last executing test programs: 5m26.311651144s ago: executing program 4 (id=1104): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@var={0x8, 0x0, 0x0, 0xe, 0x2, 0x1}, @const={0xa, 0x0, 0x0, 0xa, 0x1}]}}, &(0x7f0000000100)=""/31, 0x36, 0x1f, 0x1, 0x5}, 0x28) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x22d}) 5m24.756480984s ago: executing program 4 (id=1111): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x1f, 0x49, 0xcb, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x3c}}, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5m23.195374067s ago: executing program 4 (id=1119): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, 0x140c, 0x4, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000056) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x400c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000300)=""/20, &(0x7f0000000440)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x167) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) fstat(r0, &(0x7f00000001c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x8d, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x10, 0xfffffffd, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x3, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x934, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x81, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xfffffffe, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x0, 0xfffffffe, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3, 0xbed}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) 5m22.958287854s ago: executing program 4 (id=1121): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x40}}, 0x0) 5m20.467587502s ago: executing program 4 (id=1128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x8, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x4, &(0x7f0000000540)={[{@metacopy_on}, {@verity_require}, {@workdir={'workdir', 0x3d, './file1'}}, {@xino_off}], [{@flag='posixacl'}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, '/dev/fuse\x00'}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dedb505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d5e02bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdc9e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705079f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff759fc677a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e402b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10fd534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb75bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eec747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x8, 0x0, &(0x7f0000004440)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000240)=0x7) dup3(r5, r3, 0x80000) 5m19.412613428s ago: executing program 4 (id=1130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x6, 0x2, "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"}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) 5m4.128850572s ago: executing program 32 (id=1130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x6, 0x2, "987f0ddab079c834f2848140abeafa5bf92cbf43b5e91f6bc5efc745f343d0dc7736a0e46865d21d09a75d5b5518bd216a3968e18ea90db9650cc766074a4b5a42934c1c1bd415c3af4c5add75ebedc2f07f089ff2ce5252cdce1fa0cf1f06b9d0afbb76e1f4f97cff0c82f6a39703deeb366e6c2dd5d63cf02905c58d18268f1b288bda472c91050f3ca69b7b983f665442a5f9f80e6f31fc771594d0b52154ecad9038afe4280ae2a5f34f6f9cffa99905f05d0735a5d7871b498ad197f3cd9fcaff0fddffe1e86bac16b6b821dab638a4c1e257fda37566c285ddc37931587ee626b62387b6f4bd8bf3cb54464d680eade01eb9bb0b6d6174092d9a50a10d"}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) 2m45.639540258s ago: executing program 5 (id=1597): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="11022dbd7000ffdbdd2510000000089c23003136b9f91e0dbd331ec19b26971a", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffe0}, {0xb, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004803}, 0x20004005) 2m45.144448016s ago: executing program 5 (id=1600): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f00000007c0)=[@code={0xa, 0x6f, {"48b81f380000000000000f23d80f21f835000000c00f23f86780bf10800000000f79a378000000c463c97e78380ec402a53acc0ffe7f220f01cac744240093790000c7442402a585d5f2c7442406000000000f0114240f01d1c4618dfded"}}, @in_dx={0x82, 0x20, {0x2562, 0x6}}, @wr_drn={0x6e, 0x20, {0x1, 0x5}}, @uexit={0x0, 0x18, 0xb65}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0x5c, {"450fdce766baf80cb8a89e2d8aef66bafc0c66ed0fc7610a64650f01c9c74424009d000000c7442402fc0f0000ff2c2466dfc10f078f8978c6a800000000b8010000000f01c1410f38cc03"}}, @out_dx={0xaa, 0x28, {0xa683, 0x2, 0x8000}}, @cpuid={0x14, 0x18, {0x9, 0x2}}, @out_dx={0xaa, 0x28, {0x391a, 0x4, 0xb}}, @out_dx={0xaa, 0x28, {0xf6be, 0x4, 0x8e3}}], 0x1cb}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0xfffd, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0x1, 0x0, 0x2, 0xb, 0x8, 0x5, 0xe2, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x3, 0xc, 0x2, 0x0, 0x2, 0x2, 0x90, 0x9, 0x4, 0x8, 0x4, 0x1}], 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_mount_image$btrfs(&(0x7f0000000300), &(0x7f0000000000)='./bus\x00', 0x4851, &(0x7f0000000180)={[], [{@uid_lt}, {@fsname={'fsname', 0x3d, '/dev/kvm\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}, 0x3, 0x5163, &(0x7f0000005900)="$eJzs3U2IVVUcAPDz5sOZFJyXENgqi0CqhYObiIieMkFF0SsXgxE4tQjShZMg0UIQW/S18JUUtZBcSS2SWRhBbVxIYQSzDQ1z4UYxkFy005h373lz37m++95M6vjx+8nMvef+z//c8x538f5vPPcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCG89OcXh6rip65OnT473dh5YMv0pX1T6+ZDqLWP1/L4jq3Pv/b2th0vj8eEmVezbb3ea8gs9VzWWNV1cCGv++fNEMJoMsBwvn1uTWnU4u6e8oCVrl3YfXTT3sbG44dbw1cunjlZfuksGF/pCayU/Lo6v3gtNdq/h5IenXbh0qt1XaJZfnrB3ZIXAQAsyWSzvel8HM0/4nba+9N40m4k7VbSjp8QWsXGcmTjruo1zw1pfIXm2chKhbGe80zi+fvfaTfT/KSdlBpLmGd317ykGe81z9kkvlLzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALidPPbuyCNV8VNXp06fnW7sPLBl+tK+qXXzIdTbx2tZuLb6w8ONf77feuzAz5u/OX7+xSeG87y4HSl0Dn/EnacmQnirEDkfh72wNoRmd6DdDF+XA++0d16IAQAAAO4mD7Z/D3XaWTk42tWutavJWvtflBWL1y7sPrppb2Pj8cOt4SsXz5xc/njNHuM1rjtep11f/KkVCuNY/qbjLcZj1z2lcaqlI6b1/JPnJv+tyi/V//Xq+j++c7ey/h/p9yYAAABwx1H/p+NU61f///DGX59V5Zfq/w1dpyzV/3HGsf4fCsur/wEAAOB2drPr/0ZpnGr96v+xV0a/rcov9q+FdfNhcrD6f6Q47Xjw9zjhXRMhTPabOgAAANBD/Lv74lcLsV7PvjlI6/VnHj94tmq80t//G4PV/6M39FUBAAAA/8eRr7Y/WhUv1f/Nwer/sZs6awAAAGAp3vt4/KOqeKn+nxms/l+db/OVD1nSL/F/IRyaCGF8YWc2C/waWs92AgAAAMANEuv0vz/f+VNVv1L9P1t9//94p4O4/r/r/n+l9f+FQHbXv6fdGAAAAIB7UXk9f7w9fvbkgl7P3x90/f9D9x18ver8pfp//2D1/3BxeyOf/wcAAADLcKc9/297aZxq/e7//8An7/9WlV+q/1uD1f9xu6b48k7Uatn788FECOsXdvK7CX4XT7crCcyNFgJtzSRjW8zIA3NjhUDbbJKxeSKEhxd29ieB+2OglQQur80DR5LAfAzk10MncCwJnIhX2pdr8+mmgR9jIF9gMRdXUKzpLIlIMq70ylgIXDfjTOfkAAAA95RYPOe17Gh3M6Sl7FytX4fV/ToM9esw3K/DSNIh7djreJjpDsTjrdMbl/b8/yOD1f/xrViVbXqt/w9x/X/+XMPO+v+ZGKgngbkYaKZ3DGjGc2TF7qfxHPVmnnF5fScAAAAAd7X4vcDwCs8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/9u49Rq6rPhz4mX2N9+HdTeAnQn4IllDHuOD12g4PtalYp6mKQinrkhJViGJjr8PiDTa2U3AEyLFBKYqgaYkEfxTFEUI1fyS1SBDQgOJGwihqeIiqCBIlIq0TRBSaBlBoiISr2XvP7J1zdx5r7/qVz0fyzpn5nuedmes59945AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCLw7FPfvhvW8Uf/N3VDz923eQHDm667umPXX3x90OYmnu8koUrA7d8YfKXd11198H7Ntxx74lrXteXl8vjYbD2pyu/84lY64mVIXytEkJPGlg7lAV68/tDsb5XDIVwUZgP1EtMD2Ql0obDt/tDOBzmA/WqvtEfwlAhcO0PH7j/07XE7f0hrAohVNM2Hq1mbfSngcv7ssBAGtjVkwV+czJTD3y9KwvAaYtvhvqL/uhUY4bRhcs1ef31LlnHzq50eN0xMdo83y82LXOnCvrSB6ZO62krVceyKL09jnm3nQfvttJ2vs3TVvwglX9COTkfqoau7dM7tt44uy8+0hXGx7ub1bRMz/NPnv3otsWkF/k6rJxu/xar9J/16JK8Dj/zvVV3da95+3fvXbvqySOvP/TU6Xbzx4VNWkwvt2rIX3Pn3f5k0v7kVP4bGOsN4Wx+6BrzoSuEsOP9v/eOVvHS/H+09fw/vpzjbVdD7ljrC8PZ3Dw+MhQTzwxnc3MAAAA4b5z2UdMVi29zsUdNd41/682F4iPVpL7S/H+ss/P/8ZT/UHG0x0KYnEscGgnhkrnHs8CXY3PvGwnh1XOpqcbApiRwLISXzyXW1KtKSqyIJcaSwM+G88BkEjgeA1NJ4EsxcFsS+EQMHE0C22LgWBK4KgbCTOM4fn84H0fHgf4Y2JJtxKPxKoRfDcfWkm31SL0qAACAJZLPDnsb7xaudTjdDHF6ebS/XYZ4BXbTDNWkhnQGW59WNa2hp10NXe1qqI/7QOvhl2qutKu5dBlGpTHDF379N+8MLZTm/xOt5//VBTpSKZ3/D2Hz3N+YuyuPzNbjW6YaMgAAAACnYfB/H/9iq3hp/j/Z2fX/8ZhIdyFzeCgehtg5EsJEYyCr9g/Lgeys92AeAAAAgPNB/Xx8/Vz4TH6bXaKdzqfL+acWmT+e+J9cMH/fsW9uadXf8vy/Idz0+v+BxtusE8djLz47Er/ckAW+E3tZC8wZi4GfvqUxkI//eNwAt8aq8gsT6lXdGktsiYGJJHC4WYkf1Etc0hjIn6x644fq45jJSxQCAAAAcMbFwwHxvHy8/v+y3274cKtypfn/lsVd/z83Dy5d3j87GMK6nhC60y8GPDSQLQwYA0OVPPGtgayu7rSqmwdCuLI2sLSqx/P1/3vSNQZ/2J9VFQOXXHbk2ctriS/2h7CuGPjRu+98Qy2xLwnUG//L/hBeVRtt2vhXV2SN96aNf25FCK8sBOpVvW9FCLXG+tKqHqjmv2OQVvXP1RBeUgjUq3pjNYT9Dc/iBbNcJcCLQfyvdHvxwb37b9q5dXZ2es8yJuJ/Fv1hx8zs9Pi2XbPbq036tD3pc8MyRjeXx9TpL988ki9R9K57Ng91kq5/T3Ci2FZ+HL904WB+P34W6p0b54behrsb0yG/9jXlJkLhk1SzIXct85AHipXMP4ml+mP+vjAYVty4d3rP+Ee27tu3Z332t9PsG7K/8TRTtq3Wp9tqYKG+dfDyaLpaVuJUt9XqYiXr9t2we93e/Tetnblh6/XT109/cP0bN0xcMbFx4k1XrKuNaiL722aoqxeqOhnqyTs7HNcSDvXSnkIlDW/y0LW8uw8JCYmzmugJnWbeNbg631Nd1r/Q7qc0/9/dev4f9zpxz59X2uz8/2g8zZ9fVlA/zb8lBg53ev5/tNnZ/PqFAWNJ4EAMHHCaHwAAgAtDPBwZj2bGo9I/X/PVJ1uVK83/D3T2/f8lWv+/vnT9Nc2W+V8TS0w0W/8/Xea/vv7/gWbr/6fL/NfX/z98Ftb/v7EeSDbJr6z/DwAAXAjO3Pr/bZf3T38goJSh7fL+6Q8ElDK0Xca/0x8IWPT6/4/+51/9d2ihNP+/rbP5v4X7AQAA4Nzx8T/78P9rFS/N/w93Nv8/8+v/hWbX/481C0w1WxjQ+n8AAACcp5qt/zd6y8B7W5Urzf+Pdjb/j5dddDXkjrW+MJytaRfSNe2eGa5/ZQAAAADOD11hfLy3w7wNK6NuOvU2f5IvBdoqXfT4n5xY3PX/xzqb/zd8L+Mz31t1V/eat3/3hXvXrnryyOsPPTV//h8AAABYPp0elwAAAAAAAAAAAAAAAM6+x//j4MZW8dL3/8Pmucebff8//u5f/H7BSxtyx1rbr/+X37/2bXfvn1uy8KHhEF5TDOw8uPOikP82/+pi4P73rHlZLXEwLfHNx656opZ4bxp469qLn6slrkwCW+IiiS9PA/FXFZ9bmQTi8or/ngbi9jiaBvrywKdWZuOopNvq50PZtqqk2+rhoRBGCoH6tvraUNZGJR3g7UmgPsAPpYE4wD/PA11pr+4ezHoVA0Ox6B2DWa8AADhnxU+BvWHHzOz0RPwIH28v7Wm8jRqWLLu5XG2lw+YfyZcme9c9m4c6SXenn0Xnf2u8N1RrQ1hf+rhazFKZG+XS1NJm0720yZDbrfbW1aRcarGbrq/5iPqzEY1v2zW7vbftwDe2z7Khp22W9aXJTjFL19wm7aCWDvrSwYg63DYddDne7wrj491Jrj+IwdHQoN0rotPv6xfX+Wv2Kijm+eCJQ79pVV9p/j/a2fy/WhzXc/mPARyIv6z3dyOW+QcAAIDl9alNz38+/nvnLQ/+qFXe0vx/rLP5fzyClZ8Kzo52HIu//39oJIS5n9YfzQJfjs29bySEV8+lpmKJ7Af1r4klJrLAl+MBkzWxxJapxqpWxMDRJPCz4TxwLAkcj4H8KMWRkB/K+fvhEN4wl9rcWGJ3LDGaBN4RA2NJYDwGJpLAyhiYTAJPr8wDU0ng32IgzDRuq3tW5tsKAABgMfJ5Vm/j3ZDO8472tMtQaZdhoF2GrnYZqi0z9IajzUYR738lZuitlLdCfKg3bbY/qaWUIf4YftOOt9269dP/P2jMmRYsNR2vP6hfb1BpzHDfm3uqoYXS/H+is/n/QONt1vrxOP+f//2/LPCd2L3PxkvHx2Lgp29pDOQHBo7Hye6t9aqm8hL5pP3WWGIyBsaSwO4YmEwCWzbngcMvawzkM+1644fqjc/kJQoBAAAAOOPiAYJ4mCbO/+/Y+8nBVuVK8//Jzub/sb3BYmOfiLWeWBnC1yrzvakH1g5lgXgcYyh+Pf4VQyFcVDjAUS8xPZCV6EsaDt/uz76h3pdW9Y3+7MsH8f61P3zg/k/XErf3h7CqcPSl3saj1ayN/jRweV8WGEgDu3qyQDzyUw98vSsLwGmrHxWML6j8Upe60YXLNXn9XSi/CZoOr3QMdIF8C33narmUDrjmx1TrFve0tTx+y5IpvT2Oebedj++2Ue+24gep/BPKyflQNXRtn96x9cbZffGR4jdZS5bpeS5+S7VVOj0FFp3C6/DAqfe2vWragYlk9zGxcLmFX4eVWN1nvrfqru41b//uvWtXPXnk9Yee6rgbTcQvCj/wsX8d+nFhUy+3ashfc+fd/mTK/uS8+G8geXePedpCCJuf/tytreKl+f9UZ/P/nuR2zvNxY+4dCeG1hY37UNz8fzyS7QcLgWwv+ZJyIDvl/l/DTfecAAAAsNTqhzvqxwtm8tvsgvB0nlzOPxXCyZFF5I/HKyYXzN9pvwf++j2rWsVL8/8tref/K5JuLsv5/0rhqILz/7xYOf+/oHP9UPSK9IEDp3UoulQdy8L5/wWd6+825/8XdMGc/1+o3eD8f9tuNOH8fxvtzv83269f4PuTU3ramu5Tll7pU9JuH7pCCE/+0bcebhUvzf93dzb/t/7fwov21df/29Js/b/dzdb/O2D9PwAAYFk1WWguneeVVu8rZUhX7ytlaLtAYNslBluv/9dinb0LZv2/0kZtt/7fE5c++tvQQmn+f6Cz+X98OQwWWz9f1v8b29ykqttiYLeFAQEAADgXNTs2AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNl13z/8z/ZW8Qd/d/XDj103+YGDm657+mNXX/z9EGbmHq9k4crALV+Y/OVdV9198L4Nd9x74prXVfNyvfnt/2/IHWt9YTiEw4VHhmLimeHanfnAtW+7e39PLfHQcAivKQZ2Htx5US3xpeEQVhcD979nzctqiYNpiW8+dtUTtcR708Bb1178XC1xZR6opN39x5VZdytpdz+9MoSRQqDe3Q+sbKyq3saf5oGutI1/GsraiIGhWPTzQ1kbMTAbS8ysCGFdTwjdaVUPVrOqutOq/qWaVdWdVvXxaghXhhB60qoe68uq6klH/v2+rKoYuOSyI89eXksc7gthXTHwo3ff+YZa4kNJoN74X/SF8KraSyZt/Cu9WeO9aeO394bwyhBCX1ri1z1Zib60xOM9IbykEKg3/v6eEPYHLghx59OwR9u7/6adW2dnp/csY6Ivb6s/7JiZnR7ftmt2ezXpUzOVQvrkzac+9kee/ei22u277tk81Em6Jy/XO9flDb0Ndzee672P/RooVjL/fJTqj/n7wmBYcePe6T3jH9m6b9+e9dnfTrNvyP5259FsW60/X7bV6mIl6/bdsHvd3v03rZ25Yev109dPf3D9GzdMXDGxceJNV6yrjWoi+7sUQ73zzA/10p5CJWdiB9B54vmT50Q3JCRe9Imuhr3bxJLvyG9b2r1b6YP+fEd7Q3VuB12aVhSzVOZGuRSD3tQmcwuL/pzSdkTrSxOHUpYNC2S5uTHLxtJkYr6W/izL3Oe60uSw2FjX3CaN97vC+Hh3s+0w2ni3uHl/cRqb9yf5pus0DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//9kISJ2") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x81, 0xffffffffefffff14, 0x3, 0x100000000, 0x3, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m41.367844543s ago: executing program 5 (id=1612): openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) socket(0x10, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x106, 0x3}}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2m40.84730108s ago: executing program 5 (id=1614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, 0x0, 0x0) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000c00)={0x22, 0x4, 0x1, 0x4, 0xfa}, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xd, 0xcc, 0x20, 0x545, 0x8333, 0x8f86, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x1a0, 0x20, [{{0x9, 0x4, 0xfa, 0x10, 0x0, 0x3e, 0xb2, 0x2b, 0x8}}]}}]}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0xf3, &(0x7f0000000580)=ANY=[], 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000400)={{0x3, @null}, [@rose, @bcast, @null, @rose, @null, @netrom, @null, @bcast]}, &(0x7f0000000480)=0x48) accept$netrom(r3, &(0x7f0000000940)={{0x3, @null}, [@null, @rose, @remote, @remote, @remote, @rose, @rose]}, &(0x7f00000004c0)=0x48) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}]}, 0x60}}, 0x2) listen(r4, 0xfffffffe) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000a00)=@abs, &(0x7f0000000a80)=0x6e) connect$unix(r6, &(0x7f0000000ac0)=@file={0x0, './file0/file0\x00'}, 0x6e) accept4$unix(r4, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x121498, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1000, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs2\x00', 0x1ff) ioctl$EVIOCRMFF(r2, 0x41015500, &(0x7f0000000500)) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80080}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x3d8, 0xa, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x10, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6e9}, @NFTA_SET_DESC_CONCAT={0x4}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x364, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b16}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff80}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbfe8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf20}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf3d0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c31}]}]}, @NFTA_SET_DESC_CONCAT={0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1442}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x15ae}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa02}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4199}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x760}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40000000}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0xcc, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x75}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c1c6e47}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}]}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x7e81e6cea09de8d3}, 0x4000000) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0x30, 0x61, {0x61, 0xe, "29f54869b68316b9efb80ec7fd52a04c790cf8c6d96e40d5911b60f93315a9120db97046922030c52507069e1a3e2c2012522b619e985af0f7330f96e294a9b1066ad97e6a2a4b626a34245313ffa1736524662c8c6294e4bab20481e17d7a"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x20, 0x16, 0x88, "078a09bad64b0ba1b7164f25a884b7349dcaf23c546219af392725f0f7fafab237cddc06dcf07274396406748d5f22a4f3d0a7248c887826390c6796d31b08a4db85bd5df190279e829caf552e5581f390911f9627acd72df3c23b16eef7c2ab796775b37afeef9d24abdb51eed01b0fb3d729b689e96a50d664ebf34718c92239ba1cd17a85231c"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000b40)='./file0/file0/file0\x00', &(0x7f0000000b80), &(0x7f0000000bc0)='./file0/file0\x00', 0xe, 0x2) 2m37.437282994s ago: executing program 5 (id=1625): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x590}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="a1", 0x1}], 0x1}}], 0x2, 0x8008801) r1 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x20000, 0x5}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000680)={0x4, 0x4f4a, 0x85fc}) syz_emit_ethernet(0x1f2, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="541041e4a2ab0000beb03675e8d3ffe7a8c12c343eb94a7bcaf680081ceea9f56ecb817e0e091c6825aec84d5169ef7823c725779dffb6bfbce63347c3f00f09b21c5abba1317051d6e4b3a844bb3ef4a34129f92ed8ee1acd4f8326ed493edcea2aa2"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000007b060000020000000900000080000000", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000003000000040000ef4edb5662f92ca13a2dac2b5dec43436be42cd4c4e97d70ec9a85da8a000000"], 0x50) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000000000005ff9f786e5e67dd08debdeae00000000009585502d000000000000000086e1ee82747778c9495087859acb517177923be71ae6e3dac9bb9332a6deeaeaa2c4a75d305f88e0e1a6db5e1a898c6dc1a7a35aa3fe0d5b09bba0ad435e231ec6d4e50b7e328d312d66f20075ca53e14e630f0d5391fb61b3083851b0b4174ae5e375b1caf559e5109437ac6d1791fa6c490c839abe6c29801f9d05ee155b"], 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000340)={0x0, 0x0, @auto=[0x2e, 0x3e, 0x15]}, 0xb, r4) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r4}) r6 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000100902ff01010000003f0904", @ANYRESHEX=r1, @ANYRES32=r2, @ANYRESOCT=r5], 0x0) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000006680)) sendfile(r7, r7, 0x0, 0x800000009) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000000000000000f9000000000000ff020000000000000000000000000001"], 0x0) sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)="85", 0x1}], 0x1}}], 0x1, 0x4880) 2m35.58758312s ago: executing program 5 (id=1632): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020480000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1011, &(0x7f0000002e80)=""/4113, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 2m35.10645481s ago: executing program 33 (id=1632): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020480000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1011, &(0x7f0000002e80)=""/4113, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 7.418508719s ago: executing program 0 (id=2287): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000400000008000000010000000000", @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000005"], 0x48) r3 = syz_io_uring_setup(0x6a77, &(0x7f00000001c0)={0x0, 0xef55, 0x8000, 0x3, 0x13b}, &(0x7f0000000040), &(0x7f0000000140)) r4 = syz_io_uring_setup(0x24f7, &(0x7f0000000380)={0x0, 0xd138, 0x4000, 0x0, 0x62, 0x0, r3}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x102, 0x1, {0x3}}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) listen(r1, 0x802) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'nr0\x00'}) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r8, &(0x7f0000001380)={0x2020}, 0x2030) 6.650861492s ago: executing program 0 (id=2292): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x219, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0x2, 0xf}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd29, 0x70bd2d, 0x70bd27, 0x70bd28, 0x7f, [0x0, 0x7, 0x7, 0x5, 0x80, 0x0, 0x5, 0xfffffff7, 0x6]}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x27c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r8, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000340), &(0x7f0000000480)=0x4) ptrace$getregset(0x4204, r9, 0x200, &(0x7f0000000380)={&(0x7f00000002c0)=""/6, 0x6}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x1f, 0x0, 0x0, r10}}, 0x18}}, 0x0) r12 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r13}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f00000003c0), 0xb315) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01"], 0x3c}}, 0x0) 6.564610247s ago: executing program 6 (id=2293): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x4a, 0x0, 0x58}, 0x20000000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r3, 0x0, r3) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) (async) r5 = getpgrp(0x0) sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x6) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r11 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r11, 0x540b, 0xfffffffffffffffc) (async) close(r9) 6.419291117s ago: executing program 3 (id=2295): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x7, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x10, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0x9}, @global, @global=@item_4={0x3, 0x1, 0xa, "b0efbc16"}]}}, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x30}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x80, 0xa6, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xd, {{0xb, 0x24, 0x6, 0x0, 0x0, "f998e15d6010"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x9, 0x7f}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0x41, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x28ceb722ab6e7a49, 0x9, 0x2, 0x91}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7a, 0x7, 0x1}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x240, 0x2, 0xb5, 0xc, 0x10, 0x2}, 0x46, &(0x7f0000000180)={0x5, 0xf, 0x46, 0x2, [@generic={0x37, 0x10, 0xb, "fcef4a8247bab92634a137fff7ac1ec9ba125832b5c23d99b3cf1c0ddafcd8e48f0959fa44755f3e61789affba8b081ffa739bae"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0x9, 0x6}]}, 0x1, [{0x48, &(0x7f0000000200)=@string={0x48, 0x3, "0f1e9a31f8525ed48a4fb50b93dd491ba1cb7439eae1d3337f1cb208c5744fdda8bb3f765f432e61e8a0108efef20e2771d203beaf0748686217c5c238f32269578c265af74d"}}]}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x7, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x10, 0x40}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0x9}, @global, @global=@item_4={0x3, 0x1, 0xa, "b0efbc16"}]}}, 0x0}, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x30}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) (async) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x80, 0xa6, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xd, {{0xb, 0x24, 0x6, 0x0, 0x0, "f998e15d6010"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x9, 0x7f}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0x41, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x28ceb722ab6e7a49, 0x9, 0x2, 0x91}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7a, 0x7, 0x1}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x240, 0x2, 0xb5, 0xc, 0x10, 0x2}, 0x46, &(0x7f0000000180)={0x5, 0xf, 0x46, 0x2, [@generic={0x37, 0x10, 0xb, "fcef4a8247bab92634a137fff7ac1ec9ba125832b5c23d99b3cf1c0ddafcd8e48f0959fa44755f3e61789affba8b081ffa739bae"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0x9, 0x6}]}, 0x1, [{0x48, &(0x7f0000000200)=@string={0x48, 0x3, "0f1e9a31f8525ed48a4fb50b93dd491ba1cb7439eae1d3337f1cb208c5744fdda8bb3f765f432e61e8a0108efef20e2771d203beaf0748686217c5c238f32269578c265af74d"}}]}) (async) 6.187589065s ago: executing program 0 (id=2298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000000000000000ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1b2aecad0d609f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000b3000040"]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x218, 0x61, 0x11, 0x98, 0x200000}}, &(0x7f0000000000)='GPL\x00'}, 0x94) mkdir(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6d", 0x9) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, 0x0, 0x0, 0x40800) 5.115892786s ago: executing program 6 (id=2301): r0 = socket$inet6(0xa, 0x3, 0x30) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x7fb, 0x913d, 0x6, 0x0, 0xf42, 0x8}, {0x10000, 0xffffffffffffff01, 0x200, 0xfffef7fffffffffe}, 0x0, 0x6e6bb3, 0x1, 0x0, 0x4, 0x2}, {{@in=@local, 0x0, 0x33}, 0x0, @in=@local, 0x3502, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}}, 0xe8) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20000000) (async) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01f5050023000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) (async) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f0000000080)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0xf, @private1, 0x4}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x3}]}, &(0x7f0000000100)=0x10) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/72, 0x48}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) (async) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) (async) acct(&(0x7f0000000140)='./file0\x00') (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) 5.112236942s ago: executing program 0 (id=2302): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) getpid() r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4c, 0x9f2, 0xe7, 0x3, 0x2, 0xb1, 0x8, 0x5, 0x4, 0xe, [0x1, 0x2, 0x2, 0x3, 0x6, 0x6, 0x200, 0x1000]}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, &(0x7f00000001c0), 0x4) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xc0) 5.039359506s ago: executing program 1 (id=2303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000229140002007465616d5f73a344302839adfe3f0aa2a7f36c617665e92c7c6e45b4bcbeea036f5f310000000014f5ee0076657468315f76697205007769666900"], 0x40}}, 0x4048004) 4.995240997s ago: executing program 6 (id=2304): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000357000/0x3000)=nil, 0x3000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x9, 0x0, 0x64, @local, @private0, 0x80, 0x40, 0xa274, 0x1}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r7, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x811}, 0x4004840) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 4.138941836s ago: executing program 1 (id=2306): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x3, 0x0, @private1}, {0xa, 0x0, 0x9, @mcast2}, 0x1, {[0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3d5a]}}, 0x5c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x120000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x40, 0x22c43) fcntl$setstatus(r5, 0x4, 0x40400) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000dcdbdf250700000008000300a7613bf373372db1ff2e13f4c876c4857981a2068b8b1e933af70221550700000000000000087eaff464e813f35730643cac4500dbbe877e7b636489421810ce23f5d738f1d4dafc5eef4b0cb2e845f51f696859b73199503e997d6c2cfb7b1945adf13feeb68ad1c7ed14ee79ce063b50c7f9e1058aaaff95871603e9775b4ea3abcf150586a09531a1f5c1512511b9d189388383f83a19f682b0295b521ac99d8ec5b3", @ANYRES32=r6, @ANYBLOB="140004006e69637666300000000000000000000008000500060000000c0017800400060004000400"], 0x44}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b405000008400000691118000000000066050000084000009500000000000000c002"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009e173710ef171e7206de0102031d090212000100000000090400000002"], 0x0) clock_gettime(0x0, &(0x7f00000000c0)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000500010000000000000007000000", @ANYRES32=r9, @ANYBLOB="505204070000000014001a80100004800c000280"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x60040140) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000003004300"], 0x8) r10 = epoll_create1(0x0) r11 = accept4$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10, 0x0) fcntl$setstatus(r11, 0x4, 0x6800) ioctl$FS_IOC_SETFLAGS(r10, 0x40088a01, &(0x7f0000000000)=0x10) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000380)=0xc) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001900)="0200000000000000", 0x8}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002e80)={0x1524, 0x3f, 0x107, 0x70bd2c, 0x0, {0x1, 0x7c}, [@generic="0e56ab7c5f893f16466171aa19cb5b9b7fe5cab9abe8f8fbca6d674daf4bd5392204930201effdd10ed9a8e21b60", @nested={0x139, 0x1, 0x0, 0x1, [@generic="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", @typed={0x35, 0x150, 0x0, 0x0, @binary="c31a5e8ae1a7fe554712e6d1a115f5c81a242cf7aa8677f65277bb0a2dc72386d381e1dced089021ffc0305ae9b30d0008"}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x19, 0x0, 0x1, [@generic='\x00']}]}, @nested={0x1304, 0x69, 0x0, 0x1, [@nested={0x12ca, 0x54, 0x0, 0x1, [@nested={0x4, 0x65}, @generic="d8d9cc3423636db02f4c891b224e7c5ae8ce2ab6dba0ddbc241969a34dca8a16c6740d069ba47ecf76fd59fb2d869ef412da90cc40b79ef1922aab644ea2c1366b7568a7308b46d794319f18e0152b4ae739e39d010d6a334f166b3df7c4b80b95b5692a2b2edc7e0fa717f5f23dfcfb9c1ef496a09c86e91e09ac56783eee73c4df2cd3d499ecc831cf77e56a75ef5546644d62d30697229bbe5a3fe0f7b1be7329c6757257b44910ed2a4abe96102d7dcf508302d910e4ebab428a8a7bf96bc524da2430e214751363a75e89e76637f2df30f4428cc98a91a8", @typed={0x14, 0x104, 0x0, 0x0, @ipv6=@empty}, @generic="03370d8525b43c04b4e484870b58a2d082d50eeebc126c264a140b3deb0d220a9061e357d0894e942578ff545e17982bc781b334608bb3b02375d5cf89b0185e26f829585dc2ddcaca56c19b630c7952eef28afcc7a9ca8a1bff8156c0209d4ccf49dd8edffa8ba8370b68753af6138bd49f22834ce5ecf87e62b91594f0455738fc70af49cc10342076ae4c80dc6ca958dd518151aea8516839d48304f24e576908993c01606e30ce9427346a2b9f0a445ddc49e576024caac495dcebb28f9ede1a536431efbeee656c6334d28e9dd717ce9ada69", @generic="8b0f3e75b88ca2929bba1881b4492be5a7b3e0baf61c2526492f0654a923aa9df630d575c560c8e63fac8f561bf45a45318ed461ef56b78122ead4030c418d3d2ad95678ac6d1deaf9aa7b246cfcdea53b8d1d50f43cd174185594852605e0e571147fca92b65306732e3d9552bad9c4741fdbf3b649bf885087f1e6eadcffcbfcdaa60f106c6ac78c5bcdc07be564bd9599ba", @typed={0x61, 0x62, 0x0, 0x0, @binary="f9596658f1915d458fe5bc6e4c3a2886cab4a37c22b9e1bacf6eff717db5e5708f0396740748ae620b9d6bb7e24e92664743fa6380e85294108dd57d01e432ebb40762c6c74d4b40cb552c97bfe7e6836c7ff9db001ae37748aa74d0bd"}, @typed={0x1004, 0x60, 0x0, 0x0, @binary="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"}, @typed={0x4, 0x4b}]}, @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x5, 0x55, 0x0, 0x0, @str='\x00'}, @generic="7a3cdf689c96c79fc9132a77c32775c28d1c26b3b11e80b9f967456a3ec797915dc42113"]}, @typed={0xc, 0x69, 0x0, 0x0, @u64=0xf7}, @typed={0x8, 0xad, 0x0, 0x0, @u32=0x2}, @generic="64b438adc409adb2f9ab8b13506bf190ba03d24d134fcea87c2851c23996cb1dc2ec7d2b39e66e8d52c3c7dfa319ef62fca9e1517b48d2ecaf20226305b1d764e4a070928dc57e237c24124a406f86f0db5e1e39ce115abe5b04a2bb9c5077d0677d0e68ff088638140c2f585d99cd8e", @typed={0xd, 0x11a, 0x0, 0x0, @str='/dev/sg#\x00'}]}, 0x1524}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000890) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) 4.010533298s ago: executing program 3 (id=2308): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @remote, 0xf64d}, 0x1c) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@isdn, &(0x7f00000000c0)=0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x6, 0x1, 0xff, 0x6, 0x84, 0x400}, 0x20) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000140)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x3, 0xb, 0x10, @remote, @remote, 0x40, 0x7, 0x7, 0x4}}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr=0x64010100, @in=@broadcast, 0x4e22, 0x3ff, 0x4e24, 0x0, 0x2, 0x0, 0x80, 0x6c, r1, r2}, {0x1, 0x9, 0x80000001, 0x8, 0x9, 0x7, 0x98}, {0x5, 0xfffffffffffffff8, 0xd, 0x478d}, 0x8, 0x0, 0x0, 0x1, 0x5, 0x1}, {{@in6=@remote, 0x4d2, 0x6c}, 0x2, @in6=@private2, 0x3505, 0x2, 0x2, 0xf, 0x4a1, 0x0, 0x9}}, 0xe8) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000840)={0x0, 0x0, 0xa, 0x8, 0x120, &(0x7f0000000440)="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"}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000880)={0x0, 0x0}) prlimit64(r4, 0xa, &(0x7f0000000900)={0x4, 0x1}, &(0x7f0000000940)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f00000009c0)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x280}, 0x5c, 0x40, 0x3}) getpid() r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x8001, 0x4, 0x3, 0x4, {0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcf}}}, 0x3a) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x1a, 0x0, 0xffffffffffffffff, 0x5, '\x00', r1, r5, 0x1, 0x0, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={r7, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x9) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x1, &(0x7f0000000c00)=@raw=[@ldst={0x0, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff4, 0xfffffffffffffff0}], &(0x7f0000000c40)='GPL\x00', 0x400, 0x1b, &(0x7f0000000c80)=""/27, 0x41100, 0x0, '\x00', r8, 0x0, r3, 0x8, &(0x7f0000000cc0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0xd, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000d40)=[{0x3, 0x4, 0xd, 0xb}, {0x2, 0x5, 0x1, 0xa}, {0x3, 0x4, 0x3, 0x3}, {0x2, 0x3, 0xf}, {0x1, 0x1, 0x4, 0xb}, {0x4, 0x5, 0x8, 0x2}, {0x2, 0x2, 0xd, 0xd0489ff1b6814d7a}, {0x0, 0x3, 0x5, 0xb}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e80)={&(0x7f0000000bc0)='ext4_ext_handle_unwritten_extents\x00', r9, 0x0, 0x2}, 0x18) r10 = socket(0x2e, 0x2, 0x3) ioctl$INCFS_IOC_CREATE_FILE(r10, 0xc058671e, &(0x7f0000001080)={{}, {0x3}, 0x62, 0x0, 0x0, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)="3702a11558da0234a22d979de031b769cfcd96d6a0bb7029c6a9da6266bf7f91e01f61464e06a3bb659471148616ffa3f2", 0x31, 0x0, &(0x7f0000000f80)={0x2, 0x1c, {0x1, 0xc, 0x0, "", 0xf, "8fd4cad8747d2b2f14aadc3d4c63bd"}, 0xa8, "50328a74bb43cf3dfd52d545d273bbd4e27e974f9d933369dea4b968225dd1cfdde1fd6d2b75c09668af1340f5f2c511af43da907b5f01f12811815423657d759e4d3f848f7a438c150a5f997f7a3ddfcfb4604dde70a5b4d5647fcbfca199f600569798090a82b42cfe70ff8b146fea90da2b621ef021c6e278251b77d94f07228eb2461556e677969c17e003bd4ae28b2614fb34709886d0440765a75efcd2649d8d9614a76086"}, 0xd0}) ioprio_get$pid(0x0, r4) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r11, 0x5413, &(0x7f0000001100)) accept4(r5, &(0x7f0000001140)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000011c0)=0x80, 0x80800) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000001200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r5, 0x3b83, &(0x7f0000001240)={0x28, 0x2, r12, 0x0, 0x16970e, 0xe3, 0x4, 0x94831}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x2, 0x4) 3.927508075s ago: executing program 3 (id=2309): timer_create(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0), 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000), 0x2480, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000002180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt(r4, 0x3, 0x80000001, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002040)={0xaa, 0x22c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f00000003c0)={&(0x7f0000002100), 0xc, &(0x7f0000000240)={&(0x7f0000002140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000002080)=[{{0x4, 0x1, 0x1}, {0x4, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x10) mkdirat(r5, &(0x7f0000002140)='./file1\x00', 0x9) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="71756f74612c00b9095a737c"]) r6 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000901, 0xffffffffffffffff, 0x0) 3.870973103s ago: executing program 6 (id=2310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_gettime(0x3, &(0x7f0000000300)) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000097000040"]) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) socket(0x400000000010, 0x3, 0x0) 3.527511627s ago: executing program 2 (id=2311): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x11}]}, 0x18}}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x33424752, 0x1, @discrete={0x1, 0xd2c}}) (async) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xdc, 0x1, 0x3, 0xfffffffffffffff9, 0x3, 0x3e, 0x1001, 0x101, 0x40, 0x2001df, 0x0, 0x3b, 0x38, 0x0, 0x27, 0x5, 0xff}}, 0x40) close(r4) (async) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x1, 0x3ff, 0x6, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x0, 0x395, 0x8000008b, 0xfffffffe, 0xb, 0xfffffff5, 0xffffead7, 0x3, 0x3c, 0xfffffffa, 0x4, 0x8000000, 0xdffffffa]}) 3.270817251s ago: executing program 1 (id=2312): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x41, 0x1}, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_emit_ethernet(0x165, &(0x7f00000003c0)=ANY=[@ANYBLOB="a36c224a428e94bdeecdf056df91c71b5872f99f7f8d916b7e86163c0267108430b9b80332e43582e146a522636d63c1ab4ee31041c0249f450d312f2af9d3f90edb970ac20dee73ba18a2683e15a544f25e6776833fc2feb3e4e158eff1706157a333104e7c918c1254862e6d7bb2a53d3ebc136a2e004bce36c3f23713ef873e0e3b4fb41f611f928dc707cb473d70385a95d7fdb04c1122bb0038c2c7e30dbce2d9fdde66f7af8f5982914bec72fb11565899f2ad8cf0dff510552927d756f25b60772052e6f3ea1046ff314c68fb3dcf", @ANYRES16=r1, @ANYRES64=r1, @ANYRES32=r2, @ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req={0x4, 0x6, 0x7, 0x2}, 0x10) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffff7f7fffffffc) ppoll(&(0x7f0000000000)=[{r4, 0x207}], 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES16=r0], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x8, 0x1}) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000380)={{@host}, 0x0, 0x800000000000000, 0x1, 0xfffffffa}) 3.246041986s ago: executing program 2 (id=2313): wait4(0x0, 0x0, 0x1000000, 0x0) (async) wait4(0x0, 0x0, 0x1000000, 0x0) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) (async) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r7 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0x48}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0x48}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0000000000000000b94dcf5c046134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7def4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb5080025ccca9e00360db70100000040fad95667e006dcdfc317a4a15168bf01d809d5e1cace81ed315871c9dd5ab6f5ee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000", 0xd1}], 0x1}, 0x60044884) fanotify_init(0x40, 0x0) (async) fanotify_init(0x40, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f00000004c0)="239a104a2400dfd3c698abec2f0bc9eea416db7ce6e25c32ecddc42a5b48891bd835fa9b6907fd9f1fbd04f8e1c87779ab85808214586e2312d7008c3ab27e2da65326ad3bc78021965e597074fba2a21820396bf23cd46f29b1d2fcc201a4c586f759b44d2c2521e907b46978ba4fd1f49f59b7860d64bd3fbf32a00e885f8117dcca9a4580cc66f23bfacc9d3a87189cbf40", &(0x7f0000000600)=""/130, 0x4}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f00000004c0)="239a104a2400dfd3c698abec2f0bc9eea416db7ce6e25c32ecddc42a5b48891bd835fa9b6907fd9f1fbd04f8e1c87779ab85808214586e2312d7008c3ab27e2da65326ad3bc78021965e597074fba2a21820396bf23cd46f29b1d2fcc201a4c586f759b44d2c2521e907b46978ba4fd1f49f59b7860d64bd3fbf32a00e885f8117dcca9a4580cc66f23bfacc9d3a87189cbf40", &(0x7f0000000600)=""/130, 0x4}, 0x20) 2.531518062s ago: executing program 2 (id=2314): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0xe4, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="8403e269f1ac5f71b98dd02851c062972dab50fd41dcaa08d2df620f2d5a8a26437fab97c86ddba3460491c44cf975d06092b1d9c16e590a2d8320e68f965b5e3adb4a1f782fe1c39a2bc966504e38c2b8d3c140aabca3cbf8fc593f3b59d2ab9d1d5e9172831aa7e05b5c88a82f62e96ef0422fe2bf6c93bd0d86c8d11099e32222f511b51cd2c9807613570ee7b678e95fdcec216820d3cf8717e350c8d564b0ba4b5ac6f91709cc34ec04340d4495e2a1bad5a7444d278c010d927172973c65a1026658"]}, 0xe4}}, 0xc00) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x60, 0xbb, 0x41, 0x8, 0xc2e, 0x700, 0xe13b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x1, 0x2, 0x23, 0x53, 0x83, 0x3, [], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x38, r2, 0x5, 0x70bd28, 0x0, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="261dc949268a"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x810, {0x3, 0x2, 0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x60}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40050) (async) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x60}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40050) 2.506119818s ago: executing program 0 (id=2315): syz_io_uring_setup(0x235, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0xffffffff, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x14, 0x2b, 0x1, 0x70bd2d, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.499081611s ago: executing program 3 (id=2316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000229140002007465616d5f73a344302839adfe3f0aa2a7f36c617665e92c7c6e45b4bcbeea036f5f310000000014f5ee0076657468315f76697205007769666900"], 0x40}}, 0x4048004) 1.703164676s ago: executing program 2 (id=2317): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) syz_open_dev$MSR(&(0x7f0000000100), 0x9, 0x0) r2 = socket(0x1, 0xa, 0xe2c) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000140)={@loopback, 0x0}, &(0x7f0000000180)=0x14) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000001c0)={@empty, @local, r3}, 0xc) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80008c0}, 0x44810) sendto$packet(r2, &(0x7f0000000380)="6e21c47848280aafa8d8007bab5c4f09745146ccbdf298953b1058576d9ec269846796be7a7c53be8945100888ce063ca09f0e4df52cf390ff36fd75c345936e2e2ca9f68046ca0c34f40e6b7cd9aff709ebc71e8e02f928036ba4457bbca4b506c8fc1f4a488891aeb34851848a871c8c0e31be87940d01", 0x78, 0x4040001, &(0x7f0000000400)={0x11, 0x1c, r5, 0x1, 0x5a, 0x6, @local}, 0x14) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x25}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x20000001) r7 = socket$inet6_sctp(0xa, 0xb82bc0a99b8c623f, 0x84) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000580)={0xffffffffffffffff, 0x4, 0x3, 0x600000, @vifc_lcl_ifindex, @loopback}, 0x10) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x19) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000005c0)={0x0, 0x8}, 0x8) pselect6(0x40, &(0x7f0000000600)={0x401, 0x2, 0x2, 0x80000001, 0x5, 0x3, 0xfffffffffffffff7}, &(0x7f0000000640)={0x3, 0x5, 0xa, 0x51fd, 0x0, 0x3, 0x8, 0x1}, &(0x7f0000000680)={0x80000001, 0x1b, 0x4, 0x100, 0x4be7feeb, 0x3, 0x100, 0xffffffffffffff16}, &(0x7f00000006c0)={0x77359400}, &(0x7f0000000740)={&(0x7f0000000700), 0x8}) bind$can_j1939(r2, &(0x7f0000000780)={0x1d, r3, 0x2, {0x0, 0x8ca84020c30d8558, 0x2}, 0x1}, 0x18) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) pselect6(0x40, &(0x7f00000007c0)={0x9, 0x400, 0x7ff, 0x7ff, 0x4, 0x800, 0x0, 0x1ff}, &(0x7f0000000800)={0x4, 0x1, 0xfff, 0xfffffffffffffffe, 0x7, 0x3, 0x5, 0x5}, &(0x7f0000000840)={0x10000, 0x10, 0x8, 0x4, 0x8000000000000001, 0x2030, 0x6, 0x8000000000000000}, &(0x7f00000008c0)={r8, r9+60000000}, &(0x7f0000000940)={&(0x7f0000000900)={[0x5]}, 0x8}) r10 = signalfd4(r2, &(0x7f0000000980)={[0x5]}, 0x8, 0x400) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)=@mpls_newroute={0xb4, 0x18, 0x2, 0x70bd27, 0x25dfdbfb, {0x1c, 0x10, 0x10, 0x5, 0xfd, 0x3, 0x0, 0x7, 0x400}, [@RTA_VIA={0x14, 0x12, {0x2a, "c7c6b886347617106d04592c3642"}}, @RTA_NEWDST={0x84, 0x13, [{0xf589}, {0x2}, {0x200, 0x0, 0x1}, {0xea900}, {0x4}, {0x4}, {0x4, 0x0, 0x1}, {0x1}, {0x4}, {0x3}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xfffff, 0x0, 0x1}, {0x81}, {0x4}, {0xff}, {0x7, 0x0, 0x1}, {0x7}, {0x7ff}, {0x1, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x8}, {0xd, 0x0, 0x1}, {}, {0xffffc, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2}, {0x1ff}, {0xcd, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}]}]}, 0xb4}}, 0x4c000) sendmsg$nl_route_sched(r2, &(0x7f0000001a00)={&(0x7f0000000b40), 0xc, &(0x7f00000019c0)={&(0x7f0000000b80)=@delchain={0xe04, 0x65, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0x2}, {0xe, 0x1}, {0x5, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @filter_kind_options=@f_cgroup={{0xb}, {0xdc4, 0x2, [@TCA_CGROUP_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x7, 0x40000, 0xa, 0xdd1c, 0x8000, 0x5, 0x2, 0x0, 0x6, 0x1, 0x984, 0x2fc, 0x0, 0x0, 0x6, 0x1, 0x101, 0x2, 0x7, 0x0, 0xfffffff8, 0x1, 0x6, 0x9, 0xffffffff, 0x4, 0xffffffff, 0x8001, 0x80, 0xf, 0x7fff, 0x2, 0x6, 0xfff, 0x4, 0xff, 0x80000000, 0xfffffff2, 0x770a, 0x7, 0x0, 0x9, 0xf, 0x6, 0x3, 0x1ff, 0x47a9, 0x1, 0xffff101d, 0x1, 0x4, 0x0, 0x81, 0x3, 0x8001, 0x9, 0x8, 0x2, 0x9, 0x3, 0x3, 0x4, 0xf1, 0x9, 0x4, 0x6, 0xffffffff, 0x8, 0x7, 0x7, 0x200, 0x0, 0x7, 0x2, 0x7, 0x0, 0x9, 0x795, 0x8, 0x1, 0x9, 0x9, 0x80, 0x2, 0x0, 0x8, 0x92, 0x0, 0x5, 0x3, 0x0, 0x4, 0x2, 0x1, 0x0, 0x8, 0x2, 0xfffffff9, 0x6, 0x1ff, 0x7, 0x391, 0xffff112a, 0x1ff, 0x0, 0xb, 0x3fac, 0x98a8, 0x10, 0x6, 0x3, 0x75, 0x5, 0xa187, 0x5, 0x90cd, 0x101, 0x8ef4, 0x2, 0x86, 0x616, 0x46b, 0x1, 0x5, 0x0, 0x9, 0x30, 0x8, 0x4, 0x5, 0x9, 0xc, 0xfffffff7, 0x0, 0x0, 0x7d, 0x2, 0x4, 0x800, 0x2, 0x6, 0x0, 0x7, 0x5, 0x1, 0x2f2, 0xfffffffb, 0x5, 0x0, 0x6, 0x8, 0x2, 0x1ff, 0x5, 0x9, 0x4, 0xffffffff, 0x1, 0x6, 0x4, 0x1292736e, 0x8, 0xff2d0, 0x200, 0x5, 0x5, 0x5375, 0x6, 0x1, 0x9, 0x4, 0x100, 0x1, 0xd6c, 0x8, 0x8001, 0x7, 0x200, 0x80, 0x1, 0x80, 0x743cdd96, 0x5, 0x7000000, 0xffff, 0x7fff, 0x2400000, 0x5, 0xfffffffa, 0x8, 0x1ff, 0xffffffff, 0x2, 0x6, 0x800, 0xfffff9e2, 0x0, 0x6, 0x3, 0x0, 0x3, 0x1, 0x1, 0x4, 0xa, 0x6, 0x5, 0x5, 0x4, 0xf, 0x101, 0x2, 0x1000, 0xff, 0x7, 0x109, 0x4, 0x77d, 0x5, 0xffffff7f, 0x401, 0x4, 0x7f, 0x3, 0x3, 0x80000001, 0x5, 0x1, 0x7b, 0x800, 0x2, 0xeba8, 0x1, 0x81, 0xb, 0x4, 0x9, 0x1000, 0x26, 0x7, 0xffffff36, 0x7ff, 0x7, 0xe468, 0x4, 0x1, 0x8, 0x45de, 0x2, 0x3, 0x0, 0x7, 0x16d, 0x29, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa}]}, @TCA_CGROUP_POLICE={0x874, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffff80}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x81, 0xffffff80, 0x3, 0x1, 0x9, 0x1, 0x7fff, 0x8, 0x100000, 0x1ff, 0x10, 0x2, 0x4, 0x80000001, 0x1, 0x44, 0x6, 0xff, 0x3, 0xa194, 0x10000, 0x4, 0x8, 0x9, 0x3, 0x97, 0x10, 0xff, 0xa, 0xffffffff, 0xfffffff9, 0x1, 0x3, 0x9, 0x57247f8d, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x235, 0x0, 0x9, 0xfff, 0x1, 0x6, 0x10001, 0x81, 0xe9, 0x101, 0xb43, 0x1, 0x4, 0x9, 0x5, 0x1000, 0x10, 0x9, 0x8, 0xd, 0xa69a, 0x3, 0x0, 0x401, 0x5, 0x401, 0xffffffff, 0xff, 0x6, 0x1, 0x3, 0x7, 0xd911, 0x949, 0x1306000, 0x1, 0x1f, 0x100, 0x2, 0x79e, 0x6, 0xcf, 0xffff5817, 0x7, 0x9, 0x9, 0x81, 0x4, 0x4, 0x6, 0x6, 0x3, 0x3, 0x7, 0x6, 0x0, 0x6, 0xa3, 0x9, 0x1ff, 0x5, 0x3, 0x9, 0x8, 0x0, 0x7, 0x4, 0x0, 0xb, 0x4, 0xf26, 0x2, 0x6b, 0x991, 0x4, 0x1, 0x5, 0x3, 0x4, 0x2, 0x3, 0x0, 0x1, 0x10000000, 0x9, 0xa703, 0x2, 0x2, 0x4, 0x400, 0x9, 0x4, 0x0, 0x1af9, 0x9, 0x2, 0x7, 0x200, 0x6, 0xb5e, 0x7, 0x1, 0xc0000000, 0x7, 0x99, 0x5, 0x6, 0x3, 0x400, 0xe845, 0x6, 0x99c, 0x10000, 0x4, 0x1000, 0x2e15, 0x9, 0x800, 0x4, 0x6054, 0x3, 0x1, 0xd, 0x3, 0x8000, 0x6, 0x5eb, 0x5c4d, 0xfffffffc, 0xffffff23, 0x3, 0xd892, 0xd, 0x5, 0xdc, 0x1ff, 0x2, 0x4, 0x4, 0x80, 0x100, 0x5, 0x1, 0x10001, 0x0, 0x7, 0x6, 0x5, 0xfffffff7, 0x401, 0x3, 0x0, 0x8, 0xfffffff9, 0x101, 0x6, 0x6, 0x0, 0x8000, 0x8, 0x4, 0x3, 0x1e, 0x5, 0x3, 0x3, 0x1, 0x101, 0xbb, 0x4, 0x5, 0x3ff, 0x9, 0x0, 0x4, 0x800, 0x9, 0x8, 0x8, 0x10001, 0x3, 0x2, 0x3ff, 0x4, 0xffffffff, 0x3, 0x8, 0x0, 0x3, 0x200, 0x4, 0x8, 0x6, 0x800, 0xfffffff8, 0x7fffffff, 0x5, 0x1, 0xffffffff, 0xe2, 0x0, 0xbc, 0xc2, 0x81, 0x10, 0x81, 0x9, 0x100, 0x9, 0xfffffff9, 0x517, 0x5, 0x998, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff0000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x3, 0x2, 0x10000, {0x6, 0x1, 0xec2, 0x2, 0x7}, {0x5, 0x1, 0x0, 0x8, 0x9, 0x3ff}, 0x5, 0x8, 0x21}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xa, 0x100, 0x5, 0xd, 0x10, 0x3, 0x3, 0x401, 0xfca, 0x7, 0x5e, 0xd, 0x4, 0x3ff, 0x0, 0x0, 0x4, 0x3, 0x8, 0x9, 0x9, 0x7, 0x7ff, 0xf3, 0xb2, 0x1, 0xf, 0x4, 0xfffffff7, 0x5, 0xc390, 0x4, 0x7fffffff, 0x8, 0x81, 0x1, 0xffffffff, 0xfffffffd, 0xef7, 0x4, 0x9, 0x7fff, 0x5, 0x9, 0xfffffff9, 0xfffffffb, 0x2, 0xe, 0x4, 0xf, 0x17a, 0x5, 0x6, 0x46c6, 0x378, 0x9, 0xff, 0xbdc8, 0x8, 0x99, 0xe, 0xfd1, 0xffffffff, 0x4, 0x6, 0x2, 0x10001, 0x3ff, 0x2, 0x80000, 0x2, 0x37d4, 0x3, 0x2ecf, 0x10, 0x4800, 0xe, 0x2, 0x1, 0x200000, 0x0, 0xa, 0x3, 0x80000001, 0x8, 0x400, 0xfffffa21, 0x0, 0x0, 0x2, 0x5, 0x2, 0xd, 0x241000, 0xc, 0x9, 0x1, 0x6, 0x4bf8, 0x401, 0x2, 0x8, 0x44a0, 0x5, 0xd, 0x0, 0x10001, 0x5f, 0xc, 0x80, 0x7, 0x7ff, 0x8, 0x6, 0x3, 0xa, 0x6, 0x7, 0x3, 0x7, 0x1ff, 0x5, 0xfff, 0x406, 0x8, 0x400, 0x2, 0x9, 0x7, 0x7, 0x1, 0xffff, 0x7, 0x4, 0x38c20a61, 0xfffff975, 0x9, 0x3, 0x7, 0x8000, 0x9, 0x88, 0x9, 0x7f, 0x64df64fc, 0x6, 0x7f, 0x7e, 0x6, 0x835, 0xd20f, 0x1, 0xffffffc0, 0x60f, 0xff, 0x7fffffff, 0x8, 0x9, 0x0, 0x4, 0x2, 0x3d4, 0x1, 0x7, 0x1, 0xadc8, 0x400000, 0x5, 0x4, 0xcf2d, 0x48, 0x5840000, 0xb1, 0x100, 0x9996, 0x2, 0x80000000, 0x4, 0x0, 0x5, 0x8, 0x1, 0x800, 0xb, 0x1c, 0x80000001, 0x1ac00000, 0x8, 0xe, 0xffffff80, 0x6, 0x0, 0x7, 0x4, 0x7, 0x1, 0x5, 0x800, 0x8, 0x4, 0x80000000, 0x200, 0x5, 0x1f, 0x200, 0x948, 0x2, 0x4, 0x3, 0x3, 0x40, 0x5, 0x81, 0x10001, 0x7ff, 0xa4e, 0xa000, 0x8, 0x2, 0xcf, 0x46ed4aab, 0x7, 0x6, 0x7ff, 0x3, 0x3, 0x4, 0xd2, 0x9, 0x6, 0x28, 0xb86c, 0x0, 0x3, 0xe, 0x6, 0x5, 0x1ff, 0xe, 0x4, 0x5, 0xfff, 0x3, 0x4, 0xfffffffb, 0x40, 0x4, 0x7fff, 0x8, 0x984, 0x9, 0x7, 0x100, 0x7fffffff, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_CGROUP_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_CGROUP_EMATCHES={0x120, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xc000, 0x3, 0x8}, {0x0, 0x3, 0x321, 0x6}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0x2}, {0x4, 0x3, 0x3}}}, @TCF_EM_META={0x90, 0x1, 0x0, 0x0, {{0x81, 0x4, 0xfff}, [@TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="95f78bafda1a", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="c7d1bf36b46b", @TCF_META_TYPE_VAR="abe607"]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="004c8fcc706df15c31c1"]}, @TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7ff, 0x3, 0x2}, {0xb, 0xc8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0x2}, {0x8c8, 0x8, 0x1}}}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_VAR="b22a57", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="14ac793d364afc", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ff427b4cc529b6", @TCF_META_TYPE_VAR="ebcbb59928bfa3e9bf26"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc000, 0x81, 0x1}, {0x63, 0x8, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff6, 0x2, 0x2}, {0x9b86, 0xb, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x80a}, {0xfffffff8, 0x855, 0x1400, 0x2, 0xa, 0x2}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x3, 0x5}, {0x8, 0x6, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x400, 0x1, 0xe}, {0x3, 0x9, 0x3b6, 0x2, 0x4, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff87}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55c6}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0xe04}, 0x1, 0x0, 0x0, 0x84}, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001a40)) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x50, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40008040}, 0x1) epoll_create1(0x80000) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000001bc0)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r10, &(0x7f0000001e00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x108, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x15}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0xc9, 0x2a, [@perr={0x84, 0xc3, {0x0, 0xd, [{{}, @broadcast, 0xffffffff, @void, 0x2d}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value=@device_b, 0x4}, {{}, @device_a, 0x9, @void, 0x2b}, {{}, @broadcast, 0xffff9037, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0xa, @value=@device_b, 0xe}, {{}, @device_b, 0xffe00, @void, 0x1c}, {{}, @device_a, 0xc62, @void, 0xf}, {{}, @broadcast, 0x5, @void, 0x40}, {{}, @device_b, 0x81, @void, 0x34}, {{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x2a}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x1d}, {{}, @device_b, 0x3ff, @void, 0x33}, {{}, @device_b, 0x4, @void, 0x11}]}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1e}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040100) 1.697886598s ago: executing program 6 (id=2318): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00923ee05cf3ecabab08e1e85a1405b66603b7a900c35eb443bd1b30f60eb9edbfc09a48c6e2b9d19789123613e9dbdc9c4e50cf6b15f496c4267219fa59c4527829afa20b43a642c6cf12ff52198b07eea6f007f389f5aa63d45ad719844f488efe943e4ce84f44785f01ee3f33ef9328577fcb15501d636160b26d6b28"], 0x1, 0x1cf, &(0x7f00000002c0)="$eJzKKC4s5mdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//wHCY0w==") 1.697515538s ago: executing program 1 (id=2319): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff03316844268cb89614f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x22}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x10000ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000021}, 0x10) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 1.526572578s ago: executing program 3 (id=2320): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, 0x140c, 0x4, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000056) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}]}, 0x50}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x400c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000300)=""/20, &(0x7f0000000440)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x167) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) fstat(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x8d, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x10, 0xfffffffd, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x3, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x934, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x81, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xfffffffe, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x0, 0xfffffffe, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3, 0xbed}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) 1.42693244s ago: executing program 2 (id=2321): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/105, 0x69}], 0x4, &(0x7f0000000740)=""/135, 0x87, 0x2000000}}], 0x1, 0xcb, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@any, 0x200}, 0x1, 0x0, 0x1}) 1.409560379s ago: executing program 6 (id=2322): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) (async) r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) read(r1, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0xfffffdfc) (async) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0xfffffdfc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x536, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) (async) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000080)={0xa, 0x100, 0x1, {0x80000001, 0x800, 0x7, 0x6}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) r8 = dup(r7) bind$unix(r8, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) connect$inet6(r7, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0xff, @remote, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}], 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000050, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 661.448746ms ago: executing program 1 (id=2323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x82, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x1}]}}}}}}}}, 0x0) 657.819454ms ago: executing program 3 (id=2324): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) r3 = socket$key(0xf, 0x3, 0x2) r4 = gettid() fcntl$setownex(r2, 0xf, &(0x7f00000000c0)={0x0, r4}) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x5, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x100, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7c}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x60, @mcast2, 0xf2}}]}, 0x60}}, 0x0) 39.393434ms ago: executing program 2 (id=2325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB="0000080000000100000400000000009fb3000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="1b000000c700000000000000008000000000000005f22e20589a12cb1c6092b15b985bc8d617c8b50c4eceea70e9f89759c1dee863", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x6, 0x800000, 0x4, 0x16e, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x3, 0x2, 0x0, 0x10000}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4000082) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x106, 0x9}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) r8 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000200)={0x2020}, 0x2020) pread64(r8, &(0x7f0000002240)=""/237, 0xed, 0x4eb) syz_open_dev$vcsn(&(0x7f0000000080), 0x56, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000002811a900000000000000"], 0x50) 16.888967ms ago: executing program 0 (id=2326): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x295, 0x3, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}]}}]}, 0x45c}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xfffffffe, 0x0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000340)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x1, 0xd, 0x2, 0x3, 0x80, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0x200, 0x6e, &(0x7f0000000180)=""/110, 0x41100, 0x40, '\x00', r2, @fallback=0x35, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x1, 0xe}, 0x10, r3, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[r4], &(0x7f0000000400)=[{0x2, 0x1, 0xa, 0x8}, {0x0, 0x1, 0xa, 0x5}], 0x10, 0x7}, 0x94) 0s ago: executing program 1 (id=2327): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x83}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000000)="826f6f61c9cfd07e964c971234d1bf0e9785488f9225bf90d5a100a3f553a6146c632dcd5f8098d2ed9fd4789b42e4e10588532a8e96", 0x36}, {&(0x7f0000000280)="592a0f85ba2fbb203501ba7a731807743a367f1806d64743ed5e154aaec6a4707cc4623de05c2167cd5f9628ac97218e84b9add4fd8e0d3ad261daf6b2b79aa8af8b22a0cdeac273b8e3b23f1d30f771972b", 0x52}, {&(0x7f0000000300)="d4a483a913109a344bd47ae0add0970bb4ea3ebf68bdb05d70e3eaebd85e77ff0b67a681150b264e8348e8335d5d8d5433c8b9537d9596dc0bcb602af403b82e96d3c74d097fae04d30a3e5efd098fe25e36a51b584c3ae20cea2b394a5b3c4ef01cfe3b175d04df4d", 0x69}, {&(0x7f0000000380)="4d42aecac8e410a57d0278daa72fee945cac40a2a873d07323b530cf721a6a3f56a90b334d24d960d02527ddb3b44c78ada0f9fdcc9e22ac0092243eca9d40697ec30ef3d71acfee87a05ade95368920213e738333f5b74e69ec29d9b73d7daf99e6289c1ff7ef6e8a0281d0b7bbcb5bda4dc7d0156f0d9fcba502cb4f01a21d2e2633f48d36d0f13598a6d70e771cf37d50303760d5518fc35e2f8353f5cc77462c8d56dda832a77719e2a8afa583ac71bc5a0a1df1f86df2a67c43eeb35f4dea1dbf5dd3cb17a5bf366f912474ebabc873be4d374d7aaddf63317a9ce1abdfe4505f", 0xe3}, {&(0x7f0000000100)="b94a66dfbb5b04df6693fe", 0xb}, {&(0x7f0000000580)="b46fe4c40f31430c2216abf9a07f74d9d0e709355f7b1aed9602e90fc08644ed17dc81def59827ea5cfbb74821630cc9395d155977d4de2c80755d1901009d3a73c6d10060ba65dd02c41ab9b56427b0320000", 0x53}], 0x6, 0x0, 0x0, 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000600)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd8, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc000}, 0x4008004) r6 = io_uring_setup(0x669, &(0x7f0000000140)={0x0, 0x0, 0x400}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) kernel console output (not intermixed with test programs): ound [ 507.881987][T13805] UDF-fs: Scanning with blocksize 4096 failed [ 507.881998][T13805] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 507.884771][ T6007] usb 6-1: USB disconnect, device number 11 [ 508.668010][T13828] tap0: tun_chr_ioctl cmd 1074025677 [ 508.669861][T13828] tap0: linktype set to 270 [ 509.076612][ T938] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 509.540083][ T938] usb 2-1: Using ep0 maxpacket: 8 [ 509.541862][ T938] usb 2-1: config 6 has an invalid interface number: 171 but max is 0 [ 509.799383][ T938] usb 2-1: config 6 has no interface number 0 [ 509.805995][ T938] usb 2-1: config 6 interface 171 has no altsetting 0 [ 510.688527][ T938] usb 2-1: Dual-Role OTG device on HNP port [ 510.695113][ T938] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=d1.1e [ 510.715163][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.723832][ T938] usb 2-1: Product: syz [ 510.728180][ T938] usb 2-1: Manufacturer: syz [ 510.734990][ T938] usb 2-1: SerialNumber: syz [ 511.143409][T13264] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 511.169880][ T938] usb_ehset_test 2-1:6.171: probe with driver usb_ehset_test failed with error -32 [ 511.278172][T13849] fuse: Unknown parameter '0x0000000000000006' [ 511.781925][ T938] usb 2-1: USB disconnect, device number 34 [ 511.831977][T13264] usb 1-1: Invalid ep0 maxpacket: 64 [ 511.969745][T13264] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 512.192620][T13264] usb 1-1: Invalid ep0 maxpacket: 64 [ 512.209979][T13264] usb usb1-port1: attempt power cycle [ 512.379393][T13863] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1499'. [ 512.599413][T13264] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 512.640729][T13264] usb 1-1: Invalid ep0 maxpacket: 64 [ 512.836245][T13264] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 512.874899][T13264] usb 1-1: Invalid ep0 maxpacket: 64 [ 512.876973][T13870] syzkaller0: entered promiscuous mode [ 512.881302][T13264] usb usb1-port1: unable to enumerate USB device [ 512.894657][T13870] syzkaller0: entered allmulticast mode [ 513.100473][T13877] vivid-001: ================= START STATUS ================= [ 513.126457][T13877] vivid-001: Radio HW Seek Mode: Bounded [ 513.157466][T13877] vivid-001: Radio Programmable HW Seek: false [ 513.176223][T13877] vivid-001: RDS Rx I/O Mode: Block I/O [ 513.212241][T13877] vivid-001: Generate RBDS Instead of RDS: false [ 513.300924][T13877] vivid-001: RDS Reception: true [ 513.323660][T13877] vivid-001: RDS Program Type: 0 inactive [ 513.356658][T13877] vivid-001: RDS PS Name: inactive [ 513.415570][T13877] vivid-001: RDS Radio Text: inactive [ 513.579063][T13877] vivid-001: RDS Traffic Announcement: false inactive [ 513.679477][T13877] vivid-001: RDS Traffic Program: false inactive [ 513.693518][T13877] vivid-001: RDS Music: false inactive [ 513.751718][T13877] vivid-001: ================== END STATUS ================== [ 514.217356][T13891] netlink: 'syz.0.1505': attribute type 9 has an invalid length. [ 514.225437][T13891] netlink: 'syz.0.1505': attribute type 7 has an invalid length. [ 514.233459][T13891] netlink: 'syz.0.1505': attribute type 8 has an invalid length. [ 516.328925][T13903] fuse: Unknown parameter '0x0000000000000006' [ 518.128376][T13264] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 518.448474][ T5966] IPVS: starting estimator thread 0... [ 518.488621][T13264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.545152][T13929] netlink: 'syz.0.1513': attribute type 9 has an invalid length. [ 518.561199][T13929] netlink: 'syz.0.1513': attribute type 7 has an invalid length. [ 518.579520][T13264] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 518.595819][T13264] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.606016][T13925] IPVS: using max 32 ests per chain, 76800 per kthread [ 518.613765][T13264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.668766][T13264] usb 2-1: config 0 descriptor?? [ 518.676282][T13929] netlink: 'syz.0.1513': attribute type 8 has an invalid length. [ 518.690249][T13264] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 519.404385][T13940] __vm_enough_memory: pid: 13940, comm: syz.1.1509, bytes: 4115879641088 not enough memory for the allocation [ 521.799409][ T5941] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 521.860512][ T5966] usb 2-1: USB disconnect, device number 35 [ 522.169908][ T5941] usb 1-1: Using ep0 maxpacket: 8 [ 522.178530][ T5941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.191612][ T5941] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 522.274254][T13981] fuse: Unknown parameter 'fd0x0000000000000006' [ 522.970846][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.992078][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1521'. [ 523.066287][ T5941] usb 1-1: config 0 descriptor?? [ 523.078148][ T5941] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 523.290731][ T6007] usb 1-1: USB disconnect, device number 57 [ 523.376543][T13992] netlink: 'syz.5.1525': attribute type 9 has an invalid length. [ 523.419214][T13992] netlink: 'syz.5.1525': attribute type 7 has an invalid length. [ 523.457778][T13992] netlink: 'syz.5.1525': attribute type 8 has an invalid length. [ 524.857411][T14007] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 524.869300][T14007] SQUASHFS error: Failed to read block 0x0: -5 [ 524.876851][T14007] unable to read squashfs_super_block [ 526.140429][T14022] fuse: Unknown parameter 'fd0x0000000000000006' [ 527.981594][T14037] lo speed is unknown, defaulting to 1000 [ 527.988697][T14037] lo speed is unknown, defaulting to 1000 [ 528.015658][T14037] lo speed is unknown, defaulting to 1000 [ 528.081975][T14037] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 528.243458][T14037] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 528.304622][T14038] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 528.314086][T14038] exFAT-fs (loop1): unable to read boot sector [ 528.320553][T14038] exFAT-fs (loop1): failed to read boot sector [ 528.326703][T14038] exFAT-fs (loop1): failed to recognize exfat type [ 528.363019][T14037] lo speed is unknown, defaulting to 1000 [ 528.370512][T14037] lo speed is unknown, defaulting to 1000 [ 528.377380][T14037] lo speed is unknown, defaulting to 1000 [ 528.385947][T14037] lo speed is unknown, defaulting to 1000 [ 528.393060][T14037] lo speed is unknown, defaulting to 1000 [ 528.484437][T14032] netlink: 'syz.0.1535': attribute type 9 has an invalid length. [ 528.519320][T14032] netlink: 'syz.0.1535': attribute type 7 has an invalid length. [ 528.527445][T14032] netlink: 'syz.0.1535': attribute type 8 has an invalid length. [ 529.909380][ T6007] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 529.972046][T14058] netlink: 'syz.2.1543': attribute type 9 has an invalid length. [ 530.009842][T14058] netlink: 'syz.2.1543': attribute type 7 has an invalid length. [ 530.034747][T14058] netlink: 'syz.2.1543': attribute type 8 has an invalid length. [ 530.091545][ T6007] usb 2-1: too many configurations: 16, using maximum allowed: 8 [ 530.108349][ T6007] usb 2-1: config index 0 descriptor too short (expected 511, got 441) [ 530.129206][ T6007] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 530.137336][ T6007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.170907][ T6007] usb 2-1: config 0 has no interface number 0 [ 530.177635][ T6007] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 530.199160][ T6007] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 530.213110][ T6007] usb 2-1: config 0 interface 48 has no altsetting 0 [ 530.222012][ T6007] usb 2-1: config index 1 descriptor too short (expected 511, got 441) [ 530.299459][ T6007] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 530.307764][ T6007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.317961][ T6007] usb 2-1: config 0 has no interface number 0 [ 530.339058][ T6007] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 530.401777][ T6007] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 530.454383][ T6007] usb 2-1: config 0 interface 48 has no altsetting 0 [ 530.474866][ T6007] usb 2-1: config index 2 descriptor too short (expected 511, got 441) [ 530.490239][T14061] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1544'. [ 530.523564][ T6007] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 530.548933][ T6007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.579203][ T6007] usb 2-1: config 0 has no interface number 0 [ 530.631639][ T6007] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 530.700720][ T6007] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 530.796702][ T6007] usb 2-1: config 0 interface 48 has no altsetting 0 [ 531.076864][ T6007] usb 2-1: config index 3 descriptor too short (expected 511, got 441) [ 531.096693][ T6007] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 531.108569][ T6007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.143973][ T6007] usb 2-1: config 0 has no interface number 0 [ 531.158534][ T6007] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 531.362499][ T6007] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 531.377215][ T6007] usb 2-1: config 0 interface 48 has no altsetting 0 [ 531.391203][ T6007] usb 2-1: config index 4 descriptor too short (expected 511, got 441) [ 531.408958][ T6007] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 531.417737][ T6007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.436045][ T6007] usb 2-1: config 0 has no interface number 0 [ 531.467099][ T6007] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 531.505932][T14070] fuse: Unknown parameter 'fd0x0000000000000006' [ 531.708885][ T6007] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 531.724432][ T5974] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 531.920637][ T6007] usb 2-1: config 0 interface 48 has no altsetting 0 [ 531.985747][ T5974] usb 1-1: unable to get BOS descriptor or descriptor too short [ 532.096184][ T6007] usb 2-1: config index 5 descriptor too short (expected 511, got 441) [ 532.107324][ T5974] usb 1-1: not running at top speed; connect to a high speed hub [ 532.116613][ T6007] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 532.126158][ T6007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.138300][ T5974] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 532.149984][ T6007] usb 2-1: config 0 has no interface number 0 [ 532.157023][ T5974] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 532.175631][ T6007] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 532.199473][ T5974] usb 1-1: config 17 has no interface number 0 [ 532.206381][ T5974] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 43287, setting to 64 [ 532.242770][ T6007] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 532.270034][ T5974] usb 1-1: config 17 interface 8 has no altsetting 0 [ 532.277647][ T6007] usb 2-1: config 0 interface 48 has no altsetting 0 [ 532.303917][ T5974] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 532.319536][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.327680][ T5974] usb 1-1: Product: syz [ 532.339302][ T5974] usb 1-1: Manufacturer: syz [ 532.344366][ T5974] usb 1-1: SerialNumber: syz [ 532.355446][T14069] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 532.393076][ T6007] usb 2-1: unable to read config index 6 descriptor/start: -71 [ 532.411945][ T6007] usb 2-1: can't read configurations, error -71 [ 532.480093][T14078] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1547'. [ 532.490177][T14078] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1547'. [ 532.500140][T14078] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1547'. [ 532.511205][T14078] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1547'. [ 532.520981][T14078] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1547'. [ 532.531261][T14078] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1547'. [ 532.542001][T14078] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1547'. [ 532.672590][ T5974] usb 1-1: selecting invalid altsetting 0 [ 532.724412][ T5974] usb 1-1: USB disconnect, device number 58 [ 532.835508][ T8731] udevd[8731]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.870854][T14088] iso9660: Bad value for 'session' [ 533.000341][T14088] iso9660: Bad value for 'session' [ 533.198187][T14088] iso9660: Bad value for 'session' [ 534.334806][T14102] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.367455][T14080] Bluetooth: hci5: command 0x041b tx timeout [ 534.392201][T14102] exFAT-fs (loop0): unable to read boot sector [ 534.398606][T14102] exFAT-fs (loop0): failed to read boot sector [ 534.407987][T14102] exFAT-fs (loop0): failed to recognize exfat type [ 536.118569][ T6007] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 537.732821][T14141] kAFS: No cell specified [ 537.746465][ T6007] usb 4-1: too many configurations: 16, using maximum allowed: 8 [ 537.792416][ T6007] usb 4-1: config index 0 descriptor too short (expected 511, got 441) [ 537.816259][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 537.864778][T14148] netlink: 'syz.0.1566': attribute type 1 has an invalid length. [ 537.869043][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.875617][T14148] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1566'. [ 537.924642][ T6007] usb 4-1: config 0 has no interface number 0 [ 537.939365][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 537.963715][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 538.018206][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 538.026822][ T6007] usb 4-1: config index 1 descriptor too short (expected 511, got 441) [ 538.040722][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 538.050107][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.061860][ T6007] usb 4-1: config 0 has no interface number 0 [ 538.067981][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 538.080236][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 538.098946][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 538.108168][ T6007] usb 4-1: config index 2 descriptor too short (expected 511, got 441) [ 538.120138][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 538.162324][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.546766][ T6007] usb 4-1: config 0 has no interface number 0 [ 538.581602][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 538.656935][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 538.708623][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 538.728250][ T6007] usb 4-1: unable to read config index 3 descriptor/start: -71 [ 538.744327][ T5941] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 538.757722][ T6007] usb 4-1: can't read configurations, error -71 [ 538.765743][ T5941] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 538.782436][T14161] sp0: Synchronizing with TNC [ 538.787697][ T5941] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 538.820217][ T5941] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 538.856741][ T5941] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 539.070554][ T938] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 539.280858][T14169] sp0: Found TNC [ 539.303761][ T5941] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 539.315279][ T5941] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 539.323992][ T5941] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 539.336715][ T5941] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 539.345316][ T5941] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 539.358706][ T5941] hid-generic 0006:0004:0009.000B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 539.429811][ T938] usb 2-1: device descriptor read/64, error -71 [ 539.555149][T14172] fido_id[14172]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 539.685907][T14175] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1576'. [ 539.699468][ T938] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 539.771313][T14176] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 539.815076][T14176] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1575'. [ 539.846216][T14176] overlay: Bad value for 'workdir' [ 539.849822][ T938] usb 2-1: device descriptor read/64, error -71 [ 539.984302][ T938] usb usb2-port1: attempt power cycle [ 540.360319][ T938] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 540.412341][ T938] usb 2-1: device descriptor read/8, error -71 [ 540.542707][ T6007] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 540.740669][ T938] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 540.760229][ T6007] usb 1-1: too many configurations: 16, using maximum allowed: 8 [ 540.769594][ T5941] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 540.780340][ T938] usb 2-1: device descriptor read/8, error -71 [ 540.787521][ T6007] usb 1-1: config index 0 descriptor too short (expected 511, got 441) [ 540.801328][ T6007] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 540.823502][ T6007] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.844075][ T6007] usb 1-1: config 0 has no interface number 0 [ 540.850880][ T6007] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 540.862713][ T6007] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 540.877103][ T6007] usb 1-1: config 0 interface 48 has no altsetting 0 [ 540.885655][ T6007] usb 1-1: config index 1 descriptor too short (expected 511, got 441) [ 540.895551][ T938] usb usb2-port1: unable to enumerate USB device [ 540.900097][ T6007] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 540.926164][ T6007] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.937404][ T6007] usb 1-1: config 0 has no interface number 0 [ 540.945230][ T6007] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 540.946289][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 540.966888][ T5941] usb 4-1: config 0 interface 0 has no altsetting 0 [ 540.978442][ T6007] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 540.984907][ T5941] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 540.997768][ T6007] usb 1-1: config 0 interface 48 has no altsetting 0 [ 541.023841][ T6007] usb 1-1: config index 2 descriptor too short (expected 511, got 441) [ 541.054415][ T6007] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 541.068562][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.090214][ T5941] usb 4-1: config 0 descriptor?? [ 541.107287][ T6007] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.128567][ T6007] usb 1-1: config 0 has no interface number 0 [ 541.136728][ T6007] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 541.173680][ T6007] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 541.187789][ T6007] usb 1-1: config 0 interface 48 has no altsetting 0 [ 541.197693][ T6007] usb 1-1: config index 3 descriptor too short (expected 511, got 441) [ 541.207665][ T6007] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 541.215971][ T6007] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.226586][ T6007] usb 1-1: config 0 has no interface number 0 [ 541.234471][ T6007] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 541.247667][ T6007] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 541.261548][ T6007] usb 1-1: config 0 interface 48 has no altsetting 0 [ 541.273288][ T6007] usb 1-1: config index 4 descriptor too short (expected 511, got 441) [ 541.284818][ T6007] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 541.293470][ T6007] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.304031][ T6007] usb 1-1: config 0 has no interface number 0 [ 541.310782][ T6007] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 541.322550][ T6007] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 541.336573][ T6007] usb 1-1: config 0 interface 48 has no altsetting 0 [ 541.364496][ T6007] usb 1-1: config index 5 descriptor too short (expected 511, got 441) [ 541.381130][ T6007] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 541.396790][ T6007] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.407195][ T6007] usb 1-1: config 0 has no interface number 0 [ 541.414247][ T6007] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 541.425986][ T6007] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 541.444944][ T6007] usb 1-1: config 0 interface 48 has no altsetting 0 [ 541.477410][ T6007] usb 1-1: config index 6 descriptor too short (expected 511, got 441) [ 541.485890][ T6007] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 541.495569][ T6007] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.511905][ T6007] usb 1-1: config 0 has no interface number 0 [ 541.518376][ T6007] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 541.531257][ T6007] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 541.538508][ T5941] corsair-cpro 0003:1B1C:0C10.000C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 541.544917][ T6007] usb 1-1: config 0 interface 48 has no altsetting 0 [ 541.547800][ T6007] usb 1-1: config index 7 descriptor too short (expected 511, got 441) [ 541.578181][ T6007] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 541.942373][ T6007] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.981257][ T6007] usb 1-1: config 0 has no interface number 0 [ 541.985470][ T5941] corsair-cpro 0003:1B1C:0C10.000C: probe with driver corsair-cpro failed with error -71 [ 542.044584][ T5941] usb 4-1: USB disconnect, device number 43 [ 542.062531][ T6007] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 542.119038][ T6007] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 542.141913][ T6007] usb 1-1: config 0 interface 48 has no altsetting 0 [ 542.156707][ T6007] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 542.208961][ T6007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.233346][ T6007] usb 1-1: config 0 descriptor?? [ 542.496973][T14224] kAFS: No cell specified [ 542.688335][ T6007] usb 1-1: string descriptor 0 read error: -71 [ 542.737581][ T6007] usb 1-1: USB disconnect, device number 59 [ 543.103415][T14233] netlink: 'syz.2.1592': attribute type 6 has an invalid length. [ 543.480501][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1597'. [ 545.643291][T14262] syz.0.1603 (14262) used greatest stack depth: 17832 bytes left [ 545.908832][T14274] kAFS: No cell specified [ 545.915353][ T5941] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 546.512032][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 546.531263][ T5941] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 546.576936][ T5941] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 546.617734][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.637096][ T5941] usb 3-1: Product: syz [ 546.647851][ T5941] usb 3-1: Manufacturer: syz [ 546.653616][ T5941] usb 3-1: SerialNumber: syz [ 547.417299][ T5941] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input30 [ 547.513197][ T6007] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 547.633005][T14286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.662456][T14286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.670557][ T5218] bcm5974 3-1:1.0: could not read from device [ 547.680754][ T5218] bcm5974 3-1:1.0: could not read from device [ 547.712025][ T5941] usb 3-1: USB disconnect, device number 35 [ 547.740396][ T6007] usb 4-1: too many configurations: 16, using maximum allowed: 8 [ 547.796004][ T6007] usb 4-1: config index 0 descriptor too short (expected 511, got 441) [ 547.807727][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 547.823809][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.834481][ T6007] usb 4-1: config 0 has no interface number 0 [ 547.840890][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 548.103957][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 548.164716][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 548.165943][ T6007] usb 4-1: config index 1 descriptor too short (expected 511, got 441) [ 548.165970][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 548.165989][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.166007][ T6007] usb 4-1: config 0 has no interface number 0 [ 548.166034][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 548.166069][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 548.166094][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 548.167005][ T6007] usb 4-1: config index 2 descriptor too short (expected 511, got 441) [ 548.167028][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 548.167046][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.167062][ T6007] usb 4-1: config 0 has no interface number 0 [ 548.167089][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 548.167124][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 548.167148][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 548.168023][ T6007] usb 4-1: config index 3 descriptor too short (expected 511, got 441) [ 548.168045][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 548.168064][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.168083][ T6007] usb 4-1: config 0 has no interface number 0 [ 548.168110][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 548.168170][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 548.168195][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 548.174254][ T6007] usb 4-1: config index 4 descriptor too short (expected 511, got 441) [ 548.174282][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 548.174300][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.174317][ T6007] usb 4-1: config 0 has no interface number 0 [ 548.174345][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 548.174383][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 548.174408][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 548.175823][ T6007] usb 4-1: config index 5 descriptor too short (expected 511, got 441) [ 548.175855][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 548.175873][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.175890][ T6007] usb 4-1: config 0 has no interface number 0 [ 548.175916][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 548.175946][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 548.175970][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 548.177107][ T6007] usb 4-1: config index 6 descriptor too short (expected 511, got 441) [ 548.177135][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 548.177155][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.177174][ T6007] usb 4-1: config 0 has no interface number 0 [ 548.177204][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 548.177235][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 548.177253][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 548.180471][ T6007] usb 4-1: config index 7 descriptor too short (expected 511, got 441) [ 548.180503][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 548.180523][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.180540][ T6007] usb 4-1: config 0 has no interface number 0 [ 548.180569][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 548.181091][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 548.181119][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 548.181153][ T6007] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 548.181175][ T6007] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.391679][ T6007] usb 4-1: config 0 descriptor?? [ 548.892466][ T6007] usb 4-1: string descriptor 0 read error: -71 [ 548.912512][ T6007] usb 4-1: USB disconnect, device number 44 [ 549.160255][ T5941] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 549.340772][T14311] TCP: TCP_TX_DELAY enabled [ 549.347544][T14311] program syz.2.1616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 550.120430][ T5941] usb 6-1: Using ep0 maxpacket: 32 [ 550.141078][ T5941] usb 6-1: config 8 has an invalid interface number: 250 but max is 0 [ 550.166829][ T5941] usb 6-1: config 8 has no interface number 0 [ 550.181515][ T5941] usb 6-1: config 8 interface 250 has no altsetting 0 [ 550.277655][ T5941] usb 6-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86 [ 550.287909][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.296978][ T5941] usb 6-1: Product: syz [ 550.301840][ T5941] usb 6-1: Manufacturer: syz [ 550.306666][ T5941] usb 6-1: SerialNumber: syz [ 550.541607][T14301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.551162][T14301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.589471][ T5966] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 550.665705][T14301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.703311][T14301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.765781][ T5966] usb 3-1: config 178 has an invalid interface number: 246 but max is 0 [ 550.802015][ T5966] usb 3-1: config 178 has no interface number 0 [ 550.808569][ T5966] usb 3-1: config 178 interface 246 altsetting 107 has an invalid descriptor for endpoint zero, skipping [ 551.032030][T14324] kAFS: No cell specified [ 551.040929][ T5941] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 551.055863][ T5966] usb 3-1: config 178 interface 246 altsetting 107 has a duplicate endpoint with address 0xA, skipping [ 551.200095][ T5966] usb 3-1: config 178 interface 246 has no altsetting 0 [ 551.212134][ T5966] usb 3-1: New USB device found, idVendor=19d2, idProduct=ffb8, bcdDevice=84.59 [ 551.225842][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.236186][ T5966] usb 3-1: Product: Ð [ 551.242616][ T5966] usb 3-1: Manufacturer: Є [ 551.250098][ T5966] usb 3-1: SerialNumber: à   [ 551.270647][ T5941] usb 6-1: USB disconnect, device number 12 [ 551.558063][ T5966] option 3-1:178.246: GSM modem (1-port) converter detected [ 551.610889][ T5966] usb 3-1: USB disconnect, device number 36 [ 551.782922][ T5966] option 3-1:178.246: device disconnected [ 552.517038][T14331] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 552.525616][T14331] ALSA: mixer_oss: invalid OSS volume 'Â' [ 553.071757][T14342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.624395][T12263] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.870997][T14361] siw: device registration error -23 [ 553.985513][T12263] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.129392][T14367] pty pty27: ldisc open failed (-12), clearing slot 27 [ 554.368428][T12263] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.423510][T14375] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 554.672707][ T5966] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 554.735574][T14383] sctp: [Deprecated]: syz.0.1640 (pid 14383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.735574][T14383] Use struct sctp_sack_info instead [ 554.754626][T14381] kAFS: No cell specified [ 554.765639][T12263] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.814289][T14080] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 554.825921][T14080] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 554.836886][T14080] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 554.849244][T14080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 554.856952][T14080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 554.859631][ T5966] usb 3-1: Using ep0 maxpacket: 16 [ 554.916810][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 554.916826][ T30] audit: type=1326 audit(1758609629.316:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14382 comm="syz.0.1640" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa34df8eec9 code=0x0 [ 555.039410][ T5966] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 555.055874][ T30] audit: type=1326 audit(1758609629.466:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14382 comm="syz.0.1640" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa34df8eec9 code=0x0 [ 555.081218][ T5966] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.112181][ T5966] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.126843][ T5966] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 555.137583][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.146345][ T5966] usb 3-1: Product: syz [ 555.178598][T14386] lo speed is unknown, defaulting to 1000 [ 555.196472][ T5966] usb 3-1: Manufacturer: syz [ 555.204182][ T5966] usb 3-1: SerialNumber: syz [ 555.296886][T12263] bridge_slave_1: left allmulticast mode [ 555.316123][T12263] bridge_slave_1: left promiscuous mode [ 555.334551][T12263] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.339108][T13264] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 555.367638][T12263] bridge_slave_0: left allmulticast mode [ 555.385737][T12263] bridge_slave_0: left promiscuous mode [ 555.404837][T12263] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.489432][ T5966] usb 3-1: 0:2 : does not exist [ 555.512586][ T5966] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 555.539353][T13264] usb 4-1: Using ep0 maxpacket: 8 [ 555.565917][T13264] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.614100][T13264] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 555.647898][ T5966] usb 3-1: USB disconnect, device number 37 [ 555.672081][T13264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 555.734392][ T8731] udevd[8731]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.760385][T13264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 555.788806][T13264] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 555.803616][T14402] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1643'. [ 555.839878][T13264] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 555.867438][T13264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 555.927344][T13264] usb 4-1: Product: syz [ 555.941156][T13264] usb 4-1: Manufacturer: syz [ 555.960983][T13264] usb 4-1: SerialNumber: syz [ 555.980202][T13264] usb 4-1: config 0 descriptor?? [ 556.100430][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 556.259014][ T9] usb 1-1: device descriptor read/64, error -71 [ 556.277248][T13264] radio-si470x 4-1:0.0: DeviceID=0xd722 ChipID=0x764c [ 556.309596][ T5966] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 556.442371][ T5966] usb 3-1: device descriptor read/64, error -71 [ 556.501149][T13264] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 556.512081][T13264] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 556.521157][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 556.523113][T13264] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 556.668220][T12263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.677683][ T9] usb 1-1: device descriptor read/64, error -71 [ 556.679456][ T5966] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 556.697475][T12263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.723741][T12263] bond0 (unregistering): Released all slaves [ 556.789677][ T9] usb usb1-port1: attempt power cycle [ 556.838423][ T5966] usb 3-1: device descriptor read/64, error -71 [ 556.919633][T14080] Bluetooth: hci3: command tx timeout [ 556.950086][ T5966] usb usb3-port1: attempt power cycle [ 557.128977][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 557.151438][ T9] usb 1-1: device descriptor read/8, error -71 [ 557.310612][ T5966] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 557.329256][ T7392] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 557.384171][ T5966] usb 3-1: device descriptor read/8, error -71 [ 557.419241][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 557.460893][ T9] usb 1-1: device descriptor read/8, error -71 [ 557.470361][ T7392] usb 2-1: device descriptor read/64, error -71 [ 557.512996][T12263] hsr_slave_0: left promiscuous mode [ 557.529005][T12263] hsr_slave_1: left promiscuous mode [ 557.535212][T12263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.551053][T12263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.560250][T12263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.567661][T12263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.600557][T13264] usb 4-1: USB disconnect, device number 45 [ 557.615217][ T9] usb usb1-port1: unable to enumerate USB device [ 557.634850][T12263] veth1_macvtap: left promiscuous mode [ 557.647437][T12263] veth0_macvtap: left promiscuous mode [ 557.650738][ T5966] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 557.655387][T12263] veth1_vlan: left promiscuous mode [ 557.667272][T12263] veth0_vlan: left promiscuous mode [ 557.682048][ T5966] usb 3-1: device descriptor read/8, error -71 [ 557.739874][ T7392] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 557.809790][ T5966] usb usb3-port1: unable to enumerate USB device [ 557.894293][ T7392] usb 2-1: device descriptor read/64, error -71 [ 558.040857][ T7392] usb usb2-port1: attempt power cycle [ 558.403500][ T7392] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 558.444151][ T7392] usb 2-1: device descriptor read/8, error -71 [ 558.470731][T12263] team0 (unregistering): Port device team_slave_1 removed [ 558.534629][T12263] team0 (unregistering): Port device team_slave_0 removed [ 558.706513][ T7392] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 558.741063][ T7392] usb 2-1: device descriptor read/8, error -71 [ 558.832316][T13264] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 558.851426][ T7392] usb usb2-port1: unable to enumerate USB device [ 558.989385][T14080] Bluetooth: hci3: command tx timeout [ 558.996398][T14445] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.008078][T14445] I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.009391][T13264] usb 4-1: Using ep0 maxpacket: 8 [ 559.020198][T14445] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 559.040921][T14445] I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.050627][T14445] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 559.060308][T14445] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 559.070887][T14445] UDF-fs: Scanning with blocksize 512 failed [ 559.074836][T13264] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.088747][T14445] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.093524][T13264] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 559.107510][T14445] I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.118797][T14445] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 559.125631][T13264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.129267][T14445] I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.148234][T14445] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 559.157973][T14445] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 559.167401][T14445] UDF-fs: Scanning with blocksize 1024 failed [ 559.170380][T13264] usb 4-1: config 0 descriptor?? [ 559.179380][T14445] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.183464][T13264] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 559.191115][T14445] I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.204862][T14445] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 559.215848][T14445] I/O error, dev loop0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.226009][T14445] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 559.235796][T14445] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 559.244019][T14445] UDF-fs: Scanning with blocksize 2048 failed [ 559.252295][T14445] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.261926][T14445] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 559.272533][T14445] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 559.282638][T14445] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 559.290481][T14445] UDF-fs: Scanning with blocksize 4096 failed [ 559.296599][T14445] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 559.419750][ T5966] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 559.643025][ T5966] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.910493][T14444] lo speed is unknown, defaulting to 1000 [ 559.931697][ T5966] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 559.969192][ T5966] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 559.991911][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.000034][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 560.012161][ T5966] usb 3-1: config 0 descriptor?? [ 560.027589][ T5966] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 560.125958][T14386] chnl_net:caif_netlink_parms(): no params data found [ 560.200840][ T9] usb 1-1: config 0 has no interfaces? [ 560.210930][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 560.239894][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.264225][ T9] usb 1-1: Product: syz [ 560.269418][ T9] usb 1-1: Manufacturer: syz [ 560.274054][ T9] usb 1-1: SerialNumber: syz [ 560.310638][ T9] usb 1-1: config 0 descriptor?? [ 560.556179][T14457] kAFS: No cell specified [ 560.713573][T14466] __vm_enough_memory: pid: 14466, comm: syz.2.1650, bytes: 4115879641088 not enough memory for the allocation [ 560.800944][T13264] gspca_vc032x: reg_w err -110 [ 560.821451][T13264] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 560.882438][T14386] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.897599][T14386] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.959973][T14386] bridge_slave_0: entered allmulticast mode [ 561.004101][T14386] bridge_slave_0: entered promiscuous mode [ 561.032761][T14386] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.113174][T14080] Bluetooth: hci3: command tx timeout [ 561.143608][T14386] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.204177][T14386] bridge_slave_1: entered allmulticast mode [ 561.291555][T13264] usb 4-1: USB disconnect, device number 46 [ 561.330487][T14386] bridge_slave_1: entered promiscuous mode [ 562.232881][T14386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.336559][T14386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.424880][ T5974] usb 1-1: USB disconnect, device number 64 [ 562.735088][T14487] f2fs: Unknown parameter 'ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%' [ 562.844728][T14386] team0: Port device team_slave_0 added [ 562.896020][T14386] team0: Port device team_slave_1 added [ 563.023706][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.039605][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.211973][T14080] Bluetooth: hci3: command tx timeout [ 563.343185][T14386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.368561][T14386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.395888][T14386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.428353][T14386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.452863][T14386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.555059][T14386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.583522][T13264] usb 3-1: USB disconnect, device number 42 [ 563.745918][T14519] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1662'. [ 563.755839][ T5966] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 563.834013][T14386] hsr_slave_0: entered promiscuous mode [ 563.841356][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'. [ 563.857466][T14386] hsr_slave_1: entered promiscuous mode [ 563.865393][T14386] debugfs: 'hsr0' already exists in 'hsr' [ 563.879866][T14386] Cannot create hsr debugfs directory [ 563.899498][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'. [ 564.081250][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 564.111318][ T5966] usb 2-1: Using ep0 maxpacket: 16 [ 564.128150][ T5966] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.153627][ T5966] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 564.164505][ T5966] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 564.184891][T14521] kAFS: No cell specified [ 564.200042][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.223645][ T5966] usb 2-1: config 0 descriptor?? [ 564.241275][T14528] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1662'. [ 564.282540][T14530] bridge_slave_1: left allmulticast mode [ 564.292077][T14530] bridge_slave_1: left promiscuous mode [ 564.298185][T14530] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.332337][T14530] bridge_slave_0: left allmulticast mode [ 564.362568][T14530] bridge_slave_0: left promiscuous mode [ 564.368588][T14530] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.378644][T14539] usb usb8: usbfs: process 14539 (syz.3.1664) did not claim interface 0 before use [ 564.442959][T13264] usb 2-1: USB disconnect, device number 46 [ 565.335946][T14553] program syz.2.1667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.381304][T14554] program syz.2.1667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.020508][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 569.343519][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 569.420172][ T9] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67 [ 569.522793][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.039538][ T9] usb 1-1: Product: syz [ 570.043750][ T9] usb 1-1: Manufacturer: syz [ 570.048348][ T9] usb 1-1: SerialNumber: syz [ 570.065550][T14386] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 570.086135][ T9] usb 1-1: config 0 descriptor?? [ 570.112112][T14386] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 570.129480][ T9] ipw 1-1:0.0: IPWireless converter converter detected [ 570.148542][T14386] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 570.192249][T14386] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 570.241339][ T5974] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 570.276847][ T5966] usb 1-1: USB disconnect, device number 65 [ 570.286541][ T5966] ipw 1-1:0.0: device disconnected [ 570.580893][ T5974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.591490][ T5974] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 570.700004][T14589] hfs: Unknown parameter 'È' [ 571.007037][T13264] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 571.119861][ T5974] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 571.135120][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.157056][ T5974] usb 4-1: config 0 descriptor?? [ 571.166347][ T5974] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 571.336822][T14590] kAFS: No cell specified [ 571.370387][T14386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.412887][T14386] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.422407][T13264] usb 3-1: Using ep0 maxpacket: 32 [ 571.468602][T13264] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 571.488188][T13264] usb 3-1: config 0 has no interface number 0 [ 571.506204][ T7111] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.513521][ T7111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.531494][T13264] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.558416][T13264] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.570644][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.577924][ T7111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.585799][T13264] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 571.626496][T13264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.700228][T13264] usb 3-1: config 0 descriptor?? [ 572.050036][T14602] __vm_enough_memory: pid: 14602, comm: syz.3.1671, bytes: 4115879641088 not enough memory for the allocation [ 573.480810][T13264] uclogic 0003:28BD:0094.000D: failed retrieving string descriptor #100: -71 [ 573.669455][T13264] uclogic 0003:28BD:0094.000D: failed retrieving pen parameters: -71 [ 573.677593][T13264] uclogic 0003:28BD:0094.000D: pen probing failed: -71 [ 573.695294][T13264] uclogic 0003:28BD:0094.000D: failed probing parameters: -71 [ 573.703526][T13264] uclogic 0003:28BD:0094.000D: probe with driver uclogic failed with error -71 [ 573.734976][T13264] usb 3-1: USB disconnect, device number 43 [ 573.824606][T14386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.975859][T14649] binder: BINDER_SET_CONTEXT_MGR already set [ 575.072165][T14649] binder: 14648:14649 ioctl 4018620d 2000000000c0 returned -16 [ 576.231814][ T7392] usb 4-1: USB disconnect, device number 47 [ 576.257959][T14386] veth0_vlan: entered promiscuous mode [ 576.357729][T14386] veth1_vlan: entered promiscuous mode [ 577.056870][T14386] veth0_macvtap: entered promiscuous mode [ 577.861928][T14386] veth1_macvtap: entered promiscuous mode [ 577.914909][ T30] audit: type=1800 audit(1758609652.316:113): pid=14680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1697" name="file1" dev="overlay" ino=1942 res=0 errno=0 [ 578.123746][T14386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.162365][T14386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.176482][ T77] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.232120][ T77] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.385386][ T77] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.459357][ T5966] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 578.497566][ T77] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.506560][ T7392] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 578.639630][ T5966] usb 1-1: Using ep0 maxpacket: 16 [ 578.683614][ T5966] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 578.695145][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.704217][ T5966] usb 1-1: Product: syz [ 578.712434][ T5966] usb 1-1: Manufacturer: syz [ 578.717825][ T5966] usb 1-1: SerialNumber: syz [ 578.792670][ T7392] usb 4-1: Using ep0 maxpacket: 32 [ 578.794898][ T5966] usb 1-1: config 0 descriptor?? [ 578.848459][ T5966] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 578.921005][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 579.082048][ T7392] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 579.111266][ T7392] usb 4-1: config 0 has no interface number 0 [ 579.118119][ T7392] usb 4-1: config 0 interface 133 has no altsetting 0 [ 579.163760][ T7392] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=cf.79 [ 579.194791][ T7392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.209634][ T7392] usb 4-1: Product: syz [ 579.213859][ T7392] usb 4-1: Manufacturer: syz [ 579.218755][ T7392] usb 4-1: SerialNumber: syz [ 579.864498][ T7392] usb 4-1: config 0 descriptor?? [ 579.890268][ T10] usb 3-1: too many configurations: 16, using maximum allowed: 8 [ 579.987663][T12276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.035049][ T10] usb 3-1: config index 0 descriptor too short (expected 511, got 441) [ 580.053367][T12276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.071691][ T7392] usb 4-1: can't set config #0, error -71 [ 580.081691][ T10] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 580.110639][ T7392] usb 4-1: USB disconnect, device number 48 [ 580.128410][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.153259][T14687] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 580.161231][ T10] usb 3-1: config 0 has no interface number 0 [ 580.164878][T13264] IPVS: starting estimator thread 0... [ 580.168022][ T10] usb 3-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 580.213381][T13264] usb 1-1: USB disconnect, device number 66 [ 580.284562][T12255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.319642][T14705] IPVS: using max 29 ests per chain, 69600 per kthread [ 580.338150][ T10] usb 3-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 580.352282][ T10] usb 3-1: config 0 interface 48 has no altsetting 0 [ 580.388836][ T10] usb 3-1: config index 1 descriptor too short (expected 511, got 441) [ 580.405844][ T10] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 580.424130][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.429690][T12255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.701001][ T5941] IPVS: starting estimator thread 0... [ 580.909943][T14711] IPVS: using max 27 ests per chain, 64800 per kthread [ 580.930449][ T10] usb 3-1: config 0 has no interface number 0 [ 580.936652][ T10] usb 3-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 580.950085][ T10] usb 3-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 580.964409][ T10] usb 3-1: config 0 interface 48 has no altsetting 0 [ 580.975883][ T10] usb 3-1: config index 2 descriptor too short (expected 511, got 441) [ 580.999320][ T10] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 581.059499][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.079310][ T10] usb 3-1: config 0 has no interface number 0 [ 581.119569][ T10] usb 3-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 581.159008][ T10] usb 3-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 581.332250][ T10] usb 3-1: config 0 interface 48 has no altsetting 0 [ 581.348549][ T10] usb 3-1: config index 3 descriptor too short (expected 511, got 441) [ 581.367925][ T10] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 581.390681][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.401422][ T10] usb 3-1: config 0 has no interface number 0 [ 581.407832][ T10] usb 3-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 581.513949][ T10] usb 3-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 581.572174][ T10] usb 3-1: config 0 interface 48 has no altsetting 0 [ 581.652818][ T10] usb 3-1: unable to read config index 4 descriptor/start: -71 [ 581.671286][ T10] usb 3-1: can't read configurations, error -71 [ 581.897958][T14750] syzkaller0: entered promiscuous mode [ 581.910732][T14750] syzkaller0: entered allmulticast mode [ 581.971594][T14746] lo speed is unknown, defaulting to 1000 [ 582.410652][T14765] blk_print_req_error: 3 callbacks suppressed [ 582.410670][T14765] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 582.427951][T14765] hfs: can't find a HFS filesystem on dev loop1 [ 582.656016][T14771] netlink: 'syz.3.1716': attribute type 21 has an invalid length. [ 583.231913][T14080] Bluetooth: hci3: command tx timeout [ 585.413904][T14794] overlayfs: failed to clone upperpath [ 585.556027][T14080] Bluetooth: hci1: command 0x0406 tx timeout [ 585.708204][T14771] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1716'. [ 585.818558][T14804] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 585.860496][T14804] exFAT-fs (loop3): unable to read boot sector [ 585.919425][T14804] exFAT-fs (loop3): failed to read boot sector [ 585.941316][T14804] exFAT-fs (loop3): failed to recognize exfat type [ 586.675932][T14842] netem: incorrect gi model size [ 586.690082][T14842] netem: change failed [ 586.726859][T14843] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 586.954078][ T5183] Bluetooth: hci1: unexpected event for opcode 0x09ee [ 587.806434][T14839] syz.2.1735 (14839): drop_caches: 2 [ 588.011059][ T6007] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 588.311050][ T6007] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.326228][ T6007] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 588.338598][ T6007] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 588.348358][ T6007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.358586][ T6007] usb 4-1: Product: syz [ 588.363272][ T6007] usb 4-1: Manufacturer: syz [ 588.368016][ T6007] usb 4-1: SerialNumber: syz [ 588.606530][T14866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1740'. [ 588.649299][ T7392] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 588.761653][ T6007] usb 4-1: 0:2 : does not exist [ 588.780588][ T6007] usb 4-1: USB disconnect, device number 49 [ 588.814352][ T7392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.830347][ T7392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.843323][ T7392] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 588.852802][ T7392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.866434][ T7392] usb 1-1: config 0 descriptor?? [ 589.301986][T14899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.313556][ T7392] hid_parser_main: 7 callbacks suppressed [ 589.313578][ T7392] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 589.337860][T14907] hpfs: Bad magic ... probably not HPFS [ 589.342143][T14899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.345735][ T7392] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 589.361849][T14907] omfs: Invalid superblock (0) [ 589.386990][ T7392] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.000E/input/input31 [ 589.446257][ T7392] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 589.603141][ T7392] usb 1-1: USB disconnect, device number 67 [ 589.731670][T14911] fido_id[14911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 590.794429][T14951] 9pnet_fd: Insufficient options for proto=fd [ 590.864975][T14956] netlink: 'syz.3.1762': attribute type 1 has an invalid length. [ 590.984740][T14960] bond1: (slave geneve2): making interface the new active one [ 590.993057][ T5183] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 591.003920][ T5183] Bluetooth: hci1: Injecting HCI hardware error event [ 591.014946][ T5183] Bluetooth: hci1: hardware error 0x00 [ 591.037265][T14960] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 591.091914][ T7040] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 591.112366][T14954] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3919364976 (501678716928 ns) > initial count (201147751424 ns). Using initial count to start timer. [ 591.155104][ T7040] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 591.321260][ T7040] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 591.330307][T14956] mkiss: ax0: crc mode is auto. [ 591.335246][ T7040] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 592.629503][ T938] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 592.749930][T15005] IPVS: length: 24 != 312 [ 592.792471][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 592.895658][T15009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.542877][ T5183] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 593.662509][ T938] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 593.692574][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.738116][ T938] usb 1-1: Product: syz [ 593.762790][ T938] usb 1-1: Manufacturer: syz [ 593.784255][ T938] usb 1-1: SerialNumber: syz [ 593.808409][ T938] usb 1-1: config 0 descriptor?? [ 593.832142][ T938] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 594.340712][ T938] usb 1-1: Detected FT232H [ 594.368776][ T938] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 594.390339][ T938] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 594.441457][ T938] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 594.492572][ T938] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 594.553390][ T938] usb 1-1: USB disconnect, device number 68 [ 594.601726][ T938] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 594.663911][ T938] ftdi_sio 1-1:0.0: device disconnected [ 594.696517][T15022] syzkaller0: entered promiscuous mode [ 594.755228][T15022] syzkaller0: entered allmulticast mode [ 596.972596][T15060] binder: BINDER_SET_CONTEXT_MGR already set [ 596.981910][T15062] binder: BINDER_SET_CONTEXT_MGR already set [ 596.987968][T15062] binder: 15059:15062 ioctl 4018620d 200000000040 returned -16 [ 596.996260][T15060] binder: 15059:15060 ioctl 4018620d 2000000000c0 returned -16 [ 597.469740][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 597.653471][ T9] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 597.662884][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.696859][ T9] usb 1-1: config 0 descriptor?? [ 597.741195][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 598.118268][ T9] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 598.644720][ T9] cpia1 1-1:0.0: only firmware version 1 is supported (got: 134) [ 599.787107][T15085] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1791'. [ 599.817745][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'. [ 599.829427][T15085] netlink: 'syz.1.1791': attribute type 1 has an invalid length. [ 600.059528][ T938] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 600.212123][ T938] usb 4-1: config 2 has an invalid interface number: 186 but max is 0 [ 600.220905][ T938] usb 4-1: config 2 has no interface number 0 [ 600.227013][ T938] usb 4-1: config 2 interface 186 has no altsetting 0 [ 600.238818][ T938] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 600.248741][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.257264][ T938] usb 4-1: Product: syz [ 600.262774][ T938] usb 4-1: Manufacturer: syz [ 600.267385][ T938] usb 4-1: SerialNumber: syz [ 600.490940][ T938] catc 4-1:2.186: Can't set altsetting 1. [ 600.496940][ T938] catc 4-1:2.186: probe with driver catc failed with error -5 [ 600.511797][ T938] usb 4-1: USB disconnect, device number 50 [ 600.815239][ T938] usb 1-1: USB disconnect, device number 69 [ 600.860679][ T30] audit: type=1804 audit(1758609675.266:114): pid=15107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1795" name="/newroot/377/cgroup.controllers" dev="tmpfs" ino=2051 res=1 errno=0 [ 600.914483][ T30] audit: type=1800 audit(1758609675.266:115): pid=15107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1795" name="cgroup.controllers" dev="tmpfs" ino=2051 res=0 errno=0 [ 600.936388][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.317897][T15116] affs: No valid root block on device loop2 [ 601.672044][T15135] netlink: 'syz.2.1803': attribute type 1 has an invalid length. [ 601.680064][T15135] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1803'. [ 601.839242][ T938] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 602.010941][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 602.010965][ T938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 602.010988][ T938] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 602.011000][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.012703][ T938] usb 4-1: config 0 descriptor?? [ 602.013210][T15123] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 602.388542][ T938] usbhid 4-1:0.0: can't add hid device: -71 [ 602.398036][ T938] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 602.460832][ T938] usb 4-1: USB disconnect, device number 51 [ 602.612397][T15168] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1809'. [ 602.716612][T15170] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 602.775691][T15170] hfs: can't find a HFS filesystem on dev loop3 [ 603.052038][T15176] sp0: Synchronizing with TNC [ 603.131070][T15181] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 603.165668][T15181] EXT4-fs (loop2): unable to read superblock [ 603.476016][T15192] FAULT_INJECTION: forcing a failure. [ 603.476016][T15192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.489513][T15192] CPU: 0 UID: 0 PID: 15192 Comm: syz.2.1818 Not tainted syzkaller #0 PREEMPT(full) [ 603.489536][T15192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 603.489546][T15192] Call Trace: [ 603.489553][T15192] [ 603.489560][T15192] dump_stack_lvl+0x189/0x250 [ 603.489582][T15192] ? irqentry_exit+0x74/0x90 [ 603.489600][T15192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.489622][T15192] ? dump_stack+0x9/0x20 [ 603.489641][T15192] should_fail_ex+0x414/0x560 [ 603.489672][T15192] _copy_from_user+0x2d/0xb0 [ 603.489687][T15192] __x64_sys_rt_sigsuspend+0xce/0x150 [ 603.489706][T15192] ? __pfx___x64_sys_rt_sigsuspend+0x10/0x10 [ 603.489724][T15192] ? trace_sys_enter+0x25/0x100 [ 603.489744][T15192] ? syscall_trace_enter+0xf9/0x160 [ 603.489766][T15192] do_syscall_64+0xfa/0xfa0 [ 603.489782][T15192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.489795][T15192] ? asm_sysvec_call_function_single+0x1a/0x20 [ 603.489808][T15192] ? clear_bhb_loop+0x60/0xb0 [ 603.489824][T15192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.489837][T15192] RIP: 0033:0x7fd0ffb8eec9 [ 603.489850][T15192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.489862][T15192] RSP: 002b:00007fd100990038 EFLAGS: 00000246 ORIG_RAX: 0000000000000082 [ 603.489878][T15192] RAX: ffffffffffffffda RBX: 00007fd0ffde6090 RCX: 00007fd0ffb8eec9 [ 603.489888][T15192] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000100 [ 603.489896][T15192] RBP: 00007fd100990090 R08: 0000000000000000 R09: 0000000000000000 [ 603.489905][T15192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.489914][T15192] R13: 00007fd0ffde6128 R14: 00007fd0ffde6090 R15: 00007fff0b8395b8 [ 603.489938][T15192] [ 605.040512][T15218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1825'. [ 605.833895][T15237] netlink: 'syz.3.1829': attribute type 11 has an invalid length. [ 606.170066][ T938] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 606.220362][T15257] sctp: [Deprecated]: syz.1.1838 (pid 15257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 606.220362][T15257] Use struct sctp_sack_info instead [ 606.335318][T15261] pim6reg: entered allmulticast mode [ 606.381674][ T938] usb 3-1: Using ep0 maxpacket: 32 [ 606.516656][ T938] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 606.516687][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.516706][ T938] usb 3-1: Product: syz [ 606.516719][ T938] usb 3-1: Manufacturer: syz [ 606.516733][ T938] usb 3-1: SerialNumber: syz [ 606.519998][ T938] usb 3-1: config 0 descriptor?? [ 606.523541][ T938] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 606.801452][ T938] gspca_ov534_9: reg_w failed -71 [ 607.349691][ T938] gspca_ov534_9: Unknown sensor 0000 [ 607.349816][ T938] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 607.381701][ T938] usb 3-1: USB disconnect, device number 46 [ 608.175878][T15290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1848'. [ 608.800421][T15302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1851'. [ 609.122716][T15313] openvswitch: netlink: Message has 4 unknown bytes. [ 610.055622][T15326] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 610.065634][T15326] FAT-fs (loop2): unable to read boot sector [ 610.627262][T15356] kAFS: No cell specified [ 611.173342][T15366] kAFS: No cell specified [ 615.624720][T15426] Invalid ELF header len 8 [ 616.344015][T15430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1887'. [ 616.355297][T15428] kAFS: No cell specified [ 616.580072][T15437] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 616.590637][T15437] exFAT-fs (loop3): unable to read boot sector [ 616.596946][T15437] exFAT-fs (loop3): failed to read boot sector [ 616.610258][T15437] exFAT-fs (loop3): failed to recognize exfat type [ 616.759106][ T6007] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 618.215848][ T6007] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 618.245156][ T6007] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 618.257189][ T6007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.277024][ T6007] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 618.592108][ T30] audit: type=1326 audit(1758609693.006:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5178eec9 code=0x7ffc0000 [ 618.633157][ T30] audit: type=1326 audit(1758609693.026:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5178eec9 code=0x7ffc0000 [ 618.656548][ T30] audit: type=1326 audit(1758609693.026:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5178eec9 code=0x7ffc0000 [ 618.682473][ T30] audit: type=1326 audit(1758609693.026:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5178eec9 code=0x7ffc0000 [ 618.704840][ C1] vkms_vblank_simulate: vblank timer overrun [ 618.714023][ T30] audit: type=1326 audit(1758609693.026:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d5178eec9 code=0x7ffc0000 [ 618.738186][ T30] audit: type=1326 audit(1758609693.036:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5178eec9 code=0x7ffc0000 [ 618.764726][ T30] audit: type=1326 audit(1758609693.036:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d5178eec9 code=0x7ffc0000 [ 618.787810][ T30] audit: type=1326 audit(1758609693.036:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5178eec9 code=0x7ffc0000 [ 618.812818][ T30] audit: type=1326 audit(1758609693.036:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f1d5178eec9 code=0x7ffc0000 [ 618.859321][ T30] audit: type=1326 audit(1758609693.036:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5178eec9 code=0x7ffc0000 [ 619.402637][ T6007] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 619.429247][ T6007] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 619.480798][ T6007] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 619.531532][ T6007] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 619.885790][ T6007] usb 1-1: USB disconnect, device number 70 [ 620.029964][ T5966] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 620.239586][ T5966] usb 3-1: Using ep0 maxpacket: 8 [ 620.262284][ T5966] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 620.340957][ T5966] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 620.426497][ T5966] usb 3-1: config 179 has no interface number 0 [ 620.459842][ T5966] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 620.727723][ T5966] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 620.748014][ T5966] usb 3-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 620.766242][ T5966] usb 3-1: config 179 interface 65 has no altsetting 0 [ 620.774496][ T5966] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 620.784402][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.562703][T15502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 621.571214][T15502] team0: Port device bond2 added [ 621.780286][ T5966] usb 3-1: USB disconnect, device number 47 [ 624.469935][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.597422][T15553] netlink: 'syz.6.1924': attribute type 29 has an invalid length. [ 624.633282][T15553] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1924'. [ 625.104771][ T5966] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 625.412972][ T5966] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 625.425649][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.464461][ T5966] usb 3-1: Product: syz [ 625.488665][ T5966] usb 3-1: Manufacturer: syz [ 625.513602][ T5966] usb 3-1: SerialNumber: syz [ 625.903668][ T5966] usb 3-1: config 0 descriptor?? [ 625.915960][ T5966] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 626.139534][ T5966] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 626.147200][ T5966] sq905c 3-1:0.0: Get version command failed [ 626.223752][ T5966] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 626.243119][T15574] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 626.253049][T15574] hfsplus: unable to find HFS+ superblock [ 626.269255][T15574] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 626.278804][T15574] EXT4-fs (loop6): unable to read superblock [ 626.292442][ T5966] usb 3-1: USB disconnect, device number 48 [ 627.115535][T15586] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.128187][T15586] FAT-fs (loop2): unable to read boot sector [ 627.138931][ T7392] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 627.241493][T15586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 627.302140][ T7392] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.313026][ T7392] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 627.388215][T15596] __vm_enough_memory: pid: 15596, comm: syz.1.1936, bytes: 4115879641088 not enough memory for the allocation [ 627.424236][ T7392] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 627.435783][ T7392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.481159][ T7392] usb 1-1: config 0 descriptor?? [ 627.576859][ T7392] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 628.680128][T15608] __vm_enough_memory: pid: 15608, comm: syz.0.1932, bytes: 4115879641088 not enough memory for the allocation [ 629.048015][T15616] nbd_handle_cmd: 2 callbacks suppressed [ 629.048040][T15616] block nbd0: Attempted send on invalid socket [ 629.067247][T15616] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 629.999246][ T6007] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 630.135192][ T6007] usb 3-1: device descriptor read/64, error -71 [ 630.392890][ T6007] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 630.539925][ T6007] usb 3-1: device descriptor read/64, error -71 [ 630.679277][ T6007] usb usb3-port1: attempt power cycle [ 631.080509][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 631.080525][ T30] audit: type=1804 audit(1758609705.126:189): pid=15635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1945" name="file0" dev="ramfs" ino=47336 res=1 errno=0 [ 631.730016][ T5941] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 631.928163][ T6007] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 631.962532][ T6007] usb 3-1: device descriptor read/8, error -71 [ 632.089494][ T5941] usb 4-1: device descriptor read/64, error -71 [ 632.299346][ T6007] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 632.310735][ T5966] usb 1-1: USB disconnect, device number 71 [ 632.339748][ T6007] usb 3-1: device descriptor read/8, error -71 [ 632.369706][ T5941] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 632.510603][ T5941] usb 4-1: device descriptor read/64, error -71 [ 632.683423][ T5941] usb usb4-port1: attempt power cycle [ 632.925416][ T6007] usb usb3-port1: unable to enumerate USB device [ 633.399651][ T5941] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 633.437488][T15656] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 633.469907][ T5941] usb 4-1: device descriptor read/8, error -71 [ 633.491253][T15656] EXT4-fs (loop2): unable to read superblock [ 633.510679][T15656] squashfs: Unknown parameter 'xœìÝ1h$Uðofw' [ 633.518308][T15662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1955'. [ 633.709551][ T5941] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 633.751919][ T5941] usb 4-1: device descriptor read/8, error -71 [ 633.863384][ T5941] usb usb4-port1: unable to enumerate USB device [ 635.319929][T15692] __vm_enough_memory: pid: 15692, comm: syz.2.1960, bytes: 4115879641088 not enough memory for the allocation [ 635.338463][T15691] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 636.087813][T15698] ip6gretap0: entered promiscuous mode [ 636.099836][T15698] macsec2: entered allmulticast mode [ 636.116677][T15698] ip6gretap0: entered allmulticast mode [ 636.140691][T15698] ip6gretap0: left allmulticast mode [ 636.146246][T15698] ip6gretap0: left promiscuous mode [ 637.574928][T15719] syz.3.1972 (15719): drop_caches: 2 [ 637.590273][T15719] syz.3.1972 (15719): drop_caches: 2 [ 639.361681][ T6007] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 639.540474][ T6007] usb 4-1: too many configurations: 16, using maximum allowed: 8 [ 639.579768][ T6007] usb 4-1: config index 0 descriptor too short (expected 511, got 441) [ 639.588156][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 639.634500][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.665386][ T6007] usb 4-1: config 0 has no interface number 0 [ 639.676654][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 639.693245][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 639.707760][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 639.726189][ T6007] usb 4-1: config index 1 descriptor too short (expected 511, got 441) [ 639.735427][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 639.744279][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.756840][ T6007] usb 4-1: config 0 has no interface number 0 [ 639.765209][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 639.781275][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 639.799608][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 639.821719][ T6007] usb 4-1: config index 2 descriptor too short (expected 511, got 441) [ 639.859416][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 639.880377][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.910459][ T6007] usb 4-1: config 0 has no interface number 0 [ 639.927112][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 639.940440][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 639.956361][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 639.966921][ T6007] usb 4-1: config index 3 descriptor too short (expected 511, got 441) [ 639.988938][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 640.004175][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.027576][ T6007] usb 4-1: config 0 has no interface number 0 [ 640.043542][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 640.071182][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 640.092617][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 640.116589][ T6007] usb 4-1: config index 4 descriptor too short (expected 511, got 441) [ 640.125357][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 640.134098][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.147267][ T6007] usb 4-1: config 0 has no interface number 0 [ 640.153784][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 640.167749][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 640.197470][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 640.206957][ T6007] usb 4-1: config index 5 descriptor too short (expected 511, got 441) [ 640.215913][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 640.229224][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.248935][ T6007] usb 4-1: config 0 has no interface number 0 [ 640.257809][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 640.274706][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 640.288704][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 640.314324][ T6007] usb 4-1: config index 6 descriptor too short (expected 511, got 441) [ 640.323609][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 640.332635][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.343499][ T6007] usb 4-1: config 0 has no interface number 0 [ 640.360119][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 640.378100][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 640.393550][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 640.407004][ T6007] usb 4-1: config index 7 descriptor too short (expected 511, got 441) [ 640.419218][ T6007] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 640.428091][ T6007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.441235][ T6007] usb 4-1: config 0 has no interface number 0 [ 640.450867][ T6007] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 640.463250][ T6007] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 640.478945][ T6007] usb 4-1: config 0 interface 48 has no altsetting 0 [ 640.489266][ T6007] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 640.499259][ T6007] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.516510][ T6007] usb 4-1: config 0 descriptor?? [ 640.699602][T15773] overlayfs: failed to clone upperpath [ 640.743745][ T6007] usb 4-1: string descriptor 0 read error: -71 [ 640.783657][ T6007] usb 4-1: USB disconnect, device number 56 [ 642.045432][T15789] netlink: 'syz.1.1990': attribute type 10 has an invalid length. [ 642.058329][T15789] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 643.084331][T15804] syz.6.1995 (15804): drop_caches: 2 [ 643.102276][T15799] lo speed is unknown, defaulting to 1000 [ 643.122760][T15804] syz.6.1995 (15804): drop_caches: 2 [ 643.192449][T15804] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 643.955836][T15823] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2000'. [ 643.977584][T15823] ip6gretap0: entered promiscuous mode [ 643.994766][T15823] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2000'. [ 644.311567][T15831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2002'. [ 644.741588][T15839] kAFS: No cell specified [ 644.924638][T15853] EXT4-fs: Ignoring removed nobh option [ 644.933101][T15853] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 644.943399][T15853] EXT4-fs (loop3): unable to read superblock [ 647.350125][T15891] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 647.365197][T15891] exFAT-fs (loop0): unable to read boot sector [ 647.375951][T15891] exFAT-fs (loop0): failed to read boot sector [ 647.383252][T15891] exFAT-fs (loop0): failed to recognize exfat type [ 648.131626][T15903] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 648.559167][T13264] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 648.578495][T15916] kAFS: No cell specified [ 648.731473][T13264] usb 1-1: Using ep0 maxpacket: 16 [ 648.739773][T13264] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 648.748500][T13264] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.759270][T13264] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 648.771635][T13264] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 648.781083][T13264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.789632][T13264] usb 1-1: Product: syz [ 648.793808][T13264] usb 1-1: Manufacturer: syz [ 648.798416][T13264] usb 1-1: SerialNumber: syz [ 649.523479][T15919] EXT4-fs: Invalid want_extra_isize 9 [ 649.930023][T15934] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 649.940639][T15934] EXT4-fs (loop0): unable to read superblock [ 650.340802][T15933] sg_write: process 182 (syz.6.2030) changed security contexts after opening file descriptor, this is not allowed. [ 651.464668][T13264] usb 1-1: 0:2 : does not exist [ 651.522413][T13264] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 652.020571][T15953] IPVS: Error joining to the multicast group [ 652.181941][T13264] usb 1-1: USB disconnect, device number 72 [ 652.277996][ T8731] udevd[8731]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.326520][T15960] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.341174][T15960] exFAT-fs (loop3): unable to read boot sector [ 652.355828][T15960] exFAT-fs (loop3): failed to read boot sector [ 652.407872][T15960] exFAT-fs (loop3): failed to recognize exfat type [ 652.765877][T15975] syz.0.2042 (15975): drop_caches: 2 [ 653.108604][T15975] syz.0.2042 (15975): drop_caches: 2 [ 653.112485][T15972] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 653.237952][T15984] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 653.255453][T15984] SQUASHFS error: Failed to read block 0x0: -5 [ 653.264707][T15984] unable to read squashfs_super_block [ 653.293518][T15988] netlink: 'syz.3.2046': attribute type 1 has an invalid length. [ 653.302322][T15988] netlink: 'syz.3.2046': attribute type 2 has an invalid length. [ 653.501661][T13264] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 653.574513][T16003] netlink: 'syz.3.2051': attribute type 1 has an invalid length. [ 653.639407][T13264] usb 1-1: device descriptor read/64, error -71 [ 653.880032][T13264] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 654.259466][T16008] vfat: Bad value for 'fmask' [ 654.265499][T16008] usb usb8: usbfs: process 16008 (syz.6.2044) did not claim interface 0 before use [ 654.310938][T13264] usb 1-1: device descriptor read/64, error -71 [ 654.421260][T13264] usb usb1-port1: attempt power cycle [ 654.789913][T13264] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 654.856930][T13264] usb 1-1: device descriptor read/8, error -71 [ 654.859889][T16019] overlayfs: failed to clone upperpath [ 655.169477][T13264] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 655.224251][T13264] usb 1-1: device descriptor read/8, error -71 [ 655.791881][T13264] usb usb1-port1: unable to enumerate USB device [ 656.315242][T16050] __vm_enough_memory: pid: 16050, comm: syz.1.2063, bytes: 4115879641088 not enough memory for the allocation [ 656.331485][T16046] FAULT_INJECTION: forcing a failure. [ 656.331485][T16046] name failslab, interval 1, probability 0, space 0, times 0 [ 656.345305][T16046] CPU: 1 UID: 0 PID: 16046 Comm: syz.3.2062 Not tainted syzkaller #0 PREEMPT(full) [ 656.345329][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 656.345340][T16046] Call Trace: [ 656.345347][T16046] [ 656.345355][T16046] dump_stack_lvl+0x189/0x250 [ 656.345391][T16046] ? __pfx____ratelimit+0x10/0x10 [ 656.345411][T16046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.345430][T16046] ? __pfx__printk+0x10/0x10 [ 656.345458][T16046] ? __pfx___might_resched+0x10/0x10 [ 656.345485][T16046] should_fail_ex+0x414/0x560 [ 656.345511][T16046] should_failslab+0xa8/0x100 [ 656.345531][T16046] __kmalloc_noprof+0xcb/0x7f0 [ 656.345552][T16046] ? kfree+0x4d/0x6d0 [ 656.345568][T16046] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 656.345594][T16046] tomoyo_realpath_from_path+0xe3/0x5d0 [ 656.345608][T16046] ? tomoyo_domain+0xd9/0x130 [ 656.345624][T16046] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 656.345637][T16046] tomoyo_path_number_perm+0x1e8/0x5a0 [ 656.345649][T16046] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 656.345685][T16046] ? __fget_files+0x2a/0x420 [ 656.345697][T16046] ? __fget_files+0x3a0/0x420 [ 656.345706][T16046] ? __fget_files+0x2a/0x420 [ 656.345717][T16046] security_file_ioctl+0xcb/0x2d0 [ 656.345729][T16046] __se_sys_ioctl+0x47/0x170 [ 656.345743][T16046] do_syscall_64+0xfa/0xfa0 [ 656.345755][T16046] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.345766][T16046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.345775][T16046] ? clear_bhb_loop+0x60/0xb0 [ 656.345787][T16046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.345795][T16046] RIP: 0033:0x7f555b58eec9 [ 656.345806][T16046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.345814][T16046] RSP: 002b:00007f555c4a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.345826][T16046] RAX: ffffffffffffffda RBX: 00007f555b7e6090 RCX: 00007f555b58eec9 [ 656.345832][T16046] RDX: 0000200000000180 RSI: 000000004068aea3 RDI: 0000000000000005 [ 656.345838][T16046] RBP: 00007f555c4a6090 R08: 0000000000000000 R09: 0000000000000000 [ 656.345844][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.345850][T16046] R13: 00007f555b7e6128 R14: 00007f555b7e6090 R15: 00007fffa83f32d8 [ 656.345866][T16046] [ 656.345871][T16046] ERROR: Out of memory at tomoyo_realpath_from_path. [ 656.369076][T16048] EXT4-fs: Conflicting test_dummy_encryption options [ 657.862530][T16071] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2072'. [ 659.687703][T16096] FAULT_INJECTION: forcing a failure. [ 659.687703][T16096] name failslab, interval 1, probability 0, space 0, times 0 [ 659.700724][T16096] CPU: 1 UID: 0 PID: 16096 Comm: syz.3.2078 Not tainted syzkaller #0 PREEMPT(full) [ 659.700746][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 659.700754][T16096] Call Trace: [ 659.700761][T16096] [ 659.700768][T16096] dump_stack_lvl+0x189/0x250 [ 659.700794][T16096] ? __pfx____ratelimit+0x10/0x10 [ 659.700814][T16096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 659.700831][T16096] ? __pfx__printk+0x10/0x10 [ 659.700855][T16096] ? __pfx___might_resched+0x10/0x10 [ 659.700875][T16096] ? fs_reclaim_acquire+0x7d/0x100 [ 659.700897][T16096] should_fail_ex+0x414/0x560 [ 659.700924][T16096] should_failslab+0xa8/0x100 [ 659.700944][T16096] __kmalloc_noprof+0xcb/0x7f0 [ 659.700963][T16096] ? tomoyo_encode+0x28b/0x550 [ 659.700989][T16096] tomoyo_encode+0x28b/0x550 [ 659.701023][T16096] tomoyo_realpath_from_path+0x58d/0x5d0 [ 659.701045][T16096] ? tomoyo_domain+0xd9/0x130 [ 659.701068][T16096] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 659.701085][T16096] tomoyo_path_number_perm+0x1e8/0x5a0 [ 659.701105][T16096] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 659.701162][T16096] ? __fget_files+0x2a/0x420 [ 659.701183][T16096] ? __fget_files+0x3a0/0x420 [ 659.701198][T16096] ? __fget_files+0x2a/0x420 [ 659.701217][T16096] security_file_ioctl+0xcb/0x2d0 [ 659.701237][T16096] __se_sys_ioctl+0x47/0x170 [ 659.701261][T16096] do_syscall_64+0xfa/0xfa0 [ 659.701280][T16096] ? lockdep_hardirqs_on+0x9c/0x150 [ 659.701300][T16096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.701316][T16096] ? clear_bhb_loop+0x60/0xb0 [ 659.701338][T16096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.701354][T16096] RIP: 0033:0x7f555b58eec9 [ 659.701371][T16096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.701386][T16096] RSP: 002b:00007f555c4a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.701404][T16096] RAX: ffffffffffffffda RBX: 00007f555b7e6090 RCX: 00007f555b58eec9 [ 659.701418][T16096] RDX: 0000200000000180 RSI: 000000004068aea3 RDI: 0000000000000005 [ 659.701429][T16096] RBP: 00007f555c4a6090 R08: 0000000000000000 R09: 0000000000000000 [ 659.701439][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.701448][T16096] R13: 00007f555b7e6128 R14: 00007f555b7e6090 R15: 00007fffa83f32d8 [ 659.701476][T16096] [ 659.701495][T16096] ERROR: Out of memory at tomoyo_realpath_from_path. [ 660.914704][ T7392] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 660.944541][T16109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.960141][T16109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.139514][ T7392] usb 1-1: Using ep0 maxpacket: 16 [ 661.166303][ T7392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 661.207229][ T7392] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 661.254152][ T7392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.283575][ T7392] usb 1-1: Product: syz [ 661.287791][ T7392] usb 1-1: Manufacturer: syz [ 661.338709][ T7392] usb 1-1: SerialNumber: syz [ 661.378781][ T7392] usb 1-1: config 0 descriptor?? [ 661.414426][ T7392] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 661.414461][ T7392] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 661.429850][ T938] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 661.572169][ T938] usb 4-1: device descriptor read/64, error -71 [ 661.664756][T16131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2086'. [ 661.691460][T16128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2086'. [ 661.752374][T16122] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 661.780143][T16122] bcachefs (/dev/loop6): error reading default superblock: IO error: -5 [ 661.791922][T16122] I/O error, dev loop6, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 661.805225][T16122] bcachefs (/dev/loop6): error reading superblock: IO error: -5 [ 661.810419][ T938] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 661.814378][T16122] bcachefs: bch2_fs_get_tree() error: EIO [ 661.851283][T16122] Invalid source name [ 661.855311][T16122] UBIFS error (pid: 16122): cannot open "./file0", error -22 [ 661.875001][T16122] hfsplus: Unknown parameter '0x0000000000000006' [ 661.959725][ T938] usb 4-1: device descriptor read/64, error -71 [ 662.023515][ T7392] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 662.071291][ T938] usb usb4-port1: attempt power cycle [ 662.471124][ T938] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 662.510218][ T938] usb 4-1: device descriptor read/8, error -71 [ 662.533079][T16144] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 662.567441][T16144] cramfs: wrong magic [ 662.612400][T16146] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 662.859105][T16146] EXT4-fs (loop0): unable to read superblock [ 662.959482][ T938] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 662.991718][ T938] usb 4-1: device descriptor read/8, error -71 [ 663.109797][ T938] usb usb4-port1: unable to enumerate USB device [ 664.392932][ T7392] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 664.458215][ T7392] em28xx 1-1:0.0: board has no eeprom [ 664.529052][ T7392] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 664.529080][ T7392] em28xx 1-1:0.0: dvb set to bulk mode. [ 664.530082][ T6007] em28xx 1-1:0.0: Binding DVB extension [ 664.541430][ T7392] usb 1-1: USB disconnect, device number 77 [ 664.542930][ T7392] em28xx 1-1:0.0: Disconnecting em28xx [ 664.639931][ T6007] em28xx 1-1:0.0: Registering input extension [ 664.645919][ T7392] em28xx 1-1:0.0: Closing input extension [ 664.708477][ T7392] em28xx 1-1:0.0: Freeing device [ 667.166472][T16215] netlink: 'syz.1.2105': attribute type 4 has an invalid length. [ 667.838940][ T7392] lo speed is unknown, defaulting to 1000 [ 667.845112][ T7392] syz0: Port: 1 Link DOWN [ 668.134069][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2108'. [ 668.154114][T16217] netlink: 'syz.1.2108': attribute type 16 has an invalid length. [ 668.166321][T16217] netlink: 'syz.1.2108': attribute type 17 has an invalid length. [ 669.061224][T16229] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2114'. [ 669.088676][T16229] overlay: Unknown parameter 'pcr' [ 669.266554][T16209] kAFS: No cell specified [ 669.278349][T16243] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2118'. [ 669.290766][T16243] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2118'. [ 670.149486][T16248] sp0: Synchronizing with TNC [ 671.067069][ T30] audit: type=1326 audit(1758609745.476:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.2.2129" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0ffb8eec9 code=0x0 [ 671.180240][T16285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 671.492423][T16311] 9p: Unknown Cache mode or invalid value mtaÎiÅ”ùpcl [ 671.551694][T16314] fuse: Bad value for 'group_id' [ 671.557430][T16314] fuse: Bad value for 'group_id' [ 672.059460][ T5941] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 672.187310][T16321] fanotify_encode_fh: 864 callbacks suppressed [ 672.187330][T16321] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 672.221393][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 672.233843][ T5941] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 672.261918][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.324619][ T5941] usb 4-1: Product: syz [ 672.352367][ T5941] usb 4-1: Manufacturer: syz [ 672.362437][ T5941] usb 4-1: SerialNumber: syz [ 672.382784][ T5941] r8152-cfgselector 4-1: Unknown version 0x0000 [ 672.400893][ T5941] r8152-cfgselector 4-1: config 0 descriptor?? [ 673.293755][ T5941] r8152-cfgselector 4-1: Unknown version 0x0000 [ 673.381609][ T5941] r8152-cfgselector 4-1: bad CDC descriptors [ 673.396594][ T5941] r8152-cfgselector 4-1: USB disconnect, device number 61 [ 675.360009][ T5974] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 675.535885][ T5974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.069553][ T5974] usb 1-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.00 [ 676.078746][ T5974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.122043][ T5974] usb 1-1: config 0 descriptor?? [ 676.205260][ T5974] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input35 [ 676.563549][ T5218] bcm5974 1-1:0.0: could not read from device [ 676.591328][ T5218] bcm5974 1-1:0.0: could not read from device [ 676.647544][ T5974] usb 1-1: USB disconnect, device number 78 [ 676.661243][ T8493] bcm5974 1-1:0.0: could not read from device [ 676.825365][ T8493] udevd[8493]: Error opening device "/dev/input/event4": No such device [ 676.867063][ T8493] udevd[8493]: Unable to EVIOCGABS device "/dev/input/event4" [ 677.038337][ T8493] udevd[8493]: Unable to EVIOCGABS device "/dev/input/event4" [ 677.077387][ T8493] udevd[8493]: Unable to EVIOCGABS device "/dev/input/event4" [ 677.121820][ T8493] udevd[8493]: Unable to EVIOCGABS device "/dev/input/event4" [ 677.780487][T16434] FAULT_INJECTION: forcing a failure. [ 677.780487][T16434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.828943][T16434] CPU: 0 UID: 0 PID: 16434 Comm: syz.0.2164 Not tainted syzkaller #0 PREEMPT(full) [ 677.828969][T16434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 677.828980][T16434] Call Trace: [ 677.828988][T16434] [ 677.828997][T16434] dump_stack_lvl+0x189/0x250 [ 677.829024][T16434] ? __pfx____ratelimit+0x10/0x10 [ 677.829044][T16434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.829065][T16434] ? __pfx__printk+0x10/0x10 [ 677.829089][T16434] ? __might_fault+0xb0/0x130 [ 677.829124][T16434] should_fail_ex+0x414/0x560 [ 677.829152][T16434] _copy_from_user+0x2d/0xb0 [ 677.829171][T16434] ucma_notify+0x8f/0x200 [ 677.829192][T16434] ? __pfx_ucma_notify+0x10/0x10 [ 677.829226][T16434] ucma_write+0x249/0x2e0 [ 677.829253][T16434] ? __pfx_ucma_write+0x10/0x10 [ 677.829275][T16434] ? security_file_permission+0x75/0x290 [ 677.829295][T16434] ? rw_verify_area+0x255/0x4d0 [ 677.829320][T16434] vfs_writev+0x4b6/0x960 [ 677.829339][T16434] ? __pfx_ucma_write+0x10/0x10 [ 677.829362][T16434] ? __pfx_vfs_writev+0x10/0x10 [ 677.829392][T16434] ? __fget_files+0x2a/0x420 [ 677.829412][T16434] ? __fget_files+0x3a0/0x420 [ 677.829424][T16434] ? __fget_files+0x2a/0x420 [ 677.829450][T16434] do_writev+0x14d/0x2d0 [ 677.829470][T16434] ? __pfx_do_writev+0x10/0x10 [ 677.829489][T16434] ? __secure_computing+0xe2/0x2a0 [ 677.829514][T16434] do_syscall_64+0xfa/0xfa0 [ 677.829534][T16434] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.829553][T16434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.829570][T16434] ? clear_bhb_loop+0x60/0xb0 [ 677.829591][T16434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.829607][T16434] RIP: 0033:0x7fa34df8eec9 [ 677.829624][T16434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.829639][T16434] RSP: 002b:00007fa34eed8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 677.829658][T16434] RAX: ffffffffffffffda RBX: 00007fa34e1e5fa0 RCX: 00007fa34df8eec9 [ 677.829671][T16434] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f [ 677.829682][T16434] RBP: 00007fa34eed8090 R08: 0000000000000000 R09: 0000000000000000 [ 677.829693][T16434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.829704][T16434] R13: 00007fa34e1e6038 R14: 00007fa34e1e5fa0 R15: 00007ffd2fd30f88 [ 677.829736][T16434] [ 679.133258][T16456] overlayfs: failed to clone upperpath [ 679.294814][T16470] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 679.336172][T16470] EXT4-fs (loop3): unable to read superblock [ 679.353643][T16473] FAULT_INJECTION: forcing a failure. [ 679.353643][T16473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.361262][T16474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2175'. [ 679.369983][T16473] CPU: 1 UID: 0 PID: 16473 Comm: syz.0.2176 Not tainted syzkaller #0 PREEMPT(full) [ 679.370007][T16473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 679.370019][T16473] Call Trace: [ 679.370026][T16473] [ 679.370034][T16473] dump_stack_lvl+0x189/0x250 [ 679.370060][T16473] ? __pfx____ratelimit+0x10/0x10 [ 679.370081][T16473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.370100][T16473] ? __pfx__printk+0x10/0x10 [ 679.370134][T16473] should_fail_ex+0x414/0x560 [ 679.370161][T16473] _copy_to_user+0x31/0xb0 [ 679.370181][T16473] simple_read_from_buffer+0xe1/0x170 [ 679.370211][T16473] proc_fail_nth_read+0x1b3/0x220 [ 679.370236][T16473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.370260][T16473] ? rw_verify_area+0x2a6/0x4d0 [ 679.370282][T16473] ? __lock_acquire+0xab9/0xd20 [ 679.370302][T16473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.370324][T16473] vfs_read+0x200/0xa30 [ 679.370345][T16473] ? fdget_pos+0x247/0x320 [ 679.370366][T16473] ? __pfx___mutex_lock+0x10/0x10 [ 679.370395][T16473] ? __pfx_vfs_read+0x10/0x10 [ 679.370418][T16473] ? __fget_files+0x2a/0x420 [ 679.370446][T16473] ? __fget_files+0x3a0/0x420 [ 679.370461][T16473] ? __fget_files+0x2a/0x420 [ 679.370487][T16473] ksys_read+0x145/0x250 [ 679.370512][T16473] ? __pfx_ksys_read+0x10/0x10 [ 679.370532][T16473] ? __secure_computing+0xe2/0x2a0 [ 679.370557][T16473] do_syscall_64+0xfa/0xfa0 [ 679.370574][T16473] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.370593][T16473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.370609][T16473] ? clear_bhb_loop+0x60/0xb0 [ 679.370630][T16473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.370645][T16473] RIP: 0033:0x7fa34df8d8dc [ 679.370662][T16473] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 679.370676][T16473] RSP: 002b:00007fa34eed8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 679.370695][T16473] RAX: ffffffffffffffda RBX: 00007fa34e1e5fa0 RCX: 00007fa34df8d8dc [ 679.370707][T16473] RDX: 000000000000000f RSI: 00007fa34eed80a0 RDI: 0000000000000010 [ 679.370724][T16473] RBP: 00007fa34eed8090 R08: 0000000000000000 R09: 0000000000000000 [ 679.370734][T16473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.370744][T16473] R13: 00007fa34e1e6038 R14: 00007fa34e1e5fa0 R15: 00007ffd2fd30f88 [ 679.370776][T16473] [ 680.058112][T16504] lo speed is unknown, defaulting to 1000 [ 680.798449][T16515] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 681.275053][T16530] trusted_key: encrypted_key: insufficient parameters specified [ 682.005930][T16535] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 682.119617][T16535] exFAT-fs (loop3): unable to read boot sector [ 682.125829][T16535] exFAT-fs (loop3): failed to read boot sector [ 682.132811][T16535] exFAT-fs (loop3): failed to recognize exfat type [ 682.628490][T16545] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 683.457079][T16568] overlayfs: failed to clone upperpath [ 684.058070][T16591] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 684.105388][T16591] exFAT-fs (loop6): unable to read boot sector [ 684.137109][T16591] exFAT-fs (loop6): failed to read boot sector [ 684.157818][T16591] exFAT-fs (loop6): failed to recognize exfat type [ 684.457903][T16611] overlayfs: failed to clone upperpath [ 685.892993][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.871589][T16682] syzkaller0: entered promiscuous mode [ 687.877244][T16682] syzkaller0: entered allmulticast mode [ 688.842271][T16700] xfs: Unknown parameter 'ikeep' [ 691.527615][T16696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.535493][T16696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.545088][T16696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.554877][T16696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.664175][T16737] netlink: 'syz.0.2234': attribute type 1 has an invalid length. [ 691.673298][T16737] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2234'. [ 691.682703][T16737] netlink: 'syz.0.2234': attribute type 2 has an invalid length. [ 691.690543][T16737] netlink: 'syz.0.2234': attribute type 1 has an invalid length. [ 692.095746][T16765] lo speed is unknown, defaulting to 1000 [ 692.971298][T16797] netlink: 'syz.3.2244': attribute type 1 has an invalid length. [ 692.993431][T16797] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2244'. [ 693.029790][ T9] kernel read not supported for file /vcs (pid: 9 comm: kworker/0:0) [ 694.042563][T16818] netlink: 'syz.3.2247': attribute type 1 has an invalid length. [ 695.611694][ T30] audit: type=1326 audit(1758609770.026:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16855 comm="syz.1.2259" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1cd758eec9 code=0x0 [ 695.690294][T16858] overlayfs: failed to clone upperpath [ 695.802334][T16864] netlink: 'syz.3.2261': attribute type 1 has an invalid length. [ 695.810401][T16864] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2261'. [ 695.819828][T16864] netlink: 'syz.3.2261': attribute type 2 has an invalid length. [ 695.827539][T16864] netlink: 'syz.3.2261': attribute type 1 has an invalid length. [ 696.192743][T16887] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.229307][T16887] exFAT-fs (loop0): unable to read boot sector [ 696.272653][T16887] exFAT-fs (loop0): failed to read boot sector [ 696.307916][T16887] exFAT-fs (loop0): failed to recognize exfat type [ 696.466814][T16887] EXT4-fs: Ignoring removed nobh option [ 696.999520][T16887] EXT4-fs: Ignoring removed mblk_io_submit option [ 697.054456][T16887] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 697.129138][T16887] EXT4-fs (loop0): unable to read superblock [ 697.229265][T16896] lo speed is unknown, defaulting to 1000 [ 697.275485][ T30] audit: type=1326 audit(1758609771.686:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.3.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555b58eec9 code=0x7ffc0000 [ 697.297854][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.815169][ T30] audit: type=1326 audit(1758609771.836:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.3.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f555b58eec9 code=0x7ffc0000 [ 697.872957][ T30] audit: type=1326 audit(1758609771.836:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.3.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555b58eec9 code=0x7ffc0000 [ 697.895291][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.575055][ T30] audit: type=1326 audit(1758609771.836:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.3.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555b58eec9 code=0x7ffc0000 [ 698.667447][ T30] audit: type=1326 audit(1758609772.276:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.3.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f555b58eec9 code=0x7ffc0000 [ 698.716634][ T30] audit: type=1326 audit(1758609772.276:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.3.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555b58eec9 code=0x7ffc0000 [ 698.785976][ T30] audit: type=1326 audit(1758609772.276:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.3.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f555b58eec9 code=0x7ffc0000 [ 698.877717][ T30] audit: type=1326 audit(1758609773.156:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.3.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555b58eec9 code=0x7ffc0000 [ 698.969950][ T30] audit: type=1326 audit(1758609773.156:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.3.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555b58eec9 code=0x7ffc0000 [ 701.600200][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2283'. [ 702.431379][T16989] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2289'. [ 702.526329][T16997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2292'. [ 702.739922][T16997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2292'. [ 702.889755][ T5941] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 703.151170][ T5941] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 703.186231][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.706766][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 703.721278][ T5941] usb 4-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 703.733149][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.780387][ T5941] usb 4-1: config 0 descriptor?? [ 704.682311][T17005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2295'. [ 704.853685][T17039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.900054][T17039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.961720][T17005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.980574][T17046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2306'. [ 704.984363][T17005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.009331][T17046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2306'. [ 705.029950][ T5941] usbhid 4-1:0.0: can't add hid device: -71 [ 705.037454][ T5941] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 705.053710][T17050] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2307'. [ 705.171313][ T5941] usb 4-1: USB disconnect, device number 62 [ 706.109004][ T5879] Bluetooth: hci5: command 0x1003 tx timeout [ 706.117524][ T5183] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 706.583153][T17071] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2314'. [ 707.397578][T17084] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 707.485637][T17084] SQUASHFS error: Failed to read block 0x0: -5 [ 707.493579][T17084] unable to read squashfs_super_block [ 707.597850][T17089] netlink: 'syz.3.2320': attribute type 1 has an invalid length. [ 707.606111][T17089] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2320'. [ 707.615243][T17089] netlink: 'syz.3.2320': attribute type 2 has an invalid length. [ 707.624304][T17089] netlink: 'syz.3.2320': attribute type 1 has an invalid length. [ 708.612923][ T5183] Bluetooth: hci3: command 0x0406 tx timeout [ 709.068283][T17111] netlink: 364 bytes leftover after parsing attributes in process `syz.0.2326'. [ 709.078751][T17111] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 814.128871][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 814.135880][ C1] rcu: 0-...!: (0 ticks this GP) idle=4594/1/0x4000000000000000 softirq=77525/77525 fqs=0 [ 814.147375][ C1] rcu: (detected by 1, t=10502 jiffies, g=69057, q=71 ncpus=2) [ 814.155046][ C1] Sending NMI from CPU 1 to CPUs 0: [ 814.155079][ C0] NMI backtrace for cpu 0 [ 814.155104][ C0] CPU: 0 UID: 0 PID: 17111 Comm: syz.0.2326 Not tainted syzkaller #0 PREEMPT(full) [ 814.155123][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 814.155134][ C0] RIP: 0010:mark_lock+0xaa/0x190 [ 814.155163][ C0] Code: 61 c8 8d e8 98 a1 e5 ff 90 0f 0b 90 90 90 31 c9 4c 89 fe 4c 89 f7 b8 01 00 00 00 85 69 60 74 10 5b 41 5c 41 5d 41 5e 41 5f 5d cc cc cc cc cc 49 89 fe 49 89 f7 e8 35 b1 ff ff 89 c1 31 c0 85 [ 814.155176][ C0] RSP: 0018:ffffc90000007aa8 EFLAGS: 00000002 [ 814.155192][ C0] RAX: 0000000000000001 RBX: 0000000000000005 RCX: ffffffff936c5330 [ 814.155203][ C0] RDX: 0000000000000000 RSI: ffff888028eb0bf8 RDI: ffff888028eb0000 [ 814.155215][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff84d5225b [ 814.155226][ C0] R10: ffffc90000007ca0 R11: fffff52000000f96 R12: 0000000000000002 [ 814.155237][ C0] R13: 0000000000000002 R14: ffff888028eb0bf8 R15: 0000000000000000 [ 814.155248][ C0] FS: 0000000000000000(0000) GS:ffff8881259e7000(0000) knlGS:0000000000000000 [ 814.155262][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 814.155273][ C0] CR2: 00007fd10098ff98 CR3: 0000000053110000 CR4: 00000000003526f0 [ 814.155288][ C0] Call Trace: [ 814.155297][ C0] [ 814.155305][ C0] __lock_acquire+0x65a/0xd20 [ 814.155333][ C0] ? debug_object_activate+0xbb/0x420 [ 814.155352][ C0] lock_acquire+0x120/0x360 [ 814.155372][ C0] ? debug_object_activate+0xbb/0x420 [ 814.155392][ C0] ? __lock_acquire+0xab9/0xd20 [ 814.155415][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 814.155433][ C0] ? debug_object_activate+0xbb/0x420 [ 814.155452][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 814.155468][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 814.155489][ C0] debug_object_activate+0xbb/0x420 [ 814.155512][ C0] enqueue_hrtimer+0x30/0x3a0 [ 814.155530][ C0] __hrtimer_run_queues+0x656/0xc60 [ 814.155562][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 814.155583][ C0] ? read_tsc+0x9/0x20 [ 814.155606][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 814.155640][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 814.155673][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 814.155691][ C0] [ 814.155697][ C0] [ 814.155704][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 814.155721][ C0] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 814.155744][ C0] Code: c7 c7 e0 20 34 8e e8 5f cd 5d 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 10 1d 1d 11 e8 db 87 de 09 89 [ 814.155757][ C0] RSP: 0018:ffffc9001bd77348 EFLAGS: 00000202 [ 814.155772][ C0] RAX: ffffffff822f8c98 RBX: 1ffffd4000346ef9 RCX: 0000000000000000 [ 814.155784][ C0] RDX: ffff888028eb0000 RSI: 0000000000000001 RDI: 0000000000000000 [ 814.155795][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff822f8c67 [ 814.155806][ C0] R10: dffffc0000000000 R11: fffff94000346ef9 R12: 0000000000000000 [ 814.155817][ C0] R13: ffffea0001a377c0 R14: ffffffff822f8c67 R15: ffffea0001a377d8 [ 814.155831][ C0] ? page_table_check_clear+0x187/0x700 [ 814.155856][ C0] ? page_table_check_clear+0x187/0x700 [ 814.155877][ C0] ? page_table_check_clear+0x1b8/0x700 [ 814.155902][ C0] ? page_table_check_clear+0x1a4/0x700 [ 814.155924][ C0] page_table_check_clear+0x1c1/0x700 [ 814.155945][ C0] ? vm_normal_page+0x10d/0x240 [ 814.155964][ C0] unmap_page_range+0x344b/0x4370 [ 814.156003][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 814.156023][ C0] ? mas_find+0xb0e/0xd30 [ 814.156039][ C0] ? unmap_vmas+0x144/0x580 [ 814.156057][ C0] unmap_vmas+0x399/0x580 [ 814.156078][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 814.156106][ C0] exit_mmap+0x240/0xb40 [ 814.156128][ C0] ? uprobe_clear_state+0x20f/0x290 [ 814.156148][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 814.156167][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 814.156193][ C0] ? __pfx_exit_aio+0x10/0x10 [ 814.156214][ C0] ? uprobe_clear_state+0x27c/0x290 [ 814.156234][ C0] __mmput+0x118/0x430 [ 814.156256][ C0] exit_mm+0x1da/0x2c0 [ 814.156275][ C0] ? __pfx_exit_mm+0x10/0x10 [ 814.156293][ C0] ? rcu_is_watching+0x15/0xb0 [ 814.156317][ C0] do_exit+0x648/0x2300 [ 814.156337][ C0] ? cgroup_freezing+0x20/0x350 [ 814.156357][ C0] ? __pfx_do_exit+0x10/0x10 [ 814.156376][ C0] ? cgroup_freezing+0x20/0x350 [ 814.156392][ C0] ? cgroup_freezing+0x20/0x350 [ 814.156413][ C0] do_group_exit+0x21c/0x2d0 [ 814.156431][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 814.156451][ C0] get_signal+0x1285/0x1340 [ 814.156482][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 814.156504][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 814.156524][ C0] ? __se_sys_futex+0x36f/0x400 [ 814.156548][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 814.156570][ C0] exit_to_user_mode_loop+0x72/0x130 [ 814.156590][ C0] do_syscall_64+0x2bd/0xfa0 [ 814.156608][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 814.156626][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.156642][ C0] ? clear_bhb_loop+0x60/0xb0 [ 814.156664][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.156680][ C0] RIP: 0033:0x7fa34df8eec9 [ 814.156693][ C0] Code: Unable to access opcode bytes at 0x7fa34df8ee9f. [ 814.156703][ C0] RSP: 002b:00007fa34eed80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 814.156718][ C0] RAX: 0000000000000001 RBX: 00007fa34e1e5fa8 RCX: 00007fa34df8eec9 [ 814.156730][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa34e1e5fac [ 814.156741][ C0] RBP: 00007fa34e1e5fa0 R08: 7fffffffffffffff R09: 0000000000000000 [ 814.156753][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 814.156765][ C0] R13: 00007fa34e1e6038 R14: 00007ffd2fd30ea0 R15: 00007ffd2fd30f88 [ 814.156785][ C0] [ 814.157072][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g69057 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 814.730633][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=46571 [ 814.738525][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g69057 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 814.749981][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 814.760125][ C1] rcu: RCU grace-period kthread stack dump: [ 814.766020][ C1] task:rcu_preempt state:I stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 814.777940][ C1] Call Trace: [ 814.781246][ C1] [ 814.784216][ C1] __schedule+0x1798/0x4cc0 [ 814.788767][ C1] ? __lock_acquire+0xab9/0xd20 [ 814.793627][ C1] ? __pfx___schedule+0x10/0x10 [ 814.798597][ C1] ? schedule+0x91/0x360 [ 814.802857][ C1] schedule+0x165/0x360 [ 814.807026][ C1] schedule_timeout+0x12b/0x270 [ 814.811896][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 814.817290][ C1] ? __pfx_process_timeout+0x10/0x10 [ 814.822601][ C1] ? prepare_to_swait_event+0x341/0x380 [ 814.828159][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 814.833029][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 814.837989][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 814.843224][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 814.848528][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 814.853785][ C1] rcu_gp_kthread+0x99/0x390 [ 814.858432][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 814.863700][ C1] ? __kthread_parkme+0x7b/0x200 [ 814.868672][ C1] ? __kthread_parkme+0x1a1/0x200 [ 814.873835][ C1] kthread+0x711/0x8a0 [ 814.877948][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 814.883172][ C1] ? __pfx_kthread+0x10/0x10 [ 814.887896][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 814.893188][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 814.898432][ C1] ? __pfx_kthread+0x10/0x10 [ 814.903049][ C1] ret_from_fork+0x4bc/0x870 [ 814.907654][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 814.912811][ C1] ? __switch_to_asm+0x39/0x70 [ 814.917605][ C1] ? __switch_to_asm+0x33/0x70 [ 814.922384][ C1] ? __pfx_kthread+0x10/0x10 [ 814.926984][ C1] ret_from_fork_asm+0x1a/0x30 [ 814.931937][ C1]