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2571.574176][T28258] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2573.127940][T28258] usb 5-1: Service connection timeout for: 256 [ 2573.127956][T28258] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2574.138119][ T993] usb 5-1: USB disconnect, device number 39 [ 2574.213162][T28258] ath9k_htc: Failed to initialize the device [ 2574.226977][ T993] usb 5-1: ath9k_htc: USB layer deinitialized [ 2575.523527][T30574] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6529'. [ 2576.212277][T30580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6532'. [ 2580.102722][T30620] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6547'. [ 2581.437087][ T37] audit: type=1326 audit(1759590405.568:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30633 comm="syz.4.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2581.482008][ T37] audit: type=1326 audit(1759590405.578:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30633 comm="syz.4.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2581.482060][ T37] audit: type=1326 audit(1759590405.578:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30633 comm="syz.4.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2581.483442][ T37] audit: type=1326 audit(1759590405.618:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30633 comm="syz.4.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2581.483493][ T37] audit: type=1326 audit(1759590405.618:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30633 comm="syz.4.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2581.483532][ T37] audit: type=1326 audit(1759590405.618:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30633 comm="syz.4.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2581.483802][ T37] audit: type=1326 audit(1759590405.618:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30633 comm="syz.4.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2581.487579][ T37] audit: type=1326 audit(1759590405.618:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30633 comm="syz.4.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2581.488090][ T37] audit: type=1326 audit(1759590405.628:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30633 comm="syz.4.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2581.488137][ T37] audit: type=1326 audit(1759590405.628:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30633 comm="syz.4.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2581.740634][T30638] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6554'. [ 2581.997427][T30647] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6556'. [ 2582.493291][T21630] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 2582.784095][T21630] usb 9-1: Using ep0 maxpacket: 8 [ 2582.810484][T21630] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 2582.810543][T21630] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2582.810564][T21630] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2582.810585][T21630] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2582.810607][T21630] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2582.810654][T21630] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2582.810675][T21630] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2583.063150][T30661] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6559'. [ 2583.147613][T21630] usb 9-1: usb_control_msg returned -32 [ 2583.147644][T21630] usbtmc 9-1:16.0: can't read capabilities [ 2584.551043][T30671] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 2586.249399][T30691] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6569'. [ 2586.814156][ T44] usb 9-1: USB disconnect, device number 68 [ 2587.690276][T30709] binder_alloc: 30706: binder_alloc_buf size 1024 failed, no address space [ 2587.690297][T30709] binder_alloc: allocated: 12280 (num: 1 largest: 12280), free: 8 (num: 1 largest: 8) [ 2587.879813][T30708] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6575'. [ 2588.389917][T30716] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6577'. [ 2589.540915][T30727] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6581'. [ 2590.515699][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.515745][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.193776][T30743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6585'. [ 2591.654185][T25993] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2591.834183][T25993] usb 5-1: Using ep0 maxpacket: 8 [ 2591.838373][T25993] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2591.838671][T25993] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2591.838691][T25993] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2591.838705][T25993] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2591.838716][T25993] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2591.838739][T25993] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2591.838751][T25993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.076729][T25993] usb 5-1: usb_control_msg returned -32 [ 2592.076759][T25993] usbtmc 5-1:16.0: can't read capabilities [ 2592.966776][T30745] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 2594.564162][T27155] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 2594.721792][T27155] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2594.722823][T27155] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2594.742411][T27155] usb 8-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2594.742436][T27155] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2594.742447][T27155] usb 8-1: Product: syz [ 2594.742454][T27155] usb 8-1: Manufacturer: syz [ 2594.742461][T27155] usb 8-1: SerialNumber: syz [ 2595.218506][ T44] usb 5-1: USB disconnect, device number 40 [ 2595.312040][T30774] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6594'. [ 2595.634357][T27155] usb 8-1: reset high-speed USB device number 80 using dummy_hcd [ 2595.798402][T27155] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2595.842126][T30790] 8021q: VLANs not supported on vcan0 [ 2596.273811][T27155] usb 8-1: USB disconnect, device number 80 [ 2596.373225][T30796] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6602'. [ 2597.410017][T30813] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6607'. [ 2598.078797][T30811] netlink: 288 bytes leftover after parsing attributes in process `syz.7.6606'. [ 2598.200048][ C1] vkms_vblank_simulate: vblank timer overrun [ 2598.344697][T30816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2600.309838][ T44] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 2600.466026][ T44] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2600.466953][ T44] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2600.468756][ T44] usb 8-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2600.468771][ T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.468782][ T44] usb 8-1: Product: syz [ 2600.468790][ T44] usb 8-1: Manufacturer: syz [ 2600.468797][ T44] usb 8-1: SerialNumber: syz [ 2601.118850][T30852] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6621'. [ 2601.734274][ T44] usb 8-1: reset high-speed USB device number 81 using dummy_hcd [ 2601.897297][ T44] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2602.106710][ T44] usb 8-1: USB disconnect, device number 81 [ 2603.494332][ T44] usb 8-1: new full-speed USB device number 82 using dummy_hcd [ 2603.707271][ T44] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2603.708840][ T44] usb 8-1: config 0 has no interface number 0 [ 2603.714879][ T44] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2603.714904][ T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.761708][ T44] usb 8-1: config 0 descriptor?? [ 2603.808330][ T44] usb 8-1: selecting invalid altsetting 1 [ 2603.810036][ T44] dvb_ttusb_budget: ttusb_init_controller: error [ 2603.810341][ T44] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2604.279902][ T44] DVB: Unable to find symbol cx22700_attach() [ 2605.293855][ T44] DVB: Unable to find symbol tda10046_attach() [ 2605.293871][ T44] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2605.321200][ T44] usb 8-1: USB disconnect, device number 82 [ 2605.405693][T30870] netlink: 288 bytes leftover after parsing attributes in process `syz.9.6627'. [ 2605.553914][T30880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2605.846087][T30889] binder: BINDER_SET_CONTEXT_MGR already set [ 2605.846098][T30889] binder: 30886:30889 ioctl 4018620d 200000000040 returned -16 [ 2610.773321][T30953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2610.773646][T30953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2611.529815][T30960] hub 9-0:1.0: USB hub found [ 2611.534222][T30960] hub 9-0:1.0: 1 port detected [ 2612.003326][T30967] fuse: Bad value for 'fd' [ 2612.777438][T30974] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6661'. [ 2613.126560][T30979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6662'. [ 2613.126579][T30979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6662'. [ 2615.767603][T31001] syzkaller0: entered promiscuous mode [ 2615.767629][T31001] syzkaller0: entered allmulticast mode [ 2616.332505][T31004] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2616.886791][T31021] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6674'. [ 2616.886811][T31021] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6674'. [ 2618.070028][T31035] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 2619.726756][T31047] fuse: Unknown parameter 'group_i00000000000000000000' [ 2619.787195][T31052] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6685'. [ 2619.942735][T31063] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6689'. [ 2619.942763][T31063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6689'. [ 2619.981890][T31060] tipc: Started in network mode [ 2619.981918][T31060] tipc: Node identity 9aa2b9116b4, cluster identity 4711 [ 2619.982133][T31060] tipc: Enabled bearer , priority 0 [ 2620.004539][T31060] syzkaller0: entered promiscuous mode [ 2620.004564][T31060] syzkaller0: entered allmulticast mode [ 2620.154129][ T993] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 2620.226935][T31069] tipc: Resetting bearer [ 2620.245289][T31074] team_slave_0: entered promiscuous mode [ 2620.246085][T31074] team_slave_1: entered promiscuous mode [ 2620.246397][T31074] vlan2: entered promiscuous mode [ 2620.246406][T31074] team0: entered promiscuous mode [ 2620.306138][ T993] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2620.306165][ T993] usb 8-1: config 0 has no interface number 0 [ 2620.309555][ T993] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2620.309581][ T993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2620.309599][ T993] usb 8-1: Product: syz [ 2620.309612][ T993] usb 8-1: Manufacturer: syz [ 2620.309624][ T993] usb 8-1: SerialNumber: syz [ 2620.360198][ T993] usb 8-1: config 0 descriptor?? [ 2620.458502][T31058] tipc: Resetting bearer [ 2620.605252][ T993] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2620.648321][ T993] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2620.648878][ T993] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2620.648933][ T993] usb 8-1: media controller created [ 2620.688173][T31058] tipc: Disabling bearer [ 2620.743126][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2621.281320][T31087] fuse: Unknown parameter 'group_id00000000000000000000' [ 2622.090108][ T993] usb 8-1: USB disconnect, device number 83 [ 2623.257582][T31108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6704'. [ 2623.257600][T31108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6704'. [ 2623.307483][T27212] Bluetooth: hci3: command 0x0406 tx timeout [ 2624.457875][T31127] fuse: Unknown parameter 'group_id00000000000000000000' [ 2624.844136][ T993] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2625.028575][ T993] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2625.028600][ T993] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2625.030965][ T993] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ad.aa [ 2625.030990][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2625.031001][ T993] usb 5-1: Product: syz [ 2625.031008][ T993] usb 5-1: Manufacturer: syz [ 2625.031015][ T993] usb 5-1: SerialNumber: syz [ 2625.115324][ T993] usb 5-1: config 0 descriptor?? [ 2625.124445][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6715'. [ 2625.124470][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6715'. [ 2625.324692][T28258] usb 5-1: USB disconnect, device number 41 [ 2625.734725][T31159] fuse: Unknown parameter 'group_id00000000000000000000' [ 2626.062309][T31162] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6725'. [ 2626.930241][T31179] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6729'. [ 2626.930261][T31179] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6729'. [ 2628.200697][T31194] fuse: Bad value for 'user_id' [ 2628.200710][T31194] fuse: Bad value for 'user_id' [ 2628.604163][T21630] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 2628.786516][T21630] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2628.786542][T21630] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2628.792054][T21630] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ad.aa [ 2628.792079][T21630] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2628.792089][T21630] usb 8-1: Product: syz [ 2628.792097][T21630] usb 8-1: Manufacturer: syz [ 2628.792105][T21630] usb 8-1: SerialNumber: syz [ 2628.799948][T21630] usb 8-1: config 0 descriptor?? [ 2629.010771][T21630] usb 8-1: USB disconnect, device number 84 [ 2629.162388][T31206] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6740'. [ 2629.714152][T25993] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 2629.867179][T25993] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2629.868720][T25993] usb 9-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2629.871052][T25993] usb 9-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2629.871068][T25993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2629.871077][T25993] usb 9-1: Product: syz [ 2629.871085][T25993] usb 9-1: Manufacturer: syz [ 2629.871092][T25993] usb 9-1: SerialNumber: syz [ 2630.727692][T31228] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6746'. [ 2630.814179][T25993] usb 9-1: reset high-speed USB device number 69 using dummy_hcd [ 2631.009232][T25993] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2631.283766][ T44] usb 9-1: USB disconnect, device number 69 [ 2631.622452][T31245] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6751'. [ 2632.274418][T25993] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2632.435985][T25993] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2632.436014][T25993] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2632.436026][T25993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2632.443819][T25993] usb 5-1: config 0 descriptor?? [ 2632.485711][T25993] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2634.676833][T31275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6759'. [ 2635.056703][T25993] usb 5-1: USB disconnect, device number 42 [ 2635.288259][T31294] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6763'. [ 2635.494260][T21630] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 2635.714190][T21630] usb 9-1: Using ep0 maxpacket: 8 [ 2635.807032][T31279] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2635.835415][T21630] usb 9-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2635.835434][T21630] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2635.835444][T21630] usb 9-1: Product: syz [ 2635.835451][T21630] usb 9-1: Manufacturer: syz [ 2635.835459][T21630] usb 9-1: SerialNumber: syz [ 2635.999676][T21630] usb 9-1: config 0 descriptor?? [ 2636.043204][T21630] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2636.336837][T31281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2636.338130][T31281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2636.558196][T21630] gspca_sonixj: reg_w1 err -110 [ 2636.558355][T21630] sonixj 9-1:0.0: probe with driver sonixj failed with error -110 [ 2636.634492][T31291] netlink: 'syz.8.6762': attribute type 23 has an invalid length. [ 2637.740269][T31318] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6771'. [ 2638.797101][T28258] usb 9-1: USB disconnect, device number 70 [ 2639.005094][T11361] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2639.181043][T11361] usb 5-1: too many configurations: 67, using maximum allowed: 8 [ 2639.280522][T11361] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2639.280550][T11361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2639.280568][T11361] usb 5-1: Product: syz [ 2639.280581][T11361] usb 5-1: Manufacturer: syz [ 2639.280594][T11361] usb 5-1: SerialNumber: syz [ 2639.325114][T11361] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2639.327396][T31343] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6779'. [ 2639.342275][T25993] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2640.879947][T25993] usb 5-1: Service connection timeout for: 256 [ 2640.879963][T25993] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2641.036181][T25993] ath9k_htc: Failed to initialize the device [ 2641.046444][T25993] usb 5-1: ath9k_htc: USB layer deinitialized [ 2641.056353][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 2641.145773][T28258] usb 5-1: USB disconnect, device number 43 [ 2641.915543][T31367] fuse: Bad value for 'fd' [ 2643.593815][T31395] fuse: Bad value for 'fd' [ 2646.888933][ T37] audit: type=1800 audit(1759590471.028:1288): pid=31443 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.6813" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 2648.103492][T31451] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6815'. [ 2651.095294][T31488] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6828'. [ 2651.280104][T31492] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6830'. [ 2651.389940][T31490] lo speed is unknown, defaulting to 1000 [ 2651.814177][T27155] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 2651.949261][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.949330][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.987369][T27155] usb 9-1: too many configurations: 67, using maximum allowed: 8 [ 2652.030254][T27155] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2652.030281][T27155] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2652.030300][T27155] usb 9-1: Product: syz [ 2652.030313][T27155] usb 9-1: Manufacturer: syz [ 2652.030326][T27155] usb 9-1: SerialNumber: syz [ 2652.081214][T27155] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2652.102738][T31510] netlink: 384 bytes leftover after parsing attributes in process `syz.6.6835'. [ 2652.123887][T25993] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2652.170007][T31510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2652.170748][T31510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2652.817327][T21630] usb 9-1: USB disconnect, device number 71 [ 2653.339111][ T37] audit: type=1326 audit(1759590477.468:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31521 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f869784af79 code=0x7ffc0000 [ 2653.339304][ T37] audit: type=1326 audit(1759590477.468:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31521 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f869784af79 code=0x7ffc0000 [ 2653.339545][ T37] audit: type=1326 audit(1759590477.468:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31521 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86978aeec9 code=0x7ffc0000 [ 2653.339585][ T37] audit: type=1326 audit(1759590477.468:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31521 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f869784af79 code=0x7ffc0000 [ 2653.339719][ T37] audit: type=1326 audit(1759590477.468:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31521 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86978aeec9 code=0x7ffc0000 [ 2653.339800][ T37] audit: type=1326 audit(1759590477.468:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31521 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86978aeec9 code=0x7ffc0000 [ 2653.339965][ T37] audit: type=1326 audit(1759590477.468:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31521 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86978aeec9 code=0x7ffc0000 [ 2653.340144][ T37] audit: type=1326 audit(1759590477.468:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31521 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86978aeec9 code=0x7ffc0000 [ 2653.340309][ T37] audit: type=1326 audit(1759590477.468:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31521 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f869784af79 code=0x7ffc0000 [ 2653.340472][ T37] audit: type=1326 audit(1759590477.468:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31521 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86978aeec9 code=0x7ffc0000 [ 2653.464504][T25993] usb 9-1: Service connection timeout for: 256 [ 2653.464525][T25993] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2653.465200][T25993] ath9k_htc: Failed to initialize the device [ 2653.465634][T21630] usb 9-1: ath9k_htc: USB layer deinitialized [ 2657.237393][T31562] lo speed is unknown, defaulting to 1000 [ 2657.340211][T31566] netlink: 384 bytes leftover after parsing attributes in process `syz.7.6848'. [ 2657.584213][T11361] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 2657.734109][T11361] usb 8-1: Using ep0 maxpacket: 16 [ 2657.736536][T11361] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2657.736562][T11361] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2657.736584][T11361] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 2657.764793][T11361] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2657.764820][T11361] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2657.764838][T11361] usb 8-1: Product: syz [ 2657.764850][T11361] usb 8-1: Manufacturer: syz [ 2657.764863][T11361] usb 8-1: SerialNumber: syz [ 2657.819624][T11361] usb 8-1: config 0 descriptor?? [ 2657.823827][T31566] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 2658.490641][T11361] mcba_usb 8-1:0.0 can0: failed tx_urb -90 [ 2658.490693][T11361] mcba_usb 8-1:0.0 can0: Failed to send cmd (169) [ 2658.490808][T11361] mcba_usb 8-1:0.0 can0: failed tx_urb -90 [ 2658.490850][T11361] mcba_usb 8-1:0.0 can0: Failed to send cmd (169) [ 2658.490866][T11361] mcba_usb 8-1:0.0: Microchip CAN BUS Analyzer connected [ 2658.514330][T11361] usb 8-1: USB disconnect, device number 85 [ 2658.517371][T11361] mcba_usb 8-1:0.0 can0: device disconnected [ 2658.782195][T31586] hub 9-0:1.0: USB hub found [ 2658.782465][T31586] hub 9-0:1.0: 1 port detected [ 2659.872257][T11361] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 2660.066760][T11361] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2660.066785][T11361] usb 10-1: config 0 has no interface number 0 [ 2660.080667][T11361] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2660.080694][T11361] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2660.080713][T11361] usb 10-1: Product: syz [ 2660.080726][T11361] usb 10-1: Manufacturer: syz [ 2660.080739][T11361] usb 10-1: SerialNumber: syz [ 2660.160942][T11361] usb 10-1: config 0 descriptor?? [ 2660.366949][T11361] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2660.397493][T11361] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2660.397874][T11361] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2660.397925][T11361] usb 10-1: media controller created [ 2660.485329][T11361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2660.858092][T31612] lo speed is unknown, defaulting to 1000 [ 2661.631952][T11361] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 2661.839028][T11361] usb 10-1: USB disconnect, device number 54 [ 2662.291044][T31632] hub 9-0:1.0: USB hub found [ 2662.294253][T31632] hub 9-0:1.0: 1 port detected [ 2662.837517][T31638] fuse: Unknown parameter 'use0x0000000000000000' [ 2665.051220][T31670] lo speed is unknown, defaulting to 1000 [ 2665.131970][T31673] fuse: Unknown parameter 'user_i0x0000000000000000' [ 2667.606170][T31699] hub 9-0:1.0: USB hub found [ 2667.606650][T31699] hub 9-0:1.0: 1 port detected [ 2668.274463][T31707] fuse: Unknown parameter 'user_i0x0000000000000000' [ 2671.852026][T31737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2671.856206][T31737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2672.303718][T31742] lo speed is unknown, defaulting to 1000 [ 2672.310752][ T37] kauditd_printk_skb: 511 callbacks suppressed [ 2672.312586][ T37] audit: type=1326 audit(1759590496.448:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31740 comm="syz.8.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b68aaf79 code=0x7ffc0000 [ 2672.312810][ T37] audit: type=1326 audit(1759590496.448:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31740 comm="syz.8.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b690eec9 code=0x7ffc0000 [ 2672.316556][ T37] audit: type=1326 audit(1759590496.448:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31740 comm="syz.8.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b690eec9 code=0x7ffc0000 [ 2672.316604][ T37] audit: type=1326 audit(1759590496.448:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31740 comm="syz.8.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b68aaf79 code=0x7ffc0000 [ 2672.316645][ T37] audit: type=1326 audit(1759590496.448:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31740 comm="syz.8.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b68aaf79 code=0x7ffc0000 [ 2672.316683][ T37] audit: type=1326 audit(1759590496.448:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31740 comm="syz.8.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b690eec9 code=0x7ffc0000 [ 2672.316720][ T37] audit: type=1326 audit(1759590496.448:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31740 comm="syz.8.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b68aaf79 code=0x7ffc0000 [ 2672.316760][ T37] audit: type=1326 audit(1759590496.448:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31740 comm="syz.8.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b690eec9 code=0x7ffc0000 [ 2672.316797][ T37] audit: type=1326 audit(1759590496.448:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31740 comm="syz.8.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b690eec9 code=0x7ffc0000 [ 2672.316834][ T37] audit: type=1326 audit(1759590496.448:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31740 comm="syz.8.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b690eec9 code=0x7ffc0000 [ 2673.142919][T31750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6906'. [ 2675.891407][T31779] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6917'. [ 2676.044184][T28258] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 2676.071749][T31784] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6919'. [ 2676.205528][T28258] usb 8-1: Using ep0 maxpacket: 8 [ 2676.207896][T28258] usb 8-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2676.207914][T28258] usb 8-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2676.207998][T28258] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2676.208018][T28258] usb 8-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 2676.208030][T28258] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2676.211268][T28258] usb 8-1: config 0 descriptor?? [ 2676.575626][T28258] usbhid 8-1:0.0: can't add hid device: -71 [ 2676.575743][T28258] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2676.652595][T28258] usb 8-1: USB disconnect, device number 86 [ 2677.155676][T31801] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6923'. [ 2679.800846][T31823] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6933'. [ 2682.557663][T31860] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6946'. [ 2685.325454][T31893] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6958'. [ 2685.325557][T31893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2685.325568][T31893] IPv6: NLM_F_CREATE should be set when creating new route [ 2685.715198][T28258] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 2685.874954][T28258] usb 10-1: too many configurations: 67, using maximum allowed: 8 [ 2685.889872][T28258] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2685.889900][T28258] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2685.889919][T28258] usb 10-1: Product: syz [ 2685.889932][T28258] usb 10-1: Manufacturer: syz [ 2685.889944][T28258] usb 10-1: SerialNumber: syz [ 2685.968738][T28258] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2686.001479][ T9] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2686.421507][T25993] usb 10-1: USB disconnect, device number 55 [ 2687.224671][ T9] usb 10-1: Service connection timeout for: 256 [ 2687.224693][ T9] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2687.225391][ T9] ath9k_htc: Failed to initialize the device [ 2687.225814][T25993] usb 10-1: ath9k_htc: USB layer deinitialized [ 2690.088654][T21630] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 2690.254086][T21630] usb 9-1: Using ep0 maxpacket: 32 [ 2690.258893][T21630] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2690.258919][T21630] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2690.258939][T21630] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2690.263543][T21630] usb 9-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 2690.263569][T21630] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2690.263587][T21630] usb 9-1: Product: syz [ 2690.263600][T21630] usb 9-1: Manufacturer: syz [ 2690.263612][T21630] usb 9-1: SerialNumber: syz [ 2690.392220][T21630] usb 9-1: config 0 descriptor?? [ 2690.421159][T21630] rndis_host 9-1:0.0: skipping garbage [ 2690.421178][T21630] rndis_host 9-1:0.0: invalid descriptor buffer length [ 2690.421193][T21630] usb 9-1: bad CDC descriptors [ 2690.422226][T21630] cdc_acm 9-1:0.0: skipping garbage [ 2690.422241][T21630] cdc_acm 9-1:0.0: invalid descriptor buffer length [ 2690.914990][ T9] usb 9-1: USB disconnect, device number 72 [ 2692.052358][T31972] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6982'. [ 2693.044601][T31990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2693.046389][T31990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2700.322692][T32081] netlink: 'syz.7.7016': attribute type 20 has an invalid length. [ 2700.322730][T32081] IPv6: NLM_F_CREATE should be specified when creating new route [ 2701.760466][T32115] fuse: Unknown parameter 'grou00000000000000000000' [ 2702.514404][T32128] binder: 32127:32128 ioctl c0306201 0 returned -14 [ 2704.089330][T32164] binder: 32163:32164 ioctl c0306201 0 returned -14 [ 2704.376776][T32168] bridge1: port 1(macvlan2) entered blocking state [ 2704.376929][T32168] bridge1: port 1(macvlan2) entered disabled state [ 2704.377258][T32168] macvlan2: entered allmulticast mode [ 2704.408512][T32168] macvlan2: entered promiscuous mode [ 2705.729783][ T37] kauditd_printk_skb: 165 callbacks suppressed [ 2705.729803][ T37] audit: type=1326 audit(1759590529.868:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32188 comm="syz.4.7052" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c388deec9 code=0x0 [ 2705.882806][T32203] netlink: 288 bytes leftover after parsing attributes in process `syz.8.7055'. [ 2706.043255][T32212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2711.287824][T32322] fuse: Unknown parameter 'fd0x0000000000000004' [ 2712.773284][T32349] netlink: 384 bytes leftover after parsing attributes in process `syz.7.7105'. [ 2712.997933][T32355] fuse: Unknown parameter 'fd0x0000000000000004' [ 2713.066210][ T9] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 2713.244238][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 2713.253011][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2713.253038][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2713.253060][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 2713.256881][ T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2713.256896][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2713.256907][ T9] usb 8-1: Product: syz [ 2713.256914][ T9] usb 8-1: Manufacturer: syz [ 2713.256921][ T9] usb 8-1: SerialNumber: syz [ 2713.262134][ T9] usb 8-1: config 0 descriptor?? [ 2713.263849][T32349] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 2713.353309][ T9] mcba_usb 8-1:0.0 can0: failed tx_urb -90 [ 2713.353420][ T9] mcba_usb 8-1:0.0 can0: Failed to send cmd (169) [ 2713.353492][ T9] mcba_usb 8-1:0.0 can0: failed tx_urb -90 [ 2713.353514][ T9] mcba_usb 8-1:0.0 can0: Failed to send cmd (169) [ 2713.353523][ T9] mcba_usb 8-1:0.0: Microchip CAN BUS Analyzer connected [ 2713.400983][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.401053][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.469978][ T44] usb 8-1: USB disconnect, device number 87 [ 2713.472011][ T44] mcba_usb 8-1:0.0 can0: device disconnected [ 2715.222381][T32386] fuse: Unknown parameter 'fd0x0000000000000004' [ 2718.320313][T32445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2718.320870][T32445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2720.279941][ T37] audit: type=1326 audit(1759590544.418:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32461 comm="syz.8.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b690eec9 code=0x7ffc0000 [ 2720.280547][ T37] audit: type=1326 audit(1759590544.418:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32461 comm="syz.8.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b690eec9 code=0x7ffc0000 [ 2720.281279][ T37] audit: type=1326 audit(1759590544.418:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32461 comm="syz.8.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b68aaf79 code=0x7ffc0000 [ 2720.281708][ T37] audit: type=1326 audit(1759590544.418:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32461 comm="syz.8.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b690eec9 code=0x7ffc0000 [ 2720.282451][ T37] audit: type=1326 audit(1759590544.418:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32461 comm="syz.8.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b68aaf79 code=0x7ffc0000 [ 2720.282864][ T37] audit: type=1326 audit(1759590544.418:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32461 comm="syz.8.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44b690eec9 code=0x7ffc0000 [ 2720.289190][ T37] audit: type=1326 audit(1759590544.418:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32461 comm="syz.8.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b690eec9 code=0x7ffc0000 [ 2720.289358][ T37] audit: type=1326 audit(1759590544.428:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32461 comm="syz.8.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b690eec9 code=0x7ffc0000 [ 2720.289602][ T37] audit: type=1326 audit(1759590544.428:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32461 comm="syz.8.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b690eec9 code=0x7ffc0000 [ 2720.289760][ T37] audit: type=1326 audit(1759590544.428:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32461 comm="syz.8.7146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b690eec9 code=0x7ffc0000 [ 2720.784450][T25993] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 2720.944152][T25993] usb 8-1: Using ep0 maxpacket: 8 [ 2720.955555][T25993] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2720.955617][T25993] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2720.955637][T25993] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2720.955658][T25993] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2720.955680][T25993] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2720.955721][T25993] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2720.955741][T25993] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2721.249994][T25993] usb 8-1: usb_control_msg returned -32 [ 2721.250042][T25993] usbtmc 8-1:16.0: can't read capabilities [ 2722.106641][T32493] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 2724.345391][T25993] usb 8-1: USB disconnect, device number 88 [ 2728.389695][T25993] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 2728.575756][T25993] usb 10-1: Using ep0 maxpacket: 8 [ 2728.584288][T25993] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 2728.584326][T25993] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2728.584337][T25993] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2728.584350][T25993] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2728.584361][T25993] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2728.584385][T25993] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2728.584397][T25993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2728.884264][T25993] usb 10-1: usb_control_msg returned -32 [ 2728.884305][T25993] usbtmc 10-1:16.0: can't read capabilities [ 2729.935945][T32576] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 2731.561544][T25993] usb 10-1: USB disconnect, device number 56 [ 2733.036375][T32608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7193'. [ 2733.315696][ C0] vkms_vblank_simulate: vblank timer overrun [ 2733.336169][T32610] netlink: 384 bytes leftover after parsing attributes in process `syz.8.7194'. [ 2733.604169][ T9] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 2733.754426][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 2733.756993][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2733.757018][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2733.757040][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 2733.805003][ T9] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2733.805034][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2733.805053][ T9] usb 9-1: Product: syz [ 2733.805067][ T9] usb 9-1: Manufacturer: syz [ 2733.805079][ T9] usb 9-1: SerialNumber: syz [ 2733.829186][ T9] usb 9-1: config 0 descriptor?? [ 2733.831299][T32610] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2733.950788][ T9] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 2733.950818][ T9] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 2733.950890][ T9] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 2733.950913][ T9] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 2733.950921][ T9] mcba_usb 9-1:0.0: Microchip CAN BUS Analyzer connected [ 2734.065352][ T9] usb 9-1: USB disconnect, device number 73 [ 2734.068669][ T9] mcba_usb 9-1:0.0 can0: device disconnected [ 2734.365116][T32624] lo speed is unknown, defaulting to 1000 [ 2734.710267][ T37] kauditd_printk_skb: 105 callbacks suppressed [ 2734.710365][ T37] audit: type=1326 audit(1759590558.848:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32632 comm="syz.9.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2ea8faf79 code=0x7ffc0000 [ 2734.710807][ T37] audit: type=1326 audit(1759590558.848:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32632 comm="syz.9.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2734.711306][ T37] audit: type=1326 audit(1759590558.848:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32632 comm="syz.9.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2734.711850][ T37] audit: type=1326 audit(1759590558.848:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32632 comm="syz.9.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2734.712387][ T37] audit: type=1326 audit(1759590558.848:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32632 comm="syz.9.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2734.712871][ T37] audit: type=1326 audit(1759590558.848:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32632 comm="syz.9.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2734.713313][ T37] audit: type=1326 audit(1759590558.848:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32632 comm="syz.9.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2734.717245][ T37] audit: type=1326 audit(1759590558.858:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32632 comm="syz.9.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2734.717710][ T37] audit: type=1326 audit(1759590558.858:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32632 comm="syz.9.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2734.718314][ T37] audit: type=1326 audit(1759590558.858:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32632 comm="syz.9.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2735.064293][ T9] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 2735.358456][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 2735.386078][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2735.386136][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2735.386148][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2735.386160][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2735.386172][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2735.386196][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2735.386208][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2735.626892][ T9] usb 8-1: usb_control_msg returned -32 [ 2735.626938][ T9] usbtmc 8-1:16.0: can't read capabilities [ 2736.650226][T32653] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 2736.748250][ C0] vkms_vblank_simulate: vblank timer overrun [ 2737.369878][ C0] vkms_vblank_simulate: vblank timer overrun [ 2737.525452][ C0] vkms_vblank_simulate: vblank timer overrun [ 2738.108026][T32670] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7211'. [ 2738.108099][T32670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2739.175367][ T993] usb 8-1: USB disconnect, device number 89 [ 2739.694132][ T993] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 2739.720282][ T37] kauditd_printk_skb: 164 callbacks suppressed [ 2739.720300][ T37] audit: type=1326 audit(1759590563.858:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32684 comm="syz.6.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86978aeec9 code=0x7ffc0000 [ 2739.720721][ T37] audit: type=1326 audit(1759590563.858:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32684 comm="syz.6.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f86978aeec9 code=0x7ffc0000 [ 2739.720748][ T37] audit: type=1326 audit(1759590563.858:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32684 comm="syz.6.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86978aeec9 code=0x7ffc0000 [ 2739.724293][ T37] audit: type=1326 audit(1759590563.858:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32684 comm="syz.6.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86978aeec9 code=0x7ffc0000 [ 2739.982789][ T993] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2739.982805][ T993] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2739.985424][ T993] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ad.aa [ 2739.985451][ T993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2739.985469][ T993] usb 8-1: Product: syz [ 2739.985481][ T993] usb 8-1: Manufacturer: syz [ 2739.985494][ T993] usb 8-1: SerialNumber: syz [ 2740.088055][ T993] usb 8-1: config 0 descriptor?? [ 2740.324696][ T993] usb 8-1: USB disconnect, device number 90 [ 2741.294111][T21630] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 2741.446782][T21630] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2741.446799][T21630] usb 10-1: config 0 has no interface number 0 [ 2741.448741][T21630] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2741.448756][T21630] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2741.448767][T21630] usb 10-1: Product: syz [ 2741.448774][T21630] usb 10-1: Manufacturer: syz [ 2741.448781][T21630] usb 10-1: SerialNumber: syz [ 2741.460061][T21630] usb 10-1: config 0 descriptor?? [ 2741.669046][T21630] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2741.679201][T21630] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2741.679749][T21630] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2741.679807][T21630] usb 10-1: media controller created [ 2742.039556][T21630] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2742.213164][T21630] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 2742.513710][T21630] usb 10-1: USB disconnect, device number 57 [ 2743.234755][T32735] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2743.294195][ T993] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 2743.446018][ T993] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2743.446034][ T993] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2743.447785][ T993] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ad.aa [ 2743.447799][ T993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2743.447809][ T993] usb 9-1: Product: syz [ 2743.447817][ T993] usb 9-1: Manufacturer: syz [ 2743.447824][ T993] usb 9-1: SerialNumber: syz [ 2743.451130][ T993] usb 9-1: config 0 descriptor?? [ 2743.748324][ T993] usb 9-1: USB disconnect, device number 74 [ 2744.088771][T32766] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7244'. [ 2746.710057][ T350] netlink: 384 bytes leftover after parsing attributes in process `syz.6.7260'. [ 2746.712433][ T350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2746.712974][ T350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2748.142308][ T379] netlink: 'syz.9.7270': attribute type 10 has an invalid length. [ 2748.142463][ T379] bridge0: port 3(team0) entered blocking state [ 2748.142598][ T379] bridge0: port 3(team0) entered disabled state [ 2748.142781][ T379] team0: entered allmulticast mode [ 2748.142790][ T379] team_slave_0: entered allmulticast mode [ 2748.142800][ T379] team_slave_1: entered allmulticast mode [ 2748.168032][ T379] team0: entered promiscuous mode [ 2748.168053][ T379] team_slave_0: entered promiscuous mode [ 2748.168271][ T379] team_slave_1: entered promiscuous mode [ 2748.169476][ T379] bridge0: port 3(team0) entered blocking state [ 2748.169619][ T379] bridge0: port 3(team0) entered forwarding state [ 2749.804155][T11361] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 2750.215010][T11361] usb 8-1: Using ep0 maxpacket: 8 [ 2750.223160][T11361] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2750.223181][T11361] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2750.223195][T11361] usb 8-1: Product: syz [ 2750.223202][T11361] usb 8-1: Manufacturer: syz [ 2750.223209][T11361] usb 8-1: SerialNumber: syz [ 2750.226477][T11361] usb 8-1: config 0 descriptor?? [ 2750.230626][T11361] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2750.445608][ T402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2750.448274][ T402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2750.679070][ T37] audit: type=1326 audit(1759590574.778:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=422 comm="syz.9.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2750.679121][ T37] audit: type=1326 audit(1759590574.778:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=422 comm="syz.9.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2750.679160][ T37] audit: type=1326 audit(1759590574.788:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=422 comm="syz.9.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2750.679249][ T37] audit: type=1326 audit(1759590574.788:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=422 comm="syz.9.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2ea8faf79 code=0x7ffc0000 [ 2750.679291][ T37] audit: type=1326 audit(1759590574.788:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=422 comm="syz.9.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2ea8faf79 code=0x7ffc0000 [ 2750.679380][ T37] audit: type=1326 audit(1759590574.788:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=422 comm="syz.9.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2750.679419][ T37] audit: type=1326 audit(1759590574.788:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=422 comm="syz.9.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2750.679457][ T37] audit: type=1326 audit(1759590574.788:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=422 comm="syz.9.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2750.679546][ T37] audit: type=1326 audit(1759590574.788:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=422 comm="syz.9.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2750.679589][ T37] audit: type=1326 audit(1759590574.818:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=422 comm="syz.9.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2750.737932][T11361] gspca_sonixj: reg_w1 err -110 [ 2750.738023][T11361] sonixj 8-1:0.0: probe with driver sonixj failed with error -110 [ 2752.574686][ T461] netlink: 384 bytes leftover after parsing attributes in process `syz.4.7297'. [ 2752.814230][ T44] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2752.964241][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 2752.966805][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2752.966831][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2752.966960][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 2752.970173][ T44] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2752.970405][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2752.970425][ T44] usb 5-1: Product: syz [ 2752.970438][ T44] usb 5-1: Manufacturer: syz [ 2752.970452][ T44] usb 5-1: SerialNumber: syz [ 2753.147667][ T44] usb 5-1: config 0 descriptor?? [ 2753.148777][ T461] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 2753.294357][ T44] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 2753.298073][ T44] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 2753.298187][ T44] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 2753.298228][ T44] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 2753.299345][ T44] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 2753.366337][ T993] usb 5-1: USB disconnect, device number 44 [ 2753.369752][ T993] mcba_usb 5-1:0.0 can0: device disconnected [ 2753.434869][ T44] usb 8-1: USB disconnect, device number 91 [ 2755.246266][ T533] netlink: 384 bytes leftover after parsing attributes in process `syz.9.7324'. [ 2755.529391][ T993] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 2755.726143][ T993] usb 10-1: Using ep0 maxpacket: 16 [ 2755.752696][ T993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2755.752724][ T993] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2755.752747][ T993] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 2755.811194][ T993] usb 10-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2755.811278][ T993] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2755.811378][ T993] usb 10-1: Product: syz [ 2755.811392][ T993] usb 10-1: Manufacturer: syz [ 2755.811477][ T993] usb 10-1: SerialNumber: syz [ 2755.889268][ T993] usb 10-1: config 0 descriptor?? [ 2755.892009][ T533] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2756.092165][ T993] mcba_usb 10-1:0.0 can0: failed tx_urb -90 [ 2756.092215][ T993] mcba_usb 10-1:0.0 can0: Failed to send cmd (169) [ 2756.092328][ T993] mcba_usb 10-1:0.0 can0: failed tx_urb -90 [ 2756.092368][ T993] mcba_usb 10-1:0.0 can0: Failed to send cmd (169) [ 2756.092383][ T993] mcba_usb 10-1:0.0: Microchip CAN BUS Analyzer connected [ 2756.162437][ T993] usb 10-1: USB disconnect, device number 58 [ 2756.197056][ T993] mcba_usb 10-1:0.0 can0: device disconnected [ 2757.984232][ T567] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7335'. [ 2758.177494][ T575] fuse: Bad value for 'fd' [ 2759.499168][ T609] fuse: Bad value for 'fd' [ 2759.815859][ T612] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7353'. [ 2761.072162][ T641] fuse: Bad value for 'fd' [ 2761.989216][ T661] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7370'. [ 2762.305327][ T668] netlink: 384 bytes leftover after parsing attributes in process `syz.8.7373'. [ 2762.554224][ T44] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 2762.676162][ T675] fuse: Bad value for 'fd' [ 2762.727723][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 2762.732670][ T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2762.732687][ T44] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2762.732700][ T44] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 2762.738112][ T44] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2762.738137][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2762.738156][ T44] usb 9-1: Product: syz [ 2762.738169][ T44] usb 9-1: Manufacturer: syz [ 2762.738182][ T44] usb 9-1: SerialNumber: syz [ 2762.806959][ T44] usb 9-1: config 0 descriptor?? [ 2762.812428][ T668] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2763.153689][ T44] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 2763.153738][ T44] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 2763.153841][ T44] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 2763.153880][ T44] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 2763.153896][ T44] mcba_usb 9-1:0.0: Microchip CAN BUS Analyzer connected [ 2763.172229][ T44] usb 9-1: USB disconnect, device number 75 [ 2763.176881][ T44] mcba_usb 9-1:0.0 can0: device disconnected [ 2763.194118][ T993] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 2763.424147][ T993] usb 10-1: Using ep0 maxpacket: 8 [ 2763.427937][ T993] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2763.429449][ T993] usb 10-1: config 4 interface 0 has no altsetting 0 [ 2763.452992][ T993] usb 10-1: string descriptor 0 read error: -22 [ 2763.453078][ T993] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2763.453091][ T993] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2763.508718][ T993] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2763.529062][ T993] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2763.551435][ T993] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2763.552514][ T993] usb 10-1: media controller created [ 2763.664855][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2763.718312][ T993] zl10353_read_register: readreg error (reg=127, ret==0) [ 2763.773127][ T993] usb 10-1: USB disconnect, device number 59 [ 2765.015155][ T993] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2765.224282][ T993] usb 5-1: Using ep0 maxpacket: 8 [ 2765.228975][ T993] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2765.229021][ T993] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2765.229033][ T993] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2765.229046][ T993] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2765.229058][ T993] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2765.229080][ T993] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2765.229091][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2765.444231][ T993] usb 5-1: usb_control_msg returned -32 [ 2765.444325][ T993] usbtmc 5-1:16.0: can't read capabilities [ 2766.001880][ T713] fuse: Bad value for 'fd' [ 2766.569189][ T726] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 2767.846225][ T44] usb 5-1: USB disconnect, device number 45 [ 2768.046222][ T740] lo speed is unknown, defaulting to 1000 [ 2769.007762][ C0] vkms_vblank_simulate: vblank timer overrun [ 2769.137894][ C0] vkms_vblank_simulate: vblank timer overrun [ 2769.312209][ C0] vkms_vblank_simulate: vblank timer overrun [ 2772.115584][ T814] lo speed is unknown, defaulting to 1000 [ 2774.015517][ C0] vkms_vblank_simulate: vblank timer overrun [ 2774.609790][ T843] netlink: 288 bytes leftover after parsing attributes in process `syz.9.7428'. [ 2774.777474][ T855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2774.830039][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.830080][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.972330][ T857] netlink: 384 bytes leftover after parsing attributes in process `syz.6.7435'. [ 2774.998601][ T857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2775.001673][ T857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2775.103794][ T861] syz_tun: entered allmulticast mode [ 2775.115933][ T860] syz_tun: left allmulticast mode [ 2775.200655][ T859] lo speed is unknown, defaulting to 1000 [ 2775.663315][ T878] fuse: Unknown parameter 'group_i00000000000000000000' [ 2775.856132][ C0] vkms_vblank_simulate: vblank timer overrun [ 2776.024745][ C0] vkms_vblank_simulate: vblank timer overrun [ 2776.973245][ T899] netlink: 288 bytes leftover after parsing attributes in process `syz.6.7448'. [ 2777.128238][ T905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2777.566034][ T907] netlink: 384 bytes leftover after parsing attributes in process `syz.7.7450'. [ 2777.804454][ T44] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 2777.915513][ T909] lo speed is unknown, defaulting to 1000 [ 2777.964227][ T44] usb 8-1: Using ep0 maxpacket: 16 [ 2777.966553][ T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2777.966577][ T44] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2777.966600][ T44] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 2777.969130][ T44] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2777.969155][ T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2777.969172][ T44] usb 8-1: Product: syz [ 2777.969185][ T44] usb 8-1: Manufacturer: syz [ 2777.969197][ T44] usb 8-1: SerialNumber: syz [ 2778.080562][ T44] usb 8-1: config 0 descriptor?? [ 2778.081553][ T907] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 2778.289735][ T44] mcba_usb 8-1:0.0 can0: failed tx_urb -90 [ 2778.289783][ T44] mcba_usb 8-1:0.0 can0: Failed to send cmd (169) [ 2778.289887][ T44] mcba_usb 8-1:0.0 can0: failed tx_urb -90 [ 2778.289924][ T44] mcba_usb 8-1:0.0 can0: Failed to send cmd (169) [ 2778.289940][ T44] mcba_usb 8-1:0.0: Microchip CAN BUS Analyzer connected [ 2778.354238][ T44] usb 8-1: USB disconnect, device number 92 [ 2778.370334][ T44] mcba_usb 8-1:0.0 can0: device disconnected [ 2778.819388][ T940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2778.822519][ T940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2780.576406][ T969] lo speed is unknown, defaulting to 1000 [ 2781.023762][ T983] fuse: Bad value for 'rootmode' [ 2781.596163][ T994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2781.596684][ T994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2781.951439][ T996] lo speed is unknown, defaulting to 1000 [ 2782.573363][ T37] kauditd_printk_skb: 156 callbacks suppressed [ 2782.573448][ T37] audit: type=1326 audit(1759590606.708:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1006 comm="syz.9.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2ea8faf79 code=0x7ffc0000 [ 2782.573975][ T37] audit: type=1326 audit(1759590606.708:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1006 comm="syz.9.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2782.625086][ T37] audit: type=1326 audit(1759590606.768:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1006 comm="syz.9.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2ea8faf79 code=0x7ffc0000 [ 2782.632767][ T37] audit: type=1326 audit(1759590606.768:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1006 comm="syz.9.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2ea8faf79 code=0x7ffc0000 [ 2782.632817][ T37] audit: type=1326 audit(1759590606.768:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1006 comm="syz.9.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2782.632840][ T37] audit: type=1326 audit(1759590606.768:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1006 comm="syz.9.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2782.632863][ T37] audit: type=1326 audit(1759590606.768:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1006 comm="syz.9.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2782.632885][ T37] audit: type=1326 audit(1759590606.768:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1006 comm="syz.9.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2ea8faf79 code=0x7ffc0000 [ 2782.632906][ T37] audit: type=1326 audit(1759590606.768:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1006 comm="syz.9.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2782.632927][ T37] audit: type=1326 audit(1759590606.768:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1006 comm="syz.9.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea95eec9 code=0x7ffc0000 [ 2782.865653][ T1013] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7477'. [ 2783.175745][ T1020] fuse: Bad value for 'rootmode' [ 2784.084091][T21630] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 2784.251715][T21630] usb 10-1: device descriptor read/64, error -71 [ 2784.484846][T21630] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 2784.614210][T21630] usb 10-1: device descriptor read/64, error -71 [ 2784.739877][T21630] usb usb10-port1: attempt power cycle [ 2785.225129][T21630] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 2785.245036][T21630] usb 10-1: device descriptor read/8, error -71 [ 2785.494174][T21630] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 2785.516743][T21630] usb 10-1: device descriptor read/8, error -71 [ 2785.546991][ T1064] netlink: 384 bytes leftover after parsing attributes in process `syz.8.7493'. [ 2785.624739][T21630] usb usb10-port1: unable to enumerate USB device [ 2785.954207][T27155] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 2786.226215][T27155] usb 9-1: Using ep0 maxpacket: 16 [ 2786.306210][T27155] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2786.306238][T27155] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2786.306260][T27155] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 2786.308628][T27155] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2786.308654][T27155] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2786.308672][T27155] usb 9-1: Product: syz [ 2786.308686][T27155] usb 9-1: Manufacturer: syz [ 2786.308698][T27155] usb 9-1: SerialNumber: syz [ 2786.313828][T27155] usb 9-1: config 0 descriptor?? [ 2786.318422][ T1064] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2786.615626][T27155] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 2786.615657][T27155] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 2786.615719][T27155] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 2786.615741][T27155] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 2786.615749][T27155] mcba_usb 9-1:0.0: Microchip CAN BUS Analyzer connected [ 2786.654321][T27155] usb 9-1: USB disconnect, device number 76 [ 2786.657451][T27155] mcba_usb 9-1:0.0 can0: device disconnected [ 2789.184560][ T1109] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7501'. [ 2794.744120][T21630] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 2795.178499][T21630] usb 8-1: Using ep0 maxpacket: 8 [ 2795.181006][T21630] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2795.182567][T21630] usb 8-1: config 4 interface 0 has no altsetting 0 [ 2795.211369][T21630] usb 8-1: string descriptor 0 read error: -22 [ 2795.211457][T21630] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2795.211469][T21630] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2795.295097][T21630] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2795.342816][T21630] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2795.343202][T21630] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2795.343249][T21630] usb 8-1: media controller created [ 2795.762846][T21630] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2795.864385][T21630] zl10353_read_register: readreg error (reg=127, ret==0) [ 2795.919575][T21630] usb 8-1: USB disconnect, device number 93 [ 2798.647172][T27212] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2798.677426][T27212] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2798.770331][T27212] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2798.787458][T27212] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2798.861733][T27212] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2800.261226][ T1142] lo speed is unknown, defaulting to 1000 [ 2801.064253][T27206] Bluetooth: hci0: command tx timeout [ 2801.336484][ T1164] lo speed is unknown, defaulting to 1000 [ 2803.144175][T27212] Bluetooth: hci0: command tx timeout [ 2804.535197][ T37] kauditd_printk_skb: 39 callbacks suppressed [ 2804.535215][ T37] audit: type=1326 audit(1759590628.678:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1180 comm="syz.4.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2804.535342][ T37] audit: type=1326 audit(1759590628.678:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1180 comm="syz.4.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2804.542572][ T37] audit: type=1326 audit(1759590628.678:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1180 comm="syz.4.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2804.543460][ T37] audit: type=1326 audit(1759590628.678:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1180 comm="syz.4.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2804.578897][ T37] audit: type=1326 audit(1759590628.678:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1180 comm="syz.4.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2804.630124][ T37] audit: type=1326 audit(1759590628.768:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1180 comm="syz.4.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2804.631241][ T37] audit: type=1326 audit(1759590628.768:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1180 comm="syz.4.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c388def03 code=0x7ffc0000 [ 2804.631284][ T37] audit: type=1326 audit(1759590628.768:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1180 comm="syz.4.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0c388def87 code=0x7ffc0000 [ 2804.631322][ T37] audit: type=1326 audit(1759590628.768:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1180 comm="syz.4.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0c3889632d code=0x7ffc0000 [ 2804.758440][ T37] audit: type=1326 audit(1759590628.898:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1180 comm="syz.4.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c388deec9 code=0x7ffc0000 [ 2805.226138][T27212] Bluetooth: hci0: command tx timeout [ 2805.367681][ T1142] chnl_net:caif_netlink_parms(): no params data found [ 2805.724386][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2805.894153][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 2805.897537][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2805.899377][ T9] usb 5-1: config 4 interface 0 has no altsetting 0 [ 2805.940329][ T9] usb 5-1: string descriptor 0 read error: -22 [ 2805.940479][ T9] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2805.940501][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2806.011659][ T9] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2806.036552][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2806.036935][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2806.036983][ T9] usb 5-1: media controller created [ 2806.154756][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2806.810840][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 2806.989055][ T9] usb 5-1: USB disconnect, device number 46 [ 2807.304354][T27212] Bluetooth: hci0: command tx timeout [ 2808.117572][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 2808.119069][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 2808.123048][ T1142] bridge_slave_0: entered allmulticast mode [ 2808.247207][ T1142] bridge_slave_0: entered promiscuous mode [ 2808.271611][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 2808.271745][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 2808.271958][ T1142] bridge_slave_1: entered allmulticast mode [ 2808.322090][ T1142] bridge_slave_1: entered promiscuous mode [ 2809.058108][ T1142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2809.062479][ T1142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2810.810962][ T1142] team0: Port device team_slave_0 added [ 2810.857916][ T1142] team0: Port device team_slave_1 added [ 2811.800342][ T1220] syz.9.7529 (1220): drop_caches: 2 [ 2812.005955][ T1142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2812.005967][ T1142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2812.005981][ T1142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2812.007378][ T1142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2812.007386][ T1142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2812.007400][ T1142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2813.563115][ T1142] hsr_slave_0: entered promiscuous mode [ 2813.586863][ T1142] hsr_slave_1: entered promiscuous mode [ 2817.321003][T27206] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2817.337368][T27206] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2817.338953][T27206] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2817.340027][T27206] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2817.340754][T27206] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2817.939508][ T1238] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7533'. [ 2818.094127][ T1240] fuse: Unknown parameter 'user_id00000000000000000000' [ 2819.406474][T27206] Bluetooth: hci4: command tx timeout [ 2819.762640][T27212] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2819.794519][T27212] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2819.802538][T27212] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2819.821751][T27212] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2819.833064][T27212] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2819.988478][ T1142] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2820.611934][ T1233] lo speed is unknown, defaulting to 1000 [ 2821.464227][T27206] Bluetooth: hci4: command tx timeout [ 2821.724183][ T1249] lo speed is unknown, defaulting to 1000 [ 2821.944280][T27206] Bluetooth: hci6: command tx timeout [ 2822.093970][ T993] usb 7-1: USB disconnect, device number 31 [ 2823.136354][ T1269] hub 9-0:1.0: USB hub found [ 2823.137016][ T1269] hub 9-0:1.0: 1 port detected [ 2823.546399][T27206] Bluetooth: hci4: command tx timeout [ 2824.024581][T27206] Bluetooth: hci6: command tx timeout [ 2824.612093][ T1233] chnl_net:caif_netlink_parms(): no params data found [ 2825.635782][T27206] Bluetooth: hci4: command tx timeout [ 2826.046353][T27212] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2826.073914][T27212] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2826.082939][T27212] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2826.103583][T27212] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2826.112245][T27212] Bluetooth: hci6: command tx timeout [ 2826.113649][T27212] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2827.021479][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 2827.021794][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 2827.022048][ T1233] bridge_slave_0: entered allmulticast mode [ 2827.050282][ T1233] bridge_slave_0: entered promiscuous mode [ 2827.110412][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 2827.110546][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 2827.110811][ T1233] bridge_slave_1: entered allmulticast mode [ 2827.113105][ T1233] bridge_slave_1: entered promiscuous mode [ 2827.833423][ T1249] chnl_net:caif_netlink_parms(): no params data found [ 2828.184274][T27206] Bluetooth: hci7: command tx timeout [ 2828.185072][T27206] Bluetooth: hci6: command tx timeout [ 2828.408933][ T1233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2828.448985][ T1278] lo speed is unknown, defaulting to 1000 [ 2828.460699][ T1233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2829.664192][ T1233] team0: Port device team_slave_0 added [ 2829.713770][ T1233] team0: Port device team_slave_1 added [ 2830.268671][T27212] Bluetooth: hci7: command tx timeout [ 2831.249964][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state [ 2831.250098][ T1249] bridge0: port 1(bridge_slave_0) entered disabled state [ 2831.250358][ T1249] bridge_slave_0: entered allmulticast mode [ 2831.280687][ T1249] bridge_slave_0: entered promiscuous mode [ 2831.296338][ T1233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2831.296355][ T1233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2831.296380][ T1233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2831.352524][ T1233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2831.352540][ T1233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2831.352565][ T1233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2832.344338][T27212] Bluetooth: hci7: command tx timeout [ 2832.708222][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 2832.708355][ T1249] bridge0: port 2(bridge_slave_1) entered disabled state [ 2832.708578][ T1249] bridge_slave_1: entered allmulticast mode [ 2832.711634][ T1249] bridge_slave_1: entered promiscuous mode [ 2833.840387][ T1233] hsr_slave_0: entered promiscuous mode [ 2833.841848][ T1233] hsr_slave_1: entered promiscuous mode [ 2833.842927][ T1233] debugfs: 'hsr0' already exists in 'hsr' [ 2833.842951][ T1233] Cannot create hsr debugfs directory [ 2834.424216][T27212] Bluetooth: hci7: command tx timeout [ 2835.150979][ T1249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2836.270509][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.270580][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.736532][ T1249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2839.442578][ T1249] team0: Port device team_slave_0 added [ 2839.502213][ T1249] team0: Port device team_slave_1 added [ 2840.755193][ T1249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2840.755210][ T1249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2840.755235][ T1249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2841.257145][ T1249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2841.257163][ T1249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2841.257187][ T1249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2844.743921][T27206] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2844.781616][T27206] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2844.793618][T27206] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2844.819301][T27206] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2844.820580][T27206] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2846.905726][T27206] Bluetooth: hci1: command tx timeout [ 2848.984570][T27206] Bluetooth: hci1: command tx timeout [ 2851.064368][T27206] Bluetooth: hci1: command tx timeout [ 2851.776232][ T1142] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2851.945707][ T1278] chnl_net:caif_netlink_parms(): no params data found [ 2852.367833][T27212] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2852.394424][T27212] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2852.459829][T27212] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2852.478665][T27212] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2852.479429][T27212] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2853.144312][T27206] Bluetooth: hci1: command tx timeout [ 2854.584268][T27206] Bluetooth: hci2: command tx timeout [ 2855.007239][ T1249] hsr_slave_0: entered promiscuous mode [ 2855.025304][ T1249] hsr_slave_1: entered promiscuous mode [ 2855.026389][ T1249] debugfs: 'hsr0' already exists in 'hsr' [ 2855.026413][ T1249] Cannot create hsr debugfs directory [ 2855.454899][ T1308] lo speed is unknown, defaulting to 1000 [ 2856.664864][T27206] Bluetooth: hci2: command tx timeout [ 2856.690883][ T1312] lo speed is unknown, defaulting to 1000 [ 2857.615390][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 2857.615531][ T1278] bridge0: port 1(bridge_slave_0) entered disabled state [ 2857.615760][ T1278] bridge_slave_0: entered allmulticast mode [ 2857.618766][ T1278] bridge_slave_0: entered promiscuous mode [ 2857.709776][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 2857.732359][ T1278] bridge0: port 2(bridge_slave_1) entered disabled state [ 2857.754447][ T1278] bridge_slave_1: entered allmulticast mode [ 2857.759212][ T1278] bridge_slave_1: entered promiscuous mode [ 2858.744329][T27206] Bluetooth: hci2: command tx timeout [ 2860.206610][ T1278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2860.824310][T27206] Bluetooth: hci2: command tx timeout [ 2860.987427][ T1278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2862.151912][ T1278] team0: Port device team_slave_0 added [ 2862.179892][ T1278] team0: Port device team_slave_1 added [ 2863.159493][ T1278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2863.159511][ T1278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2863.159536][ T1278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2863.230102][ T1278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2863.230119][ T1278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2863.230144][ T1278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2866.037768][ T1278] hsr_slave_0: entered promiscuous mode [ 2866.039217][ T1278] hsr_slave_1: entered promiscuous mode [ 2866.040205][ T1278] debugfs: 'hsr0' already exists in 'hsr' [ 2866.040227][ T1278] Cannot create hsr debugfs directory [ 2866.758818][ T1308] chnl_net:caif_netlink_parms(): no params data found [ 2868.164865][ T1312] chnl_net:caif_netlink_parms(): no params data found [ 2869.674626][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 2869.674771][ T1308] bridge0: port 1(bridge_slave_0) entered disabled state [ 2869.675008][ T1308] bridge_slave_0: entered allmulticast mode [ 2869.677740][ T1308] bridge_slave_0: entered promiscuous mode [ 2869.723227][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 2869.723451][ T1308] bridge0: port 2(bridge_slave_1) entered disabled state [ 2869.723681][ T1308] bridge_slave_1: entered allmulticast mode [ 2869.747878][ T1308] bridge_slave_1: entered promiscuous mode [ 2872.140628][ T1308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2872.166655][ T1308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2872.197250][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 2872.197424][ T1312] bridge0: port 1(bridge_slave_0) entered disabled state [ 2872.197668][ T1312] bridge_slave_0: entered allmulticast mode [ 2872.201165][ T1312] bridge_slave_0: entered promiscuous mode [ 2872.542577][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 2872.542709][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state [ 2872.542935][ T1312] bridge_slave_1: entered allmulticast mode [ 2872.566589][ T1312] bridge_slave_1: entered promiscuous mode [ 2873.487829][ T1308] team0: Port device team_slave_0 added [ 2874.087553][ T1308] team0: Port device team_slave_1 added [ 2874.167338][ T1312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2874.372383][ T1312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2875.587841][ T1308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2875.587857][ T1308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2875.587881][ T1308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2876.581714][T27212] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2876.611140][T27212] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2876.621072][T27212] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2876.622367][T27212] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2876.623206][T27212] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2876.762117][ T1308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2876.762134][ T1308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2876.762158][ T1308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2876.779349][ T1312] team0: Port device team_slave_0 added [ 2876.798787][ T1312] team0: Port device team_slave_1 added [ 2877.838487][ T1312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2877.838504][ T1312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2877.838528][ T1312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2877.841213][ T1312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2877.841227][ T1312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2877.841251][ T1312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2877.847503][ T1339] lo speed is unknown, defaulting to 1000 [ 2878.669281][T27212] Bluetooth: hci3: command tx timeout [ 2879.019348][ T1308] hsr_slave_0: entered promiscuous mode [ 2879.020836][ T1308] hsr_slave_1: entered promiscuous mode [ 2879.022925][ T1308] debugfs: 'hsr0' already exists in 'hsr' [ 2879.022948][ T1308] Cannot create hsr debugfs directory [ 2879.540380][ T1312] hsr_slave_0: entered promiscuous mode [ 2879.541859][ T1312] hsr_slave_1: entered promiscuous mode [ 2879.542910][ T1312] debugfs: 'hsr0' already exists in 'hsr' [ 2879.542934][ T1312] Cannot create hsr debugfs directory [ 2880.142973][T27206] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2880.161936][T27206] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2880.163507][T27206] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2880.180848][T27206] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2880.194825][T27206] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2880.744342][T27212] Bluetooth: hci3: command tx timeout [ 2880.883931][ T1142] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2882.264251][T27212] Bluetooth: hci8: command tx timeout [ 2882.824168][T27212] Bluetooth: hci3: command tx timeout [ 2882.930711][ T1343] lo speed is unknown, defaulting to 1000 [ 2884.344112][T27212] Bluetooth: hci8: command tx timeout [ 2884.717493][T27206] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2884.729166][T27206] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2884.730793][T27206] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2884.732426][T27206] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2884.733107][T27206] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2884.944326][T27212] Bluetooth: hci3: command tx timeout [ 2885.161470][ T1350] lo speed is unknown, defaulting to 1000 [ 2885.397025][ T1339] chnl_net:caif_netlink_parms(): no params data found [ 2886.424321][T27206] Bluetooth: hci8: command tx timeout [ 2886.827385][T27206] Bluetooth: hci9: command tx timeout [ 2886.913943][ T1343] chnl_net:caif_netlink_parms(): no params data found [ 2888.513081][T27206] Bluetooth: hci8: command tx timeout [ 2888.904321][T27206] Bluetooth: hci9: command tx timeout [ 2888.945778][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 2888.945906][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 2888.946209][ T1339] bridge_slave_0: entered allmulticast mode [ 2888.952610][ T1339] bridge_slave_0: entered promiscuous mode [ 2889.021714][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 2889.022169][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 2889.022465][ T1339] bridge_slave_1: entered allmulticast mode [ 2889.060295][ T1339] bridge_slave_1: entered promiscuous mode [ 2890.984401][T27206] Bluetooth: hci9: command tx timeout [ 2891.729793][ T1339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2891.982383][ T1339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2892.006489][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state [ 2892.006610][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 2892.006805][ T1343] bridge_slave_0: entered allmulticast mode [ 2892.008364][ T1343] bridge_slave_0: entered promiscuous mode [ 2892.315600][ T1350] chnl_net:caif_netlink_parms(): no params data found [ 2892.324287][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 2892.324396][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state [ 2892.324648][ T1343] bridge_slave_1: entered allmulticast mode [ 2892.327463][ T1343] bridge_slave_1: entered promiscuous mode [ 2893.064243][T27206] Bluetooth: hci9: command tx timeout [ 2893.968533][ T1339] team0: Port device team_slave_0 added [ 2895.411984][ T1339] team0: Port device team_slave_1 added [ 2895.990748][ T1343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2896.368863][ T1343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2896.393340][ T1339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2896.393355][ T1339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2896.393386][ T1339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2897.039901][ T1339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2897.039913][ T1339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2897.039927][ T1339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2897.711118][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.711187][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.062946][ T1343] team0: Port device team_slave_0 added [ 2898.086688][ T1343] team0: Port device team_slave_1 added [ 2899.365107][ T1350] bridge0: port 1(bridge_slave_0) entered blocking state [ 2899.365242][ T1350] bridge0: port 1(bridge_slave_0) entered disabled state [ 2899.365486][ T1350] bridge_slave_0: entered allmulticast mode [ 2899.368249][ T1350] bridge_slave_0: entered promiscuous mode [ 2900.485873][ T1350] bridge0: port 2(bridge_slave_1) entered blocking state [ 2900.486064][ T1350] bridge0: port 2(bridge_slave_1) entered disabled state [ 2900.486309][ T1350] bridge_slave_1: entered allmulticast mode [ 2900.488031][ T1350] bridge_slave_1: entered promiscuous mode [ 2900.535313][ T1343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2900.535329][ T1343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2900.535355][ T1343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2901.612994][ T1343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2901.613006][ T1343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2901.613020][ T1343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2901.675464][ T1339] hsr_slave_0: entered promiscuous mode [ 2901.676958][ T1339] hsr_slave_1: entered promiscuous mode [ 2901.678020][ T1339] debugfs: 'hsr0' already exists in 'hsr' [ 2901.678040][ T1339] Cannot create hsr debugfs directory [ 2902.383141][ T1350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2903.117263][ T1350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2905.126784][T27212] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2905.151515][T27212] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2905.162429][T27212] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2905.163550][T27212] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2905.191077][T27212] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2906.420018][ T1142] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2907.230219][T27206] Bluetooth: hci5: command tx timeout [ 2908.866594][ T1350] team0: Port device team_slave_0 added [ 2908.915185][ T1343] hsr_slave_0: entered promiscuous mode [ 2908.916766][ T1343] hsr_slave_1: entered promiscuous mode [ 2908.917880][ T1343] debugfs: 'hsr0' already exists in 'hsr' [ 2908.917905][ T1343] Cannot create hsr debugfs directory [ 2908.920580][ T1350] team0: Port device team_slave_1 added [ 2909.304349][T27206] Bluetooth: hci5: command tx timeout [ 2910.650437][ T1350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2910.650454][ T1350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2910.650478][ T1350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2910.735605][ T1350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2910.735622][ T1350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2910.735647][ T1350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2911.385498][T27206] Bluetooth: hci5: command tx timeout [ 2911.691506][ T1377] lo speed is unknown, defaulting to 1000 [ 2912.699490][T27212] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2912.740975][T27212] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2912.742566][T27212] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2912.762850][T27212] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2912.763647][T27212] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2912.945737][ T1350] hsr_slave_0: entered promiscuous mode [ 2912.947313][ T1350] hsr_slave_1: entered promiscuous mode [ 2912.948487][ T1350] debugfs: 'hsr0' already exists in 'hsr' [ 2912.948512][ T1350] Cannot create hsr debugfs directory [ 2913.464669][T27206] Bluetooth: hci5: command tx timeout [ 2914.827483][T27206] Bluetooth: hci10: command tx timeout [ 2915.196328][ T1381] lo speed is unknown, defaulting to 1000 [ 2915.965735][ T1377] chnl_net:caif_netlink_parms(): no params data found [ 2916.538115][ T1381] chnl_net:caif_netlink_parms(): no params data found [ 2916.924199][T27206] Bluetooth: hci10: command tx timeout [ 2918.320157][ T6507] bridge_slave_1: left allmulticast mode [ 2918.320186][ T6507] bridge_slave_1: left promiscuous mode [ 2918.320434][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2918.915459][ T6507] bridge_slave_0: left allmulticast mode [ 2918.915488][ T6507] bridge_slave_0: left promiscuous mode [ 2918.915743][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state [ 2918.984530][T27212] Bluetooth: hci10: command tx timeout [ 2921.074181][T27212] Bluetooth: hci10: command tx timeout [ 2937.598666][T27206] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2937.641378][T27206] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2937.660541][T27206] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2937.700010][T27206] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2937.701302][T27206] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2939.084441][ T6507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2939.449299][ T6507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2939.520554][ T6507] bond0 (unregistering): Released all slaves [ 2939.784350][T27212] Bluetooth: hci0: command tx timeout [ 2940.242574][ T1280] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2940.267232][ T1280] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2940.268844][ T1280] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2940.270043][ T1280] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2940.270798][ T1280] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2940.755691][T27212] Bluetooth: hci4: command 0x0406 tx timeout [ 2941.894234][T27206] Bluetooth: hci0: command tx timeout [ 2942.424346][T27206] Bluetooth: hci11: command tx timeout [ 2943.944339][T27212] Bluetooth: hci0: command tx timeout [ 2944.541521][T27212] Bluetooth: hci11: command tx timeout [ 2945.436583][ T6507] bond1 (unregistering): (slave veth3): Releasing active interface [ 2945.436620][ T6507] veth0_to_bond: entered promiscuous mode [ 2945.824486][ T1280] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2945.828840][ T1280] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2945.830418][ T1280] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2945.832028][ T1280] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2945.832805][ T1280] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2945.880703][T27212] Bluetooth: hci6: command 0x0406 tx timeout [ 2946.004817][ T6507] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 2946.025922][T27206] Bluetooth: hci0: command tx timeout [ 2946.148349][ T6507] bond1 (unregistering): Released all slaves [ 2946.584261][T27206] Bluetooth: hci11: command tx timeout [ 2948.024527][T27206] Bluetooth: hci12: command tx timeout [ 2948.664241][T27206] Bluetooth: hci11: command tx timeout [ 2950.104291][T27206] Bluetooth: hci12: command tx timeout [ 2950.703711][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 2950.703855][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 2950.724256][ T1377] bridge_slave_0: entered allmulticast mode [ 2950.731396][ T1377] bridge_slave_0: entered promiscuous mode [ 2950.996222][T27206] Bluetooth: hci7: command 0x0406 tx timeout [ 2951.780361][ T6507] : left promiscuous mode [ 2952.187403][T27206] Bluetooth: hci12: command tx timeout [ 2953.247323][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 2953.247511][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 2953.247737][ T1377] bridge_slave_1: entered allmulticast mode [ 2953.251211][ T1377] bridge_slave_1: entered promiscuous mode [ 2954.264710][T27212] Bluetooth: hci12: command tx timeout [ 2956.422799][ T1377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2957.158093][ T1377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2958.399561][ T1399] lo speed is unknown, defaulting to 1000 [ 2959.161563][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.161633][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 2961.104967][ T1381] bridge0: port 1(bridge_slave_0) entered blocking state [ 2961.105099][ T1381] bridge0: port 1(bridge_slave_0) entered disabled state [ 2961.105483][ T1381] bridge_slave_0: entered allmulticast mode [ 2961.108330][ T1381] bridge_slave_0: entered promiscuous mode [ 2961.113303][ T1407] lo speed is unknown, defaulting to 1000 [ 2962.450195][ T1404] lo speed is unknown, defaulting to 1000 [ 2962.470865][ T1381] bridge0: port 2(bridge_slave_1) entered blocking state [ 2962.471077][ T1381] bridge0: port 2(bridge_slave_1) entered disabled state [ 2962.471396][ T1381] bridge_slave_1: entered allmulticast mode [ 2962.496514][ T1381] bridge_slave_1: entered promiscuous mode [ 2962.524857][ T1377] team0: Port device team_slave_0 added [ 2963.136594][ T1377] team0: Port device team_slave_1 added [ 2963.172170][ T6507] tipc: Left network mode [ 2965.401922][ T1381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2965.936622][T27206] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2965.981293][T27206] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2966.010374][T27206] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2966.012527][T27206] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2966.013368][T27206] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2966.863071][ T1381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2968.104523][T27206] Bluetooth: hci13: command tx timeout [ 2968.733289][ T1381] team0: Port device team_slave_0 added [ 2968.820081][ T1381] team0: Port device team_slave_1 added [ 2969.141413][ T1525] lo speed is unknown, defaulting to 1000 [ 2969.515920][ T1381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2969.515937][ T1381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2969.515962][ T1381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2969.579720][ T1381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2969.579737][ T1381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2969.579764][ T1381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2970.184322][T27212] Bluetooth: hci13: command tx timeout [ 2971.465460][T27212] Bluetooth: hci1: command 0x0406 tx timeout [ 2972.264359][T27212] Bluetooth: hci13: command tx timeout [ 2972.976403][ T1381] hsr_slave_0: entered promiscuous mode [ 2972.978148][ T1381] hsr_slave_1: entered promiscuous mode [ 2972.996302][ T1381] debugfs: 'hsr0' already exists in 'hsr' [ 2972.996331][ T1381] Cannot create hsr debugfs directory [ 2973.807220][ T1399] chnl_net:caif_netlink_parms(): no params data found [ 2974.180243][T27212] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2974.203927][T27212] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2974.217443][T27212] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2974.219556][T27212] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2974.220315][T27212] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2974.344269][T27212] Bluetooth: hci13: command tx timeout [ 2975.854618][ T1407] chnl_net:caif_netlink_parms(): no params data found [ 2976.344301][T27206] Bluetooth: hci5: command tx timeout [ 2976.585327][T27206] Bluetooth: hci2: command 0x0406 tx timeout [ 2977.875508][ T1404] chnl_net:caif_netlink_parms(): no params data found [ 2977.934597][ T1525] chnl_net:caif_netlink_parms(): no params data found [ 2978.424308][T27212] Bluetooth: hci5: command tx timeout [ 2980.505083][T27212] Bluetooth: hci5: command tx timeout [ 2982.585038][T27212] Bluetooth: hci5: command tx timeout [ 2982.763732][ T1399] bridge0: port 1(bridge_slave_0) entered blocking state [ 2982.772276][ T1399] bridge0: port 1(bridge_slave_0) entered disabled state [ 2982.772646][ T1399] bridge_slave_0: entered allmulticast mode [ 2982.797091][ T1399] bridge_slave_0: entered promiscuous mode [ 2983.437762][ T1563] lo speed is unknown, defaulting to 1000 [ 2983.458775][ T1399] bridge0: port 2(bridge_slave_1) entered blocking state [ 2983.458942][ T1399] bridge0: port 2(bridge_slave_1) entered disabled state [ 2983.459239][ T1399] bridge_slave_1: entered allmulticast mode [ 2983.462411][ T1399] bridge_slave_1: entered promiscuous mode [ 2986.049965][ T1407] bridge0: port 1(bridge_slave_0) entered blocking state [ 2986.050109][ T1407] bridge0: port 1(bridge_slave_0) entered disabled state [ 2986.050395][ T1407] bridge_slave_0: entered allmulticast mode [ 2986.053337][ T1407] bridge_slave_0: entered promiscuous mode [ 2986.101883][ T1399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2989.168295][ T1407] bridge0: port 2(bridge_slave_1) entered blocking state [ 2989.168504][ T1407] bridge0: port 2(bridge_slave_1) entered disabled state [ 2989.168860][ T1407] bridge_slave_1: entered allmulticast mode [ 2989.171725][ T1407] bridge_slave_1: entered promiscuous mode [ 2989.210557][ T1399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2989.210780][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state [ 2989.210912][ T1404] bridge0: port 1(bridge_slave_0) entered disabled state [ 2989.211160][ T1404] bridge_slave_0: entered allmulticast mode [ 2989.213885][ T1404] bridge_slave_0: entered promiscuous mode [ 2990.083557][ T1404] bridge0: port 2(bridge_slave_1) entered blocking state [ 2990.083680][ T1404] bridge0: port 2(bridge_slave_1) entered disabled state [ 2990.083948][ T1404] bridge_slave_1: entered allmulticast mode [ 2990.087264][ T1404] bridge_slave_1: entered promiscuous mode [ 2992.421894][ T1525] bridge0: port 1(bridge_slave_0) entered blocking state [ 2992.422027][ T1525] bridge0: port 1(bridge_slave_0) entered disabled state [ 2992.422398][ T1525] bridge_slave_0: entered allmulticast mode [ 2992.500276][ T1525] bridge_slave_0: entered promiscuous mode [ 2993.489991][ T1525] bridge0: port 2(bridge_slave_1) entered blocking state [ 2993.490123][ T1525] bridge0: port 2(bridge_slave_1) entered disabled state [ 2993.490416][ T1525] bridge_slave_1: entered allmulticast mode [ 2993.516319][ T1525] bridge_slave_1: entered promiscuous mode [ 2995.251778][ T6704] kworker/u8:15 (6704) used greatest stack depth: 12696 bytes left [ 2998.069537][T27206] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2998.083218][T27206] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2998.085819][T27206] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2998.094785][T27206] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2998.105035][T27206] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2998.496913][ T1399] team0: Port device team_slave_0 added [ 2998.531441][ T1407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3000.184226][ T1280] Bluetooth: hci10: command tx timeout [ 3000.426237][ T1407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3000.461010][ T1404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3001.125891][T27212] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 3001.147958][T27212] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 3001.150666][T27212] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 3001.151810][T27212] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 3001.152588][T27212] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 3001.962241][ T1404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3002.184156][T27212] Bluetooth: hci3: command 0x0406 tx timeout [ 3002.264144][T27212] Bluetooth: hci10: command tx timeout [ 3003.224236][T27212] Bluetooth: hci14: command tx timeout [ 3003.889477][ T1525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3004.344348][T27206] Bluetooth: hci10: command tx timeout [ 3005.304651][ T1280] Bluetooth: hci14: command tx timeout [ 3005.309232][ T1525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3006.402533][ T1146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3006.427935][ T1146] Bluetooth: hci10: command tx timeout [ 3006.429923][ T1687] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3006.431558][ T1687] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3006.433908][ T1687] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3006.463253][ T1687] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3007.322830][ T1280] Bluetooth: hci9: command 0x0406 tx timeout [ 3007.326977][ T1687] Bluetooth: hci8: command 0x0406 tx timeout [ 3007.384846][ T1280] Bluetooth: hci14: command tx timeout [ 3007.910800][ T1407] team0: Port device team_slave_0 added [ 3008.514276][T27212] Bluetooth: hci0: command tx timeout [ 3009.464796][T27212] Bluetooth: hci14: command tx timeout [ 3010.584277][T27212] Bluetooth: hci0: command tx timeout [ 3012.666082][T27212] Bluetooth: hci0: command tx timeout [ 3014.744171][T27212] Bluetooth: hci0: command tx timeout [ 3014.861732][ T1525] team0: Port device team_slave_0 added [ 3014.887799][ T1674] lo speed is unknown, defaulting to 1000 [ 3014.891706][ T1525] team0: Port device team_slave_1 added [ 3016.985265][ T6507] hsr_slave_0: left promiscuous mode [ 3017.217639][ T6507] hsr_slave_1: left promiscuous mode [ 3017.381678][ T6507] dummy0: left promiscuous mode [ 3017.382116][ T6507] veth1_macvtap: left promiscuous mode [ 3017.382222][ T6507] veth0_macvtap: left promiscuous mode [ 3017.382527][ T6507] veth1_vlan: left promiscuous mode [ 3017.382715][ T6507] veth0_vlan: left promiscuous mode [ 3020.636970][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.637041][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 3025.405969][T27206] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3025.438905][T27206] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3025.441767][T27206] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3025.456711][T27206] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3025.467642][T27206] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3025.706720][ T38] INFO: task syz-executor:1278 blocked for more than 143 seconds. [ 3025.706748][ T38] Not tainted syzkaller #0 [ 3025.706759][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3025.706768][ T38] task:syz-executor state:D stack:18792 pid:1278 tgid:1278 ppid:1 task_flags:0x400140 flags:0x00080002 [ 3025.706818][ T38] Call Trace: [ 3025.706826][ T38] [ 3025.706843][ T38] __schedule+0x16f3/0x4c20 [ 3025.706988][ T38] ? __lock_acquire+0xab9/0xd20 [ 3025.707035][ T38] ? __pfx___schedule+0x10/0x10 [ 3025.707072][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 3025.707124][ T38] rt_mutex_schedule+0x77/0xf0 [ 3025.707144][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 3025.707169][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 3025.707210][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 3025.707237][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 3025.707261][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 3025.707284][ T38] ? __lock_acquire+0xab9/0xd20 [ 3025.707318][ T38] ? del_device_store+0xd1/0x360 [ 3025.707407][ T38] ? __pfx_sscanf+0x10/0x10 [ 3025.707456][ T38] ? del_device_store+0xd1/0x360 [ 3025.707472][ T38] mutex_lock_nested+0x16a/0x1d0 [ 3025.707502][ T38] del_device_store+0xd1/0x360 [ 3025.707519][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 3025.707571][ T38] ? __pfx_del_device_store+0x10/0x10 [ 3025.707590][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 3025.707615][ T38] ? sysfs_kf_write+0x166/0x260 [ 3025.707636][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 3025.707652][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 3025.707681][ T38] vfs_write+0x5d2/0xb40 [ 3025.707728][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 3025.707752][ T38] ? __pfx_vfs_write+0x10/0x10 [ 3025.707778][ T38] ? kmem_cache_free+0x19a/0x910 [ 3025.707809][ T38] ? do_sys_openat2+0x154/0x1c0 [ 3025.707843][ T38] ksys_write+0x14b/0x260 [ 3025.707867][ T38] ? __pfx_ksys_write+0x10/0x10 [ 3025.707886][ T38] ? rcu_is_watching+0x15/0xb0 [ 3025.707912][ T38] ? do_syscall_64+0xbe/0x3b0 [ 3025.707969][ T38] do_sysca[ 3025.707969][ T38] do_syscall_64+0xfa/0x3b0 [ 3025.707988][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 3025.708008][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3025.708045][ T38] ? clear_bhb_loop+0x60/0xb0 [ 3025.708068][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3025.708086][ T38] RIP: 0033:0x7fa29ceed97f [ 3025.708107][ T38] RSP: 002b:00007ffd0b161ae0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3025.708127][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa29ceed97f [ 3025.708141][ T38] RDX: 0000000000000001 RSI: 00007ffd0b161b30 RDI: 0000000000000005 [ 3025.708152][ T38] RBP: 00007fa29cf73239 R08: 0000000000000000 R09: 00007ffd0b161937 [ 3025.708165][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3025.708177][ T38] R13: 00007ffd0b161b30 R14: 00007fa29dc74620 R15: 0000000000000003 [ 3025.708208][ T38] [ 3025.708270][ T38] [ 3025.708270][ T38] Showing all locks held in the system: [ 3025.708281][ T38] 4 locks held by rcuc/1/28: [ 3025.708294][ T38] 1 lock held by khungtaskd/38: [ 3025.708304][ T38] #0: ffffffff8d3aa300 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3025.708384][ T38] 2 locks held by getty/5573: [ 3025.708395][ T38] #0: ffff88823bf2a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3025.708514][ T38] #1: ffffc900042132e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 3025.708557][ T38] 4 locks held by kworker/u8:14/6507: [ 3025.708568][ T38] #0: ffff888019a94138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3025.708614][ T38] #1: ffffc9000c857bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3025.708658][ T38] #2: ffffffff8e6579e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 3025.708761][ T38] #3: ffffffff8e6648f8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 3025.708830][ T38] 3 locks held by kworker/u8:19/9417: [ 3025.708841][ T38] #0: ffff88813ff29938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3025.708891][ T38] #1: ffffc900043a7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3025.708943][ T38] #2: ffffffff8e6648f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 3025.709015][ T38] 3 locks held by kworker/u8:22/15912: [ 3025.709026][ T38] #0: ffff88814cfbf138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3025.709072][ T38] #1: ffffc9000feb7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3025.709116][ T38] #2: ffffffff8e6648f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 3025.709199][ T38] 1 lock held by syz-executor/1233: [ 3025.709210][ T38] #0: ffffffff8d3afcb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 3025.709254][ T38] 7 locks held by syz-executor/1249: [ 3025.709264][ T38] #0: ffff888033796480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 3025.709311][ T38] #1: ffff88805d986078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 3025.709357][ T38] #2: ffff888025feed28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 3025.709406][ T38] #3: ffffffff8dedd4b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 3025.709448][ T38] #4: ffff88805b2450d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 3025.709520][ T38] #5: ffff88805b246300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 3025.709569][ T38] #6: ffffffff8d3afcb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 3025.709612][ T38] 4 locks held by syz-executor/1278: [ 3025.709623][ T38] #0: ffff888033796480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 3025.709669][ T38] #1: ffff88805906d078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 3025.709712][ T38] #2: ffff888025feed28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 3025.709761][ T38] #3: ffffffff8dedd4b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 3025.709804][ T38] 4 locks held by syz-executor/1308: [ 3025.709814][ T38] #0: ffff888033796480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 3025.709860][ T38] #1: ffff88804ad20478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 3025.709904][ T38] #2: ffff888025feed28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 3025.709959][ T38] #3: ffffffff8dedd4b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 3025.710000][ T38] 4 locks held by syz-executor/1312: [ 3025.710010][ T38] #0: ffff888033796480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 3025.710055][ T38] #1: ffff888030a73878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 3025.710099][ T38] #2: ffff888025feed28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 3025.710147][ T38] #3: ffffffff8dedd4b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 3025.710189][ T38] 4 locks held by syz-executor/1339: [ 3025.710199][ T38] #0: ffff888033796480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 3025.710239][ T38] #1: ffff888058b5d078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 3025.710282][ T38] #2: ffff888025feed28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 3025.710330][ T38] #3: ffffffff8dedd4b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 3025.710371][ T38] 4 locks held by syz-executor/1343: [ 3025.710381][ T38] #0: ffff888033796480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 3025.710426][ T38] #1: ffff8880791d9878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 3025.710469][ T38] #2: ffff888025feed28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 3025.710517][ T38] #3: ffffffff8dedd4b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 3025.710558][ T38] 4 locks held by syz-executor/1350: [ 3025.710569][ T38] #0: ffff888033796480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 3025.710614][ T38] #1: ffff88807e2efc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 3025.710658][ T38] #2: ffff888025feed28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 3025.710704][ T38] #3: ffffffff8dedd4b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 3025.710746][ T38] 1 lock held by syz-executor/1407: [ 3025.710756][ T38] #0: ffffffff8d3afcb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 3025.710800][ T38] 2 locks held by syz-executor/1525: [ 3025.710810][ T38] #0: ffffffff8ddd6a00 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 3025.710856][ T38] #1: ffffffff8e6648f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 3025.710899][ T38] 2 locks held by syz-executor/1563: [ 3025.710909][ T38] #0: ffffffff8eb768e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 3025.710961][ T38] #1: ffffffff8e6648f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 3025.711003][ T38] 2 locks held by syz-executor/1674: [ 3025.711014][ T38] #0: ffffffff8e6579e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 3025.711055][ T38] #1: ffffffff8e6648f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 3025.711147][ T38] 2 locks held by syz-executor/1680: [ 3025.711158][ T38] #0: ffffffff8e6579e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 3025.711197][ T38] #1: ffffffff8e6648f8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 3025.711269][ T38] 2 locks held by syz-executor/1684: [ 3025.711280][ T38] #0: ffffffff8e6579e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 3025.711319][ T38] #1: ffffffff8e6648f8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 3025.711364][ T38] 1 lock held by syz-executor/1746: [ 3025.711375][ T38] #0: ffffffff8e6648f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 3025.711441][ T38] [ 3025.711448][ T38] ============================================= [ 3025.711448][ T38] [ 3025.711457][ T38] NMI backtrace for cpu 0 [ 3025.711479][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3025.711499][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3025.711586][ T38] Call Trace: [ 3025.711596][ T38] [ 3025.711605][ T38] dump_stack_lvl+0x189/0x250 [ 3025.711658][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3025.711681][ T38] ? __pfx__printk+0x10/0x10 [ 3025.711710][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 3025.711801][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3025.711829][ T38] ? __pfx__printk+0x10/0x10 [ 3025.711851][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3025.711876][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 3025.711903][ T38] watchdog+0xf60/0xfa0 [ 3025.711932][ T38] ? watchdog+0x1e2/0xfa0 [ 3025.711958][ T38] kthread+0x711/0x8a0 [ 3025.711979][ T38] ? __pfx_watchdog+0x10/0x10 [ 3025.712000][ T38] ? __pfx_kthread+0x10/0x10 [ 3025.712015][ T38] ? rt_spin_unlock+0x150/0x200 [ 3025.712036][ T38] ? rt_spin_unlock+0x161/0x200 [ 3025.712050][ T38] ? __pfx_kthread+0x10/0x10 [ 3025.712069][ T38] ret_from_fork+0x436/0x7d0 [ 3025.712106][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 3025.712133][ T38] ? __switch_to_asm+0x39/0x70 [ 3025.712150][ T38] ? __switch_to_asm+0x33/0x70 [ 3025.712165][ T38] ? __pfx_kthread+0x10/0x10 [ 3025.712183][ T38] ret_from_fork_asm+0x1a/0x30 [ 3025.712215][ T38] [ 3025.712224][ T38] Sending NMI from CPU 0 to CPUs 1: [ 3025.712249][ C1] NMI backtrace for cpu 1 [ 3025.712265][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3025.712286][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3025.712297][ C1] RIP: 0010:get_page_from_freelist+0x93f/0x2960 [ 3025.712318][ C1] Code: 00 74 08 48 89 df e8 f0 85 0d 00 48 8b 1b e8 78 4d a1 08 41 89 c7 83 f8 08 0f 83 6b 1b 00 00 4e 8d 3c fd 10 2d da 8c 4c 89 f8 <48> c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 [ 3025.712335][ C1] RSP: 0018:ffffc90000a2e248 EFLAGS: 00000297 [ 3025.712351][ C1] RAX: ffffffff8cda2d18 RBX: ffffffff918132c0 RCX: cac44ab34deada00 [ 3025.712366][ C1] RDX: dffffc0000000000 RSI: ffffffff8b1dc0c0 RDI: ffffffff8b1dc080 [ 3025.712381][ C1] RBP: ffff88801baa8000 R08: ffff88813fffc6d7 R09: 1ffff11027fff8da [ 3025.712395][ C1] R10: dffffc0000000000 R11: ffffed1027fff8db R12: ffff88801baa8480 [ 3025.712409][ C1] R13: 0000000000000901 R14: 1ffff11003755090 R15: ffffffff8cda2d18 [ 3025.712422][ C1] FS: 0000000000000000(0000) GS:ffff88812712f000(0000) knlGS:0000000000000000 [ 3025.712438][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3025.712451][ C1] CR2: 00007ffafb4fa610 CR3: 0000000080b66000 CR4: 00000000003526f0 [ 3025.712467][ C1] Call Trace: [ 3025.712474][ C1] [ 3025.712487][ C1] ? __lock_acquire+0xab9/0xd20 [ 3025.712515][ C1] ? do_raw_spin_lock+0x121/0x290 [ 3025.712546][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 3025.712565][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3025.712590][ C1] alloc_pages_mpol+0xd1/0x380 [ 3025.712616][ C1] allocate_slab+0x96/0x3a0 [ 3025.712635][ C1] ___slab_alloc+0xb12/0x1470 [ 3025.712655][ C1] ? dst_alloc+0x105/0x170 [ 3025.712726][ C1] __slab_alloc+0xc6/0x1f0 [ 3025.712743][ C1] ? dst_alloc+0x105/0x170 [ 3025.712764][ C1] ? dst_alloc+0x105/0x170 [ 3025.712784][ C1] kmem_cache_alloc_noprof+0xec/0x6b0 [ 3025.712809][ C1] dst_alloc+0x105/0x170 [ 3025.712832][ C1] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 3025.712933][ C1] ? ip_route_output_key_hash+0xc1/0x280 [ 3025.712957][ C1] ip_route_output_key_hash+0x174/0x280 [ 3025.712980][ C1] ? __lock_acquire+0xab9/0xd20 [ 3025.713003][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 3025.713035][ C1] ip_route_output_flow+0x2a/0x150 [ 3025.713056][ C1] ? ip_route_me_harder+0x6ae/0xf10 [ 3025.713098][ C1] ip_route_me_harder+0x6c4/0xf10 [ 3025.713119][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 3025.713145][ C1] ? rcu_is_watching+0x15/0xb0 [ 3025.713168][ C1] synproxy_send_tcp+0x3a7/0x700 [ 3025.713231][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 3025.713258][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 3025.713278][ C1] ? nft_xfrm_reduce+0x4d8/0x680 [ 3025.713349][ C1] ? synproxy_pernet+0x45/0x270 [ 3025.713375][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 3025.713402][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 3025.713426][ C1] ? nf_ip_checksum+0x13c/0x510 [ 3025.713496][ C1] nft_synproxy_do_eval+0x345/0x570 [ 3025.713522][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 3025.713546][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 3025.713620][ C1] nft_do_chain+0x40c/0x1920 [ 3025.713651][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 3025.713689][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 3025.713710][ C1] nft_do_chain_inet+0x25d/0x340 [ 3025.713786][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 3025.713815][ C1] ? NF_HOOK+0x9a/0x3a0 [ 3025.713858][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 3025.713888][ C1] nf_hook_slow+0xc2/0x220 [ 3025.713910][ C1] NF_HOOK+0x206/0x3a0 [ 3025.713929][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 3025.713949][ C1] ? NF_HOOK+0x9a/0x3a0 [ 3025.713967][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 3025.713984][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 3025.714008][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 3025.714026][ C1] ? skb_dst+0x4f/0xd0 [ 3025.714042][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 3025.714063][ C1] NF_HOOK+0x30c/0x3a0 [ 3025.714082][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 3025.714101][ C1] ? NF_HOOK+0x9a/0x3a0 [ 3025.714118][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 3025.714138][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 3025.714161][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 3025.714179][ C1] __netif_receive_skb+0x143/0x380 [ 3025.714199][ C1] ? process_backlog+0x27b/0x900 [ 3025.714216][ C1] process_backlog+0x31e/0x900 [ 3025.714240][ C1] __napi_poll+0xb3/0x540 [ 3025.714258][ C1] net_rx_action+0x5f7/0xda0 [ 3025.714283][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 3025.714303][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 3025.714327][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 3025.714344][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 3025.714369][ C1] handle_softirqs+0x22f/0x710 [ 3025.714396][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 3025.714423][ C1] __local_bh_enable_ip+0x1a0/0x2e0 [ 3025.714446][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3025.714473][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 3025.714491][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 3025.714506][ C1] rcu_cpu_kthread+0xc3d/0x1b50 [ 3025.714526][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 3025.714549][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 3025.714566][ C1] ? __lock_acquire+0xab9/0xd20 [ 3025.714589][ C1] ? __pfx___schedule+0x10/0x10 [ 3025.714614][ C1] ? schedule+0x91/0x360 [ 3025.714634][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 3025.714657][ C1] smpboot_thread_fn+0x542/0xa60 [ 3025.714680][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 3025.714705][ C1] kthread+0x711/0x8a0 [ 3025.714724][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 3025.714745][ C1] ? __pfx_kthread+0x10/0x10 [ 3025.714760][ C1] ? rt_spin_unlock+0x150/0x200 [ 3025.714778][ C1] ? rt_spin_unlock+0x161/0x200 [ 3025.714793][ C1] ? __pfx_kthread+0x10/0x10 [ 3025.714810][ C1] ret_from_fork+0x436/0x7d0 [ 3025.714831][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 3025.714855][ C1] ? __switch_to_asm+0x39/0x70 [ 3025.714871][ C1] ? __switch_to_asm+0x33/0x70 [ 3025.714891][ C1] ? __pfx_kthread+0x10/0x10 [ 3025.714908][ C1] ret_from_fork_asm+0x1a/0x30 [ 3025.714932][ C1] [ 3025.934196][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 3025.934215][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3025.934237][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3025.934248][ T38] Call Trace: [ 3025.934256][ T38] [ 3025.934266][ T38] dump_stack_lvl+0x99/0x250 [ 3025.934294][ T38] ? __asan_memcpy+0x40/0x70 [ 3025.934316][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3025.934338][ T38] ? __pfx__printk+0x10/0x10 [ 3025.934369][ T38] vpanic+0x237/0x6d0 [ 3025.934384][ T38] ? __pfx_vpanic+0x10/0x10 [ 3025.934402][ T38] ? preempt_schedule_common+0x83/0xd0 [ 3025.934429][ T38] panic+0xb9/0xc0 [ 3025.934444][ T38] ? __pfx_panic+0x10/0x10 [ 3025.934462][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 3025.934487][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 3025.934514][ T38] watchdog+0xf9f/0xfa0 [ 3025.934543][ T38] ? watchdog+0x1e2/0xfa0 [ 3025.934571][ T38] kthread+0x711/0x8a0 [ 3025.934591][ T38] ? __pfx_watchdog+0x10/0x10 [ 3025.934613][ T38] ? __pfx_kthread+0x10/0x10 [ 3025.934627][ T38] ? rt_spin_unlock+0x150/0x200 [ 3025.934647][ T38] ? rt_spin_unlock+0x161/0x200 [ 3025.934662][ T38] ? __pfx_kthread+0x10/0x10 [ 3025.934680][ T38] ret_from_fork+0x436/0x7d0 [ 3025.934703][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 3025.934730][ T38] ? __switch_to_asm+0x39/0x70 [ 3025.934745][ T38] ? __switch_to_asm+0x33/0x70 [ 3025.934760][ T38] ? __pfx_kthread+0x10/0x10 [ 3025.934779][ T38] ret_from_fork_asm+0x1a/0x30 [ 3025.934810][ T38] [ 3025.935076][ T38] Kernel Offset: disabled