last executing test programs: 10m18.618868875s ago: executing program 3 (id=824): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 10m17.968111939s ago: executing program 3 (id=828): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @local}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000580)={r4, 0x1, 0x6, @local}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@acquire={0x328, 0x17, 0x400, 0x70bd26, 0x25dfdbfd, {{@in6=@private0, 0x4d2, 0x6c}, @in=@private=0xa010100, {@in6=@local, @in6=@mcast2, 0x4e23, 0x5, 0x4e23, 0x9, 0x2, 0x0, 0x80, 0x62}, {{@in=@local, @in=@multicast1, 0x4e24, 0x6, 0x4e20, 0x8, 0xa, 0x0, 0x0, 0x62}, {0x10000, 0x9, 0x3, 0xfffffffffffffc01, 0x5, 0x4, 0x100000001, 0x2}, {0x10, 0x2, 0x3429, 0x5}, 0x40, 0x6e6bb4, 0x2, 0x0, 0x0, 0x2}, 0x5a22, 0x6fc7, 0x1, 0x70bd2b}, [@algo_comp={0xa6, 0x3, {{'lzjh\x00'}, 0x2f0, "b4f248c14b3dc84e3e6017bb160a9f509c4c27ca853fd3c8e209f8422593f7ba12593ca4b1547570ffe22c54e840937e3b688d536b54a481343c3eccb78259f2d84f0c8bf7c8b87157f1f0b18a258bacb1380f562f7ba482e5d060eecb30"}}, @policy={0xac, 0x7, {{@in6=@empty, @in6=@loopback, 0x4e22, 0x7, 0x4e22, 0x6, 0x246d867fa7c91c7e, 0x80, 0xa0, 0x2c}, {0x7fffffff, 0xffffffffffffff98, 0xff800, 0x4, 0x120, 0x5, 0x3, 0x3ff}, {0x10001, 0x0, 0xc43b, 0x6}, 0xda, 0x6e6bbf, 0x1, 0x0, 0x2, 0x2}}, @migrate={0x50, 0x11, [{@in=@broadcast, @in6=@local, @in=@empty, @in=@remote, 0x33, 0x2, 0x0, 0x3505, 0xa, 0xa}]}, @sec_ctx={0x5c, 0x8, {0x58, 0x8, 0x0, 0x4, 0x50, "f73324284222f83b5953f07107adfecac30338edd283874eaac24be0e9cf0c8dbc36aa53dea60cb65dd3d36a4821eafdb693e40c2544ae501c7845fa41d6df123fadfba4da7a59d98ffc9aa7bdebb8ed"}}]}, 0x328}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5c}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)='D', 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r9 = socket(0x28, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x6, 0x0, 0x19, @private0, @mcast2={0xff, 0x3}, 0x80, 0xba08, 0x1, 0x7}}) 10m16.60416145s ago: executing program 3 (id=832): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x11, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bac904fc3c65f1a259e8f0dea5"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x68}}, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r4 = getpid() setreuid(0xee00, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x10862000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r4], 0x1}, 0x4f) 10m15.450734421s ago: executing program 3 (id=835): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) chroot(&(0x7f00000007c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket(0x2, 0x80805, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040000000c2000000", @ANYRES32], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000005080)={@initdev, @initdev, 0x0}, &(0x7f00000050c0)=0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r5}, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000005400)=0x0) sendmmsg(r3, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)="a22130fa5c105b02cf34f0fcbbd029f4e47623e60419a404e5f58be98893daf69e4b519393916561e3b25530bae9231495c5f1bc3bdca625990acad18dbfd3e2bc3406b9b2df4a6ab9aefd71cdb9b8b700803e19f49f67158ba0c0625ff40c6380a5c0197b4b497ec7e325921d198b3427f8b1d87a3e8a2e3735247e7e4accb9702eb6d08498e61c413327997b145176bf05e80c4a785413a8ee5e10"}, {&(0x7f0000000440)="00ae7c1107e1d5d7a146736554fa1d25a5b0452deaddf44173d6f18e10f2145c0e027d6719a53a39b1ab8be2e6d144508a2572cb0c176eeb8648d04f04fdb9c094e9c3337d07b0bbdef3b183914e473ac9adef56ecb053ec7d0279e978d4d2a052cc7cfa17268192cf1ff406a6356ce9ea1d53007de2c58ab821d187c990fe896f4aa5320e2144e2c687927b6486c8fea58b75e704bcb993afe3e3103fc9a9ea2c999b473887dba05c394c47c9eacf34c232eb69d3e962316bc72f0469483be7"}, {&(0x7f0000000500)="312e1d6e3aa12cce66c559ae52cd2af5d918e22c3249c11886e70ec31a402ccd29022a4b86159ea67521bfd36307bb1019903cd268f555be2fde6b8c39118a06abc7a013ec76227bfb7707e85c1a5cef7c7801e9c2224bcd07ffc7c6bf4d3b6e7538f51d54290cfd65f272f014d925db9a080700270b1cc01c083ed3f9b153a8ff5304b8208abc323c62e92c5265c98e5288f6faa907bbd7c52b6931c14cf0b764e8d6613fd20159c946d91ea7b79cf3c7c007a0d00a36a95e279f31c7da1cfe63f4cea9e180f6a1b4233211ba0e9d76f3d481a969640355d5de06d8d546"}, {&(0x7f0000000000)="8fb909249c6ee847a211fbb3f213900cee38e9e1d8f6fc646fbad16cd7e363e5c6e34565019fb72bc03a7130cb7805c53647c1731f97b7b8ee5934"}, {&(0x7f00000000c0)="7c896caa488e16fb164940d072d8af051e8965ded170201f"}, {&(0x7f00000001c0)="e193b5"}], 0x0, &(0x7f0000000680)=[{0x0, 0xff, 0x3ff, "443991c91f9f6707287717e3de5b6c134cddc01c08f7c44a688a057060251952fae745ed"}, {0x0, 0x84, 0x5, "3c3eaa8408dbac1ea1c3cb693f445a981c904ab9b63bb449cc59cbc8781a43b653aa2d01e1db96335ecd9cf07b202cbf498fd671921ea242dc17d515c39069bb5b352caa35030d6cfa40517c96188f306befbcec4de80a7b63b930295145a5b1dcf2a5a3d1d0f3fa853d885c1686e6242540a28336a97febe2a587271658611c75b24d806f0ea7336fcab801cdfda29adba3bb892ae4e1c78b6dfd87d22680bcbec4e07a71aa14e67a2a88fbb1131c3eb657da3166ff8045263df771fa0b5612eabb9e714a4c5611407f2eaa6c673263d31656e80ba595b32fa1f20452a8bd78387e262618c3f83c0ea1a954467da9380abfe177d29a35eb24f69329a28b58aee8339227b46fef703bfd95ea33d4533bb8a0456595226be9f10ab920276e22c62455a1d4bf6103555cb8d0ee4474924a9eafc589f05d54971d20efe7be8220f38509dc12df0856975f3140e1122982dbab6f0f5286cf0cea1a224c6d3cb220cd0365a10f954c3b0f338444ec5c8da88ede2f576f322359eaf52e444333dbb25055e78d923a9a92564c21778880df9e3a3a1d69ea7436ceaed340d5eeaa2b2541cba37ed8888ed9b0716ceef3288749b2ce79d27ef1657f9690e38f8b5087f122168c9e2dc4a18f3a4f4bda665a42ae670d9eadb102573a8ffa225824a6d0d6ed343fed3a4cf16b79f994a291bc7e68f7ea684a9e2bddf940fe81c1400cfe6b036cafb0f9f45c06df33b30d8f3febcc2821c1e398463ed4cd41ac1db552acd835cf6dc181275feedb702e2c5d73586bb9ea688f339ede016b5c8430e7d223cffe5eeb8d85a6f95518e285aaf5581ea7394580f121ff26f9cd17abbea0138e0ebf1a55f4182e32edadade58b8bb1974b3d5e4d1e574b49950869ff4cbc06a044fb380b30384bc857b7b7921fbf645f9afcdf2c5920b0dcdc6f6d21373b19e99bf97066c89eee81a2c9ef25bc6b07395c9031878fcbc0930a3d69a1963f39cd3826a5741ca44fe56004d3193fa51237ab1763b90fd4d7438d71dfd672f0bebc5e241a5b1f1cc0a98aa959b3242522486bb291f0c9181e2db9f6e7f61b75b83d3a27bccbe3bb4840c4746a877c7253283c225a46e016f974a12d1d2a24089b95fdb7e3bf332ee49d4f154d6f568a1c850fac4b2556cc27bd131d7c63337e0530d0a338108ea7f7961b0f0c05d976657b5cdabe3f626020dbe57a0f76ae4d81b0cd906cd8a8a591ee9634cbac95f17467cac76060bb893b9a1cdfb76606b3fad45d6f92ff22ddb94e9ff2c03aed913098ebe3abfd9421969f6074d7a779dd4184522005bc3e382907743ca1ae0349659cc5466980b94e6efa6bbceb3c92f81e28075ff6d2962417fca33dc1ad8ef2cde15b1756fce44ec8a8cf5533185d7381c58801fff14b4a6e699ad993575ff2d05cf69841844593528f585de92ea2ce51478936560fc952a6f8dd2b62d5ea44fc01f008a08e49d420c7d65557f913ccfa454b53aff974a4b888aff178f8907f4a4afd0b55907135851f2c4a38a594fc5bf37244ec395fa2bd92360cb21ff5effc6e28bb0b82aeba85f1d61991ce46e575d07ec8896f3956bc27bb192d1d05ee384dd8ee515071eee465bcd8e0e862e89e4d9c9a3421e2e3e929758c0ee4c4790b658e48d82233c1bcbbb9fb77f122bfb5009749ce38833a1bebb843f9829dd1fce9be98a0f6dd3d5f22d58be75f4e17d8745cdf9c5e98e7815ca819a277c74490696565ad142ae16ead050d3d0d6a949311dd942287352f171f5f87e752d7c1d21cc1682d5812fc274bd908fbca9278dc6b5667ff0a233315f4584882a59aa908add8babee6db8ae5b03547cdf91524113528957dbd3398ba81ccaa6e979f2504a65dae0cbfcd4be845f98ec7ebe94f3ba86e186674ad31df0fc985fd5ccab744c6a60335b5517ecf77891e02ce95ad2d3796e486ef3ef7fa496541a00d409a0db2f3d90f6a8632cb5e54d9445225a1843604bcad857e568b347b094836737f6daef9e8bf8aee09a0fc47f2f04162c9aadc08c65866ca2a58d7cbc6015068873b11da56883199a3160066c7b9a7cf1e81c9792a71489c6e2cf657a0387c51c37fa33bbc3f58e8d3819d3b607fa82bc219edd9f865d0f2e4300d9fc5472a9f9b2c7ef58892b7a8cccf7893372e612f1946253cc6246c913b049b877ab7ff14f815a1b2bfe7b858912e80b14484159eb9d1100dce8d550bf38689eef6f55bebe2066d4c7e92610bfb4089d6ffc2cb0a20ea8ca75ca058093cb5831f8ce527ddb9ab3241b09cac08ffc0376db3b49f2a1bfecefdfc13fe08f777ada2ecf4ed1291af1d403673cfc45fbfd19ebc3bb4da3bdf5906a2d2840f3eba7a4fcdd2d5d16feb81415a4d1fba0375b77eb3aedd32ce73e0f2e5211f2dac9cd708fa11e5315f38d297144907214f1b2ff15c944835dd58bada64c5c28855cad21993e4bf96086b5ab8cb7be23781d4e8cf37899a64ef111b3d6fde223bd1fdf72a4a4444223627a735b11b9991ae9fea0917b769ea549bc4c8c4c115f2c4b787bb8cbacb322b0204bedcbd01a9f05eda266ed90516ed6c71814e1e80a0daedd79954bb4c5a2f223775bae2b73679a08b962b045fef7ff4e3016e05c890231aa011be519a8ddc3dacf4d5b4b25530888e8b1a5778a0b925019941babfe01df4197fef594e4833c9d689bbe3ef88eda8acf56fe5091123c6d7b3bdf3a6677ee08b7b0d53dad9dee13c081362a0cff884b40917b8bb240d185999a8cffa509a133e3d7b107894779519e4289b739efd2325f50bc8a6925e96ceb61d0388ff1c9981709269d5e243904b94eacf4bf453b41fab5ee509611a3e70176650f938c2b550f1176efc19d19d0a04fdfacc2bdbcd45e91a8ca70ecc132f6e8e18e5c4e9856ab10b671ff02666751a50f55ab908c41d4e753489eab4f57c2f2f255a70d6e6b57a5eeb2ac99590a72dc1a606532177293819fce60e731cfb2fdb8ad49b67874051dd56a4fa1cfde96b9325ae945f9cadd73f1f81b3d3017973184145ee5acc0f0842196b70b55bd7c181fa12500e9ea65d0405f7081a43d6a51610eee20f7796a2eacad1ec17901256451effa1a808b78b3ed95dfbc46b8999a86c6bdd847ba341ef3f9575cf405a093654d7fa11d180f1f11a3b9492459216f727a36a15aac511e9f8da38417cd6052aedc7e7beed383eab464411c19d96ee666ede8aafce03ec7e33b7794c9b80cb64850bfdae7a3303a0f5a1cb8db290f0261d2779c7b3d63ffbffbd06469fab43b7963935e01876c646539dfd48e140dae0137daf84dbdeb13335ca92560fad47aa125cdc45beb5ed03f84f1adab1ce170ce3e1d85119a2737d5d1f1d351a52ad4a741b833b519157094740f896e1c5ae2ca918724ce6583a910b52adb6d8c056301aeb364c34f27ee2483058dc27dc26e0019aec3ee638fb19505f272a51b99087ce4767829b0dc2a74ab950e1fb92815c0daf22bb481975ddd8663a38705f5e4d5bc19c651306bd9868df4f9ad1da9bc3f534f5ef2a51704a40636e5e69ce4df9e6b09113c29f34f6f30afeff192f93f8d05445c84a694691862023f2fea5aa50073dd70e63d81ba43957c592a535289a5fd6a510ecb7af1419891860a796b88b99bc249ceca8e108a2921c9c1556c9473f9555ce618808301c36e18e94752aa92b07d163a3873c963d96e5d0c6261498a44b1f9195b0cd5b001221b8e5b5cc12d80ebda69602bcff256bec316589e1c530390408a5039dbf2837675f0cfb16a3866220376a35cd6f1bf606a33307ef7b8b8bc11c01ae50690d11c5e884559dcde755bb64671f51f7005ed3432680951b5c69aeefc3edea184b45d64dcb6625a70aa10ebf691f59945e8c393cb2e378a093491b68741c49d703d895ab72935b96d64643939688557542487db2340ee55ee7c8bf08aa658affc7df228f126f75b1f871fc4d7fd5a71fef82e48e7c984d16bce4c252b1a5c75a3aae2705edaf6c7c7259e77790dea9ca4fae1c5ef3be8ee02e04d1cf62fe91dae3dad399731a80b60e275343079f344f752df87e2582dc9888b5b69f6790056f4eb6e28051928b99a3a1f99ac59951c2fccb9fd348d5dce93a51d6707cd6febcbd2bb28bdca94077ff65191d7f6c49f15c2680489fe6dc292036e7fc161b68033aad4c16517ab202d867d080d2eeb249b927ec77b79c6181afbfa6d407da9caf171e94ee96d4cb0a37e0a500811af6315944dbb7137993cfbf7deef517a3b165e70c4212fc0814938bc995505bf3fe91075bb5bc8799745c30c38429cb91a1a6d56973ce6bc596b3a54f4b5b156c0cd4b917c01d2193cb82611b2d4466f4b37f852abb55eedae5a8d75949d6596f3e2f3a8949f9df897361b1684912c80029ea2dbd0c862d41b77490bf17936f97f585e5e2daedc80613500a54ef9eac4d31bb6f9820f723cfd3e4d65fc41a7883343ec7134988b6792dea6f49b1e65174ad6a4c152c4669016075a65eeec3195edfa04edac8c7e2a5f0800c54347aa6889d65273eb515beca8f0731f29a8b8352b2a5991f7e133c6512564ef8f86630a04ab25cdae0d12d84ae3a8f6c663dd7c4dac11b034ff9777799fb433ce84a041eda1f69c1a3e7b3291c1a31e0b5582be413cd5bedaf7619ec84a01e4de697feac5d0ba3cd443a1125665bb1ec28eb481d88a205a9ad9a4f00e1f31d543f0e480085581a8f658b84473bd6246fda9664c089120cbf666d39667b79f1f3c2bef2a3464108d035bc8c3b1f49a7f4fbdf9a1e766c33ab6f4194129f9f3d4fc7c1f9f996bc640771ec5c3db80bc207a26e73546c213e53269c8f70e58fc899b275c040de6fedee19363822f69f4457c041c5fb3efc1868731f05f7e18f79772e50c1ab39c37b22733be2635bfea75f983b19dad712931fbcda979b6317bde792011b88c2005c7ca0d0a5c7feb6f74792beff8263477efcad28a7096ee88c66dde214d68097edcd8f2ca2b8ee98615c5968b74d0f3645ea0943ce8f533d5019dccb7393e74d7ba70300f0ccee5c07efcdb986b1f616339044fcd673a6151b58c02fc6e5cca0c09997446e1b0a18d3c255c0293e32de9cf64778041816fb531265f13a1625701e4fd163764df9074387431db2f0344e9dbe8cbd5501984f0c2c1ec7703cc44cd6a77adb072bc545ef89aadd2e05ce4fd42525937f28c01926ef4c096327d4f14bfaa915777519bde8126f0ce4fe7018f937e7f9c0ab84a7078d698942eee66bba25eea061bd6c714f910b9de7b6301ea5550f3b42f5b4665397fd45894b9646abb316e0a96a7f397781020a8450c78914a604564ad2b26e00a82ee432adecaf5cab43172a077e14477a29f741f376cf71b59572d19338fbed95d6fff054b33675fbffc80d5d97842feaa4601e2639816cf9ba406603223c550055fe59d16452f01361718084ad3682819598f3a0a6e8a30f930fbc08164e54bc0d59df035d9c9f40ddfaa2213248db086a90d54de4805ecec5eb4ffaed1854291f42c90ffcd81be2f89ee2bc5c4a3b341867e4f9dec9f58342c9dce81fe3992f98f2ddb35ee9df3ab0a9dbbbfee5890086b1c9ec39e0b1b268e27bf2ee0bb0abd062af2b3f78e92ef47434dff52c9c036c04a7b95a1a17296683b3005caac1175205977e73942617416c79fa00766df5057199f56cd599d250a5518efa47d329f7c24a63bfb5782edc3d794072f6c5c0eaf3e071aa0518d0cb480f0c97f88c75caeba27ab7f2f2e4f177d52d91e05b86d1f0dac767465632d59763717555"}]}}, {{&(0x7f0000001700)=@pppoe={0x18, 0x0, {0x4, @broadcast, 'pimreg1\x00'}}, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001780)="e8be5580bc18e34f9e3c097aee6c399c6064a96e733893b5333b36c7aaa178aaad24c4a6ee3aa386a984ac8af65f8361b8d4de24bd9a5f2762cfb5b73e57f50721e2a5f4bf2530685fdece1189d177a2fc64de4cb1999e638dc8b0e4e700f3a5eef0c1310f91fadf26b3b5c1f1b652f7eef2c1c8ee5d582f8215de3075f93192f4c88353"}, {&(0x7f0000001840)="3675eb4a75cc2e0258bacadc416b0530c191056daf78454c346cf4810a66cd48ba4baac1953a142766bafe69996de7b7cf43e7c71a6a4be3594335dcc0ba7cb8ed5f279ce8fee879842f492de1c7dd642a07712c057c7ee6899713b2a1d2995c480220336c8994e57759cb5b3c710d12fa6d127e02e2aaecd76ecc7110b06a3b3b02621432bbd3bac3b2ccf1026d6c758e92b66711f903b4b3c657a59de543a9494ba50dc900a68e0e81ad15195a25af9e86719209217a8e6d0618f2045d3f0659e2a235b9d97bacf55c203c7658121544cad15f52bfc053f83795577f"}, {&(0x7f0000000240)="aef69c84b9fb3555afb247cfc58eab313bbd2156d7f43a925b627fc80eac6ebb26f46d65d81d8d4e5bb137929250bc94bf2f14ce06d1166a377021afd6"}, {&(0x7f0000001940)="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"}, {&(0x7f0000001a40)="b78025f49efd2657d849b9669b4f6d606fbe98887db53fc957c101cd6c8e90e1c6632ed43621b77733e6168b1aad33b5b32b7d1b7f1555d8b43b08f156adf8c980de6adbd22c4828abdf833e47ce755deb"}, {&(0x7f0000001ac0)="93ff399d72af5bacf15da712fe5e210b1e4b03d4429566bcd8e664d1386015ebcc112dcf58df83c14caaf2d05088524290b528da3d1e36c8c4db87743f119d8bb886e042f28e7a263d3153ccbab11f38af6f2f03cf40575ae03aaef9ea939be9f5f21fb7ad6c4d551ccbd6b13d672e3f753775666e2eb7b361a5b40e6404caf46ae8e4455173ac230b027fe90e61d09a15f7f664d5e98261b0ea9048e4afd0b84d5172cdc7c5e5a263224600c5af6478c12c63fe1fdc09f0907ace8464cdc4efc5fe50e5182b42f1fcf2cf60faac6c8e25016e3bfeac71b3153c531f8df79febf58df8abb1c542790ae2bcdf236f517189e5ed73650296ba28e8404886149e99efa0321a3f1517f460f7a49492e622a7e0755508f9522b270bc3911061abe18d00a3c897f3dfbd52289f3c371fd1ca4c102fcc3745546eae6631b1f304b56f3416ec310605c19c27fcb6c1c455339f2e16dcb34369328c56c3e96169347924a9a6499d9d03d11bd425448c563f9278e5fc59fe1ce12c821c87329fa61620d1477e528c1a1808a964590e086080e94a24d02f5d8d37e19d2bd40423d4c044f00c5d90335144d6fe62d338c611e9609244d62254f244ae153f6964f572f301c287bb6cc7d7f22071bda231725dc0c68146c3114d0fde75df9ed3ffbd86e7491c56bb8930c8afdeb0462a04fa5351bfd35e54a1d92e224e1072baae6865eab98d481bae891d86fa72d412543af7c9ac083d9715f80a63f87cb243cd5713532b6e9f5c203fadcafa2098b69ca55774907f18aeb71afc7e0a6bd8005b55f0629ced4a62660780724e46c45c5ffb31d16e9041605e15dce68800e3f57113ad31f8b9332e507a26f2c4df7eb36bfb5fc7568542f5aa1edf32698ef3ba8916c4b7557d44f72a2857fb65edcec67903f02f696362fca72dc9394ed06e40e18248711d7402aab1724f1cb107da5c27d1dd85e07c9f7b8d9302929c30de9d8132b1a4844a8736f5da025e9103320a401533d9224138be30d23506aad3d263563fd7618abaeb2fa8579f838b98eaa152e8cbe8b8e4324eb1ed05b2313f6130ba4dde03227820b0c76fa0f408f0739501ae2e154f324f747fada9f990eb034ee0d99fc48e9cce3be7fb1036a5e978a4122e51bfbfb994a0ca5b3e5a3bae35d409bb324f137c75a6a663ccc1c18476bbbd3b785fb40e772f50d96d8309086fad9ca782466f0780e1927954f2fd7d60db9906a69354a099a8845874781eeceb41457c5d0ba9e385e6bd4211bff0bcb693f6c0369681a18e74c3616eac6a145300786c08a69e9d794f2ead328ad576cd2401a5d77c114c8adf5df4db82a808cbc4bd900557a98a23e8182a97d4ad70552329d771441d6a46e03511bb2ee1ad8a65aae62c54ab69bf8b4a4aeb3daf0f2ce06cb7c0c1acaf8b1b8c358e8020b66defc426a90fd8c541c2810332dbb093129af7cc363f95664e4204bab34e09475ad78a73a12fd8d6edbb3c57a0c96a4d8d35c13d996546d45fdf89f6da851644bd786199169bdc16751dd1930b1d0a81d939cf5d0df22272d1177fd5861ad1343f2424222632edfc2a26b96d6068f5dd1ac3e893702e4fac9e96da9ddd4d6fafc02e32ac59d102f3fcb9e831226e98b7a287e69cf0ed8bc2913d00b9c11c2bc9bd12e9e722d384cc04f47b44d4bcf22f70b3fca93e7636e0fdd8640b93bb8bb96b3f37aed7d035447adb5a84e7a06126bc37bf1d585cdcec7fce07f85d0062a12bde39ed8ec6c1616170098c0d211bb07404689b1595b70d6666b81484390e1d4f0d63b428dd36af5a3c8ddb514088fb1395c0a2ab8a8c7740ce568495ce0c8f3193cca870bb891c9d441c071845523b529aedbe4dc37010951d8e715d4a9c3db1e474999f2420310307362879651e00e60f612c82cf7f0f65270bd6463d5c6bb29486ad602f6a4222998620c98e0b45c940d3523875643c71aad36267f053f92cfb9c8758ffca1de88691ead38337e753d35c846c198b9694c715268b5e1dcd8bac4319ec046a006838a1cd7b83a0a1847a4d6246d6e1fbfc54cee9c7ddc561dd0c5a7ef0ad7eb7c29051b9fe9038eb940546de422b71cfedfe33cefc068d4d6701b31c29023f62d23d1019b74ebd1934229f708410684fd525d2773978356fb1ec707141b433305c9414eb9f59afdc4150b33b303a29c18fb730685ef94954bfd125c6f95514af6059f9ed59433e61b25a6b3eec8d26cffdd256d835faf2dda0fd801912f82d309bdf6879af0c59c81e1e9b355a4cd3ab4d8f3dc5a89a1c8bf0ab360b3c5a94c0d2e72b3db2f7d16f05a960bdedf696b98527533a6fd3d6651c54b37482104b51f8ad01742bd23ee12eee3836ec9fd32afc727d6b6feac8f460b46d731f493001b4655b204395e0f6075a09500b0e763b18e80d27e84db7dfc6a99d739434d30c21b5c12e51bdbbdf25c5a0cbac3f5a1d4d9c2d2f066d3ff919c6b2a0af451f6d88d52f563d94bd30d44e9ea30ab4c4d1a0d3f6d235e2177a2b1e09c14309dc6c435169a6342ba7a522ad96afe778943108c1a0a7a62a131b1c79ff8b0c657ea49ce93c1809c020058b7fef7e23d542937d675157eebce46940ec48fa04aeef8740075f64f951aa67e1099896afc906939754f4edb3be2aa8d681d2c41290fb2de7da6b8e0531952f20b14de295c8d2d48f286bc10bbf860203d152d079761333fea22e6c7fc20f28ff0a120038f320e06f871f5fbfc70ff0c5a387d85b0dd0d631339af6d18eebae04c1e1ef429e599528bf3ba15ea001928a8e086a80765198d49f09d7b5f392811f99fbd5e9f97144b6f517291fa5b6e7dbc24df9cb775d43a3df8601b23d5593cd764b1fba3bdcb3359efbbbb45a6248dc18678aa874b42d0941a17255d6849cf5798050982504d9c0123b3084f98d84b27d2b865d662f57c15a7a9e37df16a720635842b77d346ba2cfb8381e960d87063e9c1880633814d08d8009a5abd5198cdf5ccc0a6dfec5ac127f98dc2fc15b53527bd94be3fa6328ab3f9346639b6cf989bc03fe3c528be51743c9884e85550046784638a977322e8916c5044a20395c6f0f3f5e9f461106547a6466729fb025802325f96524bcc0d800cf6c19902e0e61d8e2242fb81e666ff94391ed19db593acd1e4ad65f2b7c53fcee992f10063bea4cf560162fd7c027d978aa8b58afd5d30e7ee5354b6af1b86a43fb5e86e4d514f93a989ea15ab5204bf6ec7a32b6473be96a68ea3c901891bf3f5194506aa3e66873991eb0cd16176889bf0cb54a4592ec14846b31268e82408ced3fd9b2495249d8c6b7837df3ef89800c77d82f6ed2030787d6ebbd41d225f5cddbc6e1d6a4e2a6cc4534d8e8c760b6ecbc25003795a19fd5e7da421716b9b3c483d4e409e9026252df140324c853e6bd597fb7e6f915c8697ce0ee7422304d89a85410d4efc59b1c7a3df59a7fe00481e9b46125a46914ed4e27871866b874b511d981babe17d3effff9bb10b4c5b48d96c266afe125eb73205d9ff8d1fdfe74261d3a8da61c62e71cabef54e81508ad1f3213d88ebbc56c734a2d79ee94583bbab458b9e8d446710616bbf110182a0b0b4f4c885dec54476975d38e50171c84d7293677292a2b09c280655054321ddf5227daf8ab50e8e9eab7846c1fee1e7c528ed5e44168d60ef6afe81ca6ac6031a427b475964b145024fb265c79f13cbe610aa6a6b9f1bd43648a205c3d8dda4f3024a3f93e2f8a1b81733e19893ab58c70581a7ab7e53ac5dac09b5452463dac5207876234705fc88237d65d9e678bc5d3019f1a3e3bcc469ee883be2c5a4ee396305b4e700845fe558f0e831b8885af5702404182717481eb14d49a97ff95a3776d2dd4359862b7e962216750480c182903bcf06ce42428c5ac42b73c9b864df97c1e8005ed540c5f4fd9786aad1952ce598e82e7cd1965b3845082f452fbcadb6adad8dd0ecdac96c3d693f2e084439b395eae603f1183ff87dc428793a80a9eb382704448750268edfcb94c43cc4def5863c445a1b0ff18c277ac459899aad50163a9f2bf4d0b5960a1a087eaa8bfb888fdc86ed1e4b3f17eb146a770ddb6f11752e18f245aa87ff5a2b11b7cde6fa09ac78962b1c8a9cb4e89558212f9c242bb9dad66cc6aa5f6014f1e94df347c850451d9ab0d37164bff2ac6e71f73029d036f721e46c3a2315b2955e322282aaa7806003117d48b332d77d6e3d17442d55839d5e321475c5c2d2bea534ac318785b7616d698ea42cbec86eaba36066697e0e9b505354da108b32065e789242ea109500e45a10ace4a54e959596e2f0207307e33ecfcba688c3a9db73a68080ca45d2498f0b0fdcda551d38b59a66d1b0602e93fd44cb332e09f7fad408507cf28d840298da72f91ae5841e5ce54f1eb7f0330f17f0a0e2449463c66419dd3535f2dbb4c7d393154211551b2b8b1f5b40e05115ab4c2184d28c40c015ec3f4b5df278f7c0cbb2d1c28e445f7e4385c30967a9373da4b9ab36050baa844a18f4c50179fdf153dda6055de1ef6caf511d8a4397ae825c05d5b12725ba4b823ded50d43aa2864dc89282d51b766e3be71584e4e72442fbc3255fe72470110985ee59bf0d2f1bb1de7211df7817e3191f71520ffbdab8735606c79a24a255145fbd96737fb27f1d27beb898c714dbf366dbb5efc58c1168b9f5f5d58d705e2df1e8605487100a4607ea67c61d534b6d00c7f79d1315a305267e630c7b924d465be961ec2f35624f87478de2357bb49c6d3014b46594516e2b38ee188d1ab92e7a7bf440d8618be996fc1a99ac830b93c68aebe3906985b4be5c717f8a843923df590ee6cb4729ac64518d40407939406ce93686298d4c481be960a259e913ab0854c89f93fd8158a4bb375d8fd0040dd4c644eb4c0929e624834c0f77fa6e072b4c961a102e8b909734fdac3b9021496dacfed5f25394dbf84091dd003d3e3c22d11f316d8d5f6f765fea487c7ca140a5ba0a0389d39be25c2dd236c15165d660d7c1a72d969b8be4cac6ba3683144c54899ddd6a91a6db474ac47b3e1556fe860173465fc8ad9ea17d38dd52fbad65621f3df3f1d5522ebbcdad4a74c287f79e884dbefe808f21b9433d3b7b1735adacb56770777f88b72997d2cff883f446ef4740a9c559fe621b1fee3cbe22a1ac2eaaff0c34072147901fcfc46510399c2480d0ce3d2f74958198a19eb8401ea0058fb92d7ac88be4df826b753b247199cd6f66ba88b267cf4136def4b0a6ce62c9c044fb9ebbfe323af95fab13e3e9e1431ab9209013ecbd0b76a4912a93857d527c3cf72fbb7aad2569c14e6c417c6094bb9f77ddc31f57bdcadee62c7e80b3ff3c48c8789b22090abc64f5e300c6ca356abb74018b276988518bc4263df0c6e3eb1b6945afe29161a5f1fc7472154229b55dd87ff0ef6f6dca1feff19c514e140ae66a6aa2c460c401545d4d63f53343cbce3b130d9720a0ddad156257db9768f0984989b6f3e53880ed61ddc03b956b4328d732f69ca075e23099e4c4875b2295371635e6c2a86800f57bad0c4093949eff762c4e5d3921f7d5ed17b07d3a542c2de3d3d0349b13f4952d20f5867a99777bd852dd08033c6d7490f0ffc0ded9d223dc5eea2082f82f4f6c0f79d548eece112d6d2a95953e4582fc3e2f77a06c3efe599a15c89b097ce63f2563c754d66152f83e4967df0ea2aa11b7a591e949cb41c8f52a0b2b311e6d28cf40298918b7cbecc609e3c6b43209f4c5f70e9b807a56078d2b615bfcd460f3ce843"}, {&(0x7f0000002ac0)="9f53b97c14089d65f422d8c95cb72ef289b502c14ccd7b00fa7201d2fc8742f334c53e7ba023ac0ae49d0d9fea4aaed4ddf580eaeefe34e7"}], 0x0, &(0x7f0000006980)=[{0x0, 0x111, 0x8, "2e8a00f4b23f4e21c901ef9109378d9c1d3fb3a5d6ebf4bc30d6ca5eb96eed3757425a0de48674a71b2b2c282f15b7e7d0906cf425aafafa81bc291db2c646301edee5120003466a3233ff0f7e357eb9431ab0"}, {0x0, 0x29, 0x6, "9364d5c3b92e66bfd8ea125f3e3ddca55348e6235b50e19e81c67bb9c314cfd2b790ebb4a33bb0bae7f4413dce48f9ecdc0ca3e37616a17e546294f5f48b085da7b6ce95c6210032ddf8db2e3596db36a98b43c1ec013dd2dd8afd851a639aae61b79e86cc2a1759b9743f19798307124f7027e65f3a79dbe7f08f6602e8e9069133b6c7a928ee5c39e9de3c7a067fbc4ef09c31ce735a43cd190b8ea15a8c1e0d336187844da473aac678f12279aa3ed65c2b6949ea20bbfa60a3446556cd"}, {0x0, 0x112, 0xfffffff8, "089e71853004649a34439758a0e2bbc6c8dc57e710d95fee29f1de6a3e4a4b28b47110c5adb64d368483a7edbb30dd07ffc0e6658d82ae9e49c0a13db9912319c4069456d30b1dff8f5c44c885208f9cf44ba82e353e6a381c7943d9aeb319899a20fb85f20d0fbada9cf4ec8d82ca405bead445067e1aad8dd6aa4e5fb18e5070819317c9cd4b4abefd18ba17c02a7a4c691a16a8b10853e597a6443000b4d50504480a493450bd404e1e9b8d09aff5"}, {0x0, 0x11, 0x80000001, "db9456400e2403b704795832e66ad990fb7a503c8270c8f7c44c1ced2d0875ef12a6a23e03c39646ba05f1c4482155cb5ce05bed183929c2cc63bbea64c9cf3d0cf8845617d236ee0bcfdb5513fe93f453b478ec384a91a54a6e8005bee14e7cf5ad81a61076b135dd91c44eed5ed90fb124b6ce0c7c65ba410bb8a1650f849b9ffa7ffed000b0786ec4"}, {0x0, 0x10b, 0x1, "f21042f95556d1b651ad0b9536b81f78d05d4af55109ace637fe59ad140b574a1938b9533fd9b88107ed91c834728eeae3c43bfdd4f0a7879d2431ffe2ba72e33bd65c31210e782c7e7af0ab3cd98aa7f7bcfcfaef7640e787e3b2c72f8fc81817dc00c43c72e48ace5674fef032b8d5787b90989bc9652f72082ff7ea3603b00b14ac2f26c7ac8cdac2d8722b6bb706a32d6dd860af1909b3c2f031a0c41e2730f51bbc8f4b154b6d2415559b0692bd31d41cd4e3d1c4034819f3e914bc1aba1ff59c03921dbd2782518d9e5728b351"}, {0x0, 0x117, 0x6, "c3c78c34b1d13d53eac426d671ab7d825bea2fc02ef60ff91767e30baef9a456995a224236577d92770a93deb76b26ed03558e7ebb1f01f674dc2d98ee29563369d15d130f0689aabd391f43e81724814a8162851b1df8cf86efd8c380a53d37ca99c8f559f4776672d9479591e5402e484bc3e94ec9b747f35cc07d5241b19e098d9f8881b9dc3526341668ba19963afd3c62508b4e0a25ecbb9ed866d0175120b55adb07fedbf7963d257173b38f239680676cc91a79d95ff7ee24df67a49b"}, {0x0, 0x10e, 0x2, "bdf7565d3ab476c636a40c28706445d9fddd69b1d876d40b3f28862071bdcc01c2fba24ededd6f34f839c0d1bf994dcfeafdf64d22fca2c920c7f1aa155d7e868c25ac7c664e6202cb50caf88b4344af0d482c3c085ede490369e9f0c273b402ccaddaec069ddaf072f57824624d6dcc1d9272acbfdb65ef8ed91061696f777a9b0ee66a1f04b50fe2d4c444e31a6f0c267d1df7c94838198ddeebd65f03872754e8471b4437b7c869c8a6d2633b75bd96d109d9f8e6b428955eb940d9f94048b2"}, {0x0, 0x112, 0x7}, {0x0, 0x119, 0xfffffffd, "8bef47a8d5ee460517c2b348d66fac0c5e982c04a2774e59b53d8cbc66bc59e8bd2e3904f8c0056878fafeb119091266f0532bdfe5ca268edb2e2ad6b0508898802d8de1fe0b796f16c7c942a0599dca232d69cdc554823d320eb7d9329a205a0d7a30dad90c7ac47684dfd1f01f22373300dfe1f5652f1e1a43fa9b771b0d80837c1ded0cfbbb034aad841d6e8abe428b3280bc3aded5d1e94177906258517cb5ec6ae73fdafb3e42da2708ddd2be5cbce8d2bbbd4ffab0fb4afb"}, {0x0, 0xff, 0x2, "bcf98abd95247a0af6e9a5cb7c0c440bc380bd84e33e1ef466c78d4bb140b059df857bb03cdb0eb45f3ab2257b1337582c4fc1eb4c6afc3f24b52443a5884269459a451b05f7f54926ceb2cc978878f3cca62e039e71c4e1625ab75019ec3a12a28d8e080cdf010eae17712493f4b8f4a8713614c64bb0d0f8dc905c6872ce4374ccacfab2c7204ac802f8e66bf3be70d506a33c2401532e2886b4ee7f326663074e27c70364064216c27d7b379a4ba3096e69bf6ad7ee5ed4c447b00507b8312cc3b700a896c9a892c3c9744bfba1e82a29854fdcb7525a45edfadc3d11f7f62ae453"}, {0x0, 0x1, 0x2, "1258e1dbf9588335416bc36b49ce0842a18d0eae929e99ca072a"}, {0x0, 0x14, 0xe, "44e495f125c3161af7690f476f9afda8fac6ac0adecf0a1c33bacd81bcb4ac501c4bac56305641079afb71a3ad3162fc53a9263a2c81cd7ae592e8d5b8ca19774abf42c816cab2fe2f194c1180a5ca4887502e93dbe4b93346c47250e9cb6f8f7afdd4489b95530fdd28eaf8a7cd7617d7fee10e838de72d13c8acb6db1d65f06cd7c3db34e44c1b83d5deb260036553bfcbc39cff80abb53c930ba871e664bd1cf0f8713ab59adbe5ec8257bb9ee52a7e461a302b44f6012cf9ad629a3f4d191e58acf80f1127450ad64c786717613f33bc31b790349ee8f4eb645ba06fdd6206318be5a37ccee72396f33dccace2"}, {0x0, 0x10a, 0x5, "529d49a2fbfae6fe7965bf1da8f788e7b9bd67c3df8fd280a73ce76ddbb0810136430b85b17525b0d8996a679bb8dcd7f10ac731b8fea7e302527e99b095cc8f7db86a2e6ac687765d9f0fdff8fddabff05669923dad58963f250956627cf3ae88f9d28c31e2a6573baf"}, {0x0, 0x1, 0x82, "d98bb9218a6cde3adc51466d843dc3d36e0d2125b0c15025"}, {0x0, 0x111, 0x8, "b44e3a1e9285fd395596786b41680f4454ce79db0d2413a06d313b7dde86adaf6dece8d502971d0caa29614f04b551ac4bc90f1c2911afe9bf9dcfb305d6634f6d4d8032acfe9159ab6edd9aa02e1ac64576d2f4340b6c383397f4d3c560dab4516506502c5382d6a054c3b6f4cc55785e0d11098eb32327ae537dc6cff1d8b23959be53b9f9e5087fdde3a1ba4b39196917dc630a25f5c3d9e3123d6308e6b6917344e2386fdd596ae69f9d66cb8206d19bc0a62d892cdc6e1d1c69b8904bd1637738bcd4e7237cb951e24cb8ed2df23c2b304bcd6c7d"}, {0x0, 0x1, 0x1f, "1d92873720ad75be253425380f51e1aee6d5d7c3ea1a84b7433b4a2e698afab6a0c02617335b51318fcb0a038edc4e1cfe550696f61651e845832d52a2a7f9100cb19795836154bfc7575a64df8125484d1527ad4234846a55"}, {0x0, 0x3a, 0xba3c, "aa103fc3b26b54aad06ac6d0273028b517f919142e89203d9e0682da910912d275e0c0a8cc3f3f66ba291df6a449d74005c62f67c322ac7e55daf7d3be783e3c4e85b550215bb517061c0bf60ae651ce65e03ff0decc564bb81c8a6dd59ace6d98a90de9ae3e3eb3ac406bede81d59e75f075701f05e236c4a485fe7851760007e5a96962e0c67bf65b3774a4bc9365664cb6f"}]}}, {{&(0x7f0000002b80)=@hci={0x1f, 0x2, 0x3}, 0x0, &(0x7f0000003840)=[{&(0x7f0000003140)="c4782b94575a6dbda91a5528e9c5ebc216f56b2dcdf811d7c023793ada4f05f1d60a800567505de19447292b493d7d8aab4f2638fddfdd41ed7ba655ffbd24047129824be16738074d75c53ef8fdfe9c015567ca272a14560ed45a6bfce9cbe56cc874969689d110fa6fcd35d8cd94d88336df36a62f5f3e578003c6e978fbeda6ffd3fa229399"}, {&(0x7f0000003200)="795095271ac5de4798d490b02306fa86efad8cb09819ff5100e9dbb9f4fd4c79bd18412b22c302cf94b128638f2ae3cb424494a50197cedf96e397299b7a243368d9bcd4fad0766b6b3203e2eb72de92d90ba0202365da45099c4d3c30c6fc3c43a7507dba374ebb89d7588e915355c589fcd4604abb26db737363714a9763d792740db351ef15fd98a58742e24a82de3c5135f03c00bfb2393f200ce76289a3064ce533cbfd58a902fbea21e6b1ad00000000"}, {&(0x7f00000032c0)="b0df668ff21775183e29def6e14ec849f02cc85ab2b17f8a2703cfa045f6d8f5333e7ad83edaba38ed8e3cc7341763a44564b79975fd2d6dfc4d2d63bba77cea0e44f3d68c036913b51db7a7d311e8603380fcb064d46c103528f2a1d6b698d791e00a9376de8f01762f7f286d5e6f3167ce3bfde029dbf19f169a840aeb408041895bba5da5c9de8de696920f8d3045dc7dedde0fd431f9586d37d2c3ad976e847937180df0e8894cce05cf84c48271d3a763"}, {&(0x7f0000003380)="fb0b2becca1db8b1e62aafc9717cc80cdb8d8d687165179aa9a46ce186c8d91ea4bbac7cfe29823a3696fc340839363142cf5c50acabf0554177c7f3860e0998ab1ff448a1451cca7d008c2ee65e31fc98bf2f2b67a5b2ff1a41de291e2adee42f65014f70989085d58cc21cc11fb5206f29a57d2bb96630b9efeb9e6c47d14fb27a5b67c9161739083aafc66a1fead2dfc2b4267977a038322839357df1b66a45578f5b72b664f7165a89b5cbde189ddbba85fb67eb9ed4539a2df9ab32be8b359ed6d09a7b113844dcfadb64d286b239d6606d4b73529ec3c4b620bf01e9bce4215e90ac7f0a0a7ad744af781071a8354facd2bdccf9dd73"}, {&(0x7f0000003480)="4ec7c930f6e30f3b7b927f1cdd82c3d3913e5404f64884e9050b48da"}, {&(0x7f00000034c0)="447a9adf5736be59cfac060a1932778402c41ef17499c9ef1556bbfd7d0aad0167670c1b22a32062365b4ccb14ba1cbdd090d34a3a5ea75b38f0f2c2d602ccd6fa0f8719bbd3f04dc07fbc6a3cfceea229e54505515892d64ce7d47023fae33f130bd61c4dc5f76b88c7ad97a281eee0279e2bfa0b8fd28643c952ba1d85ed6d7bc4c2c8eccdcae39ad7267abaebe308a0c46f082c8283806d5253052c40078651107d90982803bd559bace177ca86d9a7d2ea0c78c3232c1298ce9275dd8a41b275dad0b41f36248ed0061acf89d209a9f74b0553d0993e15388091f36bae574160dde4deb96b789f73948392b50456c0b0c4a658316c128e"}, {&(0x7f0000002ec0)="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"}, {&(0x7f00000036c0)="64231f787bbf983e66df8a1269d72de2fe02f26f4fdcf6083dac0a762135cb4921b6d25724a1075603aa92c0aeba4d11d73257e79524ca9455516f6cc60e13a3bd6e81517c28721ac4f4f3e1f7db0ba2ab750049a4f2e7bb2c6af984fceed14a61555fbfa4c38fca7398319e831893fbf50fe15630cab3a23005c530b1888b656a9347e332fd73fc19669073e61854bb5e7f546965ab7f8059a364ffcdbdf5d719723a80e2224c86bd0c1a4abc1f04f40c2bdaf3b09251f9bc7507aac622839df3f16cd0f3abcb68d0bac57706d4bef817301e8e1463f72c564796a5a45f8948ddc371e9afca927a625349e3cc8e881d08146e99"}, {&(0x7f00000037c0)="5a6e33c4802a2a30ff63cbf5a3da38ce2acd4805d1cab8b0d44675a1b011a3c25694028b6c8a335d068ad0ecffe713ff231ad57a9debfebf0dfb9690a20b44d72be4d4b1ac90378d57bbcf7d5c3a65be08aa8dd1015f31bd6be51d4c662f3594eab937897674ade062625c3aa7a2d65ef94a9053ea744b3423"}], 0x0, &(0x7f0000003900)=[{0xf, 0x104, 0x1, "dfcf0650f3e821ff668f589191c1596c109680d64a673a069ff0aa22017ff808d2a77cf4def3516e"}, {0x0, 0x10a, 0x9, "b9f8841107c728ade0ac13b5bef4bed1993b83036ee8f9f3aab9e20c5dbda68a53c6e4afd07a00b0da3d4524d31ec1cad641647226ed32863f448a00987ebea76caf136c368fd94eaea2ea39661beaa0a470e10a2cfaf7766fa5aebdea1526f43c262e6e49dc6cbca11bd42bdeac83bbd41bb83b3fb0d271423ea2046807f2e9834c7a7426bfdb328919448483389b8b0fb8ccf63d52811733c9ea44f0f988fa94dd577d33a7e4c4b3ba762b49aaad26218e0596c725c874fac9444af24da190de6555cb898398de9ba55406741f3f9455da1b89ec68f7f05d997ba256e376f0a738a7db7d45cafae4aa01fe87677fb354ef589be46379bab49e15e277d4147452f2f528974355ccc7d9e2e48064209dac0e5844b5cb57f22179ddb138d787b9c7a91dd933389c9b23b07e13bee6480cf5e70dc7e1ceedfcca40ceb80beb737c285596ced7d16db2dfe3a88acd557396c0dee9944f59db600bbabd35f68520dfadcf4bd4bbbe4bf133e5ac58830d99c3e72d92fe61f5a7d58c5ce14b32b36a7cd2043a4750a3a7ffc78ad548a8c7913ac747be6423f0515595dd62275111c1b89424276642b7ccdb86678e6b6f1b2a885e60d3fa586c760e92fbbf47f5015a816d9630b5a76ae81e08fd55b1d425aba81baf5155b39c82bcf97020f1f273de4d90eb6bbe95304023d5324a28328d70cdac77b60415e203d3a5727c025db824eb98713bbecb19f76374ec278c5625b477d7af2c9cca6ea24f16582ccc58cc9843e7dfd61f34502645db032106da17a78d0abb913ed99ac7f52db571d87fce7dc9e33f4f48ce81be971ecbc0c7c1dd92ef710648e73ce86ddc9b3e661ed921a02c8f45f0f15c7706bc0c1e6f7b29b457b91a30d3babdb4b2f6aa16f20a162a98ec8accdd637962a68212d180b469f37d41bd377761358229e643528a6dc6676ffee9dab3f4f3fd3f00f87f17c9433cb26529752f53603a2d3c8134257881950f66ae8cce1dd7c528172a66279ef478bd2e9d25d26f657adc2a5dab01bdb9c70f2ff4962378148ecf0cd53df5a42a8dffee065de2a811174873edbf763b22bb8805ab03f5e9acfaa7b78d1b9dc5ad0ade46799d0802e4938ef22db9361adaf8b593dc2d7ab51f634d3df56b5ea0ec9860ed1e0269c2882c4083df57a577e950084ec5b2960e84a395ac9f2eb3f83fff81d1b83bdb33ab473c723634ad389bd652e5e1672fe02b92b435b57d23e782f9bf4d3be789a6bdb36a2835ead0a852b16d1e63380907f35950d5a62929b0f15e368dd49894bf31675e70c2e18a8ba0dc70a59654064f33a23508c9ecdc58c33afd30dcd36f024ecf5d4bbab5b50d4f641b5f35754aea12ac2b61212d8da8861a59f794418b30137e9ab5730bb159515ff59033d76c22120c79a3b532f3a9854b01d676b3fa466966e464e9386546b5eb4693132dc3245fddf3cedb7b2be5564c43e6657efe4e56220939b34c6393c7078c4bddaa53b06dccb296ef826a0b3f85a0d0422e822e52a21f46ae155d5113cbe5f1d989c1fef2c85015b5297fd8055a1eb5c67cb7acf187763a1e1c3111b064ea1a43f4faa74da2abb05f5ec0045d504d2a940d03f94fcde1cb8de1497bb31a3da62d1107bef6e3f9462b56f1abc0f93e78d9f477e2a1bb4e7d8b1801a97e6e2819cc23e06241efff7d3b83a84c6932cce2acdf3c4337a07ed047300ab67964678c76cdc4cc7a548c6a6a2a31dfc1a61d368f092f079fc4a3d5771338a3d31e07e4c371a40592b900ad87f3c01a4dcea0b2c7aa38a1a53bf3bcf63fa0ba11f549eab129a7ee43a866dde40002a982685170094280245f8d1a740300f4ac7b65b2f273349bd5137e3a339fdaea570b85352971b019b82a49f70f42f04024d34fb5946765a697bd21aef583a3ba87de13b9eb4ebc32d2163b3c3ed52c65a2938e5fc9b9bb6663a6983e0455bce2de1b8fab64b84cf6df3adb94d86996789afd13e32a580fc3235c9c0bd736ec82351314085ba996d38feb3767d89dd0cedafbc948042a7003fb863667eeac3e1041a9ff40e155a8568baa7d6236b1e9bc4322bb18ad49dbbf68d5ecd5344d6b188daf38b1a274ff73827fe47dc1553bd383902fc5816e98102360ef9a4affa1c329020aacdb7c5731d66cf029c38e127e60f7bd743607cef96b44da44bca9d29863f50e2625bd212cf5bea1f321939a0e510d9ec786e5532c93d18aee3ca190a97ac6d55c4733ff64af53ad33ad3f51343bb601156900ded32cc5a3edac41369ac56fd4262b4861ac0ffda186982ee8ea6f7225a6cc1912e091b0090917b90012bbeed675c548b709bc86afd1f250b94fa9e6a7db880e0bfc63abed72845ad4a2b8209de42658da3d16c67be2baed933d9500f905e2e56a95c6573b4c1d021da8d4341a7e0e81e11cf482fc70850ade4fc1a5941a83d5504fa42e552dc19571ee1a9470e6adbb4dd50f35b7b7631597e6cba7eddfdeb37bbe6a66792aa81846e6937dcfa79e76e57bb2deaf6d2662004b42972a2479fe5db972c66b6d6547365ee793c39f20154411310cc3ab8cedb48811c75c9b9cf382eda64a4a0b5d4bc479cff82bd45690155acc5875606550d9337c99cdb920b8d804f668545bbba1ff6c810a57b3dd1339807868b860e3ece1f0abbbb8bed754ef50efb7637f6b9930926cd7c495af0f9a373f1ecb7d0c18adac8e21a1c8e9f9e38d1c3ac0e371cc3b115b2e1cd14c3828c426ada3fcb4749af87508d5324b8cff72fa387471665da71b1ca9bae5539e173cab029379224a67bf3c6294e338cae745c38cc100c642ecbd6b5150f8d3cfcc308a7fc32d97580e0beb2d789b3ebc7f7031ab418fee4f97ccfadfb0498875870aa9a1cd51c878e721e25dc6d4d20f79e001e8459d1a647342f442d70c7a2155e963ef29a11f4e037a81a3ab71e8fcd5ace71de2f7f8f80541384a79ff109b66046d8bc70c61981e480affbdac42efa039bbbbf3bf5f071403358745a93577e9af71e79217e9cd205f633e7e8dbbab0da5c453ad750ab58445e6bae1de7bf981e50f91ab841205a7829f0a9f4a7b023b2d08ca0d071e9cc12873637ee8fce85d93e1ca6e6e22c20077c85c4485d12a0b5589ca9a4f3eea0f6068492e007aad380e6f9cbe0c9f4f48168e414f87fe657fa9edb40bab33225c22ad13d8592befd4a3cb725eb351809196a3132cd907dfcc30dc77f147876cfac72c88119ef319f99536ad8dfb7c828c2dcdf4e5932ef20a4e62e5eeeb54e521bc56fcdcd555b32b6e63fe59cba8f9b434e8885c5be1ca70f917b91dea37913d1d0ff18a582d36d1e4e19fd5450c8fded1e9252958b28b5ad16be6b57025a77fb2c6daa75c22286b52176b2919226052569b60abbea893315c75dd55f75e202b08f227de9fa3ffbd3eb287fe3a62be3e960c42557dd1fee62730599c09d0d67f767acadff6db915d08867d2b7257f8d03ec1411c9ea1d5ed54fb35252a0f222e81821f1021990baa84bd422a7d3b20dbba1b200706556afd28c6d31b2aa6d0e1b4ee52d7ff96989cbfc8b83118c3e1cfea444edcc1520f7df0de8b56cf808d91ecc5bfe4781230a3f3dd7f74a6bc22646fcf01bb5c2bf28bf4cdab1ef459239da9d688d93831462fb650f65f1035bba55e1eeadf14a03cf8eefb24ff1f0d94b620853981302baefbfb79dbe6b543459c284b878dc815aca6038f232ec394a45cd9b09a6fb2cd3a96037238387ee90cc961108caf796b9c096c3b5c08437e95a34698736c25e0fd7c954b9e7e7446629bacac9e99c79c78aba45c947ff73268ff77e186416619380353b3f866fda1ef1e8976387722e67cca19c3793d8b7a6cfc05c507ea52158b845e3b8d4d0ff7308291c000accbcda6b16fd86bb73433c065c175fcff83ffd6500db971582d2f4d5280bf8e9d5302d2c6a589d5bf50b58509424ec236d8aab0a25ebb4cfa7991800559490945b6a31d852dbd77cfb290cb82ccb8fd0135096301fb908cb8bd43a13a2bea2610d89eb1ef1c6a5ca1923291de5271f7430b0474dfc46159d851a09e2a5a33b212880ff8ded7726a226e213d0cc9b15c2680e20f41ddb01d1eaa4621d12acd952d9da4d889f8e960238c640bc81f5dec62042d970b6c6b9428b03c32ca8bcff5ce4ef050f7934e6989b6058380aa9e36f7c6fd6e5d8d4332d98c871139e99d0bdef4f173096e3a68688ba520a1e4641d959a4a51cee184ed9260ebccc2976570c592e546e7fa3c9185ac2f223875b99ea050cb8ae563f7d7a51af372567104cb79d182e5fe8167567b2903afc3cd4b9f8478e55fda4c23b547174985c3cb846b60d8ad97059e94e176099bc0028779592bdec24ea2426fe7f50ad26c869dedc003569f078cc7ceabb65e8e2456297dc225a6703b70b7d49b756574027c22a14db8961b8165be4fb72958de318bf019182a24b8b2ebbc56e611de9186acdbca6cb951736d030f89cf1177cde3caa8b3a7ce5ee4d38edaee487059470969e7093d000241268507916ab43545f35250c45025fafceb4c716e351eccfba2accb312bff0c72a471ecb072f66e30e4eaea830cbdac2f87767ca672e751986f82b2711396003653be0a3e8d3110f68e135a0ad296a69062db3298ba06cb0ecacfe41352663dc8762e42f776cfd782f3e938f7463193098539b179cd541d1822393906c2c16bf4af799ec56140c183458a89d36ebd766332f6412be1f06e3a1d52c3882624f88573bd7aad261c28cb372dfb9aed44022df015453927d9e6abe0a415b71b16277937e1fa8c94ec2aeb7d45cae4d8266246bde0200a4a30bbd9e38bd4f95ecece423ee0a8342599a1aa135365d9cca2c3b47569939b418d5519070fb5cec37f6d10d3f0f93790dba3ea255cdade4c49047621eae76169bb54d4704d8602d6d934f2dbc2bedb91a3400a076b5e2758ace11bb482220acf1c3c8f020fb87fb0aa6284b97f5fdccafe4b5d618edf9ed317c39742c02a9e663d6e43c11ae250d92086f688f52a9c22710b4f8e746e1a0a1863ab26037275d10256e8bbdc8643d63b220613f37319e259fa3eba069d569b5c0bbcc391fd8b58c12c8e46dcf0fa9801a3bd4a2c32d2b18e1f9172920b622876f0836bd6b45253400f9a22a932c614bec6e82b717c9cb450dc956faeefb43c93fb87548304afd4ab35afae49c93645b0d3fa4b5c74018153cc7bdc6a042d253d901ce5814f9029306c0d31b14026dc2341cb413c383f51a01b796f308c78f46aefa8808bc495acf64fa56748fd2897e26485dbdf3a9e8ac29a855f60679e2dfb92e7dd9719a5ed7035c6b6e236cae1a9204e1ec40bf11c46ea2059aac25f4e0f8e3513936ea84d234554c648971d9ed659e91d495194539c83619611de3375d31d7243f9645fbbef6caefc5aa69a1a168b071d12b4e46b3f333bd2a5609200826aaa7d909ae50134f169c06c78b0ed9b935f7bcdd08abd69b7bba1a1e7c2903f9105997dc5edd87c9cea6057a65dc8663f66b2aecd2b212ac303835aa178f8a7c84b21dcea49f0d269ffcea9b4b276a787ab00f34966ef962f7b3a381c37f3bc1306f18d8856f2f08eeacd9ff22a521ec204d95f2e76ad52fba33b2d4c2d6adf5032e086765f18374bfc1e85e8a88e1be4268a7a175981d6e1cdeb322dd64ef9292266fcea84cf459b7d11345ac66dfb3dd1c786cc3f3f8e1b49191cbb026ca45e95b7b25f4d7f715ff22f0f7986debb1f61260ccaff83f10e6bb0a127e466a34d7ad304aaba50a770f3ae1d14b40daac6f9"}, {0x0, 0x119, 0xe6e, "fb32408a3f1d8301a8ce354a8a25113c6307232adc6d65e34c9152f7a00a4cc8b033d51fa56c37c82bad78d584f1c0e3173619fbc319e75ee4cc2b5fcf72b1762b11656a24239e"}, {0x0, 0x29, 0x9, "95f6cda2ea1023066b004f0f82644b3dfe7fa1271b2475572a32b53897795d32235f39e51281017cd8011ba043a12eda8eb182b6bdec1d4d6ef361ec31c77b"}]}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000004a00)="ccbbaa0e3a243b8aa338aa8e2aec04b7869017b468738622f4757edbfe6cd89bc177e815627f03fe1822521716f56fab9c4cfa5a429826ae6f9fd2eff1b1ed9aebce23bc876df0cd64a0eceaa176f5d39776b3aec9bec7cb29285a0ea3357cea2dd05315bb42afa091a4914ea8c26638c1b056502563a8684a500495313acaebc828e00de97421ca991ab79885ba8829a0579b8fbda922229a501f713abfd34b8c438ab3b76694008979136022d4d7ca92c885066a8cc702332e781f098fde61b3e524409d9efa1ec42a6cd97af7019453d08f7e1cedeaa2e1e0180e893c0bdfd7c5163fedc3f4ca9c12daf71138b681fce2582336"}], 0x0, &(0x7f0000004b40)=[{0x0, 0x113, 0xc, "e6eb08b47de9578da613fd19f49b645ec0b0ccc336a32cf3f41a823432c1c833ec5c2f9a28e5020632f05c66858e17db3fb59dc602f282818dc3486b4fd8794788ad7776e04f26494f09e8399609540b641689d5f4ef1b0444224dd7a082a8e18418b8f1ed8f244492727a18683e05aedc293eed71592a5d8de7518181dbcd1253910706fd020364e3b0ab2adef7385994c830412cbf27819808ac979451f9c274244c6f9c6e54c92b8a66443f3b609f68c5115af9be7be85626cfd03ead220705b187fa42bd6e95a20b37ad97fe704a51da010242ee07d93e5e4393e64a709acae49e1d78018584455267b858ac"}, {0x0, 0x108, 0x3, "df701c82ac5cb1cbd4adf593441478ff47e74abff9a07b15669a06b68fbc7e4e5b48fd0d3cfa0765adcf32300e73a2ab951c36a7aa8aecfbe925f3a8f85b09623f1702de67026719f7e0f83ef4dc803403448035899c476da874de3ff283ab4974ffffb5f540178e309fa02c0d9f7e45f048dad467b73611540b3bac676b6a23b16a0e3c905153672edf27560fc3704153fc92eece7c3510aa7a4077a5d0f2f415d14b96f901b3bfc6849595e119aac8f88edb430d48ffc3813cef7598f77cf7ffa875941593511ce11765a3fe8a0c23aabd5e918194fe476aad19d24b4753a0cf6cf7ffd5770b5abf73a59a1cf9878d94c788e4"}, {0x0, 0x112, 0x5, "43189ef4fbe35f016f93d164a3f7f8f9c8b63baf4b32621c589caf29c2bc33818f2549fea51de018b361b9cbe1fb96f9455ddd50decc7923529872141027812be7a0fc0d6cc1c9d9bedeef90bbd2531b9af598fec0c0269ee378bfa292d1853a07afbe41a6018b2e59b0285c294a11515c7219f3515a9fd83efc63d6cf39937360737d0c9530eb236d83a5649169729c130ed194cba72d931dcca629489144fe059b68e1c647c3bebd22f121c6cc1941fefe0ae2a04d0c18d54f5a8a84fd1eee"}, {0x0, 0x0, 0x5, "db392ddc04bd3c0f6a79c1ded21a412d451f05d7fc29e89a0afb3fe06c4ea652d972b317d44eab36517b97d5f70dd1a022efb4d159447b1f96405f1c36e4444e52905ca3a7c3619e4baa5ddd2f5c82c7c780eecb231fdf4f1f98877a5c6d3967cde096f2e63152d68dc6d2e1fc156832f2b563fbbae9d5d45889f0c49b4f674308f1b6eb"}, {0x0, 0x10d, 0x401, "aa9909d32892c7328bb678455b728cfa4bd80c04b60ad1cc22526eb7e12116f1c85f67b818a8986d9a5a8055ee58bf4da7702c724a72e5288f961a2796812cd448612c9dbf9bcbb1b415ec399632c12473150a9a06c8c6474285d0f17e0db56b329c62e3a572158e41fdb30023b7db3cb8757c672a02430e37c51bcd34fcc87e8f16e695486fe0ed7a78b6512f2682700c6d75149b6d6a3b979de90d5ca25e51cc1aea59e8c642c1079c1290d6abcd9824b88495eb030c74ae72836c6536a7c58a4105f59b24ba6046"}, {0x0, 0x12e, 0x1, "7e2a080e5ab5a414e7b2e139"}, {0x0, 0x6, 0x2, "974f80f44176699ce06ddc45757daa310f2a25828756f0e01b43543719b8385c7bfeaccb218b8fe9c765c378bd8ee496fa02cec1ea8b60f26b5014d5c13aca53812b49b4aea2ddca78ab5e22677b11e61a843d99cb9dccc98ba387e8605bebb338f1e87012b665a74c14acf9bcd1a49c33b79d6c8c03cdf700c776f3093b0e1c5af88b2eb7c472005af1055ac28f19381b4c4ca1bd75a382b4d2b0fe1f203601357b77feba"}, {0x0, 0x10e, 0x8}]}}, {{&(0x7f0000005100)=@xdp={0x2c, 0xa, r4, 0x28}, 0x0, &(0x7f0000005340)=[{&(0x7f0000005180)="118cb2adbe83e4041f163eca4d864c5e9656b5ac8f17c8ff862fe570229dda59beb62aa893175969a9c46f610ca9fbfda4c18ac4cf3b8db2d1e8e425a29b3df972b1bae07fb84a4622ccaa70aa287041c231b2245cc42dece9ff13c01927c54d4c293df32c80b67de5328983fa67ba3c46ad89ab83029d059ad346931b1b23e05d3eb1290685bc0c1a7a3845411c1f926f1e85b71c7da9386ea73d58251f66"}, {&(0x7f0000005240)="0afb046e84131134c6245fcc80b0e05d1910378a658e96be87e605399cdc69322af468972dd33a13ca6cc009e885a3b4ba812eb4474d9e876c27aef5a7f1fdbe0a8c93b8d6a1e2233b8f493f7312a16ab81f7c1864e66d0bd61729bed5e12245ec0d4a9ae54d677a92c5ad9e9159cf370f22ba2cf8f99f8d807962ea7059ba39b40779aa0122e74c72a678beb06a306983c2cd4b9cef54ad"}, {&(0x7f0000005300)="8a2c6862da684f4f1141824ef5a3456c"}], 0x0, &(0x7f0000002e40)=ANY=[@ANYBLOB="0000000000000000e70100000001000044760e2621d13503000000a555b46598c476dc1dc31b40c762bcd037712704001fdbd59782bc2b34dc922cc288212a3673375f771876f6ea86818369d73b05c708000000000000e81818730000"]}}, {{&(0x7f0000005440)=@nfc_llcp={0x27, r6, 0x1, 0x6, 0x2, 0x73, "b090dd23c4c98e15a7a18915444dc930140d1e947e60855f1e616ce4ba2a8a3a1faebc1ee407fa18a9eeb162cf99e8ae90a330786c64fad2579765b0882b80", 0x12}, 0x0, &(0x7f0000006680), 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="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"]}}], 0x506, 0x0) 10m15.217548131s ago: executing program 3 (id=837): r0 = socket(0x28, 0x3, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r3, 0xfff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) accept(r3, 0xfffffffffffffffd, &(0x7f0000000680)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"]) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10012, r5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 10m14.723262456s ago: executing program 3 (id=838): sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6074bb4119ea219d2055df8bab18280f3c3ea8e45510d60a28f7af2a9c471dbe0a88f57ae4580b0b420f5f90b70efb6805d81812d5d64c87c99f9c75e9f656dfd", 0x80}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r4, 0x3, 0x0, @val=@iter={&(0x7f00000001c0), 0x10}}, 0x20) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000857000/0x3000)=nil, 0x3000, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 10m14.227315967s ago: executing program 32 (id=838): sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6074bb4119ea219d2055df8bab18280f3c3ea8e45510d60a28f7af2a9c471dbe0a88f57ae4580b0b420f5f90b70efb6805d81812d5d64c87c99f9c75e9f656dfd", 0x80}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r4, 0x3, 0x0, @val=@iter={&(0x7f00000001c0), 0x10}}, 0x20) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) mprotect(&(0x7f0000857000/0x3000)=nil, 0x3000, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 8m38.466852558s ago: executing program 5 (id=1224): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xfdf8, 0x0, 0xfffffffffffffffe, 0x3}) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x4) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x1, 0x0) mount(&(0x7f00000002c0)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r1, 0xffffffffffffffff) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000090) add_key(&(0x7f0000000540)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="38000000101401002cbd7000ffdbdf25060003"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r8 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000140)={'dvmrp1\x00', {0x2, 0x0, @private}}) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000040)={0x9, 0x5, 0x1, {0xa, @pix_mp={0xaeda, 0x4006, 0x33565348, 0x5, 0x3, [{0x74, 0x2d}, {0x8, 0xe}, {0x4}, {0x6, 0x8}, {0xff1, 0x6}, {0xff, 0x203}, {0x0, 0x3}, {0x6, 0xffffe59a}], 0x3, 0x0, 0x3, 0x1, 0x7}}, 0x10000}) 8m36.972901338s ago: executing program 5 (id=1229): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d}, {0x6}]}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000c00)={'bridge_slave_1\x00'}) 8m36.326849216s ago: executing program 5 (id=1232): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d00)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0xfff2}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m36.186801214s ago: executing program 5 (id=1235): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x260002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000640)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chdir(&(0x7f0000000280)='./file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') ioctl$FS_IOC_SETFLAGS(r0, 0x125f, 0x0) 8m35.982890643s ago: executing program 5 (id=1236): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@verity_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) 8m34.958659847s ago: executing program 5 (id=1239): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xfdf8, 0x0, 0xfffffffffffffffe, 0x3}) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x4) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x1, 0x0) mount(&(0x7f00000002c0)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r1, 0xffffffffffffffff) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000090) add_key(&(0x7f0000000540)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="38000000101401002cbd7000ffdbdf25060003"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r8 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000140)={'dvmrp1\x00', {0x2, 0x0, @private}}) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000040)={0x9, 0x5, 0x1, {0xa, @pix_mp={0xaeda, 0x4006, 0x33565348, 0x5, 0x3, [{0x74, 0x2d}, {0x8, 0xe}, {0x4}, {0x6, 0x8}, {0xff1, 0x6}, {0xff, 0x203}, {0x0, 0x3}, {0x6, 0xffffe59a}], 0x3, 0x0, 0x3, 0x1, 0x7}}, 0x10000}) 8m33.275883832s ago: executing program 33 (id=1239): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xfdf8, 0x0, 0xfffffffffffffffe, 0x3}) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x4) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x1, 0x0) mount(&(0x7f00000002c0)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r1, 0xffffffffffffffff) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000090) add_key(&(0x7f0000000540)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="38000000101401002cbd7000ffdbdf25060003"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r8 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000140)={'dvmrp1\x00', {0x2, 0x0, @private}}) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000040)={0x9, 0x5, 0x1, {0xa, @pix_mp={0xaeda, 0x4006, 0x33565348, 0x5, 0x3, [{0x74, 0x2d}, {0x8, 0xe}, {0x4}, {0x6, 0x8}, {0xff1, 0x6}, {0xff, 0x203}, {0x0, 0x3}, {0x6, 0xffffe59a}], 0x3, 0x0, 0x3, 0x1, 0x7}}, 0x10000}) 5m0.753041808s ago: executing program 1 (id=1812): r0 = io_uring_setup(0x6afe, &(0x7f0000000a80)={0x0, 0xa949, 0x1000, 0xfffffffd, 0x179}) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd2(0x65c, 0x80000) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000001840)={0x12ac, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x1134, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x109}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "0f176df9a3c4962ff12001152c7bb633e0d4fa3afa2a9ae415d2ffa63e7c64a520b6a6404776bf363285bc38f16b359bcd7d5cd6fde2fc72ace8252757dcfd26bc019ceff5384e79230183e24580a703ce335931bad2fe014315e68616bc071a0f9f4896ea95a7dcc55c3115cd89bb3232fc8b620285810fd2ad8db659f54724af37761402fbd6ea2b080862a56a1d4b4f209b5bebc1806f55663cdfd209ad6e952605f1e8b7a619080ff2df9ec4b55a451dc58179ddcd381e332446afdff32c74f837da9ce007675d15ad7498bbece9bc3dff86bb43b2e47c20303ce26b8bc30d22969615397f665379d406e11c5837aa10d68f0d8450907bd569eabb6bc0f2ceaeca7e38f9a33afd3630a52beeff4fdcecd39d26d45f92b2ac2c78c28fb44d66f277ce1ca29ee3d0525faaa3620287f361214e515c9c548035f094977d30241c38d5f277a60b986a757545fe6656b9791eb41e722d06078d216e73b90f4ab1d10f22af02947b471fb64053ed2afcadb2674a65b5b7e2617d4be136edca50e7507966966faf60e7f186b6623fbbb04c4d37950a3f59a9971f25222749e6baf9f7acf8f780c1018d37d7978c28c91efbba9be8aed6c20049008bb42e1aaf245e561b338c9be1c9fcdf5343734ed261736deaf7985c648f6ae74c7539d2eaea0d914122380c7fa399beb08253966be7bb604634b2877e2c96bd933ab26ced46e22361fe6e5019716ef68863dc8e64dcaf2fd02f70ae754600585b6276d1d7675ce7679ad0899080f3e700ad605930c68c1ef4c0413ada607ef9971bd14cf147cc2689e7c26dd2cc4f74903cf410974a6099b8e61e8ab4e1297e467f8cdacc1e65d1e61758e3085cf8278e379aef6f432a86cc491dda9d78911a1e5c7fd051d01d6358a892dc75ed14e73984d3a123661d65ac5063796c220dd016ae0d3f3de26c4ee9268b438ed2cc99a20768a8f1e9892d51ddb2ca7fc344a21d5dad492fe32d9a0331d3447e9ec6a632a181b8d5e2575ae27e35121cf19caa6c099c6896f711abe3fef993324eba72efaf1aa3f035392e2d9d0ef98deff8fffb8f555d44d97ce166371d6a2e9834a5af72d87721488bffe9e2784b1d528fa21acf12bb819050a867abcb51b5dda41605d0fa31bec1239ae7ee55143b75fd13183d8fcbe4f3d3afb48ad57bb940b4f7cd9efceea528f1dcfd18f546bd634824dd7af860d08a190f64371f172defdf60afebaa7bd91bfb51a4833e2d429b0fa55407f929a3bda91dfd9a66c0788049e37ac9ffe1d2d9c37e85a7faef79ca6e49d8cd1b50d24782553a9fc80984058c82455cac7395f65c8a030799b84a9560ee0716c077f2a2bb985000e04746c7e2fae3704bd845dd9695e468e78a26e01c1187688f4c08bd32d0c179eee57304e32260cf495818e3444841ee3e523cca6ee09417f9015ee92de527251ecffa1a26d09787b71e7b3f9418ca150ee06a7798c05ade8d889b809fa733757e5a151a31e3e58d1de51df5fe3ba0000730e020c4f08b3ea2e41ccc5365bd1ffbd5b8d534ae956bd3fbb3a0541ae4661254a850fe4831800aea34874c52da6b680fb82c59d187b9095d3c80bae93ed4e5955e2e473bc325bd82e3360363eb750dcfae36820f52b56029ef30db9ddd3fd54020f779e0fe4b16f1289e004d664714ccbbc83efe86ccdeb39b33e13b3c59297cebae84d202d2367992fac742a15ceaa21542bdef25a10530ba1c2988e26ddb7dbfd7e1015762419da86341ee3d76455d783ac755955b0ab2b22522df2025f25a0780d4fad16e0e863b84312e6fcc31cd25096311e7fcbfeaeae7177ec3d9ef9d923fbc442e44d1e702a9d9974a9e598c7f301eca62db96626af3db812568889b4bb1c49dec82f6b3dd2ea0e2399994397f9b92b4a0a6e2921a56fa8002cb1988c4b0d52f3debc817d53081ba5201d040ecddf6adba09f72c32c087353553b6856148cf74a09a758aee8d2921950a269b7202444d0bbe567c4307d0ea51418a4944ab499b4ce281441dc3df8f28b2ba8e81d5ee477efb39bb191a7bfd665b8ed23004ec1b797e2dae3db54245725b70566ccb0f33beac4e0f948d4c6cc6df892d3e24e711f71fcba9ed63392623482e54fe08ba5bca574413766ce1c7963765be27e684a023b0acdcfa357a5d7ee82f776093031a567de2a37d970f353509857c6386f76a27a874b28da680677fa3213665753aa0b5791d17c4983ebd0032297f6d9b42a633f1279e1f9dc39dfa144efb9f2ed4256d36db0e962277e1d178ecd104ee7b27cb99a7407c473c21a5209a14a3eb816cb7f50a445669484ccf60e13bb8859d508c479192acd268baabb3adcca0922bb501be809380ecc8c9229c3b06bb37f3d08baea37348966c8d094c17421e7959df0620dd34e471ddc3f53b0762df801d1fc789e56e43666d5668ce6a46ff89d574d582db6a2ff79f811a58f0ce85b306d2587c2f314597f037e2d3ae3764c13439c75749bbd9c9011765f8894f4b78e9b9a7e0486db276b9470eab04218766e50a6d0164470fdb70b6b6a7651a26e46605ed8cf6749e45dab19120ac9abe20761d0c2dd82eceb62e62d45a21e00d47769102f616c57a05877b34468fa1ba35f1d7013da3dac4427ce4c2ed6e557c7428a5937bbd1693c850e7ad024512da67ff63248b83922893c5fffb95be2d53602fafb189dc0ced300193ea28ed606cd650002b23aafc8688548e23344ef87d64301837f8725dc120ce0262b6d6baa24eeb93766e40bdc943166f5923d5dbf3f3a897cacf38b265662b2fc4c67bf340d52ed829beb5182eca9ca2a91f54cc8ecefd760e4b0dc9f75819348c40f363d1ca001290aff87238168242796d1cf3e3ad5c811c489c667eb8582aca20870b243abf68b4e19c62872e741fa39d7d342573815e899ab0a1fd5221e21227fed1e6351725b23b9c8b02eab2a0911b4eeabfa6326d3cd7d6c69208dd51ab03af1fe9c8a240e9460a8d325ccc1eb39904b6873ed51488ad1a9d0f3f9ffbcdf164cfe8808e7f23761f3aaea2fd86f0327fa898d2d1270b983d1038a8fa45a31ccb23a28e00e428cea0a1a52bed02c514a85afbae7c83f153c2ca994a254fa27130ee2751899d4e1206087f3902a07b4f87daa81e75b72c1daebd040564bc90f33778c7755f608dd4138f1caeb3fa90a6023379de25ba20bb5162ea9784485656ebf45eba83ff348fde8db6c0213bd1c747af9ac49a8cc033224008a4a48b8e90b03b6c3d8c62a2f97d80d85c7c4e65d183668b415986f19a4fdfc8f484ddee0ee37dbefae857e16504df999cd43b3a03f58385ec0870a1e16ce223f32295744053b3abf4e0f9c48592af8f9420434a3452fa98d2814a2131b3bc04eca3dbc9b7ba8c1d6d494216ecf52a7980f655a3330c8bb34f867b0c19eabd8088548fa79dcd3dc90eefde54e4c70cc7670bcf9fc4fdd86a181f03db3f941ba62da6214854b56290ec867dc1942d860c152ee73c11c6ac6250f71d180b299ad1cf20b0a2c0616242a8819a42afafd751ca0560514f218ad8f72411e96ae100bf1e419e237e066e0ac9de50decab7d7ea3e25a77ca54f69598ed2bbf7a6ec9fae85c384f2a782eafe865811fa01f1ec841f14fdae646ca32e15d55731daace2e7038c4115e1c5c33cb91a8345a6b27ea965972dfc43da724bbb71f7a2ef2ffc38b2d0607c2e66c74d86fe981f9a54a4f9a5359b02903336600776fc4260eb1168e8bfea64d1407635573b362bbd933beb780c477847ece0ff9eccd3dcc68ef27c9a62087da105f2c0cb7438b6a8a5eda83228e5aaf6888de4fc7b2cb52aaa5a15a4b9b7d24fe4e6a10d59084ae5ccc677734b5abb4d0b3da165010e2bdb323dc6ac10fcd9a1e0af2df1cf1a933846d73dcf5511e32269fa3413cf8d3380c0e8804c10a87d1d73c318d8dc4ddf8a0c862bac2007b2cbd8021d864ccfa3a0955021108dc718ac9376bae32c20cefeaf6bd8b1253ed47a822a08743e842ea9bff6f1e8dba4f1e5dc33188e76632b456ac8909afe1ce717153ea161743a3e96089d152eadee84e838392ccebaa686807de5bc5aeea127c4de018be812bfcc42da5d499d31c42cb2cca074ed6a18f6bfe1c46de43624bce738cbb88ede2cd17a9d5c306f56fa565cc4aadbe8f5ae38e1a6278e51d69d0b72258adfc83c161a238bc8e0cbc79c25fda93382c4f640b148da3aef35e803ec254a7db923587a3afda2d0b21b4e151176d928aaeba718fb2005acbdbc02b32fe52c94feb36cdc337ef6c660915efcaeb15f320824f12471fa8c874f8b1caf6d7af6dedc38dbb78c74a5b2b3d2ce695b672d69efa3040e64d127a16650f7cad9de59f6c7b100452cf798813bf961c8fe35dcc4d38a0e8134de8010c0f6492df31270b42b3d9f5fcd0c4529e6d239219aee861f077fb25204f66ef3db3ad52a93d35191c7ff89b24c72202b6b7fdfe049a9aedc87e3f90dc0bd2e5f7c5d9be0289856fbb549449cf3a2a1c8c7fa264b0681ab7484d21224d383f946c1c89d533e30cf0f664cdf989d68dddfda5fb153cc713a7311de615bb06fc7846d1667c92d5934093bf8c038a19d5a4222ae1f4cd52c9c7fd4f4598338cd398d49bf62c75cfe56d9c777be84df891282461fc47f5534d8ed6073ec2384d86b9ef8897609f2363e432e8450a74e1c55a12c0842efff526197eb3541259d593a1c26ff2c8ab667a5cecef0b22fe9970eed4d764cd16bb98e87e797cc937d73cfd550910a45ea682f10d8a3174101f4c6005cd09fc64a66d6898d088a7fead99371d607d9ebed73f0a3a6544f56f3994690036902eed7264a0c74f32057b0fcdef9dc90bdb35accd4b650c66828b67fb3204758028cc504cc6f8a2bac70e15d6b3263c6160d631bc04cd6f90c50bbdb210e746fb6213b7669fcde20f266181a4d9a39c801d917ab73c55b249d2d9e8bcc11229fda937cfaf9a8f6a510b6f78261c82758d3dc330ef7550eb3212bfed52a69fd9fb9b82420a832c1bd25f76585b1a0d41dbdd0f27abfb7b59c8a074610a14c6ac0259b079b6ac00824c501f0285745d6140c2e1449cf1aba44b07b23402aed3775143e0090904fba7608ad4fef43cba9502a7cb7974d8d3a5373ff1173392f67af8db8f64a9a3835cac7893c8d7c168c78800c404044b2c169bf17f38f8c4743a47035531adcdf47aa63b3271a3bace0fb33dbcd301c11be75384c4f497e19f23e58bce83690a7405f479c07379074179185f69f36b9f7ac298b7a7c268652059ce8b1fbe93bc8cc884b114729cffc494a9949f48d0831fb68d33fd83846b81918a94a82c587faa955315debcdea496fbd7f032bd3f5aff23b410359994b29c24da4d95dde837c2720d8f4aff71ceb319af2f8e9f4300e7ea155c25f43648b0085708a422ceed19517f83b760e940f62d18953f43ba5a5b8c85d669f4a6b79f3f661e25bb0c8a40f14c7e9495dcd74ac9a3d703d576958c678fae73762728aeb6ecf80b18f84ae002677f8d87d1232b8ddb980ef358ec9bd857116a6922ea91ecf68805fa2d730e8038f5d712eacb346702f279df8e9abcff9da4d4b350889232dcc9f955bb704a98a08b6c01e1fcfaafc8343241847684a58a04991ce37ec45b757d05d75bf47ff37a9755410975c59df88d525ec8ce11d1bde3eab8db9d2664b3970703e997d251bc0833cb7322349d7cb0317577cd8c1117de8dd9fee32a1724a4507f7427fdb9fab2260c4ccaff0d85b07f51e2b5975347193d0d006915be8bb"}, @ETHTOOL_A_BITSET_VALUE={0x33, 0x4, "71076eddaddd9e54015e8835b5f24af5324596c6421fb6ae3d64064deee49c4bc97f54e8011293d2c7d294f05205d7"}, @ETHTOOL_A_BITSET_MASK={0x77, 0x5, "c6ca1366526191e5892b15ec70606de80246a8a93ec1fb71473a4a8b2ebe087aca7cf2de79c01c59f696ee8287613ffdd705be2bfd7cc92ebd9174987fb39d9b1be3285baf2fb72d48a321d8a72a3c8e01b2d94eaa8437e3e8f2581c8a1a29f94e867e38b5798dbf517d3312e1ddd60de4c465"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100000}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_OURS={0x11c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x77, 0x5, "73cf2df73024eebeda5ff865065e3c55c2f408cd6baed0a3d27403cc193381ede943dd5142c6a4cc9c892c4e7c326efcc2ffaf5f4be826abaa76cbfb1f0d582d92d2cca53c81c8106b10c87d65ccec8721850f1c1cc0de8caf19ec20a9ce5b14bc91e919cf1563983c2c076438b9a4af1c890e"}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000}]}]}, @ETHTOOL_A_BITSET_MASK={0x75, 0x5, "5ec79a39bc625991fae2fb14292eec897c21e5e5b8cd82104a15d8523f53575a5abc1bf8c65f3b08ef2752dc6e39e14370b1d4adaf437d120313c0fff2467672339a1566a2ef55f4a9083786ed98d846afce82016338ca9671ad1d106ed052e32d01be7348871cc2797683b02d9dbae31a"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1000}]}, 0x12ac}, 0x1, 0x0, 0x0, 0x20018091}, 0x4000) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x10000000) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000000)='\x00', 0x1, 0x4044081, 0x0, 0x0) (async) recvfrom(r5, 0x0, 0x0, 0x40000061, 0x0, 0x0) (async) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="738834385b8a630f73567facf7fcbe38a1cdd985453e263d6f56bc574452941934aa008bffa462f6d4346b341f700bd5d1a749f13df2262b7b4036d15619d4d746084d226866e3a7904b1fdb3dbee8ceb1c4342f6267ac0f2e808664217f31", 0x5f}], 0x1) (async) shutdown(r1, 0x0) (async) recvmsg(r5, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x1) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000400)=[@enter_looper], 0x0, 0x0, 0x0}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x20, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000500000000007c0008807800008006000500002000004800098028000080060001000a0000001400020000000000000000000000ffffac1414bb050003000200000000000080010001000200000008000200e00000010500030000000000240001"], 0xd0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async) r10 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x45, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) (async) sendmsg$NFT_BATCH(r5, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range(r0, 0xffffffffffffffff, 0x0) 5m0.533889741s ago: executing program 1 (id=1814): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') bpf$PROG_LOAD(0x13, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') close(r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,2fdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRES64=r2, @ANYRESOCT=r0]) 5m0.511021068s ago: executing program 1 (id=1815): add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000800)="31d2542772759bc0146d5792157ade19b0a49d236e8f5e3bbbe5b6e5bf845016ec", 0x21, 0xfffffffffffffffe) 5m0.435210501s ago: executing program 1 (id=1816): syz_emit_ethernet(0xfe, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xc8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x10, '\x00', [@generic, @ra, @generic={0x0, 0x75, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bd"}, @calipso={0x7, 0x8}]}]}}}}}}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x18000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$SNDCTL_TMR_STOP(r6, 0x5403) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r7, 0x0, r6, &(0x7f0000000240)='./file0\x00', 0x46) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 5m0.200796807s ago: executing program 1 (id=1818): bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) (async) pipe(0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x556, 0x1, 0x7, 0x0, 0x6, 0x7fffffff}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000040)={0xffff, 0x28, [0x2, 0x5, 0x1bb2, 0x98], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x1, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x5, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x63ce1180, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x1, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x2, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0xfffffff9, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x9, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x4, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x8002, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0x6, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x8, 0x4, 0x8000005, 0x1, 0x9, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x4, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ad, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x9, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x4, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x5, 0x3, 0x9, 0x1000, 0x7, 0xfffffffa, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x28, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0x100a95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x10001, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedc, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x8000, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x10, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x3, 0xfffffff7, 0x7, 0x8, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x8, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xa, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x4, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x10000, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x10, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x3, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x1ff, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x40, 0x3ff, 0x8, 0x2b33, 0x9, 0x1, 0x6, 0x1007, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) (async) sendto$inet6(r4, &(0x7f00000000c0)="738fc0", 0x3, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x8f, @loopback, 0x1}}, 0x9caa, 0x6, 0x9, 0x3, 0x6}, &(0x7f00000001c0)=0x98) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 4m59.77506954s ago: executing program 1 (id=1820): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)="e870", 0x2}], 0x3, 0x0, 0x0, 0x8000}], 0x1, 0x40800) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x38a, &(0x7f0000001600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e21, 0x4e20, 0x368, 0x0, @wg=@data={0x4, 0x9, 0x7, "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"}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000540)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000440)=""/250, 0xfa}], 0x7, &(0x7f00000005c0)=""/52, 0x34}, 0xf}, {{&(0x7f0000000600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f00000007c0), 0xd}, {&(0x7f0000000800)=""/209, 0xd1}, {&(0x7f0000000900)}, {&(0x7f0000000940)=""/155, 0x9b}, {&(0x7f0000000a00)=""/24, 0x18}, {&(0x7f0000000a40)=""/166, 0xaf}], 0x69, &(0x7f0000000b80)=""/62, 0x3e}, 0x6}], 0x3, 0x2, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x85bad91}]}, &(0x7f0000000080)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e2c}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x7fffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4ea1, 0xf, @empty, 0x4}}, 0x9, 0x9, 0x0, 0x2, 0xce0206, 0xffffffe, 0x25}, 0x9c) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000340)='.pending_reads\x00', 0x3092c0, 0x18e) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000380)=0x1a, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r8 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x200) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000300)={0x1, 0x7, 0x4, &(0x7f00000002c0)={0x1b, "a9257d05dacaf2de70ad1084e5506773300a4ba8498a1e2ba013a91d05adf92f06"}}) 4m58.656369319s ago: executing program 34 (id=1820): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)="e870", 0x2}], 0x3, 0x0, 0x0, 0x8000}], 0x1, 0x40800) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x38a, &(0x7f0000001600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e21, 0x4e20, 0x368, 0x0, @wg=@data={0x4, 0x9, 0x7, "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"}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000540)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000440)=""/250, 0xfa}], 0x7, &(0x7f00000005c0)=""/52, 0x34}, 0xf}, {{&(0x7f0000000600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f00000007c0), 0xd}, {&(0x7f0000000800)=""/209, 0xd1}, {&(0x7f0000000900)}, {&(0x7f0000000940)=""/155, 0x9b}, {&(0x7f0000000a00)=""/24, 0x18}, {&(0x7f0000000a40)=""/166, 0xaf}], 0x69, &(0x7f0000000b80)=""/62, 0x3e}, 0x6}], 0x3, 0x2, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x85bad91}]}, &(0x7f0000000080)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e2c}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x7fffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4ea1, 0xf, @empty, 0x4}}, 0x9, 0x9, 0x0, 0x2, 0xce0206, 0xffffffe, 0x25}, 0x9c) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000340)='.pending_reads\x00', 0x3092c0, 0x18e) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000380)=0x1a, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r8 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x200) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000300)={0x1, 0x7, 0x4, &(0x7f00000002c0)={0x1b, "a9257d05dacaf2de70ad1084e5506773300a4ba8498a1e2ba013a91d05adf92f06"}}) 10.58664421s ago: executing program 2 (id=2795): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x105080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) read(r1, &(0x7f0000000040)=""/46, 0x2e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x13) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0xfffffffffffff6d5) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) chdir(0x0) link(0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) 9.807619515s ago: executing program 0 (id=2797): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x208400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc801}, 0x2c000010) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_']) chdir(&(0x7f0000000280)='./file0\x00') r1 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r1, 0x82081fc) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r2, 0x800000) 9.468058515s ago: executing program 0 (id=2800): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = fanotify_init(0x1a, 0x800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r1, 0x441, 0x4800001a, r2, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) io_setup(0x4, &(0x7f0000002380)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0xa4, r7, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x54}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000004}, 0x45800) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r6, 0x200, 0x70bd2f, 0x234, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x8c}]}, 0x1c}, 0x1, 0x0, 0x0, 0xcc090}, 0xc2000) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=0x0, @ANYBLOB="0800040000000000080003000200000073f35a727884084f5e3ce9ea94d2b10016698035e755ae7df8b36b9d1849d4f1e4377c58de"], 0x2c}, 0x1, 0x0, 0x0, 0x60050}, 0x0) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x2009, r1, 0x0, 0x0, 0x2}]) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=ANY=[@ANYBLOB="80110000100001000000000800000000ac1e0001000000000000000000000000ff020000000000000000000000000001000000004e2000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffffffffffff00000000000000000000000000000000ffffffffffffffff74f10000000000000000000000000000feffffffffffffff00000000000000000100ffff0900000002000000000000000000000002000100c0000000000000004800010073686132353600000000000000000000000000000000000000000000001ab7e11b000000000000000000000000000000000000000000000000000000000000000000000048100200"], 0x1180}}, 0x0) 8.096106571s ago: executing program 2 (id=2803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x4f, 0x0, &(0x7f0000000340)="17f42259af4284980679e2fc7eca5270666b1cb1d968506e771f164fb16f0c492ac51cdb6aa28506af09371c2612f1580de3ee27b99e92701088fd2c7ac8fa4adb39707fbc40fb0602bd4c4f0000cb", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x50) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESOCT=r2, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4) sendfile(r7, r6, 0x0, 0x20000023893) 7.873202339s ago: executing program 2 (id=2804): unshare(0x60480) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84) mount(0x0, &(0x7f0000005880)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x18010, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000, 0x5, 0x3, 0x1, 0x9}, 0x9, 0x1, 0x1, 0x6, 0x41, 0x1d, 0x15, 0x6, 0x4, 0xfffffff8, {0xe61a, 0x8000, 0x6, 0x1, 0x6, 0xbf5}}}}]}, 0x78}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r3, 0xff, 0x88aa, 0x6}) syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000200)='./file0\x00') 6.706433898s ago: executing program 2 (id=2807): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x8001, 0x6, 0x7f, 0x4, 0x0}) syz_open_procfs$pagemap(r0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x94, 0x0, 0x0, 0xfffff034}, {0xf479}]}, 0x10) 6.565734549s ago: executing program 4 (id=2808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4044084) 6.461086686s ago: executing program 4 (id=2809): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x100, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0103c6ed460b43e4cf9f26b7"], 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) 5.986768401s ago: executing program 2 (id=2810): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200840c, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) mount$fuseblk(0x0, &(0x7f0000002480)='./file0\x00', 0x0, 0x28e4021, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x31, 0x4, "0b0f2d5e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000340)={0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="4006410000004131955a4f7cc16f4b07d3987d7b54b6f734e996165bd566801aa2c8fbc4cb5f5f399b183774f0aebe2848d3d071baeac605ee55df166a073bc0a21f621f7fcd9b"], &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x20, 0x18, 0xfc, "7151b43525e34f6c90a2598d5d3dbf4c6f06103cbc8b10a4692489d858c56ef82d9ddca7f1ad3a4fc0bccfd54876abe620ab316a5bb6f167a104a0d0becb21398f80c51f6782927ab25b0e1c3067619e7d603deebe9607d9ebbc88a8f5025efc6e686e27039b0e44a6b44034b4dd42b71a29a7de82d7ce6ad31db6a096ed82c752917669b7f0ae172676e79c417a3d22b2ca9d209027500bc272077928296738d6db2688ca85023a9308df71499b9340c20e66b65df7be16e790694ff3be05a30763b61194b521dfa02ab596d537ad8d7fc7cc658abbee88f63cef3f2dca81a8a0f5ae18a5af63b326d74f7de1ab1907ec03cd4109227181db9410c6"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000400)={0x20, 0x81, 0x2, "bc5f"}, &(0x7f0000000600)={0x20, 0x82, 0x3, "32339b"}, &(0x7f0000000640)={0x20, 0x83, 0x3, "3ce831"}, &(0x7f0000000680)={0x20, 0x84, 0x2, "f2d0"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "6129ca"}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = accept$packet(r2, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000007c0)=0x14) getpeername$packet(r3, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.703260242s ago: executing program 0 (id=2812): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$video4linux(0x0, 0x92e2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00') read$FUSE(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f000001c380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000070a010100000000000000000300000324000580080001400000001a080001400000005e08000140000000000800024000325b5300000208000b4000000004"], 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/18, 0x12) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}, @generic="d7"]}, 0x20}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 4.774792718s ago: executing program 7 (id=2814): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0xa6, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="4edcdddb700169e33e09bd0d7f06ffe49667ae05350555b45aadedf92a7bddb1195714fbde81f84418d4dc3df5ae0ebf60f0f63b5b6481613e5d06997ca522040359a1dc1bcae7c1113c5670202cad5edc2dff7fce7ae349f693322cf7b1b1a8da486a7cc948503b5b5be904b2dc2a6bd8e1bd773aa4b038276adee39a9bd716879e14349e81578b992e08a4536611d29a84b804b76016d2f928428b313eb16ef7ed38d71a6d5129475fa8d4949121436adc8c287c50b5ebbc58c8612c6547cee02b6a7c88fd42cf6d74c87eda20f1c69df2577615024be42e9f5b6ff065497af90f546fae9f15dc94235ae5b7f24761", @ANYRESOCT, @ANYRES64=r0], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x70, &(0x7f0000000100)=@string={0x70, 0x3, "b6df398112245edd7c261bb3c67d7dafb2f2c1cbae23087639afdc6c13f09cde9c058874c903666d62622b0e61884190a24a4fb84004a6b74d4f084e955a9e8e13ff3e9bdafe5cd890f8e309ad3615c30f306dfa6dd276e9fd965f945c0361937b633927dacb85883e3530bc143f"}}]}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x7, 0x2}}) 4.735940826s ago: executing program 0 (id=2815): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x3, 0x0, 0xffff, 0xf7af, 0x8000, 0x7fff, 0x3ff, {0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffff106, 0xe, 0x400, 0x4}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x8}, 0x8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='d'], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async, rerun: 32) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000480)={0x0, 0x334e, 0x10, 0x2004, 0x1000030e}, &(0x7f0000000440)=0x0, &(0x7f0000000300)=0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) (async, rerun: 64) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) (async, rerun: 32) io_uring_enter(r4, 0x7277, 0x0, 0x28, 0x0, 0x0) (rerun: 32) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) (async) listen(r3, 0x0) (async) shutdown(r3, 0x1) syz_emit_ethernet(0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0300000090780000153d26e7138796243ad06dec21adcc0fb5c0333f9bdaf881900197d46903a4f7b61fd30944d128b27a5a010807cc29f5a0e305348855280498f3032c457ee864663349fe1c2ee51aa9a29d4708096ae56159cf724ed890fb95c2585bb6e6aa722b5754ec36416bfa0b79db48df63c4864bd61f8eca01d0297ae7be6c5eacbe93822b8ffef505040ddc3ca3f1d2d5b0ce6e31088672d69318641389b42cb4f0ad2418d72e695fb6419f4edc257e66ce0aec6364456b566fa605e41f12da7ef646d4ac1e5b8214d5f6ca4cbdbe83055804704814c4a5a08eedfad5"], 0x0) 4.438430255s ago: executing program 0 (id=2816): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011000ca1a604004230f02de3b010c03010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x7, 0xe3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/337], &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x8, 0x10, 0x9, 0x10, 0xf}, 0x106, &(0x7f0000000180)={0x5, 0xf, 0x106, 0x2, [@generic={0xf7, 0x10, 0x2, "f9da6e27c45f317f6aa3e475a89a797206b9a4ae4ad48c234aa6fb2429dc818838b73a06404d76b2adc5b2947484e72af439c2e7bdefd2173676d62a6370510b4b9175a1c38c9eacfc261ac5810155812aface16a8d766b9e416bb32830b4b6a1145c73bc3258e91094eb438efb0370c8cc6711206da47baeabb3fc141360e57e9efe4405a6a6ae6841cb1c5d3d599b334acc60983ebc4d59fc9b41c4faf0c5e2ec60e611cd70981f0b57bd0a2d377a28ade8e94887632f3e3da16e8928ecb19a2a14f8b1ab70619a3832d32f68c324b7041739bb1f073b6a910d81dafeff7bf85a73ab5c2195a9ff2857af0cde077e02b2c9465"}, @ss_cap={0xa, 0x10, 0x3, 0xbc0e2d0b777236db, 0x8, 0x0, 0x1, 0x1}]}, 0x2, [{0x49, &(0x7f0000000680)=ANY=[@ANYBLOB="490388bd8b0c4b120f90b66742d5d615d48380dc9fb8b7aff6ec37676407008fceb5481de394ca62ea212c3bf240b84b640434ed38fd669e592ead7df5a18cce205d190f232679f4d18d8460a7061e010f4fe2183d5247221f"]}, {0xc7, &(0x7f0000000340)=ANY=[@ANYBLOB="c7036559657b98bd55ac9984ac8872b6b5b9afeb354cd352ed89ec055db59e6b4b6385b4eeecd44bb05cab94f3af7d84394b161d7fa15e79553c86b96acab0a5e737d5113a400bfd71b0c06c1022df38e6e05aa064588196a3ea7c5469496c25ab1f014a9d2ba3bc72bba9cdba7f1565f1877df128836135f58f933859d01e07ca03ec23ca98489737451491af39e6a8ba9ec9a6367eee0a1ed1ede2b77862020e33a62d7e7ad0c23817f646ec0638475a7444754da900"/199]}]}) r0 = getpid() unshare(0x2c020400) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) sched_setscheduler(0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000f3ff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2a000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) prctl$PR_GET_FP_MODE(0x2e) getpid() futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000200), 0x24000001) open(0x0, 0xf7903, 0xa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) 4.165974565s ago: executing program 7 (id=2818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0) 4.021927969s ago: executing program 7 (id=2819): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000000900010073797a30000000000900020073797a32000000001400000011000100000000000000e0f4e1df000a"], 0x88}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000000900010073797a30000000000900020073797a32000000001400000011000100000000000000e0f4e1df000a"], 0x88}}, 0x0) syz_emit_ethernet(0x173, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect(0x2, 0x52, &(0x7f0000000140)=ANY=[], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xe0, &(0x7f0000000540)=ANY=[@ANYBLOB="e00347615a3c02249be267ff5a4d21f9f6906bfe42bddc9511b1f3164115c04542253d47e8feaf9842a4d1f6015fd0982a7060b6d38fb0f516572ad3045eab73f792b416c47782dcafeb212a4432d3a83061ff3fede5fa2ae80b839a767c3e56a7111ad1b796964df4c1a50353fdf9788313e0c0d93d8f92672aa1a30369f296931c3b85a03ca7ca9f80c40e5844bf27682a07a34ea51e643d68b1c2d0a9dcdc7d4acef3045cdaecdd7424be5e77f6db5b4d21659dfde30d8a5ae062d69c57af7f591e88aa3f9a0032a66cfd27e6ff9f0215c44e98b2bc3355631d71a87a903a"]}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x8800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x20084001) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x20084001) syz_usb_connect$cdc_ncm(0x2, 0xa6, &(0x7f0000000680)=ANY=[@ANYBLOB="120100c9a755c2656bbbc800020000402505a1a44000010203010902940002010620040904000001020d00000524060001052400dab50d240f01ff00000004002f468006241a09000a07240a04fa01031524120800a317a88b045e4f01a607c0ffcb7e392a152408d8b0a317a88b045e4f01a607c0ffcb7e39390ea97a000405000905020904010000020d00000904019d4cb87e0000090582020002ff040409050302400009db06d8e82379a0ed16deb4"], &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x39, 0x7, 0x5, 0x10}, 0x5a, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f0000000440)=@lang_id={0x4}}]}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000740)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x7) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.730192655s ago: executing program 4 (id=2820): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e000000208000740000000001000068008000200ac141400190003"], 0x74}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000100)={0x18, r2}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000100000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 3.314542505s ago: executing program 7 (id=2821): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr$smack_xattr_label(r7, &(0x7f0000000040)='security.SMACK64\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='.+'], 0x6, 0x3) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r10]) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040040455070000000000010902240001000040b109040000010300a10009210101000122050009058103"], 0x0) 3.073885383s ago: executing program 4 (id=2822): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x2, 0x0, 0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405668, &(0x7f0000000100)={0x7, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x59565955}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x842, 0x189, 0x0) mq_notify(r2, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x0, 0xb, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x1, 0x7ff, 0x5, 0x4, 0x9}, @multicast2, @empty, 0xff, 0x10000}}, @TCA_NAT_PARMS={0x0, 0x1, {{0xffffffff, 0xff, 0xffffffffffffffff, 0x80, 0xd5}, @broadcast, @empty}}, @TCA_NAT_PARMS={0x0, 0x1, {{0xf, 0x87, 0x10000000, 0x70, 0x2}, @multicast2, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x7fffffff, 0x5, 0xffffffffffffffff, 0xfff}, @multicast1, @multicast1, 0xff000000}}]}, {0x0, 0x6, "553e6806c10d17811e8977d79cd4a78ded41f87e0e295cf5b8264164a0e2a1aee506d26c543dc9c17d054833c6ad6bc50d02be492c26a50acb8e19ecd2a80608b856c005d80643cfd5f7393e035bf9174d7fc86de87d368863f647b2de1e073235156e0fe75fa871723c0d123d8b23e5e2b591288e543fab938c6412daa5c61e78357b2fbd26c83204282b096cd6a4614b6ff2336632e6f03f91e048d19f7f07bc7334d0c6aafc4cb5bbad6468c84d6425d782fd30569192e170756b3f71f81d5c52eec4fa64dc413698dbca498da208694f1f6c04607b9cd31bfcde86"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) madvise(&(0x7f0000341000/0x4000)=nil, 0x4000, 0x12) 2.85198551s ago: executing program 4 (id=2823): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)='C', 0x1}], 0x1) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) 2.770809424s ago: executing program 2 (id=2824): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0022220000009328337167b31ce93ee9770c0000002a0008b3b90500de980b01070100b33138e25e"], 0x0}, 0x0) 2.769742815s ago: executing program 6 (id=2825): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$video4linux(0x0, 0x92e2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00') read$FUSE(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f000001c380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000070a010100000000000000000300000324000580080001400000001a080001400000005e08000140000000000800024000325b5300000208000b4000000004"], 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/18, 0x12) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}, @generic="d7"]}, 0x20}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 2.341663787s ago: executing program 4 (id=2826): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES64=r2, @ANYBLOB="785e1068fe054d5a7b6254bbaf66dc47d871f8873f61e9c9d4ee4f9022f3503c4a7ccc6170f8afcc8e52eef82a1ac4f9918eec56ebdec04ff1fa448c2e598a659bdba332fa758768ac16bc295c744c8c6cb9d10407b9c8c6c3e685bfe0fd3e5ffa8c3b40c7b5790ba3e507244eedf5aa50dec083dcbcb7747741237d20fe3fddf97281090ecad9e8ce75bb425dedddd22f4904a60e99a79d0f93c65f7f59c2877f8d953e028d74eeb1e07c1f7e4bef298e977d75c70bc1cd1eb3bb8d144f7de060f804af09ec77d61ac6e8aed4b7606a02dd03f534c9"], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, 0x0) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) r6 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002800000000002f907864e5be33c6a8010102ac1414aa4001880bbeb9ba7ca80efb743e86633e907b8fd16c6984cdea36ddc547d2803ee847b46a33002cd17f711456761da2de0a7a09d4a8628c98b3077afcb55a81b7552abfd67ec95c85f671d0a1feceff6f9874ddd1bb4d78c84355b6b2f7403dfc11e20328f77eabe5fb130db03c5caaa71237a9cfcc12742827e04b2e1812", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) 2.179818718s ago: executing program 6 (id=2827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x2c, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000"], 0x48) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r7, r4, 0x4, r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0xfffffffe, 0x298, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007cf000/0x2000)=nil}) 1.889733588s ago: executing program 6 (id=2828): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x500}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x10000000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6, 0x1}, @jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffff4, 0x2000}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x23}, 0x94) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x500}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x10000000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6, 0x1}, @jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffff4, 0x2000}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x23}, 0x94) (async) 1.710871755s ago: executing program 6 (id=2829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0) 1.63544181s ago: executing program 6 (id=2830): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x100, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0103c6ed460b43e4cf9f26b7"], 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) 650.18068ms ago: executing program 0 (id=2831): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000003c0), 0x1, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f0000000400)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x18, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x30, 0x0]}}, 0x0, 0x2d}, 0x28) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) io_uring_enter(r3, 0x5b13, 0xb3d6, 0x1, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x8) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x0) fdatasync(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xb, 0x0, &(0x7f00000000c0)="e30080670000ec67838717", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000300)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x89ef, 0x0, 0x0, 0x1000, 0x7fffffff, 0x0, 0x3, 0xd3}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 566.364213ms ago: executing program 6 (id=2832): syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000845dcf0886124620b705010203010902aa04010003f00109047a0008ff04010009050102100000ff0909050a100002010107090508"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x8e, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x2, 0x1, 0x9, 0xb0, 0xe, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "825a8037"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xffffff68, 0x1, 0xfff9, 0x7}, {0x6, 0x24, 0x1a, 0x9, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x89, 0x4}, @dmm={0x7, 0x24, 0x14, 0x0, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x2, 0x38}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0xc2, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf9, 0x8, 0xf0}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x7, 0x26}}}}}}}]}}, &(0x7f0000000100)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x6, 0x4, 0x8, 0x10, 0x8}, 0x64, &(0x7f0000000180)={0x5, 0xf, 0x64, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0xbd, 0x5, 0x7fffff8, 0xf000, 0x100, [0xc00f, 0x3f, 0xc000, 0xff00c0, 0x180c0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xcc, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x2, 0xf000, 0x4, [0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0xff, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b4917a5e8d232c3df6d3f97004693930"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xf, 0x1, 0x1}]}, 0x1, [{0x85, &(0x7f0000000200)=@string={0x85, 0x3, "1d16068d85209a42c864b29abbfd22e5a0d0cd523d3ab7f37bd2a2f34894c1efb101d61537e7422236ffebd72c25680e50f109d1d9ca2d068a6b87d68b6e41c098f2031b40870ba3c01ca9d93901b4581c25070b847df10971a66b02d61ec0b41535830e23a2389325568d7a0434f207e36e91722a52b26f53bb293b8556b8d24eb963"}}]}) 166.389108ms ago: executing program 7 (id=2833): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@getnexthop={0x28, 0x6a, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='fd', 0x0, r3) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 0s ago: executing program 7 (id=2834): r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0x2, 0x4e27, @loopback}, 0x10) kernel console output (not intermixed with test programs): d): slcan off ttyS3. [ 816.779633][ T43] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 816.905065][T13347] tmpfs: Bad value for 'mpol' [ 816.914567][T13347] tmpfs: Bad value for 'mpol' [ 816.949093][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 816.965929][ T43] usb 8-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=a5.52 [ 816.975242][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.987694][ T43] usb 8-1: Product: syz [ 816.991964][ T43] usb 8-1: Manufacturer: syz [ 816.992868][T13350] syz_tun: entered allmulticast mode [ 816.996562][ T43] usb 8-1: SerialNumber: syz [ 817.009266][ T43] usb 8-1: config 0 descriptor?? [ 817.010596][T13348] syz_tun: left allmulticast mode [ 817.474796][ T5854] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 817.475298][T13339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.486925][ T5854] usb 3-1: USB disconnect, device number 78 [ 817.503766][T13339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.561007][T13339] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 817.591080][ T5937] usb 8-1: USB disconnect, device number 6 [ 817.848858][T12811] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 818.025672][T12811] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 818.037723][T12811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.061187][ T5843] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 818.071522][T12811] usb 5-1: config 0 descriptor?? [ 818.103129][T13358] binder: 13357:13358 ioctl c0306201 2000000001c0 returned -14 [ 818.113500][ T43] usb 7-1: USB disconnect, device number 17 [ 819.351579][T12811] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 819.381105][T12811] asix 5-1:0.0: probe with driver asix failed with error -71 [ 819.403093][T12811] usb 5-1: USB disconnect, device number 62 [ 819.989206][T13386] fuse: Bad value for 'user_id' [ 819.994746][T13386] fuse: Bad value for 'user_id' [ 820.991054][T13403] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 820.997626][T13403] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 821.029375][T13403] vhci_hcd vhci_hcd.0: Device attached [ 821.078862][T13405] vhci_hcd: connection closed [ 821.079112][T11064] vhci_hcd: stop threads [ 821.553979][T11064] vhci_hcd: release socket [ 821.576079][T11064] vhci_hcd: disconnect device [ 821.618904][ T5894] vhci_hcd: vhci_device speed not set [ 821.848895][ T5920] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 822.001638][ T5920] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 822.029863][ T5920] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.041291][ T5920] usb 8-1: config 0 descriptor?? [ 822.061844][T13414] Bluetooth: MGMT ver 1.23 [ 822.812661][T13432] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1997'. [ 823.358527][T13440] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 823.368128][T13440] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 823.382152][T13440] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 823.450337][T13441] No source specified [ 823.474525][T13410] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 823.915286][T13443] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1991'. [ 823.937609][T13410] VFS: Can't find a romfs filesystem on dev nullb0. [ 823.937609][T13410] [ 823.978846][T13452] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2001'. [ 824.600247][ T5920] usb 8-1: Cannot set autoneg [ 824.605219][ T5920] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 824.789053][ T5920] usb 8-1: USB disconnect, device number 7 [ 830.582485][T13511] (syz.4.2015,13511,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 830.591690][T13511] (syz.4.2015,13511,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 831.734654][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2020'. [ 831.989592][T13537] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 832.063351][ T5894] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 832.488902][ T5894] usb 3-1: device descriptor read/64, error -71 [ 832.779178][ T5894] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 832.853619][T13544] trusted_key: encrypted_key: insufficient parameters specified [ 833.548885][ T5894] usb 3-1: device descriptor read/64, error -71 [ 833.704825][ T5894] usb usb3-port1: attempt power cycle [ 833.854571][T13548] trusted_key: encrypted_key: insufficient parameters specified [ 835.028545][ T5894] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 835.609109][T13564] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2029'. [ 835.618599][T13564] netlink: 'syz.6.2029': attribute type 9 has an invalid length. [ 835.626855][T13564] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2029'. [ 835.636322][T13564] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2029'. [ 836.228593][ T5894] usb 3-1: device not accepting address 81, error -71 [ 837.796428][T13595] trusted_key: encrypted_key: insufficient parameters specified [ 839.617979][T13615] IPVS: Error connecting to the multicast addr [ 839.788975][ T5894] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 840.883931][T13621] IPVS: Scheduler module ip_vs_sip not found [ 840.978914][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 841.181731][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 841.249006][ T5894] usb 5-1: config 1 interface 0 has no altsetting 0 [ 841.260083][ T5894] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 841.269366][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.277382][ T5894] usb 5-1: Product: syz [ 841.281908][ T9113] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 841.290413][ T5894] usb 5-1: Manufacturer: syz [ 841.295278][ T5894] usb 5-1: SerialNumber: syz [ 841.811291][ T9113] usb 8-1: device descriptor read/64, error -71 [ 841.827936][T13610] l2tp_ppp: sess 2/0: no socket in recv [ 841.873447][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input34 [ 841.908993][ T5193] bcm5974 5-1:1.0: could not read from device [ 841.916086][ T5894] usb 5-1: USB disconnect, device number 63 [ 841.935659][ T5193] bcm5974 5-1:1.0: could not read from device [ 842.049155][ T9113] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 842.238809][ T9113] usb 8-1: device descriptor read/64, error -71 [ 842.459607][ T9113] usb usb8-port1: attempt power cycle [ 842.868842][ T9113] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 842.913306][ T9113] usb 8-1: device descriptor read/8, error -71 [ 843.169118][ T9113] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 843.239425][ T9113] usb 8-1: device descriptor read/8, error -71 [ 843.288827][ T5920] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 843.363127][ T9113] usb usb8-port1: unable to enumerate USB device [ 843.486325][ T5920] usb 7-1: config index 0 descriptor too short (expected 126, got 72) [ 843.509891][ T5920] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 843.567856][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.608437][ T5920] usb 7-1: Product: syz [ 843.631075][ T5920] usb 7-1: Manufacturer: syz [ 843.635702][ T5920] usb 7-1: SerialNumber: syz [ 843.708669][T13656] binder: BINDER_SET_CONTEXT_MGR already set [ 843.715560][T13656] binder: 13654:13656 ioctl 4018620d 200000000040 returned -16 [ 843.749885][ T5920] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 843.801353][ T9113] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 844.150020][T13661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.193913][T13661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.785266][ T5937] usb 7-1: USB disconnect, device number 18 [ 845.170429][ T9113] usb 7-1: Service connection timeout for: 256 [ 845.548777][ T9113] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 845.557237][ T9113] ath9k_htc: Failed to initialize the device [ 845.627593][ T5937] usb 7-1: ath9k_htc: USB layer deinitialized [ 845.947994][T13679] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 846.339910][T13678] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2061'. [ 846.349128][T13678] netlink: 'syz.0.2061': attribute type 5 has an invalid length. [ 846.534433][T13685] loop6: detected capacity change from 0 to 7 [ 846.553897][T13685] Dev loop6: unable to read RDB block 7 [ 846.571297][T13685] loop6: unable to read partition table [ 846.589714][T13685] loop6: partition table beyond EOD, truncated [ 846.601550][T13685] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 847.090141][T13691] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 847.110136][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 848.415953][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2068'. [ 848.896134][T13704] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 849.749068][ T5920] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 849.968911][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 850.029464][ T5920] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 850.356213][ T5920] usb 5-1: config 0 has no interface number 0 [ 850.390270][ T5920] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 850.466529][ T5920] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 850.494645][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.527305][ T5920] usb 5-1: Product: syz [ 850.530897][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2075'. [ 850.551169][ T5920] usb 5-1: Manufacturer: syz [ 850.566601][ T5920] usb 5-1: SerialNumber: syz [ 850.570792][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2075'. [ 850.594340][ T5920] usb 5-1: config 0 descriptor?? [ 850.717801][T13743] fuse: Unknown parameter 'f@0x0000000000000003' [ 850.755038][T13743] ceph: separator ':' missing in source [ 850.777475][T13740] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 851.151297][T13752] netlink: 'syz.0.2079': attribute type 30 has an invalid length. [ 851.721208][T13724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.776529][T13761] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2081'. [ 851.791922][ T5920] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.214/input/input35 [ 851.801768][T13724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.966845][ T5920] usb 5-1: USB disconnect, device number 64 [ 855.331296][ T9332] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 855.719409][ T5937] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 855.742003][ T9332] usb 8-1: Using ep0 maxpacket: 8 [ 855.905941][ T9332] usb 8-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 855.926248][ T9332] usb 8-1: config 0 has an invalid interface number: 237 but max is 3 [ 855.958436][ T9332] usb 8-1: config 0 has an invalid interface number: 9 but max is 3 [ 855.983960][ T9332] usb 8-1: config 0 has an invalid interface number: 81 but max is 3 [ 856.006983][ T9332] usb 8-1: config 0 has no interface number 0 [ 856.019870][ T9332] usb 8-1: config 0 has no interface number 1 [ 856.094911][T13822] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2095'. [ 856.108924][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 856.225605][ T9332] usb 8-1: config 0 has no interface number 3 [ 856.438771][ T5937] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 856.490717][ T9332] usb 8-1: config 0 interface 2 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 856.578785][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.587319][ T9332] usb 8-1: config 0 interface 2 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 856.607954][ T9332] usb 8-1: config 0 interface 2 altsetting 6 endpoint 0xF has invalid maxpacket 1040, setting to 64 [ 856.635655][ T5937] pvrusb2: Hardware description: Terratec Grabster AV400 [ 856.642975][ T9332] usb 8-1: config 0 interface 2 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 856.654714][ T5937] pvrusb2: ********** [ 856.664261][ T5937] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 856.675645][ T9332] usb 8-1: config 0 interface 2 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 856.687623][ T5937] pvrusb2: Important functionality might not be entirely working. [ 856.697066][ T9332] usb 8-1: config 0 interface 2 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 856.707910][ T5937] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 856.719935][ T9332] usb 8-1: config 0 interface 2 altsetting 6 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 856.730870][ T5937] pvrusb2: ********** [ 856.735934][ T9332] usb 8-1: config 0 interface 2 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 856.753581][ T9332] usb 8-1: config 0 interface 237 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 856.767464][ T9332] usb 8-1: config 0 interface 237 altsetting 8 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 856.822469][ T9332] usb 8-1: config 0 interface 237 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 856.829625][ T5920] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 856.837894][ T9332] usb 8-1: config 0 interface 237 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0 [ 856.842064][T13807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.851571][ T9332] usb 8-1: config 0 interface 237 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 856.874081][T13807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.910779][ T9332] usb 8-1: config 0 interface 9 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 856.915392][ T2345] pvrusb2: Invalid write control endpoint [ 856.939086][ T9332] usb 8-1: config 0 interface 9 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 856.968766][ T9332] usb 8-1: config 0 interface 9 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 856.988795][ T9332] usb 8-1: config 0 interface 9 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 857.002524][ T2345] pvrusb2: Invalid write control endpoint [ 857.008636][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 857.018462][ T9332] usb 8-1: config 0 interface 9 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 857.020487][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 857.029251][ T9332] usb 8-1: config 0 interface 9 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 857.045442][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 857.054627][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 857.067312][ T9332] usb 8-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 857.073105][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.078284][ T2345] pvrusb2: Device being rendered inoperable [ 857.095417][ T9332] usb 8-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 857.103447][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 857.111131][ T5937] usb 3-1: USB disconnect, device number 83 [ 857.122298][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 857.130159][ T9332] usb 8-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 857.130260][ T9332] usb 8-1: config 0 interface 81 altsetting 0 has an endpoint descriptor with address 0x43, changing to 0x3 [ 857.130354][ T9332] usb 8-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 857.130416][ T9332] usb 8-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 857.130456][ T9332] usb 8-1: config 0 interface 81 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 857.141469][ T5920] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 857.165488][ T9332] usb 8-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 857.178856][ T43] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 857.224319][ T2345] pvrusb2: Attached sub-driver cx25840 [ 857.227257][ T9332] usb 8-1: config 0 interface 81 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 857.233597][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.253113][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 857.254248][ T9332] usb 8-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 857.263380][ T5920] usb 5-1: Product: syz [ 857.263397][ T5920] usb 5-1: Manufacturer: syz [ 857.263412][ T5920] usb 5-1: SerialNumber: syz [ 857.263845][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 857.275242][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 857.303983][ T9332] usb 8-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 857.314829][ T9332] usb 8-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0x81, skipping [ 857.325680][ T9332] usb 8-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 857.337514][ T9332] usb 8-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 857.348267][ T9332] usb 8-1: config 0 interface 2 has no altsetting 0 [ 857.355014][ T9332] usb 8-1: config 0 interface 237 has no altsetting 0 [ 857.361910][ T9332] usb 8-1: config 0 interface 9 has no altsetting 0 [ 857.395344][ T5920] usb 5-1: config 0 descriptor?? [ 857.415043][ T5920] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 857.426290][ T9332] usb 8-1: string descriptor 0 read error: -71 [ 857.429198][ T5920] usb 5-1: selecting invalid altsetting 1 [ 857.438912][ T9332] usb 8-1: New USB device found, idVendor=1bc7, idProduct=1080, bcdDevice=56.a2 [ 857.439184][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 857.448034][ T9332] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.465502][ T9332] usb 8-1: config 0 descriptor?? [ 857.479603][ T9332] usb 8-1: can't set config #0, error -71 [ 857.499465][ T9332] usb 8-1: USB disconnect, device number 12 [ 857.499642][ T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.534416][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 857.555732][ T43] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 857.585704][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.604168][ T43] usb 7-1: Product: syz [ 857.612477][ T43] usb 7-1: Manufacturer: syz [ 857.627419][ T43] usb 7-1: SerialNumber: syz [ 857.633347][ T5920] gspca_stk014: init reg: 0x00 [ 857.638406][ T5920] stk014 5-1:0.0: probe with driver stk014 failed with error -5 [ 857.873902][ T5854] usb 5-1: USB disconnect, device number 65 [ 858.019018][ T9332] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 858.718933][ T9332] usb 8-1: Using ep0 maxpacket: 16 [ 858.730281][ T9332] usb 8-1: config 0 has an invalid interface number: 15 but max is 0 [ 858.742949][ T9332] usb 8-1: config 0 has no interface number 0 [ 858.759523][ T9332] usb 8-1: New USB device found, idVendor=05ac, idProduct=e7da, bcdDevice=4b.a9 [ 858.778210][ T43] usb 7-1: 0:2 : does not exist [ 858.789131][ T43] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 858.795885][ T9332] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.833099][ T9332] usb 8-1: Product: syz [ 858.837384][ T9332] usb 8-1: Manufacturer: syz [ 858.855707][ T9332] usb 8-1: SerialNumber: syz [ 858.869364][ T43] usb 7-1: USB disconnect, device number 19 [ 858.910667][ T9332] usb 8-1: config 0 descriptor?? [ 858.926935][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2106'. [ 858.937278][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2106'. [ 859.133822][ T9332] ipheth 8-1:0.15: Unable to find alternate settings interface [ 859.227276][ T9332] usb 8-1: USB disconnect, device number 13 [ 860.769032][ T9332] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 860.985852][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2115'. [ 861.605066][ T9332] usb 7-1: Using ep0 maxpacket: 8 [ 861.691971][ T9332] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 861.708894][ T9332] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 861.724915][ T9332] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 861.736081][ T9332] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 861.747777][ T9332] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 861.758164][ T9332] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.771839][ T9332] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 861.781931][ T9332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.822012][ T9332] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 861.858973][ T5920] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 862.009397][ T5920] usb 5-1: device descriptor read/64, error -71 [ 862.464904][ T43] usb 7-1: USB disconnect, device number 20 [ 862.569115][ T5920] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 862.699232][ T5920] usb 5-1: device descriptor read/64, error -71 [ 862.809470][ T5920] usb usb5-port1: attempt power cycle [ 863.159521][ T5920] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 863.308995][ T5920] usb 5-1: device descriptor read/8, error -71 [ 863.658898][ T5920] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 863.689422][ T5920] usb 5-1: device descriptor read/8, error -71 [ 863.799406][ T5920] usb usb5-port1: unable to enumerate USB device [ 863.838840][ T43] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 864.012108][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.022839][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 864.045377][ T43] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 864.055638][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 864.065633][ T43] usb 3-1: SerialNumber: syz [ 864.426649][ T43] usb 3-1: 0:2 : does not exist [ 864.444185][ T43] usb 3-1: unit 5 not found! [ 864.499345][ T43] usb 3-1: USB disconnect, device number 84 [ 864.822534][ T30] audit: type=1800 audit(1755946014.768:2422): pid=13932 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.2128" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 865.550933][T13941] overlayfs: failed to resolve './file1': -2 [ 867.008605][T13956] FAULT_INJECTION: forcing a failure. [ 867.008605][T13956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.022197][T13956] CPU: 1 UID: 0 PID: 13956 Comm: syz.2.2133 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 867.022223][T13956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 867.022236][T13956] Call Trace: [ 867.022244][T13956] [ 867.022253][T13956] dump_stack_lvl+0x189/0x250 [ 867.022280][T13956] ? __pfx____ratelimit+0x10/0x10 [ 867.022302][T13956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 867.022324][T13956] ? __pfx__printk+0x10/0x10 [ 867.022371][T13956] should_fail_ex+0x414/0x560 [ 867.022398][T13956] _copy_to_user+0x31/0xb0 [ 867.022427][T13956] simple_read_from_buffer+0xe1/0x170 [ 867.022454][T13956] proc_fail_nth_read+0x1df/0x250 [ 867.022482][T13956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 867.022509][T13956] ? rw_verify_area+0x258/0x650 [ 867.022538][T13956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 867.022563][T13956] vfs_read+0x200/0x980 [ 867.022598][T13956] ? __pfx___mutex_lock+0x10/0x10 [ 867.022621][T13956] ? __pfx_vfs_read+0x10/0x10 [ 867.022651][T13956] ? __fget_files+0x2a/0x420 [ 867.022679][T13956] ? __fget_files+0x3a0/0x420 [ 867.022699][T13956] ? __fget_files+0x2a/0x420 [ 867.022731][T13956] ksys_read+0x145/0x250 [ 867.022751][T13956] ? __pfx_ksys_read+0x10/0x10 [ 867.022769][T13956] ? rcu_is_watching+0x15/0xb0 [ 867.022791][T13956] ? trace_sys_enter+0x25/0x120 [ 867.022816][T13956] do_syscall_64+0xfa/0x3b0 [ 867.022839][T13956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.022857][T13956] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 867.022876][T13956] ? clear_bhb_loop+0x60/0xb0 [ 867.022900][T13956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.022918][T13956] RIP: 0033:0x7fc172f8d5fc [ 867.022936][T13956] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 867.022953][T13956] RSP: 002b:00007fc173d75030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 867.022979][T13956] RAX: ffffffffffffffda RBX: 00007fc1731b6180 RCX: 00007fc172f8d5fc [ 867.022993][T13956] RDX: 000000000000000f RSI: 00007fc173d750a0 RDI: 0000000000000009 [ 867.023005][T13956] RBP: 00007fc173d75090 R08: 0000000000000000 R09: 0000000000000000 [ 867.023017][T13956] R10: 0000000040010021 R11: 0000000000000246 R12: 0000000000000001 [ 867.023030][T13956] R13: 00007fc1731b6218 R14: 00007fc1731b6180 R15: 00007ffec565dcf8 [ 867.023063][T13956] [ 867.353064][T13955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 867.639098][ T9332] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 867.820291][ T9332] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.837644][ T9332] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 867.847443][ T9332] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.447060][ T9332] usb 8-1: config 0 descriptor?? [ 869.680369][ T9332] usbhid 8-1:0.0: can't add hid device: -71 [ 869.689243][ T9332] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 869.711557][ T9332] usb 8-1: USB disconnect, device number 14 [ 869.740599][T13979] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2141'. [ 869.849285][T13981] loop6: detected capacity change from 0 to 63 [ 869.857760][T13981] buffer_io_error: 6 callbacks suppressed [ 869.857771][T13981] Buffer I/O error on dev loop6, logical block 0, async page read [ 869.858814][ T5854] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 869.884369][T13981] Buffer I/O error on dev loop6, logical block 0, async page read [ 869.893132][T13981] Buffer I/O error on dev loop6, logical block 0, async page read [ 869.901482][T13981] Buffer I/O error on dev loop6, logical block 0, async page read [ 869.957429][ T30] audit: type=1326 audit(1755946019.898:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13980 comm="syz.6.2142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb3ed8ebe9 code=0x0 [ 869.960076][T13981] Buffer I/O error on dev loop6, logical block 0, async page read [ 870.004358][T13981] Buffer I/O error on dev loop6, logical block 0, async page read [ 870.013485][T13981] Buffer I/O error on dev loop6, logical block 0, async page read [ 870.028777][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 870.034617][T13981] Buffer I/O error on dev loop6, logical block 0, async page read [ 870.044964][ T5854] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.047891][T13981] ldm_validate_partition_table(): Disk read failed. [ 870.094807][ T5854] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 870.116636][ T5854] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 870.136873][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.143686][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.157615][T13981] Buffer I/O error on dev loop6, logical block 0, async page read [ 870.177514][ T5854] usb 5-1: config 1 interface 0 has no altsetting 1 [ 870.184649][T13981] Buffer I/O error on dev loop6, logical block 0, async page read [ 870.198462][T13981] Dev loop6: unable to read RDB block 0 [ 870.207068][ T5854] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 870.220928][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.242344][T13981] loop6: unable to read partition table [ 870.248982][T13981] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 870.257433][ T5854] usb 5-1: Product: syz [ 870.272663][ T5854] usb 5-1: Manufacturer: syz [ 870.277375][ T5854] usb 5-1: SerialNumber: syz [ 870.290239][ T5854] cdc_ncm 5-1:1.0: skipping garbage [ 870.295828][ T5854] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 870.302976][ T5854] cdc_ncm 5-1:1.0: bind() failure [ 870.504002][ T9113] usb 5-1: USB disconnect, device number 70 [ 870.578983][ T43] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 870.728815][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 870.740348][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 870.754674][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 870.773371][ T43] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 870.782827][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.789215][ T5854] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 870.795057][ T43] usb 3-1: Product: syz [ 870.803261][ T43] usb 3-1: Manufacturer: syz [ 870.807879][ T43] usb 3-1: SerialNumber: syz [ 870.829628][ T43] usb 3-1: config 0 descriptor?? [ 870.978845][ T5854] usb 8-1: device descriptor read/64, error -71 [ 871.126047][T13989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.155824][T13989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.228935][ T5854] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 871.249767][ T43] usb_8dev 3-1:0.0 can0: sending command message failed [ 871.257235][ T43] usb_8dev 3-1:0.0 can0: can't get firmware version [ 871.320134][ T43] usb_8dev 3-1:0.0: probe with driver usb_8dev failed with error -22 [ 871.398184][T14011] trusted_key: encrypted_key: insufficient parameters specified [ 871.998797][ T5854] usb 8-1: device descriptor read/64, error -71 [ 872.038072][ T43] usb 3-1: USB disconnect, device number 85 [ 872.176202][ T5854] usb usb8-port1: attempt power cycle [ 873.238341][ T5854] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 874.743851][ T5937] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 876.487200][ T5937] usb 5-1: device descriptor read/64, error -71 [ 877.275266][ T5854] usb 8-1: device descriptor read/8, error -71 [ 877.838351][T14035] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2158'. [ 878.145392][T14042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2159'. [ 878.491451][T14045] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2162'. [ 878.561740][T14047] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 878.592636][T14047] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 880.638822][ T5937] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 880.859115][ T5937] usb 8-1: Using ep0 maxpacket: 32 [ 880.869303][ T5937] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 880.883240][ T5937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 880.962850][ T5937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 880.975625][ T5937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 881.005595][ T5937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 881.040134][ T5937] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 881.072532][ T5937] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.102838][ T5937] usb 8-1: Product: syz [ 881.107105][ T5937] usb 8-1: Manufacturer: syz [ 881.125445][ T5937] usb 8-1: SerialNumber: syz [ 881.225739][ T5937] usb 8-1: config 0 descriptor?? [ 881.494236][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 881.510369][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 881.522121][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 881.536439][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 881.561536][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 881.649824][T14093] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2172'. [ 881.820419][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 881.990962][ T43] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 881.998789][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 882.109693][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 882.119120][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 882.139006][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 882.176367][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 882.192897][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 882.229640][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 882.248807][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 882.262848][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 882.283472][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 882.292380][ T43] usb 7-1: config 4 has an invalid interface number: 51 but max is 0 [ 882.304124][ T43] usb 7-1: config 4 has no interface number 0 [ 882.305510][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 882.326623][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 882.331872][ T43] usb 7-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 882.353515][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 882.374235][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 882.381616][ T43] usb 7-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 882.433511][ T43] usb 7-1: config 4 interface 51 has no altsetting 0 [ 882.482770][ T5937] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 882.488875][ T43] usb 7-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 882.488905][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.488924][ T43] usb 7-1: Product: syz [ 882.488938][ T43] usb 7-1: Manufacturer: syz [ 882.488953][ T43] usb 7-1: SerialNumber: syz [ 882.498570][ T30] audit: type=1800 audit(1755946032.408:2424): pid=14100 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2177" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 882.542564][T14091] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 882.555331][ T5937] input input37: Timeout waiting for response from device. [ 882.564495][T14091] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 882.614486][ T5937] usb 8-1: USB disconnect, device number 19 [ 882.791335][T14091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.805455][T14091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.817934][ T43] cdc_eem 7-1:4.51: probe with driver cdc_eem failed with error -71 [ 882.844586][ T43] usb 7-1: USB disconnect, device number 21 [ 882.864651][T14108] tipc: New replicast peer: 255.255.255.255 [ 882.873656][T14108] tipc: Enabled bearer , priority 10 [ 882.919106][ T10] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 883.098493][T14112] input: syz1 as /devices/virtual/input/input38 [ 883.115408][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 883.125448][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.139999][ T10] usb 3-1: config 0 descriptor?? [ 884.101550][ T5854] tipc: Node number set to 3133285633 [ 884.382322][ T5937] kernel write not supported for file bpf-prog (pid: 5937 comm: kworker/0:5) [ 884.394458][ T5937] kernel write not supported for file bpf-prog (pid: 5937 comm: kworker/0:5) [ 884.421362][ T10] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 884.705820][T14142] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 885.545827][ T10] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 885.553970][ T10] [drm] Initialized udl on minor 2 [ 885.570972][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 885.595056][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 885.620055][ T5854] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 885.621004][ T30] audit: type=1800 audit(1755946035.508:2425): pid=14138 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2188" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 885.639339][ T5854] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 885.735799][T14145] fuse: Bad value for 'fd' [ 885.820885][ T10] usb 3-1: USB disconnect, device number 86 [ 885.999219][ T5854] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 886.163468][ T5854] usb 7-1: Using ep0 maxpacket: 16 [ 886.180793][ T5854] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 886.189592][ T5854] usb 7-1: config 252 has no interface number 0 [ 886.196008][ T5854] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 886.231227][ T5854] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 886.241072][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.260490][ T5854] usb 7-1: Product: syz [ 886.275456][ T5854] usb 7-1: Manufacturer: syz [ 886.285601][ T5854] usb 7-1: SerialNumber: syz [ 886.322650][ T5854] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 887.246956][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2201'. [ 887.271619][ T5894] usb 7-1: USB disconnect, device number 22 [ 887.288331][ T36] usb 7-1: Failed to submit usb control message: -71 [ 887.296799][ T36] usb 7-1: unable to send the bmi data to the device: -71 [ 887.317072][ T36] usb 7-1: unable to get target info from device [ 887.325107][ T36] usb 7-1: could not get target info (-71) [ 887.335271][ T36] usb 7-1: could not probe fw (-71) [ 888.379043][T14196] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 889.002644][T14198] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 889.097207][T14202] syzkaller1: entered promiscuous mode [ 889.104513][T14202] syzkaller1: entered allmulticast mode [ 889.235199][T14208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2209'. [ 889.313563][ T5894] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 889.489518][ T5894] usb 8-1: Using ep0 maxpacket: 16 [ 889.518034][ T5894] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 889.540127][ T5894] usb 8-1: config 1 has no interface number 0 [ 889.560212][ T5894] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 889.566003][T14213] sctp: [Deprecated]: syz.6.2212 (pid 14213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 889.566003][T14213] Use struct sctp_sack_info instead [ 889.571236][T14214] netlink: 'syz.0.2211': attribute type 29 has an invalid length. [ 889.605114][ T5894] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 889.619309][ T5894] usb 8-1: config 1 interface 105 has no altsetting 0 [ 889.633822][ T5894] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 889.643515][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.657220][ T5894] usb 8-1: Product: syz [ 889.679685][ T5894] usb 8-1: Manufacturer: syz [ 889.797013][ T5894] usb 8-1: SerialNumber: syz [ 889.813552][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2211'. [ 889.831046][T14200] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 890.560864][T14200] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 891.105664][ T30] audit: type=1326 audit(1755946041.048:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14212 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3ed8ebe9 code=0x7fc00000 [ 891.131477][T14224] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 891.568865][ T30] audit: type=1326 audit(1755946041.328:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14212 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb3ed2ade9 code=0x7fc00000 [ 891.682943][ T5894] aqc111 8-1:1.105: probe with driver aqc111 failed with error -71 [ 891.741841][ T5894] usb 8-1: USB disconnect, device number 20 [ 894.110812][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2214'. [ 894.516532][T14273] team_slave_0: entered promiscuous mode [ 894.524499][T14273] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 894.532659][T14273] team0: Device macvtap1 is already an upper device of the team interface [ 894.937775][T14273] team_slave_0: left promiscuous mode [ 895.010732][T14277] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (254) [ 897.327169][T14281] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2224'. [ 897.858979][T14309] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2229'. [ 898.097097][T14319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.106540][T14319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.290512][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 898.740938][ T43] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 898.908811][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 898.925239][T14332] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2239'. [ 898.933208][ T43] usb 3-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 898.948884][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.989054][ T43] usb 3-1: Product: syz [ 898.993262][ T43] usb 3-1: Manufacturer: syz [ 898.997852][ T43] usb 3-1: SerialNumber: syz [ 899.050000][ T43] usb 3-1: config 0 descriptor?? [ 899.269047][ T43] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 899.306762][ T43] usb 3-1: USB disconnect, device number 87 [ 899.554334][ T5937] hid-generic 0000:0D17:0000.0017: unknown main item tag 0x0 [ 899.591526][ T5937] hid-generic 0000:0D17:0000.0017: unknown main item tag 0x0 [ 899.632905][ T5937] hid-generic 0000:0D17:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 900.011699][T14347] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2242'. [ 900.580152][T14352] bond_slave_0: entered promiscuous mode [ 900.586393][T14352] bond_slave_1: entered promiscuous mode [ 900.588347][T14350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.620243][T14351] bond_slave_0: left promiscuous mode [ 900.622244][T14350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.626205][T14351] bond_slave_1: left promiscuous mode [ 900.654885][T14350] program syz.2.2243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 900.878775][ T5854] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 901.018731][ T5854] usb 8-1: device descriptor read/64, error -71 [ 901.028771][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 901.187291][ T10] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 901.199692][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.216910][ T10] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 901.229785][ T10] usb 7-1: config 1 has no interface number 1 [ 901.236000][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 901.254675][ T10] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 901.275761][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 901.285363][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.295519][ T5854] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 901.307287][ T10] usb 7-1: Product: syz [ 901.315994][ T43] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 901.317743][ T10] usb 7-1: Manufacturer: syz [ 901.333592][ T10] usb 7-1: SerialNumber: syz [ 901.449172][ T5854] usb 8-1: device descriptor read/64, error -71 [ 901.465167][T14367] binder: 14365:14367 ioctl c0306201 200000000640 returned -22 [ 901.495926][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 901.521069][ T43] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 901.535117][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 901.561710][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 901.575151][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 901.583379][ T43] usb 3-1: Product: syz [ 901.587745][ T43] usb 3-1: Manufacturer: syz [ 901.589069][ T5854] usb usb8-port1: attempt power cycle [ 901.595957][ T43] usb 3-1: SerialNumber: syz [ 901.628490][T14359] 8021q: VLANs not supported on sit0 [ 901.841010][ T43] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 88 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 902.110337][ T5854] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 902.427770][ T5937] usb 3-1: USB disconnect, device number 88 [ 902.438284][ T5937] usblp0: removed [ 902.443345][ T5854] usb 8-1: device descriptor read/8, error -71 [ 902.759573][T14378] fuse: Bad value for 'fd' [ 902.788921][ T5854] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 902.819592][ T5854] usb 8-1: device descriptor read/8, error -71 [ 902.932860][ T5854] usb usb8-port1: unable to enumerate USB device [ 903.827200][T14411] netlink: 'syz.2.2263': attribute type 1 has an invalid length. [ 903.941315][T14414] bond2 (unregistering): Released all slaves [ 903.959768][ T10] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 903.978758][ T10] usb 7-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 904.036336][T14411] bond2: entered promiscuous mode [ 904.049958][T14411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 904.108009][ T10] usb 7-1: USB disconnect, device number 23 [ 904.746057][T14416] overlay: Unknown parameter 'obj_type' [ 905.546251][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2269'. [ 906.123508][T14458] /dev/nullb0: Can't open blockdev [ 906.553437][T14472] 9pnet_fd: Insufficient options for proto=fd [ 907.271890][T14477] netlink: 'syz.4.2280': attribute type 10 has an invalid length. [ 907.298591][T14477] syz_tun: entered promiscuous mode [ 907.336355][T14482] ptrace attach of "./syz-executor exec"[5851] was attempted by ""[14482] [ 907.355007][T14477] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 907.570888][ T5894] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 907.991024][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 907.999967][ T5894] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 908.008095][ T5894] usb 3-1: config 0 has no interface number 0 [ 908.031637][ T5894] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 908.148261][T14503] tmpfs: Bad value for 'mpol' [ 908.604353][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.628820][ T5894] usb 3-1: Product: syz [ 908.634187][ T5894] usb 3-1: Manufacturer: syz [ 908.638981][ T5894] usb 3-1: SerialNumber: syz [ 908.650737][ T5894] usb 3-1: config 0 descriptor?? [ 908.659501][ T5894] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 908.874370][ T5894] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 908.946187][ T5894] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 908.956904][ T43] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 909.141252][ T43] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 909.178778][ T43] usb 7-1: config 0 has no interface number 0 [ 909.197507][ T43] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.228811][ T43] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.252362][ T43] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 909.288747][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.318301][ T43] usb 7-1: config 0 descriptor?? [ 909.363674][T14510] comedi comedi3: comedi_config --init_data is deprecated [ 909.767769][T14524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2291'. [ 909.948924][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2291'. [ 910.174028][ T43] uclogic 0003:256C:006D.0018: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input1 [ 910.321005][T14530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2294'. [ 910.432391][ T10] usb 7-1: USB disconnect, device number 24 [ 911.258557][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 911.259075][ T10] usb 3-1: USB disconnect, device number 89 [ 911.292100][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 911.380989][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 911.429546][ T10] quatech2 3-1:0.51: device disconnected [ 911.712827][T14544] overlayfs: failed to resolve './file1': -2 [ 912.081856][T14565] misc userio: No port type given on /dev/userio [ 912.109157][ T43] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 912.328930][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 912.454520][ T43] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.979139][ T43] usb 8-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 913.013364][ T43] usb 8-1: config 0 interface 0 has no altsetting 0 [ 913.030437][ T43] usb 8-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 913.058784][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.113997][ T43] usb 8-1: config 0 descriptor?? [ 913.535352][T14558] binder: binder_mmap: 14557 200000000000-200000b36000 bad vm_flags failed -1 [ 913.587266][ T43] usbhid 8-1:0.0: can't add hid device: -71 [ 913.600141][ T43] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 913.621074][ T43] usb 8-1: USB disconnect, device number 25 [ 913.838102][T14587] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2310'. [ 914.030426][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2313'. [ 914.104209][T14598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 914.144257][T14598] bond_slave_0: entered promiscuous mode [ 914.150622][T14598] bond_slave_1: entered promiscuous mode [ 914.159919][T14598] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 914.187140][T14598] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 914.258751][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 914.453088][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 914.483512][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 914.515172][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 914.548453][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 914.559297][T14620] pim6reg1: entered promiscuous mode [ 914.578820][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 914.587529][T14620] pim6reg1: entered allmulticast mode [ 914.627401][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.651069][ T10] usb 7-1: config 0 descriptor?? [ 914.866576][T14629] Cannot find del_set index 286 as target [ 914.887810][T14575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.906126][T14575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.914919][T14631] 9pnet_fd: Insufficient options for proto=fd [ 915.192915][T14575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.204071][T14575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.302736][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 915.309521][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 915.322673][ T10] usb 7-1: USB disconnect, device number 25 [ 915.899955][T14655] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 916.085776][T14658] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.095217][T14658] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.104254][T14658] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.113728][T14658] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.196300][T14658] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.206045][T14658] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.215352][T14658] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.226858][T14658] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.579839][T14678] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2331'. [ 917.267811][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2335'. [ 917.304945][T14683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2335'. [ 918.519363][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2341'. [ 918.535972][T14713] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2341'. [ 918.748864][ T9332] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 918.908863][ T9332] usb 3-1: Using ep0 maxpacket: 16 [ 918.944844][ T9332] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 918.977483][ T9332] usb 3-1: config 1 has no interface number 0 [ 919.010259][ T9332] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 919.043011][ T9332] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 919.086257][ T9332] usb 3-1: config 1 interface 105 has no altsetting 0 [ 919.112363][ T9332] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 919.133199][ T9332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.141514][ T10] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 919.158737][ T9332] usb 3-1: Product: syz [ 919.168947][ T9332] usb 3-1: Manufacturer: syz [ 919.183963][ T9332] usb 3-1: SerialNumber: syz [ 919.202523][T14711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 919.237483][T14711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 919.308739][ T10] usb 7-1: device descriptor read/64, error -71 [ 919.548830][ T10] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 919.681700][T14711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 919.690944][T14711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 919.698824][ T10] usb 7-1: device descriptor read/64, error -71 [ 919.821219][ T10] usb usb7-port1: attempt power cycle [ 920.668189][ T9332] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 920.748845][ T10] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 920.779019][ T9332] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 920.800835][T14750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2352'. [ 920.817369][ T9332] aqc111 3-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, de:c1:ef:80:c7:8c [ 920.831344][ T10] usb 7-1: device descriptor read/8, error -71 [ 920.855406][T14753] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2351'. [ 921.010018][T14711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.055841][T14711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.082925][ T10] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 921.122531][ T43] usb 3-1: USB disconnect, device number 90 [ 921.131337][ T43] aqc111 3-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 921.131349][ T10] usb 7-1: device descriptor read/8, error -71 [ 921.210744][ T43] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 921.254140][ T43] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 921.282922][ T43] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 921.299497][ T10] usb usb7-port1: unable to enumerate USB device [ 921.620628][ T43] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 921.849228][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 921.860603][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.889785][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 921.922642][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 921.939229][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.994597][ T43] usb 3-1: Product: syz [ 922.004386][ T43] usb 3-1: Manufacturer: syz [ 922.223602][ T43] usb 3-1: SerialNumber: syz [ 922.227026][T14774] bond0: entered promiscuous mode [ 922.280567][T14774] bond_slave_0: entered promiscuous mode [ 922.286491][T14774] bond_slave_1: entered promiscuous mode [ 922.693204][T14766] ubi: mtd0 is already attached to ubi31 [ 922.840855][T14765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.914608][T14765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.002596][ T43] usb 3-1: 0:2 : does not exist [ 923.018941][ T43] usb 3-1: USB disconnect, device number 91 [ 923.449292][ T5920] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 924.179326][ T5920] usb 7-1: Using ep0 maxpacket: 8 [ 924.191894][ T5920] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 924.205164][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.226681][ T5920] pvrusb2: Hardware description: Terratec Grabster AV400 [ 924.245649][ T5920] pvrusb2: ********** [ 924.256915][ T5920] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 924.287477][ T5920] pvrusb2: Important functionality might not be entirely working. [ 924.296991][ T5920] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 924.353879][ T5920] pvrusb2: ********** [ 924.790248][ T2345] pvrusb2: Invalid write control endpoint [ 924.895017][ T2345] pvrusb2: Invalid write control endpoint [ 924.910849][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 924.933167][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 924.948435][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 924.962015][ T2345] pvrusb2: Device being rendered inoperable [ 924.968090][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 924.977266][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 924.991540][T14785] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2359'. [ 925.011527][ T10] usb 7-1: USB disconnect, device number 30 [ 925.025008][ T2345] pvrusb2: Attached sub-driver cx25840 [ 925.033152][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 925.046332][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 925.425977][T14824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.425977][T14817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.735183][T14830] xt_CT: No such helper "snmp" [ 925.778821][ T5920] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 926.010300][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 926.189184][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.276885][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 926.334631][ T5920] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 926.355193][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 926.378446][ T5920] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 926.388091][ T5920] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 926.403158][ T5920] usb 3-1: Manufacturer: syz [ 926.414431][ T5920] usb 3-1: config 0 descriptor?? [ 926.505682][T14836] GUP no longer grows the stack in syz.4.2375 (14836): 200000005000-200000008000 (200000004000) [ 926.554238][T14836] CPU: 1 UID: 0 PID: 14836 Comm: syz.4.2375 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 926.554266][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 926.554277][T14836] Call Trace: [ 926.554286][T14836] [ 926.554294][T14836] dump_stack_lvl+0x189/0x250 [ 926.554326][T14836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.554349][T14836] ? __pfx__printk+0x10/0x10 [ 926.554370][T14836] ? find_vma+0xe7/0x160 [ 926.554404][T14836] fixup_user_fault+0x661/0x720 [ 926.554440][T14836] fault_in_user_writeable+0x72/0xe0 [ 926.554466][T14836] futex_lock_pi+0x283/0xa60 [ 926.554503][T14836] ? __pfx_futex_lock_pi+0x10/0x10 [ 926.554527][T14836] ? get_futex_key+0x880/0x1640 [ 926.554602][T14836] ? __pfx_futex_wake_mark+0x10/0x10 [ 926.554640][T14836] ? __lock_acquire+0xab9/0xd20 [ 926.554666][T14836] ? bpf_trace_run2+0x186/0x4b0 [ 926.554697][T14836] do_futex+0x292/0x420 [ 926.554734][T14836] ? __pfx_do_futex+0x10/0x10 [ 926.554759][T14836] ? bpf_trace_run2+0x322/0x4b0 [ 926.554790][T14836] __se_sys_futex+0x36f/0x400 [ 926.554820][T14836] ? __pfx___se_sys_futex+0x10/0x10 [ 926.554847][T14836] ? rcu_is_watching+0x15/0xb0 [ 926.554868][T14836] ? trace_sys_enter+0x25/0x120 [ 926.554883][T14836] ? __x64_sys_futex+0x21/0xf0 [ 926.554909][T14836] do_syscall_64+0xfa/0x3b0 [ 926.554931][T14836] ? lockdep_hardirqs_on+0x9c/0x150 [ 926.554952][T14836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.554969][T14836] ? clear_bhb_loop+0x60/0xb0 [ 926.554989][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.555006][T14836] RIP: 0033:0x7f0a55d8ebe9 [ 926.555024][T14836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.555041][T14836] RSP: 002b:00007f0a56b12038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 926.555061][T14836] RAX: ffffffffffffffda RBX: 00007f0a55fb5fa0 RCX: 00007f0a55d8ebe9 [ 926.555075][T14836] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 926.555089][T14836] RBP: 00007f0a55e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 926.555101][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.555113][T14836] R13: 00007f0a55fb6038 R14: 00007f0a55fb5fa0 R15: 00007ffeefe23368 [ 926.555149][T14836] [ 926.788302][T14823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.797086][T14823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.807022][ T5920] usb 3-1: USB disconnect, device number 92 [ 928.077301][T14867] input: syz1 as /devices/virtual/input/input39 [ 929.603160][ T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 929.914917][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 930.358466][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2391'. [ 930.374943][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 930.400413][ T10] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 930.418773][ T10] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 930.438967][ T10] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 930.464238][ T10] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 930.484880][ T10] usb 8-1: config 1 interface 0 has no altsetting 0 [ 930.526325][ T10] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 930.580093][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.605886][ T10] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 930.709197][ T5894] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 930.825908][ T10] scsi host1: usb-storage 8-1:1.0 [ 930.881028][ T5894] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 930.902823][ T5894] usb 3-1: config 0 has no interface number 0 [ 930.924303][ T5894] usb 3-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a [ 930.958064][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.966579][ T5894] usb 3-1: Product: syz [ 930.974816][ T5894] usb 3-1: Manufacturer: syz [ 930.979644][ T5894] usb 3-1: SerialNumber: syz [ 930.987303][ T5894] usb 3-1: config 0 descriptor?? [ 931.414670][ T5894] snd_usb_variax 3-1:0.113: Line 6 Variax Workbench found [ 931.425816][ T5894] usb 3-1: selecting invalid altsetting 1 [ 931.431626][ T5894] snd_usb_variax 3-1:0.113: set_interface failed [ 931.438181][ T5894] snd_usb_variax 3-1:0.113: Line 6 Variax Workbench now disconnected [ 931.450306][ T5894] snd_usb_variax 3-1:0.113: probe with driver snd_usb_variax failed with error -22 [ 931.555475][T14904] program syz.6.2393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 931.630473][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.140508][ T5894] usb 3-1: USB disconnect, device number 93 [ 932.141811][ T36] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 932.181324][T14906] fuse: Bad value for 'fd' [ 932.266763][ T36] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 932.826263][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2398'. [ 932.850494][T14927] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.858274][T14927] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.285527][T14935] pty pty21: ldisc open failed (-12), clearing slot 21 [ 934.013597][ T10] usb 8-1: USB disconnect, device number 26 [ 934.652264][T11066] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 934.676924][T11066] sd 1:0:0:0: [sdb] Sense not available. [ 934.694798][T11066] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 934.705771][T11066] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 934.790080][T11066] sd 1:0:0:0: [sdb] Write Protect is off [ 934.796114][T11066] sd 1:0:0:0: [sdb] Asking for cache data failed [ 934.802645][T11066] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 934.872570][T14933] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 934.964511][T14933] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 935.373718][T14933] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 935.395057][T14933] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 935.403864][T11066] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 935.796180][T14958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2408'. [ 937.205218][ T9155] Bluetooth: hci4: command 0x0405 tx timeout [ 937.424220][ T9155] Bluetooth: hci0: command 0x0406 tx timeout [ 938.139574][T14986] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2415'. [ 939.251753][ T9155] Bluetooth: hci4: command 0x0405 tx timeout [ 939.490413][ T9155] Bluetooth: hci0: command 0x0406 tx timeout [ 940.559209][T15011] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2421'. [ 940.816206][T15015] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 940.823275][T15015] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 940.830304][T15004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2419'. [ 940.869240][T15015] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 940.876988][T15015] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 940.936175][T15015] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 940.955273][T15015] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 940.972109][T15004] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.017148][T15015] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 942.046252][ T30] audit: type=1326 audit(1755946091.978:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15022 comm="syz.0.2423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7f438ebe9 code=0x0 [ 942.233783][T15026] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 944.613584][T15044] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 944.623255][T15044] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 946.378107][T15067] netlink: 'syz.7.2435': attribute type 10 has an invalid length. [ 946.387718][T15067] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2435'. [ 946.397150][T15067] ipvlan1: entered promiscuous mode [ 946.402649][T15067] ipvlan1: entered allmulticast mode [ 946.407930][T15067] veth0_vlan: entered allmulticast mode [ 946.416361][T15067] bridge0: port 3(ipvlan1) entered blocking state [ 946.422959][T15067] bridge0: port 3(ipvlan1) entered disabled state [ 946.432754][T15067] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 946.518785][ T5854] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 946.599837][T15066] random: crng reseeded on system resumption [ 946.760584][ T5854] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 946.801470][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.816717][ T5854] usb 7-1: config 0 descriptor?? [ 946.831143][ T5854] cp210x 7-1:0.0: cp210x converter detected [ 946.839330][ T43] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 947.029289][ T43] usb 8-1: device descriptor read/64, error -71 [ 947.732420][T15078] fuse: Bad value for 'fd' [ 948.080888][ T43] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 949.916335][T15090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2441'. [ 950.027876][ T43] usb 8-1: device descriptor read/64, error -71 [ 950.139265][ T43] usb usb8-port1: attempt power cycle [ 950.295192][T15097] netlink: 'syz.0.2442': attribute type 2 has an invalid length. [ 950.305344][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2442'. [ 950.363997][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2443'. [ 950.388366][T15102] loop2: detected capacity change from 0 to 7 [ 950.414406][T15102] Dev loop2: unable to read RDB block 7 [ 950.420381][T15102] loop2: unable to read partition table [ 950.428054][T15102] loop2: partition table beyond EOD, truncated [ 950.436420][T15100] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 950.442968][T15100] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 950.448067][T15102] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 950.462818][T15100] vhci_hcd vhci_hcd.0: Device attached [ 950.476384][T15100] vhci_hcd vhci_hcd.0: port 0 already used [ 950.570836][T15103] vhci_hcd: connection closed [ 950.571286][ T36] vhci_hcd: stop threads [ 950.586753][ T36] vhci_hcd: release socket [ 950.591329][ T36] vhci_hcd: disconnect device [ 950.971790][T15112] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2445'. [ 951.624729][ T5854] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 951.641458][ T5854] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 951.649426][ T5854] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 951.680417][ T5854] usb 7-1: cp210x converter now attached to ttyUSB0 [ 951.705729][ T5854] usb 7-1: USB disconnect, device number 31 [ 951.719546][ T5854] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 951.731669][ T5854] cp210x 7-1:0.0: device disconnected [ 956.748784][T15146] (syz.2.2455,15146,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 956.758355][T15146] (syz.2.2455,15146,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 959.998708][ T43] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 960.368332][T15177] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 960.371423][T15176] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 962.214644][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2471'. [ 962.319908][T15199] netlink: 'syz.2.2471': attribute type 1 has an invalid length. [ 962.480048][T15221] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2476'. [ 963.651163][T15238] (syz.0.2482,15238,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 963.660737][T15238] (syz.0.2482,15238,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 964.237779][T15243] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2481'. [ 965.632378][T15256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2486'. [ 965.924415][T15260] bridge1: entered promiscuous mode [ 967.075733][ T30] audit: type=1326 audit(1755946116.078:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f438ebe9 code=0x7ffc0000 [ 967.668712][ T30] audit: type=1326 audit(1755946116.088:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f438ebe9 code=0x7ffc0000 [ 967.829951][T15281] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2493'. [ 967.972874][ T30] audit: type=1326 audit(1755946116.818:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe7f438ebe9 code=0x7ffc0000 [ 968.134984][ T30] audit: type=1326 audit(1755946116.818:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f438ebe9 code=0x7ffc0000 [ 968.398854][ T30] audit: type=1326 audit(1755946116.818:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f438ebe9 code=0x7ffc0000 [ 968.455601][ T30] audit: type=1326 audit(1755946117.068:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7f4390b07 code=0x7ffc0000 [ 968.683619][ T30] audit: type=1326 audit(1755946117.068:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe7f4390a7c code=0x7ffc0000 [ 969.017220][ T30] audit: type=1326 audit(1755946117.558:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe7f43909b4 code=0x7ffc0000 [ 969.125544][T15292] /dev/nullb0: Can't lookup blockdev [ 969.537947][T11066] Bluetooth: (null): Too short H5 packet [ 969.551732][ T30] audit: type=1326 audit(1755946117.558:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe7f43909b4 code=0x7ffc0000 [ 969.569360][T11066] Bluetooth: (null): Invalid header checksum [ 969.603354][T11066] Bluetooth: (null): Invalid header checksum [ 969.652427][ T36] Bluetooth: (null): Invalid header checksum [ 969.694486][ T30] audit: type=1326 audit(1755946117.558:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15259 comm="syz.0.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe7f438d84a code=0x7ffc0000 [ 970.968467][T15320] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(3) [ 970.975025][T15320] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 970.987210][T15320] vhci_hcd vhci_hcd.0: Device attached [ 970.999761][T15320] x_tables: duplicate underflow at hook 1 [ 971.006562][T15321] vhci_hcd: connection closed [ 971.006750][T11066] vhci_hcd: stop threads [ 971.576961][T11066] vhci_hcd: release socket [ 971.581273][ T43] usb 33-2: new high-speed USB device number 4 using vhci_hcd [ 971.582623][T11066] vhci_hcd: disconnect device [ 971.831116][T15327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2506'. [ 972.237199][T15328] bridge0: entered promiscuous mode [ 972.267901][T15328] macvlan2: entered promiscuous mode [ 972.379003][T15328] macvlan3: entered promiscuous mode [ 972.678919][ T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 972.958720][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 973.544860][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.556808][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.596158][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 973.628750][ T10] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 973.643313][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.718011][ T10] usb 3-1: config 0 descriptor?? [ 974.484031][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input40 [ 974.511178][ T10] shield 0003:0955:7214.0019: Registered Thunderstrike controller [ 974.521236][ T10] shield 0003:0955:7214.0019: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 975.629263][ T5854] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 975.656766][ T5854] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 975.691377][ T5854] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 975.759052][ T10] usb 3-1: reset high-speed USB device number 94 using dummy_hcd [ 975.804167][ T5854] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 976.571123][ T9332] usb 3-1: USB disconnect, device number 94 [ 976.779089][ T43] vhci_hcd: vhci_device speed not set [ 980.288730][ T5894] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 980.297267][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 981.489289][ T5894] usb 3-1: device descriptor read/64, error -32 [ 981.739028][ T5894] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 981.922108][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 981.951530][ T5894] usb 3-1: not running at top speed; connect to a high speed hub [ 982.007236][ T5894] usb 3-1: config 187 interface 0 altsetting 8 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 982.121777][ T5894] usb 3-1: config 187 interface 0 altsetting 8 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 982.177610][ T5894] usb 3-1: config 187 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 982.232543][T15408] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2532'. [ 982.256578][ T5894] usb 3-1: config 187 interface 0 has no altsetting 0 [ 982.297052][ T5894] usb 3-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=e2.be [ 982.338433][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.386189][ T5894] usb 3-1: Product: syz [ 982.398876][ T5894] usb 3-1: Manufacturer: syz [ 982.425695][ T5894] usb 3-1: SerialNumber: syz [ 982.472392][T15400] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 982.482899][T15400] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 986.147572][T15427] netlink: 'syz.6.2539': attribute type 10 has an invalid length. [ 986.220492][T15427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.434264][T15427] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 986.555924][T15428] bond0: entered promiscuous mode [ 986.697538][T15428] bond_slave_0: entered promiscuous mode [ 986.733612][T15428] bond_slave_1: entered promiscuous mode [ 986.767302][T15428] batadv0: entered promiscuous mode [ 986.983777][T15435] netlink: 'syz.4.2541': attribute type 11 has an invalid length. [ 988.667334][ T5894] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 988.961149][ T5894] usb 3-1: USB disconnect, device number 96 [ 989.939110][T15428] netlink: 'syz.6.2539': attribute type 1 has an invalid length. [ 990.033501][T15428] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2539'. [ 991.931917][T15453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2545'. [ 991.955461][T15453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2545'. [ 992.001418][T15444] pim6reg: entered allmulticast mode [ 994.824129][T15466] gtp0: entered promiscuous mode [ 994.835139][T15466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2550'. [ 995.023222][T15472] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 995.230647][T15479] overlayfs: failed to clone upperpath [ 995.578182][T15487] trusted_key: encrypted_key: insufficient parameters specified [ 996.833071][T15492] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2558'. [ 1001.733213][T15520] trusted_key: encrypted_key: insufficient parameters specified [ 1001.903113][T15527] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2570'. [ 1002.463707][ T9155] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 1002.475275][T15530] gtp0: entered promiscuous mode [ 1003.289939][ T10] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1003.299418][T15550] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 1003.468940][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1003.480828][ T10] usb 8-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 1003.507199][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 1003.518500][ T10] usb 8-1: New USB device found, idVendor=22dc, idProduct=0001, bcdDevice= 0.01 [ 1003.532057][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.589183][ T10] usb 8-1: config 0 descriptor?? [ 1003.996958][T15565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2581'. [ 1004.599245][T15562] xt_CT: No such helper "syz0" [ 1004.619048][T15562] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2582'. [ 1004.716460][T15571] 9pnet_fd: Insufficient options for proto=fd [ 1006.508371][ T9332] usb 8-1: USB disconnect, device number 31 [ 1007.479966][ T9113] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1007.940406][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2594'. [ 1008.112918][T15615] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2596'. [ 1008.263993][T15620] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1008.299840][T15620] macsec2: entered allmulticast mode [ 1008.432307][T15620] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1008.677680][T15620] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1008.698763][T15620] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1011.198973][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1011.198992][ T30] audit: type=1800 audit(1755946161.028:2443): pid=15651 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2607" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 1011.224610][ C1] vkms_vblank_simulate: vblank timer overrun [ 1011.932275][T15667] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2610'. [ 1013.120477][ T43] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1013.892800][ T43] usb 8-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1013.931495][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.018998][ T43] usb 8-1: Product: syz [ 1014.023206][ T43] usb 8-1: Manufacturer: syz [ 1014.048018][ T43] usb 8-1: SerialNumber: syz [ 1014.118066][ T43] usb 8-1: config 0 descriptor?? [ 1014.243173][ T43] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1014.270071][T15694] SET target dimension over the limit! [ 1014.728950][ T43] sonixb 8-1:0.0: Error writing register 01: -71 [ 1014.735412][ T43] sonixb 8-1:0.0: probe with driver sonixb failed with error -71 [ 1014.860474][ T43] usb 8-1: USB disconnect, device number 32 [ 1015.039268][T15702] trusted_key: encrypted_key: insufficient parameters specified [ 1015.660929][T15725] syzkaller0: entered promiscuous mode [ 1015.666573][T15725] syzkaller0: entered allmulticast mode [ 1015.825262][T15726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2623'. [ 1016.318822][ T9332] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1016.513711][ T9332] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.550615][ T9332] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.575550][ T9332] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1016.817206][ T9332] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1016.858010][ T9332] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1016.883326][ T9332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.895625][ T9332] usb 3-1: config 0 descriptor?? [ 1017.138921][T15745] trusted_key: encrypted_key: insufficient parameters specified [ 1017.383046][T15748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2631'. [ 1017.470239][ T9332] uclogic 0003:28BD:0042.001A: interface is invalid, ignoring [ 1017.582906][ T30] audit: type=1800 audit(1755946167.468:2444): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2632" name="bus" dev="tmpfs" ino=3006 res=0 errno=0 [ 1017.680892][ T9332] usb 3-1: USB disconnect, device number 97 [ 1019.400748][T15781] overlayfs: failed to clone upperpath [ 1019.696057][T15783] trusted_key: encrypted_key: insufficient parameters specified [ 1019.814114][T15785] netlink: 'syz.2.2641': attribute type 10 has an invalid length. [ 1021.037758][ T5854] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1021.118056][T15802] tipc: Started in network mode [ 1021.128860][T15802] tipc: Node identity ac14140f, cluster identity 4711 [ 1021.139148][T15802] tipc: New replicast peer: 172.30.0.8 [ 1021.144920][T15802] tipc: Enabled bearer , priority 10 [ 1021.191289][ T5854] usb 7-1: Using ep0 maxpacket: 16 [ 1021.218259][ T5854] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.252387][ T5854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1021.285781][ T5854] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1021.307969][ T5854] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1021.326864][ T5854] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1021.345664][ T5854] usb 7-1: Manufacturer: syz [ 1021.360782][T15802] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1021.360782][T15802] program syz.7.2647 not setting count and/or reply_len properly [ 1021.393950][ T5854] usb 7-1: config 0 descriptor?? [ 1022.182632][ T5894] tipc: Node number set to 2886997007 [ 1022.526134][T15813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2651'. [ 1022.708661][ T5854] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1022.878816][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 1023.024720][ T10] usb 7-1: USB disconnect, device number 33 [ 1023.063287][ T5854] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1023.088087][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.100734][ T5854] usb 3-1: Product: syz [ 1023.105091][ T5854] usb 3-1: Manufacturer: syz [ 1023.122723][ T5854] usb 3-1: SerialNumber: syz [ 1023.131836][ T5854] usb 3-1: config 0 descriptor?? [ 1023.142945][ T5854] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 1023.346280][ T5854] usb 3-1: USB disconnect, device number 98 [ 1024.232405][T15837] (syz.2.2658,15837,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1024.242781][T15837] (syz.2.2658,15837,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1025.277574][ T5854] IPVS: starting estimator thread 0... [ 1025.372186][T15854] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1025.439317][T15853] IPVS: using max 49 ests per chain, 117600 per kthread [ 1025.448937][T15854] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1025.910974][T15860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'. [ 1026.430236][ T30] audit: type=1800 audit(1755946176.358:2445): pid=15865 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.2664" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 1026.594921][T15872] trusted_key: encrypted_key: insufficient parameters specified [ 1027.258874][T15885] (syz.0.2670,15885,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1027.268114][T15885] (syz.0.2670,15885,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1027.716942][T15899] netlink: 'syz.0.2676': attribute type 11 has an invalid length. [ 1027.724895][T15899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2676'. [ 1027.734447][T15899] netlink: 'syz.0.2676': attribute type 11 has an invalid length. [ 1027.742401][T15899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2676'. [ 1028.898698][T15906] trusted_key: encrypted_key: insufficient parameters specified [ 1030.068809][ T10] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1030.072310][T15922] CIFS mount error: No usable UNC path provided in device string! [ 1030.072310][T15922] [ 1030.098932][T15922] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1030.122007][T15922] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000004 [ 1030.221792][ T10] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1030.252910][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.275962][ T10] usb 7-1: config 0 descriptor?? [ 1030.294085][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2685'. [ 1030.306875][T15928] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2685'. [ 1030.378688][ T9113] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1030.418429][T15931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1030.543515][ T9113] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1030.555579][ T9113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1030.566557][ T9113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1030.576490][ T9113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1030.589728][ T9113] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1030.598828][ T9113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.609791][ T9113] usb 3-1: config 0 descriptor?? [ 1030.857501][T15896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.866542][T15896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.976685][ T9113] usbhid 3-1:0.0: can't add hid device: -71 [ 1030.985735][ T9113] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1031.003837][ T9113] usb 3-1: USB disconnect, device number 99 [ 1031.427365][ T10] pegasus 7-1:0.0: probe with driver pegasus failed with error -121 [ 1031.589393][T15938] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2691'. [ 1031.662163][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2692'. [ 1032.418297][T15951] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2695'. [ 1032.495570][T15951] tipc: Enabled bearer , priority 0 [ 1032.520048][T15951] syzkaller0: entered promiscuous mode [ 1032.526990][T15951] syzkaller0: entered allmulticast mode [ 1032.650381][T15951] tipc: Resetting bearer [ 1032.671282][T15951] syzkaller0: tun_net_xmit 90 [ 1032.681761][T15951] netlink: 'syz.2.2695': attribute type 2 has an invalid length. [ 1032.699937][T15951] netlink: 'syz.2.2695': attribute type 8 has an invalid length. [ 1032.707748][T15951] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2695'. [ 1032.738431][T15950] tipc: Resetting bearer [ 1032.777363][T15950] tipc: Disabling bearer [ 1032.957091][ T43] usb 7-1: USB disconnect, device number 34 [ 1033.002042][ T5854] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1033.497616][T15961] kernel profiling enabled (shift: 9) [ 1033.598638][ T5854] usb 8-1: Using ep0 maxpacket: 16 [ 1033.616864][ T5854] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1033.642651][ T5854] usb 8-1: config 159 has an invalid interface number: 195 but max is 0 [ 1033.654632][ T5854] usb 8-1: config 159 has no interface number 0 [ 1033.668367][ T5854] usb 8-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1033.682720][ T5854] usb 8-1: config 159 interface 195 has no altsetting 0 [ 1033.755985][T15973] (syz.6.2703,15973,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1033.765541][T15973] (syz.6.2703,15973,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1034.166744][T15971] batadv_slave_1: entered promiscuous mode [ 1034.177143][ T5854] usb 8-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 1034.188491][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.215638][T15970] batadv_slave_1: left promiscuous mode [ 1034.221344][ T5854] usb 8-1: Product: syz [ 1034.225943][ T5854] usb 8-1: Manufacturer: syz [ 1034.232012][ T5854] usb 8-1: SerialNumber: syz [ 1034.448134][ T5854] udl 8-1:159.195: [drm] Unrecognized vendor firmware descriptor [ 1034.456710][ T5854] [drm:udl_init] *ERROR* Selecting channel failed [ 1034.474210][ T5854] [drm] Initialized udl 0.0.1 for 8-1:159.195 on minor 2 [ 1034.481473][ T5854] [drm] Initialized udl on minor 2 [ 1034.717392][T15980] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2704'. [ 1035.087487][ T5854] udl 8-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1035.116723][ T5854] udl 8-1:159.195: [drm] Cannot find any crtc or sizes [ 1035.132184][ T5983] udl 8-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1035.159168][ T5983] udl 8-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1035.168020][ T5854] usb 8-1: USB disconnect, device number 33 [ 1035.273616][ T5983] udl 8-1:159.195: [drm] Cannot find any crtc or sizes [ 1036.473242][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'. [ 1036.487229][T16009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2713'. [ 1037.893302][T16020] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1039.867131][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2722'. [ 1040.022641][T16049] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1040.029984][T16049] overlayfs: failed to set xattr on upper [ 1040.035698][T16049] overlayfs: ...falling back to redirect_dir=nofollow. [ 1040.042606][T16049] overlayfs: ...falling back to index=off. [ 1040.048402][T16049] overlayfs: ...falling back to uuid=null. [ 1040.093543][T16051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2723'. [ 1040.114144][T16051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2723'. [ 1042.192613][T16082] netlink: 'syz.4.2730': attribute type 303 has an invalid length. [ 1042.370338][T16089] batadv0: entered promiscuous mode [ 1042.394954][T16089] bond0: entered promiscuous mode [ 1042.421402][T16089] bond_slave_0: entered promiscuous mode [ 1042.439170][T16089] bond_slave_1: entered promiscuous mode [ 1042.455779][T16089] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1042.485786][T16089] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 1042.500717][T16090] delete_channel: no stack [ 1042.513003][T16089] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 1042.574044][T16089] hsr1: entered allmulticast mode [ 1042.587965][T16089] batadv0: entered allmulticast mode [ 1042.668870][T16089] bond0: entered allmulticast mode [ 1042.674216][T16089] bond_slave_0: entered allmulticast mode [ 1042.693522][T16089] bond_slave_1: entered allmulticast mode [ 1042.711930][T16089] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 1042.734820][T16089] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1043.198862][T16101] FAULT_INJECTION: forcing a failure. [ 1043.198862][T16101] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.212331][T16101] CPU: 0 UID: 0 PID: 16101 Comm: syz.7.2734 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1043.212357][T16101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1043.212369][T16101] Call Trace: [ 1043.212378][T16101] [ 1043.212388][T16101] dump_stack_lvl+0x189/0x250 [ 1043.212414][T16101] ? __pfx____ratelimit+0x10/0x10 [ 1043.212436][T16101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1043.212457][T16101] ? __pfx__printk+0x10/0x10 [ 1043.212483][T16101] ? __lock_acquire+0xab9/0xd20 [ 1043.212513][T16101] should_fail_ex+0x414/0x560 [ 1043.212539][T16101] should_failslab+0xa8/0x100 [ 1043.212562][T16101] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1043.212581][T16101] ? sctp_get_port_local+0x6bb/0x1610 [ 1043.212614][T16101] sctp_get_port_local+0x6bb/0x1610 [ 1043.212654][T16101] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1043.212687][T16101] ? sctp_bind_addr_match+0x28b/0x2b0 [ 1043.212724][T16101] sctp_do_bind+0x4ea/0x940 [ 1043.212766][T16101] sctp_connect_new_asoc+0x25c/0x690 [ 1043.212799][T16101] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1043.212826][T16101] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1043.212854][T16101] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1043.212876][T16101] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1043.212902][T16101] sctp_sendmsg+0x155c/0x2810 [ 1043.212942][T16101] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1043.212989][T16101] ? sock_rps_record_flow+0x19/0x410 [ 1043.213013][T16101] ? inet_sendmsg+0x2f4/0x370 [ 1043.213037][T16101] __sock_sendmsg+0x19c/0x270 [ 1043.213065][T16101] ____sys_sendmsg+0x52d/0x830 [ 1043.213100][T16101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1043.213140][T16101] ? import_iovec+0x74/0xa0 [ 1043.213171][T16101] ___sys_sendmsg+0x21f/0x2a0 [ 1043.213207][T16101] ? __pfx____sys_sendmsg+0x10/0x10 [ 1043.213277][T16101] ? __fget_files+0x2a/0x420 [ 1043.213299][T16101] ? __fget_files+0x3a0/0x420 [ 1043.213333][T16101] __sys_sendmmsg+0x227/0x430 [ 1043.213369][T16101] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1043.213410][T16101] ? bpf_trace_run2+0x322/0x4b0 [ 1043.213460][T16101] ? rcu_is_watching+0x15/0xb0 [ 1043.213486][T16101] __x64_sys_sendmmsg+0xa0/0xc0 [ 1043.213519][T16101] do_syscall_64+0xfa/0x3b0 [ 1043.213542][T16101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.213561][T16101] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1043.213581][T16101] ? clear_bhb_loop+0x60/0xb0 [ 1043.213604][T16101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.213623][T16101] RIP: 0033:0x7f452058ebe9 [ 1043.213642][T16101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1043.213660][T16101] RSP: 002b:00007f4521389038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1043.213682][T16101] RAX: ffffffffffffffda RBX: 00007f45207b6090 RCX: 00007f452058ebe9 [ 1043.213696][T16101] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000007 [ 1043.213709][T16101] RBP: 00007f4521389090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.213728][T16101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1043.213740][T16101] R13: 00007f45207b6128 R14: 00007f45207b6090 R15: 00007ffcb1929148 [ 1043.213772][T16101] [ 1043.986919][T16109] netlink: 'syz.2.2737': attribute type 5 has an invalid length. [ 1044.017125][T16109] netlink: 'syz.2.2737': attribute type 1 has an invalid length. [ 1044.047268][T16109] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2737'. [ 1044.358744][ T5983] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1044.383799][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2739'. [ 1044.407196][T16122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2739'. [ 1045.348672][ T5983] usb 3-1: Using ep0 maxpacket: 8 [ 1045.381609][ T5983] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1045.403477][ T5983] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1045.419502][ T5983] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1045.427838][ T5983] usb 3-1: Product: syz [ 1045.434100][ T5983] usb 3-1: Manufacturer: syz [ 1045.440243][T16131] veth1_macvtap: left promiscuous mode [ 1045.445908][ T5983] usb 3-1: SerialNumber: syz [ 1045.452747][T16131] macsec0: entered allmulticast mode [ 1045.464227][T16131] veth1_macvtap: entered promiscuous mode [ 1045.470289][T16131] veth1_macvtap: entered allmulticast mode [ 1045.476431][T16131] macsec0: left allmulticast mode [ 1045.482253][T16131] veth1_macvtap: left allmulticast mode [ 1045.664692][ T5983] usb 3-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 1045.911519][ T5854] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1046.186808][ T5983] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1046.201495][ T5983] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1046.218060][ T5983] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 1046.229471][ T5983] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1046.242270][ T5983] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1046.258065][ T5983] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1046.269260][ T5983] usb 3-1: USB disconnect, device number 100 [ 1046.282399][ T5983] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1046.301137][ T5983] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1046.311648][ T5983] visor 3-1:1.0: device disconnected [ 1046.401016][T16148] Option 'TXƮ' to dns_resolver key: bad/missing value [ 1046.443337][T16146] sctp: [Deprecated]: syz.6.2746 (pid 16146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1046.443337][T16146] Use struct sctp_sack_info instead [ 1046.645629][T16153] FAULT_INJECTION: forcing a failure. [ 1046.645629][T16153] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.658583][T16153] CPU: 0 UID: 0 PID: 16153 Comm: syz.0.2747 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1046.658607][T16153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1046.658618][T16153] Call Trace: [ 1046.658627][T16153] [ 1046.658636][T16153] dump_stack_lvl+0x189/0x250 [ 1046.658666][T16153] ? __pfx____ratelimit+0x10/0x10 [ 1046.658685][T16153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1046.658706][T16153] ? __pfx__printk+0x10/0x10 [ 1046.658727][T16153] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1046.658757][T16153] ? sctp_get_port_local+0xe4c/0x1610 [ 1046.658788][T16153] should_fail_ex+0x414/0x560 [ 1046.658810][T16153] should_failslab+0xa8/0x100 [ 1046.658829][T16153] __kmalloc_cache_noprof+0x70/0x3d0 [ 1046.658847][T16153] ? sctp_add_bind_addr+0x8c/0x370 [ 1046.658867][T16153] sctp_add_bind_addr+0x8c/0x370 [ 1046.658886][T16153] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 1046.658914][T16153] sctp_do_bind+0x5ab/0x940 [ 1046.658951][T16153] sctp_connect_new_asoc+0x25c/0x690 [ 1046.658980][T16153] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1046.659004][T16153] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1046.659029][T16153] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1046.659045][T16153] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1046.659067][T16153] sctp_sendmsg+0x155c/0x2810 [ 1046.659105][T16153] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1046.659149][T16153] ? sock_rps_record_flow+0x19/0x410 [ 1046.659173][T16153] ? inet_sendmsg+0x2f4/0x370 [ 1046.659200][T16153] __sock_sendmsg+0x19c/0x270 [ 1046.659226][T16153] ____sys_sendmsg+0x52d/0x830 [ 1046.659260][T16153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1046.659296][T16153] ? import_iovec+0x74/0xa0 [ 1046.659333][T16153] ___sys_sendmsg+0x21f/0x2a0 [ 1046.659362][T16153] ? __pfx____sys_sendmsg+0x10/0x10 [ 1046.659411][T16153] ? lockdep_hardirqs_on+0x9c/0x150 [ 1046.659447][T16153] ? kasan_check_range+0x19d/0x2c0 [ 1046.659479][T16153] __sys_sendmmsg+0x227/0x430 [ 1046.659511][T16153] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1046.659548][T16153] ? bpf_trace_run2+0x322/0x4b0 [ 1046.659594][T16153] ? rcu_is_watching+0x15/0xb0 [ 1046.659621][T16153] __x64_sys_sendmmsg+0xa0/0xc0 [ 1046.659651][T16153] do_syscall_64+0xfa/0x3b0 [ 1046.659675][T16153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.659693][T16153] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1046.659712][T16153] ? clear_bhb_loop+0x60/0xb0 [ 1046.659737][T16153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.659755][T16153] RIP: 0033:0x7fe7f438ebe9 [ 1046.659773][T16153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.659791][T16153] RSP: 002b:00007fe7f25d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1046.659810][T16153] RAX: ffffffffffffffda RBX: 00007fe7f45b6180 RCX: 00007fe7f438ebe9 [ 1046.659824][T16153] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000007 [ 1046.659837][T16153] RBP: 00007fe7f25d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.659848][T16153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.659859][T16153] R13: 00007fe7f45b6218 R14: 00007fe7f45b6180 R15: 00007ffc8281c378 [ 1046.659889][T16153] [ 1047.209690][ T5920] IPVS: starting estimator thread 0... [ 1047.500068][T16154] IPVS: using max 49 ests per chain, 117600 per kthread [ 1047.964090][T16163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2751'. [ 1047.974679][T16163] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2751'. [ 1048.201773][T16166] overlayfs: missing 'lowerdir' [ 1048.416345][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2753'. [ 1049.433271][T16181] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2755'. [ 1051.122322][T16193] FAULT_INJECTION: forcing a failure. [ 1051.122322][T16193] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.135165][T16193] CPU: 0 UID: 0 PID: 16193 Comm: syz.6.2759 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1051.135194][T16193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1051.135207][T16193] Call Trace: [ 1051.135217][T16193] [ 1051.135226][T16193] dump_stack_lvl+0x189/0x250 [ 1051.135244][T16193] ? __pfx____ratelimit+0x10/0x10 [ 1051.135256][T16193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1051.135268][T16193] ? __pfx__printk+0x10/0x10 [ 1051.135285][T16193] ? __pfx___might_resched+0x10/0x10 [ 1051.135300][T16193] should_fail_ex+0x414/0x560 [ 1051.135314][T16193] should_failslab+0xa8/0x100 [ 1051.135327][T16193] __kmalloc_cache_noprof+0x70/0x3d0 [ 1051.135338][T16193] ? sctp_association_new+0x89/0x25f0 [ 1051.135357][T16193] sctp_association_new+0x89/0x25f0 [ 1051.135373][T16193] ? sctp_do_bind+0x65a/0x940 [ 1051.135395][T16193] sctp_connect_new_asoc+0x2c5/0x690 [ 1051.135412][T16193] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1051.135430][T16193] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1051.135446][T16193] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1051.135460][T16193] sctp_sendmsg+0x155c/0x2810 [ 1051.135481][T16193] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1051.135498][T16193] ? irqentry_exit+0x74/0x90 [ 1051.135509][T16193] ? lockdep_hardirqs_on+0x9c/0x150 [ 1051.135526][T16193] ? sock_rps_record_flow+0x19/0x410 [ 1051.135540][T16193] ? inet_sendmsg+0x2f4/0x370 [ 1051.135554][T16193] __sock_sendmsg+0x19c/0x270 [ 1051.135569][T16193] ____sys_sendmsg+0x52d/0x830 [ 1051.135588][T16193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1051.135609][T16193] ? import_iovec+0x74/0xa0 [ 1051.135627][T16193] ___sys_sendmsg+0x21f/0x2a0 [ 1051.135644][T16193] ? __pfx____sys_sendmsg+0x10/0x10 [ 1051.135680][T16193] ? __fget_files+0x2a/0x420 [ 1051.135691][T16193] ? __fget_files+0x3a0/0x420 [ 1051.135709][T16193] __sys_sendmmsg+0x227/0x430 [ 1051.135728][T16193] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1051.135750][T16193] ? bpf_trace_run2+0x322/0x4b0 [ 1051.135776][T16193] ? rcu_is_watching+0x15/0xb0 [ 1051.135790][T16193] __x64_sys_sendmmsg+0xa0/0xc0 [ 1051.135808][T16193] do_syscall_64+0xfa/0x3b0 [ 1051.135820][T16193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.135830][T16193] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1051.135841][T16193] ? clear_bhb_loop+0x60/0xb0 [ 1051.135853][T16193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.135864][T16193] RIP: 0033:0x7fdb3ed8ebe9 [ 1051.135874][T16193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1051.135884][T16193] RSP: 002b:00007fdb3fb64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1051.135896][T16193] RAX: ffffffffffffffda RBX: 00007fdb3efb6180 RCX: 00007fdb3ed8ebe9 [ 1051.135904][T16193] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000007 [ 1051.135911][T16193] RBP: 00007fdb3fb64090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.135917][T16193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.135924][T16193] R13: 00007fdb3efb6218 R14: 00007fdb3efb6180 R15: 00007ffe8103d0c8 [ 1051.135946][T16193] [ 1051.743291][T16191] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2758'. [ 1052.149241][T16202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2762'. [ 1052.199016][ T30] audit: type=1326 audit(1755946202.128:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16199 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f438ebe9 code=0x7ffc0000 [ 1052.297287][ T30] audit: type=1326 audit(1755946202.138:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16199 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7f438ebe9 code=0x7ffc0000 [ 1052.319684][ T30] audit: type=1326 audit(1755946202.138:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16199 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f438ebe9 code=0x7ffc0000 [ 1052.341358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1052.348314][ T30] audit: type=1326 audit(1755946202.138:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16199 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fe7f438ebe9 code=0x7ffc0000 [ 1052.370508][ T30] audit: type=1326 audit(1755946202.138:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16199 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f438ebe9 code=0x7ffc0000 [ 1052.392141][ C1] vkms_vblank_simulate: vblank timer overrun [ 1052.431515][ T30] audit: type=1326 audit(1755946202.138:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16199 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7f4390b07 code=0x7ffc0000 [ 1052.458658][ T30] audit: type=1326 audit(1755946202.138:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16199 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe7f4390a7c code=0x7ffc0000 [ 1052.486408][ T30] audit: type=1326 audit(1755946202.138:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16199 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe7f43909b4 code=0x7ffc0000 [ 1052.512174][ T30] audit: type=1326 audit(1755946202.138:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16199 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe7f43909b4 code=0x7ffc0000 [ 1052.540642][ T30] audit: type=1326 audit(1755946202.138:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16199 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe7f438d84a code=0x7ffc0000 [ 1052.910761][T16216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.979449][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2766'. [ 1052.988579][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2766'. [ 1054.438707][T16229] sctp: [Deprecated]: syz.7.2770 (pid 16229) Use of int in max_burst socket option deprecated. [ 1054.438707][T16229] Use struct sctp_assoc_value instead [ 1056.443326][T16239] futex_wake_op: syz.0.2773 tries to shift op by -33; fix this program [ 1058.003623][ T9332] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1058.181228][ T9332] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1058.209771][ T9332] usb 3-1: not running at top speed; connect to a high speed hub [ 1058.230416][ T9332] usb 3-1: config 12 has an invalid interface number: 214 but max is 0 [ 1058.243124][ T9332] usb 3-1: config 12 has no interface number 0 [ 1058.254742][ T9332] usb 3-1: config 12 interface 214 has no altsetting 0 [ 1058.264312][ T9332] usb 3-1: New USB device found, idVendor=0711, idProduct=0179, bcdDevice=a7.6d [ 1058.273645][ T9332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.282151][ T9332] usb 3-1: Product: syz [ 1058.287718][ T9332] usb 3-1: Manufacturer: syz [ 1058.292933][ T9332] usb 3-1: SerialNumber: syz [ 1058.511161][ T9332] ax88179_178a 3-1:12.214: probe with driver ax88179_178a failed with error -22 [ 1058.543516][ T9332] usb 3-1: USB disconnect, device number 101 [ 1058.575184][T16284] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2784'. [ 1058.825920][T16289] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1061.128303][T16300] fuse: Unknown parameter '֛8m_r#ً6qBi2tC墄0x0000000000000007' [ 1061.547292][T16310] (syz.0.2794,16310,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1061.558392][T16310] (syz.0.2794,16310,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1061.953819][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1061.953840][ T30] audit: type=1804 audit(1755946211.868:2461): pid=16309 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2793" name="file0" dev="tmpfs" ino=3226 res=1 errno=0 [ 1062.288765][T16317] tmpfs: Bad value for 'huge' [ 1062.362947][ T30] audit: type=1800 audit(1755946212.238:2462): pid=16317 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2797" name="bus" dev="tmpfs" ino=2903 res=0 errno=0 [ 1062.636779][T16323] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1063.898877][ T43] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1064.051666][ T43] usb 8-1: device descriptor read/64, error -71 [ 1064.308636][ T43] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1064.458709][ T43] usb 8-1: device descriptor read/64, error -71 [ 1064.498811][ T5854] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1064.659170][ T5854] usb 7-1: Using ep0 maxpacket: 8 [ 1064.665625][ T43] usb usb8-port1: attempt power cycle [ 1064.689085][ T5854] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1064.754341][ T5854] usb 7-1: config 8 has an invalid interface number: 15 but max is 0 [ 1064.771883][ T5854] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.985150][ T5854] usb 7-1: config 8 has no interface number 0 [ 1065.001066][ T5854] usb 7-1: config 8 interface 15 altsetting 128 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1065.021914][ T5854] usb 7-1: config 8 interface 15 has no altsetting 0 [ 1065.028729][ T43] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1065.067243][ T5854] usb 7-1: New USB device found, idVendor=1b3d, idProduct=0175, bcdDevice=43.61 [ 1065.076767][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.090259][ T5854] usb 7-1: Product: syz [ 1065.098758][ T5854] usb 7-1: Manufacturer: syz [ 1065.106576][ T5854] usb 7-1: SerialNumber: syz [ 1065.107877][ T43] usb 8-1: device descriptor read/8, error -71 [ 1065.346400][ T5854] ftdi_sio 7-1:8.15: FTDI USB Serial Device converter detected [ 1065.357586][ T5854] ftdi_sio ttyUSB0: unknown device type: 0x4361 [ 1065.371115][ T5854] usb 7-1: USB disconnect, device number 36 [ 1065.380517][ T5854] ftdi_sio 7-1:8.15: device disconnected [ 1065.399081][ T43] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1065.439910][ T43] usb 8-1: device descriptor read/8, error -71 [ 1065.552990][ T43] usb usb8-port1: unable to enumerate USB device [ 1066.328874][ T5854] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1066.703553][T16364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2812'. [ 1067.068765][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 1067.153234][ T5854] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1067.173761][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.185231][ T5854] usb 3-1: Product: syz [ 1067.192360][ T5854] usb 3-1: Manufacturer: syz [ 1067.197197][ T5854] usb 3-1: SerialNumber: syz [ 1067.210534][ T5854] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1067.216887][ T5854] r8152-cfgselector 3-1: config 0 descriptor?? [ 1067.335282][T16366] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1068.422628][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2820'. [ 1068.478979][T16391] openvswitch: netlink: nsh attribute has 5260 unknown bytes. [ 1068.516553][T16391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1068.825545][T16393] xt_hashlimit: max too large, truncated to 1048576 [ 1068.833710][T16393] No such timeout policy "syz1" [ 1068.943340][T16396] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2822'. [ 1068.969884][T16396] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2822'. [ 1069.109797][ T9332] r8152-cfgselector 3-1: USB disconnect, device number 102 [ 1069.128656][ T5854] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1069.372214][T16403] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2825'. [ 1069.539160][ T5854] usb 8-1: Using ep0 maxpacket: 32 [ 1069.649512][ T5854] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1069.657659][ T5854] usb 8-1: config 0 has no interface number 0 [ 1069.682205][ T5854] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1069.698772][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.707051][ T5854] usb 8-1: Product: syz [ 1069.711848][ T5854] usb 8-1: Manufacturer: syz [ 1069.716540][ T5854] usb 8-1: SerialNumber: syz [ 1069.743272][ T5854] usb 8-1: config 0 descriptor?? [ 1069.757650][ T5854] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1069.959362][ T5854] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1069.975735][ T5854] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1070.057358][T16413] trusted_key: encrypted_key: insufficient parameters specified [ 1070.068734][ T9113] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1070.160421][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 9 [ 1070.228737][ T9113] usb 3-1: Using ep0 maxpacket: 16 [ 1070.243943][ T9113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.273148][ T9113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.305452][ T9113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1070.362913][T16394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.372090][T16394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.520109][ T9113] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1070.544999][ T9113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.569245][ T9113] usb 3-1: config 0 descriptor?? [ 1071.563445][ T9113] hid-multitouch 0003:0457:07DA.001B: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 1071.635101][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1071.688369][ T9332] usb 8-1: USB disconnect, device number 38 [ 1071.704977][ T9332] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1071.730114][ T9332] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1071.745639][ T5983] usb 3-1: USB disconnect, device number 103 [ 1071.752785][ T5854] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1071.772412][ T9332] quatech2 8-1:0.51: device disconnected [ 1071.839053][T16431] netlink: 'syz.7.2833': attribute type 2 has an invalid length. [ 1071.851213][T16431] netlink: 'syz.7.2833': attribute type 1 has an invalid length. [ 1071.863296][T16431] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2833'. [ 1071.938654][ T5854] usb 7-1: Using ep0 maxpacket: 8 [ 1071.956626][ T5854] usb 7-1: config 0 has an invalid interface number: 122 but max is 0 [ 1071.976714][ T5854] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.994856][ T5854] usb 7-1: config 0 has no interface number 0 [ 1072.004625][ T5854] usb 7-1: config 0 interface 122 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1072.024537][ T5854] usb 7-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1072.037854][ T5854] usb 7-1: config 0 interface 122 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1072.048786][ T5854] usb 7-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 1072.083637][ T5854] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1072.100557][T16433] [ 1072.102936][T16433] ====================================================== [ 1072.109960][T16433] WARNING: possible circular locking dependency detected [ 1072.116974][T16433] 6.16.0-syzkaller #0 Not tainted [ 1072.121982][T16433] ------------------------------------------------------ [ 1072.128991][T16433] syz.7.2834/16433 is trying to acquire lock: [ 1072.135062][T16433] ffff888025609188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1072.146124][T16433] [ 1072.146124][T16433] but task is already holding lock: [ 1072.153503][T16433] ffff888025609230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 1072.162405][T16433] [ 1072.162405][T16433] which lock already depends on the new lock. [ 1072.162405][T16433] [ 1072.172805][T16433] [ 1072.172805][T16433] the existing dependency chain (in reverse order) is: [ 1072.181812][T16433] [ 1072.181812][T16433] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 1072.189640][T16433] lock_acquire+0x120/0x360 [ 1072.194663][T16433] __mutex_lock+0x182/0xe80 [ 1072.199684][T16433] refcount_dec_and_mutex_lock+0x30/0xa0 [ 1072.205844][T16433] nbd_config_put+0x2c/0x790 [ 1072.210961][T16433] nbd_release+0xfe/0x140 [ 1072.215816][T16433] bdev_release+0x533/0x650 [ 1072.220842][T16433] blkdev_release+0x15/0x20 [ 1072.225866][T16433] __fput+0x449/0xa70 [ 1072.230365][T16433] fput_close_sync+0x119/0x200 [ 1072.235648][T16433] __x64_sys_close+0x7f/0x110 [ 1072.240845][T16433] do_syscall_64+0xfa/0x3b0 [ 1072.245865][T16433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.252279][T16433] [ 1072.252279][T16433] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 1072.260103][T16433] lock_acquire+0x120/0x360 [ 1072.265121][T16433] __mutex_lock+0x182/0xe80 [ 1072.270144][T16433] __del_gendisk+0x129/0x9e0 [ 1072.275255][T16433] del_gendisk+0xe8/0x160 [ 1072.280103][T16433] loop_remove+0x42/0xc0 [ 1072.284867][T16433] loop_control_ioctl+0x4ac/0x5a0 [ 1072.290407][T16433] __se_sys_ioctl+0xfc/0x170 [ 1072.295520][T16433] do_syscall_64+0xfa/0x3b0 [ 1072.300544][T16433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.306955][T16433] [ 1072.306955][T16433] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1072.315387][T16433] validate_chain+0xb9b/0x2140 [ 1072.320674][T16433] __lock_acquire+0xab9/0xd20 [ 1072.325872][T16433] lock_acquire+0x120/0x360 [ 1072.330904][T16433] down_write+0x96/0x1f0 [ 1072.335687][T16433] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1072.341942][T16433] nbd_start_device+0x16c/0xac0 [ 1072.347324][T16433] nbd_ioctl+0x636/0xeb0 [ 1072.352090][T16433] blkdev_ioctl+0x5a8/0x6d0 [ 1072.357116][T16433] __se_sys_ioctl+0xfc/0x170 [ 1072.362227][T16433] do_syscall_64+0xfa/0x3b0 [ 1072.367257][T16433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.373675][T16433] [ 1072.373675][T16433] other info that might help us debug this: [ 1072.373675][T16433] [ 1072.383897][T16433] Chain exists of: [ 1072.383897][T16433] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 1072.383897][T16433] [ 1072.398078][T16433] Possible unsafe locking scenario: [ 1072.398078][T16433] [ 1072.405523][T16433] CPU0 CPU1 [ 1072.410884][T16433] ---- ---- [ 1072.416242][T16433] lock(&nbd->config_lock); [ 1072.420835][T16433] lock(&disk->open_mutex); [ 1072.427941][T16433] lock(&nbd->config_lock); [ 1072.435053][T16433] lock(&set->update_nr_hwq_lock); [ 1072.440248][T16433] [ 1072.440248][T16433] *** DEADLOCK *** [ 1072.440248][T16433] [ 1072.448380][T16433] 1 lock held by syz.7.2834/16433: [ 1072.453480][T16433] #0: ffff888025609230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 1072.462812][T16433] [ 1072.462812][T16433] stack backtrace: [ 1072.468694][T16433] CPU: 0 UID: 0 PID: 16433 Comm: syz.7.2834 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1072.468716][T16433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1072.468729][T16433] Call Trace: [ 1072.468737][T16433] [ 1072.468746][T16433] dump_stack_lvl+0x189/0x250 [ 1072.468769][T16433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1072.468788][T16433] ? __pfx__printk+0x10/0x10 [ 1072.468811][T16433] ? print_lock_name+0xde/0x100 [ 1072.468833][T16433] print_circular_bug+0x2ee/0x310 [ 1072.468856][T16433] check_noncircular+0x134/0x160 [ 1072.468879][T16433] validate_chain+0xb9b/0x2140 [ 1072.468899][T16433] ? stack_depot_save_flags+0x40/0x900 [ 1072.468924][T16433] __lock_acquire+0xab9/0xd20 [ 1072.468942][T16433] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1072.468965][T16433] lock_acquire+0x120/0x360 [ 1072.468980][T16433] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1072.469005][T16433] ? __mutex_trylock_common+0x153/0x260 [ 1072.469028][T16433] down_write+0x96/0x1f0 [ 1072.469049][T16433] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1072.469072][T16433] ? __pfx_down_write+0x10/0x10 [ 1072.469091][T16433] ? rcu_is_watching+0x15/0xb0 [ 1072.469109][T16433] ? trace_contention_end+0x39/0x120 [ 1072.469130][T16433] ? __mutex_lock+0x330/0xe80 [ 1072.469149][T16433] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1072.469173][T16433] ? blkdev_common_ioctl+0xfc3/0x2450 [ 1072.469193][T16433] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1072.469211][T16433] ? nbd_ioctl+0x131/0xeb0 [ 1072.469233][T16433] ? __pfx___mutex_lock+0x10/0x10 [ 1072.469254][T16433] nbd_start_device+0x16c/0xac0 [ 1072.469277][T16433] ? security_capable+0x7e/0x2e0 [ 1072.469300][T16433] nbd_ioctl+0x636/0xeb0 [ 1072.469325][T16433] ? __pfx_nbd_ioctl+0x10/0x10 [ 1072.469345][T16433] ? __asan_memset+0x22/0x50 [ 1072.469369][T16433] ? smack_file_ioctl+0x24a/0x340 [ 1072.469385][T16433] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1072.469402][T16433] ? __pfx_nbd_ioctl+0x10/0x10 [ 1072.469424][T16433] blkdev_ioctl+0x5a8/0x6d0 [ 1072.469445][T16433] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1072.469463][T16433] ? __fget_files+0x2a/0x420 [ 1072.469484][T16433] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1072.469503][T16433] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1072.469522][T16433] __se_sys_ioctl+0xfc/0x170 [ 1072.469547][T16433] do_syscall_64+0xfa/0x3b0 [ 1072.469566][T16433] ? lockdep_hardirqs_on+0x9c/0x150 [ 1072.469583][T16433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.469601][T16433] ? clear_bhb_loop+0x60/0xb0 [ 1072.469619][T16433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.469637][T16433] RIP: 0033:0x7f452058ebe9 [ 1072.469653][T16433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.469675][T16433] RSP: 002b:00007f45213aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1072.469693][T16433] RAX: ffffffffffffffda RBX: 00007f45207b5fa0 RCX: 00007f452058ebe9 [ 1072.469707][T16433] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 1072.469718][T16433] RBP: 00007f4520611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1072.469730][T16433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1072.469741][T16433] R13: 00007f45207b6038 R14: 00007f45207b5fa0 R15: 00007ffcb1929148 [ 1072.469760][T16433] [ 1072.791092][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.799229][ T5854] usb 7-1: Product: syz [ 1072.803456][ T5854] usb 7-1: Manufacturer: syz [ 1072.808085][ T5854] usb 7-1: SerialNumber: syz [ 1072.852291][ T5854] usb 7-1: config 0 descriptor?? [ 1072.857967][T16428] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1073.016535][T16433] block nbd7: shutting down sockets [ 1073.072334][T16428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.081044][T16428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.099478][ T5854] usb 7-1: NFC: intf ffff888057424000 id ffffffff8eb3fac0 [ 1073.109090][ T5854] usb 7-1: USB disconnect, device number 37