last executing test programs: 33m29.066793055s ago: executing program 32 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) memfd_create(0x0, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x3, 0x0, 0x4}, 0xff}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='cdg\x00', 0x4) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x6, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0xfffffffffffffffe, 0x102) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=@ipv6_newaddrlabel={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37, 0x3f}, [@IFAL_LABEL={0x8, 0x1f, 0x1}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000cc0)) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 28m39.253738591s ago: executing program 33 (id=1559): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x140f, 0x1, 0x70bd28, 0x25dfdbef}, 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x20000000) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid}]}}) (async) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) 27m14.172313895s ago: executing program 34 (id=1710): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x4004cd4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x2dc, 0x24, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {0x9, 0x3}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x8a, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9a}, @qdisc_kind_options=@q_red={{0x8}, {0x48, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0xe0000000}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x8}, @TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x10}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x9}, @TCA_RED_MAX_P={0x8, 0x3, 0x80}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xe0, 0xffaa, 0x8, 0x0, 0x9, 0x2, 0x3}}, {0xa, 0x2, [0x1, 0x0, 0x3ff]}}, {{0x1c, 0x1, {0x6, 0xb, 0x5, 0x4, 0x2, 0x40, 0xe, 0x8}}, {0x14, 0x2, [0x0, 0x8, 0x4, 0x100, 0xdb1, 0x10, 0xff, 0x1]}}, {{0x1c, 0x1, {0xfc, 0x7, 0x13e, 0xffffffff, 0x1, 0x800, 0x8, 0x4}}, {0xc, 0x2, [0xc, 0x9, 0x9, 0x800]}}, {{0x1c, 0x1, {0x1, 0x0, 0x2, 0x8, 0x2, 0xffffffff, 0x0, 0x3}}, {0xa, 0x2, [0xd, 0x2, 0x923]}}, {{0x1c, 0x1, {0x1, 0x7, 0x0, 0x9, 0x1, 0xf36, 0x7, 0x6}}, {0x10, 0x2, [0x7f, 0x7, 0x8000, 0x9, 0x6, 0x2]}}, {{0x1c, 0x1, {0x10, 0x2, 0x2, 0x2c86c612, 0x2, 0x5, 0x7fffffff, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xc, 0x6, 0x1, 0x8, 0x0, 0xfffffff7, 0x995, 0x4}}, {0xc, 0x2, [0x5, 0x2, 0x4, 0x6]}}, {{0x1c, 0x1, {0xff, 0x0, 0xfff9, 0x3, 0x3, 0xc00, 0x8, 0x8}}, {0x14, 0x2, [0x5, 0x7, 0x6, 0x1ff, 0x6, 0x7, 0x6, 0x3]}}, {{0x1c, 0x1, {0x2, 0xaf, 0x2, 0x7, 0x2, 0xffffffff, 0x7}}, {0x4}}]}, @qdisc_kind_options=@q_gred={{0x9}, {0x44, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0xc2, 0x1, 0x4, 0x7, 0x3, 0x9, 0x0, 0x4, 0x100, 0x8001, 0x3, 0x1, 0x3, 0x10, 0x2f6a}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x1, 0x3, 0xffffffff, 0x0, 0x3, 0x166770e4, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x9, 0xc8, 0x7fff, 0x8, 0x0, 0x1, 0x9, 0x6}}, {0x10, 0x2, [0x7, 0x800, 0xd, 0x8, 0xd, 0x2]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x5, 0x1, 0x1, 0x1, 0x6073, 0x0, 0x1}}, {0x6, 0x2, [0x5]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_RATE={0x6, 0x5, {0xd, 0x2}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x2000c800}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x2dc, 0x24, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {0x9, 0x3}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x8a, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9a}, @qdisc_kind_options=@q_red={{0x8}, {0x48, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0xe0000000}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x8}, @TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x10}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x9}, @TCA_RED_MAX_P={0x8, 0x3, 0x80}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xe0, 0xffaa, 0x8, 0x0, 0x9, 0x2, 0x3}}, {0xa, 0x2, [0x1, 0x0, 0x3ff]}}, {{0x1c, 0x1, {0x6, 0xb, 0x5, 0x4, 0x2, 0x40, 0xe, 0x8}}, {0x14, 0x2, [0x0, 0x8, 0x4, 0x100, 0xdb1, 0x10, 0xff, 0x1]}}, {{0x1c, 0x1, {0xfc, 0x7, 0x13e, 0xffffffff, 0x1, 0x800, 0x8, 0x4}}, {0xc, 0x2, [0xc, 0x9, 0x9, 0x800]}}, {{0x1c, 0x1, {0x1, 0x0, 0x2, 0x8, 0x2, 0xffffffff, 0x0, 0x3}}, {0xa, 0x2, [0xd, 0x2, 0x923]}}, {{0x1c, 0x1, {0x1, 0x7, 0x0, 0x9, 0x1, 0xf36, 0x7, 0x6}}, {0x10, 0x2, [0x7f, 0x7, 0x8000, 0x9, 0x6, 0x2]}}, {{0x1c, 0x1, {0x10, 0x2, 0x2, 0x2c86c612, 0x2, 0x5, 0x7fffffff, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xc, 0x6, 0x1, 0x8, 0x0, 0xfffffff7, 0x995, 0x4}}, {0xc, 0x2, [0x5, 0x2, 0x4, 0x6]}}, {{0x1c, 0x1, {0xff, 0x0, 0xfff9, 0x3, 0x3, 0xc00, 0x8, 0x8}}, {0x14, 0x2, [0x5, 0x7, 0x6, 0x1ff, 0x6, 0x7, 0x6, 0x3]}}, {{0x1c, 0x1, {0x2, 0xaf, 0x2, 0x7, 0x2, 0xffffffff, 0x7}}, {0x4}}]}, @qdisc_kind_options=@q_gred={{0x9}, {0x44, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0xc2, 0x1, 0x4, 0x7, 0x3, 0x9, 0x0, 0x4, 0x100, 0x8001, 0x3, 0x1, 0x3, 0x10, 0x2f6a}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x1, 0x3, 0xffffffff, 0x0, 0x3, 0x166770e4, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x9, 0xc8, 0x7fff, 0x8, 0x0, 0x1, 0x9, 0x6}}, {0x10, 0x2, [0x7, 0x800, 0xd, 0x8, 0xd, 0x2]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x5, 0x1, 0x1, 0x1, 0x6073, 0x0, 0x1}}, {0x6, 0x2, [0x5]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_RATE={0x6, 0x5, {0xd, 0x2}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x2000c800}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) (async) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0xdc}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffe}, 0x70bd25, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x8080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r8 = socket(0x2, 0x400000000002, 0x0) setsockopt(r8, 0x0, 0x21, 0x0, 0x0) (async) setsockopt(r8, 0x0, 0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x180) fcntl$setstatus(r10, 0x4, 0x2000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b1500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="45000000015001001800128008000100677470000c00028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b1500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="45000000015001001800128008000100677470000c00028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 27m13.984975207s ago: executing program 35 (id=1711): clock_adjtime(0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000000)={0x5, 0x2000000721a648f}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x20044014) recvmmsg(r2, 0x0, 0x0, 0x143, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x16) sync() sync() sync() r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) fcntl$dupfd(r3, 0x0, r3) socket$kcm(0x29, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x131302, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 27m13.915445641s ago: executing program 36 (id=1716): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000022c0)={0x6, 0xd, 0x0, &(0x7f0000002180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002200)={0x1, 0xc, 0xe0000000, 0x100}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002240)=[r0, r0], &(0x7f0000002280)=[{0x1, 0x2, 0x0, 0x1}, {0x1, 0x5, 0xa, 0x3}], 0x10, 0x80}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000023c0)={{r0}, 0x0, &(0x7f0000002380)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000200009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c300)={0x2020, 0x0, 0x0}, 0x2066) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x0, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x5) io_setup(0x2206, &(0x7f00000005c0)=0x0) syz_fuse_handle_req(r6, &(0x7f0000002100)="6be00ff09321e32a7e0f1d45fb750f1ec1e15be572a7d646754b1e1cea02c1a06d0d9b86514e6d2afce29df5f1c8c9d7fe087f7116a341c9cbd7e536063d42367f79ccea05e0fcf72d19ca8c65612a23cc447ab5982f306298cdfc40a20a86edfb26c58e1491cae8751acfc1a22867f2c866f123215209101ec37c2734d97fb4612d3fcefd3a3c824ace75498471f1e35363631e29cc05b89e0f7c26948edbe418596cbc3c686d37d24c4e049f35e99d6b6de3470b342a4fd59bf1012aa8d0238f32d7f7702e0c293dcf71b3d4b2dc6c6527b070c12a5ae65027998d74526c4ad93283708c59afc157dd299b378f85e159970e6d3a248022714873dd40b54f4418012650d564b568730769a5f27fd458d5f535672fddbd105e2423a85bfdfda463d3cd154ea1185276b3c400ccc39953ef1af942faeff3095d9cdd9bc03374408464d4f85ab3c1fd2965b5e0fbd95a396baf089d5792b3ecc98c536c19b4d3cdf8cb499072f3491f0cf76b5f42ea959c5366ab26f2b7e2539e999d41d6bc583ba13a3f59fc4d3b37eb96374ffc22d53e79198778092656323188c7a052e0d9587a6b80cafa69a0ad770d514e5c9edc0b8556732c04549cc9f4d14299e75514d80b6e027a0f8daea3ff396aff507f89bf2ca4c48d0413f6a37c8ef193dbe07ab52e7487f4e115caa83153f729d4659f51e27939429c41a5e5152eb48e109e81baa49ebf076bb13ebdd031a0c077b18c0db18a085d5b3262cb50649b4e8fecf6b306a0430a8f89e2ff7fda3ca48fb8e2b1aad0999072f20c98466cc868970e53d6860b8fc76fa3b40eb40ab92863469346d5a6860c0297dfa94d908f1168ba2ac5197a9f9cbf3abc32fce7d14ee228d395ae53b1bc374939be6b2a135661048a02aaeeedfc755fe1df353b8e8e0aa093574321ab55fc3d16060ed0cd3e8c3f5954b745048d58061e834cfb142d027c03a69df52118f92acc387a734df458e28cd8324ae588bdcf3c12e4c492e4c14e47dc3efc9123bc189dcc677b619fd8cf34ebed6b73c2c740964072f1d87505ccc4ce189293b0c1e6cd68b8ad7a8cb8b049b8aa4f3675ab09787732643353c4f93cec2787e5ca3b96011459c133cb6947d51c408981798b675b9f9bc2186f016b585bdbb6100434e97033261967b1f6fc02bbe32e4125e922b364757008fff71df0ac6e9479caebefc5255727e8f9deb38bac48fcf65b70b7ff53b1b73682903d1300ba4fe2cf7a7c4b1a561f902d4bdfcc37697c68ff5e4f9bb0722f2be019fa57791da330e8ec69683e7b12d64ec27fe017bb18190609be3a406cc4b1c818e778c404c0e35b1f0cf2e8109f672ee2d649fb71e686930c434ad92fe5d290deed7fdf3fdd71d7409f23daab810569a01a8ae9167e558e71f84f88639ecb5ec1ae0eae0474e37ce81d73c7c93a912a56de243e39995c8d1a6194457509fbd62b94bcce0f1e7b3aca47d36c4874fd1aa8d8d1475a2af2f457ea39004dc3c1834bf20701c00416858c810bd72e8c55f4507c2187d062abf119fe91a1871e423c16964de5351c70dd668f08c99329fe189d78d7944a2e9ce47b2aad9657f8e860ab6bc03c365059528dd28350b84c06c56e87f019a0fe5a71595c7ccbf493c41fe52e907708020cdaf26be8e21d3a97c2ef6dd1de85ac6a9f8ba0771d48353b399555c5b6be41241c9de86888d0fcd5198343ad913fa35da296dc3eeecfe2ee4a56b56bf84e23a3bddc4601b504433b339468f029cd2dd9e637217e5816391010093471cd0ac2d352cb88ff5e5930dd589d1b03c5f408023c8207a1bfc2de6794a65985c1345ab256b8e7990fb8c3fe54b9b76dee19f4a7380a0659b730db58bf69efb51044eb4eaf0df5b7a07baf629a537fdef46c33c6dec622c27dc806025bc0144a3a1a64136cd8e7674a4e01aafaec604ef8356b921be7df063a2ec67dc312d964ff1c30f8d77b7c3e06588ac351a8818701c5b7c9e4b9e9721e12d0bc0731c7e2ccd0b1028e5ac990a3e45c44ba1ce8ea73a54927f6fda6cf5e52253a8ee0df194073fe76568f51c6cf45312f1aec20010db2b59d95d39c3b1a40067e6657964368e12173d71fe2f7950e5f0f3a2923ecd474b623010d77f674e52f23552eece20dccfe15c64fa05ffa6bec88d28fea4b2de624c8dd1106c86b220af9f53f15e00785d764224975efb15f290c4a6af055f7a8baeebe9903c0c9f48b53dc423997adcb8acbe7d82de105383644f9d9f3d8cc8f9a79bfa75c7e1a3f470d2448612ee26950b0affc39e98bb75a30583ae55383d376f22dce6c2cdc544ad8d68fa82e5d16b0a65c63ba4c4fae2ce1269ce321be2a0f2550c2b47c8cca190d0e44af824705dc3d5565c4c0a1ab68c50d83534fb32e7ba31c8dec6a17c127985a516ace1f9016278e85056f6288513ed706b873646e0fe3f1803ce71dc72d91da85ad5d385e0b072b6857ecf36746cceced48b0e4663b92cc349baeec28d27ff568ba9bf4d68191166cf65a13af7cf213c2ffca68b9379ea167c7bda82fa7261e2754a00a6f0b4065c57a8f9868f8247d39eca71faae27afbff8864bf934e746300d5e9a31a4b78ca059bb9c40d30bfe745336264daa57002085686f73f48474e2d4bc1e38e62ed4547a6bbd74b1d9fab3f4b2622eb6c8d32b79ef9ab691fefd7b1bfa787de85ccaa14687be5a0529f928dfd974752bde8b063bc717d2a07eb4a1651f465aa78be32457955f83b2cb4608e22a4ef7bccba0378274289a7adc38521cd8d691741e87b03f536b9196c2284baa062038a22320e6d8c3f9e29051450b16bb7909566e75e6ebe423fa88b7f395c0dae22f027efc014db76ffc4244dfeb4d014809569caed95c43f92486c8d9cde522d403efe788fbc3b54ac39e90bd2f2dc3f3d66308d2df22d9602da5ec2133f296252bf0da014020194cf9ee65e7b137c5488401eba99def61e721fa3889d86ecaa5d5a3e4c8642fc0f9ef43186edd427402f63f06bbfa26850f2e4c71bd6387978a8085740fe4b1012dde14413dfc12052acf9508fd6a8a64f59d5756a59c806b64f42cc4466aed5327071f32fe2cb24aa62d21da4c1de44c2aab46f01c53eef1d83002437668fc494953f4951fcc1bc050e402b7cb73d61b3fae4d806fe6b745160df0a6fb6e830d18b04f142b22de9fe78b4307f95c9badbeeca0a2cb134d229e19fbab6a913ea4a0c59b59ac4e9de55b4fe2d7d5585d57c21678931d151038442fc388557da00dc01bae0c7df06ac72be56668cfd942c9edcfe77c1128a6640ad4d4a210d69d94b5e306b3848c09c61c05ec638096ceff5fc156bd34cc3c461bbc4d3ea0eabeabf46459f98f15821e181dfec54b87c9c10bf1ae64449ed9e90fa660191d38760117f9a0ae6422ad983e8b348bc0579dba87ad505c24ccb683ffd8f734b8e5f0c65e3a749d86a2fb1aad19abb96490167993fa130db74152d8984084220ad17653c01f3fbbd2e1000d3ace6ed697f0d4a9bdfb2dff49148e8def07acd5e3355370d1c19d3afb7bd12fc30e6acb4841f641672dda483d0afc53150369ce1e2523b3706f5b65542032838d45a5dedfc2369e385390d1628e78dced081b931f67dc75e23cf2b0f529fde6c9c84e4b3894c11b9f56ddc65827f68b0fde08875fa8ad3cac7e212c7727d41f6d51434a890ccac19f3e9b0a594556fbf51e84e874de4e2eeba206369871dd844f6248ec180b3741f2ab3d23b76448562207f577b10f4d14949a926b837252cdcf62af32e83001d63ebde5c1d266c8d2b43f5545dbf070eaa47613481d6c920f1801b490d2a847d7e85872fe75f56d90f050fe741d94511058d71271daf9c565ced757402c315685820c80ed1f6a889a8db0326ecb58f1f287d24c5beb5b19b94d8400aa406daa591e292832c78be74613ffc2a12635951d487650c864ef55927036edb5ec02614e5eb75f67b933220ac39f891c37cc0b7fe23ce8b0ad8e5ec9c0efbfd706f5730c142fbd5297ac7f03f4ca6f49b9cba1e9cbee6b08e936c7ee1642e5f1e3eb566c294d10fc4fb45a7239590cbdebb7a16b972a983748e73aa23be7f66a30c22610456445234bb8ba11b412eaae69b808f76d90b7bb14223b644b8860c550f3c92ae47c06a38429d66da2a414c01985d4b7c935717a4dec2cd4e89092d5dc9aefd0ac0b23481459a2adcb654063743b667c3c3241f203f81385aeef164a0be7655d02074b6710b4e2c50c3ee0747892327e8f22aaf51fccf2b715b24c02c6690389afe83e6128a1ef199234c8c9803124089382c6bed5b296945fcfa937313caf39176b741809c7c7fde30468e8875266315d9e733258b9305cd92276211d0c75c97b103c31c52c0c4dd17dc5931c5a7644ddb15ab8de78cc32125f85b78ba00d09079626a813e589dce18010f427079ec6cb74a2752c7247e7b7df37dc701245e9cf37fbfac5b1c427ba477b15c21d48084d38253a4d49af73d9f25e23333ac3a84e4b671fd31abd4b32441fb07dfe30659915a88ddb684933bee5ee9dccd45763f6544fdacfa4d821f36d7907a42ab9db72b231cbc9e1ddf2000441586eab8d59277955f9665c5e358da456d759490bf9f79462ced96372b237ab61d8b48a78612c64f48d5bd89fb6e67b0818033743b7ffb3305bcdbab0f71b46d5ab61d8190c5106813ca4435386e55e43c6cb925cf81039ed5f11df2d96c53a448519ede7e83dee8b82acd143ce0d1b91318a0f0efdabb77c178cdee559c1d2181600b6b3847e05f41234c5bee021d4f0bbed10cd557f686e8b9769780a13df35fd069855fd8e2aec5bb84e8d0b7740fb7fa88b823826b7e8a979148b95177a2e720b45296c280a9abce6bc5d943e394c07eed5148f86a94450569af8c38e184603abc46a59b2ba01e84225da828ccb93ca557e4ffe9e8e8b98c1fa471409f9d7b9d9da4b0f4fb7d58d7474039204faa2ab1067a2eaf9df247a2ba1b099cdfe79a7db1273e0660e37f6e8afc125564c6b8b5e893231a6addf326988bd78578950e4b2f317ffb322fb44a570587c6c6baa59d6d844454e92f89534c7d902760b984fae30ff5eff5b90fe03f49429c5a5becd275c5c670ae8d39b5faf986970492e579a8d98aed5da2894c96bf8779e9aaba84724bf471734b4d9d4db6a0ebfcb1c31f88c59d4b0f38078435f575b0e7cc7cd5f6cc9a39bf16d3514e89b562ded72187c1e550d4852e9bdc585525d02ed1d3adc819a072d82c37935b2fe6ff3c3f0c7b7fbee2c25ad515835d067ea53af1c6d0b4a9b35de653f2e5a8a1d9261c49813ecab580f368a79515a8621f16b750fa9d711d2884764e222c723e7dd94532de5d5d40fe12660fef784d8ecf2ededbef7a61b881cf61e8c035f31d3801b34ea385fb5fd3895e6789ed741aab0e5d091050f7cde8aa1f4feb53683626870adc4190554316bcea49c6ee182fd66a6ccd2e198ba2ae6f3621a6a6186a6cbd5378e6347afbd88cbff663f73ff568ed47861219eee3598520625f64f7a6303be64361d705021104d9871592d28524f5cf391e7d445746a0e9e42924760e62c955301e1ab3744f79217841a1668a6a871bf2efc278b0bf0b4b46a769caadf243f1af31df19006080d11a4f84ee4932034f48fdde875415d949438e8c1bdea8bb9899c230561482960cac0e77ce78584e35d3430af7ed37ec71f33f265d62b397b99f71aeef08e0a92e221d8ef14c82616d06b1ccafa63969a7ab145928d9c7b1b23e16acc00754ac707f6ce3939b4604baf0f3fa69fa48bb7218f3a992e65a4aabd8a6adf4a7c1e32877273393a1567632348d480a84f3b4ae31eb810a22ccb652064be040c9a90e52b59031a22abfd1840b2ecec89d16426ab31dfb83177ae08255d1424a6ddf8bb5d5adb66a7e6cf7f68be0ce5b4a56fa3463da621062ac85af5334018c3a473c5af9c5686eb9abbd24420293df7ae5fd075b2d3b9aec226e1a016c989b029d1daed5933d285227dbedab33a32b0d71d4cb1fb79c3a8e342fb4126785a3259f241150c7c381918f8f88146fb8fcf14d42ace0fd5c0084db3726575b04ef47c2bd1a0ccf977c8232e1688d4d39c88f7ab8d565b578bed84bbfa17982308a9269933ebd2f7260a67e01a3790fca5673643aff626514846dc1634e3c2fbdb0eaedb163072d9c0bb2fc129aa57618ca1d2b37324aa49972117b9ca81092eb89089659c39eaa380fd950aa914181ac98c1990af713eb834fdb2b731f2791292e9b2774aaf3a091152e25d7ea92a6c80f3217fedba12816ec910677d3381b361272074143fb51f391e6cd1953dd6cbfa33ba97e5d019fddd3da76fe350b767c8eb706a5f46a536c3103da6af42c1a5a7cf488be7f0d3a8ae4598d0d1f4f8339a63c124a5ce1b18a225f840368d390acddeac589093a753ed2e45ae4bfa62f222d4c6a6fbaee8163e76a0bf6291619d3b4af530d03c1769a456ec52491996c6739290f4cd325e9a3c1f0db9b079e5809859f6bb2d6cc494a500862179b65aa65ded80971e60dd9338dddbbf736924626aae8d65fa4a32e8affbf49b5b20c546520aac759594fd996e5f573e8a359dc4192c2723e05d7f8d212d78a03e9a7ee41b3ed6d098964f77e1e96e0e6641222fa247757998d9e9d33787079d1b0913f9b6fd0163f7603d4bbb7430738ab618026ba0526b5722f7c5b155e9c20209ebdac884d4afc34ee32420892acfa0a63d93e1aa4fa71581166d783abe45cbfc66f65c75b803d932dc3a40851508499001dde84fd3646ae3743c1edcfe433579cd41ce625262082cea3e4f87ea17f26c2390e9c134972cbe8291c500ad925f896aeb4d652cc01e397ff9eec6c4ab32432f61f90ad6f24fc2f24c47d039e90cbdbdf97ea2c0b1ea6562c1ab651e46adab86814e14e9196366e6da5f16c743baa0d31a1b14200451df59b639dbf0ec8976e31b41462268a66d3fb55b0fb344a587890d92d7df87244b517276d6cef787cecdff92e2293d0d2e51228bba0ba3ba9e57483147727a90ab99b07498a1a9c46cd32e0af493e4c092e515ee9541c678c3566092e62a14a566e225741102071811d3306cb229b8c08da4119a565f9a37c06a983ceef668e7e97df595bdfbb43b0350fc823bcb53630508b3e7a42ff2ad5a8bbe83811c35b78578fa4842122ac76be6e7cd68a9d3ec8c6a3b83edc1f545a1f2a74ce5212f02ba85e104c0e1d21e4f77a7a6a0253fee2d486f65abc1d15e483b7fa87633e1c02e6f5aecdb779dd63af36c457905b2d4bf2c19cd4a4d2475245c45f3ef767654be5c17aa9b3e20f8019d356324baf677e4604e736c2a8b289874accbcb2ba300f063fae2c7d447f9a60daa87592275e501cbe880e7b46230659a7d62fc069ba7bbbbb71cd5ece453a692e2a3620cc8ccab581f4619963b1823c401b84092580dfcba08f63c14cef7963bf6af2d550e2fd43dc2ce1a5079e9018fe1a6ade4496b17f31dba644022c1bec7f7a345f2f02fe4eae1fcf5fb377fbf33c4774843cdbf1357741b0a9be5b403345db08d6ce70e4c5a18cd8725364b4096b69863964dc596cc115105043f6d80603873494c177b886299ca479d1c12a3547ff136a203282df0bcda49100de02b368ea5124385a03280d15319c5a5dd5e150b6eb19c969ca5f3c3368bdceef985c1ee957d5a61b3b9eb1c25e40b280fcec638726f78747dc2944e052c184cde480a6db7a2cd7b75f34cabcb2ca0e105b7af8c5d480b1cdb47d3675daf2e621db6e6e8924c157a028e860adde429979536c0ae06d3665e98166181eb47061fb20b4f0547daa938c54db21518a980ca5670a3dede7eb479497156b4998d11e838b6f112d3dfeae167bc3a8ed7c617fac11907094f25b0939bb9956f7aaeafbfa452ed4ec91b2d1450a43946096cd104a90a73d733da92125de061de39cf8e3d582e80f368b22c66cb69b86677a0af3bffc828ad1769a223f0f98e0857b60bc82f739fd6bbbc9a150830e1e850fa3bbd587bd9ca0fc157fb0b292cc91365348d01c435e2641885891306e177a108712290ec2d1ed3c6ac6d1c49aaffed07b6196787667cd8a7af66a1b631f9e9c6fd668509b7a2e3fb848d99e54e298742ca771bf913e50552faefdc0761a0b1aac3a38669fcead818c26a385ea630960c151199226c23d2b1c9ee42f864d4fe05d22eb826a80ad0738daa292938a4dcfcf18a60642b2b27f0e4998b0569e79c5dff424dd324641eea7b929d13735754b4ba6ba1540bba6b4bee8d3ee3c8eb8900e9c7e36854958f5b632b111abd2f722e2bc8aae4f112f488d8c1e68ba32fe88a39773ed81027a14cfb877ece8772dab7d360fab7cfdbe31a69d218ebdb7b0e42fd8b775348171f0f8a59386fa4fce2fcefefc09cc99a477cb856376541ea5048ab8fdda87ace560a565b2fef28327ca537eea30114a0581fee17e58ed375377a23d8ccbbf757a38aaac794a2630c42f9d4ed91cb886cb5277134b02ab691434ce897c5310472a691f99785cfda982c8e99bd2958589258228a7624137acc14a13414d06f6aee835b3637a0e7367a010652a076b2945fbdadeef39d65d503c18dddf7320fe07873331dcfd16e7cc786cac00d0934cbc6b024547e11132e413b7e5c4f926202128dd1aa76a39065a4228f109bc3327dac7028843068c32fc5d902e882494eb3cf81a90212434d404cbcfa72722e3ffae4079c2e6333a94d5f38e2a2948a01c10ef1a3adf58bae5b5629be02a1de64a201223c23eafd61a5be59c40188fa3463fd64e98f0646a9338bb9ee85f3ae5eabe370727121b4d8559fd32be127a6dbae3c1a0a43ef1173973b3b3332434c6c92b3144d9fb308768ac4067eb72d597b85882e0d228c6dece3da0677d9fa6c0b13788b3c2b0c9e67377ba0ada12aa956672c58f48fa6cfdf0357d3cacaabac46dc438632b1e7edd2e120310e7cd7aa2e55884b422b88e8eb9f5c468c04f9f045f4e5db6e12e9d7330f3e625a7e4676f61f93ef729e8cdcc743c44d409ff5720e85d4d447cfed7f187563ba04add8b27b4d5e1ffdd39d61a167fcb2da8d58e67479ebc076329d27bd24ecaabc4cb05552a409ce732ecb86a6f0a213e35e53f895bc3c4ae020ece95499d4670375f61a32fa215c956734f5aa8127ec859cac7dfb5768864dbb7591f9d91c05e365c4dbbe864d207bf9eff04c4b3047b68cebef76a7915673dc5ccafceea57e38beb9a69473a1b2ae96c812ad737db0f66e87ca2305dcf4d66369e1afd74412a207a7a2d6d97982e1874afbb6a9b420d88c542bcdf6cf3c471c7535a3444ad20793876793ae8fce30fa468a50ef241a15ec0ea3229b1aafcc76eba39f8cd2a93f23ca2b04c8ab87c4f5a8a9a1db2bbcfc17a7aedf9877b669f8c2a05783586581656064dcfd19200a8f60c4a582766a0ca5148b56cafafc0ef1601336b5398a90d1bf68c6ecfd1ede4613fb9474bba76ac945f51129543e22f14fdea4e83c206032f0b5faa83a1de556d48d5f08bc53879f492897df7a59e0ddd00825706a2ac507e5fb31bad911885ffeb2d2368616786593f4c6a28de95edf2d993dab8412fa5b16eda075a934f46967fb1643085370da9d1e5895a5ddd6898429c85bdd41b28f58cc3e106ab683ecba03253b8122a8a5b6064eca49ebf4133c2351468cd01200332fca0a00c980262de8dcde7f7e145aefe3fa56b2dd6de3f2bd1514f5a2d143457a28bac927c248d4d89779835a83398fd54e7d53d7b2d1940fd12d7bc96e16b0fe15fbf16c3600b891b3bf6723303d01a73120734be1f27d43b5d5c374d6e44f42e0df163d2797da5bb292fbc58f8ac2056dbcb85b31c81d56fad2d70625b1304c04a508d6ccbfce072279358cb065a50f4bdf8c81ddd2d5ecf2b2c2b1015051b465e5ff682c9e3f8160123334b82dfe5a751d8b5f441587bbe7bed1325338cae6a8c06101081a55d499efbf77714e43ac99ecc08965e152bc84faba1bd966f4c01879f24b451b8f3ebae04852de5efd441396a6a871f97ea3dc413174886d71748c8beac5e5d403887e818e335cfdffa9d76b5074a5dcf12ad7725cb83cde0174679c0961643606a03082c5ec01590d687ff5bf9f8b2c3a84bfdb9c25622adc66aeb7f0355efddd4ab9954e5455c2428ee4e5383888ab466bd5fe817eb6b794a555c0eea446287cce32d9efd960e58771ddfb8ee2b4133b79d8953c2ae959a5d6ce09448d50da61bf22268fd32dcd501fd47c6b72cf8f50159a7aeec6e220ca81fc64ff97014ea77b6f791ccf6625eba88f60d1fe699cb16636a9acc4067786c537623c699568112c2093663bfba92ddc1ffcfe93f247f90accc6002faa61f43e54c3fab5e04a6ea1c5415e31ab129f8c9f82c3e3191513a4af151b1d6ab45a2f0eeca83f0870bc40da6257b9ea1c6238171a754995137d4123f2a4888e73db901f70a044ee0dd8176defd5dd82d9fc5a1a0d79effaf86fdf0b88eabc338c353f5fb040fe34db18211b20f8a3e4589b212e913665506488f21c88f5aec85eb694134a557c95d9a6ab9efc089e5c9848e591e3387cc11ca66fb03ca713513b98ebc2f35befcf64792ef44411e0f75ee4da42dcadfffdf9eecb761bd5e89183881103c5019e1ef3f3d80ba27fb0e1897e925d4122fdf3b3b568cc8795adf98643e86409226f2c5ed87cf481ffcd6e21a2bf0bff07a98bed3be5328118c3cb43c05f1b740242b0855f71400dd155c888b627615488025f81fcc6f5628efaf081489683c6d259c33b591edf4c9a4bfc54802c93ffbba4baf2a5030af8882b7d53eae80720e36a15c6c210658cdffa162630ba5d0217fbbf44879a04d41c58befb8a271abf4460a2d768be38d22f832e3cfad91b90f1b576924c8cbda71bbe89c85c239fa02f69c25e5422c977d97a54954fd16b85970db963db2b132b057a0282aef92614a9148e2a1a1edfa5ec46ae8d662dabae8f8141ea30dfddac44573ff52c3f93d82b0245b03c6db05b540e614cc9e3f702467054d688a92dcc9123f71a064cc52730fc5ee94b2746c80688521cc1cdb0f9455d4875f4af4afdc67d2e389361e1328edad7594d4bc9beec8b935aa3e5e98652c934d14fd16da50d685717303186da715778856da54666448d648d32becd2d63a6503ac21e56317903d15465ac4d3765f7a05420811307f71c1dc55ce5a4cd21130487cb0065397785da5094d27fae505996c1d404399797ff61d40f2ed63fca51db673197cd158a6e9b9ee93bb37df8bbaf92f47493c81c65439d359d578244a7f83629f4323a182e68526d674f4b6b64908350253520a4e564fae27df523e9218ff84f55a7ca622fc2e3bcc5edec9cc45c5a1b4c00c64038afdb165ad0ca3d8b66cea248e6a60a1c6d27e0dd2e5c7eec49fb8227a5266aedbc4fff982ffda402190548fb63fdeb67b3fb0894b11ce904b1c194f8f36cdecddc1312d64e9f227cc4b614b3679f978e0f1b6bb7aaeb2461cd28a94b73dd55eef1d5a98d72b9d8750b2dfe3a3cec044e13a8700", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18, 0x0, 0x2, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r9, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r8, &(0x7f0000000400)="0300cecd682b", 0x6, 0x6, 0x0, 0x300}]) 27m13.775670456s ago: executing program 37 (id=1718): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback, 0x37, 0x7ffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/250, 0xfa}], 0x1, 0x185, 0x0) fchdir(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_es_insert_delayed_block\x00', r6, 0x0, 0x2}, 0x18) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000800)=0x3, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000002000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a0101000000000000000000000006140000001100"], 0x6c}}, 0x880) 27m13.637474281s ago: executing program 38 (id=1715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) r3 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001", @ANYRES32=r0], 0x7c}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000fff000/0x1000)=nil, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) syz_open_dev$video(&(0x7f0000000240), 0x100, 0x4e280) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ef4c00e3850000002d00000085000000d000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) 16m46.84714383s ago: executing program 39 (id=3831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x9, @mcast1, 0x1}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) unshare(0x42000000) 14m48.730764619s ago: executing program 40 (id=4265): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7ff, 0x100) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000380)={0x0, 0x0, '\x00', @bt={0x1, 0x6, 0x0, 0x1, 0x4, 0x6, 0x12}}) 12m40.111925201s ago: executing program 41 (id=4653): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) alarm(0x1000) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48}) syz_open_dev$loop(&(0x7f0000000080), 0x8075f, 0x140) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000340)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xa2cc, @local, 0xf}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000080)='\\', 0x1}], 0x1}}], 0x2, 0x4000844) 9m53.669674132s ago: executing program 4 (id=5216): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, 0x0, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r5}, 0x18) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) close(r3) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x406, r6) write$tun(r7, &(0x7f0000000400)=ANY=[], 0xa2) readv(r7, &(0x7f0000000240)=[{}, {&(0x7f00000000c0)=""/22, 0x16}, {0x0}], 0x3) r8 = syz_clone3(&(0x7f0000001280)={0x100, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {}, &(0x7f0000000200)=""/17, 0x11, &(0x7f0000000240)=""/4081, &(0x7f0000001240)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000001300)={r8}) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0x6}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001340)={0x1, 0x5}, 0x2) 9m51.722837802s ago: executing program 42 (id=5221): r0 = syz_usb_connect$cdc_ecm(0x1fffff, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310000000000905"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[], 0x0) 9m51.35717464s ago: executing program 4 (id=5224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$zero(0xffffffffffffff9c, 0x0, 0x4200, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r8) sendto(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100", @ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x108, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2d}, @IPSET_ATTR_LINENO={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x108}, 0x1, 0x0, 0x0, 0x8844}, 0x4004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 9m49.611521215s ago: executing program 4 (id=5230): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x47, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10) 9m48.82416442s ago: executing program 4 (id=5232): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2151090, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000001c0)={0x24, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 9m45.691340554s ago: executing program 4 (id=5244): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x182c1, 0x8) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x8, 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) 9m45.36641052s ago: executing program 4 (id=5246): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$mice(0xffffffffffffff9c, 0x0, 0x101) gettid() openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x2) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, 0x0, 0x9f) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0xffff, 0x9, @local, 0x4, 0x3}, 0x20) 9m44.242932053s ago: executing program 43 (id=5246): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$mice(0xffffffffffffff9c, 0x0, 0x101) gettid() openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x2) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, 0x0, 0x9f) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0xffff, 0x9, @local, 0x4, 0x3}, 0x20) 7m33.759549104s ago: executing program 2 (id=5707): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000001280), 0x0, r3, 0x0, '\x00', 0x1ffffffffffffd64, 0x20}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3ef4, 0x81, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7m33.652723045s ago: executing program 2 (id=5709): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@const={0x5, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x3e, 0x30, 0x42cab09f62572d83, 0x61]}}, 0x0, 0x2a, 0x0, 0x1, 0xc, 0x0, @void, @value=0xffffff3f}, 0x28) 7m33.070252017s ago: executing program 2 (id=5710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000040000000000000003000010850000002a000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800004}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r6, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 7m32.179861213s ago: executing program 2 (id=5715): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100000000000000040000d5796d61bf4fad2f1555364525465e571010000000"], 0x24, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x15, 0x1f, {0x1f, 0x22, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000017c0)={0x5, r0, 0x26, {0x80000001, 0x7}, 0x13}, 0x1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000003c0)={0x1}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]}) unlink(&(0x7f00000002c0)='./file0\x00') 7m29.662983252s ago: executing program 2 (id=5726): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) r5 = socket(0x1, 0x3, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001980)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00'}, 0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x1, 0x8, 0x0, 0x2}, @sadb_address={0x2, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x4008084) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) 7m28.634345111s ago: executing program 2 (id=5731): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x1200, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x20}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x42}, 0x28) 7m12.527943563s ago: executing program 44 (id=5731): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x1200, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x20}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x42}, 0x28) 4m57.451923545s ago: executing program 5 (id=6207): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x3b9, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 4m52.535842978s ago: executing program 5 (id=6222): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x2000000) 4m52.230093288s ago: executing program 5 (id=6223): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000002, 0x8031, 0xffffffffffffffff, 0x6be38000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') read$FUSE(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000007c0)={&(0x7f0000000600)}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000001114010026bd700000000000080001000100000008000300030000002834c282d9dae132e3a6db8a0554081b359d454bab76244ff7f33b075325ad41fd72dbc58177937edfb85ff12ce10865ab7f72239d4c53401db7ebf33217620effd6524bc9afaa1ba671c5d9bc88c39c2e108dbed7c0fa7b7a8a5fd49ab82b947faf81e39ff565afce8b51a006717f05249ddba29aad9e7b89172217d436d26cd6c01f5ecf50b3592ee466195f4aec662ef587b2604022c1e5da2e6791f0d17dd975920a0db93bdfd0d43fa5a7717b41159500958ec5c30f4723acb3c362"], 0x20}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000d0ff0000000002000000000000000000000000689b3d4100"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000002c0)=0x1) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="ec76b3", 0x3}], 0x1}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r5, &(0x7f0000000400), 0x0}, 0x20) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chroot(0x0) 4m51.066063574s ago: executing program 5 (id=6228): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3}, 0x8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'mpc624\x00', [0xa08, 0x3, 0x1, 0x6, 0x0, 0x5, 0x2, 0x7, 0x800, 0xff, 0x2, 0x3, 0x8, 0x2, 0x6, 0x800007, 0x1, 0x200009, 0x43, 0x40000003, 0x89, 0x9, 0xf23, 0x6, 0x1000800b, 0x8, 0x1, 0x6, 0x18, 0x10000, 0xfffffff4]}) ioctl$COMEDI_SETWSUBD(0xffffffffffffffff, 0x6411) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x3, 0x4) 4m50.952947342s ago: executing program 5 (id=6230): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) migrate_pages(r2, 0x2589, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0xce0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @loopback, 0x2}}}, 0x30) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) get_robust_list(0x0, 0x0, &(0x7f0000000140)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f00000018c0)={0x8e3, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r7, 0x0, r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 4m50.169443219s ago: executing program 5 (id=6232): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb30010203010902120001de0000080904"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4m33.757664661s ago: executing program 45 (id=6232): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb30010203010902120001de0000080904"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m9.242059429s ago: executing program 0 (id=6799): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() ptrace$ARCH_GET_GS(0x1e, r0, 0x0, 0x1004) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ipvlan0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 2m7.029246471s ago: executing program 0 (id=6801): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x8c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {0xfff5}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x54, 0x5, {0x0, 0x9, 0x4, 0x9e, 0x8, 0x0, 0x4, 0x5, [{0x6, 0xfffffff8, 0x2, 0xffff}, {0x6, 0xfffff801, 0x1000, 0x6}, {0x0, 0x20000000, 0x8, 0x1a15}, {0x9, 0x8, 0xb, 0x4}]}}]}}]}, 0x8c}}, 0x24040084) 2m6.726492715s ago: executing program 0 (id=6803): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x4c802, 0xad) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x800) read(r1, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x20200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={0x0, 0xae8c4d9732989679}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioprio_get$uid(0x3, 0xee01) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e142002000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 2m5.744368301s ago: executing program 0 (id=6805): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010100, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(0x0, r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf25140000000e0001006e65746465767369ed3200000f0002006e65746465"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8000004) socket$packet(0x11, 0x3, 0x300) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={0x0, 0x1c4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) socket$inet_sctp(0x2, 0xdeac106461353dd0, 0x84) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RGETLOCK(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="2d0000003702000306000000000000002500000000000000", @ANYRES32, @ANYBLOB="0f00fdffffffffffffff2f232f", @ANYBLOB="1144a5d369b3120aa65df2b743ed269e3a3fe59cb178fae9b16e9e134f685cee840b031716fa75135f8846b5609368278fe537c1b43935bdce425d0d8fe132e8d47a0f6d879aa0a3df03aa648a30f689a070cc1844f3d26d5f4b5d4703c933054e7f0740fd09ce2b5e62648967b652abac2bcd31dd7d3824e6cea898357e5e2ea83e522d5fae6d4022f3d5061f9ef5dc367b820dbd2bda24608079b1f321fbeaed1b01325274c985607886962ee308e168e54c3f186949ebc143150e4cd346054c9ee91e240733"], 0x2d) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 2m3.721456098s ago: executing program 0 (id=6809): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000700", 0x33a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x181301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x9, 0x40ab5e35, 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3486e87736eef83d749de22702cbdc2bb216446606cb2dba03fdbbbbceacda3bda57c776e588", @ANYRES16=r4, @ANYBLOB="010020bd7000fcdbdf25030000000500050000000000180001801400020073797a5f74756e000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x90) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xffffffff, 0x0, 0x8}) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000173000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40186f40, &(0x7f0000000440)=0x1f) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x80b43) 2m2.851144822s ago: executing program 0 (id=6813): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000002700, 0x100000}}, 0x40) 1m46.5741621s ago: executing program 46 (id=6813): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000002700, 0x100000}}, 0x40) 57.765673382s ago: executing program 9 (id=6977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open_by_handle_at(r2, 0x0, 0x400200) sendmsg$NFT_BATCH(r0, 0x0, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x1, 0x9, 0x7, 0xa, 0x8, 0xfffffffffffffffc}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x9, &(0x7f0000000380)) io_setup(0x2004, &(0x7f0000000680)) r7 = socket$netlink(0x10, 0x3, 0x7) splice(r7, &(0x7f00000002c0)=0x8000000000000000, 0xffffffffffffffff, &(0x7f0000000300)=0x9, 0x6ff9, 0x6) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000200)) 53.496846123s ago: executing program 9 (id=6994): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0xfffffffd, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 52.630370516s ago: executing program 9 (id=6997): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000003c0)="4ef40bd3ab92b592edcd88df282249a0379344aebe1e9d16106c4b1f9b0e0bda89f8eaac42d9f18b521ad3199d09a390172ca08eda3984ea00ec3e8f82dcf4e5b63909519662c0", 0x47}, {&(0x7f0000000480)="8d14f5b217dc709ed9cb518298b951ef091ebeaa14c1ae1445999ffd4dcfbbc3d9f4d6102753cf1a72ae1a13ffa2ed3dcc7a2b2bf1769ef812e53e921dff1c588a99daeb53f8d8c8a98e6ad01f552d120f599d1920bdd8825816f3aa6f5579f28763b712a1f0bc57050979344d5de947a9c27658bb888aeebd8576f25c254ea4bb973d265efffef133b51b35519152d61578fce3fced7451f121", 0x9a}, {&(0x7f0000000580)="a63c5ac7f3677cfa916c9e1b0ed6303ca7dc79cbbf1cd5ea6f10c9b174470ce6f23e6fe7dc301acef3f6763acfd92918cf006665081483143941c89582bf8ef0caa9221c9ae44aac417ffd12f2d504bd62b6674786813c9d9e42a298bda2ae1fa4c880687760d906357ef695ae9614", 0x6f}, {&(0x7f0000000600)="ca7091606f72d05b2df231d92adee6a64c28c3d034fc9560051f362ed8f9158418477670dbfccc58414d551e76d5fc75b3aa62d910b37aab6684f332b679e94e327be7403d56c3edac9422293a488ade077903c4e99f344e9e677ee339f0bfcc1ba1238cfe118b9574b150f1b97d88e9bf27613a29b3dd87fffdde9a2fa015f9", 0x80}, {&(0x7f0000000680)="ef89e3f0e83b99cac22df52dbae3dea1238ca554f079b70d11d9f3070def6225f665961364206d775c06ba12e51a52c972b5a95abe2959d3d4dc1ce4466984c2f2ee6f429120694c3835aecfc25cb5f186b2c77cd1ebf7b5d165fe6366747912c7bc8a3a9479cb74a9ecf6b3832f963436317dcc47eee713f20d1b5837cb527545cd", 0x82}, {&(0x7f0000000280)="8ac940404ca6f75509a999b3a910a963a0dcb04f7640ee52f26bc4d1dc0e868e4ab1610f20634b2f58", 0x29}, {&(0x7f0000000740)="136b13f9f9d0278ea260d6e9b4422d3ecdf56ab3b5b71a56f22bfb83db47709a5719c662c777e5a5c1f49a7ae72638add9aa4e489337077b3108ab83a50f7834b351e1a60822cb64f05b6bc5b53a538c2ba051d69ae43b70b82ebd6d834e266d4281bcb892c9039ae182233fc93d7cba44497ed7498faab7802e6cfa94521a38", 0x80}], 0x8, &(0x7f0000000880)=[{0xd8, 0x10a, 0x401, "222d3d34497cafd0c630026b890101c2e950ee6e34c4d5848289c700a5d8d4b1d4829f3ccec20d415b410c3abe2d68e18ec14ef6d9af87a2a5e594d22c4eeeb20a20a08d95f8632e1fd9ff5ac71ea7839013c117cb6459a36a591ca65eba12bd1cc7e35272f9239b3e3f40ea116f8c4f0f7e1e8d84a03c8765cc8219b376deb3211db2adb692b772d6ad472956512ba3064503746049634e2e5f7aacc5f46ca7e00d2775f454f8511083a89be6a2abf66caa6f0a5367ca66df75478cc3ca1c7f533080aa22f35d41"}, {0x60, 0x10c, 0x4, "b85a8e16f2e9a27cf0e86b8e63c4066f684cb5f33ee36c612bb8cd02655a78971c3ec773e3a840fb879cb8de184a23ecc71cba1ba02a324d6381f017f2d50bc533465a4aff6745fb20d584"}], 0x138}, 0x4081) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000070000000200000004000000"], 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4441, 0x42) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 49.642511805s ago: executing program 9 (id=7013): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000019480)={{}, 0x0, 0x8, @inherit={0x58, &(0x7f0000019400)={0x1, 0x2, 0x0, 0x2, {0x8, 0xfffffffffffffe45, 0x2, 0xfffffffffffffff9, 0xb4c}, [0x10000, 0x7]}}, @devid=r2}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000019480)={{}, 0x0, 0x8, @inherit={0x58, &(0x7f0000019400)={0x1, 0x2, 0x0, 0x2, {0x8, 0xfffffffffffffe45, 0x2, 0xfffffffffffffff9, 0xb4c}, [0x10000, 0x7]}}, @devid=r2}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000007c0)={r2, 0x7, 0x3, 0x1}) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$nfc_llcp(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x27, r4, 0x1, 0x4, 0x4, 0xa7, "7ac5338c16fa296158b1eb222459c0933cac94c5775af81fcf70a9be97e987a707c74133ea8ef6b75c5fa54b9ba30c410bf138b3a64d60f55cbbcee7d50b61"}, 0x60, &(0x7f0000000480)=[{&(0x7f00000001c0)="6e9f3da18f8a071047f58dd78fa9ebe1e141bd909b368754fed54aaa653c41487624", 0x22}, {&(0x7f0000000200)="a06156c88f9559b006888fa9eb9bf4e8992a7d33329ee1806f45bf96c9dc36fddfe5a78305e2e4c30e7538c2f7ee613461", 0x31}, {&(0x7f0000000240)="3865c4f51826a082217a2846f2028b40d899673d404346b348b3a4f2ae8eee2697556147283709d27106f860c0284427787410c634e53a90248e88209a14358cca79b0e74e979fb5184e2d280c839027513591ee906c3c56cde28c7e53eb8c5b9d195ce62080da8de3b119ff48f4b5a707959b22503fe4890a1d2258869e801d59b9d66a0b8b0329c7c7833ae4d346c78700bc145867d8abdbd7f3ee64bd11822b9100eabd42a2f105ce9bed0edb8635192ae1c292751fa94ed014f6025044b3f0684a80133605f67243e90005651af0b89f", 0xd2}, {&(0x7f0000000340)="942ea882fb2346bc26c8f9167205981add4829cf6564517ee310da64f249b42106c5bda3e8a7e7dc2fd7bb11beca", 0x2e}, {&(0x7f0000000380)="7eb6980f47057908c32900d8fe68cac0b000e1", 0x13}, {&(0x7f00000003c0)="f3bb5df5ccd3405c032f3fb54c184c454abd19d21ab22a7dee7fe6bfb94af83686d9594299c8f2f8eb0f67e2decaccf5ffda8809fe5ef8bf82d773b1526e2fb0a0faddbd10939b1c2568c32f52f531f6d99ee24f5fe803a19f77723dfaddab47ee8ae7ef6dee1877bfd259a9dd8edb4bb6bea2f642187b8592ff52dff996231a76cf8a34609d1cd5dcc9e81fd876c05525cd0e60040698ad776159506cca0228030905e88ecb1504e6eb36b3e5fa64da6e5d4964", 0xb4}], 0x6, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x1010}, 0x800) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r0}, {@val={r2}, @max}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="b40000000000000079104800000000006b0a00ff0000000095007400000000005e05c6e4d6eef5d16806404c13b344afa1f52a077fc723ddf5de6cf26d41619f84f3c61c000000ca20"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x19, 0x7a, 0xb0, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x1d}, 0x0, 0x70, 0xb0, 0x0, {0x0, 0xffffffffa0028000}}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c4078287ad3ba56be24b73b2d025ce7e4384c45e4d0086dddf24bdd8dff3"}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xffffff00, 'batadv_slave_0\x00', 'rose0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x41}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) 48.921294503s ago: executing program 9 (id=7015): mkdir(0x0, 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x15, 0x1f, {0x1f, 0x22, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000017c0)={0x5, r0, 0x26, {0x80000001, 0x7}, 0x13}, 0x1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000003c0)={0x1}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]}) unlink(&(0x7f00000002c0)='./file0\x00') 46.063702774s ago: executing program 9 (id=7027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x90) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default user:t0000000000000004096 '], 0x31, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='io_uring_fail_link\x00', r1, 0x0, 0x11c5}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) syncfs(0xffffffffffffffff) 29.962487504s ago: executing program 47 (id=7027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x90) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default user:t0000000000000004096 '], 0x31, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='io_uring_fail_link\x00', r1, 0x0, 0x11c5}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) syncfs(0xffffffffffffffff) 15.115370067s ago: executing program 1 (id=7136): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000087}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x2e) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x400002) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r1, 0x0}) syz_io_uring_complete(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x2, 0x80805, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x1, 0x101402) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) syz_open_dev$vim2m(0x0, 0x8, 0x2) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x6aa00, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000200)={0x9, 0x8000, 0x5, 0x101, 0xe, "094966b0c687ca6a"}) 11.578405951s ago: executing program 1 (id=7148): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010040000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x0, 0xe, 0x0, &(0x7f0000000b00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xa4c1, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x2000, 0x1e0, 0xc80, 0x258, 0x10001, 0xadfc, 0x4, 0x2, {0x7fff, 0x2}, {0x74, 0x4, 0x1}, {0x40, 0x9c8, 0x1}, {0x0, 0x2}, 0x3, 0x40, 0x0, 0x6, 0x0, 0x4, 0x847f, 0x8, 0xc5e6, 0x8, 0xfc, 0xe3c, 0x20, 0x100, 0x2, 0x6}) 11.521921753s ago: executing program 1 (id=7149): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0xcc001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r6, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1bfffff7", @ANYRES16=r11, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x700) 10.474270338s ago: executing program 1 (id=7153): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000002, 0x8031, 0xffffffffffffffff, 0x6be38000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') read$FUSE(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000007c0)={&(0x7f0000000600)}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000d0ff0000000002000000000000000000000000689b3d4100"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000002c0)=0x1) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="ec76b3", 0x3}], 0x1}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r4, &(0x7f0000000400), 0x0}, 0x20) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chroot(0x0) 9.502052722s ago: executing program 7 (id=7158): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0089364, &(0x7f0000000240)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006207000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1b) 8.948050052s ago: executing program 8 (id=7159): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) getdents(0xffffffffffffffff, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c010000160085020000000000070000ac1e0001000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000002ed2ee8f3cc1299e4e5d7ddff7ae8d87696d6d1828ded148a9f1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000024000900"/212], 0x11c}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="170200000b940fac6e9c8d08597224d2c33e10af7bd87497923be8fa20d419e7bb47ce1c59816dc4f9f816e04b3dcf206be010747ddde7cb6619effda104ea36d51af1bbf1fdadb89e1fbd14c1a61a369449430ce720ccd5bcd54e82bac810b5456c1525d2aa85ecd31ab17775eaa7b9dec0c14d4accf889d3c63ac0f8e70027f906e2840b08", @ANYRES16=r6, @ANYBLOB="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"], 0x218}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000005f1000000000000063000200000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) r7 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50f10, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}}, 0x20040040) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r9 = socket(0x2d, 0x2, 0x0) bind$xdp(r9, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) connect$qrtr(r9, &(0x7f0000000240)={0x2d, 0x1, 0x4001}, 0xc) ppoll(&(0x7f0000000280)=[{r7, 0x10}], 0x1, 0x0, 0x0, 0x0) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x5, 0x80000) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c::=\x00', 0x0) read$FUSE(r7, &(0x7f0000001ac0)={0x2020}, 0x2020) bind$can_raw(r7, &(0x7f0000000000), 0x10) 8.564027018s ago: executing program 3 (id=7160): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) migrate_pages(r1, 0x2589, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0xce0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @loopback, 0x2}}}, 0x30) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) 8.562503197s ago: executing program 7 (id=7161): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000940)={0x249, 0x7d, 0x1, {{0x500, 0x108, 0x9, 0x5000000, {0x0, 0xfffffffe, 0x1}, 0x0, 0x5, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\"\x00}\xfag>\xff\xeb\t\xb51\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00/\xa9Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x01\x00\x00\x00', 0x2e, '\xcf\xb6\x00\xf2\x11\xad\x17\x83\xdb\x85\x82\x00\x00\x00\x00\x00\x00\x00\x97f\xc6!%\xea\xba\x03)\x85P\x84h\xa3\xae\x19\x03\xc3\xae>2\xdbBKv\xa7@-', 0x50, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6\x91\x00\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x249) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x2, 0x0, 0x100d5b8, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x40005, 0x0}]}) r0 = socket$kcm(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x75, 0xfffffffe, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x4, 0x3}, {}, {0x0, 0x9}, {0x10000}, {0xffffffff}, {0x100}, {0x8001}], 0x20}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0x79, 0x1, 0xc, [{@multicast2}, {@local, 0x374}, {@empty, 0x4d2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000200000000000000a2000000180000000700000000000000fd1b0000850000000700000095000000000000008b2193a6d8a1895741e4afed351c9a965e7e9c9924ccd30355110c65"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x22000) mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r3, 0x10000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x89, 0x8, "046318010a2e"}]}}}], 0x18, 0x5}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) finit_module(r5, 0x0, 0x3) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x4000}], 0x1, 0x40800) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT], 0x84}}, 0x4004) setsockopt$inet6_opts(r7, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 8.437149636s ago: executing program 1 (id=7162): r0 = gettid() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x10000) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000001c00)={0xd28, 0xe24, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="260000001200010a0000000000000000075a"], 0x26}}, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r7}, 0x10) sendfile(r6, r6, 0x0, 0xb) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r8, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x100000000000000, 0x6, 0x0, 0x0, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fe95d702020000e4b8fb1703e47463b969e400", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) 7.926145814s ago: executing program 8 (id=7164): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0xcc001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r6, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1bfffff7", @ANYRES16=r11, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x700) 7.884461877s ago: executing program 3 (id=7165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x880, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200ffff040000000300000061642f77f40a00008ac9db9191508a5b814dcafeebfeacd637604b4f412aad955362d0f080a65ff5dd7980079395029ed772def7bfc6920e6866ffed2db7ff097c7a7dc046f844d80710ca8a826618aa093665f731b948f8a69a275029f705d9e255bb4862040c226d936f4d143f080bfd22be77e06fe19332f3f605d6d0d4184d28c75fd9f3819a638067cd68c509f5d9d91e101662fd939bf1475ee476849e19485d549eb673b21f358507e35873018714da9c9a6eb330d829c7097967ecb7b6996952b2a8456a0f49787317f7a4694df7bf6b47f5d1af5b2bd1779a4998"], 0x11a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0]}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']}) r5 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x8, 0x3, 0x814, 0x10, 0x9, 0x1, 0x9, 0x0, 0x6, 0x1, 0x5, 0x104}}, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$UHID_INPUT(r1, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x1000}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 6.792400683s ago: executing program 1 (id=7167): syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806, 0x0, 0x6000}, &(0x7f0000000000), &(0x7f0000000380)) 6.686477375s ago: executing program 8 (id=7168): syz_emit_ethernet(0x36a, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000603"], 0x0) 6.413283397s ago: executing program 8 (id=7170): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x99}, 0x1, 0x0, 0x0, 0x30044050}, 0x0) socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r2 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000027ae9140ac055902b2f0000000010902"], 0x0) write$usbip_server(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYBLOB="83d9d822d5e59667f0c07929b9d377e095199d039d386b9544d5e49e40832a08b5df923d83f43f2fe56f598fba12a6a7a3c3"], 0x35) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 6.22027726s ago: executing program 7 (id=7171): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000c0b01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xe0ff, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) io_setup(0x400, &(0x7f0000000900)=0x0) io_submit(r3, 0x1, &(0x7f0000000940)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000040)="28337e3684a261fc72e843e838c63e89249d4c11928434a7b81697b46d8703cee3cb511b19bb7a17afc34e87e81144c15767ecdc74a9c1fbc57653873479242834c3d7fd86fd95ea90", 0x49, 0x6, 0x0, 0x2}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffab}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000180)) r7 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 3.494419095s ago: executing program 3 (id=7173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xe01, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000080)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x40, 0x160102) mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x8, 0x80010, r1, 0x82000000) 3.469737585s ago: executing program 6 (id=7174): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="34000000000000000000000007000000832304"], 0x38}}], 0x2, 0x80) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000240)={'netpci0\x00'}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000001580)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x4}}, 0x30) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, 0x0, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x30, r3, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, r3, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x70}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x99}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x6c}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x3d}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xba}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x8}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff93}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x47}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2a}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x67}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10, 0x42}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 3.380021086s ago: executing program 6 (id=7175): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000003c0)="4ef40bd3ab92b592edcd88df282249a0379344aebe1e9d16106c4b1f9b0e0bda89f8eaac42d9f18b521ad3199d09a390172ca08eda3984ea00ec3e8f82dcf4e5b63909519662c0", 0x47}, {&(0x7f0000000480)="8d14f5b217dc709ed9cb518298b951ef091ebeaa14c1ae1445999ffd4dcfbbc3d9f4d6102753cf1a72ae1a13ffa2ed3dcc7a2b2bf1769ef812e53e921dff1c588a99daeb53f8d8c8a98e6ad01f552d120f599d1920bdd8825816f3aa6f5579f28763b712a1f0bc57050979344d5de947a9c27658bb888aeebd8576f25c254ea4bb973d265efffef133b51b35519152d61578fce3fced7451f121", 0x9a}, {&(0x7f0000000580)="a63c5ac7f3677cfa916c9e1b0ed6303ca7dc79cbbf1cd5ea6f10c9b174470ce6f23e6fe7dc301acef3f6763acfd92918cf006665081483143941c89582bf8ef0caa9221c9ae44aac417ffd12f2d504bd62b6674786813c9d9e42a298bda2ae1fa4c880687760d906357ef695ae9614", 0x6f}, {&(0x7f0000000600)="ca7091606f72d05b2df231d92adee6a64c28c3d034fc9560051f362ed8f9158418477670dbfccc58414d551e76d5fc75b3aa62d910b37aab6684f332b679e94e327be7403d56c3edac9422293a488ade077903c4e99f344e9e677ee339f0bfcc1ba1238cfe118b9574b150f1b97d88e9bf27613a29b3dd87fffdde9a2fa015f9", 0x80}, {&(0x7f0000000680)="ef89e3f0e83b99cac22df52dbae3dea1238ca554f079b70d11d9f3070def6225f665961364206d775c06ba12e51a52c972b5a95abe2959d3d4dc1ce4466984c2f2ee6f429120694c3835aecfc25cb5f186b2c77cd1ebf7b5d165fe6366747912c7bc8a3a9479cb74a9ecf6b3832f963436317dcc47eee713f20d1b5837cb527545cd", 0x82}, {&(0x7f0000000280)="8ac940404ca6f75509a999b3a910a963a0dcb04f7640ee52f26bc4d1dc0e868e4ab1610f20634b2f58", 0x29}, {&(0x7f0000000740)="136b13f9f9d0278ea260d6e9b4422d3ecdf56ab3b5b71a56f22bfb83db47709a5719c662c777e5a5c1f49a7ae72638add9aa4e489337077b3108ab83a50f7834b351e1a60822cb64f05b6bc5b53a538c2ba051d69ae43b70b82ebd6d834e266d4281bcb892c9039ae182233fc93d7cba44497ed7498faab7802e6cfa94521a38", 0x80}], 0x8, &(0x7f0000000880)=[{0xd8, 0x10a, 0x401, "222d3d34497cafd0c630026b890101c2e950ee6e34c4d5848289c700a5d8d4b1d4829f3ccec20d415b410c3abe2d68e18ec14ef6d9af87a2a5e594d22c4eeeb20a20a08d95f8632e1fd9ff5ac71ea7839013c117cb6459a36a591ca65eba12bd1cc7e35272f9239b3e3f40ea116f8c4f0f7e1e8d84a03c8765cc8219b376deb3211db2adb692b772d6ad472956512ba3064503746049634e2e5f7aacc5f46ca7e00d2775f454f8511083a89be6a2abf66caa6f0a5367ca66df75478cc3ca1c7f533080aa22f35d41"}, {0x60, 0x10c, 0x4, "b85a8e16f2e9a27cf0e86b8e63c4066f684cb5f33ee36c612bb8cd02655a78971c3ec773e3a840fb879cb8de184a23ecc71cba1ba02a324d6381f017f2d50bc533465a4aff6745fb20d584"}], 0x138}, 0x4081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000070000000200000004000000"], 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4441, 0x42) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 3.290202203s ago: executing program 3 (id=7176): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) memfd_secret(0xa51cd372813f45c5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './bus\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) io_setup(0x81, &(0x7f0000000040)) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x8, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x7, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x3, 0x33b9, 0x9, 0xfffffffc, 0x0, 0x9, 0xb, 0xcb, 0x3, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0x4, 0x1, 0x807fe, 0x7fff, 0x10000, 0x4, 0x8000], [0x2, 0x1, 0x10000, 0x7, 0xc, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x2, 0x80000101, 0x8, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6e, 0x80b, 0xfffffffe, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x400, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x40, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x8, 0x47, 0x3, 0x0, 0x11, 0x1000003, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10004, 0x1, 0x0, 0x3, 0x71d], [0x81, 0x3, 0x1, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0xc, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x5, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x2, 0x101, 0x7, 0x9, 0x4, 0x0, 0x2, 0x400, 0x8, 0x0, 0x8, 0x3, 0x9a37247, 0x8, 0x6, 0x2, 0x7, 0xfffffff7, 0x5]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) unshare(0xc040480) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd20a, 0xd, "10120dfe0ef7f0200000ff490a0080002a00"}) 2.715786389s ago: executing program 8 (id=7177): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) r2 = getuid() ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f00000006c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x58240, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000480)) ioperm(0x0, 0x2, 0x7e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000300), &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000480), &(0x7f0000000500), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x19, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffff}, 0x10, r6}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) ptrace$getregs(0xc, r9, 0x4, &(0x7f0000000240)=""/65) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904"], 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 2.267160295s ago: executing program 6 (id=7178): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0xcc001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r7, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, r7, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1bfffff7", @ANYRES16=r13, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x700) 1.998178622s ago: executing program 7 (id=7179): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) fsopen(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r3, &(0x7f0000000340)=""/125, 0x7d, 0x66fe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0x6c, 0x32, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x81}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc68}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b29, &(0x7f0000000040)={'wlan1\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setregid(r6, 0x0) setresgid(r6, 0xee01, 0x0) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) fstat(r0, &(0x7f0000000440)) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa2242) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000080)=0xfffffffb) 1.182797214s ago: executing program 6 (id=7180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0xfc}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000002240)=0x7) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000022c0)={0x3, 0x80000000, 0xb16, 0x0, 0xe}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x60, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000002000000030900008500000041000000", @ANYRES8=r2, @ANYBLOB='\x00'/20, @ANYBLOB], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb3280df659b977f16d875fcc707b3cbb7b7a9c1d65d36636748dffc9414d25c561e46fe57c40e41404929394b03cdee6a1b0981334afa94d03d91841c75a69c2069ba4bbe", 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='wchan\x00') (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_targets\x00') getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, &(0x7f0000000040)) (async) read$FUSE(r6, &(0x7f00000011c0)={0x2020}, 0x2020) (async) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x1c, &(0x7f0000000040)="ff02040000ffff2be82db1af00"/24, 0x18) 973.299516ms ago: executing program 6 (id=7181): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xff, 0x80801) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1}) write$eventfd(r1, &(0x7f00000000c0)=0x4, 0x8) r2 = gettid() r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r4, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) tkill(r2, 0x8) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, &(0x7f0000000280)={"1106e19ad85f0c7859547d5ec47ecdd2e5a983a48f2d495c36be6a0da89b", 0x101, 0x1, 0x1, 0x8, 0xc, 0x1, 0x7f4, 0x0, [0x6, 0xd667, 0x1, 0xffff, 0x101, 0xff, 0x10, 0xfffffff4, 0xf, 0x7, 0xff, 0x9, 0x7b35, 0x4, 0x0, 0x7f, 0x5, 0xe, 0xc]}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12011003ea969420ca16021558510102030109021b0001050d9001090434000159492e2609050302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 794.098247ms ago: executing program 7 (id=7182): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x6, 0x25dfdbff, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @empty=0x900}]}, 0x24}}, 0x48010) 646.165759ms ago: executing program 7 (id=7183): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4e04, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x77f}}}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000300)=ANY=[@ANYBLOB="149c1fb3768439bec556060000002e0001df250400000062d597e49f86c7e264f9a0572a687fa28fb090265f8284b371714ea26d03ce0f"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100153a42908f00a7172bb88010203010902240001eec701000904020002ffffff0009050b0000000000000905b6c98001a471b9fed252bcb029f3bc5a4cc1f6fedc4bf29d08d9585bf5460d58f85c815b4a803db2d083a52c0071d4decfd7b4afd7ae5b02d0d83df2184992561847be9edccc8535e00a0f2d544d27f75488c115686d4d62a72292b989c986c115a4b4bf18bd1a7e46b133c9c2cb8391ef4d6feed8e0945a29cacfc2787a9fdf1f983d9911df6851d49c8167669ded2b"], 0x0) 587.271165ms ago: executing program 3 (id=7184): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000ff0000000000000000d17d000000000000000000000000000000000000000000ffffffff0000000000000000000000000000001200000000000000000000000000080000000000000800000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011"]}, 0x109) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0xe0000000], 0x0, 0x0, 0x0}, 0x1e8) 191.537467ms ago: executing program 3 (id=7185): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000851) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2) epoll_create(0x80f04) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r3}, 0xffffffffffffff89) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r4, &(0x7f0000000040)=""/44, 0x2c) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000240)=0x7d}}) r6 = eventfd2(0xff, 0x80801) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1, r6}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x8021}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x42200, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x305) epoll_create1(0x0) 177.218197ms ago: executing program 8 (id=7186): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xb6a8}, 0xa1}], 0x2, 0x0, 0x0) 0s ago: executing program 6 (id=7187): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xcf}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x76}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x11, r4, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) kernel console output (not intermixed with test programs): 8-1: SerialNumber: syz [ 1948.332104][T16662] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1948.375547][T16662] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1948.397130][T16662] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1948.417722][T16662] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1948.433753][T30275] usb 8-1: config 0 descriptor?? [ 1948.448948][T16662] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1948.622923][T16673] netlink: 165 bytes leftover after parsing attributes in process `syz.6.6605'. [ 1948.985352][T30275] gs_usb 8-1:0.0: Configuring for 2 interfaces [ 1949.633817][T16685] Bluetooth: hci7: Frame reassembly failed (-84) [ 1949.742431][ T1088] Bluetooth: hci7: Frame reassembly failed (-84) [ 1950.787006][T30275] gs_usb 8-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1950.846430][T30275] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 1951.034660][T30275] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -32 [ 1951.690411][ T982] usb 8-1: USB disconnect, device number 100 [ 1951.897551][ T5834] Bluetooth: hci7: command 0x1003 tx timeout [ 1951.903943][T28689] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1952.240072][T16717] xt_NFQUEUE: number of total queues is 0 [ 1952.653896][T16726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6619'. [ 1954.009057][ T982] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 1955.053978][T16750] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1955.082014][T16750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1955.258162][ T982] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1955.316807][ T982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1955.391395][ T982] usb 8-1: config 0 descriptor?? [ 1956.643138][ T982] ath6kl: Failed to submit usb control message: -110 [ 1956.650188][ T982] ath6kl: unable to send the bmi data to the device: -110 [ 1956.657974][ T982] ath6kl: Unable to send get target info: -110 [ 1956.675679][ T982] ath6kl: Failed to init ath6kl core: -110 [ 1956.682634][ T982] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1958.209832][ T982] usb 8-1: USB disconnect, device number 101 [ 1958.320729][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6634'. [ 1958.554311][T16786] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1958.560936][T16786] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1958.576768][T16786] vhci_hcd vhci_hcd.0: Device attached [ 1959.081928][ T9535] Bluetooth: hci7: command 0x1003 tx timeout [ 1959.092082][T14255] Bluetooth: hci6: command 0x0405 tx timeout [ 1959.098209][ T5834] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1959.332593][T28931] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 1959.631931][T28931] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1959.748860][T28931] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1959.836748][ T8400] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 1960.008357][T28931] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 1960.019344][T28931] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 19, changing to 4 [ 1960.042309][T28931] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 479, setting to 0 [ 1960.213324][ T6225] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1960.224014][T28931] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1960.236998][T28931] usb 7-1: string descriptor 0 read error: -22 [ 1960.243545][T28931] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1960.256297][T28931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.279109][T16781] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1960.303184][T28931] usb 7-1: low speed audio streaming not supported [ 1960.373750][T16803] usb 6-1: USB disconnect, device number 68 [ 1960.430655][ T6225] usb 2-1: config index 0 descriptor too short (expected 8192, got 18) [ 1960.440842][T16804] hub 6-0:1.0: USB hub found [ 1960.446347][T16804] hub 6-0:1.0: 1 port detected [ 1960.501003][ T6225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1960.648628][ T6225] usb 2-1: config 0 has no interfaces? [ 1960.702027][ T6225] usb 2-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1960.714235][ T982] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1960.841735][ T6225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.848521][T28931] usb 7-1: USB disconnect, device number 44 [ 1960.867612][ T6225] usb 2-1: config 0 descriptor?? [ 1960.899550][ T982] usb 6-1: device descriptor read/64, error -32 [ 1960.935537][T16797] nvme_fabrics: missing parameter 'transport=%s' [ 1960.942076][T16797] nvme_fabrics: missing parameter 'nqn=%s' [ 1961.088709][T16787] vhci_hcd: cannot find a urb of seqnum 33125 max seqnum 4 [ 1961.175794][ T6225] usb 2-1: string descriptor 0 read error: -71 [ 1961.188356][ T6225] usb 2-1: USB disconnect, device number 127 [ 1961.200577][ T37] vhci_hcd: stop threads [ 1961.211952][ T37] vhci_hcd: release socket [ 1961.225197][ T37] vhci_hcd: disconnect device [ 1961.250288][ T982] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1961.400418][ T982] usb 6-1: device descriptor read/64, error -32 [ 1961.540410][ T982] usb usb6-port1: attempt power cycle [ 1961.849371][ T982] raw-gadget.2 gadget.5: failed to queue resume event [ 1962.009817][ T982] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1962.041568][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 1962.061500][ T982] usb 6-1: device descriptor read/8, error -32 [ 1962.201973][ T982] raw-gadget.2 gadget.5: failed to queue suspend event [ 1962.215260][ T982] raw-gadget.2 gadget.5: failed to queue reset event [ 1962.309810][T16823] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6643'. [ 1962.332468][T16819] FAULT_INJECTION: forcing a failure. [ 1962.332468][T16819] name failslab, interval 1, probability 0, space 0, times 0 [ 1962.352031][ T982] raw-gadget.2 gadget.5: failed to queue resume event [ 1962.363222][T16819] CPU: 1 UID: 0 PID: 16819 Comm: syz.6.6644 Not tainted syzkaller #0 PREEMPT(full) [ 1962.363245][T16819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1962.363254][T16819] Call Trace: [ 1962.363260][T16819] [ 1962.363267][T16819] dump_stack_lvl+0x16c/0x1f0 [ 1962.363288][T16819] should_fail_ex+0x512/0x640 [ 1962.363310][T16819] ? fs_reclaim_acquire+0xae/0x150 [ 1962.363330][T16819] should_failslab+0xc2/0x120 [ 1962.363348][T16819] __kmalloc_noprof+0xdd/0x870 [ 1962.363369][T16819] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1962.363396][T16819] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1962.363417][T16819] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1962.363441][T16819] ? tomoyo_profile+0x47/0x60 [ 1962.363460][T16819] tomoyo_path_number_perm+0x245/0x580 [ 1962.363478][T16819] ? tomoyo_path_number_perm+0x237/0x580 [ 1962.363500][T16819] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1962.363521][T16819] ? find_held_lock+0x2b/0x80 [ 1962.363560][T16819] ? find_held_lock+0x2b/0x80 [ 1962.363575][T16819] ? hook_file_ioctl_common+0x145/0x410 [ 1962.363596][T16819] ? __fget_files+0x20e/0x3c0 [ 1962.363619][T16819] security_file_ioctl+0x9b/0x240 [ 1962.363642][T16819] __x64_sys_ioctl+0xb7/0x210 [ 1962.363660][T16819] do_syscall_64+0xcd/0xf80 [ 1962.363677][T16819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1962.363693][T16819] RIP: 0033:0x7f406d18f749 [ 1962.363707][T16819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1962.363721][T16819] RSP: 002b:00007f406dfa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1962.363737][T16819] RAX: ffffffffffffffda RBX: 00007f406d3e6090 RCX: 00007f406d18f749 [ 1962.363747][T16819] RDX: 0000000000000000 RSI: 0000000000005309 RDI: 0000000000000004 [ 1962.363756][T16819] RBP: 00007f406dfa5090 R08: 0000000000000000 R09: 0000000000000000 [ 1962.363766][T16819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1962.363775][T16819] R13: 00007f406d3e6128 R14: 00007f406d3e6090 R15: 00007ffe56ff6058 [ 1962.363799][T16819] [ 1962.363811][T16819] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1962.380312][T16826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1962.469003][ T982] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1962.473006][T16830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6643'. [ 1962.477809][T16819] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1962.584262][T16826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1962.629540][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 1962.636727][ T982] usb 6-1: device descriptor read/8, error -32 [ 1962.653828][T16823] loop2: detected capacity change from 0 to 7 [ 1962.664438][ C1] blk_print_req_error: 11 callbacks suppressed [ 1962.664455][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1962.679781][ C1] buffer_io_error: 15 callbacks suppressed [ 1962.679791][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1962.713403][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1962.722645][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1962.732149][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1962.741305][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1962.750841][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1962.760002][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1962.768738][ T982] raw-gadget.2 gadget.5: failed to queue suspend event [ 1962.775901][ T982] usb usb6-port1: unable to enumerate USB device [ 1962.778264][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1962.816206][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1962.825383][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1962.834336][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1962.843571][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1962.852116][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1962.861326][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1962.869308][T16823] ldm_validate_partition_table(): Disk read failed. [ 1962.876303][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1962.885453][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1962.893877][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1962.903060][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1962.913340][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1962.922539][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1962.933479][T16823] Dev loop2: unable to read RDB block 0 [ 1962.942381][T16823] loop2: unable to read partition table [ 1962.948187][T16823] loop2: partition table beyond EOD, truncated [ 1962.998956][T16823] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1963.012543][T28931] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1963.104346][T16835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1963.533188][T28931] usb 2-1: Using ep0 maxpacket: 32 [ 1963.550209][T28931] usb 2-1: config 3 has an invalid interface number: 136 but max is 2 [ 1963.558738][T28931] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 1963.579214][T28931] usb 2-1: config 3 has no interface number 0 [ 1963.585423][T28931] usb 2-1: config 3 interface 136 has no altsetting 0 [ 1964.382180][T16841] Bluetooth: hci7: Frame reassembly failed (-84) [ 1964.650748][T28931] usb 2-1: New USB device found, idVendor=0bda, idProduct=0158, bcdDevice= 0.4b [ 1964.660996][T28931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.668994][T28931] usb 2-1: Product: syz [ 1964.697295][T28931] usb 2-1: Manufacturer: syz [ 1964.701934][T28931] usb 2-1: SerialNumber: syz [ 1964.831375][T16848] use of bytesused == 0 is deprecated and will be removed in the future, [ 1964.874521][T16848] use the actual size instead. [ 1964.960216][ T30] audit: type=1400 audit(2000001867.756:1591): avc: denied { create } for pid=16847 comm="syz.6.6650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1965.056586][ T30] audit: type=1400 audit(2000001867.756:1592): avc: denied { write } for pid=16847 comm="syz.6.6650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1965.086711][T28931] ums-realtek 2-1:3.136: USB Mass Storage device detected [ 1965.265051][T28931] usb 2-1: USB disconnect, device number 2 [ 1965.327999][T16860] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1965.572914][ T8400] vhci_hcd: vhci_device speed not set [ 1966.639047][ T5834] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1967.874430][ T30] audit: type=1400 audit(2000001870.478:1593): avc: denied { mounton } for pid=16878 comm="syz.8.6662" path="/558/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 1968.233890][ T5834] Bluetooth: hci8: command 0x1003 tx timeout [ 1968.237098][T14255] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1968.655341][T16905] sctp: [Deprecated]: syz.7.6667 (pid 16905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1968.655341][T16905] Use struct sctp_sack_info instead [ 1968.811361][T16900] loop7: detected capacity change from 0 to 2 [ 1969.135765][T16906] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.6666' sets config #0 [ 1969.146878][T16906] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.6666' sets config #1 [ 1969.601695][T16923] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6670'. [ 1970.419690][T16933] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1970.426412][T16933] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1970.447172][T16933] vhci_hcd vhci_hcd.0: Device attached [ 1970.457594][T16933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1970.475455][T16933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1970.484660][T16935] vhci_hcd: cannot find a urb of seqnum 33125 max seqnum 4 [ 1970.498179][ T3477] vhci_hcd: stop threads [ 1970.502432][ T3477] vhci_hcd: release socket [ 1970.583314][ T8400] usb 8-1: new full-speed USB device number 102 using dummy_hcd [ 1970.781987][ T3477] vhci_hcd: disconnect device [ 1971.033989][ T8400] usb 8-1: config 0 has an invalid interface number: 17 but max is 0 [ 1971.042294][ T8400] usb 8-1: config 0 has no interface number 0 [ 1971.050722][ T8400] usb 8-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=b4.dd [ 1971.061060][ T8400] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.069381][ T8400] usb 8-1: Product: syz [ 1971.073706][ T8400] usb 8-1: Manufacturer: syz [ 1971.078326][ T8400] usb 8-1: SerialNumber: syz [ 1971.138966][ T8400] usb 8-1: config 0 descriptor?? [ 1971.161204][T16945] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1971.335755][T16953] hub 6-0:1.0: USB hub found [ 1971.343530][T16953] hub 6-0:1.0: 1 port detected [ 1971.396317][ T982] raw-gadget.2 gadget.5: failed to queue reset event [ 1971.745123][T16930] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6673'. [ 1971.834455][ T982] raw-gadget.2 gadget.5: failed to queue resume event [ 1972.368609][ T982] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1972.377082][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 1972.386128][ T982] raw-gadget.2 gadget.5: failed to queue reset event [ 1972.477950][ T982] raw-gadget.2 gadget.5: failed to queue resume event [ 1972.624381][ T982] usb 6-1: device descriptor read/64, error -32 [ 1972.758098][ T982] raw-gadget.2 gadget.5: failed to queue suspend event [ 1972.841115][ T982] raw-gadget.2 gadget.5: failed to queue reset event [ 1972.977980][ T982] raw-gadget.2 gadget.5: failed to queue resume event [ 1973.113790][ T982] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1973.156841][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 1973.166100][ T982] raw-gadget.2 gadget.5: failed to queue reset event [ 1973.245250][ T982] raw-gadget.2 gadget.5: failed to queue resume event [ 1973.319993][ T982] usb 6-1: device descriptor read/64, error -32 [ 1973.438343][ T982] raw-gadget.2 gadget.5: failed to queue suspend event [ 1973.667426][ T982] usb usb6-port1: attempt power cycle [ 1973.695241][ T982] raw-gadget.2 gadget.5: failed to queue disconnect event [ 1973.772540][ T982] raw-gadget.2 gadget.5: failed to queue reset event [ 1973.803502][ T8400] snd_usb_podhd 8-1:0.17: Line 6 POD HD300 found [ 1973.846269][ T8400] usb 8-1: selecting invalid altsetting 5 [ 1973.876142][ T982] raw-gadget.2 gadget.5: failed to queue resume event [ 1973.886757][ T8400] snd_usb_podhd 8-1:0.17: set_interface failed [ 1973.893541][ T8400] snd_usb_podhd 8-1:0.17: Line 6 POD HD300 now disconnected [ 1973.904759][ T982] raw-gadget.2 gadget.5: failed to queue reset event [ 1973.920182][ T8400] snd_usb_podhd 8-1:0.17: probe with driver snd_usb_podhd failed with error -22 [ 1973.930564][T16972] loop5: detected capacity change from 0 to 7 [ 1973.953060][ T8400] usb 8-1: USB disconnect, device number 102 [ 1974.143264][ T982] raw-gadget.2 gadget.5: failed to queue resume event [ 1974.239493][ T982] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1974.264257][T16972] Dev loop5: unable to read RDB block 7 [ 1974.277991][T16972] loop5: unable to read partition table [ 1974.283994][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 1974.291116][ T982] usb 6-1: device descriptor read/8, error -32 [ 1974.297635][T16972] loop5: partition table beyond EOD, truncated [ 1974.310762][T16972] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1974.410621][ T982] raw-gadget.2 gadget.5: failed to queue suspend event [ 1974.424058][ T982] raw-gadget.2 gadget.5: failed to queue reset event [ 1974.517374][ T982] raw-gadget.2 gadget.5: failed to queue resume event [ 1974.579550][T16975] Dev loop5: unable to read RDB block 7 [ 1974.590718][T16975] loop5: unable to read partition table [ 1974.601289][ T982] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1974.610693][T16975] loop5: partition table beyond EOD, truncated [ 1974.640766][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 1974.661115][ T982] usb 6-1: device descriptor read/8, error -32 [ 1974.679503][ T30] audit: type=1326 audit(2000001876.858:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16980 comm="syz.7.6686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa021d8f749 code=0x0 [ 1974.827170][ T982] raw-gadget.2 gadget.5: failed to queue suspend event [ 1974.834769][ T982] usb usb6-port1: unable to enumerate USB device [ 1976.123190][T16997] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6688'. [ 1977.850068][T17019] fuse: Bad value for 'fd' [ 1978.499484][T17037] kvm: Disabled LAPIC found during irq injection [ 1978.851272][T17044] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1978.857826][T17044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1978.866718][T17044] vhci_hcd vhci_hcd.0: Device attached [ 1978.981919][ T30] audit: type=1326 audit(2000001880.871:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.8.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fdf8f749 code=0x7ffc0000 [ 1979.100636][ T30] audit: type=1326 audit(2000001880.899:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.8.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fdf8f749 code=0x7ffc0000 [ 1979.146890][T30336] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 1979.154345][T30275] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 1979.176433][ T30] audit: type=1326 audit(2000001880.899:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.8.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7fdf8f749 code=0x7ffc0000 [ 1979.209356][T17050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1979.232043][ T8400] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1979.414053][ T8400] usb 1-1: Using ep0 maxpacket: 16 [ 1979.496662][ T8400] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1979.519159][ T30] audit: type=1326 audit(2000001880.899:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.8.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fdf8f749 code=0x7ffc0000 [ 1979.552132][ T8400] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1979.552204][ T30] audit: type=1326 audit(2000001880.899:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.8.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fdf8f749 code=0x7ffc0000 [ 1979.611346][ T8400] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1979.621867][T30275] usb 8-1: config index 0 descriptor too short (expected 8192, got 18) [ 1979.641230][T30275] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1979.670206][ T8400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.670255][T30275] usb 8-1: config 0 has no interfaces? [ 1979.689135][ T8400] usb 1-1: Product: syz [ 1979.693504][ T30] audit: type=1326 audit(2000001880.899:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.8.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7fdf8f749 code=0x7ffc0000 [ 1979.723784][T30275] usb 8-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1979.732956][T30275] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1979.741070][ T30] audit: type=1326 audit(2000001880.908:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.8.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fdf8f749 code=0x7ffc0000 [ 1979.771435][ T30] audit: type=1326 audit(2000001880.908:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.8.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fdf8f749 code=0x7ffc0000 [ 1979.796804][ T8400] usb 1-1: Manufacturer: syz [ 1979.797668][T30275] usb 8-1: config 0 descriptor?? [ 1979.817437][ T30] audit: type=1326 audit(2000001880.908:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.8.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb7fdf8f749 code=0x7ffc0000 [ 1979.829119][ T8400] usb 1-1: SerialNumber: syz [ 1979.875095][ T8400] usb 1-1: config 0 descriptor?? [ 1979.994815][ T8400] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1980.022155][ T8400] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1980.022878][T17045] vhci_hcd: cannot find a urb of seqnum 129 max seqnum 2 [ 1980.038272][T30275] usb 8-1: string descriptor 0 read error: -71 [ 1980.050973][T30275] usb 8-1: USB disconnect, device number 103 [ 1980.106989][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6705'. [ 1980.511031][T17061] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6705'. [ 1980.520683][T17061] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6705'. [ 1980.555270][ T6760] vhci_hcd: stop threads [ 1980.559680][ T6760] vhci_hcd: release socket [ 1980.573472][ T6760] vhci_hcd: disconnect device [ 1981.019633][ T8400] em28xx 1-1:0.0: chip ID is em2874 [ 1981.360655][T17074] fuse: Bad value for 'fd' [ 1982.617139][T17088] nvme_fabrics: missing parameter 'transport=%s' [ 1982.628514][T17088] nvme_fabrics: missing parameter 'nqn=%s' [ 1982.871127][T17095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1982.903863][T17095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1983.315134][T17070] Process accounting resumed [ 1983.354845][ T8400] usb 1-1: USB disconnect, device number 44 [ 1983.391893][ T8400] em28xx 1-1:0.0: Disconnecting em28xx [ 1983.436303][ T8400] em28xx 1-1:0.0: Freeing device [ 1984.641391][T30336] vhci_hcd: vhci_device speed not set [ 1984.777550][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6720'. [ 1985.406174][T17129] FAULT_INJECTION: forcing a failure. [ 1985.406174][T17129] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.463271][T17129] CPU: 1 UID: 0 PID: 17129 Comm: syz.1.6723 Not tainted syzkaller #0 PREEMPT(full) [ 1985.463297][T17129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1985.463307][T17129] Call Trace: [ 1985.463313][T17129] [ 1985.463320][T17129] dump_stack_lvl+0x16c/0x1f0 [ 1985.463341][T17129] should_fail_ex+0x512/0x640 [ 1985.463363][T17129] ? kmem_cache_alloc_lru_noprof+0x66/0x720 [ 1985.463387][T17129] should_failslab+0xc2/0x120 [ 1985.463404][T17129] kmem_cache_alloc_lru_noprof+0x79/0x720 [ 1985.463425][T17129] ? selinux_socket_create+0xf1/0x540 [ 1985.463449][T17129] ? sock_alloc_inode+0x25/0x1c0 [ 1985.463468][T17129] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1985.463482][T17129] ? sock_alloc_inode+0x25/0x1c0 [ 1985.463495][T17129] sock_alloc_inode+0x25/0x1c0 [ 1985.463509][T17129] alloc_inode+0x64/0x240 [ 1985.463529][T17129] sock_alloc+0x40/0x280 [ 1985.463546][T17129] __sock_create+0xc2/0x8a0 [ 1985.463572][T17129] __sys_socketpair+0x1d8/0x5a0 [ 1985.463596][T17129] ? __pfx___sys_socketpair+0x10/0x10 [ 1985.463615][T17129] ? fput+0x9b/0xd0 [ 1985.463641][T17129] ? __pfx_ksys_write+0x10/0x10 [ 1985.463664][T17129] __x64_sys_socketpair+0x96/0x100 [ 1985.463684][T17129] ? lockdep_hardirqs_on+0x7c/0x110 [ 1985.463702][T17129] do_syscall_64+0xcd/0xf80 [ 1985.463722][T17129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.463739][T17129] RIP: 0033:0x7f2a17d8f749 [ 1985.463754][T17129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1985.463770][T17129] RSP: 002b:00007f2a18cb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1985.463787][T17129] RAX: ffffffffffffffda RBX: 00007f2a17fe5fa0 RCX: 00007f2a17d8f749 [ 1985.463798][T17129] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000011 [ 1985.463808][T17129] RBP: 00007f2a18cb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1985.463818][T17129] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1985.463828][T17129] R13: 00007f2a17fe6038 R14: 00007f2a17fe5fa0 R15: 00007ffcb4446c08 [ 1985.463854][T17129] [ 1985.486148][T17129] socket: no more sockets [ 1987.560995][T17156] serio: Serial port ptm0 [ 1987.745636][T17156] serio: Serial port ptm0 [ 1988.672054][ T8400] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 1988.874913][ T8400] usb 8-1: Using ep0 maxpacket: 8 [ 1988.891679][ T8400] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1988.919660][ T8400] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.946499][ T8400] usb 8-1: Product: syz [ 1988.961688][ T8400] usb 8-1: Manufacturer: syz [ 1988.966391][ T8400] usb 8-1: SerialNumber: syz [ 1988.990456][ T8400] usb 8-1: config 0 descriptor?? [ 1989.018249][ T8400] gspca_main: se401-2.14.0 probing 047d:5003 [ 1989.501587][ T8400] gspca_se401: Wrong descriptor type [ 1989.980986][ T8400] usb 8-1: USB disconnect, device number 104 [ 1990.805336][T17194] Bluetooth: hci7: Frame reassembly failed (-84) [ 1991.100393][ T74] Bluetooth: hci7: Frame reassembly failed (-84) [ 1991.660064][T17197] nvme_fabrics: missing parameter 'transport=%s' [ 1991.666624][T17197] nvme_fabrics: missing parameter 'nqn=%s' [ 1991.754044][T17214] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6747'. [ 1991.816426][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6747'. [ 1992.101489][T17221] overlayfs: failed to clone upperpath [ 1992.231706][ T8400] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1992.416190][ T8400] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 1992.527462][ T8400] usb 2-1: config 0 has no interface number 0 [ 1992.550222][ T8400] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=b4.dd [ 1992.577470][ T8400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.034519][ T5834] Bluetooth: hci7: command 0x1003 tx timeout [ 1993.044230][T14255] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1993.130034][ T8400] usb 2-1: Product: syz [ 1993.134307][ T8400] usb 2-1: Manufacturer: syz [ 1993.138899][ T8400] usb 2-1: SerialNumber: syz [ 1993.183336][ T8400] usb 2-1: config 0 descriptor?? [ 1993.493640][T17238] Bluetooth: hci7: Frame reassembly failed (-84) [ 1993.777502][ T34] Bluetooth: hci7: Frame reassembly failed (-84) [ 1993.790344][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6748'. [ 1994.226271][T17241] random: crng reseeded on system resumption [ 1994.230945][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1994.726106][T17244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6755'. [ 1995.011264][T30275] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1995.287134][T30275] usb 1-1: Using ep0 maxpacket: 16 [ 1995.342320][T30275] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1995.395097][T30275] usb 1-1: config 0 has no interface number 0 [ 1995.408638][T30275] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1995.476366][T30275] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 1995.486347][T30275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.535105][T30275] usb 1-1: Product: syz [ 1995.539542][T30275] usb 1-1: Manufacturer: syz [ 1995.544141][T30275] usb 1-1: SerialNumber: syz [ 1995.551751][T30275] usb 1-1: config 0 descriptor?? [ 1995.770473][ T5834] Bluetooth: hci7: command 0x1003 tx timeout [ 1995.779401][T14255] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1996.583390][ T8400] snd_usb_podhd 2-1:0.17: Line 6 POD HD300 found [ 1996.589773][ T8400] usb 2-1: selecting invalid altsetting 5 [ 1996.608214][T30275] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 1996.802009][ T8400] snd_usb_podhd 2-1:0.17: set_interface failed [ 1996.926683][ T8400] snd_usb_podhd 2-1:0.17: Line 6 POD HD300 now disconnected [ 1997.074384][T30275] usb 1-1: USB disconnect, device number 45 [ 1997.081551][ T8400] snd_usb_podhd 2-1:0.17: probe with driver snd_usb_podhd failed with error -22 [ 1997.115966][ T8400] usb 2-1: USB disconnect, device number 3 [ 1997.146790][T17265] usb usb8: usbfs: process 17265 (syz.7.6762) did not claim interface 0 before use [ 1997.492700][T17271] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6763'. [ 1997.555621][T30336] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 1997.726714][T30336] usb 8-1: device descriptor read/64, error -71 [ 1998.004776][T30336] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 1998.420846][T30336] usb 8-1: device descriptor read/64, error -71 [ 1998.550165][T30336] usb usb8-port1: attempt power cycle [ 1998.688824][T28931] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1998.820197][T17289] Bluetooth: hci7: Frame reassembly failed (-84) [ 1999.156397][ T13] Bluetooth: hci7: Frame reassembly failed (-84) [ 1999.166149][ T13] Bluetooth: hci7: Frame reassembly failed (-84) [ 1999.212935][T30336] usb 8-1: new high-speed USB device number 107 using dummy_hcd [ 1999.234796][T30336] usb 8-1: device descriptor read/8, error -71 [ 1999.245912][T28931] usb 1-1: Using ep0 maxpacket: 8 [ 1999.254339][T28931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1999.267816][T28931] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1999.278292][T28931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.286316][T28931] usb 1-1: Product: syz [ 1999.290854][T28931] usb 1-1: Manufacturer: syz [ 1999.295663][T28931] usb 1-1: SerialNumber: syz [ 1999.304170][T28931] usb 1-1: config 0 descriptor?? [ 1999.421357][T17293] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6771'. [ 1999.555880][T17295] hub 6-0:1.0: USB hub found [ 1999.564010][T17295] hub 6-0:1.0: 1 port detected [ 1999.602369][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 1999.820199][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 1999.895683][T30336] usb 8-1: new high-speed USB device number 108 using dummy_hcd [ 1999.913688][ T8400] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1999.929084][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 1999.934546][T28931] usb 1-1: USB disconnect, device number 46 [ 1999.937365][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 1999.966220][T30336] usb 8-1: device descriptor read/8, error -71 [ 2000.026038][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2000.096566][T30336] usb usb8-port1: unable to enumerate USB device [ 2000.110807][ T8400] usb 6-1: device descriptor read/64, error -32 [ 2000.229118][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2000.241600][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2000.314234][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2000.391557][ T8400] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2000.399469][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2000.406562][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2000.484898][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2000.633662][ T8400] usb 6-1: device descriptor read/64, error -32 [ 2000.974607][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2000.982091][ T8400] usb usb6-port1: attempt power cycle [ 2000.987960][ T5834] Bluetooth: hci7: command 0x1003 tx timeout [ 2000.997086][T14255] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 2000.999376][ T5834] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 2001.014414][ T8400] raw-gadget.2 gadget.5: failed to queue disconnect event [ 2001.025810][T17304] Bluetooth: hci8: Frame reassembly failed (-84) [ 2001.111231][ T13] Bluetooth: hci8: Frame reassembly failed (-84) [ 2001.112121][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2001.133432][ T13] Bluetooth: hci8: Frame reassembly failed (-84) [ 2001.313295][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2001.335205][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2001.575318][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2001.653593][T17317] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6778'. [ 2001.662780][ T8400] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2001.692134][T17317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17317 comm=syz.6.6778 [ 2001.705228][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2001.712360][ T8400] usb 6-1: device descriptor read/8, error -32 [ 2001.783458][T17319] overlayfs: failed to clone upperpath [ 2001.831893][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2001.847033][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2001.907983][T17321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6780'. [ 2001.949561][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2002.030420][ T8400] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2002.056583][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2002.063833][ T8400] usb 6-1: device descriptor read/8, error -32 [ 2002.184771][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2002.192373][ T8400] usb usb6-port1: unable to enumerate USB device [ 2003.091110][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2003.221611][T14255] Bluetooth: hci8: command 0x1003 tx timeout [ 2003.232583][ T5834] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 2003.414624][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2003.564700][ T8400] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2003.572848][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2003.588231][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2004.100893][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2004.216138][ T8400] usb 6-1: device descriptor read/64, error -32 [ 2004.357645][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2004.360157][ T30] audit: type=1400 audit(2000001904.611:1614): avc: denied { read } for pid=17338 comm="syz.7.6786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2004.926324][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2004.936883][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2005.090285][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2005.435610][ T8400] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2005.443409][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2005.479223][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2005.607472][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2005.747163][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6793'. [ 2006.208391][ T8400] usb 6-1: device descriptor read/64, error -32 [ 2006.354365][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2006.362762][ T8400] usb usb6-port1: attempt power cycle [ 2006.371339][ T8400] raw-gadget.2 gadget.5: failed to queue disconnect event [ 2006.407437][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2006.503693][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2006.580712][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2006.670523][T17366] bond0: entered promiscuous mode [ 2006.691171][T17366] batadv0: entered promiscuous mode [ 2006.740201][T17366] debugfs: 'hsr0' already exists in 'hsr' [ 2006.760658][T17366] Cannot create hsr debugfs directory [ 2006.778220][T17366] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 2006.810727][T17366] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 2006.824945][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2006.923108][ T8400] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2006.953089][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2006.960319][ T8400] usb 6-1: device descriptor read/8, error -32 [ 2007.102762][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2007.219560][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2007.347367][T17387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6797'. [ 2008.236660][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2008.321131][ T8400] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2008.375044][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2008.395617][ T8400] usb 6-1: device descriptor read/8, error -32 [ 2008.600075][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2008.612394][ T8400] usb usb6-port1: unable to enumerate USB device [ 2008.730527][T17392] Bluetooth: hci7: Frame reassembly failed (-84) [ 2009.596499][ T5834] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 2011.019457][T17405] netlink: 'syz.0.6803': attribute type 39 has an invalid length. [ 2011.070657][T17397] bond4 (unregistering): Released all slaves [ 2011.345883][T17409] hub 6-0:1.0: USB hub found [ 2011.351774][T17409] hub 6-0:1.0: 1 port detected [ 2011.389597][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2011.550664][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2011.688958][ T8400] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2011.751144][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2011.761682][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2011.769059][ T5834] Bluetooth: hci7: command 0x1003 tx timeout [ 2011.782484][T14255] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 2011.885263][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2012.057251][ T8400] usb 6-1: device descriptor read/64, error -32 [ 2012.176573][T17419] overlayfs: missing 'lowerdir' [ 2012.222083][T17419] overlayfs: failed to clone lowerpath [ 2012.936568][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2013.618374][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2013.731625][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2013.827018][ T8400] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2013.842639][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2013.851935][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2013.912239][T30336] usb 8-1: new full-speed USB device number 109 using dummy_hcd [ 2013.933651][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2013.966389][T17430] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6809'. [ 2014.008545][ T8400] usb 6-1: device descriptor read/64, error -32 [ 2014.340816][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2014.349348][ T8400] usb usb6-port1: attempt power cycle [ 2014.354975][ T8400] raw-gadget.2 gadget.5: failed to queue disconnect event [ 2014.362894][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2014.437375][T30336] usb 8-1: not running at top speed; connect to a high speed hub [ 2014.450214][T30336] usb 8-1: config 1 has an invalid interface number: 78 but max is 0 [ 2014.456355][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2014.458516][T30336] usb 8-1: config 1 has no interface number 0 [ 2014.471836][T30336] usb 8-1: config 1 interface 78 has no altsetting 0 [ 2014.537701][T30336] usb 8-1: string descriptor 0 read error: -22 [ 2014.547309][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2014.549778][T30336] usb 8-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 2014.567377][T30336] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.575663][T17430] ubi: mtd0 is already attached to ubi31 [ 2014.605732][T30336] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 2014.629111][T30336] usb 8-1: selecting invalid altsetting 0 [ 2014.731066][ T2339] pvrusb2: Invalid write control endpoint [ 2014.784367][ T2339] pvrusb2: Invalid write control endpoint [ 2015.237530][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2015.244413][ T2339] pvrusb2: Invalid write control endpoint [ 2015.251255][ T2339] pvrusb2: Invalid write control endpoint [ 2015.256948][T30336] usb 8-1: USB disconnect, device number 109 [ 2015.256988][ T2339] pvrusb2: Invalid write control endpoint [ 2015.279864][ T2339] pvrusb2: Invalid write control endpoint [ 2015.286214][ T2339] pvrusb2: Invalid write control endpoint [ 2015.292548][ T2339] pvrusb2: Invalid write control endpoint [ 2015.298566][ T2339] pvrusb2: Invalid write control endpoint [ 2015.304736][ T2339] pvrusb2: Invalid write control endpoint [ 2015.310736][ T2339] pvrusb2: Invalid write control endpoint [ 2015.321487][ T2339] pvrusb2: Invalid write control endpoint [ 2015.323744][ T8400] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2015.336502][ T2339] pvrusb2: Invalid write control endpoint [ 2015.349067][ T2339] pvrusb2: Invalid write control endpoint [ 2015.361679][ T2339] pvrusb2: Invalid write control endpoint [ 2015.374245][ T2339] pvrusb2: Invalid write control endpoint [ 2015.377036][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2015.386934][ T2339] pvrusb2: Invalid write control endpoint [ 2015.389162][ T8400] usb 6-1: device descriptor read/8, error -32 [ 2015.400267][ T2339] pvrusb2: Invalid write control endpoint [ 2015.412746][ T2339] pvrusb2: Invalid write control endpoint [ 2015.425183][ T2339] pvrusb2: Invalid write control endpoint [ 2015.439114][ T2339] pvrusb2: Invalid write control endpoint [ 2015.450066][ T2339] pvrusb2: Invalid write control endpoint [ 2015.456187][ T2339] pvrusb2: Invalid write control endpoint [ 2015.462511][ T2339] pvrusb2: Invalid write control endpoint [ 2015.468345][ T2339] pvrusb2: Invalid write control endpoint [ 2015.474559][ T2339] pvrusb2: Invalid write control endpoint [ 2015.480645][ T2339] pvrusb2: Invalid write control endpoint [ 2015.492418][ T2339] pvrusb2: Invalid write control endpoint [ 2015.498489][ T2339] pvrusb2: Invalid write control endpoint [ 2015.504486][ T2339] pvrusb2: Invalid write control endpoint [ 2015.514400][ T2339] pvrusb2: Invalid write control endpoint [ 2015.520468][ T2339] pvrusb2: Invalid write control endpoint [ 2015.526277][ T2339] pvrusb2: Invalid write control endpoint [ 2015.535045][ T2339] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 2015.564899][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2015.590918][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2015.645021][ T2339] cs53l32a 3-0011: chip found @ 0x22 (pvrusb2_b) [ 2015.661338][ T2339] pvrusb2: Invalid write control endpoint [ 2015.678416][ T2339] pvrusb2: Invalid write control endpoint [ 2015.686886][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2015.697112][ T2339] pvrusb2: Invalid write control endpoint [ 2015.711355][ T2339] pvrusb2: Invalid write control endpoint [ 2015.720250][ T2339] pvrusb2: Invalid write control endpoint [ 2015.734920][ T2339] pvrusb2: Invalid write control endpoint [ 2015.749888][ T2339] pvrusb2: Invalid write control endpoint [ 2015.765377][ T2339] pvrusb2: Invalid write control endpoint [ 2015.772040][ T2339] pvrusb2: Invalid write control endpoint [ 2015.778186][ T2339] pvrusb2: Invalid write control endpoint [ 2015.783359][ T8400] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2015.786469][ T2339] pvrusb2: Invalid write control endpoint [ 2015.797833][ T2339] pvrusb2: Invalid write control endpoint [ 2015.811025][ T2339] pvrusb2: Invalid write control endpoint [ 2015.828433][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2015.831512][ T2339] pvrusb2: Invalid write control endpoint [ 2015.835565][ T8400] usb 6-1: device descriptor read/8, error -32 [ 2015.872546][ T2339] pvrusb2: Invalid write control endpoint [ 2015.892326][ T2339] pvrusb2: Invalid write control endpoint [ 2015.910947][ T2339] pvrusb2: Invalid write control endpoint [ 2015.936306][ T2339] pvrusb2: Invalid write control endpoint [ 2015.961336][ T2339] pvrusb2: Invalid write control endpoint [ 2015.984684][ T2339] pvrusb2: Invalid write control endpoint [ 2016.014680][ T2339] pvrusb2: Invalid write control endpoint [ 2016.050051][ T2339] pvrusb2: Attached sub-driver cs53l32a [ 2016.085788][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2016.099097][ T8400] usb usb6-port1: unable to enumerate USB device [ 2016.243370][T17457] Bluetooth: hci7: Frame reassembly failed (-84) [ 2016.325550][T14255] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 2016.341317][ T6757] Bluetooth: hci7: Frame reassembly failed (-84) [ 2016.621171][ T2339] pvrusb2: Invalid write control endpoint [ 2016.654841][ T2339] pvrusb2: Invalid write control endpoint [ 2016.681662][ T2339] pvrusb2: Invalid write control endpoint [ 2016.706256][ T2339] pvrusb2: Invalid write control endpoint [ 2016.729672][ T2339] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 2016.765219][ T2339] pvrusb2: Device being rendered inoperable [ 2016.780091][ T2339] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 2016.891062][ T2339] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 2017.654819][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6818'. [ 2018.520248][T28689] Bluetooth: hci7: command 0x1003 tx timeout [ 2018.552219][ T5834] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 2019.579918][T17492] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6825'. [ 2019.709443][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6825'. [ 2020.174037][ T8400] libceph: connect (1)[c::]:6789 error -101 [ 2020.184799][ T8400] libceph: mon0 (1)[c::]:6789 connect error [ 2020.476699][ T8400] libceph: connect (1)[c::]:6789 error -101 [ 2020.484037][ T8400] libceph: mon0 (1)[c::]:6789 connect error [ 2021.089758][ T8400] libceph: connect (1)[c::]:6789 error -101 [ 2021.104073][T17499] ceph: No mds server is up or the cluster is laggy [ 2021.111613][ T8400] libceph: mon0 (1)[c::]:6789 connect error [ 2021.440670][T17515] kAFS: unable to lookup cell '(,' [ 2021.445648][ T8400] hid-generic FFFF:0008:0003.0042: item fetching failed at offset 0/2 [ 2021.603309][ T8400] hid-generic FFFF:0008:0003.0042: probe with driver hid-generic failed with error -22 [ 2023.025740][T17528] nvme_fabrics: missing parameter 'transport=%s' [ 2023.036389][T17528] nvme_fabrics: missing parameter 'nqn=%s' [ 2023.202806][T17535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2023.224159][T17535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2023.234469][T30275] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 2023.408067][T30275] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2023.432687][T30275] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2023.452983][T30275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.469662][T30275] usb 2-1: Product: syz [ 2023.480501][T30275] usb 2-1: Manufacturer: syz [ 2023.491173][T30275] usb 2-1: SerialNumber: syz [ 2023.504624][T30275] usb 2-1: config 0 descriptor?? [ 2023.587833][T30275] rc_core: IR keymap rc-streamzap not found [ 2023.593934][T30275] Registered IR keymap rc-empty [ 2023.600396][T30275] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2023.613730][T30275] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input92 [ 2023.631062][ T982] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 2023.799568][T30275] usb 2-1: USB disconnect, device number 4 [ 2023.809046][ T982] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2023.829109][ T982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.857178][ T982] usb 8-1: config 0 descriptor?? [ 2023.887114][T17550] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 2023.893659][T17550] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2023.905422][T17550] vhci_hcd vhci_hcd.0: Device attached [ 2023.915403][T17550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2023.925786][T17550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2023.940231][T17551] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 2023.947594][ T6756] vhci_hcd: stop threads [ 2023.951981][ T6756] vhci_hcd: release socket [ 2023.956407][ T6756] vhci_hcd: disconnect device [ 2024.199411][ T8400] libceph: connect (1)[c::]:6789 error -101 [ 2024.205735][ T8400] libceph: mon0 (1)[c::]:6789 connect error [ 2024.228400][T17554] ceph: No mds server is up or the cluster is laggy [ 2024.314905][ T982] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2024.551745][ T982] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 2024.587677][ T982] [drm] Initialized udl on minor 2 [ 2024.968862][ T982] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 2024.994883][ T982] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 2025.028164][ T6658] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2025.042979][ T982] usb 8-1: USB disconnect, device number 110 [ 2025.056559][ T6658] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 2025.729844][T17572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2025.738451][T17572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2025.821407][T17573] overlayfs: failed to resolve './file1': -2 [ 2027.259802][T17584] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6850'. [ 2027.377771][T17580] nvme_fabrics: missing parameter 'transport=%s' [ 2027.384869][T17580] nvme_fabrics: missing parameter 'nqn=%s' [ 2028.894341][T17595] hub 6-0:1.0: USB hub found [ 2028.900168][T17595] hub 6-0:1.0: 1 port detected [ 2028.945434][T30275] raw-gadget.2 gadget.5: failed to queue reset event [ 2029.034839][T30275] raw-gadget.2 gadget.5: failed to queue resume event [ 2029.245293][T30275] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2029.341471][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 2029.349962][T30275] raw-gadget.2 gadget.5: failed to queue reset event [ 2029.424337][T30275] raw-gadget.2 gadget.5: failed to queue resume event [ 2029.488461][T30275] usb 6-1: device descriptor read/64, error -32 [ 2029.612960][T30275] raw-gadget.2 gadget.5: failed to queue suspend event [ 2030.071183][T30275] raw-gadget.2 gadget.5: failed to queue reset event [ 2030.098805][T17600] nvme_fabrics: missing parameter 'transport=%s' [ 2030.105281][T17600] nvme_fabrics: missing parameter 'nqn=%s' [ 2030.210536][T30275] raw-gadget.2 gadget.5: failed to queue resume event [ 2030.350268][T30275] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2030.368411][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 2030.376449][T30275] raw-gadget.2 gadget.5: failed to queue reset event [ 2030.453686][T30275] raw-gadget.2 gadget.5: failed to queue resume event [ 2030.493931][ T6658] usb 8-1: new full-speed USB device number 111 using dummy_hcd [ 2030.546947][T30275] usb 6-1: device descriptor read/64, error -32 [ 2030.686635][T30275] raw-gadget.2 gadget.5: failed to queue suspend event [ 2030.687857][ T6658] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2030.944187][ T6658] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2030.954226][T30275] usb usb6-port1: attempt power cycle [ 2030.959627][T30275] raw-gadget.2 gadget.5: failed to queue disconnect event [ 2030.973624][ T6658] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.975078][T30275] raw-gadget.2 gadget.5: failed to queue reset event [ 2031.019692][ T6658] usb 8-1: Product: syz [ 2031.033488][ T6658] usb 8-1: Manufacturer: syz [ 2031.042639][ T6658] usb 8-1: SerialNumber: syz [ 2031.053929][ T6658] usb 8-1: config 0 descriptor?? [ 2031.094948][T30275] raw-gadget.2 gadget.5: failed to queue resume event [ 2031.133308][T30275] raw-gadget.2 gadget.5: failed to queue reset event [ 2031.134822][ T6658] rc_core: IR keymap rc-streamzap not found [ 2031.151500][ T6658] Registered IR keymap rc-empty [ 2031.163957][ T6658] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 2031.181949][ T6658] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input93 [ 2031.335714][ T6658] usb 8-1: USB disconnect, device number 111 [ 2031.359821][T30275] raw-gadget.2 gadget.5: failed to queue resume event [ 2031.475125][T30275] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2031.510105][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 2031.517449][T30275] usb 6-1: device descriptor read/8, error -32 [ 2031.591675][T28689] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2031.607090][T28689] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2031.750724][T30275] raw-gadget.2 gadget.5: failed to queue suspend event [ 2031.759332][T30275] raw-gadget.2 gadget.5: failed to queue reset event [ 2031.762757][T28689] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2031.775621][T28689] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2031.783335][T28689] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2031.841173][T30275] raw-gadget.2 gadget.5: failed to queue resume event [ 2032.055940][T30275] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2032.237006][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 2032.244644][T30275] usb 6-1: device descriptor read/8, error -32 [ 2032.375043][T30275] raw-gadget.2 gadget.5: failed to queue suspend event [ 2032.393061][T30275] usb usb6-port1: unable to enumerate USB device [ 2032.644609][T17650] random: crng reseeded on system resumption [ 2032.999435][T17636] chnl_net:caif_netlink_parms(): no params data found [ 2033.158624][T17636] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.176125][T17636] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.191346][T17636] bridge_slave_0: entered allmulticast mode [ 2033.229255][T17636] bridge_slave_0: entered promiscuous mode [ 2033.257251][T17636] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.295081][T17636] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.321362][T17636] bridge_slave_1: entered allmulticast mode [ 2033.359109][T17636] bridge_slave_1: entered promiscuous mode [ 2033.505223][T17636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2033.805574][T17636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2034.000125][T28689] Bluetooth: hci7: command tx timeout [ 2034.437485][T17675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2034.475215][T17675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2034.927670][T17636] team0: Port device team_slave_0 added [ 2034.968025][T17636] team0: Port device team_slave_1 added [ 2035.099771][T17636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2035.134806][T17636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2035.243250][T17636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2035.604669][T17636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2035.627395][T17636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2035.689154][T17636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2035.918062][T17636] hsr_slave_0: entered promiscuous mode [ 2035.954138][T17636] hsr_slave_1: entered promiscuous mode [ 2035.979170][T17636] debugfs: 'hsr0' already exists in 'hsr' [ 2035.984970][T17636] Cannot create hsr debugfs directory [ 2036.223547][T28689] Bluetooth: hci7: command tx timeout [ 2036.875664][T30275] usb 8-1: new high-speed USB device number 112 using dummy_hcd [ 2037.070069][T30275] usb 8-1: Using ep0 maxpacket: 32 [ 2037.086822][T30275] usb 8-1: config 0 has an invalid interface number: 209 but max is 0 [ 2037.095612][T30275] usb 8-1: config 0 has no interface number 0 [ 2037.168105][T30275] usb 8-1: config 0 interface 209 has no altsetting 0 [ 2037.204849][T30275] usb 8-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 2037.652919][T30275] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.661945][T30275] usb 8-1: Product: syz [ 2037.666118][T30275] usb 8-1: Manufacturer: syz [ 2037.679588][T30275] usb 8-1: SerialNumber: syz [ 2037.701961][T30275] usb 8-1: config 0 descriptor?? [ 2037.988099][T17701] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6882'. [ 2038.072451][T30275] usb 8-1: USB disconnect, device number 112 [ 2038.458379][T28689] Bluetooth: hci7: command tx timeout [ 2038.723146][T17726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.749168][T17726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2038.870940][T17636] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2038.881766][T17636] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2038.892662][T17636] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2038.934048][T17636] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2039.518473][ T8400] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2039.680977][ T8400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2039.709543][ T8400] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2039.718744][ T8400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.740148][ T8400] usb 2-1: config 0 descriptor?? [ 2039.745741][T17636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2039.824047][T17636] 8021q: adding VLAN 0 to HW filter on device team0 [ 2039.861532][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.868796][ T6747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2039.892578][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.899726][ T6747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2040.082862][T30275] usb 8-1: new full-speed USB device number 113 using dummy_hcd [ 2040.194850][T17636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2040.235927][ T8400] lenovo 0003:17EF:6047.0043: item fetching failed at offset 3/5 [ 2040.262683][ T8400] lenovo 0003:17EF:6047.0043: hid_parse failed [ 2040.286769][ T8400] lenovo 0003:17EF:6047.0043: probe with driver lenovo failed with error -22 [ 2040.331699][T30275] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2040.350234][T30275] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.367275][T30275] usb 8-1: Product: syz [ 2040.375816][T30275] usb 8-1: Manufacturer: syz [ 2040.380663][T30275] usb 8-1: SerialNumber: syz [ 2040.401489][T30275] usb 8-1: config 0 descriptor?? [ 2040.618776][T17636] veth0_vlan: entered promiscuous mode [ 2040.633219][T17636] veth1_vlan: entered promiscuous mode [ 2040.671751][T28689] Bluetooth: hci7: command tx timeout [ 2040.719974][T17636] veth0_macvtap: entered promiscuous mode [ 2040.746583][T17636] veth1_macvtap: entered promiscuous mode [ 2040.766184][T17765] fuse: Bad value for 'fd' [ 2040.791909][T17636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2040.806702][T17636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2040.822601][ T6754] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.847256][ T6754] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.857056][T30275] airspy 8-1:0.0: Board ID: 00 [ 2040.861840][T30275] airspy 8-1:0.0: Firmware version: [ 2040.886279][ T6754] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2040.910981][ T6754] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.055825][ T6754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2041.083468][ T6754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2041.160744][ T6754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2041.183973][ T6754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2041.515795][T30275] airspy 8-1:0.0: usb_control_msg() failed -71 request 12 [ 2041.544553][T30275] airspy 8-1:0.0: Registered as swradio24 [ 2041.672760][T30275] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2041.697476][T30275] usb 8-1: USB disconnect, device number 113 [ 2041.920863][T17773] nvme_fabrics: missing parameter 'transport=%s' [ 2041.927929][T17773] nvme_fabrics: missing parameter 'nqn=%s' [ 2042.076144][ T982] usb 2-1: USB disconnect, device number 5 [ 2042.675755][T17787] Invalid ELF header type: 2 != 1 [ 2042.736013][ T982] usb 9-1: USB disconnect, device number 92 [ 2042.745581][ T30] audit: type=1400 audit(2000001940.381:1615): avc: denied { module_load } for pid=17786 comm="syz.7.6900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2042.816292][T17792] kAFS: unable to lookup cell '(,' [ 2043.373256][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2043.385528][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2043.395146][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2043.405957][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2043.414527][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2043.899596][T17804] fuse: Bad value for 'fd' [ 2044.546131][T17818] hub 6-0:1.0: USB hub found [ 2044.552283][T17818] hub 6-0:1.0: 1 port detected [ 2044.582548][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2045.045010][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2045.131548][ T30] audit: type=1400 audit(2000001942.757:1616): avc: denied { audit_write } for pid=17821 comm="syz.1.6910" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2045.296339][ T8400] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2045.317086][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2045.325421][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2045.428730][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2045.520766][T17834] Bluetooth: hci8: Frame reassembly failed (-84) [ 2045.637111][ T8400] usb 6-1: device descriptor read/64, error -32 [ 2045.660713][ T5834] Bluetooth: hci4: command tx timeout [ 2045.742160][ T13] Bluetooth: hci8: Frame reassembly failed (-84) [ 2045.857044][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2045.880348][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2045.985335][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2046.089356][ T8400] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2046.111083][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2046.124184][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2046.251494][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2046.333039][ T8400] usb 6-1: device descriptor read/64, error -32 [ 2046.476678][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2046.483854][ T8400] usb usb6-port1: attempt power cycle [ 2046.491278][ T8400] raw-gadget.2 gadget.5: failed to queue disconnect event [ 2046.505246][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2046.632830][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2046.641926][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2046.735684][ T6756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2046.750374][ T6756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2046.761027][ T6756] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2046.770671][ T6756] bond0 (unregistering): Released all slaves [ 2046.791786][ T6756] bond1 (unregistering): Released all slaves [ 2046.890149][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2046.963603][ T8400] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2047.008028][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2047.015319][ T8400] usb 6-1: device descriptor read/8, error -32 [ 2047.047959][ T6756] bond2 (unregistering): (slave bond3): Releasing backup interface [ 2047.056240][ T6756] bond3 (unregistering): left promiscuous mode [ 2047.063407][ T6756] bond2 (unregistering): Released all slaves [ 2047.142705][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2047.150222][ T8400] raw-gadget.2 gadget.5: failed to queue reset event [ 2047.253257][ T8400] raw-gadget.2 gadget.5: failed to queue resume event [ 2047.316015][ T6756] bond3 (unregistering): Released all slaves [ 2047.323658][ T8400] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2047.352670][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2047.360027][ T8400] usb 6-1: device descriptor read/8, error -32 [ 2047.370152][T17840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6914'. [ 2047.489230][ T8400] raw-gadget.2 gadget.5: failed to queue suspend event [ 2047.507262][ T8400] usb usb6-port1: unable to enumerate USB device [ 2047.510899][ T6756] tipc: Left network mode [ 2047.672111][T17797] chnl_net:caif_netlink_parms(): no params data found [ 2047.684093][T28689] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 2047.865869][T28689] Bluetooth: hci4: command tx timeout [ 2047.961932][ T8400] usb 8-1: new high-speed USB device number 114 using dummy_hcd [ 2048.175991][ T8400] usb 8-1: Invalid ep0 maxpacket: 9 [ 2048.278243][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6918'. [ 2048.345901][ T8400] usb 8-1: new high-speed USB device number 115 using dummy_hcd [ 2048.509026][T17797] bridge0: port 1(bridge_slave_0) entered blocking state [ 2048.519142][T17797] bridge0: port 1(bridge_slave_0) entered disabled state [ 2048.527364][T17797] bridge_slave_0: entered allmulticast mode [ 2048.551588][T17797] bridge_slave_0: entered promiscuous mode [ 2048.571186][ T8400] usb 8-1: Invalid ep0 maxpacket: 9 [ 2048.577172][T17797] bridge0: port 2(bridge_slave_1) entered blocking state [ 2048.597489][ T8400] usb usb8-port1: attempt power cycle [ 2048.603065][T17797] bridge0: port 2(bridge_slave_1) entered disabled state [ 2048.623647][T17797] bridge_slave_1: entered allmulticast mode [ 2048.638905][T17797] bridge_slave_1: entered promiscuous mode [ 2048.806391][ T6658] usb 10-1: new full-speed USB device number 73 using dummy_hcd [ 2048.877757][T17797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2048.927240][T17797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2048.987314][ T6658] usb 10-1: config 5 has an invalid interface number: 123 but max is 0 [ 2048.995752][ T8400] usb 8-1: new high-speed USB device number 116 using dummy_hcd [ 2049.004798][ T6756] hsr_slave_0: left promiscuous mode [ 2049.010913][ T6658] usb 10-1: config 5 has no interface number 0 [ 2049.017659][ T6658] usb 10-1: config 5 interface 123 has no altsetting 0 [ 2049.024737][ T6756] hsr_slave_1: left promiscuous mode [ 2049.032463][ T8400] usb 8-1: Invalid ep0 maxpacket: 9 [ 2049.039587][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2049.051610][ T6658] usb 10-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 2049.062048][ T6658] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.081983][ T6658] usb 10-1: Product: syz [ 2049.099088][ T6658] usb 10-1: Manufacturer: syz [ 2049.103788][ T6658] usb 10-1: SerialNumber: syz [ 2049.188498][ T8400] usb 8-1: new high-speed USB device number 117 using dummy_hcd [ 2049.224148][ T8400] usb 8-1: Invalid ep0 maxpacket: 9 [ 2049.229936][ T8400] usb usb8-port1: unable to enumerate USB device [ 2049.347482][T17856] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.6918'. [ 2050.078763][T28689] Bluetooth: hci4: command tx timeout [ 2050.640701][ T6658] comedi comedi4: Wrong number of endpoints [ 2050.655837][ T6658] ni6501 10-1:5.123: driver 'ni6501' failed to auto-configure device. [ 2050.685921][ T6658] usb 10-1: USB disconnect, device number 73 [ 2051.234142][T17888] fuse: Bad value for 'fd' [ 2051.818482][T17797] team0: Port device team_slave_0 added [ 2051.859147][T17797] team0: Port device team_slave_1 added [ 2052.037820][T17797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2052.044789][T17797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2052.124797][T17797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2052.152182][T17797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2052.187146][T17797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2052.221050][T17797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2052.345925][T28689] Bluetooth: hci4: command tx timeout [ 2052.502215][ T6756] IPVS: stop unused estimator thread 0... [ 2052.742858][T17797] hsr_slave_0: entered promiscuous mode [ 2052.776616][T17797] hsr_slave_1: entered promiscuous mode [ 2052.805542][T17797] debugfs: 'hsr0' already exists in 'hsr' [ 2052.811575][T17797] Cannot create hsr debugfs directory [ 2053.630408][T17912] random: crng reseeded on system resumption [ 2053.927309][T28689] Bluetooth: hci6: command 0x0405 tx timeout [ 2054.226655][ T8400] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 2054.408451][ T8400] usb 10-1: Using ep0 maxpacket: 8 [ 2054.427839][ T8400] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2054.467676][ T8400] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2054.489564][ T8400] usb 10-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2054.502558][T17797] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2054.529847][ T8400] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.530820][T17797] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2054.563354][ T8400] usb 10-1: Product: syz [ 2054.567626][ T8400] usb 10-1: Manufacturer: syz [ 2054.586517][ T8400] usb 10-1: SerialNumber: syz [ 2054.587276][T17797] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2054.619034][ T8400] usb 10-1: config 0 descriptor?? [ 2054.636531][T17797] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2054.657749][ T8400] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 found [ 2054.858107][T17797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2054.928333][T17797] 8021q: adding VLAN 0 to HW filter on device team0 [ 2054.988575][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2054.995756][ T6747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2055.023116][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2055.030295][ T6747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2055.107830][ T8400] snd_usb_toneport 10-1:0.0: cannot get proper max packet size [ 2055.131751][ T8400] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 now disconnected [ 2055.180003][ T8400] snd_usb_toneport 10-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2055.758394][T17797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2056.361839][ T1977] usb 10-1: USB disconnect, device number 74 [ 2056.690084][T17797] veth0_vlan: entered promiscuous mode [ 2056.721020][T17797] veth1_vlan: entered promiscuous mode [ 2056.832545][T17797] veth0_macvtap: entered promiscuous mode [ 2056.851346][T17797] veth1_macvtap: entered promiscuous mode [ 2056.881132][T17797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2056.895148][T17797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2056.915233][ T6757] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2056.945140][ T6757] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.047852][ T3841] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.072765][ T3841] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.238661][T17958] openvswitch: netlink: Multiple metadata blocks provided [ 2057.698867][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2057.711793][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2057.762806][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6942'. [ 2057.774023][ T3573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2057.795225][ T3573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2057.829245][ T6658] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 2057.938767][T17966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=17966 comm=syz.6.6942 [ 2057.951847][T17966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=17966 comm=syz.6.6942 [ 2057.965082][T17966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=17966 comm=syz.6.6942 [ 2057.988597][T17966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=17966 comm=syz.6.6942 [ 2058.021738][ T6658] usb 10-1: Using ep0 maxpacket: 8 [ 2058.030247][ T6658] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2058.069652][ T6658] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2058.096530][ T6658] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.107292][ T6658] usb 10-1: Product: syz [ 2058.117287][ T6658] usb 10-1: Manufacturer: syz [ 2058.122570][ T6658] usb 10-1: SerialNumber: syz [ 2058.143081][ T6658] usb 10-1: config 0 descriptor?? [ 2058.431092][ T6658] usb 10-1: USB disconnect, device number 75 [ 2058.508281][T17973] netlink: 'syz.8.6944': attribute type 10 has an invalid length. [ 2058.573872][T17973] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2059.140677][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6949'. [ 2059.251597][T30275] usb 8-1: new full-speed USB device number 118 using dummy_hcd [ 2060.002555][T30275] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2060.033818][T30275] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2060.047776][T30275] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2060.057338][T30275] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.202412][T17995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2060.224043][T17995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2060.290475][T30275] usb 8-1: usb_control_msg returned -32 [ 2060.296440][T30275] usbtmc 8-1:16.0: can't read capabilities [ 2060.437773][ T6658] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 2060.602089][T18001] Bluetooth: hci8: Frame reassembly failed (-84) [ 2060.854166][ T3433] Bluetooth: hci8: Frame reassembly failed (-84) [ 2060.996407][T30275] usb 8-1: USB disconnect, device number 118 [ 2061.047255][ T6658] usb 9-1: Using ep0 maxpacket: 8 [ 2061.089435][ T6658] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2061.115704][ T6658] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2061.144156][ T6658] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.152398][ T6658] usb 9-1: Product: syz [ 2061.181039][ T6658] usb 9-1: Manufacturer: syz [ 2061.282584][ T6658] usb 9-1: SerialNumber: syz [ 2061.289751][ T6658] usb 9-1: config 0 descriptor?? [ 2061.295681][T17978] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6947'. [ 2061.932728][ T8011] usb 9-1: USB disconnect, device number 93 [ 2062.455351][T18012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2063.228597][T28689] Bluetooth: hci8: command 0x1003 tx timeout [ 2063.233316][ T5834] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 2075.704378][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6963'. [ 2075.725382][T18030] kAFS: unable to lookup cell '(,' [ 2075.818687][T18024] fuse: Bad value for 'fd' [ 2075.928622][T17769] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2076.112208][T17769] usb 2-1: Using ep0 maxpacket: 16 [ 2076.122708][T17769] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2076.165805][T17769] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2076.185646][T17769] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2076.208840][T17769] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 2076.230051][T17769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2076.271999][T17769] usb 2-1: config 0 descriptor?? [ 2076.546102][T28931] usb 8-1: new high-speed USB device number 119 using dummy_hcd [ 2076.845748][T17769] usbhid 2-1:0.0: can't add hid device: -71 [ 2076.863293][T17769] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2076.881438][T28931] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2076.900148][T28931] usb 8-1: config 0 has no interfaces? [ 2076.918822][T17769] usb 2-1: USB disconnect, device number 6 [ 2076.941352][T28931] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 2077.001065][T28931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.020054][T28931] usb 8-1: Product: syz [ 2077.029666][T28931] usb 8-1: Manufacturer: syz [ 2077.034279][T28931] usb 8-1: SerialNumber: syz [ 2077.086633][T28931] usb 8-1: config 0 descriptor?? [ 2077.393069][T17769] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2077.453637][T18057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2077.564110][T17769] usb 2-1: Using ep0 maxpacket: 8 [ 2077.576697][T17769] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.604463][T17769] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2077.626883][T17769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.648063][T17769] usb 2-1: Product: syz [ 2077.666183][T17769] usb 2-1: Manufacturer: syz [ 2077.689982][T17769] usb 2-1: SerialNumber: syz [ 2077.706078][T17769] usb 2-1: config 0 descriptor?? [ 2077.934281][T18020] usb 2-1: USB disconnect, device number 7 [ 2078.661179][T18064] vcan0: tx drop: invalid da for name 0x0000000000ee0000 [ 2079.181513][T18071] netlink: 'syz.6.6975': attribute type 1 has an invalid length. [ 2079.191944][T18071] netlink: 9188 bytes leftover after parsing attributes in process `syz.6.6975'. [ 2079.358819][T18020] usb 8-1: USB disconnect, device number 119 [ 2079.926451][T18079] kAFS: unable to lookup cell '(,' [ 2080.119794][T28980] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2080.150364][T28980] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2080.163802][T28980] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2080.179376][T28980] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2080.237009][T13973] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 2080.365116][T18020] usb 8-1: new full-speed USB device number 120 using dummy_hcd [ 2080.782646][T13973] usb 10-1: Using ep0 maxpacket: 32 [ 2080.832682][T13973] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 2080.878203][T13973] usb 10-1: config 0 has no interface number 0 [ 2080.902961][T13973] usb 10-1: config 0 interface 184 has no altsetting 0 [ 2080.917208][T13973] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2080.933480][T13973] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.941709][T13973] usb 10-1: Product: syz [ 2080.946224][T13973] usb 10-1: Manufacturer: syz [ 2080.952510][T13973] usb 10-1: SerialNumber: syz [ 2080.965210][T13973] usb 10-1: config 0 descriptor?? [ 2080.986712][T18020] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 2081.003079][T13973] smsc75xx v1.0.0 [ 2081.013199][T18020] usb 8-1: config 0 has no interface number 0 [ 2081.030358][T18020] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 2081.079236][T18020] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2081.118688][T18099] netlink: 165 bytes leftover after parsing attributes in process `syz.6.6983'. [ 2081.157975][T18020] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2081.192777][T18020] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2081.209233][T18020] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2081.232770][T18020] usb 8-1: Product: syz [ 2081.251185][T18020] usb 8-1: SerialNumber: syz [ 2081.264223][T18020] usb 8-1: config 0 descriptor?? [ 2081.279530][T18020] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 2081.303950][T18020] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input95 [ 2081.447138][T13973] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 2081.499851][T13973] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 2081.539784][T13973] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2081.578878][T13973] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -32 [ 2081.622152][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 2082.139733][T28931] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 2082.336046][T28931] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2082.365762][T28931] usb 9-1: config 0 has no interfaces? [ 2082.372990][T28931] usb 9-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 2082.382833][T28931] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.399777][T28931] usb 9-1: config 0 descriptor?? [ 2082.702665][T18110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2082.725608][T18110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2082.743877][ T5834] Bluetooth: hci4: Unknown advertising packet type: 0x1e [ 2082.743963][ T5834] Bluetooth: hci4: Malformed LE Event: 0x0d [ 2083.388614][T18126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2083.412624][T17769] usb 8-1: USB disconnect, device number 120 [ 2083.413268][T18126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2083.454349][T17769] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2083.622405][T28931] usb 10-1: USB disconnect, device number 76 [ 2084.083714][T18135] syz_tun: entered allmulticast mode [ 2084.287686][T18137] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6994'. [ 2084.299589][T18137] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6994'. [ 2084.766429][T28996] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2084.780975][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6994'. [ 2084.781012][T28996] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2084.789848][T18137] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6994'. [ 2084.789873][T18137] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6994'. [ 2084.817523][T28996] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2084.826371][T28996] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2084.854678][T18134] syz_tun: left allmulticast mode [ 2085.152754][T18148] hub 6-0:1.0: USB hub found [ 2085.164840][T18148] hub 6-0:1.0: 1 port detected [ 2085.617160][T18020] raw-gadget.2 gadget.5: failed to queue reset event [ 2085.743906][T18020] raw-gadget.2 gadget.5: failed to queue resume event [ 2085.748922][ T8011] usb 9-1: USB disconnect, device number 94 [ 2085.961192][T18020] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2085.991146][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2085.998447][T18020] raw-gadget.2 gadget.5: failed to queue reset event [ 2086.042168][T18146] netlink: 'syz.7.6996': attribute type 4 has an invalid length. [ 2086.073994][T18020] raw-gadget.2 gadget.5: failed to queue resume event [ 2086.179341][T18020] usb 6-1: device descriptor read/64, error -32 [ 2086.298415][T18020] raw-gadget.2 gadget.5: failed to queue suspend event [ 2086.308279][T18020] raw-gadget.2 gadget.5: failed to queue reset event [ 2086.394642][T18020] raw-gadget.2 gadget.5: failed to queue resume event [ 2086.415995][ T8400] usb 9-1: new full-speed USB device number 95 using dummy_hcd [ 2086.469488][T18020] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2086.482747][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2086.501224][T18020] raw-gadget.2 gadget.5: failed to queue reset event [ 2086.587140][T18020] raw-gadget.2 gadget.5: failed to queue resume event [ 2086.596269][ T8400] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2086.622866][ T8400] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2086.648912][ T8400] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2086.672063][ T8400] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2086.683493][T18020] usb 6-1: device descriptor read/64, error -32 [ 2086.701542][ T8400] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.731013][ T8400] usb 9-1: Product: syz [ 2086.736338][ T8400] usb 9-1: Manufacturer: syz [ 2086.742946][ T8400] usb 9-1: SerialNumber: syz [ 2086.755300][ T8400] usb 9-1: config 0 descriptor?? [ 2086.773428][ T8400] streamzap 9-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 2086.801051][T18020] raw-gadget.2 gadget.5: failed to queue suspend event [ 2086.826131][T18020] usb usb6-port1: attempt power cycle [ 2086.845332][T18020] raw-gadget.2 gadget.5: failed to queue disconnect event [ 2086.864393][T18020] raw-gadget.2 gadget.5: failed to queue reset event [ 2086.950541][T18020] raw-gadget.2 gadget.5: failed to queue resume event [ 2086.959710][T18020] raw-gadget.2 gadget.5: failed to queue reset event [ 2087.008353][T28931] usb 9-1: USB disconnect, device number 95 [ 2087.207692][T18020] raw-gadget.2 gadget.5: failed to queue resume event [ 2087.303699][T18020] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2087.324996][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2087.332172][T18020] usb 6-1: device descriptor read/8, error -32 [ 2087.464828][T18020] raw-gadget.2 gadget.5: failed to queue suspend event [ 2087.481179][T18020] raw-gadget.2 gadget.5: failed to queue reset event [ 2087.586714][T18020] raw-gadget.2 gadget.5: failed to queue resume event [ 2087.677510][T18020] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2087.732809][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2087.753766][T18020] usb 6-1: device descriptor read/8, error -32 [ 2087.934933][T18020] raw-gadget.2 gadget.5: failed to queue suspend event [ 2087.952266][T18020] usb usb6-port1: unable to enumerate USB device [ 2088.538909][T18198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2089.156667][T18020] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 2089.404863][T18020] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2089.564747][T18020] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2089.636016][T18020] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.901996][T18020] usb 10-1: config 0 descriptor?? [ 2090.371037][T18020] lenovo 0003:17EF:6047.0044: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.9-1/input0 [ 2090.841351][T18020] lenovo 0003:17EF:6047.0044: Failed to switch middle button: -71 [ 2090.875924][T18020] lenovo 0003:17EF:6047.0044: Fn-lock setting failed: -71 [ 2090.903555][T18020] lenovo 0003:17EF:6047.0044: Sensitivity setting failed: -71 [ 2090.951146][T18020] usb 10-1: USB disconnect, device number 77 [ 2091.467542][T28931] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 2091.602971][T18239] nvme_fabrics: missing parameter 'transport=%s' [ 2091.609373][T18239] nvme_fabrics: missing parameter 'nqn=%s' [ 2091.899192][T28931] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 2091.934071][T28931] usb 2-1: config 0 has no interface number 0 [ 2091.942171][ T30] audit: type=1400 audit(2000001986.533:1617): avc: denied { mounton } for pid=18244 comm="syz.9.7027" path=2F32342FE91F7189591E9233614B dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 2091.973048][T28931] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=b4.dd [ 2091.990375][T28931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.008471][T28931] usb 2-1: Product: syz [ 2092.012644][T28931] usb 2-1: Manufacturer: syz [ 2092.028864][T28931] usb 2-1: SerialNumber: syz [ 2092.041735][T28931] usb 2-1: config 0 descriptor?? [ 2092.456880][T18237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7025'. [ 2092.563208][ T8400] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 2093.086896][ T8400] usb 10-1: Using ep0 maxpacket: 32 [ 2093.118526][ T8400] usb 10-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 2093.147266][ T8400] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.178274][ T8400] usb 10-1: config 0 descriptor?? [ 2093.218103][ T8400] usb 10-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 2093.291996][ T8400] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2093.329791][ T8400] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 2093.348915][ T8400] usb 10-1: media controller created [ 2093.390188][ T8400] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2093.440340][T17769] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 2093.455581][ T8400] usb 10-1: selecting invalid altsetting 1 [ 2093.505024][ T8400] set interface failed [ 2093.505462][ T8400] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2093.535364][ T8400] error writing reg: 0xff, val: 0x00 [ 2093.624115][T17769] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2093.663773][T17769] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2093.672907][T17769] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.724261][T17769] usb 9-1: config 0 descriptor?? [ 2093.766411][ T8400] dvb_usb_mxl111sf 10-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 2094.173986][T17769] lenovo 0003:17EF:6047.0045: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0 [ 2094.277188][T28931] snd_usb_podhd 2-1:0.17: Line 6 POD HD300 found [ 2094.308521][T28931] usb 2-1: selecting invalid altsetting 5 [ 2094.319633][T28931] snd_usb_podhd 2-1:0.17: set_interface failed [ 2094.371293][T28931] snd_usb_podhd 2-1:0.17: Line 6 POD HD300 now disconnected [ 2094.411420][T28931] snd_usb_podhd 2-1:0.17: probe with driver snd_usb_podhd failed with error -22 [ 2094.446947][T28931] usb 2-1: USB disconnect, device number 8 [ 2094.596718][T17769] lenovo 0003:17EF:6047.0045: Failed to switch middle button: -71 [ 2094.607419][T17769] lenovo 0003:17EF:6047.0045: Fn-lock setting failed: -71 [ 2094.617177][T17769] lenovo 0003:17EF:6047.0045: Sensitivity setting failed: -71 [ 2094.639002][T17769] usb 9-1: USB disconnect, device number 96 [ 2095.406783][ T30] audit: type=1326 audit(2000001989.742:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18280 comm="syz.7.7037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa021d8f749 code=0x7fc00000 [ 2095.568258][T18294] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7039'. [ 2095.665512][T18297] syz_tun: entered allmulticast mode [ 2095.734539][T18296] syz_tun: left allmulticast mode [ 2096.396395][T18310] Invalid logical block size (16777216) [ 2096.610310][T18317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7048'. [ 2096.886179][T18323] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2097.063787][T18020] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 2097.191163][T18328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7052'. [ 2097.224500][ T8400] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2097.246145][T18020] usb 9-1: Using ep0 maxpacket: 32 [ 2097.262479][T18020] usb 9-1: config 1 has an invalid interface number: 5 but max is 2 [ 2097.296072][T18020] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2097.313486][T18020] usb 9-1: config 1 has an invalid descriptor of length 184, skipping remainder of the config [ 2097.344485][T18020] usb 9-1: config 1 has no interface number 1 [ 2097.350972][T18020] usb 9-1: too many endpoints for config 1 interface 5 altsetting 249: 41, using maximum allowed: 30 [ 2097.365161][T18020] usb 9-1: config 1 interface 5 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 41 [ 2097.391099][T18020] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 30770, setting to 64 [ 2097.402649][T18020] usb 9-1: config 1 interface 5 has no altsetting 0 [ 2097.414024][T18020] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2097.439875][ T8400] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 2097.449519][T18020] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.471589][ T8400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.480153][ T8400] usb 2-1: Product: syz [ 2097.484976][T18020] usb 9-1: Product: syz [ 2097.489157][T18020] usb 9-1: Manufacturer: syz [ 2097.495146][ T8400] usb 2-1: Manufacturer: syz [ 2097.619804][ T8400] usb 2-1: SerialNumber: syz [ 2097.626123][ T8400] usb 2-1: config 0 descriptor?? [ 2097.638261][T18020] usb 9-1: SerialNumber: syz [ 2097.656988][ T8400] hub 2-1:0.0: bad descriptor, ignoring hub [ 2097.685891][ T8400] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2097.693879][ T8400] f81232 2-1:0.0: f81534a converter detected [ 2098.306003][T18341] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7050'. [ 2098.594376][T18323] IPVS: Error connecting to the multicast addr [ 2098.622352][ T8400] usb 2-1: f81534a converter now attached to ttyUSB0 [ 2098.732674][T18020] usb 9-1: USB disconnect, device number 97 [ 2099.020770][ T5829] usb 2-1: USB disconnect, device number 9 [ 2099.065004][ T5829] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 2099.101382][ T5829] f81232 2-1:0.0: device disconnected [ 2099.936893][T18361] netlink: 'syz.1.7060': attribute type 4 has an invalid length. [ 2099.954490][T18361] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7060'. [ 2100.605204][T18370] netlink: 19 bytes leftover after parsing attributes in process `syz.7.7062'. [ 2100.636328][T18372] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7063'. [ 2103.704240][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7075'. [ 2105.495414][ T6225] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2105.547958][ T6225] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2105.805668][T28980] Bluetooth: Error in BCSP hdr checksum [ 2106.344715][ T6756] Bluetooth: Error in BCSP hdr checksum [ 2106.706572][ T6756] Bluetooth: Error in BCSP hdr checksum [ 2106.817031][T18450] kAFS: unable to lookup cell '(,' [ 2106.880395][ T6757] Bluetooth: Error in BCSP hdr checksum [ 2107.156090][ T6757] Bluetooth: Error in BCSP hdr checksum [ 2107.209264][ T5939] usb 9-1: new full-speed USB device number 98 using dummy_hcd [ 2107.341521][T18467] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 2107.383462][ T5939] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2107.415114][ T5939] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2107.434289][ T6756] Bluetooth: Error in BCSP hdr checksum [ 2107.445831][ T5939] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2107.475140][ T5939] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2107.494337][ T5939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.518188][ T5939] usb 9-1: Product: syz [ 2107.532219][ T5939] usb 9-1: Manufacturer: syz [ 2107.547922][ T5939] usb 9-1: SerialNumber: syz [ 2107.561654][ T30] audit: type=1400 audit(2000002001.144:1619): avc: denied { read } for pid=18468 comm="syz.6.7092" laddr=fe80::1050:5ff:fed7:9bd5 lport=37675 faddr=ff01::1 fport=19973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2107.592171][ T5939] usb 9-1: config 0 descriptor?? [ 2107.624513][ T5939] streamzap 9-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 2107.712973][T28980] Bluetooth: Error in BCSP hdr checksum [ 2107.722714][T28689] Bluetooth: hci8: command 0x1003 tx timeout [ 2107.731365][ T5834] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 2107.844311][ T8400] usb 9-1: USB disconnect, device number 98 [ 2108.016740][T28689] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2108.030867][T28689] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2108.040172][T28689] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2108.050457][T28689] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2108.058177][T28689] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2108.962198][T18485] kAFS: unable to lookup cell '(,' [ 2109.156511][ T5939] usb 9-1: new full-speed USB device number 99 using dummy_hcd [ 2109.333593][ T5939] usb 9-1: config 0 has an invalid interface number: 17 but max is 0 [ 2109.342032][ T5939] usb 9-1: config 0 has no interface number 0 [ 2109.352498][ T5939] usb 9-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=b4.dd [ 2109.362844][ T5939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.371049][ T5939] usb 9-1: Product: syz [ 2109.375225][ T5939] usb 9-1: Manufacturer: syz [ 2109.380324][ T5939] usb 9-1: SerialNumber: syz [ 2109.390767][ T5939] usb 9-1: config 0 descriptor?? [ 2109.676105][T18480] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7096'. [ 2109.697061][T18472] chnl_net:caif_netlink_parms(): no params data found [ 2110.295111][T28689] Bluetooth: hci8: command tx timeout [ 2110.517943][T18472] bridge0: port 1(bridge_slave_0) entered blocking state [ 2110.533030][T18472] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.540514][T18472] bridge_slave_0: entered allmulticast mode [ 2110.549480][T18472] bridge_slave_0: entered promiscuous mode [ 2110.563219][T18472] bridge0: port 2(bridge_slave_1) entered blocking state [ 2110.571568][T18472] bridge0: port 2(bridge_slave_1) entered disabled state [ 2110.578971][T18472] bridge_slave_1: entered allmulticast mode [ 2110.586619][T18472] bridge_slave_1: entered promiscuous mode [ 2110.774066][T18472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2110.804232][T18472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2111.158993][T18472] team0: Port device team_slave_0 added [ 2111.181948][T18472] team0: Port device team_slave_1 added [ 2111.244237][T18472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2111.274031][T18472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2111.317149][T18472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2111.348727][T18472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2111.355730][T18472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2111.381968][T28931] usb 8-1: new high-speed USB device number 121 using dummy_hcd [ 2111.440054][T18472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2111.571166][T28931] usb 8-1: Using ep0 maxpacket: 16 [ 2111.578786][T28931] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2111.600099][T28931] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2111.625708][T28931] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 2111.650752][T28931] usb 8-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 2111.674836][ T5939] snd_usb_podhd 9-1:0.17: Line 6 POD HD300 found [ 2111.681515][ T5939] usb 9-1: selecting invalid altsetting 5 [ 2111.687321][T28931] usb 8-1: Manufacturer: syz [ 2111.690497][T18472] hsr_slave_0: entered promiscuous mode [ 2111.693208][ T5939] snd_usb_podhd 9-1:0.17: set_interface failed [ 2111.707518][T28931] usb 8-1: config 0 descriptor?? [ 2111.728432][ T5939] snd_usb_podhd 9-1:0.17: Line 6 POD HD300 now disconnected [ 2111.729113][T18472] hsr_slave_1: entered promiscuous mode [ 2111.736671][ T5939] snd_usb_podhd 9-1:0.17: probe with driver snd_usb_podhd failed with error -22 [ 2111.761518][T18472] debugfs: 'hsr0' already exists in 'hsr' [ 2111.776446][ T5939] usb 9-1: USB disconnect, device number 99 [ 2111.782490][T18472] Cannot create hsr debugfs directory [ 2112.324283][T28931] mcp2221 0003:04D8:00DD.0047: unknown main item tag 0x0 [ 2112.355557][T28931] mcp2221 0003:04D8:00DD.0047: unknown main item tag 0x0 [ 2112.378062][T28931] mcp2221 0003:04D8:00DD.0047: unknown main item tag 0x0 [ 2112.404334][T28931] mcp2221 0003:04D8:00DD.0047: unknown main item tag 0x0 [ 2112.427780][T28931] mcp2221 0003:04D8:00DD.0047: unknown main item tag 0x0 [ 2112.450407][T28931] mcp2221 0003:04D8:00DD.0047: USB HID v0.05 Device [syz] on usb-dummy_hcd.7-1/input0 [ 2112.515471][T28689] Bluetooth: hci8: command tx timeout [ 2112.637014][T18510] netlink: 'syz.7.7103': attribute type 10 has an invalid length. [ 2112.907348][ T5939] usb 9-1: new full-speed USB device number 100 using dummy_hcd [ 2112.936606][T18510] 8021q: adding VLAN 0 to HW filter on device team0 [ 2112.963747][T18510] bond0: (slave team0): Enslaving as an active interface with an up link [ 2113.077493][T18472] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2113.098191][ T5939] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2113.126364][T18472] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2113.147310][T17769] usb 8-1: USB disconnect, device number 121 [ 2113.162021][ T5939] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2113.197378][T18472] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2113.214775][ T5939] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2113.243023][T18472] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2113.266685][ T5939] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2113.305723][ T5939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.338487][ T5939] usb 9-1: Product: syz [ 2113.354859][ T5939] usb 9-1: Manufacturer: syz [ 2113.374836][ T5939] usb 9-1: SerialNumber: syz [ 2113.407422][ T5939] usb 9-1: config 0 descriptor?? [ 2113.439564][ T5939] streamzap 9-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 2113.502069][T18472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2113.566416][T18472] 8021q: adding VLAN 0 to HW filter on device team0 [ 2113.609177][T28980] bridge0: port 1(bridge_slave_0) entered blocking state [ 2113.616318][T28980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2113.681367][ T5939] usb 9-1: USB disconnect, device number 100 [ 2113.701968][ T6755] bridge0: port 2(bridge_slave_1) entered blocking state [ 2113.709118][ T6755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2114.739270][T28689] Bluetooth: hci8: command tx timeout [ 2114.931788][T18472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2115.578374][T18472] veth0_vlan: entered promiscuous mode [ 2115.592125][T18472] veth1_vlan: entered promiscuous mode [ 2115.661055][T18472] veth0_macvtap: entered promiscuous mode [ 2115.694024][T18472] veth1_macvtap: entered promiscuous mode [ 2115.719230][T18472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2115.735392][T18472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2115.761797][T28996] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.786453][T28996] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.788453][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7114'. [ 2115.843872][T18557] netlink: 256 bytes leftover after parsing attributes in process `syz.8.7115'. [ 2115.859308][T18557] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7115'. [ 2115.953724][T28996] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.983344][T28996] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2116.179250][T18564] hub 6-0:1.0: USB hub found [ 2116.185023][T18564] hub 6-0:1.0: 1 port detected [ 2116.223069][ T6225] raw-gadget.2 gadget.5: failed to queue reset event [ 2116.384774][ T6225] raw-gadget.2 gadget.5: failed to queue resume event [ 2116.580455][ T6225] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2116.623131][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2116.636482][ T6225] raw-gadget.2 gadget.5: failed to queue reset event [ 2116.735243][ T6225] raw-gadget.2 gadget.5: failed to queue resume event [ 2116.746314][ T4391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2116.857986][ T6225] usb 6-1: device descriptor read/64, error -32 [ 2116.861988][ T4391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2116.985948][T28689] Bluetooth: hci8: command tx timeout [ 2117.167030][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.195052][ T6225] raw-gadget.2 gadget.5: failed to queue suspend event [ 2117.213870][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.228374][ T6225] raw-gadget.2 gadget.5: failed to queue reset event [ 2117.343951][ T6225] raw-gadget.2 gadget.5: failed to queue resume event [ 2117.441241][ T6225] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2117.460721][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2117.527915][ T6225] raw-gadget.2 gadget.5: failed to queue reset event [ 2117.699200][ T6225] raw-gadget.2 gadget.5: failed to queue resume event [ 2117.835725][ T6225] usb 6-1: device descriptor read/64, error -32 [ 2117.975328][ T6225] raw-gadget.2 gadget.5: failed to queue suspend event [ 2118.040386][ T6225] usb usb6-port1: attempt power cycle [ 2118.092141][ T6225] raw-gadget.2 gadget.5: failed to queue disconnect event [ 2118.163002][ T6225] raw-gadget.2 gadget.5: failed to queue reset event [ 2118.274442][ T6225] raw-gadget.2 gadget.5: failed to queue resume event [ 2118.349455][ T6225] raw-gadget.2 gadget.5: failed to queue reset event [ 2118.375997][T18568] 9pnet_fd: Insufficient options for proto=fd [ 2118.584377][ T6225] raw-gadget.2 gadget.5: failed to queue resume event [ 2118.657590][ T6225] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2118.757661][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2118.764803][ T6225] usb 6-1: device descriptor read/8, error -32 [ 2118.886308][ T6225] raw-gadget.2 gadget.5: failed to queue suspend event [ 2118.925984][ T6225] raw-gadget.2 gadget.5: failed to queue reset event [ 2119.141146][ T6225] raw-gadget.2 gadget.5: failed to queue resume event [ 2119.267447][ T6225] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2119.364768][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2119.385415][ T6225] usb 6-1: device descriptor read/8, error -32 [ 2119.537038][ T6225] raw-gadget.2 gadget.5: failed to queue suspend event [ 2119.568817][ T6225] usb usb6-port1: unable to enumerate USB device [ 2120.195670][T18625] Bluetooth: hci9: Frame reassembly failed (-84) [ 2120.531124][ T74] Bluetooth: hci9: Frame reassembly failed (-84) [ 2120.571885][ T74] Bluetooth: hci9: Frame reassembly failed (-84) [ 2120.594036][ T6225] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 2120.800253][ T6225] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 2120.814418][ T6225] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2120.849814][ T6225] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2120.947194][ T6225] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2120.976813][ T6225] usb 9-1: Manufacturer: syz [ 2120.984262][ T6225] usb 9-1: config 0 descriptor?? [ 2121.556800][ T6225] rc_core: IR keymap rc-hauppauge not found [ 2121.577931][ T6225] Registered IR keymap rc-empty [ 2121.604945][ T6225] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2121.630487][ T6225] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input96 [ 2121.993970][T18646] IPv6: syztnl2: Disabled Multicast RS [ 2122.241073][ T6225] usb 9-1: USB disconnect, device number 101 [ 2122.444452][T28689] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 2122.541672][ T30] audit: type=1326 audit(2000002015.138:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18636 comm="syz.3.7132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2111f8f749 code=0x0 [ 2123.265432][T18658] Sensor B: ================= START STATUS ================= [ 2123.292025][T18658] Sensor B: Test Pattern: 75% Colorbar [ 2123.297647][T18658] Sensor B: Show Information: All [ 2123.314838][T18658] Sensor B: Vertical Flip: false [ 2123.338294][T18658] Sensor B: Horizontal Flip: false [ 2123.343867][T18658] Sensor B: Brightness: 128 [ 2123.364239][T18658] Sensor B: Contrast: 128 [ 2123.369010][T18658] Sensor B: Hue: 0 [ 2123.381608][T18658] Sensor B: Saturation: 128 [ 2123.397649][T18658] Sensor B: ================== END STATUS ================== [ 2123.649114][T18656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2123.731187][T18667] netlink: 'syz.8.7139': attribute type 1 has an invalid length. [ 2123.920984][T18674] hub 6-0:1.0: USB hub found [ 2123.927475][T18674] hub 6-0:1.0: 1 port detected [ 2123.979466][T13973] raw-gadget.2 gadget.5: failed to queue reset event [ 2124.343575][T18667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2124.431984][T13973] raw-gadget.2 gadget.5: failed to queue resume event [ 2124.488456][T18672] bond1: (slave geneve2): making interface the new active one [ 2124.517360][T13973] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2124.526459][T18672] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2124.542397][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2124.550531][T13973] raw-gadget.2 gadget.5: failed to queue reset event [ 2124.631350][T13973] raw-gadget.2 gadget.5: failed to queue resume event [ 2124.699587][T13973] usb 6-1: device descriptor read/64, error -32 [ 2124.853877][T13973] raw-gadget.2 gadget.5: failed to queue suspend event [ 2124.894524][T13973] raw-gadget.2 gadget.5: failed to queue reset event [ 2125.027804][T13973] raw-gadget.2 gadget.5: failed to queue resume event [ 2125.139713][T13973] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 2125.167575][ T6225] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 2125.181710][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2125.202569][T13973] raw-gadget.2 gadget.5: failed to queue reset event [ 2125.276655][T13973] raw-gadget.2 gadget.5: failed to queue resume event [ 2125.362102][ T6225] usb 9-1: Using ep0 maxpacket: 32 [ 2125.373080][T13973] usb 6-1: device descriptor read/64, error -32 [ 2125.390854][ T6225] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 2125.431058][ T6225] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2125.508342][T18021] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.522526][T13973] raw-gadget.2 gadget.5: failed to queue suspend event [ 2125.542027][ T6225] usb 9-1: config 0 has no interface number 0 [ 2125.571093][T13973] usb usb6-port1: attempt power cycle [ 2125.582636][ T6225] usb 9-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2125.612676][T13973] raw-gadget.2 gadget.5: failed to queue disconnect event [ 2125.642001][T13973] raw-gadget.2 gadget.5: failed to queue reset event [ 2125.656475][ T6225] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2125.713720][ T6225] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.771894][ T6225] usb 9-1: Product: syz [ 2125.784782][T13973] raw-gadget.2 gadget.5: failed to queue resume event [ 2125.798983][ T6225] usb 9-1: Manufacturer: syz [ 2125.841577][T13973] raw-gadget.2 gadget.5: failed to queue reset event [ 2125.849419][ T6225] usb 9-1: SerialNumber: syz [ 2125.883209][ T6225] usb 9-1: config 0 descriptor?? [ 2125.902880][T18021] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.963237][ T6225] radio-si470x 9-1:0.35: could not find interrupt in endpoint [ 2125.992774][ T6225] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 2126.047560][T18021] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.116286][T13973] raw-gadget.2 gadget.5: failed to queue resume event [ 2126.168474][ T6225] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 2126.193013][T18021] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.324137][T13973] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2126.333538][ T6225] usbhid 9-1:0.35: couldn't find an input interrupt endpoint [ 2126.356305][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2126.363597][T13973] usb 6-1: device descriptor read/8, error -32 [ 2126.485411][T13973] raw-gadget.2 gadget.5: failed to queue suspend event [ 2126.531478][T13973] raw-gadget.2 gadget.5: failed to queue reset event [ 2126.553154][T18702] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7142'. [ 2126.637597][T18700] team0: Device xfrm1 is of different type [ 2126.645182][T13973] raw-gadget.2 gadget.5: failed to queue resume event [ 2126.784097][T13973] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 2126.858705][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 2126.883300][T13973] usb 6-1: device descriptor read/8, error -32 [ 2126.884564][ T5939] usb 9-1: USB disconnect, device number 102 [ 2126.969343][T18021] bridge_slave_1: left allmulticast mode [ 2126.983013][T18021] bridge_slave_1: left promiscuous mode [ 2127.001012][T18021] bridge0: port 2(bridge_slave_1) entered disabled state [ 2127.018947][T13973] raw-gadget.2 gadget.5: failed to queue suspend event [ 2127.020984][T18021] bridge_slave_0: left allmulticast mode [ 2127.035693][T18021] bridge_slave_0: left promiscuous mode [ 2127.050147][T18021] bridge0: port 1(bridge_slave_0) entered disabled state [ 2127.050666][T13973] usb usb6-port1: unable to enumerate USB device [ 2128.548037][T18726] kAFS: unable to lookup cell '(,' [ 2128.859451][T18733] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7159'. [ 2128.948616][ T30] audit: type=1400 audit(2000002021.153:1621): avc: denied { connect } for pid=18730 comm="syz.8.7159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2128.948925][T18021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2128.980924][T18021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2128.991170][T18021] bond0 (unregistering): Released all slaves [ 2129.643807][T18744] loop6: detected capacity change from 0 to 524288000 [ 2130.035991][ T5829] hid-generic FFFF:0004:0003.0048: item fetching failed at offset 0/2 [ 2130.110426][T18744] loop6: detected capacity change from 524288000 to 0 [ 2130.200454][ T5829] hid-generic FFFF:0004:0003.0048: probe with driver hid-generic failed with error -22 [ 2130.255256][T18752] team0: Device xfrm1 is of different type [ 2130.615019][ T5829] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2130.797054][T18758] ipt_ECN: cannot use operation on non-tcp rule [ 2130.976392][ T5829] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2131.030852][ T5829] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2131.076189][ T5829] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2131.114320][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.171109][ T5829] usb 4-1: Product: syz [ 2131.192790][ T5829] usb 4-1: Manufacturer: syz [ 2131.241394][ T5829] usb 4-1: SerialNumber: syz [ 2131.268551][ T5829] cdc_mbim 4-1:1.0: skipping garbage [ 2131.288454][T18021] hsr_slave_0: left promiscuous mode [ 2131.313133][T18021] hsr_slave_1: left promiscuous mode [ 2131.340114][T18021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2131.347524][T18021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2131.404672][T18021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2131.412094][T18021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2131.459347][T18776] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 2131.465897][T18776] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2131.542189][T18776] vhci_hcd vhci_hcd.0: Device attached [ 2131.581001][T18021] veth1_vlan: left promiscuous mode [ 2131.595610][T18021] veth0_vlan: left promiscuous mode [ 2131.798646][T17769] usb 49-1: new low-speed USB device number 9 using vhci_hcd [ 2131.829692][T18020] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 2131.863076][T28689] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2131.874711][T28689] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2131.883858][T28689] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2131.891817][T28689] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2131.900095][T28689] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2132.055674][T18020] usb 9-1: config index 0 descriptor too short (expected 8192, got 18) [ 2132.086233][T18020] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2132.117922][T18020] usb 9-1: config 0 has no interfaces? [ 2132.154413][T18784] /dev/nullb0: Can't open blockdev [ 2132.179217][T18020] usb 9-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2132.256907][T18020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.508233][T18020] usb 9-1: config 0 descriptor?? [ 2132.732576][T18777] usbip_core: unknown command [ 2132.748364][T18777] vhci_hcd: unknown pdu 3964430480 [ 2132.753975][T18777] usbip_core: unknown command [ 2132.772452][ T1490] vhci_hcd: stop threads [ 2132.776796][ T1490] vhci_hcd: release socket [ 2132.789168][ T1490] vhci_hcd: disconnect device [ 2133.044502][T18021] team0 (unregistering): Port device team_slave_1 removed [ 2133.107021][T18021] team0 (unregistering): Port device team_slave_0 removed [ 2133.778807][T18020] usb 9-1: string descriptor 0 read error: -71 [ 2133.812176][ T5829] cdc_mbim 4-1:1.0: SET_NTB_FORMAT failed [ 2133.830348][T18020] usb 9-1: USB disconnect, device number 103 [ 2133.851818][ T5829] cdc_mbim 4-1:1.0: bind() failure [ 2133.872945][ T5829] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2133.896286][ T5829] cdc_ncm 4-1:1.1: bind() failure [ 2133.935693][ T5829] usb 4-1: USB disconnect, device number 6 [ 2134.081891][T28689] Bluetooth: hci6: command tx timeout [ 2135.638612][T18809] input: syz0 as /devices/virtual/input/input97 [ 2135.721337][ T5939] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 2136.245887][ T5939] usb 9-1: Using ep0 maxpacket: 8 [ 2136.298562][T28689] Bluetooth: hci6: command tx timeout [ 2136.456591][ T5939] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2136.479970][ T5939] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2136.480409][ T5939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.480432][ T5939] usb 9-1: Product: syz [ 2136.480453][ T5939] usb 9-1: Manufacturer: syz [ 2136.480472][ T5939] usb 9-1: SerialNumber: syz [ 2136.483720][ T5939] usb 9-1: config 0 descriptor?? [ 2136.695694][T18797] tty tty26: ldisc open failed (-12), clearing slot 25 [ 2136.736436][ T5939] usb 9-1: USB disconnect, device number 104 [ 2136.883305][T18782] chnl_net:caif_netlink_parms(): no params data found [ 2137.486347][T17769] vhci_hcd: vhci_device speed not set [ 2137.644954][T18836] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000031: 0000 [#1] SMP KASAN NOPTI [ 2137.657054][T18836] KASAN: null-ptr-deref in range [0x0000000000000188-0x000000000000018f] [ 2137.665464][T18836] CPU: 0 UID: 0 PID: 18836 Comm: syz.3.7185 Not tainted syzkaller #0 PREEMPT(full) [ 2137.674816][T18836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2137.684855][T18836] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 2137.690746][T18836] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 0e da 3a 09 66 66 2e 0f 1f 84 00 00 00 [ 2137.710341][T18836] RSP: 0018:ffffc900051c7890 EFLAGS: 00010282 [ 2137.716392][T18836] RAX: dffffc0000000000 RBX: 0000000000000188 RCX: 0000000000000000 [ 2137.724346][T18836] RDX: 0000000000000000 RSI: ffffffff8b5fda32 RDI: dffffc0000000031 [ 2137.732298][T18836] RBP: 0000000000000188 R08: 0000000000000001 R09: 0000000000000000 [ 2137.740248][T18836] R10: 0000000000000001 R11: 0000000002da62c7 R12: ffffffff8b5fda32 [ 2137.748199][T18836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2137.756150][T18836] FS: 00007f2112ede6c0(0000) GS:ffff8881249a3000(0000) knlGS:0000000000000000 [ 2137.765067][T18836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2137.771635][T18836] CR2: 0000001b2f90eff8 CR3: 000000003f77a000 CR4: 00000000003526f0 [ 2137.779590][T18836] Call Trace: [ 2137.782851][T18836] [ 2137.785767][T18836] __kasan_check_byte+0x13/0x50 [ 2137.791041][T18836] lock_acquire+0xfc/0x330 [ 2137.795880][T18836] ? __pfx___might_resched+0x10/0x10 [ 2137.801149][T18836] down_write+0x92/0x200 [ 2137.805375][T18836] ? kernfs_remove_by_name_ns+0x3d/0x100 [ 2137.810996][T18836] ? __pfx_down_write+0x10/0x10 [ 2137.815831][T18836] kernfs_remove_by_name_ns+0x3d/0x100 [ 2137.821280][T18836] driver_remove_file+0x4a/0x60 [ 2137.826117][T18836] bus_remove_driver+0x224/0x2c0 [ 2137.831039][T18836] driver_unregister+0x76/0xb0 [ 2137.835787][T18836] comedi_device_detach_locked+0x12f/0xa50 [ 2137.841585][T18836] do_devconfig_ioctl+0x555/0x710 [ 2137.846592][T18836] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 2137.852121][T18836] ? lockdep_hardirqs_on+0x7c/0x110 [ 2137.857302][T18836] comedi_unlocked_ioctl+0x165d/0x2ee0 [ 2137.862751][T18836] ? rcu_is_watching+0x12/0xc0 [ 2137.867502][T18836] ? irqentry_exit+0x3b/0x90 [ 2137.872079][T18836] ? lockdep_hardirqs_on+0x7c/0x110 [ 2137.877262][T18836] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 2137.883052][T18836] ? do_vfs_ioctl+0xdf6/0x14f0 [ 2137.887797][T18836] ? do_vfs_ioctl+0x1234/0x14f0 [ 2137.893161][T18836] ? do_vfs_ioctl+0x128/0x14f0 [ 2137.897907][T18836] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2137.902912][T18836] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2137.909749][T18836] ? rcu_is_watching+0x12/0xc0 [ 2137.914496][T18836] ? selinux_file_ioctl+0x180/0x270 [ 2137.919677][T18836] ? selinux_file_ioctl+0xb4/0x270 [ 2137.924776][T18836] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 2137.930566][T18836] __x64_sys_ioctl+0x18e/0x210 [ 2137.935313][T18836] do_syscall_64+0xcd/0xf80 [ 2137.939797][T18836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2137.945714][T18836] RIP: 0033:0x7f2111f8f749 [ 2137.950132][T18836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2137.969738][T18836] RSP: 002b:00007f2112ede038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2137.978138][T18836] RAX: ffffffffffffffda RBX: 00007f21121e6090 RCX: 00007f2111f8f749 [ 2137.986092][T18836] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008 [ 2137.994043][T18836] RBP: 00007f2112013f91 R08: 0000000000000000 R09: 0000000000000000 [ 2138.001995][T18836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2138.009946][T18836] R13: 00007f21121e6128 R14: 00007f21121e6090 R15: 00007ffdee84ea08 [ 2138.017921][T18836] [ 2138.020920][T18836] Modules linked in: [ 2138.027392][T18836] ---[ end trace 0000000000000000 ]--- [ 2138.032955][T18836] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 2138.039070][T18836] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 0e da 3a 09 66 66 2e 0f 1f 84 00 00 00 [ 2138.061011][T18836] RSP: 0018:ffffc900051c7890 EFLAGS: 00010282 [ 2138.067285][T18836] RAX: dffffc0000000000 RBX: 0000000000000188 RCX: 0000000000000000 [ 2138.075371][T18836] RDX: 0000000000000000 RSI: ffffffff8b5fda32 RDI: dffffc0000000031 [ 2138.083382][T18836] RBP: 0000000000000188 R08: 0000000000000001 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2138.083491][T18020] usb 8-1: new high-speed USB device number 122 using dummy_hcd [ 2138.092618][T18836] R10: 0000000000000001 R11: 0000000002da62c7 R12: ffffffff8b5fda32 [ 2138.124236][ T30] audit: type=1400 audit(2000002029.712:1622): avc: denied { write } for pid=5810 comm="syz-executor" path="pipe:[4763]" dev="pipefs" ino=4763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2138.127887][T18836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2138.147383][ C1] vkms_vblank_simulate: vblank timer overrun [ 2138.171813][T18836] FS: 00007f2112ede6c0(0000) GS:ffff8881249a3000(0000) knlGS:0000000000000000 [ 2138.196342][T18836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2138.204454][T18836] CR2: 0000001b2f909ff8 CR3: 000000003f77a000 CR4: 00000000003526f0 [ 2138.214815][T18836] Kernel panic - not syncing: Fatal exception [ 2138.221001][T18836] Kernel Offset: disabled [ 2138.225306][T18836] Rebooting in 86400 seconds..