last executing test programs: 21m6.108332526s ago: executing program 4 (id=934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="8b251853e0c8764d148aafefed39cdb21f1132813a2e936c67", 0x19}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000003c0)="fd019c47909b5ab0ca41619ae8d05a535679a8e608d71648332bc5e7c6077d2e03ed5edaf68192d222c4fca67008048929ec0c17a1a9cceb1f271db0b98a710776606480cbac23631c83b4a608b731dd09def34fc61ed50ef9141cad5629cb6bc965a4dbf31509dfac5c5c21c00f6495b47818d6b1dc658b84e29ffe91bcdc8c7c93f543608acecf27c83250df98e259473346f937c9f361b84999ef0c93158e4d0bc16ef4b4dc4ec905bda1212931bf22e4d0", 0xb3}, {&(0x7f0000000480)="ea87b785e05167f751f243", 0xb}, {0x0}, {&(0x7f0000000880)="4e8215b8e6499bfb7dc598a685a169758dbd10d960d2ea009f3e79a24eca6eaec6190b1baf209757390e699f5a5c2dd9ccc663d82693be12c8727cfa19a7e65432f5132f31cda03809f5f091268bf8d5fa78d9f7086cf45eb2f3603378e4967fb13423aac5fafd996b523682e1ab6ea43272b6b70134e4bebce4833c95fc3c5ed0ba198272298a9c703e1b3625c72e080ca5024088a8cf0536fc6057156cbbda8d4f4551747b7fd787f6b01a6d34b2c8e1111b56602c28aad0452ea11a53ff9db7888a0725518fefbcffb6c62e6108088b2e", 0xd2}, {&(0x7f00000032c0)="e6b8c005ec955f9816e84c469273d1c6b6f6e2e01d95267d5132387ca43f8f68afa6ff240a1075bcf6e771dbcdadc02d7954df97fe19ab2bef9ce79efba579d469fe410335f676b06395b93cab921fd374ee9757c909e46cb46e4aa1dc23ebc70c7db9174972fe53d375048ba82bef5d0933bda3844f0976ad9c29b4bcc4e357fafff017a1d849d859d1f20dc46c3bb05206e36a4609ee8183a5047366107273cab89fba9584f6a4c57cd49884fdb3d5a53fce467369638dfdf48e501410c14a7b59e8d9dc8b04b7a1c5156bfca8b6aa94c110c023292a973fbcbe3561a6ec9949c37fc0053d48cd53ff23710c765871258e8089bead418a7a6053963dc8771f34673d10095bbdb1108a11f4ea4fbb955f7db521e6d2555e9b224b630bf5297a591bd302f192ffaab98a36aedef79139b14611f969f9d6bfbc34093e9d4334d13492051da52f7a18ece92f4a02714ad0fa86197c107793b516a15016c53f1d4fce8f04ae4f436db9ca3a91f75f220f9520bf7fc402dd7ddaad0c99e55fb57e268ce7a7654739dd41dd7feaabca75aa2cf2f57db6af485deb42cf5faf1d9ecc0d9a53a522e3e857b8f0326c1e7f81c0930b21f2ad2334de52d29f489afc5c234693b70740c26d830a745226846443428eeab362deca6eb18fb077bf8e44f4b1239ef373042057a10f2ebe6ef3580b6be696e22fd2f6871ef43cf8329528c4788c55e44b640cfa433dc7d9300eb0c03aa1aad1d87c2b408184df1896b7f62bd8636564b4b1813ee7c21975b09ba85c69a4fa30a2cab20b00335c826b48c93457be625c1757270b1329bf5aeb91c8a5688660244e05d46c5edb21f4745d0817b13189ba8c05126f10a99e63e7e38a9706d446b170224476c0bfeb02b73536ee8abf3c20e389d4779973c21fe866931fe3f87a6c7fa57ff365cddec41ee5514349142a33f9b2ad25f8c080fb0b0b423c7140fc32aa6f2cc8540c273ad349416b49cc10c4383b1f2288b1c7d62af1c6ebb92d79515a8c8fcbe430a69e07e348479b3c8ddbca04b613460b61a28483fa80a40329825db90d0ed925b43232d403ca7f359f369cc456ec2ce4711090b693db991dcc242abece6f8840315529451f710ab6fb93aab4082ff82349f584e742000000000000d7daacd6267ed8aa114194f6b2687af0a707fbd9533280f378bf22a67d4de2e5d50569958e8912f0295a40c59dee9d345860921d6e6532e85fadc3ad10af3fdb72d767cdaccceac6f3d8b3125ff019b461b543217a4922b1952dc8283c054e194d83ab3756a8cb5d85aa0f20569b14439b44af092a40db0f62d111d14a608c3fd000e1fab29a811e47b931326b50016a8c90883b189cfc35be60bc8aa74411451421b7a2c66d0dc2b0904ad158f3748d320b917a4c13ff88dbc052a222c78d3f56cfa441a265c7c9572151b256c45d8a5691e3c0f9353fff83b9ab8d12b7222dd4d464ed2c5179fc9258da8d8861fff4695d717522b9bfa99a0983c98711d0745f987a452f7cbb04e5edcc031dac7b8c95974ce72f26ef154c64161c3d37affc619846f1cf48a75c67ba20a0e995e26f6ec61a5f99e116fd86fbeadf8a8626127563f05db1be29e7227c856f5042570d9092e3666db5767efcb56b7bca85868a991da6415896d5f6b0935d262a124f513bd9855e9133d52c462b6b173807cd9efd2749c2783bea7a724ab49b695135d3f04023257173596d21feef6821f60f3d8a701a5db2b210be55a6c750aa8a3c8cb294c637952b3aeb86ce769b14a1089fc12bbd3ea044d47f84e6cc95df93078a71013ed10af771ef042b6a921d9f916e4e8ecd03e282e706d6aeab7178cce49c7f2f61f4b91182209a993b22d5249d8dcf3461288869c5204b1f8d7e492c15faf7bd51875408a2703717c1cfcd9ce11bc3315ca3d45c0a6025dd1ba9f7d7547b208c5615615888d9b290ff3f12f34bdd02197b228f910560f30b8e4a8c60f24b889a3bcb0987e5a8c0cc8ec60446f5bf87813aeb624609a9fef02e2a9d7002d36c7ef3abaaee245e08a1bcb866efaf3eef6f31e6f0afa13a5f2f8b19dae5187cddd99a212946e7b764393d8c4e7cb025eca4a1d86893eda290d3941c314933158ca4bd9d08ea08b88ab22c71199ba1c70d3bba9c30a17df1f995efcd3729e4a3e37135e77f7c53365195b816f56cd2d88b53fcf06b8c16b9a8365ed5e31e091dfed7c9e5a0dfb8a667933852b68a12f9bd36d12761c7d332b1e46a931549b1cf9861aeae3b88f2a0e19ec2af45d76c6cc99cfff4ed1cd2fa9188ca18942b2637aca6f256d9135b8e1ad06a2d611a042950847a8366db541b318c1e88a011e8b43a748e9edc4e3aa06a77d4165b5dd452e302e06a47c58bca968ccfab7380d38a56d4686a12525b550e150c6b614c6c646bb370c3f3524be0192942a64d485f1d0509cfcbc807ac2836490f159f01f78edfce364be0532e0934e9a98dcfa58941b8d00b0f8ddf11e957fb4e5ea2b7d3cc3332e51633dde0b94ce8d8578468ecdda0929a4bcf06cdc41d65ad27d504c7e2ca2d33ae226af6c681053122672b3fc218ae786e64c4f937b7989e7fccf35c938d18357c98b09e0d4d2ee3e2dcf317c48e846d66539cb2590027807f351ee873fb56a04ff210077687ad34a1424d61de6d086d0aeb5f0bd625fc1ae7b7259a75c679a9d4d8c01a323dc642e3fa46b68458b1793494e8fbefb46daff3ad3e9fb8e99c9c1707a16e86c0f8f51d437058cc10358a3473e935c3e2575c9d47549b96bbb3773dc61db3813329bf0442b6c88cf1c2c8d21b7c2bfd1c1968549a98256236802b5e5ccd68a033c4939c76924c7f281b993fd3c5fceed6c2b0aed3c46511c2f2bc6e55968810da8525eccfa58a404b26dd9004583ce95a09a13f4633a7db4dd2798afb70402df3a87f870ced80a4bb654e5df40a215a00be927f9f18502b67b987e1015267890a4cb4cfc8ff09e8374bb63e67a06929bf79a0fc7d7eba240048209e07d18dacefeff5b7a819c1cce4303e1fcb4647580b40c42a0e1525ec316af9d8960118b40c83d2fe06c143994d905f49b4906681c57618f96e0c3f73ba29d8dafb671bacd31f00c53d5e0e3819984ad89ff942502582a73bf4afdc2268102a785145e4c74bac70f0c96e8c483cae09505022acce529d57201e47df18116b452fad6f975c8a3ba20966834d60d6c51f07ac976dd21707dbeff94be530820985e1055f90927aa66e232ea74ebce52b5ccec0b1ec9625e6f187393b09f6f3bbe9d1e250e456129cafee88a651ace41c9d4192a899767702be1e89037b6072f2b02eb122135543aa4c6125295908fc72c815c0123cbf8559ab56879ccc3c1b1d61e91b4759b51298d024656a5b5bb79a93efa4d595ab129c16cabb70fc8cf917de618ac10dc85e3c622c554dd73e9baad85d9d8f39d04dab029ef16255d1b2820df7fa539db4b0a959f5ec85d0cdf728902b77adc01bd4549e35e325d10a8ebae73de8a770c9fe5924ea89568d4a2ad51a15d75c1b09c46694271663e453c1e683e2116b54e99494815166d4cb38c98a9fd917a95e4cc9392f4f48053b36fd72dc26a91b1d2dca0c251e605217f6660d3df9cb3a2273ead743b678ca3d0a6f5d6823eb73321fc0e5eb333e01c8fbb8bc8e044e0d4d01707bf14987ae08882d107bfa0efa48cc3b0b9e35b1d683a47b0c3183f4ad10e918f45820268a3a1cfbb8e01eab49231645ab457afc12dc1762f9ad66425831b4beb3d817580d45a82d30258e60e5028954912423b83b15b8f14775d36bac1c0d87f1bc0245a5783ff7228cd9af0419441d017bcb9efa4b8d1c68c07498637c5d2d50a6d773a7aad01518c798fc045ab00bca0b474fa4f1b63bccdab3842fff7c0ac28432ffaf42beb524aeb117f011288c96649ae959fd31e3212f377278ed1a60ad8def5da6478662a2659b403255326bcafe6cae573d55ce484b7b20eb6b42b072481acd3d747f0690858e3eaf026d205ac70d24051279b879adb945984284bd1705097b1e1ada67feeb3b74e66ad83d138557cdd40fdf4d4c1828917ccc5fd417fa9880960606ad01ed37e385408b8f871886c7744620475887a1d098e049fd36327eb60508d0d34cca8fb626ae43516ea260bda9b92ac5cb71b736f95c798b12b0ad27349c88aaa27626f57e0260b7d353e22b9fae75b2c0374decebc39f9dc85802676a3767aa7e51dcbbf2198ff6fd740b41cf02616aa9076b6e92b06c4c2294c6b74c30eace1a2d647591f85eb86cefd97fd7eddd698d814b4150c05ed38f3556fd3e2aafb4f0192a8a102c9dc3b9a27a742d743faef3cedc48014e2a860a00e1928062cc0fb685332290b5699cd45cd1705b879f5421a55ceb5ab8c6d3b482dd710858d45f3b5bbf249a81d7193e686cde4756e46407d702e4d33234116c62cd5d080b0c522a73c143aea9976bf9355aea978c6d13ebfab87205f82b63d33d9051047fb67daf7b721502b7a02ee86a70807f01c18c6151199c04281fbf42b8290fc632e73a40c580b17ec597842a476183aad81894dc256bd306681a5410f3796c65bbaa2d92dfe3960f02094ae34354144381996057e49434eda6d842ce15cd18877730918f386851701b04fe71454d02cc04223243ed9810919f7f4f756f347ff816e500f56731505a94dd604e5ad35148cb46177565b18e076e59ee699016211efe8a57758bcbe1a3b159f49251508683369d98e9690a63220dbf2c20075c81b3193dc302d3bd4cfd82455d384f6b376e3a3bf58f73cd3712b5e284a72dc61326cdb986caa218353a069dff10d811259b5eda549da593adaff15a0ab41303975f1693fd987a3967747219862ae06295637e372f2b69c10b578775b734f2e58f9a5968bf779cc5ff07dc6532449a85fe1ea58033536956fc7ede99ae7fc3c8f78ab18619811308f01492f7a16c96baeeb3850202b434af7b7658ff3f7c62f95a1d1354e52be79bbbe330f847e52fd376d2b13dfc03476f61adeaa717ae1e6c819e54aec4a969e31712f15752a3579ad32e1d14f932a6b951c23d88af75c4695121a4a79664576375d2e5248069345fe1fa5d9110fe7b8958099cb76e05b7c64ede9b5b81c62c1bfa87336e9082ca454e140d0d5c56d5928e4caa611dee2c0fbafede64af789b2721a2f488667cac54a6eb1984658da8fff26a9287676e90dad0c72463198e2e6686835e1ffe6bb5a3f466931f3b46cd0908526aed38de738aea8e5c8c2ea0b320a1d12ce57ebe6f977a8199313beed19412f78e092af8aaa614ac05a6164a93e4daae5f84f7c4721439850ee93ff5cadffde8bf6d6a03b27d2749b2331786e8aaede2785bdea0b53644849fe302f03aff0e3e99a9b9ec7ec183f8ee27456fd25e0fa21759b6e98aea143de97f2d4567461cc4008ed89b5b851ad8631f1d4315e90e6606be2110cda9fd860e4b80d9336d308e595d5512f96dc8336b78950e70c1d65ad6a0d9a148a45f5e703bdbd13b9b50797f4a54917732769e6ea2eabca53065e09575a8346491c048054dbe9ee22c3d43c0f213bef2381f888ecbdd591ffa4f79eec8240057fae434ea312246af36c30737785cc26e886041631665997f1d7540c0a5292e6de65822a0116fb348e0e6b4f7fa9f048811afafbb9fcf3affaaa63892ece47f95503ac25cf60020fea6e8710e7618f45cec4da0fa8002c520ab41934c3da5992e1b3f32a13aa8cebbda8f7c7dd2c4", 0xfec}], 0x7, 0x0, 0x0, 0x800}], 0x1, 0x6004081) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180f0000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000003c0)=ANY=[], 0xfc46}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 21m4.651008523s ago: executing program 4 (id=938): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$getown(r1, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() syz_open_dev$usbfs(0x0, 0x8, 0x80) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0xfffffffc, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0x1000000d, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x88, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xfffff801, 0x5, 0xa, 0x0, 0x7, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x9000, 0x3, 0x2000005, 0x2, 0x0, 0x5, 0x8, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x202, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x80000000, 0xfffffffa]}}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0x40, 0x3, 0x8}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x126ec, 0x4, 0xffff1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000a0000000c000080"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x1) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000000)) 21m2.015788184s ago: executing program 4 (id=943): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008902"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffd}}}}}, 0x0) 21m1.048068979s ago: executing program 4 (id=947): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x401, 0x40001) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000001c0)=""/245) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x7cc0}]}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x48}}, 0x4000040) 21m0.539973346s ago: executing program 4 (id=950): mremap(&(0x7f0000014000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x100000000040, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r3, 0xae80, 0xf000) 20m54.343338089s ago: executing program 4 (id=963): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x6, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x40894}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) sendmsg$nl_netfilter(r2, &(0x7f0000000800)={&(0x7f00000004c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x17c, 0xc, 0x8, 0xc49396d5e0344fd8, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x9}, [@typed={0xc, 0xf7, 0x0, 0x0, @str='deflate\x00'}, @nested={0x42, 0x72, 0x0, 0x1, [@generic="d47257717d59c1e96a0ad50b0237439152ea99e6f4d099985be3873985c5476c0a1f5857a6d5b853ad4836bca86952df43c1", @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x9}]}, @generic="2fc80be460bf4d6d2024305ea5c5697a86fac99409c18f4441b8acaee58d4f693e54791966dab5f027346aa030fa12239c92191474fc1f2fcfb803d16dc8", @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@local}, @generic="6fe1b0534038e9c89adcc3977e6d9dd0ba9e026b2021ff578f043c3e5b669cd6db22f8db0511bae917ea5eba17578b612dceef0ae86fde48d7e7b457a48b7693ceae6b7ed07cae7f072a6a063ac8ae777b04a3240daf1ea2b92152537fb0ea15183fd0adc2517161797351fbfb00a521a23bb3afba92a483bceb446bba063f6cc35e9d664c523b2053b70ead428b7886089421f994d0f406d19bcc5068f14fcb68f241c64b8c698e6195", @typed={0x14, 0xea, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xa7, 0x0, 0x0, @ipv4=@broadcast}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000009) (async, rerun: 64) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x25dfdbfe, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@mcast1, 0x4d6, 0x6c}, @in=@private=0x8010101, {0x0, 0x192, 0x9ba3, 0x2, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0xa, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000380)={{0x3, 0x1, 0x3, 0x2, 'syz0\x00', 0x2}, 0x3, 0x100, 0x24, r5, 0x2, 0x1, 'syz1\x00', &(0x7f00000001c0)=['GPL\x00', '\x00'], 0x5}) (async, rerun: 64) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) (async) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000180)=0x2, 0x4) lseek(r2, 0x1000000, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@mmap={0x6, 0x3, 0x4, 0x10000, 0xffff, {}, {0x2, 0x1, 0xe0, 0xd, 0x8, 0x9, "36bb65cc"}, 0x1, 0x1, {}, 0x3}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSET={0x120, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_USERDATA={0xea, 0xd, 0x1, 0x0, "77a4ffbf259642fa3d09cc0dddf1650d518891cf731dd76aa4c64d5b089cf7c68c44ac5ea4885ba42e1d16edd195ebd9d01f79fa87e1e1eb67366460392e63d908ce37c2c366c92e47a83d83aa8089fa07cbf00a26691c16a614c198fd652802627deb17b7f4cf773807611872803e2bf2db61735713fd18c028f2fa31b4571e0f5d38028b14aeeb33cc5f059f78d0fa31aecbc06af27cc30094c5fb20b5c6e4ca608eae414443751d7b6768587dae2884cfb1205a45c0f23123a1163172d71cf40333c4107a8cbe6d481db51138abab6950a3132656179799aa0acd628d9143521d6ccb70bd"}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x36}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1b4}}, 0x0) 20m39.798669527s ago: executing program 32 (id=963): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x6, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x40894}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) sendmsg$nl_netfilter(r2, &(0x7f0000000800)={&(0x7f00000004c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x17c, 0xc, 0x8, 0xc49396d5e0344fd8, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x9}, [@typed={0xc, 0xf7, 0x0, 0x0, @str='deflate\x00'}, @nested={0x42, 0x72, 0x0, 0x1, [@generic="d47257717d59c1e96a0ad50b0237439152ea99e6f4d099985be3873985c5476c0a1f5857a6d5b853ad4836bca86952df43c1", @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x9}]}, @generic="2fc80be460bf4d6d2024305ea5c5697a86fac99409c18f4441b8acaee58d4f693e54791966dab5f027346aa030fa12239c92191474fc1f2fcfb803d16dc8", @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@local}, @generic="6fe1b0534038e9c89adcc3977e6d9dd0ba9e026b2021ff578f043c3e5b669cd6db22f8db0511bae917ea5eba17578b612dceef0ae86fde48d7e7b457a48b7693ceae6b7ed07cae7f072a6a063ac8ae777b04a3240daf1ea2b92152537fb0ea15183fd0adc2517161797351fbfb00a521a23bb3afba92a483bceb446bba063f6cc35e9d664c523b2053b70ead428b7886089421f994d0f406d19bcc5068f14fcb68f241c64b8c698e6195", @typed={0x14, 0xea, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xa7, 0x0, 0x0, @ipv4=@broadcast}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000009) (async, rerun: 64) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x25dfdbfe, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@mcast1, 0x4d6, 0x6c}, @in=@private=0x8010101, {0x0, 0x192, 0x9ba3, 0x2, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0xa, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000380)={{0x3, 0x1, 0x3, 0x2, 'syz0\x00', 0x2}, 0x3, 0x100, 0x24, r5, 0x2, 0x1, 'syz1\x00', &(0x7f00000001c0)=['GPL\x00', '\x00'], 0x5}) (async, rerun: 64) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) (async) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000180)=0x2, 0x4) lseek(r2, 0x1000000, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@mmap={0x6, 0x3, 0x4, 0x10000, 0xffff, {}, {0x2, 0x1, 0xe0, 0xd, 0x8, 0x9, "36bb65cc"}, 0x1, 0x1, {}, 0x3}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSET={0x120, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_USERDATA={0xea, 0xd, 0x1, 0x0, "77a4ffbf259642fa3d09cc0dddf1650d518891cf731dd76aa4c64d5b089cf7c68c44ac5ea4885ba42e1d16edd195ebd9d01f79fa87e1e1eb67366460392e63d908ce37c2c366c92e47a83d83aa8089fa07cbf00a26691c16a614c198fd652802627deb17b7f4cf773807611872803e2bf2db61735713fd18c028f2fa31b4571e0f5d38028b14aeeb33cc5f059f78d0fa31aecbc06af27cc30094c5fb20b5c6e4ca608eae414443751d7b6768587dae2884cfb1205a45c0f23123a1163172d71cf40333c4107a8cbe6d481db51138abab6950a3132656179799aa0acd628d9143521d6ccb70bd"}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x36}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1b4}}, 0x0) 14m41.094184558s ago: executing program 2 (id=1923): ioperm(0x6, 0x3, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000001c0)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) epoll_wait(r3, &(0x7f0000000280), 0x0, 0x4000005) close_range(r0, 0xffffffffffffffff, 0x0) 14m35.810132841s ago: executing program 2 (id=1929): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000002c0)="7c1ab8b9219eab9e1ee748324bda7807c9ced15ec6cc644c006ea7b65cf6da", 0x0}, 0x20) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4004743c, &(0x7f0000000180)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0) ioctl$TCSETS(r1, 0x8926, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x840000000002, 0x3, 0x9) connect$inet(r6, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m29.702111134s ago: executing program 2 (id=1940): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x48004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000000180)) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008e02"]) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x40000008, r9, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00020002030104000000000000000000000010f4ff000001000000"], 0x1c}}, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x10, r9, 0x0) 14m27.067726189s ago: executing program 2 (id=1945): r0 = io_uring_setup(0x2ea4, &(0x7f0000000200)={0x0, 0xafa, 0x12, 0x2, 0xc6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20940, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x401, 0x0, 0xfd, "0062ba7d06000000000004000000f713000001"}) r2 = dup2(r1, r1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) syz_emit_ethernet(0x104, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = socket(0x10, 0x3, 0x0) write(r6, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvfrom$inet(r2, &(0x7f00000000c0)=""/193, 0xc1, 0x40, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) r7 = syz_open_pts(r1, 0x0) r8 = dup3(r1, r7, 0x80000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xd) syz_fuse_handle_req(r8, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m24.683229906s ago: executing program 2 (id=1946): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180039fc00009818f74d1aba00"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x90) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x800, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) sendmmsg$sock(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="15", 0x1}], 0x1}}], 0x1, 0x40001) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0]) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r4, 0xc048aeca, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) setxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 14m24.34398173s ago: executing program 2 (id=1948): close(0xffffffffffffffff) socket$inet(0x2, 0xa, 0x4) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x1, &(0x7f0000000080)=[0xee00]) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) r6 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/667, 0xe) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_op={0x1, 0x1a}, @ioring_restriction_register_op={0x0, 0x8}, @ioring_restriction_sqe_flags_allowed, @ioring_restriction_sqe_op={0x1, 0x22}, @ioring_restriction_register_op={0x0, 0x5}], 0x5) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x20040851) 14m9.333964055s ago: executing program 33 (id=1948): close(0xffffffffffffffff) socket$inet(0x2, 0xa, 0x4) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x1, &(0x7f0000000080)=[0xee00]) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) r6 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/667, 0xe) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_op={0x1, 0x1a}, @ioring_restriction_register_op={0x0, 0x8}, @ioring_restriction_sqe_flags_allowed, @ioring_restriction_sqe_op={0x1, 0x22}, @ioring_restriction_register_op={0x0, 0x5}], 0x5) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x20040851) 13m10.935884799s ago: executing program 3 (id=2062): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045"], 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 13m6.771128s ago: executing program 3 (id=2070): socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) mincore(&(0x7f0000184000/0x2000)=nil, 0x2000, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000000)='stat\x00') lseek(r4, 0x10000000005, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000040)='O', 0x1, 0x20000080, &(0x7f0000000280)={0xa, 0x0, 0x3, @private1, 0x9}, 0x1c) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000d80)={0x4d1, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 13m5.600701342s ago: executing program 3 (id=2075): socket$nl_generic(0x10, 0x3, 0x10) keyctl$get_persistent(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) unshare(0x28040680) socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]}) socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0xf1ffffffffff}, 0x0) 12m56.623551407s ago: executing program 3 (id=2084): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x8008000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_ts_info}) 12m53.46112985s ago: executing program 3 (id=2092): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000f148b442bbd70007cdbd725080003000200000007004500636d0000080001"], 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0xc044) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "ecf6c33fc325714b6fc347d84d0d633688169056d14a59b049"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x200, 0x1000, 0xd6e}}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "000500640000000000000000"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r5, 0x101, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) io_setup(0xcf0, &(0x7f0000000380)=0x0) r11 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101200) r12 = eventfd(0x3) r13 = open(&(0x7f0000001880)='./file0\x00', 0x404000, 0xb7) io_submit(r10, 0x7, &(0x7f0000001b80)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0xfffe, r11, &(0x7f0000000400)="650481d653f342fc274aaae32285e17dd7b7f9b00679ad05f37b7f8226a94a039546da5d9671c1a7e0ab9e02d94b230d77e78748e408194c3a5f3e6748c773a69fac9b36c907bf1e69b8435a08272bbcd95c9f2ed0576b4cdc11dcec2790cd733efea8bb636181b384", 0x69, 0x7, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x3, r1, &(0x7f0000000540)="d8aaf6503c6ac6d6b560b5075c8b17bc532c8a2fbdcffd0e05edaa95df80941708f4ed2c2fc33058a81cf999e3f943b81710abcc0d5b9630e1f057c2d77dff0466f34b9e588f6e9632391d02141d30d9ed6704ce0eb3cc83fd41de5274bc4cac82c53b6f07c7f31ed3aec1cd8da7356390fe8953fe4e06ea6a7e7bb219", 0x7d, 0x8, 0x0, 0x2, r3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0x6, r1, &(0x7f0000000600)="96a531308818c3468b4ab17b6a4ee9f5350b08daee2297a85f9fa3b4343eed1b7b3836b48c25e6b9cace4c6ce920cbca91151483f30ebe598be130be487ca83de33b5c153d0cce11dac34fbd178d87bd87efa7e5233a20089408202450cb2482ef0f1f8f44c9f9ca230fb8f1c74656f3fd868fdbca1a12e841bcb7f3faa6e374a9795b09e523b7f4640acb0c9b961f5e3bed86c19a9920728731a936d84eced937ee0e121530585d8fefe8256ef71b26dcd21d2c638d884c48efbd146308dfc4b5de4e9374e627f7e998ba028a0847f478aff150eec24f96166fa26fd2ba1ef405b2d58f2f6c7a8554", 0xe9, 0x3ef40435, 0x0, 0x3, r3}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0xe15, r4, &(0x7f0000000740)="9d3a366379dafcc7f59616cd4351ab0eedcb7ca414380690d4ac3dcba25288e6d1a2ef9ba23fd381a4fb5c1966d3e094678e6d6c1f2822e1437f62b714ecf696afcc2b7b93018942787034224f7e1fba5feb7af9eb6a548e98c9cfe7cd73421cb859b2a0861875178fe580402e4269841e6dbbc99c15bc1b49d9809e0ba079bdbc437e6c3b27180dc8931cbe3485edb3877de26ae914640443ea9f93c6afc2c4e33c3e0ac5a78c00a0afefb7370b25d0570e4988a649dace86b21a9fc8798b3693c6e7f144f88559d39e504bea93f5963615f4c234e8dabf35eeecb9b57df7384da0dd2b2c", 0xe5, 0x5, 0x0, 0x3, r12}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x5, r7, &(0x7f0000000880)="3bb3997530011565548d80cfc370f7be05b41b84c88c3d928baa07fbb439f7b9175abbb2e12d8a84fd0f4a450f9cdee96f56b005157ec7c59578be50d38f242c4b3cf112345ecfd5ae629100ece093333d53f93952764b844ce1457824b1af9e31f66580b260dcc5d4a67208fdb532106941a8dbd1311edc3f9aa4a421fbaf984d000d78375f37d1fe8fd972b2320b7c8e5297f5532ad01cf83e90820770291dcdc960f6fe2ab2580d3c450e1572f8ac92f1a76afa2d7b83045f01e87900689948a9f73f4fd3e86d7f42966b72c76512c39aa27d0e7cd798d499f7cc7e6b5c46cbc1870423162f803f69d9077b23868ec2468a0d76613765adcca371dce201c7e1d5cfbbbdfc85e2d44b0fe6082dda3b6afad36420164a9c4d3f354afa78bf56bcde6df6fd5ae84916a34d17a509be11b62917dc40bc97744f91ed4b2f76d8c3aef4e4424e4e30879edf5e6c388e74c267819f6aed3125c56cc42fd45298ee81feb9f70e725907203089ade8caac978141219107c086e281c030c0d9dbde4a9a9fd7aec704f312615ca251b99017915e64787ba079c0a1b04133b229f0d2ec6b68094b835fa7b969e5c8255ef54a8ce1768069e60e7342413d8d7c73517ff616194dbb447fb749c55c84fe0c89f2bd24dcc716336667e1b0009b01caf15f7aed90a6058c9173811b82732dbe7b403040830acb4dabb017d02f2f211112a0f3de9c0cce3157502fbe18c86b6beb6818958dc8c713b3425559812497fa79fec411515fbc074cfad6808a3af9eac7f1b00df6990a9a8ec297c71bd629f9ef427b16d9740963a503fa905da27aca9a21c87e26ee2c8b5a861dd00480618c439721b07601f6cf6c02967953ec94f2444956f335193dc09aafeb93ca38856221c266afdbfdd472354b0bdf900a76d076bac8b9f050dcc346ccb9a8da1af32549b543dc9a568bb0ff49954f12d3349e09840529be61429efaab2c054b2b404a0fa5e9bed8db011c47eb3817e8b0957a2983906058c1298d759d93895f01281f07388b0a25e93f4d929e39df40da0db4fdfddc0940289b59b7628f7a5913f5342ea55dfd09e300c9775e08240d743d36830a4c86d04476c95fd2d4331e19b1e46b5302613e850816e79bb0d49b179009c1df1188abf4dccb832493aa1a8106785623387cce7e9e2eb0be42d730f4dda41c76d13e5c648280c4dc68a85d011456ac9ce8a954f6aae988e068f11b13666ab91dd38baa496617e6b69ee3b988378e6a049f13d2a30f3b1a83f9023618502a6bdfd31cd8f3d9142fccbf5a717e55a5464e7d76add5932b117753578739872bb3be78ab5d3ac078e1240e011442a78637f80503e3b670b5f701cb5d8ff9140af7a7262ae06ae3c1a3296df948a8897159741e2f3706882d8088fff02cb1bab9369997ef83a18ab90d334e7a13f304fe86e96844128babfa0070cc75427e71eb7fbb86d47e73c90f3db99f45b289e88eb6792066d38b88f580a99730b81c253ad72977de2854b86f7ec84cb16f9de281683ccca12eb1816e3e053f151e474082b88663bb869acb4adec88e71075105ef4510546e4a2b95dad1f49b8071c86cffbfc53176721c0a5d2cdd39e916b20ee0697e2e25eb6750b212bd36281eb272fe801b1296addd3d9dfeb24a14d860123f6de7f6ad91e2567f172a5d1dfdeb49f0c60ecda465d961eeb12e4757d8e9c5cac3d46eeeac54092d7a789e61eea834eccf8eec3b1d20760b64e3959695155b35cc5d560127b4dc190cae08fd04be78ff2b212d0f8014c9cff93a30da0a1fd6036f7a7632450e518a02a383614d47910d828c1227a65529a5a52d7618a182c98190687a5faf7f8f10fa76d187f54804121246da7828fc18fe931432f732e13b2d7362349cc867a24a0db8a88d8c7d51df7f45450cc9ca0a38d1ce7f9928147c6e2716846c9e876443a8e6ed9be6448889f9919625b2c0f4f5aca528b99a22add852c12670fb7a33f2f9dcb2d500a6bbd0bf7a06da1ac832d4d7a56750aa242ac922b897e1144b0bee5b408a7b09b6042eb63e25521113631b5b80d2ba1e1242f58cafb8219b0fc3e9ce1920636b3f547fe896601838126cf0e3195b57e926379ff16ea2bede2d5c918e5de5ccafe63fc615a0792ff401c80ce6cc09797c5a64bf4ea997dbe4133fda464c92b813924a89c1e725d46c068633ae11a597a3f5cdc905888ff5dd170a21a7718a0511b58dc028b7935ac99341333a686f19307fb95d863076117eb129998693045ea8ec9a72c70a52b73d5321b07d5c32bb80907bd8c8e889589874c50ba99d43c1189afffb29aeeb02e06896a1fd472c9f25ced33e031af86ab13bb6759e44d6e0d6c05c8501c9a04fc5b3eab1bb458e2272e328240c8c1b358b9b3770d916ba8698eaa6e34f86731e7be095e9b6eab291cd0ea5493e0bac707ea7ed340ff70143838b1101bbbe252b3da66defc707033616791fbdfd16bc4b7f88c57ead1a42790a5c24b8ba03044f9c1ccb5a43d972be2cc126acad0b4d0b114b80df3644ea0765c54a2bce1b4efcb54601f0098da46ba1d85d0d5d30d6d228763301ab4d729440d8e29c58f1c4ad1653226f043d08201a6ceb591d7eb8bb0ea6ac4ee1426674d7a97ee57eb43ff626488023d4b76d0f7e7ef009ed3d3d98c68fdd235301bd8002129dfe64db0f30adc21a6b381fb6e444e11b9063a30d9b816f789117cecf22e829e0e585dd932066c93a4a89d03b08c112edcfe7366669b767fdf76a63d31aa0c4c2a8695299e4ff96d4083f58b0e39a1459cefad3f312a5df233dd0a48698d655989fdbd5305f31739c9ada38b09b66316464c3e22f20a6709866cc7adc04ddd249df3703f1d714b25d9c23156bec9e3525477052e4199ba70a279bce547b7431f0dcebd35e5f1e7566dc5f09fe0819a7bbd7da863ce90c782fd00a29f010aaf65745a4be480ee59567171a07a55cba7777d30bfab0a2da73e5b1cdea09b7065a3301f997adadbcd6b2921aebbce2ce3b69cc8f168f230a6523c670666f80a1c808b2f11211a99f4dc28c35f9986076d0dca386f4d1ec47b7e3c2dcc325c79ad1a14447f6fdd72ec3a2b2f987e700a1a1866615fbef11d19063c1dd8d2fe3f55c84b5da3aeda3bdd8177b539c1f53ab1b9d8b90f3aa3159c5a17da6821ac87e9a0f837ce5d6d37a3b812185fc43ac67a9949bbad33fe19be8e83bdeb118875bc2b6662e6431f4d3902253ac5b9d4fe706f6566b52397c724b2236b3de9b03d7451874cde47060f93191c1114e60218a197b2fe89844dd070ca976d3604c82942ba97795ffb27a907968f7d70d600689cab3555c610ac897ab1314315c81afb8df3032d610494cbfa6cd288b3fa836792d07e10d47a2bff93db6e9d605f222a8196637e8dd13446a0c562c5414d11159ffd665e2c7e53a20d34e6edaa78dd839586c34954ba2e8406a27e8ffe5e33f34852bbec200b10c7dda1184f55ffcbeaa2087051b55f2155a52b337784b9cad62e56671f217d3b4329bfc6b7c111d2266491901679f2358f37430da9d5c675ea9992b73268a805843f3cd99ef551e2bd5478f19784df4a6abd632710c1ab9da9949929e9c94cde95cd1888cb77f753d14aaae60a8053739124754618f63c1361731131248c1f715401d6f616598e7367722b9570418f87550a4a784ae84fcb2b3f88f6d59c51f58eb28df3571b4113dd8d3aaeb594d381e7af44736299d491fe4dd26a184bb29e5f4c9cd69f7dfba1c67690af3b56ba6c1345f1a15f2d50d0bc964f041be25c71fbc99dc605644257c07b1447b242bd6cbcf87ea69757f034850b02b782e46ed7c5b251cf4d2099cea9a6886255670ae6ee2306d2c6fb242cafa13ed171caa79fc7a7d18239ee8cc3e766a98578404c17201f5283164157193f242eca0f6398c6b10d7360d9dc224012f4bde73692461ae1be5a6c621d755bfcd5caea514675ec6360e9710fe3bfeae371efe6dd889388bc1734ddb29d6d32158b1353e53533691feb4c5fbe4a92b3fd027b48ff81e947151c13ef45da9444edf0cbd732a44fa945d38df8635c70c5775695ebed18bb9f3e90e7c8c900e04f944cf29153e92caab6a9d2afb14c5a02165fd52f486f41b2316858adfb757014436e398f28bf949adcdded6ee763e58a13673db8640709f58992591b46eb64baf46bb07a0dd2ef36d76e29c1cc5f62fbc2780e302887892ad23294ea7337a3f1617a24a936cf830a8ac9819443161d4eae3614bd5f42feee309d0a96c386ffa263d4dd07a1f6a3ee2454f6302d9f1eeabeb5f7682eb9821ccd637c036f2810259875b0aa1731b30de892c6a9b261d9500e05562c9fa067db918e946105b9be960949d8ff185ac3d6b26bedfc9ec46f8396a72b29dde77ab2a052e8e62574c08d5d9fb9adb197877d7641e5b2e497cd41a956e2536c01feaa66a90a9eba0efa2a5a00807fa539f7416c5719b330b064c18a3f22fd21a75cbdcf3bfffba5fd6fbb85278109bb57d0a5b4085e6f0779e8d7967ef3a9d0b846e99517462847372f10b9ac6e0344b60c98b80795a026880f42382f0a660ee164c6e61be19c5b90f16149a4e2267bdb25d8676f0924587ee97a77f2295ffff13b96408c6ae0b1a3f6d9e4ed4a209fabc4fab7ce53100b15dec02d782c9f4a5f6350e6930b9d882dd3a3f5c17d7a4c8d9157df2f22b923f8f6b9cc20d806011228a130ff758da4d68e89013cd6c7f737303f836310de4f827da60cb2cf414f5461e3f604ef043df5edaeb7c5713a8d66ae3bb023c3c2b247c4d3820b76e04007a2792bd0ae57c059f3ba27743143a9e1fe520b502a0a8279e9ed9c39f75e0848c2a3689124cc409df27a5c9d93183255106ca91b8bae4638b16cce0070808ba4aee5c1d7f794499bcec6d85246365e10618ccd131fa984b7fca6775f884b2c00554b29afc05ea116c7939f3ac06e5f2b8c1b70b8cb92d8b59307c12ed42a85cd9d5730b01cf4a9d8932cd8a181420f848c18743deb5254a72e1a411295ae27a9a14e8d10e999fb7fc0d32bddf23a6229963abf0054c7ecfb29961c03f1a601c5a8638a741995f0d7ea5833e0ca1ec5842cb36ab283b8a3c2252ccf15fa261af62560cc8e09d4654f34d18ad9ba7147e3428648fc351c935cd0ac64bf2d9ff40f837b9f2c2722eac26d6d5932a59e2203159b0bf28a60b9a9a9f1cf8d90d0e411bd8fd0afb12fb4310ff32765390fa8cc2f750f469dc390b021991187c770ffad17c0cf91f1a12306c60f0c77be221803121537b78adc3c06ed681dcab5a2384cbac825c7b1c9b87ee256b6f7df3d851341b1923353011f15e851d2b227e215abe95b4760a461804871283f42288f825663416f8f2f147e82b029abdc5b51fa467e213fca66228983c7e7b6af25ea643432695612b10021fac208f23643f11bc6f07c56a0acb058de6c733b0e2a6d7127ae1fd283987214da42624a5d30ba10012a6d3fd5a3355c9a9c0a1a093689d1efe0ed3f2fae04fa340f5259a76904d0ab4429295489cd3a66f0c66dd2297a1d955752aac1e54b1bd18c298e3138b6a05aa4468a81802f473822bb3e96459818145130e2e18e00b231e71ca5f6b688641ab01579fe4acbb98e6ee95e82b254d7ade8c7e48354b3e8e7da481a73580e29ca8c4df5e60f5b263fc114ec5f0e5f8436aec6284fc23433925c7e90be55d78647c6ba52b70fa3af018034ef75ca5a4736188266d30eeaaa41a53f28afc2a434214c3519672368a04d49888be202a9625bd33b3", 0x1000, 0x6, 0x0, 0x1, r13}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000001940)="3732e7e0e18b9a974cb072b204bd1db2e66e603397e1c66c853fd1cca5f783b4fc608e1c6b457d6230629b01a48400e4add0e1f091e3a23e16c64f1c128cc508e4d851dceecc5e34fe70361e65067fe7ba6a10901bf0aee289a2ac3988c22b6545b1987f41ba63f865655337ac0118a013f6598307046b8f4d03180927d3fe27141b68f65e97f8675438583d3d9be0ea3a5bcd5f0e08aa053c0aaa1bcb6e6ca075ef6e814587421f16040a1a6d6c1eab7564673eca4336f6f9db5675331943af61d23f8f2e6192c69ccdce137167c8f653c7b119f5c2780781f4b71036bb4ca4f05f33", 0xe3, 0x1, 0x0, 0x0, r3}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x8, 0x865, r9, &(0x7f0000001a80)="14db17ba4625b8c529a1b9265dc8490cf28eba436d40961743cfd922ed34ca3d63e754534c7281ae4ccf952ede5db656f267ca06578741d5b02600f653a3de4ac4396be8d767f0af7b29e307f3ab43d6cf1c0274f396d095f5538a9bfcfca5d8b8c4545196088a5c206304bbbbdc449e966c211028fd364b376c1d4b575e019c0af9df1278b7016d8154806c272a970e", 0x90, 0xffffffff, 0x0, 0x1, r3}]) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r15 = getpid() sched_setscheduler(r15, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r15, 0x8, &(0x7f0000000240)=0x2) sched_setaffinity(r15, 0x8, &(0x7f0000000000)=0xffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r5, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd, 0x50}}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}, @NL80211_ATTR_PID={0x8, 0x52, r15}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040005}, 0x0) 12m51.588883902s ago: executing program 3 (id=2097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x2bd, 0x2c}, 0x4) 12m36.112246367s ago: executing program 34 (id=2097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x2bd, 0x2c}, 0x4) 4m41.724478992s ago: executing program 6 (id=3156): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r1, 0xfffffffffffffe98, &(0x7f0000000180)=0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) (fail_nth: 3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) close(r0) 4m39.298514406s ago: executing program 6 (id=3159): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4", 0x3a}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000006c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b17dc626e4390796a1eb48274669ab13f8b11d14"], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x957, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r2, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m38.947834909s ago: executing program 6 (id=3161): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x80, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7b, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000080)=0x8) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') preadv(r8, &(0x7f0000003580)=[{&(0x7f0000000040)=""/21, 0x15}], 0x1, 0x33, 0x8) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040844) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) setsockopt$llc_int(r8, 0x10c, 0x7, &(0x7f0000000040)=0x7, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05000100060e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4m38.133679661s ago: executing program 6 (id=3163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09240000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30000000002000f7ffffff01010000000000000000020000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ppoll(&(0x7f00000003c0)=[{r1, 0x4000}], 0x1, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x4}}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000001340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = signalfd4(r1, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000100)=""/18) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0xc001, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r4, 0x7, &(0x7f00000003c0)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x4}}, @common=@unspec=@mac={{0x30}, {@random="16f9a936c886"}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c000000000803000000000000000000010000080600023eae028a000900010073797a31000000000500030001000031ae38177c7a20ea4000000000"], 0x3c}}, 0x4000004) r11 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r11, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0xc38, &(0x7f0000000380)=ANY=[@ANYBLOB="7c2f0aec9d222ea5ee20e6b25cf191669d6293d87d67cbc22a8dca55b40c545d1439d9ab278a279afd807e25e3c9aacca664836fec718e063c9b06cd66442b6407fec5c3e5cd9d0f1001c90a801c4fadce8e13a5e0209edf5c5693acccefa24d4f5a2ef062e701d054d19e9e6340a1651e05fd87b70942c679234426f9b19c0713563d0e38ec970aec02a6154ab61081aae03050d00192bd9d59977bb2f1297a7cd0571a0dfc5688a8e3d5f4a226b7e397b43c186967c74821bc70005059ab5606c70045a6a9915285c8215b9abd839f50530dde8ad500d70d8f7c1a0093293e6d632f8e8939f3199ab4ec92caed14c26975b57578c8ea666a2e4253ca9516f3c07bdc5ad27c2ff29e1569795f9dfbd1b92919432e423ff4f9a35b77419d6a8540fc9431ca78e05e278bef5a21b1423a3c9f7c1e2bd16a1ecdfde51cfa4aef38e6afb92770bcefb5fcb277ccede1ddc8647db538661b3d10effa1b6f705ef1b74e5bea20b4f98421b7b4be4c5c6be101f5503a4ecaffae335ef565920d678ed5b41031122b21f9d9b7f270b95f94624a7ddc657c83d3722a8d01f321fd7f685fc74d61a4e1914dda6df4be639c4910c56a84c24a41b9ef07eee4083dd9a30a53a58b50186c12180da4186fe5845b6b325fd112378a82d53bee449bc9d4c2d4331a1323c69c99c778560fc2142d138b23000c5403156cd8223f07a73811ab5b81e287bd6ad95c2fefce002ac77a1ac74d5e868870f29277da69987652b0055b3072efab2fe56fe0fe287f7d51aa772b2e3ae77954a938be2792442e1ab2e6fc078d821c70222142568b6db9609f1db23e8a4a460b9fbbeb48469e6bf0acffd85af86e69535a95c02c30d5ad776002c48e19e134688780bbafaf81097358b0c8f63bcefb61d8f29aacb3dc1a485bb7343539387f1e83b9283674bdc0d7fe8bf86948439f4b4a20e2832c560c743e4c2d37eddbf341c47f71a93101a08a533e96601f98752531428944d88c836c7d7a082859a3120721afd99130e83f689720638e889ddf4a23228dc23e955ae67fe5447e134b63f4c72e5664d2ed8a7406568e08f3582661006cf5800615fc4a5ec88ef3361ea027d2a1a550ac3e017a212570cd145fcc2e1984e4fca28bf4110f33a5ac847fcd3605e546ee8ea49a7de5d4b599926a76028e9d5259db7fd6f908c7a8657d42f895380c88ac85cdc183f6b61172b966a41888ceae895eaf18cb8da8d1918411b297959a8abacf8c4cee15ca87048aae13ffe068dee23a9edc2b259aeb0595b7ed2633431067a999f915934aef1be5f360f0db726f24e8eb89adb8db535de6fd7c06678831d17e47c67cd22f047b92d8fba83a49a1285def4dfdf634408cb05ae73f24df76e7393d1e90d40c50bd388bb53e281b889084a1a19efdfa6be16aed1a621d964c1ac332b65765e7440ccc75ef44851409c458905127bd161bf98cb6a3681af073e3650f52d5ee691c347e86360c3aebae4a691b2485d68c57d09e269656b1efbfd3413d54c8d3e467c0bfa84669d0cc5e9cfd50b9c79171f8b6a5e66e8c6f66c0916083b8e8a464498aed3badd2f267fb56adb0953b9ebd0370f941d796abffa81722d502c8d1e9d844802f4197067598b2394dddf76641f9c2ec0403bd379e8f712668b98e1121a27888b227104875999cd562fa9833458879652bfeffabc6bbb5c354dc36ad91354ccb5050d69b28b562a72bbf277f96bd1d5dc6408329f6f850a96762c9aebf2a7b5bacbbc032be8b29c453867a47094289f6b8aa38f85051fc4d4478a02af664b3250a396583001a7971cfa6f5a4931e32e7bfb7b4c3f7be3bc5f91ba46554773b9102dbd4aba4344c6fe87bd050f79175d7918d57bc137cde33a884bba63a1adf6e7e71ba783eb1fe689b23d3ad18627b0b229c0d982631308a88c4bf1e2079eb0fcc486ef864e7c6a75cce17b133577fa88d62807398b8a795ae2bb7610f8b17cfc56ff11b8ffc4aa316e612fc76955dc44e66467c4d632657d4cac3cc1bda8c2c6207915a89f76bf1fd61c156ba8720bb8048601cd1221f6996e6f04e44b842e00a4487cd59501a65db1f6ade7f22ba5d7ee8e67125e284eef41ad5f2069a48cc71c621eb08d832ef8592874199c5c03249d3ee03422535c2be6919c43724277d56a885ab67753ae8d7f1317b7e534bb1a111a0edb5d298c1374c7824a80fb00ae268f2fd641f1b2a12f712d9a5e027957941ffb4218c6d8a8e7950dca0b4c9018dcfb67244a30080d54781b5111c85cd89e08f51c55975301ff389baf2242ef0fb662122a2eb89c3dcaf82d6391906a1b235635e6c484cd5fa32bc80ce68d505df9a9c6b21e222c3b9330243b8e02a3e661c20e0da633d88f7debaf6643654050ab73613dbea6176109b5c35c4d280739aee77f81a1b58efa9e606259f45745b69523bc81828cfcf83b7a1ef86757172ef67a4f153b7c3a3e99f15ef"]) 4m32.781981521s ago: executing program 6 (id=3176): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x802) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) 4m31.195813s ago: executing program 6 (id=3182): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2002, 0x0) write$UHID_CREATE(r1, &(0x7f0000000180)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x5, 0x50b, 0x9, 0xc, 0x2}}, 0x120) splice(r0, 0x0, r2, 0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pivot_root(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, 0x0, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$inet_sctp(0x2, 0x5, 0x84) 4m29.321325313s ago: executing program 35 (id=3182): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2002, 0x0) write$UHID_CREATE(r1, &(0x7f0000000180)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x5, 0x50b, 0x9, 0xc, 0x2}}, 0x120) splice(r0, 0x0, r2, 0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pivot_root(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, 0x0, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$inet_sctp(0x2, 0x5, 0x84) 2m45.186645512s ago: executing program 1 (id=3415): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x48, 0xa, 0x40, 0x2}, {0x28, 0x4, 0x1, 0xffffd024}, {0x6, 0x27, 0x3, 0x209}]}, 0x10) iopl(0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chroot(&(0x7f0000000040)='./file1\x00') ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd2a, 0x25dfdbf8, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4040c85) iopl(0x8) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@empty, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x51, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @private2, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}, &(0x7f0000000280)={0x0, 0x1, [0xd43, 0xe22, 0x99, 0x5f4]}) 2m41.54469709s ago: executing program 1 (id=3420): memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r0 = fsopen(&(0x7f0000000d80)='vxfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000dc0)='smackfsroot', &(0x7f0000000e00)='./file1\x00', 0xffffffffffffff9c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="090027bd7000fddbdf259900000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40840) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000140), 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x80}}, {{0xa, 0x4e24, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0xa4ffffff, @loopback}}}, 0x108) 2m38.932542548s ago: executing program 1 (id=3427): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x40010, r1, 0x5000) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0) ptrace$ARCH_SET_GS(0x1e, r2, &(0x7f00000000c0), 0x1001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$poke(0x4, r2, 0x0, 0x80000000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) socket(0x2, 0x3, 0x9b8e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000164e93bcfd62fdc61cfbaddf3c6a379300edc97a4f00000000000100000095000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0xb}}}, 0x24}}, 0x800) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x12, r10, 0xfae76000) 2m37.994465821s ago: executing program 1 (id=3429): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) 2m37.859942416s ago: executing program 1 (id=3432): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x40006) connect$unix(r2, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x1020, 0x1, [], [0x80ffff, 0x10000, 0x101], [0x0, 0x3], [0x200000000000008, 0x3, 0x0, 0x3]}) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = socket(0x2b, 0x80801, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000580)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)=0x10000000) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="00000000000000000000000000010000000010000000000000000000cbd28ff0e6bfd84c690f06be9d6663099d"], 0x48) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x47, 0x6) 2m37.477439907s ago: executing program 1 (id=3433): syz_usb_connect(0x4, 0x4bc, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0xa, [{0xff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1809}}, {0x9b, &(0x7f0000000780)=ANY=[@ANYBLOB="9a03cfa7128b4af00f4c3131affa37cd19bee574951685118eb65d850be981c8400951f8d086cb2e20cd103aa781f8a94d34cd9667beaa1f414bda020c967d0ecf774089b3aeee6b61268ecb2b3c01be84a0804e5b74e7aa8642b3e0c62efcd10e4f5e95a7c4c374f1908381d5163fedf0804283a22abf639a729e3a39bf4f29866982ce9021c60f0ba7dbd9202baea5d8c774a8d990a9f9cf0cb8"]}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x402}}, {0xa3, &(0x7f0000000840)=@string={0xa3, 0x3, "0ce67e456ec812fa67111206db82d1848c7552a569439c359f61f3a4e7bf265c149a335e37da9de7417b2de9793a8c9da178fc0a8cafa28bd29f2f17c1998a2dc2635475f2f5595ed3e3d0c41a1f276b659328f27d03124580bf4224a67cdb37e5db32b2ff85d96868fd679ab835379cadaa5429e7dd346e0afd4c7f49f17cdc7bb6ebbb46d304f3aca01b6825498064efc342aae6142b247248a0b35eb5531bd3"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x480b}}, {0xc4, &(0x7f0000000940)=@string={0xc4, 0x3, "860b339c3b8b6311428cfa4f58ba40e0b7bc0d8e62d342278e148e82e4dcf28e6cb9039dee5c55b36b700adfdcc1d9ce682630fea877a696f85659691a3f8d8667e19707ce6378483a85e4ec057692c3b85d0860236b4b30f98ac9e441b61ebd83ee7e91b840a3364116a67a1c06270ad15f58b5ef9839743c26374b52cd1ff68a2c7f9c93ab04d61af7bf4e84136c2780cb6417302067fe34697744d80f3f26124c6a7082aa4c43c12723e994923bf4ed081b9c7b2ce826dff9b45c62d433618c19"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xad397a4cde12965a}}, {0xa, &(0x7f0000000a80)=@string={0xa, 0x3, "6d24e4713c6c72b0"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x412}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newroute={0x30, 0x19, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0xb4, 0x0, 0x0, 0x4, 0xfd, 0x9}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x8080) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='contention_begin\x00', r2, 0x0, 0x800000000}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRES32=r7], 0x28}}, 0x802) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) 2m36.707229908s ago: executing program 36 (id=3433): syz_usb_connect(0x4, 0x4bc, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0xa, [{0xff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1809}}, {0x9b, &(0x7f0000000780)=ANY=[@ANYBLOB="9a03cfa7128b4af00f4c3131affa37cd19bee574951685118eb65d850be981c8400951f8d086cb2e20cd103aa781f8a94d34cd9667beaa1f414bda020c967d0ecf774089b3aeee6b61268ecb2b3c01be84a0804e5b74e7aa8642b3e0c62efcd10e4f5e95a7c4c374f1908381d5163fedf0804283a22abf639a729e3a39bf4f29866982ce9021c60f0ba7dbd9202baea5d8c774a8d990a9f9cf0cb8"]}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x402}}, {0xa3, &(0x7f0000000840)=@string={0xa3, 0x3, "0ce67e456ec812fa67111206db82d1848c7552a569439c359f61f3a4e7bf265c149a335e37da9de7417b2de9793a8c9da178fc0a8cafa28bd29f2f17c1998a2dc2635475f2f5595ed3e3d0c41a1f276b659328f27d03124580bf4224a67cdb37e5db32b2ff85d96868fd679ab835379cadaa5429e7dd346e0afd4c7f49f17cdc7bb6ebbb46d304f3aca01b6825498064efc342aae6142b247248a0b35eb5531bd3"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x480b}}, {0xc4, &(0x7f0000000940)=@string={0xc4, 0x3, "860b339c3b8b6311428cfa4f58ba40e0b7bc0d8e62d342278e148e82e4dcf28e6cb9039dee5c55b36b700adfdcc1d9ce682630fea877a696f85659691a3f8d8667e19707ce6378483a85e4ec057692c3b85d0860236b4b30f98ac9e441b61ebd83ee7e91b840a3364116a67a1c06270ad15f58b5ef9839743c26374b52cd1ff68a2c7f9c93ab04d61af7bf4e84136c2780cb6417302067fe34697744d80f3f26124c6a7082aa4c43c12723e994923bf4ed081b9c7b2ce826dff9b45c62d433618c19"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xad397a4cde12965a}}, {0xa, &(0x7f0000000a80)=@string={0xa, 0x3, "6d24e4713c6c72b0"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x412}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newroute={0x30, 0x19, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0xb4, 0x0, 0x0, 0x4, 0xfd, 0x9}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x8080) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='contention_begin\x00', r2, 0x0, 0x800000000}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRES32=r7], 0x28}}, 0x802) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) 19.276748899s ago: executing program 7 (id=3633): syz_usb_connect(0x4, 0x4bc, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000b00)={0x0, 0x0, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "0a99d974f23d916d4ed178ee60f5665a"}]}, 0x8, [{0xff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1809}}, {0x9b, &(0x7f0000000780)=ANY=[@ANYBLOB="9a03cfa7128b4af00f4c3131affa37cd19bee574951685118eb65d850be981c8400951f8d086cb2e20cd103aa781f8a94d34cd9667beaa1f414bda020c967d0ecf774089b3aeee6b61268ecb2b3c01be84a0804e5b74e7aa8642b3e0c62efcd10e4f5e95a7c4c374f1908381d5163fedf0804283a22abf639a729e3a39bf4f29866982ce9021c60f0ba7dbd9202baea5d8c774a8d990a9f9cf0cb8"]}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x402}}, {0xa3, &(0x7f0000000840)=@string={0xa3, 0x3, "0ce67e456ec812fa67111206db82d1848c7552a569439c359f61f3a4e7bf265c149a335e37da9de7417b2de9793a8c9da178fc0a8cafa28bd29f2f17c1998a2dc2635475f2f5595ed3e3d0c41a1f276b659328f27d03124580bf4224a67cdb37e5db32b2ff85d96868fd679ab835379cadaa5429e7dd346e0afd4c7f49f17cdc7bb6ebbb46d304f3aca01b6825498064efc342aae6142b247248a0b35eb5531bd3"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x480b}}, {0xc4, &(0x7f0000000940)=@string={0xc4, 0x3, "860b339c3b8b6311428cfa4f58ba40e0b7bc0d8e62d342278e148e82e4dcf28e6cb9039dee5c55b36b700adfdcc1d9ce682630fea877a696f85659691a3f8d8667e19707ce6378483a85e4ec057692c3b85d0860236b4b30f98ac9e441b61ebd83ee7e91b840a3364116a67a1c06270ad15f58b5ef9839743c26374b52cd1ff68a2c7f9c93ab04d61af7bf4e84136c2780cb6417302067fe34697744d80f3f26124c6a7082aa4c43c12723e994923bf4ed081b9c7b2ce826dff9b45c62d433618c19"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xad397a4cde12965a}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newroute={0x30, 0x19, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0xb4, 0x0, 0x0, 0x4, 0xfd, 0x9}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x8080) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='contention_begin\x00', r2, 0x0, 0x800000000}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRES32=r7], 0x28}}, 0x802) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) 16.936033296s ago: executing program 9 (id=3635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xbe, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 15.585281773s ago: executing program 7 (id=3637): syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb5, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x3, 0xc0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x9}, [@feature_unit={0xf, 0x24, 0x6, 0x1, 0x5, 0x4, [0x7, 0x6, 0xa, 0x1], 0x3}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x4, 0x2, "1ad60383"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x4d, "d6"}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x0, "5274d3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x9, 0x3, "76920e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xc, 0xb, 0x1a, {0x7, 0x25, 0x1, 0x3, 0x7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x4e5f, 0x5, "94255ed2da1f60c5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x0, 0x4, {0x7, 0x25, 0x1, 0x3, 0x9, 0x6}}}}}}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x3, 0x8, 0x2, 0x40, 0xff}, 0x3e, &(0x7f0000000780)={0x5, 0xf, 0x3e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x0, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xbb, "e971f683d11001d8e53e3c3080a6c28d"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "9128ab3c0310fd2fc57e26b8b1ab0f65"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x9, 0x8}]}, 0x3, [{0xc5, &(0x7f0000001300)=@string={0xc5, 0x3, "7d014e526ce301547261909bb35afd1a809538351ebafa0a698d1c46c53b2d8b5e6b14a9ac052bbf93ce5a1c5894d2ce89d2e22a113027eeac29fc7b7e3ea3a87e14468e90aab9c7dd1d53780438455dd37fe71cf702a89e2a442672ecc97f37b259fea9dc27af22d154882a6a8ebabf3690f13592d8253bd75b00309656762c46bc8d4efc7f6360150ca14448e4c5c33c586b71e58be6720e308cb877b8ef81b8df9153786d4429d255c6fe739c1101842be78c2912f7ee5e26052e6862fa5c207ee6"}}, {0x86, &(0x7f0000001400)=@string={0x86, 0x3, "a2b68cf593028c683d52437178ac073982771af0be672e1586f66af08a38cc219c3e8526d65af9bac3988b6c7693dae84bd253734ef99118eb5bec81dfab36f73e808c1061a676e88ba65a4cbfc0fc3aaa5cc56758da9be8c19e394bf43330dfe3ecdf901a5bfea1932c4316e81b3899ad16a06de69909ee44903adc21d185aa4b61550f"}}, {0xa8, &(0x7f00000014c0)=@string={0xa8, 0x3, "fff0616e9772202731973ddeb30db9ce7439cad4f428c3f881a0cea8fb7ff1db8586ccadc0f5fe088a8e0d38608f61bc559aba29c5bbe13df6930361fac503145cc2cd9841e998f76d628bd86d43979e5cb9312144919c4f2627d4de9a07bed5749a2be8b8bef07f108a94422e9a8ad93e40564e0c9fe13ec084afb7cc2b321126abf6763aa8e4c31d9ec26848de8640898ecd34cddb51d28f0f3e5c871e13941713173c06f7"}}]}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000080)={0x28, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r3, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) io_uring_setup(0x85a, &(0x7f0000000180)={0x0, 0x58b9, 0x1, 0x2, 0x383}) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) sync_file_range(r2, 0x8a93, 0x4, 0x4) r8 = dup3(r6, r7, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000800)={0x0, 0x0, @start={0x0, 0x2, "04a0b3e0226f512c3ae9c77572233f86cb4aad3a1bcf2a00310de1a734d8f7e434cba1b05faa3d070e03bb990d84554dce01415b03ab05b231e56e60c2554bde91bee7ab64076577ce1f739a3cc01c9e5c7ca1b34add86cd6174e09f99e509e1fc4e6e48d03fa60cc5dd59f42acf7f7ecef344ea8eec80afe642481c63e5f465be3e8f8fad7a958995623c106b77380e7514382cc5f61aa33cfc2baba1a521daab152208ded34dca3e5593e893c3c10f5bf4c56ac38efa77c71fcec0b6989b73131e98e1f4503e3953c92ed2f248af490b069977df8f385b285160a4d4a5b1503468934704010a552e5e610ae80cd797f785a1a74022d168ae5830ad4658769f09d97c8599d73ff1da799d294ffa0a5f612904cb07b6310e562c3ebdd6d25ac8f5b711988f167ea8218557b6ebae99410ad1fe06157f80d47e180b34cda84fd8de95332d2ba6e171cab0d1b720e2356d4872099931c1e1e9f8e2cd5915fabdd25ef658667b73226387f89832a3dfcf2b968494fc0e6e0a2c7730522c09680c9301cf72c718f85770d38aaddf92c7155940a0f3b963231d79719fb9d9770bd0d28d75d2b06a6d422ad46a8867f2266e369d460e9715a34db4dddbd3176c4589c17e50e3dc894e3855f45a972ec4ff79a765a397d0a2492b6ab97bdbb23fce425592e6aa801c4bd66d75196438c46cbdfae6794bd141b0a17b131f4418d679fdf4be6f70c0b0544728b96eb076f2cfe9074f768ea116c36573eeb8aac4ac317880fa202933a22c5044ac8d2d36bc442a2ac4ebad356f0ac255ed2420735ec26362194c06129f96f331368568b062278cebd3e24a384da89dc4a984fd4aa0fc9f390dfb522c0882ed1bd2c057407c5480891c0b317336a6735370699fcc0a9bc403f63734f3a74c75182f33c95fb05fb6da94422a75721eab895641ea6f34dda6a718274b57c1c89beb99e439f59993aa2d4f2e281d8df03aa49fb40a214dfb086a840c8edfd7bbaf139137d0fee7ecc357b5c23b71c90afd1e983c76fa13b96437e6f433444b38d2c0ccf68c472978dcb86aca126f7637ef136aa0c506dde6466810088229a48f7ae0d1a708d8db978859e883da334faacc0e48872e660e8e43fc25e85882f154fcb83c1c8b9c0d5c7b8386939709c3da8878960d3101db6d945e925832b136795ff1b44e2f0880365a5ae7bbf3463571ffa2896733af08d8c696c54f68e40f8c9a773e47ad4c45aa5b006212c65ae23a914448107e2e12d71d75412ea3c08ab44e95d8c81f8b7ba4dcced4f53d4a732720f4313a6897070037946fc86f561c548f753927f90b526a4bee1922c17d18a2b193cd673e4ff057660823a795a491b053c29c37e7ad011c279eef19089d4de2e82744e463da67f37fc5272789536a217bd1a8461c08c22812a5d8d9ad966868b2446086cf0352fa4a692d", "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"}, [0x78, 0x15e, 0x8, 0x2, 0x8, 0x2, 0x9, 0xc448, 0x8, 0x3, 0x8000000000000000, 0x10001, 0x3, 0x0, 0x100, 0x2, 0x3, 0x6, 0x7ff, 0x7fff, 0x485b, 0x3, 0x7a, 0x100, 0x40, 0x9, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x1, 0x6, 0x1, 0x7, 0x9c1, 0x5, 0xd, 0x6, 0x4, 0x80, 0xc6be, 0x3, 0x1, 0x3, 0x215f79a4, 0xa64e, 0x0, 0x1, 0xfffffffffffffffd, 0x2, 0x9, 0x4, 0x1, 0xc, 0x5, 0xbcf, 0x0, 0x800, 0x5, 0x2, 0x4, 0x0, 0x6, 0xaf]}) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f0000000180)) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x10) 11.307892798s ago: executing program 5 (id=3647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000000100)=0x2) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x4f4, &(0x7f0000000380)={0x0, 0x6d3d, 0x10, 0x1, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47bc, 0xf5, 0x0, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = accept4$inet(r9, &(0x7f0000000400)={0x2, 0x0, @multicast1}, &(0x7f00000004c0)=0x10, 0x0) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e24, @remote}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAON(r11, 0xffffffff80000200, 0xee00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='workqueue_activate_work\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) times(&(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000280)=[@release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x1}], 0x1000, 0x0, &(0x7f0000000580)="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"}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000440)={0x481}, 0x4) 11.281846685s ago: executing program 9 (id=3648): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf1c25000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0), 0x10, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000040)={0x0, 0x6, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b003a484fa500"/19, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fdffffff00"/28], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, 0x0, 0x0) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r8, &(0x7f00000007c0)=[{&(0x7f0000001ac0)=""/175, 0xaf}], 0x1, 0x8001, 0x2081) r9 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004081}, 0x4000004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000005c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x1, 0x2, 0x2, 0xd, 0x6e}, 0x20) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="60000000d2b0b7b86bae0b3a7c21798784fcba64d7144f2ee32e3109c9a295bd02f119d1865c86924515825801ee4709cf28b765014b739c3e15d18bd1c7fa23643500dbee8ccca17fd695cf7875cfa3c6a88ea7fb7abbd98ddcfd01d1d617a948b5b2c25c9f16fcfbe213a3ae1bd0df023634d4946b9d37cdffe8e022b63f5a37dbcc9f951e036d7fed48fc2d18809a665ed150f01bd33846a3b6e970fd78498ad02ae45702bd657e567ab26b1e4e0f82", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf250a0000004400018014000400fe88000000000000000000000000000105000200080000000800060000000000060005004e21000014000400fc0100"/79], 0x60}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000000000202070250000f8a4c29f6f1553719589d10000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b700000000000000950000000000000000000000000000000000958f7ced40e68dbd3618a87aea8438202f39cf0e687e226715505dbf49d04e5c8ef8f66cd922253a79b21fd3d56d55c0263b80090ea093879518adc16a5eed844d8da2945524caeb3a6b55b13cacd1e29329c37d652e1e2126ec24f6a7a862794a98ae245bc9f32c6551a40302317285dfc6f6d40c459eb56bba9b477847c3ef5fc6729768db2b130e929c322435ec95b32731ccd8cf984dba2a33658a8f4e332ce54ebc5b14d538d53e45d91708680e12288bc7a48d87c4516203be0778c7912da9c15f4e9b842e686cc671e898e15fde4a57c660e9e6b51edfa40b049e8036e581a234c34b1bbc47af2f828ebbebd19a3c039fdfa99b0fccfb3980435f9d57f58191fa286f5e2a485f5e4b9524"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x6, r1, 'id1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 11.239574351s ago: executing program 7 (id=3651): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x4, 0x29, 0x9, 0x0, 0x1, 0xff}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_exit\x00', r4, 0x0, 0x4000000000000004}, 0x18) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r6 = socket$inet6(0xa, 0x3, 0x5) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r7}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 10.035973724s ago: executing program 5 (id=3652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x1010, 0xffffffffffffffff, 0xded83000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x300, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x12, 0x80801) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.705643629s ago: executing program 9 (id=3654): socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c010380400000800800034000000002340002803000028008000180fffffffd0900020073797a310000000008000340000000000800034000f4ffff070003"], 0x1ec}}, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000001780)={0x0, 0xb0, &(0x7f0000001640), 0xb0}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000008007e227f3ad7a9", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c000000a98aab"], 0x0}, 0x0) 8.964101973s ago: executing program 5 (id=3655): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) read$FUSE(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x8000000) 7.597824366s ago: executing program 5 (id=3657): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x3000000) open_by_handle_at(r0, &(0x7f0000000140)=@OVL_FILEID_V1={0x18, 0x300fb, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547"}}}, 0x830200) 7.536220283s ago: executing program 7 (id=3658): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f0ffffffb702000008000000b70300000000000085000000a400000095"], &(0x7f0000000040)='syzkaller\x00', 0x1}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x3, 0x68c3c1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) open(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181b03, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r4, 0x2000) getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, r5, 0x6484f000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010100000000030000002b00000008000300", @ANYRES32=r9, @ANYBLOB="040046000a00340002020202260099090000100051800c00e77e05000900"/40], 0x44}}, 0x4800) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000700)=0xfef835e5e20f46c0, 0x4) 7.347941446s ago: executing program 5 (id=3659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xbe, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 6.770767011s ago: executing program 7 (id=3661): syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb5, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x3, 0xc0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x9}, [@feature_unit={0xf, 0x24, 0x6, 0x1, 0x5, 0x4, [0x7, 0x6, 0xa, 0x1], 0x3}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x4, 0x2, "1ad60383"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x4d, "d6"}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x0, "5274d3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x9, 0x3, "76920e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xc, 0xb, 0x1a, {0x7, 0x25, 0x1, 0x3, 0x7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x4e5f, 0x5, "94255ed2da1f60c5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x0, 0x4, {0x7, 0x25, 0x1, 0x3, 0x9, 0x6}}}}}}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x3, 0x8, 0x2, 0x40, 0xff}, 0x3e, &(0x7f0000000780)={0x5, 0xf, 0x3e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x0, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xbb, "e971f683d11001d8e53e3c3080a6c28d"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "9128ab3c0310fd2fc57e26b8b1ab0f65"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x9, 0x8}]}, 0x3, [{0xc5, &(0x7f0000001300)=@string={0xc5, 0x3, "7d014e526ce301547261909bb35afd1a809538351ebafa0a698d1c46c53b2d8b5e6b14a9ac052bbf93ce5a1c5894d2ce89d2e22a113027eeac29fc7b7e3ea3a87e14468e90aab9c7dd1d53780438455dd37fe71cf702a89e2a442672ecc97f37b259fea9dc27af22d154882a6a8ebabf3690f13592d8253bd75b00309656762c46bc8d4efc7f6360150ca14448e4c5c33c586b71e58be6720e308cb877b8ef81b8df9153786d4429d255c6fe739c1101842be78c2912f7ee5e26052e6862fa5c207ee6"}}, {0x86, &(0x7f0000001400)=@string={0x86, 0x3, "a2b68cf593028c683d52437178ac073982771af0be672e1586f66af08a38cc219c3e8526d65af9bac3988b6c7693dae84bd253734ef99118eb5bec81dfab36f73e808c1061a676e88ba65a4cbfc0fc3aaa5cc56758da9be8c19e394bf43330dfe3ecdf901a5bfea1932c4316e81b3899ad16a06de69909ee44903adc21d185aa4b61550f"}}, {0xa8, &(0x7f00000014c0)=@string={0xa8, 0x3, "fff0616e9772202731973ddeb30db9ce7439cad4f428c3f881a0cea8fb7ff1db8586ccadc0f5fe088a8e0d38608f61bc559aba29c5bbe13df6930361fac503145cc2cd9841e998f76d628bd86d43979e5cb9312144919c4f2627d4de9a07bed5749a2be8b8bef07f108a94422e9a8ad93e40564e0c9fe13ec084afb7cc2b321126abf6763aa8e4c31d9ec26848de8640898ecd34cddb51d28f0f3e5c871e13941713173c06f7"}}]}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000080)={0x28, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r3, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) io_uring_setup(0x85a, &(0x7f0000000180)={0x0, 0x58b9, 0x1, 0x2, 0x383}) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) sync_file_range(r2, 0x8a93, 0x4, 0x4) r8 = dup3(r6, r7, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000800)={0x0, 0x0, @start={0x0, 0x2, "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", "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"}, [0x78, 0x15e, 0x8, 0x2, 0x8, 0x2, 0x9, 0xc448, 0x8, 0x3, 0x8000000000000000, 0x10001, 0x3, 0x0, 0x100, 0x2, 0x3, 0x6, 0x7ff, 0x7fff, 0x485b, 0x3, 0x7a, 0x100, 0x40, 0x9, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x1, 0x6, 0x1, 0x7, 0x9c1, 0x5, 0xd, 0x6, 0x4, 0x80, 0xc6be, 0x3, 0x1, 0x3, 0x215f79a4, 0xa64e, 0x0, 0x1, 0xfffffffffffffffd, 0x2, 0x9, 0x4, 0x1, 0xc, 0x5, 0xbcf, 0x0, 0x800, 0x5, 0x2, 0x4, 0x0, 0x6, 0xaf]}) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f0000000180)) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x10) 4.516065075s ago: executing program 9 (id=3666): syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, r0, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4.440152652s ago: executing program 9 (id=3667): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r10, 0x1000000, 0x0) bind$inet(r2, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[], 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r11, 0x89e0, &(0x7f0000000000)=0x8) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}}, 0x0) 4.105956875s ago: executing program 8 (id=3668): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x0, {0x1b, 0x26, 0x12, 0xf, 0xb, 0xfd8, 0x4, 0x89}}) 4.004029554s ago: executing program 0 (id=3669): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x1, 0x1}]}) 3.90414134s ago: executing program 8 (id=3670): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f00000004c0)) 3.765887815s ago: executing program 8 (id=3671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) read(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.626905926s ago: executing program 0 (id=3672): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd69, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = syz_io_uring_setup(0x497, &(0x7f00000003c0)={0x0, 0x727b, 0x0, 0x800000, 0x15b}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_procfs$pagemap(0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r0, 0x26c8, 0xe00, 0x1, 0x0, 0x10) 3.528066608s ago: executing program 8 (id=3673): sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd2d, 0x2ddfdbba, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.037918208s ago: executing program 8 (id=3674): syz_open_dev$sndctrl(0x0, 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ptrace(0x10, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x22020400) r1 = syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x465e, 0x400, 0x3, 0x100234}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 2.206505697s ago: executing program 0 (id=3675): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003e000701feffffff00000008017c"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, 0x0, 0x0) 1.931916534s ago: executing program 8 (id=3676): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220b000000c3"], 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 989.686958ms ago: executing program 0 (id=3677): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 299.967318ms ago: executing program 0 (id=3678): r0 = syz_io_uring_setup(0x53f, &(0x7f0000000340)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4000, @fd_index=0xa, 0x1, 0x0, 0x0, 0xa, 0x1, {0x1}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x38, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 275.703734ms ago: executing program 0 (id=3679): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket(0x23, 0x5, 0x0) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 190.829976ms ago: executing program 7 (id=3680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x3, 0xe691, 0x0, 0x2, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x2000000000, 0x3, 0x7, 0x4, 0x80000000, 0xfffffffffffffffb], 0xab000, 0x1100}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 89.696732ms ago: executing program 5 (id=3681): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_DO_IT(r0, 0xab03) 0s ago: executing program 9 (id=3682): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4006, 0x1) kernel console output (not intermixed with test programs): 90745][T18090] _copy_from_user+0x2d/0xb0 [ 1427.790768][T18090] io_register_rsrc+0xc2/0x260 [ 1427.790789][T18090] ? __fget_files+0x2a/0x420 [ 1427.790808][T18090] ? __pfx_io_register_rsrc+0x10/0x10 [ 1427.790831][T18090] ? __fget_files+0x2a/0x420 [ 1427.790851][T18090] ? io_is_uring_fops+0xd/0x50 [ 1427.790877][T18090] __se_sys_io_uring_register+0xa97/0x11b0 [ 1427.790903][T18090] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1427.790921][T18090] ? ksys_write+0x22a/0x250 [ 1427.790938][T18090] ? __pfx_ksys_write+0x10/0x10 [ 1427.790951][T18090] ? rcu_is_watching+0x15/0xb0 [ 1427.790973][T18090] ? do_syscall_64+0xbe/0x3b0 [ 1427.790994][T18090] do_syscall_64+0xfa/0x3b0 [ 1427.791011][T18090] ? lockdep_hardirqs_on+0x9c/0x150 [ 1427.791027][T18090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.791043][T18090] ? clear_bhb_loop+0x60/0xb0 [ 1427.791063][T18090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.791078][T18090] RIP: 0033:0x7fa1a9d8ebe9 [ 1427.791093][T18090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1427.791108][T18090] RSP: 002b:00007fa1aac36038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1427.791124][T18090] RAX: ffffffffffffffda RBX: 00007fa1a9fb5fa0 RCX: 00007fa1a9d8ebe9 [ 1427.791136][T18090] RDX: 0000200000000740 RSI: 000000000000000d RDI: 0000000000000008 [ 1427.791147][T18090] RBP: 00007fa1aac36090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.791157][T18090] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1427.791167][T18090] R13: 00007fa1a9fb6038 R14: 00007fa1a9fb5fa0 R15: 00007ffed2311ff8 [ 1427.791192][T18090] [ 1428.091973][T18095] futex_wake_op: syz.1.3117 tries to shift op by -1; fix this program [ 1429.470509][T18112] bridge0: entered promiscuous mode [ 1429.478032][T18112] vlan2: entered promiscuous mode [ 1430.206108][T15960] Bluetooth: hci4: command 0x0406 tx timeout [ 1431.827670][T18129] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3127'. [ 1433.987479][T18155] FAULT_INJECTION: forcing a failure. [ 1433.987479][T18155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1434.016055][T18155] CPU: 1 UID: 0 PID: 18155 Comm: syz.7.3137 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1434.016079][T18155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1434.016090][T18155] Call Trace: [ 1434.016096][T18155] [ 1434.016104][T18155] dump_stack_lvl+0x189/0x250 [ 1434.016127][T18155] ? __pfx____ratelimit+0x10/0x10 [ 1434.016144][T18155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1434.016163][T18155] ? __pfx__printk+0x10/0x10 [ 1434.016194][T18155] should_fail_ex+0x414/0x560 [ 1434.016216][T18155] _copy_to_user+0x31/0xb0 [ 1434.016240][T18155] simple_read_from_buffer+0xe1/0x170 [ 1434.016261][T18155] proc_fail_nth_read+0x1df/0x250 [ 1434.016284][T18155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1434.016305][T18155] ? rw_verify_area+0x258/0x650 [ 1434.016330][T18155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1434.016351][T18155] vfs_read+0x200/0x980 [ 1434.016380][T18155] ? __pfx___mutex_lock+0x10/0x10 [ 1434.016399][T18155] ? __pfx_vfs_read+0x10/0x10 [ 1434.016425][T18155] ? __fget_files+0x2a/0x420 [ 1434.016447][T18155] ? __fget_files+0x3a0/0x420 [ 1434.016463][T18155] ? __fget_files+0x2a/0x420 [ 1434.016488][T18155] ksys_read+0x145/0x250 [ 1434.016504][T18155] ? __pfx_ksys_read+0x10/0x10 [ 1434.016517][T18155] ? rcu_is_watching+0x15/0xb0 [ 1434.016539][T18155] ? do_syscall_64+0xbe/0x3b0 [ 1434.016560][T18155] do_syscall_64+0xfa/0x3b0 [ 1434.016576][T18155] ? lockdep_hardirqs_on+0x9c/0x150 [ 1434.016593][T18155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.016608][T18155] ? clear_bhb_loop+0x60/0xb0 [ 1434.016628][T18155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.016643][T18155] RIP: 0033:0x7fa1a9d8d5fc [ 1434.016658][T18155] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1434.016672][T18155] RSP: 002b:00007fa1aac36030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1434.016689][T18155] RAX: ffffffffffffffda RBX: 00007fa1a9fb5fa0 RCX: 00007fa1a9d8d5fc [ 1434.016701][T18155] RDX: 000000000000000f RSI: 00007fa1aac360a0 RDI: 0000000000000004 [ 1434.016711][T18155] RBP: 00007fa1aac36090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.016722][T18155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1434.016731][T18155] R13: 00007fa1a9fb6038 R14: 00007fa1a9fb5fa0 R15: 00007ffed2311ff8 [ 1434.016756][T18155] [ 1434.248464][ C1] vkms_vblank_simulate: vblank timer overrun [ 1434.437979][T18160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3138'. [ 1434.447054][T18160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1434.499871][T18160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1434.528960][T18163] netlink: 'syz.5.3142': attribute type 1 has an invalid length. [ 1434.539718][T18163] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3142'. [ 1434.549203][T18167] netlink: 'syz.7.3140': attribute type 3 has an invalid length. [ 1434.573146][T18163] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3142'. [ 1435.405200][T18084] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1435.976404][T18084] usb 8-1: device descriptor read/64, error -71 [ 1435.997906][T18181] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1436.015662][T18181] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1436.194588][T18182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3145'. [ 1436.206897][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3145'. [ 1436.333050][T18084] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1436.516950][T18084] usb 8-1: device descriptor read/64, error -71 [ 1436.658185][T18084] usb usb8-port1: attempt power cycle [ 1436.676659][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'. [ 1436.829649][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3144'. [ 1436.839561][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3144'. [ 1437.719283][T18084] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1437.961772][T18084] usb 8-1: device not accepting address 25, error -71 [ 1438.083222][ T5943] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1438.254953][ T5943] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1438.278212][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.332932][ T5943] usb 6-1: Product: syz [ 1438.375136][ T5943] usb 6-1: Manufacturer: syz [ 1438.407906][ T5943] usb 6-1: SerialNumber: syz [ 1438.440676][ T5943] usb 6-1: config 0 descriptor?? [ 1438.699815][ T5943] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1440.786144][ T5943] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1441.323666][T18222] FAULT_INJECTION: forcing a failure. [ 1441.323666][T18222] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.336753][T18222] CPU: 0 UID: 0 PID: 18222 Comm: syz.6.3156 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1441.336783][T18222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1441.336799][T18222] Call Trace: [ 1441.336809][T18222] [ 1441.336819][T18222] dump_stack_lvl+0x189/0x250 [ 1441.336849][T18222] ? __pfx____ratelimit+0x10/0x10 [ 1441.336866][T18222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1441.336884][T18222] ? __pfx__printk+0x10/0x10 [ 1441.336908][T18222] ? __pfx___might_resched+0x10/0x10 [ 1441.336924][T18222] ? fs_reclaim_acquire+0x7d/0x100 [ 1441.336947][T18222] should_fail_ex+0x414/0x560 [ 1441.336967][T18222] should_failslab+0xa8/0x100 [ 1441.336985][T18222] __kmalloc_cache_noprof+0x70/0x3d0 [ 1441.337001][T18222] ? alloc_fs_context+0x61/0x7d0 [ 1441.337021][T18222] alloc_fs_context+0x61/0x7d0 [ 1441.337039][T18222] ? kfree+0x18e/0x440 [ 1441.337061][T18222] ? get_fs_type+0x407/0x480 [ 1441.337087][T18222] __se_sys_fsopen+0xa5/0x2b0 [ 1441.337110][T18222] do_syscall_64+0xfa/0x3b0 [ 1441.337126][T18222] ? lockdep_hardirqs_on+0x9c/0x150 [ 1441.337143][T18222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.337158][T18222] ? clear_bhb_loop+0x60/0xb0 [ 1441.337176][T18222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.337191][T18222] RIP: 0033:0x7fc2e818ebe9 [ 1441.337206][T18222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1441.337219][T18222] RSP: 002b:00007fc2e63f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1441.337235][T18222] RAX: ffffffffffffffda RBX: 00007fc2e83b6090 RCX: 00007fc2e818ebe9 [ 1441.337246][T18222] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1441.337256][T18222] RBP: 00007fc2e63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.337266][T18222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.337275][T18222] R13: 00007fc2e83b6128 R14: 00007fc2e83b6090 R15: 00007ffd65654918 [ 1441.337298][T18222] [ 1441.539948][ C0] vkms_vblank_simulate: vblank timer overrun [ 1442.360896][ T5943] usb 6-1: USB disconnect, device number 54 [ 1442.804116][T18239] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3161'. [ 1444.498952][T18253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3164'. [ 1444.689118][T18263] delete_channel: no stack [ 1444.756439][ T6035] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1444.842920][T18262] xt_l2tp: invalid flags combination: 4 [ 1444.885547][T18268] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3163'. [ 1445.222229][ T6035] usb 1-1: device descriptor read/64, error -71 [ 1445.352872][ T5943] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1445.455556][ T6035] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1445.492874][ T5943] usb 7-1: Using ep0 maxpacket: 16 [ 1445.512437][ T5943] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.544470][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1445.574279][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1445.597747][ T5943] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1445.613834][ T5943] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1445.626897][ T6035] usb 1-1: device descriptor read/64, error -71 [ 1445.667746][ T5943] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1445.686008][ T5943] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1445.716355][ T5943] usb 7-1: Manufacturer: syz [ 1445.742652][ T5943] usb 7-1: config 0 descriptor?? [ 1445.763419][ T6035] usb usb1-port1: attempt power cycle [ 1446.266194][ T6035] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1448.135233][ T6035] usb 1-1: device descriptor read/8, error -71 [ 1448.251126][T18291] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3173'. [ 1448.662120][ T5943] rc_core: IR keymap rc-hauppauge not found [ 1448.710547][ T5943] Registered IR keymap rc-empty [ 1448.736762][ T5943] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1448.782754][ T5943] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.046952][ T5943] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1449.060962][ T5943] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input28 [ 1449.864475][ T5943] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.910775][ T5943] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.958901][ T5943] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1449.994593][ T5943] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1450.078665][ T5943] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1450.152398][T18308] delete_channel: no stack [ 1450.266446][T18312] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3180'. [ 1450.319162][ T5943] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1450.600333][ T5905] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1450.961496][T18310] ALSA: mixer_oss: invalid OSS volume '' [ 1451.076313][ T5943] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1451.337001][ T5943] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1451.366629][ T5943] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1451.544667][ T5943] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1451.576428][ T5943] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1451.590624][ T5943] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1451.646520][ T5943] usb 7-1: USB disconnect, device number 29 [ 1451.740380][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.763959][ T5905] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1451.813188][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.859379][ T5905] usb 6-1: config 0 descriptor?? [ 1451.898541][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 1451.962280][T18312] bond0 (unregistering): left promiscuous mode [ 1451.968531][T18312] bond_slave_0: left promiscuous mode [ 1451.983918][T18312] bond_slave_1: left promiscuous mode [ 1452.057907][T18312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1452.093916][T18312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1452.131506][T18312] bond0 (unregistering): Released all slaves [ 1452.172788][T18316] ipvlan0: entered allmulticast mode [ 1452.200742][T18316] veth0_vlan: entered allmulticast mode [ 1452.284258][ T5905] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1452.325417][ T5905] pwc: recv_control_msg error -32 req 02 val 2700 [ 1452.354112][ T5905] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1452.361981][ T5905] pwc: recv_control_msg error -32 req 04 val 1000 [ 1452.371037][ T5905] pwc: recv_control_msg error -32 req 04 val 1300 [ 1452.380784][ T5905] pwc: recv_control_msg error -32 req 04 val 1400 [ 1452.383535][T11678] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.390242][ T5905] pwc: recv_control_msg error -32 req 02 val 2000 [ 1452.432531][ T5905] pwc: recv_control_msg error -32 req 02 val 2100 [ 1452.473408][ T5905] pwc: recv_control_msg error -32 req 04 val 1500 [ 1452.489512][ T5905] pwc: recv_control_msg error -32 req 02 val 2500 [ 1452.591936][T18323] lo speed is unknown, defaulting to 1000 [ 1452.676695][T11678] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.854352][T11678] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.993667][ T5905] pwc: recv_control_msg error -71 req 02 val 2400 [ 1453.012410][ T5905] pwc: recv_control_msg error -71 req 02 val 2600 [ 1453.022678][ T5905] pwc: recv_control_msg error -71 req 02 val 2900 [ 1453.033067][ T5905] pwc: recv_control_msg error -71 req 02 val 2800 [ 1453.040511][ T5905] pwc: recv_control_msg error -71 req 04 val 1100 [ 1453.048826][ T5905] pwc: recv_control_msg error -71 req 04 val 1200 [ 1453.086691][ T5905] pwc: Registered as video103. [ 1453.088284][T11678] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.132443][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29 [ 1453.142437][ T6035] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1453.207953][ T5905] usb 6-1: USB disconnect, device number 55 [ 1453.429344][ T6035] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.111653][ T6035] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1454.123338][T18339] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1454.136694][T18339] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1454.151635][T18339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1454.179081][T18339] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1454.197891][ T6035] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1454.215035][ T6035] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1454.224369][T18339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1454.234218][ T6035] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.282659][ T6035] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1454.290439][ T6035] usb 8-1: invalid MIDI out EP 0 [ 1454.381005][ T6035] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1454.453741][T18345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1454.571577][T18332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.590990][T18332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.153986][T18348] udevd[18348]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1455.200621][T18337] lo speed is unknown, defaulting to 1000 [ 1455.301394][ T977] usb 8-1: USB disconnect, device number 27 [ 1456.220883][T18339] Bluetooth: hci1: command tx timeout [ 1456.848854][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1456.856205][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1458.168260][T18339] Bluetooth: hci1: command tx timeout [ 1460.106987][T18339] Bluetooth: hci1: command tx timeout [ 1460.426815][T18337] chnl_net:caif_netlink_parms(): no params data found [ 1461.589087][T18388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1461.810304][T18394] delete_channel: no stack [ 1462.190901][T18339] Bluetooth: hci1: command tx timeout [ 1465.036617][T18420] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1465.229423][T11678] team0: Port device bond0 removed [ 1465.236805][T11678] bond0 (unregistering): Released all slaves [ 1465.351296][ T5966] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 1465.495245][ T5966] usb 1-1: device descriptor read/64, error -71 [ 1466.361874][ T5966] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 1466.547641][ T5966] usb 1-1: device descriptor read/64, error -71 [ 1466.790383][T18435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3209'. [ 1466.799416][T18435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3209'. [ 1466.901022][ T5966] usb usb1-port1: attempt power cycle [ 1467.078477][T18337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.148265][T18337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.216601][T18337] bridge_slave_0: entered allmulticast mode [ 1467.228291][ T5966] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 1467.245466][T18337] bridge_slave_0: entered promiscuous mode [ 1467.261200][ T5966] usb 1-1: device descriptor read/8, error -71 [ 1467.498966][ T5966] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 1467.631632][T18445] delete_channel: no stack [ 1467.717123][ T5966] usb 1-1: device descriptor read/8, error -71 [ 1467.751406][T18337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.768855][T18337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.787702][T18337] bridge_slave_1: entered allmulticast mode [ 1467.814667][T18337] bridge_slave_1: entered promiscuous mode [ 1467.836072][ T5966] usb usb1-port1: unable to enumerate USB device [ 1468.251290][T11678] hsr_slave_0: left promiscuous mode [ 1468.330817][T11678] hsr_slave_1: left promiscuous mode [ 1468.652044][T11678] veth1_macvtap: left promiscuous mode [ 1468.738445][T11678] veth0_macvtap: left promiscuous mode [ 1468.745156][T11678] veth1_vlan: left promiscuous mode [ 1468.750951][T11678] veth0_vlan: left promiscuous mode [ 1469.760573][ T5966] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1471.189498][T18480] netlink: 'syz.7.3221': attribute type 3 has an invalid length. [ 1471.528726][ T5943] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1471.673594][ T5943] usb 8-1: device descriptor read/64, error -71 [ 1471.904547][ T5943] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1472.049415][ T5943] usb 8-1: device descriptor read/64, error -71 [ 1472.091537][T18477] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (28928) [ 1472.101857][T18477] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1472.168199][ T5943] usb usb8-port1: attempt power cycle [ 1472.241982][T18337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1472.263092][T18337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1472.399868][T18337] team0: Port device team_slave_0 added [ 1472.458518][T18337] team0: Port device team_slave_1 added [ 1472.489472][ T5943] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1473.166455][ T5943] usb 8-1: device descriptor read/8, error -71 [ 1473.407533][ T5943] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1473.481592][T18493] syzkaller0: entered promiscuous mode [ 1473.487210][T18493] syzkaller0: entered allmulticast mode [ 1473.498170][T18337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.505384][ T5943] usb 8-1: device descriptor read/8, error -71 [ 1473.506352][T18337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.537493][ C1] vkms_vblank_simulate: vblank timer overrun [ 1473.823580][T18337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.955801][T18337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.008459][T18337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.034440][ C1] vkms_vblank_simulate: vblank timer overrun [ 1474.152848][ T5943] usb usb8-port1: unable to enumerate USB device [ 1474.161137][T18337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.283362][T18501] netlink: 'syz.7.3226': attribute type 2 has an invalid length. [ 1474.292084][T18501] netlink: 119 bytes leftover after parsing attributes in process `syz.7.3226'. [ 1474.341779][T18503] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3226'. [ 1477.229231][ T5905] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1477.383573][T18526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3233'. [ 1477.408113][T18526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3233'. [ 1477.420685][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.438654][T18526] netlink: 'syz.5.3233': attribute type 1 has an invalid length. [ 1477.447230][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1477.459293][T18337] hsr_slave_0: entered promiscuous mode [ 1477.483484][T18337] hsr_slave_1: entered promiscuous mode [ 1477.503760][T18337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1477.522281][T18337] Cannot create hsr debugfs directory [ 1477.583014][T18526] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3233'. [ 1477.663407][ T5905] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1477.672618][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.684065][ T5905] usb 1-1: config 0 descriptor?? [ 1478.355612][T11678] IPVS: stop unused estimator thread 0... [ 1478.621243][T18536] netlink: 134820 bytes leftover after parsing attributes in process `syz.7.3235'. [ 1478.636862][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3235'. [ 1479.228593][ T5905] usbhid 1-1:0.0: can't add hid device: -71 [ 1479.236996][ T5905] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1479.264670][ T5905] usb 1-1: USB disconnect, device number 81 [ 1480.015857][T18337] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1480.200576][T18337] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1480.231839][T18337] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1480.406649][T18337] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1481.259313][T18565] delete_channel: no stack [ 1481.646358][T18337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1481.723683][T18569] syzkaller0: entered promiscuous mode [ 1481.729187][T18569] syzkaller0: entered allmulticast mode [ 1484.351546][ T5943] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1484.520189][ T5943] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.538684][ T5943] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1484.563072][ T5943] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.584506][ T5943] usb 8-1: config 0 descriptor?? [ 1484.604696][ T5943] pwc: Askey VC010 type 2 USB webcam detected. [ 1484.775676][T18595] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3249'. [ 1484.997628][ T5943] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1485.019017][ T5943] pwc: recv_control_msg error -32 req 02 val 2700 [ 1485.039377][ T5943] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1485.046969][ T5943] pwc: recv_control_msg error -32 req 04 val 1000 [ 1485.063917][ T5943] pwc: recv_control_msg error -32 req 04 val 1300 [ 1485.080356][ T5943] pwc: recv_control_msg error -32 req 04 val 1400 [ 1485.379423][ T5943] pwc: recv_control_msg error -71 req 02 val 2100 [ 1485.456150][ T5943] pwc: recv_control_msg error -71 req 04 val 1500 [ 1485.558521][ T5943] pwc: recv_control_msg error -71 req 02 val 2500 [ 1485.619491][ T5943] pwc: recv_control_msg error -71 req 02 val 2400 [ 1485.657857][ T5943] pwc: recv_control_msg error -71 req 02 val 2600 [ 1485.667904][ T5943] pwc: recv_control_msg error -71 req 02 val 2900 [ 1485.676555][ T5943] pwc: recv_control_msg error -71 req 02 val 2800 [ 1485.685986][ T5943] pwc: recv_control_msg error -71 req 04 val 1100 [ 1485.693771][ T5943] pwc: recv_control_msg error -71 req 04 val 1200 [ 1485.702821][ T5943] pwc: Registered as video103. [ 1485.728033][ T5943] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input30 [ 1485.759459][ T5943] usb 8-1: USB disconnect, device number 32 [ 1487.927027][T18611] delete_channel: no stack [ 1490.891839][T18633] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.3256'. [ 1490.903956][T18633] netlink: zone id is out of range [ 1490.909480][T18633] netlink: zone id is out of range [ 1490.914917][T18633] netlink: zone id is out of range [ 1490.920242][T18633] netlink: get zone limit has 8 unknown bytes [ 1492.211695][T18337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.244799][ T5966] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1492.269605][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.276853][ T6238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1492.373428][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.380645][ T6238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.425808][ T5966] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1492.440209][ T5966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.448287][ T5966] usb 8-1: Product: syz [ 1492.476672][ T5966] usb 8-1: Manufacturer: syz [ 1492.495881][ T5966] usb 8-1: SerialNumber: syz [ 1492.527064][ T5966] usb 8-1: config 0 descriptor?? [ 1493.265517][ T5966] hso 8-1:0.0: Can't find BULK IN endpoint [ 1493.312941][ T5966] usb-storage 8-1:0.0: USB Mass Storage device detected [ 1493.470285][T18084] usb 8-1: USB disconnect, device number 33 [ 1493.900775][T18337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1494.183167][T18664] delete_channel: no stack [ 1497.286551][T18690] delete_channel: no stack [ 1497.450051][T18337] veth0_vlan: entered promiscuous mode [ 1497.636030][T18337] veth1_vlan: entered promiscuous mode [ 1498.500527][T18337] veth0_macvtap: entered promiscuous mode [ 1498.546609][T18711] delete_channel: no stack [ 1498.562550][T18337] veth1_macvtap: entered promiscuous mode [ 1498.789091][T18337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1498.827699][T18337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1498.951298][T18337] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.052425][T18337] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.063975][T18337] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.097477][T18337] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.536251][T16264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.546470][ T6238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.688247][ T6238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.381325][T16264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.340343][ T5966] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1505.518364][ T5966] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1505.536602][ T5966] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1505.557520][ T5966] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1505.576283][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.587169][ T5966] usb 1-1: Product: syz [ 1505.593641][ T5966] usb 1-1: Manufacturer: syz [ 1505.599905][ T5966] usb 1-1: SerialNumber: syz [ 1505.621674][ T5966] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1505.818099][ T5966] usb 1-1: USB disconnect, device number 82 [ 1506.260099][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3287'. [ 1508.098574][T18787] lo speed is unknown, defaulting to 1000 [ 1508.901962][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3294'. [ 1508.910892][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3294'. [ 1509.124713][ T977] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 1509.424498][T18815] loop9: detected capacity change from 0 to 7 [ 1509.434342][T18815] buffer_io_error: 4 callbacks suppressed [ 1509.434382][T18815] Buffer I/O error on dev loop9, logical block 0, async page read [ 1509.448807][T18815] Buffer I/O error on dev loop9, logical block 0, async page read [ 1509.457437][T18815] Buffer I/O error on dev loop9, logical block 0, async page read [ 1509.465941][T18815] Buffer I/O error on dev loop9, logical block 0, async page read [ 1509.474656][T18815] Buffer I/O error on dev loop9, logical block 0, async page read [ 1509.483214][T18815] Buffer I/O error on dev loop9, logical block 0, async page read [ 1509.491739][T18815] Buffer I/O error on dev loop9, logical block 0, async page read [ 1509.500274][T18815] ldm_validate_partition_table(): Disk read failed. [ 1509.507430][T18815] Buffer I/O error on dev loop9, logical block 0, async page read [ 1509.515835][T18815] Buffer I/O error on dev loop9, logical block 0, async page read [ 1509.524440][T18815] Buffer I/O error on dev loop9, logical block 0, async page read [ 1509.533259][T18815] Dev loop9: unable to read RDB block 0 [ 1509.540521][T18815] loop9: unable to read partition table [ 1509.547493][T18815] loop9: partition table beyond EOD, truncated [ 1509.553812][T18815] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1509.553812][T18815] ) failed (rc=-5) [ 1509.734168][ T977] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1510.091575][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1510.103569][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1510.116618][ T977] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1510.140003][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.148053][ T977] usb 8-1: Product: syz [ 1510.165839][ T977] usb 8-1: Manufacturer: syz [ 1510.171187][ T977] usb 8-1: SerialNumber: syz [ 1510.184037][ T977] usb 8-1: config 0 descriptor?? [ 1510.213838][ T977] streamzap 8-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 1510.388403][T18824] netlink: 'syz.8.3302': attribute type 3 has an invalid length. [ 1510.469483][ T9] usb 8-1: USB disconnect, device number 34 [ 1510.606327][T18828] loop9: detected capacity change from 0 to 7 [ 1510.613759][T18828] ldm_validate_partition_table(): Disk read failed. [ 1510.620933][T18828] Dev loop9: unable to read RDB block 0 [ 1510.627092][T18828] loop9: unable to read partition table [ 1510.632899][T18828] loop9: partition table beyond EOD, truncated [ 1510.639127][T18828] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1510.639127][T18828] ) failed (rc=-5) [ 1511.951723][ T5966] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1512.124822][ T5966] usb 9-1: device descriptor read/64, error -71 [ 1512.655971][ T5966] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1513.150370][ T5966] usb 9-1: device descriptor read/64, error -71 [ 1513.320243][ T5966] usb usb9-port1: attempt power cycle [ 1514.035802][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.042231][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1514.115178][T18859] lo speed is unknown, defaulting to 1000 [ 1514.603915][T18879] loop9: detected capacity change from 0 to 7 [ 1514.613280][T18879] buffer_io_error: 28 callbacks suppressed [ 1514.613327][T18879] Buffer I/O error on dev loop9, logical block 0, async page read [ 1514.627709][T18879] Buffer I/O error on dev loop9, logical block 0, async page read [ 1514.636252][T18879] Buffer I/O error on dev loop9, logical block 0, async page read [ 1514.644743][T18879] Buffer I/O error on dev loop9, logical block 0, async page read [ 1514.653468][T18879] Buffer I/O error on dev loop9, logical block 0, async page read [ 1514.662333][T18879] Buffer I/O error on dev loop9, logical block 0, async page read [ 1514.670524][T18879] Buffer I/O error on dev loop9, logical block 0, async page read [ 1514.678532][T18879] ldm_validate_partition_table(): Disk read failed. [ 1514.685568][T18879] Buffer I/O error on dev loop9, logical block 0, async page read [ 1514.694290][T18879] Buffer I/O error on dev loop9, logical block 0, async page read [ 1514.702891][T18879] Buffer I/O error on dev loop9, logical block 0, async page read [ 1514.711601][T18879] Dev loop9: unable to read RDB block 0 [ 1514.719290][T18879] loop9: unable to read partition table [ 1514.726012][T18879] loop9: partition table beyond EOD, truncated [ 1514.732293][T18879] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1514.732293][T18879] ) failed (rc=-5) [ 1518.554109][T18914] netlink: 'syz.1.3323': attribute type 3 has an invalid length. [ 1518.953388][T11161] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1519.356755][T11161] usb 2-1: device descriptor read/64, error -71 [ 1519.497235][ T30] audit: type=1326 audit(1755731986.164:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18919 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a9d8ebe9 code=0x7ffc0000 [ 1519.529796][ T30] audit: type=1326 audit(1755731986.164:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18919 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a9d8ebe9 code=0x7ffc0000 [ 1519.563637][ T30] audit: type=1326 audit(1755731986.164:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18919 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa1a9d8ebe9 code=0x7ffc0000 [ 1519.592931][ T30] audit: type=1326 audit(1755731986.164:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18919 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a9d8ebe9 code=0x7ffc0000 [ 1519.614782][ T5966] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1519.626437][ T30] audit: type=1326 audit(1755731986.164:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18919 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a9d8ebe9 code=0x7ffc0000 [ 1519.656310][ T30] audit: type=1326 audit(1755731986.164:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18919 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1a9d8ebe9 code=0x7ffc0000 [ 1519.682308][ T30] audit: type=1326 audit(1755731986.164:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18919 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a9d8ebe9 code=0x7ffc0000 [ 1519.704268][T11161] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1519.722542][ T30] audit: type=1326 audit(1755731986.164:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18919 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a9d8ebe9 code=0x7ffc0000 [ 1519.772690][ T30] audit: type=1326 audit(1755731986.164:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18919 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1a9d8ebe9 code=0x7ffc0000 [ 1519.814411][ T5966] usb 6-1: Using ep0 maxpacket: 32 [ 1519.834006][ T5966] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1519.842183][T11161] usb 2-1: device descriptor read/64, error -71 [ 1519.860177][ T30] audit: type=1326 audit(1755731986.164:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18919 comm="syz.7.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a9d8ebe9 code=0x7ffc0000 [ 1519.896077][ T5966] usb 6-1: config 7 has an invalid interface number: 111 but max is 0 [ 1519.914942][ T5966] usb 6-1: config 7 has no interface number 0 [ 1519.939362][ T5966] usb 6-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 1519.963996][T11161] usb usb2-port1: attempt power cycle [ 1520.001017][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.036989][ T5966] usb 6-1: Product: syz [ 1520.159511][ T5966] usb 6-1: Manufacturer: syz [ 1520.164201][ T5966] usb 6-1: SerialNumber: syz [ 1520.496305][T11161] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1520.551684][T11161] usb 2-1: device descriptor read/8, error -71 [ 1520.562810][ T5966] usb 6-1: bad CDC descriptors [ 1520.577728][ T5966] usb 6-1: USB disconnect, device number 56 [ 1520.802684][T11161] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1520.915066][T11161] usb 2-1: device descriptor read/8, error -71 [ 1521.040240][T11161] usb usb2-port1: unable to enumerate USB device [ 1521.746301][T18938] delete_channel: no stack [ 1522.225100][T18940] FAULT_INJECTION: forcing a failure. [ 1522.225100][T18940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1522.436999][T18940] CPU: 0 UID: 0 PID: 18940 Comm: syz.1.3331 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1522.437029][T18940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1522.437042][T18940] Call Trace: [ 1522.437051][T18940] [ 1522.437061][T18940] dump_stack_lvl+0x189/0x250 [ 1522.437090][T18940] ? __pfx____ratelimit+0x10/0x10 [ 1522.437113][T18940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1522.437136][T18940] ? __pfx__printk+0x10/0x10 [ 1522.437162][T18940] ? __might_fault+0xb0/0x130 [ 1522.437193][T18940] should_fail_ex+0x414/0x560 [ 1522.437220][T18940] _copy_from_user+0x2d/0xb0 [ 1522.437250][T18940] kstrtouint_from_user+0xc4/0x170 [ 1522.437277][T18940] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1522.437319][T18940] proc_fail_nth_write+0x88/0x240 [ 1522.437345][T18940] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1522.437376][T18940] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1522.437403][T18940] vfs_write+0x27e/0xa90 [ 1522.437431][T18940] ? __pfx_vfs_write+0x10/0x10 [ 1522.437452][T18940] ? __fget_files+0x2a/0x420 [ 1522.437479][T18940] ? __fget_files+0x3a0/0x420 [ 1522.437501][T18940] ? __fget_files+0x2a/0x420 [ 1522.437533][T18940] ksys_write+0x145/0x250 [ 1522.437555][T18940] ? __pfx_ksys_write+0x10/0x10 [ 1522.437571][T18940] ? rcu_is_watching+0x15/0xb0 [ 1522.437598][T18940] ? do_syscall_64+0xbe/0x3b0 [ 1522.437625][T18940] do_syscall_64+0xfa/0x3b0 [ 1522.437646][T18940] ? lockdep_hardirqs_on+0x9c/0x150 [ 1522.437677][T18940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.437696][T18940] ? clear_bhb_loop+0x60/0xb0 [ 1522.437719][T18940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.437738][T18940] RIP: 0033:0x7fc5fa58d69f [ 1522.437755][T18940] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1522.437772][T18940] RSP: 002b:00007fc5fb395030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1522.437793][T18940] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc5fa58d69f [ 1522.437805][T18940] RDX: 0000000000000001 RSI: 00007fc5fb3950a0 RDI: 0000000000000004 [ 1522.437816][T18940] RBP: 00007fc5fb395090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.437827][T18940] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1522.437847][T18940] R13: 00007fc5fa7b6038 R14: 00007fc5fa7b5fa0 R15: 00007ffdaebbd978 [ 1522.437877][T18940] [ 1522.677221][T18944] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3330'. [ 1522.764050][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3333'. [ 1522.776729][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3333'. [ 1524.454327][T18969] netlink: 'syz.5.3340': attribute type 3 has an invalid length. [ 1524.480637][T18967] netlink: 'syz.1.3339': attribute type 1 has an invalid length. [ 1524.501308][T18966] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3338'. [ 1524.789271][ T5905] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1525.007885][ T5905] usb 6-1: device descriptor read/64, error -71 [ 1525.230823][T18984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1525.240795][ T5905] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1526.236596][ T5905] usb 6-1: device descriptor read/64, error -71 [ 1526.320304][ T6035] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1526.827270][T19000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3348'. [ 1527.273788][ T5905] usb usb6-port1: attempt power cycle [ 1527.382567][ T6035] usb 2-1: Using ep0 maxpacket: 32 [ 1527.761442][ T6035] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1527.809601][ T6035] usb 2-1: config 7 has an invalid interface number: 111 but max is 0 [ 1527.876607][T11161] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1527.918456][ T6035] usb 2-1: config 7 has no interface number 0 [ 1528.045235][T11161] usb 1-1: Using ep0 maxpacket: 16 [ 1528.142856][T11161] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1528.188897][T11161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.679281][T11161] usb 1-1: Product: syz [ 1528.708652][T11161] usb 1-1: Manufacturer: syz [ 1528.728407][T11161] usb 1-1: SerialNumber: syz [ 1528.764281][T11161] usb 1-1: config 0 descriptor?? [ 1529.294981][T11161] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1529.318266][T11161] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1529.361959][T11161] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1529.381256][T11161] usb 1-1: media controller created [ 1529.460589][T11161] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1529.560855][T19022] dtv5100: wlen = 0, aborting. [ 1530.289185][T11161] zl10353_read_register: readreg error (reg=127, ret==0) [ 1530.306983][T11161] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1530.334726][T11161] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1531.122749][T19031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1532.076363][T11161] usb 1-1: USB disconnect, device number 83 [ 1532.175946][ T6035] usb 2-1: string descriptor 0 read error: -71 [ 1532.207277][ T6035] usb 2-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 1532.239058][ T6035] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.296295][T11161] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1532.863777][ T6035] usb 2-1: can't set config #7, error -71 [ 1532.914808][ T6035] usb 2-1: USB disconnect, device number 80 [ 1534.376392][T19070] tipc: Enabling of bearer rejected, failed to enable media [ 1534.459736][T19070] syzkaller0: entered promiscuous mode [ 1534.465260][T19070] syzkaller0: entered allmulticast mode [ 1534.673314][ T5844] Bluetooth: hci1: command 0x0405 tx timeout [ 1537.271567][ T5918] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1537.423673][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 1537.452433][ T5918] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1537.462679][T19095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3375'. [ 1537.482641][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.499749][ T5918] usb 1-1: Product: syz [ 1537.504320][ T5918] usb 1-1: Manufacturer: syz [ 1537.510778][ T5918] usb 1-1: SerialNumber: syz [ 1537.536935][ T5918] usb 1-1: config 0 descriptor?? [ 1537.941506][ T5918] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1537.972337][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1537.992285][ T5918] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1538.002881][ T5918] usb 1-1: media controller created [ 1538.488028][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1538.516184][T19090] dtv5100: wlen = 0, aborting. [ 1538.558626][ T5918] zl10353_read_register: readreg error (reg=127, ret==0) [ 1538.574416][ T5918] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1538.582965][ T5918] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1538.621556][ T5918] usb 1-1: USB disconnect, device number 84 [ 1538.779320][ T5918] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1539.837700][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 1543.028271][ T5905] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1543.203713][ T5905] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 1543.272690][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1543.291210][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1543.309244][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 50176, setting to 1024 [ 1543.330931][ T5905] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1543.385135][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.871834][ T5905] usb 1-1: Product: syz [ 1543.891739][ T5905] usb 1-1: Manufacturer: syz [ 1543.904586][ T5905] usb 1-1: SerialNumber: syz [ 1543.924064][ T5905] usb 1-1: config 0 descriptor?? [ 1543.948804][ T5905] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 1544.245410][T19156] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3391'. [ 1544.254611][T19156] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3391'. [ 1544.371150][ T977] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1544.724954][ T977] usb 9-1: Using ep0 maxpacket: 8 [ 1544.760541][ T977] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1544.792202][ T5905] usb 1-1: USB disconnect, device number 85 [ 1544.798682][ T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.879668][ T977] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1544.908743][T19163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1544.938851][T19160] tipc: Enabling of bearer rejected, failed to enable media [ 1544.996261][T19160] syzkaller0: entered promiscuous mode [ 1545.001878][T19160] syzkaller0: entered allmulticast mode [ 1545.561490][T19169] netlink: 'syz.1.3396': attribute type 10 has an invalid length. [ 1545.578212][T19169] team0: Device hsr_slave_0 failed to register rx_handler [ 1545.696997][ T977] pvrusb2: ********** [ 1545.979636][ T977] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1545.985285][T18727] udevd[18727]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1546.180032][ T977] pvrusb2: Important functionality might not be entirely working. [ 1546.276590][ T977] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1546.335674][ T977] pvrusb2: ********** [ 1546.353040][ T2345] pvrusb2: Invalid write control endpoint [ 1546.370011][T19183] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3397'. [ 1546.538738][ T2345] pvrusb2: Invalid write control endpoint [ 1546.550438][ T5905] usb 9-1: USB disconnect, device number 5 [ 1546.589252][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1546.633201][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1546.643295][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1546.656891][ T2345] pvrusb2: Device being rendered inoperable [ 1546.672042][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1546.679509][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1546.695961][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1546.709656][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1546.728490][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1550.452705][T19182] tipc: Enabling of bearer rejected, failed to enable media [ 1550.592274][T19185] syzkaller0: entered promiscuous mode [ 1550.597839][T19185] syzkaller0: entered allmulticast mode [ 1550.888378][ T5918] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1551.474408][ T5918] usb 1-1: device descriptor read/64, error -71 [ 1551.732107][ T5918] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1551.843560][T19226] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3408'. [ 1551.905090][ T5918] usb 1-1: device descriptor read/64, error -71 [ 1552.039322][ T5918] usb usb1-port1: attempt power cycle [ 1552.401777][ T5918] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1552.446653][ T5918] usb 1-1: device descriptor read/8, error -71 [ 1552.672593][ T5918] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1552.706234][ T5918] usb 1-1: device descriptor read/8, error -71 [ 1552.791005][ T5966] usb 8-1: new low-speed USB device number 35 using dummy_hcd [ 1552.809506][ T5918] usb usb1-port1: unable to enumerate USB device [ 1552.946348][ T5966] usb 8-1: Invalid ep0 maxpacket: 16 [ 1553.088607][ T5966] usb 8-1: new low-speed USB device number 36 using dummy_hcd [ 1553.256968][ T5966] usb 8-1: Invalid ep0 maxpacket: 16 [ 1553.266708][ T5966] usb usb8-port1: attempt power cycle [ 1553.610524][ T5966] usb 8-1: new low-speed USB device number 37 using dummy_hcd [ 1554.501588][ T5966] usb 8-1: Invalid ep0 maxpacket: 16 [ 1554.645460][ T5966] usb 8-1: new low-speed USB device number 38 using dummy_hcd [ 1554.675456][ T5966] usb 8-1: Invalid ep0 maxpacket: 16 [ 1554.686236][ T5966] usb usb8-port1: unable to enumerate USB device [ 1554.841085][T11161] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1554.999540][T11161] usb 1-1: Using ep0 maxpacket: 8 [ 1555.037899][T11161] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1555.079878][T11161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.173427][T11161] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1555.678613][T11161] pvrusb2: ********** [ 1555.697787][T11161] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1555.724495][T11161] pvrusb2: Important functionality might not be entirely working. [ 1555.963173][T11161] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1555.978799][T11161] pvrusb2: ********** [ 1556.286937][ T2345] pvrusb2: Invalid write control endpoint [ 1556.510789][T11161] usb 1-1: USB disconnect, device number 90 [ 1556.920212][T19253] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1557.068357][T16569] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1557.229243][T16569] usb 6-1: Using ep0 maxpacket: 32 [ 1557.285565][T16569] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 1557.327819][T16569] usb 6-1: config 0 has no interface number 0 [ 1557.364194][T16569] usb 6-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1557.398616][T16569] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.469186][ T5966] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1557.944972][ T2345] pvrusb2: Invalid write control endpoint [ 1557.956978][T16569] usb 6-1: config 0 descriptor?? [ 1557.982915][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1558.012188][T16569] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 1558.023564][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1558.046942][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 1558.056093][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1558.243524][T18339] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 1558.321662][ T2345] pvrusb2: Device being rendered inoperable [ 1558.388032][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1558.406737][ T5966] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1558.422855][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1558.443055][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1558.448724][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1558.468515][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1558.559637][ T5966] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1558.574457][T16569] gspca_sunplus: reg_r err -110 [ 1558.583157][T16569] sunplus 6-1:0.23: probe with driver sunplus failed with error -110 [ 1558.621153][ T5966] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1558.766377][ T5966] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1558.880173][ T5966] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1559.150744][T19262] block device autoloading is deprecated and will be removed. [ 1559.164255][ T5966] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1559.179716][ T5966] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1559.466607][ T5966] usb 2-1: Product: syz [ 1559.596698][ T5966] usb 2-1: Manufacturer: syz [ 1559.603577][ T5966] usb 2-1: SerialNumber: syz [ 1559.886308][T16569] usb 6-1: USB disconnect, device number 60 [ 1559.932497][ T5966] usb 2-1: config 0 descriptor?? [ 1559.970088][ T5966] usb 2-1: can't set config #0, error -71 [ 1559.978230][ T5966] usb 2-1: USB disconnect, device number 81 [ 1560.726831][T19287] netlink: 'syz.8.3422': attribute type 3 has an invalid length. [ 1560.789313][T19291] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1561.085453][ T5966] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1561.104699][T11161] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1561.243893][T11161] usb 8-1: device descriptor read/64, error -71 [ 1561.260471][ T5966] usb 9-1: device descriptor read/64, error -71 [ 1561.519065][T11161] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1561.528579][ T5966] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1561.701443][T11161] usb 8-1: device descriptor read/64, error -71 [ 1561.752933][ T5966] usb 9-1: device descriptor read/64, error -71 [ 1562.260999][T11161] usb usb8-port1: attempt power cycle [ 1562.269682][ T5966] usb usb9-port1: attempt power cycle [ 1562.642332][ T5966] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1562.650030][T11161] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1562.711064][ T5966] usb 9-1: device descriptor read/8, error -71 [ 1562.721955][T11161] usb 8-1: device descriptor read/8, error -71 [ 1562.831945][T19324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3427'. [ 1562.866692][ T6035] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1563.005601][ T5966] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1563.013301][T11161] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1563.034408][ T5966] usb 9-1: device descriptor read/8, error -71 [ 1563.040795][T11161] usb 8-1: device descriptor read/8, error -71 [ 1563.043135][ T6035] usb 6-1: Using ep0 maxpacket: 8 [ 1563.054941][ T6035] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1563.064277][ T6035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.081488][ T6035] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1563.093309][ T6035] pvrusb2: ********** [ 1563.097603][ T6035] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1563.107839][ T6035] pvrusb2: Important functionality might not be entirely working. [ 1563.115944][ T6035] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1563.128624][ T6035] pvrusb2: ********** [ 1563.145881][ T5966] usb usb9-port1: unable to enumerate USB device [ 1563.152670][T11161] usb usb8-port1: unable to enumerate USB device [ 1563.163950][ T9] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1563.265239][ T2345] pvrusb2: Invalid write control endpoint [ 1563.313354][ T2345] pvrusb2: Invalid write control endpoint [ 1563.319678][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1563.331756][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1563.331798][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1563.343873][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1563.356338][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1563.371309][ T9] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1563.377162][ T2345] pvrusb2: Device being rendered inoperable [ 1563.386783][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1563.387280][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.394551][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1563.407657][ T9] usb 1-1: config 0 descriptor?? [ 1563.418202][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1563.423701][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1563.435176][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1563.456041][T19317] pvrusb2: Attempted to execute control transfer when device not ok [ 1563.465897][ T6035] usb 6-1: USB disconnect, device number 61 [ 1563.817383][ T9] bigben 0003:146B:0902.0019: unexpected rdesc, please submit for review [ 1563.834857][ T9] bigben 0003:146B:0902.0019: item fetching failed at offset 1/5 [ 1563.850378][ T9] bigben 0003:146B:0902.0019: parse failed [ 1563.868748][ T9] bigben 0003:146B:0902.0019: probe with driver bigben failed with error -22 [ 1564.335215][ T6035] usb 1-1: USB disconnect, device number 91 [ 1564.567533][T11678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.684006][T11161] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1564.762583][T11678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.853681][T11161] usb 8-1: Using ep0 maxpacket: 16 [ 1564.864333][T11161] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1564.888830][T11161] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1564.907384][T11161] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1564.935367][T11161] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1564.937178][T11678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.958801][T11161] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1564.988054][T11161] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.999844][T11161] usb 8-1: Product: syz [ 1565.450512][T11161] usb 8-1: Manufacturer: syz [ 1565.455180][T11161] usb 8-1: SerialNumber: syz [ 1565.536862][T11678] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.735853][T11161] usb 8-1: USB disconnect, device number 43 [ 1565.939167][T18719] udevd[18719]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1566.020625][T11678] bridge_slave_1: left allmulticast mode [ 1566.055085][ T977] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1566.065577][T11678] bridge_slave_1: left promiscuous mode [ 1566.071381][T11678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.157204][T11678] bridge_slave_0: left allmulticast mode [ 1566.177440][T11678] bridge_slave_0: left promiscuous mode [ 1566.197848][T11678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.221451][ T977] usb 6-1: Using ep0 maxpacket: 16 [ 1566.272625][ T977] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1566.286420][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1566.310879][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.319879][T19364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3440'. [ 1566.329256][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1566.335995][T19363] netlink: 'syz.7.3441': attribute type 3 has an invalid length. [ 1566.344599][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1566.361622][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1566.375057][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1566.386588][ T977] usb 6-1: Product: syz [ 1566.419127][ T977] usb 6-1: Manufacturer: syz [ 1566.423802][ T977] usb 6-1: SerialNumber: syz [ 1566.481202][ T977] usb 6-1: config 0 descriptor?? [ 1566.652149][T11161] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1566.789685][T11161] usb 8-1: device descriptor read/64, error -71 [ 1566.936291][ T977] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1566.948348][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1566.980260][ T977] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1567.016221][ T977] usb 6-1: media controller created [ 1567.023049][T11161] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1567.095454][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1567.125103][T19351] dtv5100: wlen = 0, aborting. [ 1567.163172][T11161] usb 8-1: device descriptor read/64, error -71 [ 1567.186930][ T977] zl10353_read_register: readreg error (reg=127, ret==0) [ 1567.194720][ T977] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1567.203599][ T977] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1567.230583][T11678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.257653][ T977] usb 6-1: USB disconnect, device number 62 [ 1567.264263][T11678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.276817][T11161] usb usb8-port1: attempt power cycle [ 1567.291758][T11678] bond0 (unregistering): Released all slaves [ 1567.465498][ T977] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1567.521177][T19358] lo speed is unknown, defaulting to 1000 [ 1567.619565][T11161] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1567.667020][T11161] usb 8-1: device descriptor read/8, error -71 [ 1568.057795][T11161] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1568.126275][T11161] usb 8-1: device descriptor read/8, error -71 [ 1568.336450][ T5844] Bluetooth: hci0: command tx timeout [ 1568.376960][T11161] usb usb8-port1: unable to enumerate USB device [ 1568.448687][ T5844] Bluetooth: hci1: command 0x0405 tx timeout [ 1568.949171][ T5966] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1568.972695][T19387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1569.047518][T19358] chnl_net:caif_netlink_parms(): no params data found [ 1569.115960][T19389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1569.167093][ T5966] usb 6-1: Using ep0 maxpacket: 8 [ 1569.232292][ T5966] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1569.278298][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.337458][ T5966] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1569.495478][ T5966] pvrusb2: ********** [ 1569.502130][ T5966] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1569.512664][ T5966] pvrusb2: Important functionality might not be entirely working. [ 1569.520554][ T5966] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1569.533087][ T5966] pvrusb2: ********** [ 1569.539673][ T977] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1569.557067][ T2345] pvrusb2: Invalid write control endpoint [ 1569.644279][ T2345] pvrusb2: Invalid write control endpoint [ 1569.655567][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1569.665916][T11678] hsr_slave_0: left promiscuous mode [ 1569.666478][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1569.679618][T11678] hsr_slave_1: left promiscuous mode [ 1569.685476][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1569.685913][T11678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1569.698639][ T2345] pvrusb2: Device being rendered inoperable [ 1569.711502][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1569.715257][T11678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.720190][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1569.733532][ T977] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1569.745127][ T977] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1569.750717][T19379] pvrusb2: Attempted to execute control transfer when device not ok [ 1569.759572][ T977] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1569.772532][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.782345][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1569.789322][ T5966] usb 6-1: USB disconnect, device number 63 [ 1569.789613][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1569.801990][T11678] veth1_macvtap: left promiscuous mode [ 1569.817035][T11678] veth0_macvtap: left promiscuous mode [ 1569.823135][T11678] veth1_vlan: left promiscuous mode [ 1569.826525][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1569.838421][T19391] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1569.844879][T11678] veth0_vlan: left promiscuous mode [ 1569.856305][ T977] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1570.044972][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1570.044994][ T30] audit: type=1326 audit(1755732040.399:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19390 comm="syz.0.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ecf8ebe9 code=0x7ffc0000 [ 1570.048261][ T977] usb 1-1: USB disconnect, device number 92 [ 1570.051149][ T30] audit: type=1326 audit(1755732040.410:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19390 comm="syz.0.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ecf8ebe9 code=0x7ffc0000 [ 1570.072766][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.100365][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.121992][ T30] audit: type=1326 audit(1755732040.410:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19390 comm="syz.0.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f65ecf8ebe9 code=0x7ffc0000 [ 1570.191403][ T30] audit: type=1326 audit(1755732040.410:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19390 comm="syz.0.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ecf8ebe9 code=0x7ffc0000 [ 1570.247283][ T5844] Bluetooth: hci0: command tx timeout [ 1570.281499][ T30] audit: type=1326 audit(1755732040.410:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19390 comm="syz.0.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ecf8ebe9 code=0x7ffc0000 [ 1570.303151][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.327874][ T30] audit: type=1326 audit(1755732040.410:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19390 comm="syz.0.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65ecf8d550 code=0x7ffc0000 [ 1570.349520][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.388096][ T30] audit: type=1326 audit(1755732040.410:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19390 comm="syz.0.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ecf8ebe9 code=0x7ffc0000 [ 1570.417401][ T30] audit: type=1326 audit(1755732040.410:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19390 comm="syz.0.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f65ecf8d84a code=0x7ffc0000 [ 1570.444797][ T30] audit: type=1326 audit(1755732040.442:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19390 comm="syz.0.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65ecfc14a5 code=0x7ffc0000 [ 1570.478579][ T30] audit: type=1326 audit(1755732040.635:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19390 comm="syz.0.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ecf8ebe9 code=0x7ffc0000 [ 1570.576856][T19402] loop9: detected capacity change from 0 to 7 [ 1570.583954][T19402] buffer_io_error: 4 callbacks suppressed [ 1570.583970][T19402] Buffer I/O error on dev loop9, logical block 0, async page read [ 1570.597775][T19402] Buffer I/O error on dev loop9, logical block 0, async page read [ 1570.607042][T19402] Buffer I/O error on dev loop9, logical block 0, async page read [ 1570.615085][T19402] Buffer I/O error on dev loop9, logical block 0, async page read [ 1570.623253][T19402] Buffer I/O error on dev loop9, logical block 0, async page read [ 1570.631335][T19402] Buffer I/O error on dev loop9, logical block 0, async page read [ 1570.639272][T19402] Buffer I/O error on dev loop9, logical block 0, async page read [ 1570.647274][T19402] ldm_validate_partition_table(): Disk read failed. [ 1570.654016][T19402] Buffer I/O error on dev loop9, logical block 0, async page read [ 1570.662035][T19402] Buffer I/O error on dev loop9, logical block 0, async page read [ 1570.670022][T19402] Buffer I/O error on dev loop9, logical block 0, async page read [ 1570.678075][T19402] Dev loop9: unable to read RDB block 0 [ 1570.683922][T19402] loop9: unable to read partition table [ 1570.689898][T19402] loop9: partition table beyond EOD, truncated [ 1570.696889][T19402] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1570.696889][T19402] ) failed (rc=-5) [ 1571.285703][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1571.292633][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1571.759148][T19420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3454'. [ 1572.177596][T18339] Bluetooth: hci0: command tx timeout [ 1572.613380][T11678] team0 (unregistering): Port device team_slave_1 removed [ 1572.661664][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1572.694462][T11678] team0 (unregistering): Port device team_slave_0 removed [ 1572.815343][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1572.825854][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1572.847463][ T9] usb 9-1: config 7 has an invalid interface number: 111 but max is 0 [ 1572.861727][ T9] usb 9-1: config 7 has no interface number 0 [ 1572.892642][ T9] usb 9-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 1572.918298][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.931302][ T9] usb 9-1: Product: syz [ 1572.977659][ T9] usb 9-1: Manufacturer: syz [ 1572.990061][ T9] usb 9-1: SerialNumber: syz [ 1573.445457][T19358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.476668][T19358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.496738][T19358] bridge_slave_0: entered allmulticast mode [ 1573.512048][T19358] bridge_slave_0: entered promiscuous mode [ 1573.655549][T19358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.678900][T19358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.717031][T19358] bridge_slave_1: entered allmulticast mode [ 1573.740965][T19358] bridge_slave_1: entered promiscuous mode [ 1574.108701][T18339] Bluetooth: hci0: command 0x0419 tx timeout [ 1574.132393][T19358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.989012][T19358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.301935][T19358] team0: Port device team_slave_0 added [ 1575.330503][T19358] team0: Port device team_slave_1 added [ 1575.532820][T19358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.564918][T19358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.658567][T19358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.696913][ T9] usb 9-1: bad CDC descriptors [ 1575.710091][T19358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.737593][ T9] usb 9-1: USB disconnect, device number 10 [ 1575.756757][T19358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1576.075121][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3460'. [ 1576.084369][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3460'. [ 1576.120593][T18339] Bluetooth: hci0: command 0x0419 tx timeout [ 1576.153332][T19358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1576.656719][T19451] loop9: detected capacity change from 0 to 7 [ 1576.666428][T19451] buffer_io_error: 9 callbacks suppressed [ 1576.666461][T19451] Buffer I/O error on dev loop9, logical block 0, async page read [ 1576.680915][T19451] Buffer I/O error on dev loop9, logical block 0, async page read [ 1576.689515][T19451] Buffer I/O error on dev loop9, logical block 0, async page read [ 1576.697939][T19451] Buffer I/O error on dev loop9, logical block 0, async page read [ 1576.706433][T19451] Buffer I/O error on dev loop9, logical block 0, async page read [ 1576.715380][T19451] Buffer I/O error on dev loop9, logical block 0, async page read [ 1576.723906][T19451] Buffer I/O error on dev loop9, logical block 0, async page read [ 1576.732150][T19451] ldm_validate_partition_table(): Disk read failed. [ 1576.739125][T19451] Buffer I/O error on dev loop9, logical block 0, async page read [ 1576.782396][T19451] Buffer I/O error on dev loop9, logical block 0, async page read [ 1576.790913][T19451] Buffer I/O error on dev loop9, logical block 0, async page read [ 1576.800334][T19451] Dev loop9: unable to read RDB block 0 [ 1576.807369][T19451] loop9: unable to read partition table [ 1576.814262][T19451] loop9: partition table beyond EOD, truncated [ 1576.820730][T19451] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1576.820730][T19451] ) failed (rc=-5) [ 1577.412538][T19358] hsr_slave_0: entered promiscuous mode [ 1577.473217][T19358] hsr_slave_1: entered promiscuous mode [ 1577.631656][T19454] loop9: detected capacity change from 0 to 7 [ 1577.638882][T19454] ldm_validate_partition_table(): Disk read failed. [ 1577.645779][T19454] Dev loop9: unable to read RDB block 0 [ 1577.651697][T19454] loop9: unable to read partition table [ 1577.657533][T19454] loop9: partition table beyond EOD, truncated [ 1577.664305][T19454] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1577.664305][T19454] ) failed (rc=-5) [ 1578.030910][ T5966] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1578.223206][T19358] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1578.240120][T19358] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1578.247274][ T5966] usb 6-1: Using ep0 maxpacket: 8 [ 1578.256144][T19470] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3466'. [ 1578.256299][ T5966] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1578.281297][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.303112][T19358] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1578.311221][ T5966] usb 6-1: config 0 descriptor?? [ 1578.378481][T19358] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1578.564546][ T5966] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1578.717568][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1578.717582][ T30] audit: type=1326 audit(1755732049.712:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19456 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd1d8ebe9 code=0x7ffc0000 [ 1578.942392][ T30] audit: type=1326 audit(1755732049.712:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19456 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd1d8ebe9 code=0x7ffc0000 [ 1578.980944][T19358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1579.044317][ T30] audit: type=1326 audit(1755732049.819:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19456 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fcfd1d8ebe9 code=0x7ffc0000 [ 1579.088831][T19358] 8021q: adding VLAN 0 to HW filter on device team0 [ 1579.138210][T11678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.145400][T11678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.190957][ T30] audit: type=1326 audit(1755732049.819:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19456 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd1d8ebe9 code=0x7ffc0000 [ 1579.390979][ T30] audit: type=1326 audit(1755732049.819:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19456 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd1d8ebe9 code=0x7ffc0000 [ 1579.418930][ T30] audit: type=1326 audit(1755732050.023:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19456 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfd1d8e7eb code=0x7ffc0000 [ 1579.459574][ T30] audit: type=1326 audit(1755732050.023:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19456 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfd1d8e7eb code=0x7ffc0000 [ 1579.464902][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.488356][ T6238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1580.040459][ T30] audit: type=1326 audit(1755732050.023:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19456 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcfd1dc14a5 code=0x7ffc0000 [ 1580.062183][ T30] audit: type=1326 audit(1755732050.216:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19456 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd1d8ebe9 code=0x7ffc0000 [ 1580.083848][ T30] audit: type=1326 audit(1755732050.216:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19456 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd1d8ebe9 code=0x7ffc0000 [ 1580.880353][ T5966] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1580.904784][ T5966] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1580.936070][ T5966] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1580.978699][ T5966] usb 6-1: USB disconnect, device number 64 [ 1581.213392][T19358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.603938][ T5966] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1582.880658][ T5966] usb 9-1: Using ep0 maxpacket: 32 [ 1583.115923][ T5966] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1583.157077][ T5966] usb 9-1: config 7 has an invalid interface number: 111 but max is 0 [ 1583.172762][ T5966] usb 9-1: config 7 has no interface number 0 [ 1583.192664][ T5966] usb 9-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 1583.306328][ T5966] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.314413][ T5966] usb 9-1: Product: syz [ 1583.343138][ T5966] usb 9-1: Manufacturer: syz [ 1583.357915][ T5966] usb 9-1: SerialNumber: syz [ 1583.451767][T19521] futex_wake_op: syz.0.3475 tries to shift op by -1; fix this program [ 1583.863971][ T5966] usb 9-1: bad CDC descriptors [ 1584.028697][ T5966] usb 9-1: USB disconnect, device number 11 [ 1584.334385][T19358] veth0_vlan: entered promiscuous mode [ 1584.383278][T19358] veth1_vlan: entered promiscuous mode [ 1585.517658][T19358] veth0_macvtap: entered promiscuous mode [ 1585.576717][T19358] veth1_macvtap: entered promiscuous mode [ 1585.585393][T19538] delete_channel: no stack [ 1585.733060][T19358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1585.748326][ T5905] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1585.800170][T19358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1585.830793][T19358] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.874614][T19358] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.924039][T19358] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.933405][ T5905] usb 8-1: Using ep0 maxpacket: 16 [ 1585.948608][T19358] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.964277][ T5905] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1585.986888][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.018291][ T5905] usb 8-1: Product: syz [ 1586.022506][ T5905] usb 8-1: Manufacturer: syz [ 1586.036723][ T5905] usb 8-1: SerialNumber: syz [ 1586.061633][ T5905] usb 8-1: config 0 descriptor?? [ 1586.255326][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.301931][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.410484][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.456579][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.475418][ T5905] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1586.526853][ T5905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1586.586264][ T5905] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1586.610063][ T5905] usb 8-1: media controller created [ 1586.666024][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1586.716533][T19544] dtv5100: wlen = 0, aborting. [ 1586.816866][ T5905] zl10353_read_register: readreg error (reg=127, ret==0) [ 1587.481488][ T5905] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1587.565935][ T5905] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1587.645147][ T5905] usb 8-1: USB disconnect, device number 48 [ 1587.671032][T19554] netlink: 780 bytes leftover after parsing attributes in process `syz.5.3484'. [ 1587.863502][ T5966] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1587.916255][ T5905] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1588.050792][ T9] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1588.087008][ T5966] usb 1-1: Using ep0 maxpacket: 8 [ 1588.286981][ T5966] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1588.498271][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1588.565724][ T5966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.596161][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1588.611268][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.640693][ T5966] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1588.653428][ T9] usb 6-1: Product: syz [ 1588.676114][ T9] usb 6-1: Manufacturer: syz [ 1588.689199][ T5966] pvrusb2: ********** [ 1588.712994][ T9] usb 6-1: SerialNumber: syz [ 1588.720465][ T5966] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1588.784519][ T9] usb 6-1: config 0 descriptor?? [ 1588.803750][ T5966] pvrusb2: Important functionality might not be entirely working. [ 1588.851371][ T5966] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1588.885686][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1588.902755][ T5966] pvrusb2: ********** [ 1589.205552][ T2345] pvrusb2: Invalid write control endpoint [ 1589.525021][ T977] usb 1-1: USB disconnect, device number 93 [ 1589.973023][ T2345] pvrusb2: Invalid write control endpoint [ 1590.016051][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1590.052289][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1590.106004][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1590.153464][ T2345] pvrusb2: Device being rendered inoperable [ 1590.202217][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1590.256641][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1590.344532][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1590.404536][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1590.560126][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1591.310378][T19573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.509254][ T9] gspca_sonixj: reg_w1 err -110 [ 1591.514281][ T9] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 1592.643672][T19573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.921755][T19575] delete_channel: no stack [ 1593.142593][T19584] netlink: 'syz.9.3491': attribute type 3 has an invalid length. [ 1593.213454][ T9] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1593.381965][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1593.394639][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1593.412365][ T9] usb 1-1: config 7 has an invalid interface number: 111 but max is 0 [ 1593.424817][ T9] usb 1-1: config 7 has no interface number 0 [ 1593.434349][ T9] usb 1-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 1593.443015][ T5905] usb 6-1: USB disconnect, device number 65 [ 1593.451598][ T977] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1593.469364][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.494581][ T9] usb 1-1: Product: syz [ 1593.502715][ T9] usb 1-1: Manufacturer: syz [ 1593.517931][ T9] usb 1-1: SerialNumber: syz [ 1593.540671][T19587] futex_wake_op: syz.5.3492 tries to shift op by -1; fix this program [ 1593.722153][ T977] usb 10-1: device descriptor read/64, error -71 [ 1593.778022][ T9] usb 1-1: bad CDC descriptors [ 1593.827935][ T9] usb 1-1: USB disconnect, device number 94 [ 1594.071612][ T977] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1594.826306][ T977] usb 10-1: device descriptor read/64, error -71 [ 1594.957126][ T977] usb usb10-port1: attempt power cycle [ 1595.870262][ T977] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1596.311224][ T977] usb 10-1: device descriptor read/8, error -71 [ 1597.379788][ T5905] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1597.415501][T19614] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3498'. [ 1597.424893][T19614] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3498'. [ 1597.929653][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 1597.959921][ T5905] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1597.970433][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.992626][ T5905] usb 1-1: Product: syz [ 1598.571332][ T5905] usb 1-1: Manufacturer: syz [ 1598.586086][ T5905] usb 1-1: SerialNumber: syz [ 1598.604970][ T5905] usb 1-1: config 0 descriptor?? [ 1598.815061][ T5943] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1599.355656][ T5943] usb 6-1: Using ep0 maxpacket: 8 [ 1599.451801][ T5943] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1599.469128][ T5905] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1599.488733][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.520784][ T5905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1599.528809][ T5943] usb 6-1: Product: syz [ 1599.552545][T19625] netlink: 'syz.7.3503': attribute type 25 has an invalid length. [ 1599.570583][ T5943] usb 6-1: Manufacturer: syz [ 1599.575218][ T5943] usb 6-1: SerialNumber: syz [ 1599.594786][ T5905] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1599.613628][T19607] dtv5100: wlen = 0, aborting. [ 1599.623565][ T5943] usb 6-1: config 0 descriptor?? [ 1599.645653][ T5905] usb 1-1: media controller created [ 1599.677186][ T5943] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1599.742874][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1600.103922][ T5905] zl10353_read_register: readreg error (reg=127, ret==0) [ 1600.152250][ T5905] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1600.707191][ T5943] gspca_sonixj: reg_r err -110 [ 1600.712109][ T5943] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 1600.818570][ T5905] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1600.854737][ T5905] usb 1-1: USB disconnect, device number 95 [ 1601.005071][ T5905] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1601.575563][T19654] futex_wake_op: syz.7.3511 tries to shift op by -1; fix this program [ 1601.774820][ T5918] usb 6-1: USB disconnect, device number 66 [ 1601.841649][T18084] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1602.133896][T18084] usb 10-1: Using ep0 maxpacket: 32 [ 1603.205424][ T5905] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1603.574734][T18084] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1603.606048][T18084] usb 10-1: config 7 has an invalid interface number: 111 but max is 0 [ 1603.618333][T18084] usb 10-1: config 7 has no interface number 0 [ 1603.628748][T18084] usb 10-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 1603.643231][T18084] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.667319][T18084] usb 10-1: Product: syz [ 1603.675812][T18084] usb 10-1: Manufacturer: syz [ 1603.680554][T18084] usb 10-1: SerialNumber: syz [ 1604.537389][ T5905] usb 9-1: config 0 has no interfaces? [ 1604.544306][ T5905] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1604.647169][ T5905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.667036][ T5905] usb 9-1: config 0 descriptor?? [ 1604.723740][ T5905] usb 9-1: USB disconnect, device number 12 [ 1604.745355][T19672] vivid-001: disconnect [ 1604.750379][T19672] vivid-001: reconnect [ 1604.832958][T18084] usb 10-1: bad CDC descriptors [ 1604.899809][T18084] usb 10-1: USB disconnect, device number 6 [ 1605.852489][ T5966] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1606.092541][ T5966] usb 1-1: config 0 has no interfaces? [ 1606.108099][ T5966] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1606.131788][ T5966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.150523][T18084] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1606.169872][ T5966] usb 1-1: config 0 descriptor?? [ 1606.327774][T18084] usb 9-1: Using ep0 maxpacket: 16 [ 1606.350938][T18084] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1606.374147][T18084] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.402182][T18084] usb 9-1: Product: syz [ 1606.406561][T18084] usb 9-1: Manufacturer: syz [ 1606.411190][T18084] usb 9-1: SerialNumber: syz [ 1606.419949][T19676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1606.458650][T18084] usb 9-1: config 0 descriptor?? [ 1606.467747][T19676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.516418][T19676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1606.558788][ T977] usb 1-1: USB disconnect, device number 96 [ 1606.856232][T18084] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1606.881952][T18084] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1606.897602][T18084] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1606.907012][T18084] usb 9-1: media controller created [ 1607.386288][T18084] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1607.395309][T19701] dtv5100: wlen = 0, aborting. [ 1607.512123][T18084] zl10353_read_register: readreg error (reg=127, ret==0) [ 1607.529932][T18084] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1607.706317][T18084] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1607.719370][T18084] usb 9-1: USB disconnect, device number 13 [ 1607.753905][T19703] loop9: detected capacity change from 0 to 7 [ 1607.761390][T19703] buffer_io_error: 23 callbacks suppressed [ 1607.761408][T19703] Buffer I/O error on dev loop9, logical block 0, async page read [ 1607.775331][T19703] Buffer I/O error on dev loop9, logical block 0, async page read [ 1607.783321][T19703] Buffer I/O error on dev loop9, logical block 0, async page read [ 1607.791333][T19703] Buffer I/O error on dev loop9, logical block 0, async page read [ 1607.799285][T19703] Buffer I/O error on dev loop9, logical block 0, async page read [ 1607.807587][T19703] Buffer I/O error on dev loop9, logical block 0, async page read [ 1607.815655][T19703] Buffer I/O error on dev loop9, logical block 0, async page read [ 1607.823999][T19703] ldm_validate_partition_table(): Disk read failed. [ 1607.830669][T19703] Buffer I/O error on dev loop9, logical block 0, async page read [ 1607.838587][T19703] Buffer I/O error on dev loop9, logical block 0, async page read [ 1607.846542][T19703] Buffer I/O error on dev loop9, logical block 0, async page read [ 1607.854524][T19703] Dev loop9: unable to read RDB block 0 [ 1607.860316][T19703] loop9: unable to read partition table [ 1607.866134][T19703] loop9: partition table beyond EOD, truncated [ 1607.872292][T19703] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1607.872292][T19703] ) failed (rc=-5) [ 1607.903894][T18084] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1608.008543][ T9] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1608.354808][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1608.383460][ T9] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1609.355920][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.382907][ T9] usb 1-1: Product: syz [ 1610.099978][T19714] loop9: detected capacity change from 0 to 7 [ 1610.107526][T19714] ldm_validate_partition_table(): Disk read failed. [ 1610.115233][T19714] Dev loop9: unable to read RDB block 0 [ 1610.121117][T19714] loop9: unable to read partition table [ 1610.126967][T19714] loop9: partition table beyond EOD, truncated [ 1610.133204][T19714] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1610.133204][T19714] ) failed (rc=-5) [ 1610.155399][ T9] usb 1-1: Manufacturer: syz [ 1610.363038][ T9] usb 1-1: SerialNumber: syz [ 1610.386888][ T9] usb 1-1: config 0 descriptor?? [ 1610.443272][ T9] usb 1-1: can't set config #0, error -71 [ 1610.526992][ T9] usb 1-1: USB disconnect, device number 97 [ 1611.034486][ T9] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1611.202227][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1611.220113][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1611.240910][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.281134][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1611.357572][ T9] pvrusb2: ********** [ 1611.397287][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1612.485785][ T9] pvrusb2: Important functionality might not be entirely working. [ 1612.495807][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1612.543176][ T9] pvrusb2: ********** [ 1612.570920][ T2345] pvrusb2: Invalid write control endpoint [ 1612.622530][T19740] loop9: detected capacity change from 0 to 7 [ 1612.629124][T19740] buffer_io_error: 18 callbacks suppressed [ 1612.629137][T19740] Buffer I/O error on dev loop9, logical block 0, async page read [ 1612.642945][T19740] Buffer I/O error on dev loop9, logical block 0, async page read [ 1612.650914][T19740] Buffer I/O error on dev loop9, logical block 0, async page read [ 1612.658877][T19740] Buffer I/O error on dev loop9, logical block 0, async page read [ 1612.666842][T19740] Buffer I/O error on dev loop9, logical block 0, async page read [ 1612.674784][T19740] Buffer I/O error on dev loop9, logical block 0, async page read [ 1612.682747][T19740] Buffer I/O error on dev loop9, logical block 0, async page read [ 1612.691301][T19740] ldm_validate_partition_table(): Disk read failed. [ 1612.698040][T19740] Buffer I/O error on dev loop9, logical block 0, async page read [ 1612.706010][T19740] Buffer I/O error on dev loop9, logical block 0, async page read [ 1612.714055][T19740] Buffer I/O error on dev loop9, logical block 0, async page read [ 1612.722295][T19740] Dev loop9: unable to read RDB block 0 [ 1612.728037][T19740] loop9: unable to read partition table [ 1612.733900][T19740] loop9: partition table beyond EOD, truncated [ 1612.740178][T19740] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1612.740178][T19740] ) failed (rc=-5) [ 1612.786242][ T9] usb 1-1: USB disconnect, device number 98 [ 1612.956870][ T5966] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1613.668554][ T2345] pvrusb2: Invalid write control endpoint [ 1613.674654][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1613.692128][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1613.709260][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1613.726885][ T2345] pvrusb2: Device being rendered inoperable [ 1613.733271][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1613.745743][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1613.760619][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1613.770511][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1613.784618][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1613.998009][ T5966] usb 8-1: Using ep0 maxpacket: 32 [ 1614.045099][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3537'. [ 1614.054263][T19751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1614.105023][T19751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1614.119246][T18084] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1614.163817][ T5966] usb 8-1: device descriptor read/all, error -71 [ 1614.317146][T18084] usb 9-1: config 0 has no interfaces? [ 1614.327331][T18084] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1614.486131][T18084] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.502807][T18084] usb 9-1: config 0 descriptor?? [ 1614.754184][T19762] loop9: detected capacity change from 0 to 7 [ 1614.761540][T19762] ldm_validate_partition_table(): Disk read failed. [ 1614.768562][T19762] Dev loop9: unable to read RDB block 0 [ 1614.774500][T19762] loop9: unable to read partition table [ 1614.780363][T19762] loop9: partition table beyond EOD, truncated [ 1614.786593][T19762] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1614.786593][T19762] ) failed (rc=-5) [ 1615.331139][ T5966] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1615.644647][T19746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.662218][T19746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.677116][T19746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1615.707956][ T5905] usb 9-1: USB disconnect, device number 14 [ 1617.050737][ T5966] usb 8-1: Using ep0 maxpacket: 32 [ 1617.349381][ T5966] usb 8-1: device descriptor read/all, error -71 [ 1617.381330][ T5966] usb usb8-port1: attempt power cycle [ 1617.592935][T19779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1618.276569][ T5966] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1618.295536][ T5966] usb 8-1: Using ep0 maxpacket: 32 [ 1618.307381][ T5966] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1618.326705][ T5966] usb 8-1: config 7 has an invalid interface number: 111 but max is 0 [ 1618.348232][ T5966] usb 8-1: config 7 has no interface number 0 [ 1618.497976][ T5966] usb 8-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 1618.509674][ T5966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.518323][ T5966] usb 8-1: Product: syz [ 1618.522969][ T5966] usb 8-1: Manufacturer: syz [ 1618.527601][ T5966] usb 8-1: SerialNumber: syz [ 1618.792970][T19799] netlink: 'syz.0.3552': attribute type 27 has an invalid length. [ 1618.990000][ T5966] usb 8-1: bad CDC descriptors [ 1619.019517][T19800] loop9: detected capacity change from 0 to 7 [ 1619.041751][T19800] buffer_io_error: 23 callbacks suppressed [ 1619.041768][T19800] Buffer I/O error on dev loop9, logical block 0, async page read [ 1619.057111][ T5966] usb 8-1: USB disconnect, device number 51 [ 1619.133062][T19800] Buffer I/O error on dev loop9, logical block 0, async page read [ 1619.170872][T19800] Buffer I/O error on dev loop9, logical block 0, async page read [ 1619.218780][T19800] Buffer I/O error on dev loop9, logical block 0, async page read [ 1619.237100][T19800] Buffer I/O error on dev loop9, logical block 0, async page read [ 1619.267462][T19800] Buffer I/O error on dev loop9, logical block 0, async page read [ 1619.284829][T19800] Buffer I/O error on dev loop9, logical block 0, async page read [ 1619.297760][T19800] ldm_validate_partition_table(): Disk read failed. [ 1619.307345][T19800] Buffer I/O error on dev loop9, logical block 0, async page read [ 1619.316362][T19800] Buffer I/O error on dev loop9, logical block 0, async page read [ 1619.324760][T19800] Buffer I/O error on dev loop9, logical block 0, async page read [ 1619.365931][T19800] Dev loop9: unable to read RDB block 0 [ 1619.394444][T19800] loop9: unable to read partition table [ 1619.413801][T19800] loop9: partition table beyond EOD, truncated [ 1619.437202][T19800] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1619.437202][T19800] ) failed (rc=-5) [ 1619.476121][T19805] netlink: 'syz.0.3553': attribute type 9 has an invalid length. [ 1620.597601][ T5905] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1620.938963][ T5905] usb 1-1: config 0 has no interfaces? [ 1620.969020][ T5905] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1621.023819][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.073958][ T5905] usb 1-1: config 0 descriptor?? [ 1621.336110][T19818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1621.358774][T19818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1621.397037][T19818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1621.509509][ T5943] usb 1-1: USB disconnect, device number 99 [ 1621.529906][T19826] FAULT_INJECTION: forcing a failure. [ 1621.529906][T19826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1621.574936][T19826] CPU: 0 UID: 0 PID: 19826 Comm: syz.5.3559 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1621.574968][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1621.574983][T19826] Call Trace: [ 1621.574993][T19826] [ 1621.575004][T19826] dump_stack_lvl+0x189/0x250 [ 1621.575036][T19826] ? __pfx____ratelimit+0x10/0x10 [ 1621.575062][T19826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1621.575088][T19826] ? __pfx__printk+0x10/0x10 [ 1621.575118][T19826] ? __might_fault+0xb0/0x130 [ 1621.575154][T19826] should_fail_ex+0x414/0x560 [ 1621.575185][T19826] _copy_from_user+0x2d/0xb0 [ 1621.575218][T19826] ___sys_sendmsg+0x158/0x2a0 [ 1621.575257][T19826] ? __pfx____sys_sendmsg+0x10/0x10 [ 1621.575345][T19826] ? __fget_files+0x2a/0x420 [ 1621.575381][T19826] ? __fget_files+0x3a0/0x420 [ 1621.575415][T19826] __x64_sys_sendmsg+0x19b/0x260 [ 1621.575450][T19826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1621.575492][T19826] ? __pfx_ksys_write+0x10/0x10 [ 1621.575510][T19826] ? rcu_is_watching+0x15/0xb0 [ 1621.575537][T19826] ? do_syscall_64+0xbe/0x3b0 [ 1621.575564][T19826] do_syscall_64+0xfa/0x3b0 [ 1621.575590][T19826] ? lockdep_hardirqs_on+0x9c/0x150 [ 1621.575612][T19826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.575632][T19826] ? clear_bhb_loop+0x60/0xb0 [ 1621.575657][T19826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.575677][T19826] RIP: 0033:0x7fcfd1d8ebe9 [ 1621.575695][T19826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1621.575714][T19826] RSP: 002b:00007fcfd2b20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1621.575735][T19826] RAX: ffffffffffffffda RBX: 00007fcfd1fb5fa0 RCX: 00007fcfd1d8ebe9 [ 1621.575750][T19826] RDX: 000000002400c000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1621.575764][T19826] RBP: 00007fcfd2b20090 R08: 0000000000000000 R09: 0000000000000000 [ 1621.575778][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1621.575790][T19826] R13: 00007fcfd1fb6038 R14: 00007fcfd1fb5fa0 R15: 00007ffcd03b24c8 [ 1621.575822][T19826] [ 1624.511895][ T5844] Bluetooth: hci0: command 0x0419 tx timeout [ 1626.985045][T19873] loop9: detected capacity change from 0 to 7 [ 1626.987560][T19873] buffer_io_error: 9 callbacks suppressed [ 1626.987573][T19873] Buffer I/O error on dev loop9, logical block 0, async page read [ 1626.987658][T19873] Buffer I/O error on dev loop9, logical block 0, async page read [ 1626.987723][T19873] Buffer I/O error on dev loop9, logical block 0, async page read [ 1626.987785][T19873] Buffer I/O error on dev loop9, logical block 0, async page read [ 1626.987859][T19873] Buffer I/O error on dev loop9, logical block 0, async page read [ 1626.987931][T19873] Buffer I/O error on dev loop9, logical block 0, async page read [ 1626.987993][T19873] Buffer I/O error on dev loop9, logical block 0, async page read [ 1626.988034][T19873] ldm_validate_partition_table(): Disk read failed. [ 1626.988065][T19873] Buffer I/O error on dev loop9, logical block 0, async page read [ 1626.988128][T19873] Buffer I/O error on dev loop9, logical block 0, async page read [ 1626.988190][T19873] Buffer I/O error on dev loop9, logical block 0, async page read [ 1626.988298][T19873] Dev loop9: unable to read RDB block 0 [ 1626.990805][T19873] loop9: unable to read partition table [ 1626.991012][T19873] loop9: partition table beyond EOD, truncated [ 1626.993709][T19873] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1626.993709][T19873] ) failed (rc=-5) [ 1627.732044][ T5844] Bluetooth: hci0: command 0x0419 tx timeout [ 1628.578704][T19889] delete_channel: no stack [ 1628.625334][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1628.637314][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1630.290556][T11161] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1630.460048][T11161] usb 9-1: config 0 has no interfaces? [ 1630.482894][T11161] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1630.486913][T19906] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3581'. [ 1630.530693][T11161] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.570101][ T5905] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1630.577152][T11161] usb 9-1: config 0 descriptor?? [ 1630.823623][T19893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.843199][T19893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1630.861205][T19893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1630.876126][T19893] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1630.917769][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 1630.931315][ T5905] usb 1-1: config 8 has an invalid interface number: 144 but max is 0 [ 1630.952719][ T5905] usb 1-1: config 8 has no interface number 0 [ 1630.958918][ T5905] usb 1-1: config 8 interface 144 has no altsetting 0 [ 1630.973296][ T5905] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice=62.ad [ 1631.512005][T11161] usb 9-1: USB disconnect, device number 15 [ 1631.707644][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.715712][ T5905] usb 1-1: Product: syz [ 1631.735636][ T5905] usb 1-1: Manufacturer: syz [ 1631.740299][ T5905] usb 1-1: SerialNumber: syz [ 1631.760813][ T5905] rtl8150 1-1:8.144: couldn't find required endpoints [ 1631.779138][ T5905] rtl8150 1-1:8.144: probe with driver rtl8150 failed with error -5 [ 1632.068616][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3578'. [ 1632.153070][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3578'. [ 1632.312736][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3578'. [ 1632.490711][T11161] usb 1-1: USB disconnect, device number 100 [ 1635.326558][T19950] netlink: 'syz.9.3590': attribute type 7 has an invalid length. [ 1635.381419][T19950] : entered promiscuous mode [ 1637.111166][ T5966] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1637.306523][ T5966] usb 10-1: config 0 has no interfaces? [ 1637.312365][ T5966] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1637.322873][ T5966] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.334817][T19956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'. [ 1637.350740][ T5966] usb 10-1: config 0 descriptor?? [ 1637.356306][T19956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'. [ 1637.384099][T11161] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1637.953116][T11161] usb 9-1: Using ep0 maxpacket: 8 [ 1637.960982][T11161] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1637.985224][T19959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.995782][T11161] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.005517][T19959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.045969][T11161] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1638.063154][T19959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1638.078939][T11161] pvrusb2: ********** [ 1638.098921][T19959] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1638.107104][T11161] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1638.127748][T11161] pvrusb2: Important functionality might not be entirely working. [ 1638.154967][ T5966] usb 10-1: USB disconnect, device number 7 [ 1638.172699][T11161] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1638.195499][T11161] pvrusb2: ********** [ 1638.236387][ T2345] pvrusb2: Invalid write control endpoint [ 1638.749181][ T2345] pvrusb2: Invalid write control endpoint [ 1638.755005][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1638.809719][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1638.839798][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1638.882535][ T2345] pvrusb2: Device being rendered inoperable [ 1638.909262][T19964] pvrusb2: Attempted to execute control transfer when device not ok [ 1638.958848][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1638.982522][T11161] usb 9-1: USB disconnect, device number 16 [ 1638.999264][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1639.170816][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1639.182468][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1639.210675][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1685.808883][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1685.815457][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1687.745306][ T5844] Bluetooth: hci0: command 0x0419 tx timeout [ 1692.186861][T20006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1692.309181][ T5966] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1692.896764][ T5966] usb 6-1: Using ep0 maxpacket: 32 [ 1693.163820][ T5966] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1693.172981][T20025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1693.198622][ T5966] usb 6-1: config 7 has an invalid interface number: 111 but max is 0 [ 1693.233527][T11161] lo speed is unknown, defaulting to 1000 [ 1693.358273][ T5966] usb 6-1: config 7 has no interface number 0 [ 1693.388602][ T5966] usb 6-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 1693.408071][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.422511][ T5966] usb 6-1: Product: syz [ 1693.426724][ T5966] usb 6-1: Manufacturer: syz [ 1693.432285][ T5966] usb 6-1: SerialNumber: syz [ 1693.436466][ T977] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1693.571383][T20033] syzkaller0: entered promiscuous mode [ 1693.577017][T20033] syzkaller0: entered allmulticast mode [ 1694.022835][ T977] usb 10-1: config 0 has no interfaces? [ 1694.040855][ T977] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1694.063226][ T5966] usb 6-1: bad CDC descriptors [ 1694.074235][ T977] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.093136][ T5966] usb 6-1: USB disconnect, device number 67 [ 1694.095680][ T977] usb 10-1: config 0 descriptor?? [ 1694.331779][T20027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.356964][T20027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.401239][T20027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1694.459021][T20027] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1695.503726][T20044] delete_channel: no stack [ 1698.632764][T20068] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3623'. [ 1699.589254][ T5943] usb 10-1: USB disconnect, device number 8 [ 1701.942006][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3629'. [ 1701.951054][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3629'. [ 1705.875601][T20110] syzkaller0: entered promiscuous mode [ 1705.881467][T20110] syzkaller0: entered allmulticast mode [ 1706.920367][ T5966] usb 8-1: new full-speed USB device number 52 using dummy_hcd [ 1707.093600][ T5966] usb 8-1: config 0 has no interfaces? [ 1707.099300][ T5966] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1707.110224][ T5966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.151466][ T5966] usb 8-1: config 0 descriptor?? [ 1707.373804][T20116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.389000][T20116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.410988][T20116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1710.092030][T20150] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1710.105203][T20150] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1710.114656][T20150] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1710.123516][T20150] overlayfs: missing 'lowerdir' [ 1710.155657][T20135] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 1710.197762][T18084] usb 8-1: USB disconnect, device number 52 [ 1711.297743][T20162] veth0_vlan: entered allmulticast mode [ 1711.543547][T20172] futex_wake_op: syz.5.3652 tries to shift op by -1; fix this program [ 1711.827126][T18084] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1712.395323][ T5943] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1712.748751][T18084] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1713.482820][ T977] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1713.506726][ T5943] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1713.853098][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.884193][T18084] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1713.886592][ T5943] usb 1-1: Product: syz [ 1713.943440][T18084] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1713.959643][ T5943] usb 1-1: Manufacturer: syz [ 1713.967570][T18084] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1713.971520][ T5943] usb 1-1: SerialNumber: syz [ 1714.012433][T18084] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.014714][ T5943] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1714.101387][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1714.259461][ T977] usb 10-1: device descriptor read/64, error -71 [ 1714.296784][T18084] usb 8-1: can't set config #27, error -71 [ 1714.311713][T18084] usb 8-1: USB disconnect, device number 53 [ 1714.618071][T20196] syzkaller0: entered promiscuous mode [ 1714.624453][T20196] syzkaller0: entered allmulticast mode [ 1714.652552][ T5905] usb 1-1: USB disconnect, device number 101 [ 1714.730703][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1714.730722][ T30] audit: type=1804 audit(1755732195.637:568): pid=20198 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.3660" name="/newroot/159/file0" dev="tmpfs" ino=843 res=1 errno=0 [ 1714.773770][ T977] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1715.034282][ T977] usb 10-1: device descriptor read/64, error -71 [ 1715.107417][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1715.115763][ T9] ath9k_htc: Failed to initialize the device [ 1715.238956][ T977] usb usb10-port1: attempt power cycle [ 1715.245287][ T5905] usb 1-1: ath9k_htc: USB layer deinitialized [ 1715.359710][T18084] usb 8-1: new full-speed USB device number 54 using dummy_hcd [ 1715.611111][ T977] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1715.708425][ T977] usb 10-1: device descriptor read/8, error -71 [ 1715.743894][T18084] usb 8-1: config 0 has no interfaces? [ 1715.792601][T18084] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1715.946441][T18084] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.965743][T18084] usb 8-1: config 0 descriptor?? [ 1716.052096][ T977] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1716.076946][ T5943] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1716.096860][ T977] usb 10-1: device descriptor read/8, error -71 [ 1716.187242][T20200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1716.200848][T20200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1716.209611][ T977] usb usb10-port1: unable to enumerate USB device [ 1716.223276][T20200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1716.232310][ T5943] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1716.256539][ T5943] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1716.266384][ T5943] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.282872][ T5943] usb 9-1: config 0 descriptor?? [ 1716.365805][T18084] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1716.517929][T18084] usb 1-1: Using ep0 maxpacket: 16 [ 1716.548085][T18084] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1716.557263][T18084] usb 1-1: config 0 has no interface number 0 [ 1716.583986][T18084] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1716.593246][T18084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.604308][T18084] usb 1-1: Product: syz [ 1716.612496][T18084] usb 1-1: Manufacturer: syz [ 1716.617437][T18084] usb 1-1: SerialNumber: syz [ 1716.625980][T18084] usb 1-1: config 0 descriptor?? [ 1716.639266][T18084] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1716.684087][ T5943] lua 0003:1E7D:2C2E.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.8-1/input0 [ 1716.853238][T18084] gspca_spca1528: reg_w err -71 [ 1716.868694][ T5943] usb 9-1: USB disconnect, device number 17 [ 1716.888502][T18084] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 1716.940718][T18084] usb 1-1: USB disconnect, device number 102 [ 1717.507377][T20221] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1717.674938][T20224] usb usb5: usbfs: process 20224 (syz.0.3669) did not claim interface 0 before use [ 1719.936301][ T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1720.281163][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.377819][ T9] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1720.408940][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.478453][ T9] usb 9-1: config 0 descriptor?? [ 1720.902878][ T9] lua 0003:1E7D:2C2E.001B: collection stack underflow [ 1720.915516][ T9] lua 0003:1E7D:2C2E.001B: item 0 4 0 12 parsing failed [ 1720.924599][ T9] lua 0003:1E7D:2C2E.001B: parse failed [ 1720.930276][ T9] lua 0003:1E7D:2C2E.001B: probe with driver lua failed with error -22 [ 1721.106050][T20201] usb 9-1: USB disconnect, device number 18 [ 1721.287633][T18084] usb 8-1: USB disconnect, device number 54 [ 1721.539486][T20254] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1721.563451][T20256] [ 1721.565848][T20256] ====================================================== [ 1721.572891][T20256] WARNING: possible circular locking dependency detected [ 1721.579948][T20256] 6.16.0-syzkaller #0 Not tainted [ 1721.584992][T20256] ------------------------------------------------------ [ 1721.592035][T20256] syz.5.3681/20256 is trying to acquire lock: [ 1721.598142][T20256] ffff8880256c5988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1721.609179][T20256] [ 1721.609179][T20256] but task is already holding lock: [ 1721.616565][T20256] ffff8880256c5a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 1721.625493][T20256] [ 1721.625493][T20256] which lock already depends on the new lock. [ 1721.625493][T20256] [ 1721.635936][T20256] [ 1721.635936][T20256] the existing dependency chain (in reverse order) is: [ 1721.644976][T20256] [ 1721.644976][T20256] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 1721.652845][T20256] lock_acquire+0x120/0x360 [ 1721.657897][T20256] __mutex_lock+0x182/0xe80 [ 1721.662948][T20256] refcount_dec_and_mutex_lock+0x30/0xa0 [ 1721.669159][T20256] nbd_config_put+0x2c/0x790 [ 1721.674313][T20256] nbd_release+0xfe/0x140 [ 1721.679201][T20256] bdev_release+0x533/0x650 [ 1721.684265][T20256] blkdev_release+0x15/0x20 [ 1721.689335][T20256] __fput+0x449/0xa70 [ 1721.693877][T20256] fput_close_sync+0x119/0x200 [ 1721.699194][T20256] __x64_sys_close+0x7f/0x110 [ 1721.704452][T20256] do_syscall_64+0xfa/0x3b0 [ 1721.709521][T20256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.715985][T20256] [ 1721.715985][T20256] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 1721.723852][T20256] lock_acquire+0x120/0x360 [ 1721.728921][T20256] __mutex_lock+0x182/0xe80 [ 1721.733981][T20256] __del_gendisk+0x129/0x9e0 [ 1721.739141][T20256] del_gendisk+0xe8/0x160 [ 1721.744300][T20256] nbd_dev_remove_work+0x47/0xe0 [ 1721.749893][T20256] process_scheduled_works+0xade/0x17b0 [ 1721.755986][T20256] worker_thread+0x8a0/0xda0 [ 1721.761124][T20256] kthread+0x70e/0x8a0 [ 1721.765743][T20256] ret_from_fork+0x3fc/0x770 [ 1721.770886][T20256] ret_from_fork_asm+0x1a/0x30 [ 1721.776209][T20256] [ 1721.776209][T20256] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1721.784684][T20256] validate_chain+0xb9b/0x2140 [ 1721.790013][T20256] __lock_acquire+0xab9/0xd20 [ 1721.795242][T20256] lock_acquire+0x120/0x360 [ 1721.800298][T20256] down_write+0x96/0x1f0 [ 1721.805097][T20256] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1721.811379][T20256] nbd_start_device+0x16c/0xac0 [ 1721.816781][T20256] nbd_ioctl+0x636/0xeb0 [ 1721.821556][T20256] blkdev_ioctl+0x5a8/0x6d0 [ 1721.826600][T20256] __se_sys_ioctl+0xfc/0x170 [ 1721.831770][T20256] do_syscall_64+0xfa/0x3b0 [ 1721.836837][T20256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.843267][T20256] [ 1721.843267][T20256] other info that might help us debug this: [ 1721.843267][T20256] [ 1721.853518][T20256] Chain exists of: [ 1721.853518][T20256] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 1721.853518][T20256] [ 1721.867746][T20256] Possible unsafe locking scenario: [ 1721.867746][T20256] [ 1721.875244][T20256] CPU0 CPU1 [ 1721.880631][T20256] ---- ---- [ 1721.886006][T20256] lock(&nbd->config_lock); [ 1721.890610][T20256] lock(&disk->open_mutex); [ 1721.897729][T20256] lock(&nbd->config_lock); [ 1721.904869][T20256] lock(&set->update_nr_hwq_lock); [ 1721.910184][T20256] [ 1721.910184][T20256] *** DEADLOCK *** [ 1721.910184][T20256] [ 1721.918331][T20256] 1 lock held by syz.5.3681/20256: [ 1721.923454][T20256] #0: ffff8880256c5a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 1721.932821][T20256] [ 1721.932821][T20256] stack backtrace: [ 1721.938723][T20256] CPU: 1 UID: 0 PID: 20256 Comm: syz.5.3681 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1721.938743][T20256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1721.938756][T20256] Call Trace: [ 1721.938764][T20256] [ 1721.938772][T20256] dump_stack_lvl+0x189/0x250 [ 1721.938797][T20256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1721.938816][T20256] ? __pfx__printk+0x10/0x10 [ 1721.938839][T20256] ? print_lock_name+0xde/0x100 [ 1721.938862][T20256] print_circular_bug+0x2ee/0x310 [ 1721.938886][T20256] check_noncircular+0x134/0x160 [ 1721.938909][T20256] validate_chain+0xb9b/0x2140 [ 1721.938929][T20256] ? stack_depot_save_flags+0x40/0x900 [ 1721.938955][T20256] __lock_acquire+0xab9/0xd20 [ 1721.938973][T20256] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1721.938997][T20256] lock_acquire+0x120/0x360 [ 1721.939011][T20256] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1721.939037][T20256] ? __mutex_trylock_common+0x153/0x260 [ 1721.939059][T20256] down_write+0x96/0x1f0 [ 1721.939081][T20256] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1721.939104][T20256] ? __pfx_down_write+0x10/0x10 [ 1721.939123][T20256] ? rcu_is_watching+0x15/0xb0 [ 1721.939154][T20256] ? trace_contention_end+0x39/0x120 [ 1721.939173][T20256] ? __mutex_lock+0x330/0xe80 [ 1721.939191][T20256] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1721.939213][T20256] ? blkdev_common_ioctl+0xfc3/0x2450 [ 1721.939233][T20256] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1721.939248][T20256] ? nbd_ioctl+0x131/0xeb0 [ 1721.939270][T20256] ? __pfx___mutex_lock+0x10/0x10 [ 1721.939289][T20256] nbd_start_device+0x16c/0xac0 [ 1721.939310][T20256] ? security_capable+0x7e/0x2e0 [ 1721.939332][T20256] nbd_ioctl+0x636/0xeb0 [ 1721.939355][T20256] ? __pfx_nbd_ioctl+0x10/0x10 [ 1721.939375][T20256] ? __asan_memset+0x22/0x50 [ 1721.939397][T20256] ? smack_file_ioctl+0x24a/0x340 [ 1721.939413][T20256] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1721.939428][T20256] ? __pfx_nbd_ioctl+0x10/0x10 [ 1721.939449][T20256] blkdev_ioctl+0x5a8/0x6d0 [ 1721.939468][T20256] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1721.939486][T20256] ? __fget_files+0x2a/0x420 [ 1721.939505][T20256] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1721.939523][T20256] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1721.939546][T20256] __se_sys_ioctl+0xfc/0x170 [ 1721.939570][T20256] do_syscall_64+0xfa/0x3b0 [ 1721.939607][T20256] ? lockdep_hardirqs_on+0x9c/0x150 [ 1721.939638][T20256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.939657][T20256] ? clear_bhb_loop+0x60/0xb0 [ 1721.939679][T20256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.939699][T20256] RIP: 0033:0x7fcfd1d8ebe9 [ 1721.939716][T20256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1721.939732][T20256] RSP: 002b:00007fcfd2b20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1721.939748][T20256] RAX: ffffffffffffffda RBX: 00007fcfd1fb5fa0 RCX: 00007fcfd1d8ebe9 [ 1721.939761][T20256] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 1721.939772][T20256] RBP: 00007fcfd1e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1721.939785][T20256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1721.939794][T20256] R13: 00007fcfd1fb6038 R14: 00007fcfd1fb5fa0 R15: 00007ffcd03b24c8 [ 1721.939812][T20256] [ 1722.329067][T20256] block nbd5: shutting down sockets