last executing test programs: 19m0.371682624s ago: executing program 32 (id=120): socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)={0x12, 0x7, 0x2, {{0x5, '.%-%:'}, 0x4}}, 0x12) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000140)={{0x8, 0xe}, 'port0\x00', 0x10, 0x1021, 0x80000001, 0x13, 0x11, 0x4, 0x8, 0x0, 0x2, 0x3}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xfffffffffffffca9) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xfb, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x14c}}, 0x4c0c8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000004c0)={0x8, 0x120, 0xfa00, {0x2, {0xfffeffff, 0x5, "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", 0x9, 0xff, 0x9, 0x1, 0x1, 0x1, 0x3c}}}, 0x128) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x800000}) accept4$llc(r0, 0x0, &(0x7f0000000000), 0x80000) 18m55.113266472s ago: executing program 1 (id=154): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000780)={0x6, 0xfff, 0x80000000, 0xbc, &(0x7f0000000540)=""/188, 0x9d, &(0x7f0000000600)=""/157, 0xad, &(0x7f00000006c0)=""/173}) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000040)={0x2, 0x1, @rand_addr=0x64010101}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733dd9c41a9c4cce3e1ff2", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="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"]) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7d, &(0x7f0000000480)=@assoc_value={0x0, 0xc}, 0x8) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x194}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000009ed5009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='ext4_request_blocks\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) r9 = syz_open_dev$video(&(0x7f0000000100), 0x77a3, 0x8000) ioctl$VIDIOC_S_FMT(r9, 0xc0d05640, &(0x7f0000000440)={0x9, @win={{0x2, 0x6, 0xd48, 0x10000}, 0x5, 0x5, 0x0, 0x4dc7, 0x0, 0x5}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r10, r8, 0x7, 0x0, @void}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r11 = socket(0x14, 0x2, 0x4) listen(r11, 0x19) close(0x4) 18m50.003768377s ago: executing program 1 (id=158): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='xdp_cpumap_enqueue\x00'}, 0x18) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet6(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r4, 0x0, 0x0, 0x0, 0x40010020}) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000018c0), 0x80082) write$binfmt_misc(r5, &(0x7f0000002280)="3e1a309b0dfcbabac11693177e58e396523e92a59a810d6165408188ac31a24f23b5eb", 0x23) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000180)={0x100000000, 0xffffffffffffffff, 0x11, {0x27fffffffffffff, 0x4}, 0x54}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe45, 0x8, 0x28e6}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r9, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) read(r4, 0x0, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r8, 0xc058534b, &(0x7f0000000300)={0xa, 0x5, 0x5, 0x415, 0x7ff, 0x71}) 18m47.967709985s ago: executing program 1 (id=163): r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@userptr={0x7, 0x5, 0x4, 0x100, 0x8001, {0x77359400}, {0x0, 0x2, 0x2, 0x6, 0xed, 0xc, "d4775dec"}, 0x10000, 0x2, {0x0}, 0x8e}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x700}) 18m47.731311583s ago: executing program 1 (id=164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x20) ftruncate(r3, 0x2007ffb) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x64}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40891}, 0x800) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x8000000019) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) recvmsg$unix(r5, &(0x7f0000000500)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/99, 0x63}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x140) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) 18m42.839860149s ago: executing program 1 (id=170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x5, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000140000000000000000000000040000000000", @ANYRESDEC=r1, @ANYRES32], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000092b8c50a343502837f64c100"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0xfffffffffffffc90, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x481, 0x42) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) r7 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r5, 0x110, 0x3) keyctl$KEYCTL_WATCH_KEY(0x6, r7, 0xffffffffffffffff, 0xfffffffdfffffffc) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x9) 18m41.070858797s ago: executing program 1 (id=172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a280000000c0a010200000000000000000200000308000440000000010900020073797a310000000030000000000a01080000000000000000050000090900010073797a3000000000040006000900010073797a3100000000140000000c0a020200000000000000000200000620000000000a01030000000000000000010000080900010073797a310000000030000000160a01040000000000000000050000090900010073797a310000000004000380090002"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0xc840) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd4}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r8, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x800}, 0x0) 18m25.946277376s ago: executing program 33 (id=172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a280000000c0a010200000000000000000200000308000440000000010900020073797a310000000030000000000a01080000000000000000050000090900010073797a3000000000040006000900010073797a3100000000140000000c0a020200000000000000000200000620000000000a01030000000000000000010000080900010073797a310000000030000000160a01040000000000000000050000090900010073797a310000000004000380090002"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0xc840) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd4}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r8, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x800}, 0x0) 17m19.048695261s ago: executing program 0 (id=304): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRES32, @ANYRES8=r0, @ANYRES32=r0, @ANYRES64=0x0, @ANYRES64, @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffec3, 0x0, 0x0, 0xff48, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x8a, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000480)={0xf3c00000, 0xbf2, {0xffffffffffffffff}, {}, 0x5, 0x2}) ptrace$setopts(0x4206, 0x0, 0x6, 0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000c970bb288e0112c1691885b4179329a562360d3dd47ccf4f3b9c13e773f0fcf20409cd6f8eedacdfc139a4073d892d0a63cddeb98d3d5afde5f032531efd633fdd480709a5015752148a18629c237434058f17adfd093154760687256edfba00c187b887941c41436f897b48e806fc773d3ceab24caa09a09fe47de1c84df62680a4947de0f403c4517f97d3134168292835b355fae6cfc4", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) setrlimit(0x4, &(0x7f0000000080)={0xf, 0x7}) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="414c5450434d20274c696e652043617074757265272030303030303030303030303030303030303030300a4c494e45320a4449474954414c330a535045414b4552202753796e7468272030303030303030303030433030303030617374657220506c61796261636b272030303030303030301a30303030303030303030300a4c494e45330a4c494e453120274d617374657220506061796261636b20d178d153424e47c2ab736a69746368"], 0xf7) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) fsopen(&(0x7f0000000200)='hfsplus\x00', 0x0) 17m18.007690371s ago: executing program 0 (id=306): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) migrate_pages(0xffffffffffffffff, 0x7, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448de, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000100)=0x5, 0x4) 17m17.787627639s ago: executing program 0 (id=307): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) recvmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x3, 0x10000, 0x2f, 0x66, 0xcc7, 0xe, 0x0, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x6, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x6, 0x4, 0xae, 0xf7a, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x6}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 17m8.778156652s ago: executing program 0 (id=321): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004040)=ANY=[@ANYBLOB="682400003e000701feffffff00000000037c000008004280040008000c000180060006008848"], 0x2468}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x218000, 0x0) r2 = socket(0x22, 0x2, 0x3) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xffffffffffffffdb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040884}, 0x40000) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@smackfsdef={'smackfsdef', 0x3d, '&\\:'}}], 0x2f}) 17m6.494622939s ago: executing program 0 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) openat$fb0(0xffffffffffffff9c, 0x0, 0x400601, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) write$snddsp(r3, &(0x7f00000003c0)="c942bde4bef5843809351af4f2cbb6555fa01a66edfc6e6f4dfe5025604f005c5c675944dfc7a254a549cb8d4a9de47bee28f544945b47331060f98b5cc8086dc24b12db4412c45e4ca6c95e73bd111e39723f9168f5dc92f9e7ece872f50891efa8e71a46a192ffa463b921f9e59c1880b26bb2575dea9fd274ab5cefd59bc3abd22efe4062ed61bfe14487c61d40491f474cbf0fefda8015ee6944e9a92eda4a6c5f5060254bc76b9d2c7acbc4722e5d77091c05933932cfc230283108820168d3c84307bc2f3b09a773b03f9e1764f606e93a1f61f1512bd5751367a2551b48d6f8971b1f2e69750f1ca23f465921f6c479719172", 0xf6) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) syz_emit_ethernet(0x22, 0x0, 0x0) 17m1.045136594s ago: executing program 0 (id=336): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket(0x1e, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x24004010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$ndb(&(0x7f0000000400), 0x0, 0x240202) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x2000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093", 0x3d}], 0x1}, 0x0) 16m44.953111365s ago: executing program 34 (id=336): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket(0x1e, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x24004010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$ndb(&(0x7f0000000400), 0x0, 0x240202) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x2000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093", 0x3d}], 0x1}, 0x0) 16m20.967609335s ago: executing program 5 (id=414): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r1, 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000500)={0x0, 0x21, 0xd6, {0xd6, 0x4b, "4f975991ced325a7261f37294dd33f94131c810c474634c3ceeaf5ca5a05b831833bea9201749ccd4301101820f3f2d4cea57fce41dfa2be84e1de611bc6b8d2a1b96062dabf74771b76742aabed8774d8c29de532e80b86556532f69f35fb711589c568eafc541bf7178c1fd230b0532a9fcc7e7fe42dc5efd59433dc9a998f7ec8771bb2247600062273dc7cc545c65281f8d6dee4fb7fb8478ed348297b71d6edd2de087054e78601ba9a0b82044f6433f6be75a5d24f20197bea3616c2ef204c475c8d63cb317ec267f1bf0e63c71f28e2c8"}}, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x47, &(0x7f0000000480)=@string={0x47, 0x3, "1a23d45c2854831403f8494f87f7f4be6b85a905bf01d59a5c77b479c8ecde9605b035346ed06b3c99b0473c749038e95897b91a6c067f7ac9362c0d41563ecaa1aa1641e9"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmmsg$alg(r1, &(0x7f00000054c0)=[{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f00000008c0)="65008bee898379aed6607aba31c31a0d5aa54b360c152f76caa974764664ec5738c155f03a7e56161095f8d68b5bd3776163ccf8b187359ed5239eb78a8868cc5281faeb936945c835f0665785710558383c11644e47cbf729b5860a25758e5c854aeba07f9327ac08c1c50de6823e5f850f2959b630232794b4d925f10cd2cd07e982f764ecf44172c4333f86576186b9b2b482448e", 0x34000}], 0x2, 0x0, 0x0, 0x40800}], 0x1, 0x20000844) 16m18.53936852s ago: executing program 5 (id=418): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000080)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x1) r3 = creat(&(0x7f0000000440)='./file0\x00', 0x64) open_by_handle_at(r3, 0x0, 0x830200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@loopback, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x7d9}) 16m17.467536866s ago: executing program 5 (id=422): socket$packet(0x11, 0x3, 0x300) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1100c0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sync() bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00'}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) cachestat(r6, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000001c0)={0x1dfba408e49bac04, 0x4000}) io_uring_setup(0x3eb1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x1a1, 0x0, r6}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) 16m16.255434617s ago: executing program 5 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRES32, @ANYRES8=r0, @ANYRES32=r0, @ANYRES64=0x0, @ANYRES64, @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffec3, 0x0, 0x0, 0xff48, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x8a, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000480)={0xf3c00000, 0xbf2, {0xffffffffffffffff}, {}, 0x5, 0x2}) ptrace$setopts(0x4206, 0x0, 0x6, 0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000c970bb288e0112c1691885b4179329a562360d3dd47ccf4f3b9c13e773f0fcf20409cd6f8eedacdfc139a4073d892d0a63cddeb98d3d5afde5f032531efd633fdd480709a5015752148a18629c237434058f17adfd093154760687256edfba00c187b887941c41436f897b48e806fc773d3ceab24caa09a09fe47de1c84df62680a4947de0f403c4517f97d3134168292835b355fae6cfc4", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) setrlimit(0x4, &(0x7f0000000080)={0xf, 0x7}) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r8, r7, 0x0) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) fsopen(&(0x7f0000000200)='hfsplus\x00', 0x0) 16m14.915826888s ago: executing program 5 (id=426): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x20}]}]}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) shutdown(r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8) mmap(&(0x7f000081b000/0x3000)=nil, 0x3000, 0xd, 0x8010, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 16m14.416493004s ago: executing program 5 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x5) fchdir(r8) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0xd, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 15m58.898854603s ago: executing program 35 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x5) fchdir(r8) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0xd, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 13m45.352336283s ago: executing program 2 (id=748): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x210, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000b40)={0x52, 0x5, 0x1, {0x0, 0x1}, {0x45, 0x2}, @ramp={0x5, 0xff, {0x1, 0x0, 0xc74, 0x7}}}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00'}, 0x10) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 13m38.449910939s ago: executing program 2 (id=761): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x303}}, 0x30) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x1000000, 0x0, 0x40000, 0x0, 0x2, 0x1}}) 13m37.044234003s ago: executing program 2 (id=768): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='romfs\x00', 0x1018d41, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) r4 = add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="75a1d70300", 0xfffff, 0xfffffffffffffffe) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$read(0xb, r4, &(0x7f00000004c0)=""/243, 0xf3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 13m34.813151774s ago: executing program 2 (id=770): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x72bf, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) r3 = gettid() writev(r2, &(0x7f0000001600)=[{&(0x7f0000001380)="fd3089dc", 0x4}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0), 0x2, 0x1) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x3, 0x3, 0x0, 0x5, 0x1000, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0xfffe, 0x7, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5]}}}) 13m31.245165719s ago: executing program 2 (id=783): getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0xd9}, &(0x7f0000000200)=0x8) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x4, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r4, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="020900000400000026bd70000000000002000b00060c0000000000000000000080fceb8661cf0052f171f8d5e387dbf954132ed63c5e37cdbbdc9d2d55d2872b25338439054986861afa3e79bdc00c98575cd470de96bc68cc81a90aa6873fcf9ab23371b14d060b445bac5b4e59a4a132c9f928b89d5ec00b162a28d56fc27ffd1bff08"], 0x20}}, 0x0) 13m28.781792099s ago: executing program 2 (id=788): openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$tipc(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r5, 0xc, 0x2000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f00000008c0)) 13m27.052373286s ago: executing program 36 (id=788): openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$tipc(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r5, 0xc, 0x2000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f00000008c0)) 12m44.791601445s ago: executing program 8 (id=878): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0xfffffffffffffffe}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00007bb000/0x2000)=nil, 0x2000}, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r4, &(0x7f0000000000), 0x0) fstatfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x14) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x7e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000080)={{0x1, 0x1, 0x9c4, 0x3, 0xfffffff4}}) 12m41.171955069s ago: executing program 8 (id=886): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x50) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = io_uring_setup(0x727c, &(0x7f0000000140)={0x0, 0x17e9, 0x800, 0x1, 0x2b3}) r2 = dup(r1) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2000000000000, 0x802) ioctl$EVIOCSABS20(r3, 0x40044591, 0x0) fallocate(r0, 0x12, 0xd9, 0x8000000000000001) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x102, 0x1, 0x0, 0x3}}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) socket$kcm(0x10, 0x2, 0x10) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x400040, 0x0) landlock_create_ruleset(&(0x7f0000000280)={0x10, 0x2}, 0x18, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = add_key$user(0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00e1ff", 0x8, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x24, 0xf801}}}}}}, 0x0) 12m40.763601374s ago: executing program 8 (id=888): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)) 12m39.719420605s ago: executing program 8 (id=890): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0x10}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffff3) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x189e, &(0x7f0000001700)='\xb3x\xd7,n\x1e\v\xc4\xe84\x04\xcb\xcb#\x80\x83\xb2\'&\xe3\xf1\x97\a\xef\xff`\x1e\x11E\xff\xff\x9b\x9f\x1c\x13w\xd7\xda\x92~i\xf5\x06\x00\xe7;K\x97\xeb\xda\\\t)<\xf4{\x95+A\xf9*\xa0\xd8\x13\x88\xcd\xe2\x86\x8a\x00jrv\xe4\xafY(\xe1\xdb\bF\xbb\xde\x02\x00\x00\x00\x83E/\x00V\xf0\xa8\xf5!_\xe7\xa0\xd0,\x00\x00\xff\xf6\x00\x00\x00\xbd\x03\n\xecT\x03&i\xa6_\xc5>\xdc?\x191#\xf41\x00\x7f\xce\xea]\xc2\x7f!\xd1\xb8\x94\t3S\tm\xe9\xfa\x13\xa7\xe3HI\xed\xf6\xe4\xdc!Aw5\x9ay \xb0\nGoF\xef\xaa\xe8\xec\x1c\x8a\x88\x10U\xd4\x91\xf4\xa7/\x01\x83\xa6~\xcdl\x82\x8ck\x93\x7f\xdc\xdf\x0e\xdc4K8\xe2\x10\xa2N\x91\xe0\xf3\xfb\x1c\xcc`\x87\x11\xc5\xa2\x13>\x9a%\x1c(Q|s\xdd\xd1\x9b\xfb\xf0\xfet\x01\xb9\xb1\x04J\xaf~\xa6:^\x00\x19\xc4P\x80.\xa3\xebM\x13\x03\x13u\xd0\xac\x8c\r\x9f7\x9a\x16\xe6\xba\xec\xdb\x15\xa2-\x9b\xf8\xfc\xee\x10O\xed$t\xa99\'C\xa1') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf251e00000008000300", @ANYRES32, @ANYBLOB='(\x00/'], 0x44}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8004001201", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 12m37.818021282s ago: executing program 8 (id=894): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x5, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000140000000000000000000000040000000000", @ANYRESDEC=r1, @ANYRES32], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x481, 0x42) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) r7 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r5, 0x110, 0x3) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, r7, 0xffffffffffffffff, 0xfffffffdfffffffc) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x9) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 12m37.448038419s ago: executing program 8 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0xa875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x6, 0x7) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept(r7, &(0x7f0000000240)=@x25, &(0x7f0000000040)=0x80) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x5}, &(0x7f0000000100)=0x8) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x8000004000000001, 0x501000) syz_genetlink_get_family_id$mptcp(0x0, r6) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) r9 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x1) fchdir(r10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r11 = open(&(0x7f0000000180)='./file0/file0\x00', 0x10001, 0x10) getdents(r11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 12m19.785540101s ago: executing program 37 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0xa875) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x6, 0x7) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept(r7, &(0x7f0000000240)=@x25, &(0x7f0000000040)=0x80) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x5}, &(0x7f0000000100)=0x8) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x8000004000000001, 0x501000) syz_genetlink_get_family_id$mptcp(0x0, r6) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) r9 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x1) fchdir(r10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r11 = open(&(0x7f0000000180)='./file0/file0\x00', 0x10001, 0x10) getdents(r11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 24.791675791s ago: executing program 6 (id=2584): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @long={0x3, 0xfffb, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x6274a5ca71beadeb}, 0x4000000) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0xfe4, 0x9, 0x11, 0xafb}, 0x8) sendto$inet6(r3, &(0x7f0000000000)="d2b14a", 0x3, 0x4005, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 24.521976305s ago: executing program 6 (id=2587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x40400) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x7c}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_async', 0x40802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000300)={0x2b, 0x2d, '\x00', [@ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x8001}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x401, [0x3, 0x6, 0xa, 0xa1d4, 0x1, 0x6, 0x0]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0xfa, 0xfffc, [0x100, 0x1, 0x1400000000000000, 0x1, 0x7, 0x0, 0x8000000000000001]}}, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x2, 0xba, "3d0c65a9d71b5b20696fd0676edf23aafb8d7e162aab0160ad7668d8eb6e8f454096ecb1325c4df2a1807dbba9be1860e07605fc307aa31d331e5b59f1a985f8b36d9bc4214af1ca8b93b76dc9b5c970808cd07088647c219381f521a1070302f04eda23803358bcdb12fd3028b3f1d0f3db0f64dba0b70372b3a07652896c59a32662a1fa0ef742fbdc7dfdff894aac921f394140f6b879560d51e829c1d6fe61317dd94b3c5628a1a99306733e1592d5be462377ace42ad500"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}, 0x178) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES16=r2], 0x68}}, 0x0) write$tcp_mem(r3, &(0x7f0000000200)={0xfffffffffffffffe, 0x20, 0xfffffffffffffffb, 0x20, 0x20000000000005}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0xfff5, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) 24.071726265s ago: executing program 6 (id=2589): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f7, &(0x7f00000026c0)={'ip6_vti0\x00', 0x0}) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000003, &(0x7f0000000800)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x107fe, @empty, 0x2}, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7}, r4, 0xb}}, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x4000010, r2, 0xec776000) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {&(0x7f0000000f80)}}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xfffffe7c, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044810) 23.670155056s ago: executing program 3 (id=2590): syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_io_uring_setup(0x49f, &(0x7f0000000600)={0x0, 0xe7a9, 0x100, 0xfffa, 0x40024e}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x2161, 0x1, {0x2}}) io_uring_enter(r1, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0xc0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x8}]}]}, {0x0, [0x2e, 0x30, 0x2e, 0x1e, 0x2e]}}, 0x0, 0x33}, 0x28) bind$l2tp(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @empty, 0x3}, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) 22.986493165s ago: executing program 6 (id=2592): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x72bf, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) gettid() writev(r2, &(0x7f0000001600)=[{&(0x7f0000001380)="fd3089dc", 0x4}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0), 0x2, 0x1) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x3, 0x3, 0x0, 0x5, 0x1000, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0xfffe, 0x7, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5]}}}) 22.593866619s ago: executing program 3 (id=2593): openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x80}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aec", 0x20}], 0x1}}], 0x1, 0x8810) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) 21.125707335s ago: executing program 6 (id=2596): openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200320002030000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa00000000fa000000030006000000000002"], 0x80}}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aec", 0x20}], 0x1}}], 0x1, 0x8810) recvmsg$unix(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)}, 0x12060) 21.063683159s ago: executing program 7 (id=2597): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000027b40)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xffffffffffffffff, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyN', 0x3a, './file0'}, 0x1f5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = syz_clone(0x1000000, &(0x7f00000002c0)="c85cf755fff146767ab425cf0fcfe823e5be6b1b4fa8553c72a02e33193c19cc3f18c3e01b10e4d15b420ed6be4c548300ac523e346fbcc9f6e4f9022cd8372c8430cdde77588f4c7443d31f2b9ea05fd28cb6f69fbfc2e195538d6b63deef69920b87726e850d316e538d37632fb60cd7f2bd1c7b5828a837e5932a3a2ebbbe26dd7a2858531d96c8938159441072685037a7549edd4427289cd90290283799eb38fca5635437d101831fb2da8060f28a917417", 0xb4, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000480)="5641c1576572ea1f16d5f202e3d19d871579dd8ff55a30b1c9656664979bc9031b40c9356b38cbf7157bb53a1cd725f6b7602b44900571b27d22b7b1e54c7208b3302dc5bcb2dc0844b5be") sched_setscheduler(r2, 0x5, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) capget(&(0x7f0000000180)={0x19980330, r3}, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x2000003, 0x101, 0x8001, 0xffff9917}) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x40011022, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000000)="a058b776e7315b35ac0005f527104cb204c99bf2fc326394941e82e7a2e8d883a5f71a8ef39a458e253b9657efb842a1ad35b878d6c892e77b76a0f3b703fea78f2dd6e9e16dc4fc66257228d0e3f53f2a8092d4bc1e035900b843d950ec760308bec03c21be314b7867a721df6458bb813b7319", 0x74}, {0x0, 0x20}, {0x0}], 0x3) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ptrace$ARCH_SET_CPUID(0x1e, r3, 0x0, 0x1012) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)={0x24, r7, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x818}, 0x4000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000090000000300002001000000", @ANYRES32, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000ff00"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) unshare(0x26020480) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0x40082104, &(0x7f0000000200)) 20.711718618s ago: executing program 6 (id=2600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x2c, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0xc000) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080000000fedbdf250f002d001800078008000200070000000c0003e3316b00000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 19.350379529s ago: executing program 38 (id=2600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x2c, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0xc000) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080000000fedbdf250f002d001800078008000200070000000c0003e3316b00000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 19.312442197s ago: executing program 4 (id=2603): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) select(0x40, &(0x7f0000000100)={0x100, 0x8, 0x100000000, 0x8, 0xfffffffffffffffe, 0x0, 0x8, 0x9}, &(0x7f0000000140)={0x88c, 0x8, 0x1, 0x7, 0x8000000000000000, 0x9, 0x0, 0x3}, &(0x7f0000000180)={0xe, 0x4, 0x0, 0xec, 0xf9e, 0x2, 0x0, 0x300000000000000}, &(0x7f00000001c0)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)={0x100, 0x1403, 0xb22, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x48005}, 0x804) r3 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000400)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000e00)={0x4ff1, r6, r5}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 17.65782202s ago: executing program 3 (id=2606): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x72bf, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) gettid() writev(r2, &(0x7f0000001600)=[{&(0x7f0000001380)="fd3089dc", 0x4}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0), 0x2, 0x1) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x3, 0x3, 0x0, 0x5, 0x1000, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0xfffe, 0x7, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5]}}}) 17.4540323s ago: executing program 3 (id=2607): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) r4 = gettid() capget(&(0x7f0000000280)={0x19980330, r4}, &(0x7f00000002c0)={0x5, 0x0, 0x4, 0x3, 0xfffffffb, 0x7}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x6, &(0x7f0000000100)=0x3, 0x4) r6 = accept(r3, &(0x7f0000000140)=@can, &(0x7f0000000080)=0x80) sendmmsg$inet(r3, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x2, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) r8 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000005f80)='./file0\x00', &(0x7f0000005fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x7adc1e08994c9b03) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000006040)=0xffffffffffffffff, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x100, 0xfffffffc, 0x20000000, 0xd, 0x101}, 0x7, 0x3}, [{0x5de, 0x7fff, 0x6, 0x9, 0xd, 0xf}, {0x6, 0x10001, 0x9, 0x0, 0x80000001, 0x6}, {0x3, 0xcc48, 0x0, 0x10001, 0xfffffff0, 0x15}, {0xffffffff, 0x2143, 0x0, 0x1, 0x8000}, {0xabb1, 0x4, 0x8, 0x3, 0x7, 0x31b}, {0x8000, 0x3, 0x7, 0x971a, 0x6, 0x100}, {0xfffffff2, 0x3, 0x200, 0x3, 0xffff8001, 0x7}, {0x7, 0x7fffffff, 0xe5, 0x4df0, 0x9, 0x1}, {0x4, 0xfffffffb, 0xfffffff7, 0x7, 0x72a, 0x5}, {0x1, 0x0, 0x7fff, 0x18000, 0xffffff7f, 0x3b8}, {0x5, 0xb, 0x7, 0xec31, 0x7fff, 0x7}, {0x80000000, 0x2, 0x6, 0x4, 0x800, 0x7}, {0x6, 0x4, 0x9, 0x3, 0x4, 0xf928}, {0x1, 0x8, 0x8, 0x7979, 0x1, 0x7}, {0x1, 0x3, 0x2, 0x5, 0x6ece, 0x8}, {0x10001, 0x5f5, 0x3, 0x7, 0xfffffffb, 0x9a}, {0x6, 0x6, 0x8, 0x80000000, 0x4, 0xfff}, {0x7de6, 0x4, 0xff, 0x7, 0x2, 0x10}, {0x1, 0xe, 0x415c, 0x3, 0x73, 0x1}, {0x857, 0x4, 0x6084a2d, 0xa, 0x8, 0x1}, {0x8, 0x6, 0x3538, 0xa, 0x8, 0xa90}, {0x3, 0x5, 0xb9, 0x4, 0xfffffffe, 0xfff}, {0x8, 0x80, 0x0, 0x10001, 0x4, 0x6}, {0x7c01, 0x7f, 0x3, 0x232d, 0x9, 0x1ed7}, {0x3c, 0x68, 0xffffffff, 0xd5, 0x7fffffff, 0x2}, {0x3, 0x6, 0x1800000, 0x3, 0x5, 0x5}, {0x3ff, 0xffff9662, 0x0, 0x1000, 0x6, 0x401}, {0xe, 0x7, 0x9, 0x8, 0x9, 0xfff}, {0xfffffffa, 0xaf1, 0xab90, 0x2, 0xffffffff, 0x5}, {0x3, 0x851, 0x6db1, 0xfffffff8, 0x8, 0xb53a115}, {0x3, 0x8, 0x100, 0x2, 0x7, 0x7}, {0x4, 0x100, 0x40, 0x10, 0x6, 0x9}, {0x80000000, 0x4, 0x6, 0x0, 0x7, 0x1bdc}, {0x9, 0x5, 0x5, 0x727f7658, 0x9b, 0x8}, {0x5, 0x61, 0x92, 0x14, 0x8, 0x4}, {0x8, 0x1, 0x1, 0x0, 0x10000, 0x8001}, {0x2, 0x1, 0xe96, 0x6, 0x0, 0x7f}, {0xec, 0xfff, 0xfff, 0x2, 0x6, 0x8}, {0x9, 0x1ff, 0x5, 0x8, 0x2, 0x9}, {0xfff, 0x1, 0xfff, 0x8, 0x8000, 0x80}, {0x800, 0x0, 0x4, 0x200, 0x5, 0xfffffffb}, {0x1, 0x0, 0x9, 0x9, 0x7fffffff, 0x8000000}, {0x3ff, 0x4, 0x4, 0x6, 0x7, 0xf}, {0xf286, 0x3, 0x7, 0xa, 0x8, 0xb}, {0x7, 0x80000000, 0xffd, 0x4, 0x10000}, {0x2, 0x1, 0xffffa576, 0x1, 0x1}, {0x9, 0x94000000, 0x8, 0xb01, 0x4, 0x2}, {0x0, 0xf, 0x9, 0x6, 0x7fffffff, 0x4}, {0xc72, 0x6, 0x9, 0x5, 0x7, 0x3ff}, {0xebe, 0x7, 0x80000000, 0x4, 0x7, 0x7fffffff}, {0x3, 0xf, 0x3, 0x8, 0x401, 0xfffffff8}, {0xe81, 0x6, 0xc, 0x5, 0x3, 0x7}, {0x80000000, 0x2, 0x78d4e7e1, 0xde7, 0x7f}, {0x2, 0xaff, 0x7fff, 0x4, 0x7, 0x7}, {0x3, 0x200, 0xa, 0x3, 0x90, 0x1ff}, {0xd00, 0x2c18, 0x1ff, 0x2, 0x0, 0x3}, {0x9, 0x80000001, 0x1, 0x2, 0x1, 0xffffffff}, {0x8, 0xffffffe3, 0x20000, 0x7, 0x5, 0x4}, {0x9, 0x10000, 0x4, 0x0, 0x2, 0x4}, {0x0, 0x180a, 0x8, 0x9, 0x3, 0x6}, {0xfffffff5, 0x5, 0x9, 0xd, 0x4}, {0x2fc536f2, 0xffff, 0x6, 0x7, 0x2, 0x8}, {0x10001, 0x1cf0, 0xfffffff9, 0x1000, 0x0, 0x3}, {0x40, 0x4d24, 0x2, 0x20000000, 0x7, 0xfb}, {0x9, 0x7, 0x10001, 0x6, 0x9b, 0x5}, {0x5, 0x2, 0x6, 0xffffffff, 0xff, 0x1}, {0x7, 0x971, 0x4, 0x4, 0x27b, 0xfffffff8}, {0x40000000, 0x5, 0xcc8, 0xe, 0x1c0, 0x1}, {0x1, 0xfffffffb, 0x2, 0xfffff000, 0x9, 0x2}, {0x9, 0x9, 0x2, 0x0, 0x7a5b, 0x2}, {0x8001, 0x6, 0x81, 0x6, 0xc0000, 0x6}, {0x1000, 0x7, 0x7, 0x8, 0xd, 0x5f82}, {0xfffffff8, 0x0, 0xd9, 0x8, 0x4, 0x5}, {0x3, 0x8, 0xffffffff, 0x4, 0x8, 0xc1c6}, {0x101, 0x2, 0x74db, 0xd9e5, 0x4, 0x8}, {0x10, 0xffff, 0x5, 0x36d6, 0x2, 0x3}, {0x3, 0x1, 0xb7db, 0x18000, 0x9, 0x9ab}, {0xc, 0x7, 0x3, 0x9, 0x49, 0x4}, {0x0, 0x8, 0x9, 0xc86, 0x97, 0xa}, {0x0, 0xffffff2f, 0x3, 0x88, 0x5, 0x6}, {0x6, 0x0, 0x2, 0x7b, 0x9, 0x8987}, {0x1, 0x400, 0x8001, 0x3ff, 0x93, 0x9}, {0x8001, 0xa1a, 0x6, 0x2c5, 0x84d, 0x3fc}, {0x8, 0xfffffff7, 0x1, 0x4, 0xf782, 0x5}, {0x6, 0xa, 0x8, 0x7, 0x10, 0x4}, {0xfffffffa, 0x6d7a, 0xffff, 0x23, 0x4, 0x3}, {0x9, 0xe, 0x6a3, 0x7, 0x2, 0x7}, {0x80000001, 0x3, 0x1, 0xfffffff7, 0xfffffff7, 0xe}, {0x6790, 0x5f0, 0xea, 0x4, 0x6, 0x7}, {0x2e8, 0xc2, 0x3, 0x8, 0xffffffff, 0x9}, {0x3ff, 0x9, 0x37422058, 0x3, 0x7, 0x5}, {0xc, 0x94e0, 0x10001, 0xffffffcb, 0xf4, 0x1}, {0x3330344d, 0x3, 0x7, 0x10, 0xfffffffc, 0x4}, {0x4, 0xf, 0x3, 0x6, 0x1, 0x486}, {0x6, 0x5, 0x8d11, 0x8, 0x80000001, 0x8}, {0x7, 0x468d, 0x4, 0x600, 0xff, 0xffffffff}, {0x1, 0x1, 0x2, 0x2, 0x3, 0x3}, {0x0, 0x4, 0x0, 0x4, 0x2, 0x7ff}, {0x2, 0x7, 0x10000, 0x0, 0x7, 0xb}, {0xc, 0x0, 0x3, 0x3cb7, 0x8, 0x6aff}, {0x6, 0xfffffffa, 0x3, 0x0, 0x401}, {0x7, 0x8, 0x6, 0xfc, 0xf, 0xfffffffa}, {0x400, 0x0, 0x2, 0xd7, 0x5, 0x2}, {0x100, 0x4, 0x5, 0x6, 0x100, 0x6}, {0xffffffff, 0x6, 0xfffffffc, 0x3, 0x1, 0xfffff000}, {0x5, 0x4, 0x6, 0x5, 0x8, 0x6}, {0x2, 0x7, 0x5, 0x81, 0x5, 0x7fff}, {0x3, 0x8, 0x66a4, 0x8, 0x7, 0x5}, {0x3, 0x7, 0x6, 0x5, 0x6, 0x40}, {0x7, 0x2, 0x9, 0x7fff, 0xffff, 0x2}, {0x8, 0xc38d, 0x8, 0x9, 0x8, 0x1}, {0x6, 0x8e83, 0x7ff, 0xfffffff6, 0x1, 0x5}, {0x2, 0x1, 0x7, 0x1e000000, 0x9, 0x4}, {0x0, 0x400, 0x2, 0x91, 0x100, 0x400}, {0x1, 0x76cd, 0xa529, 0x200, 0x6, 0x7}, {0x3f09, 0x7fffffff, 0xc, 0x8, 0x47b3, 0x10000}, {0x8, 0x61a8, 0x5, 0xc, 0x2, 0x4000000}, {0x7ff, 0x8, 0x101, 0x4, 0x8e, 0x2}, {0x3c20, 0x3512acda, 0x7, 0x2, 0x8, 0x3}, {0x3, 0xfff, 0xfffffffe, 0x2, 0xcb1c, 0x36f}, {0x3, 0x1, 0x101, 0x9a, 0x9, 0x753}, {0x2, 0x8001, 0xfffffffc, 0x5, 0x1ff, 0x7}, {0x8, 0x9, 0x1, 0x17a6, 0x10, 0x3}, {0x5, 0x3, 0xa8, 0x0, 0x9, 0x9}, {0x6, 0x0, 0x200, 0x7fff, 0x7, 0x10}, {0x4, 0x4f, 0x7f, 0x8, 0x4, 0x859}, {0x7, 0x7, 0xfffffffc, 0xffffffff, 0x4c, 0x5bf}, {0x80000001, 0x8, 0x198f, 0x4, 0x1, 0x5}], [{0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x193e7680146436ba, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x5}, {}, {0x3, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x2}, {0x5, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x3, 0xa28d2d1ef5303a2b}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x5, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$netlink(r6, &(0x7f0000006100)={0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000000380)={0x2374, 0x3b, 0x4, 0x70bd27, 0x25dfdbfe, "", [@generic="9579c95c538c29cd003c09adf7ab659a9147e59dc2b2ba36c156c6140f907d0a439623b1c41cf9d95948917e873a337e5e6a6867c6bde1c4969929b28e20da7e8e47908fd59046341faed21b817410c1029e4e26f13a22fbdaa14683b0abb4d8bfe1bbfbb8674b8049ad4edc3a2af462eaf85515aa1e7100765aadcdef10e0da1aea9f560859453f29412ad62e86a2a1ddf13623273857d8c057061626e4d5497222ab88568e476854922e9cf8f2fd4928e7dd6f3e00e54ca59e4e23b7278a1997733f98cc8ad10542c72e79e6a3261037f27496771e3424e5bb66916292f53bb27bf9", @typed={0x8, 0x14e, 0x0, 0x0, @u32=0x100}, @typed={0x6, 0x39, 0x0, 0x0, @str='\\\x00'}, @generic="8306da39b61a27bd9c87ffbb041239f77b391db2b42645f1a783750183bac49466fdcbca33b2ae6010bde6a2bd817eb7933336363ed87b4393981b8e6a031b09d367098fe74305353b97ca51defc88bb0dd5fb667053649dde5cb28c137d3eb01896a40e7c798e3c67abe272e3022bc971d2258dfda319254110eb398dd18995081dbcea95cc273cf4fcf292fe6c334e1c1da21be0de60675368513436df48f83d44648e3a86", @nested={0x1010, 0x25, 0x0, 0x1, [@generic="e79539663a2e1ecbc406f0bbc77410c66a8302f308e09226f89b7e691a651fa71ba3687c76aed25f7c6071bce4bda9541684e93edb91e48c372b278870c7fbdd094ede2d712d6dd4fac3564c486534a5be84cb98762a2b8348e96d8608af60949f79c89e3397effdd640ed2218cf48803b434e61dc747106589d4259aa239e5858fbe47b236f836e2dcb28e865ab4406b9b2a82c514031043c4f7662e6e570e792d4f5727dbdcf928e23f41fdf38916805806101029b4a3ba00f6cc3d4d404c528272119bf0fb2ed2bc8db4b3c4abc48f80c580c5c0d828d07cdcdfe246ab348973d96682313b8ccc98d39c61d1a05699e92b3dce37caf8e45a3743010818f7bedf01966f968aa1be6e523d3b280c2830e12899c5132833376e277f1322121ddb57a63dd0df380e82e52e0be925c90f5d5a145095a68e4f686b4b74a7c3bc4c07afb5932b0fe3d6ce3c57290dc03f697d5fc4c2855580adc13fba9a2f2e7b3575ce50ee530ea69c44fd3ba72c8cfddd97b42a0d9d5250b8575f5741108d335dae3cd388a14586e0506f341dc0207c855e6615ccca66d96c549c6c5af2e18558244b0723e54fceb6d8ae37a50d78c6877c2cb8b0f9a3a5956924a280758d6b4ca86b7358846f342cdb0a1922787693a0190f35ad4c8201f6fd4ce855dcaf3ddef7e2f4a3087a0a11aa89537d01a2d3e1a512625da6e594f4f961b6b354ed828db6505030640815a0c40d2b6f16ec199261ffc6c92f436cf55fe59c925fe7bf194a89b102cb57774941fb070497ac82a3e9a9f102f0449e77cdbc0504df2e079ae97f082246ac1bb4c48bbeb9792747808240836e021d12cba44352e440483d7dd2d0f6286577324cee203b6701603ad1eda5fd916c6c210625fce3cd5d8e776f97de4bf1787a88487e6e7b158cfb2274c5fcc0b141cf8e4a5302e7bb1a4fee5d1a4c58ecdf9134191899f130e1463bd13060f48e968807f3356f76a83ff372108f08a6abea689383096806c40d6a157ef0dd51812fcb8fa9a6bf3fb3d4a25c292fd756e7d434c8e4d3bfcb7eb080efa97a2275b9c71b9a5dd6a1ff81eb58b15d1ef4798a2973decde738b3b4a6edf412d5cc60605a28abcfb1bad958bc67386c24d41162ca2a624fb1ed9a5056fbbc4eaa101a86c3a38047b61ecaf94b42e10c17c30083443bc16b10914866e68f84a17404acd65a11a4f00f0bcebfb1921ef66f93e6f3048cbed129f6808e0c5c706e5f0b6abb4b9dba79ab15af4e99138e163993e3de60a46ab3eb5408ccf3168dd4c9bc2ee197f6b9e0b3c9d312d949372a247b9ffbc125965c86ba2bf58b59a96bacdf1eee32604f0558c324205f6c8ba1af914f579d4d245cf07116a3253dd119d4a916440e3b20fae250b9175140b7c3abc465f2c6a6abd008eadd0fd44137ba8f4594115ebda11d81301abe5035d903e471566b0985c262fc1e470cfaa1e02d79c7a5732ddf1947f289b92932122aac7e5914e4df9e4586d9daed41cf4007417b5a816de4cc216f8c9a4376ff94dab431aec322f0cdc53ac1199bdc9c2f24862e7a10b768e920cadcd754ad54690d3af1d43510de6fb2690d2a6ae59bcb3470f6265d163661821ec6c688e075cb65cae8100e3612b2d6fc64a21a36fb1bb777b03aa6d4230f1c387fe058d7fb0aa16743c1ee759db3bb8e7c62735c3a20c9c97ab7e99208e3e14a9fd9ae7c3db8c78c3ca307745574ad2d25842a25909a3e79579d22bbb3be435a49d44e7421acad78e810aa8ece86839f595d76461273c57db06c85a7b254f10ee2f095f74fc29e4206e83273a292d6b9a782610c049c171974e90ffcf3118907d262b687006cc26f3620738febc15212aff95db68357911b89cfea44b05f37fc46198eb1f42b693728c23265a2adb0f52f580903f7ef4e44d6a7588a3e9b1b9bdcc09b87355d7c338aa8044a2b47a717f3808c0b8b588be2f762449f398a3f7423d683174cd437595517991730a8b1340c6116efec220a1fdb0296c1e992fa9d1b3f9b6579dc27cf4ac0bdeb0ff46a3cc9b8574f677fac256bf098388732b3ba8a3b1234ee5917295d51aaee2ec7b51b412067aac8ae171687a75e43120fee4842d4d2b3492ea0781d3b6b93601e723eae52a1318abf71673517024275887737693c604f8f59ade9f9406846dd58a177c91ee62140e92e4b2115c674d3e1982f7cdba2c068904dc6aac4409d3a176e7978f915ebb4e17697184c6471cb0cbc34736910aef74b2b3cefffc2a0fb5c3f40e7131963032be5f88cbce3812343cb32354a166939d0e332c63d02620ff10e07ba23dd9639158af60b201b3219448fa991bca9ce2db6050a3c1c57142d8f11194f012842575425b2a3e6757dd352184dde5fd81684b6d63bbe9e25979faeddcba6b70c3794ae6256495b7826c430bf47042e65bbb864aa9e09a10176a849abb0e4e510be0012ca1d5faa67e14fa0e67bd1da00dd763e690f3685dd60f5e8fc52fa5d0bcddef09660a2b41f9e927c46e21f073a9c3c3c16c539138c9ff62106e3a9dc889a6059131891d2e2612abe934151678b23da08755aee289a1be9811ecdb3a6f1436aa7199553dd8ff44b7d71b84db76d4788626a6eb7b2db32f85eac1581e9bf2322bcc8dba965a78505fc6b12318d0a6925a17dece0bf308613fa0d62c496461af550ea682bc639f57398f8e07a60aade02fb84b1167ebff6f36b673f92ff633d15bed18eca16510773658b5722cdc31c7dc08b4e84e64c181b94573795e753cff5d30bbce317186432ab3aaa9c423e319510e1ecfe4d95a36e7b48b2c78029f1043457a2004e404b00d7bdcf87780c5d82376c2f24e8c1a88a00e4e2dcf8c9ecff704e4401cd57c703f076179295c285aa06cfd131509f1f830ca910aa7646920be86182b5d15c13c2a9eb911ecc0176f38782606a4cc10138efd9d461b91253c1e12efd024c7bac2bd7c96192866a4a620b1f26d0cf70e012cdbc200aeee8f7f709c99f75b9f550bb6f960541e2393e8cc0a6c22c01bc74dda774242127ae4b5253fc9f02a7240477bc297a4e6766bebb4317953c6c53641ce20271d9904c6fcf89929d0d7ae08af3bfafda98b3ae6a7830fbb18e9cc74c63a2a6627a4c30d64853c9080b68676f6bd6d68c71bc409da0e915c1f9f589286530b2e4de69d867571006ed0d198fbee7fe14ea6f714e47a7093e93be57626dca11e0fcd0afba63a1a7fa1005aa56a4faa24ec342b50f4ea3d5bc0cd23764e765d1bc2cce9edd57240c5d093cb98763404243ad3f0031ff06b6866b33b757f45d7e5ad0862f7a0199bda4d21ad22e00b21f5babae729688823af05582dfad7195283ac3beae44393af87bb1eae06e136c59afcb27457b25340ddf02b2f249fb71c2433fe1da8ca9979fd948a51e72d73360f8c59bbc4b7843c7aeeac79cc31d859679dd114faac155c4e87b72bc50aee19e9a402946d7d4c229e84a5fd8ade8d9afc521c457d6c127411ca5272611dd48cec4e7ef74b56687b640a9c73bee8b6969499b22c7d745fe8b51319823fafcb15e113d557947eb52dbd11d6bcd00731a5f2da7d9d2ae6406789808ba0f5ed5d3557913caa3bc38343cf67ef641c2723951e9e4aa96850521bf829f23fa9b9792a08c486efcd0626805e95b56d25ce5de98f51b3d68f136335e6886a9740258cc0b3dd248828d0c4905ecc9cadc7ab811a70238a4686f95f8d07ef222eaa6b1620b3fcd598123fe300ad9ad127a0fe110057a4a417de7871d959084d41f061c956d5361fbf35170211a004385662fbbb70d456a8eae001d6972c4b1273348fee55ef81c638b8a0cdc74fbb94ae39c636c9dbea53f123ecede9bc95e04552969487fa50713fd865391de0348b6d3aaef84bcf2f61f8db007ba74554350eb30664782d398029976828916208d9deb9817eeb3dffacd91e90764f568de984c480422ba29c65b784d26a4f22a1695715bc28889b7e36ffb8a048bfd34f1d76db12e590fee6b90fb3425ee37817c94ad12f0d855955aa2375427826ef2f664d68144e3e373648c7bb0984f61f216ee0be1cc7abd081e8202f63eb44315e2742171755a506a54eda3b7136bb4ed513987c20c831e27fe6c36d857fa9d04065699dd502363b2b95a737cee4d93f0c44c3c03639af03dd9917604eb3dc5ec1b25b376d1db12b8e3dd1526924859c85780d4b4de172012b6bab7b4b5055836d6a9a8f708cd1c68e5faba4762dcbdae8c505e40ab2b9baf86e1a0971df36b16a85729bade507d728ea25b0603df696f2cd02408c60cb16ff4d7ad5adc5761819339fe8a79a68903f931a576bb214d3fc8b7362521a3f7ebfe1e32497467c197514cb75ea4815d71a758155201badca6fc2dc5f91a87a29b1123683122a13f6919a08fa9c45ef982ead3ea12b703538c5eb375599b94019b4d473aefb710e76aac264ce1b511e3d0c2b24e3b2a6bbab21c3436a3bad7444504eb62a8d8c2fe54014bd52f64ad0f6696eb3c99406dd3e86ae8b38fbbe9287ef0125bb9b04ca62aaa384e84df6ec8c2866c2e824de11a9fb6f7907b8878dd5b5d5c3cab2f62c75beb32279616e946ed7c37eea5f4bfeef54940a98a070e4766ba63d23154f86d32829b566ad6187f0dab7a3320c827f3beac0e76e571eb95d7f12cb2686f76941a96602912fe24f4ddc37051ba3751432adc76d661f717553e431b60645546fa9b441de09f7d9158feffeba495db427b0a4e34e796d35184438125182d0c86101ff7e76e2c30ad6b3aadaaa9eaca38d1bd0705389788883ee4508cbcf187ac7c3214ab0b798c55cdd7e6c5846184a93afe002d820f6a4ed9d730be3c42c717a0ac8979f5550cbab5afd5f02f889700546ae8ae6ed5f7ba426a18ce4f641baf50ca5d416a08639f5c9d0b6bc2e409123ebd08b62a1aff8c76e75499525d4691070d03d87915d5e8e3224901034006e45018857304341935013549a300369091c3e55be32e09bd7ac0f0b13de0b08ef8f9317ebe9eb9f5c656589f217f1e5e8e141ed46f7558b0949479b5165344b0b94efbab7b14f72a1e47ab988b3506cf8f8819c4756ddf3f03704b28fd62d33102f576eb925e9bcb1940dfd0a082c2994669136177efb5e740d402f5ec2b2bfc75e53cf02be03428f21d50024b0586323bca64f7059fa24e019c3815f5f36812c4ec34f95ad02d2d7431bbf6291f08d946409c3ab77c2690c7b0713f56104e0d93ceacda5f731fdcaf55c6d33e314239c6796e1b78483334e13d2d3e02e106677f2bbf8dc29b05ac752aa9d4365b7a04e08cdae34597df2ce36d39a992c48cb8f14313414a7c23ed1a2df81daba9ec12f53851646a9268e1289b9820864c5094747a3ede1f72d9e2e5f9b1130ce7910d35139379cd337e28ce98dcc4bda3cd0f792dcb1674db0dd19deff1d5f1b182b778052a2dd3012bd070fbb3e3772139c6ae84d16a7e0f74ed867a3aaefb3eb7dbae357802420d34a43a16fc5a13c14aea9d051521e85d61a18d28d53fa8448aa290807b9d193ede592dcfe0d064053ce7755696dbdd7786c9a33fdf43865a48bf1d602042d9fa5dce766331a79acefa4b44508ec1225e4f78150b319657732cc41db3b684387ba3bd37e9f3617d28fb8b0b838073441fc0bb63d59db9eaf478b2e3a1405a894c176b6a5d117f6897d0234fee9cf86555021e06ca9df7d5d59ba4699ddc9d369f78ee92b9f3e84d3430ec676020ffc3309a132382a4667ffa67fff53ec7703817e6794f72f52ce5f0f0b33bf21c599", @typed={0x4, 0xb2}, @nested={0x4, 0x6b}, @nested={0x4, 0x114}]}, @nested={0x1086, 0x137, 0x0, 0x1, [@nested={0x4, 0x3e}, @nested={0x4, 0x9b}, @generic="7310df635f6edeb92fd0543e18c2be6a20068ec90d9586c057ad4cc6f9f2b0c49acb69a39ee68ccb6699b4ba4845bc29165b5671f5643e22a5d5830b467b206b0d845905c27f11dc1836f92a94aa3e2746ca495da97fc4e67036b3745707a8602f65dd2579bfb83ad53173d9f189a9b3ab6698b9d26434a8e61612663dc1944749be5c9de7809e40823d33f6306782c00467c2844699d32299f7e0765d57ba937f6658b5050b0b7577661d72ba4cc9a1b4db45b93f9472b786005d13016d561e173052667d95f803aa3c3eba129c77c1fb377cb04acedd49cb554cdaf58f4f53f9ae842fc89d6dbb344522645d961f037626aa2e96f9a385010b8e2c47849716a1f34c193c75763c1a631a906d9c25e5fa512abe627ccdfad25b48d591bb9fee7cde0e9e854bcdf9d4f31734140f9a91bce9a3d04748d640b6e4549812c86adcfd609ff8e0bb067a37547e535c9899a542289c2c92157a9625c26001324d7cd1152c5d255bb685053a3eae08dec5c480d89bff11236ef81edf61224adcf6b74858884effededdde0978bcb576f2ad3b92b413fac5001e515734e7f0e3199ab0a7b403b40247cb1a6b251a898ae648cfb908b1d950fe0aababc02945786c0f45d622a92eb8b578bfc3589345bfcd1f4ab6e3910bf0f5c13565d6483d898dc6fe1b88a21a8508952b08dda1cc3dd058c835d9be1bd5a0f046d61b4447651d499a081debba15de9c803940c3f4d4d0c1ed59ad19c477813d8e7ebc04482f387d51f9008bc76c1f1aa621759ccc2de3b8ec06022ec2903dbba08d5f0adc0722058210d8be48b44fdd1d1fb91f1a19354327a9c2d1048234198999c35e46911f4e20db6228bfb9a71cfaa67790178c4f1b89cd8a4f56abbe277dcb28605a7fb8f895f4b423f9df7af395eb8941c6a909820cda3aff943642b1083b61b9611d38f96e13d8546022c62defd4c6c7913b96fc0f2d5c49de4c0e86321dc65c6ffa057c4bb616eb09755c71b80ec30dc86e13074a0c3fbe3654fbf00711348ef711d91183d69cad6f83fae9d9593905ab33f1b9d74487b0f674124abeba86d507a1b97990be9b551e6c965857cd47e26fec21a764e7cc798fb36d0a04f03f12041bba42a3505ed3719dc71168224297a571e6a48d1560cb907449e3b76b86333c2512e8f886fe551b5c77197ee4df8550a579124cf48b7ba7a85e882d3dd8abe38262b6bd36de9464cbe9a7db2fcb6c5520537dadc5ee0e0ee78686ba106af4f933463e0347be6427ab588db4bd0caba1ab795204649ee1386e6cdeff0420c2c2e33fa751d2e42a8d9ff6aa647d7346ff3a96d35d809d9b1d818a7f903c0ac6dab613541d61e32e9f99b46ee9e608b6da4c464d79d56617fd3054de6fbe10f7bb87c9878cd2812fbd1522da097fdde9f5e9bf14b447ea97726fa24c310e3129f8c4dea2518b484bc33e4f2ca5d3d5006ffdfa7922996074b60c77320427e68d5adbfb777d8780fb22352c2cdd6d8374d1d12af4f996e16ac4776f0c774e6a80213338e4b015b78b40991964fc950d42710c7ddb1ed2350a2abc4ccdef8a2926ea6dff131a5ad045917644deb16e01cd80c45450005a50a31bf60968269724039b8d9da566ae51b57a1e023ca82fad2712dcfc2244157681046566f91b13c7e8a2d3a0fb72dd12d7a5783b79feb8234aec0826675114a3f8bcc1b9703437cbc9d81e88c7aebfa95d54c49e752607dc125319d19d21a7a139ca5dc1323a024653268344ec422e095ff77833fac9e8ffd790b519c661b7c22565ffd62b056b393f072ee31d389c9c5aba489d822107c5d2658fc0edcfbdc51687c1c4713a7c3044fa656a462f497479ea028e2f40c735aefb6de33583bd45b7402e35234e11ec7a96aae2becb964440febf513855b04415b422ed102947c6adff62e3d82f736a14f42a860e99ba375376b104a48b276c99031c1553fae6d45ff90e8049cef08005d93b06f7a06f2dc240e307718a793ed97582322abad779e239b3f1b9982e62e95c35c5e4b9326a81dd7b7ed5edfa99288e2be5fdfffe58ba8ff3f058b7c76406dd4ebee39e3fb918c49669949fffa410fa3b9c269d9ccda844eb5b589580fcc5559957d4e4d01bd8e512db85ff36adf80e9fe54940d11f41be545732fefaabb2cad06c7b9945e25fb55c9a4aa888a228799df230add637b9dc34c82dbe2bcea08888e3de4fb2dc64b04c20ae5743230a9140b2d41b955171ba4ee0eded61bee136b4f5600814dcf2dc62f83ea31bfbe26455cf96f6b62db6b0910b923696ea4cda92c54eab618399ec3e8f89bc0483da02ee93a8a7fa2eed6fedf308cc61b4c7750e9382eb7bd1f695252b5db7427551e7043ff09e91d9e239afef8ebff4f9501cbe76f2407252ca8b4328fe5ea570e3f5da10e4c6fe3c953e2a396e60171173968d3f0048c043fa30c4d2b1c6b994e4cb219ecf3dfed2c50ecdfe802bc4033fae87e102d4ef5237c64728038832b81fa241cb9bea5b61103e4c1bf699c72f50cbaf9b582663b8b4b9f9de45fb223587caf137bd803d3e9f117eccde7264528a46f265a0f047239c8e7ab9ee259a4e11ca6a160585e0ec96b2717e6ab0ada6499dd62d04f224f548e9ee39aad6dd495fa6508b5727da3a32e2b29e0d99ec4af3114772f8239300e80f4e132c9a0c694fdc9b7094fc70881b5ba0bfc9f5ec497e3f6d24c2f21c7418ffee1d43dff210a0355834173021331224ca58696fa3cd1c0cc9b2fb86d2e2c8a18ae8353f040abd72f9de903a1720522d7f2b4861b8ca750e7be8aa9efe41a35642cec495ccb0149fabd129e72d204d08c11ea1b246cf6e2fc2294f3e5bb123a8163f89095aad88c1d0a2abda4ed18bfbc800c031fb2c1455683674ce54ed4e9bbd2209e122efbd8cb19d8b567f2e38b8ba52861d5f2902d679d4d5ed4945f3357b036cde26854cc5d318f34dbdff7877e9d34f7f225fa3bb223f0ae591c9d1b99df76da16ea5a4e9831f6dd60166b3ad312138957290042002cc149d0a29ef8f8cfd36964c04b491038810de5b5ced2cc77bd15868ace1d8b079b057c8d538678c4f070d18f6dacef2314068439e2e57d0dbfaa59ed347652ac83c3c1d241f851d08fb756b863161cc60b9b1b499a359ad2d1ecc2940e54048387a01cda10c80bcf8d75ce592cd53a22480a4cddba191595b9b265a942523333ecca5b913b562242ec5f437a8a6725fc2b7e1084dfad387a4ef8df2aaba4738d2f31e3d196cdf14b65f65b2df11ee664cfd630aea2b78d52b8210f2a6763abbb1e65b9a795f0d8b7c193fa243f434754902c4c00e54c1240b3f30d16633d4a6d5edd29ff5b5bfafed5b82273201e576be296646b1f82dd5948134c0bf714484db35c19ec620ad7b871c5adb0a5af557b05c51dba93b6e4c5b7faaf8d64bb6f6b4786801e7eb57d6b5916ba68a775beec5ffa1346f97b9d5e70fb4a36294b0ebf733655d8c780c818ba2c7eeee79a7e071e016664016c2232aa2d7c06e9788e4c4945cb29ca8f17cd9b72b25792d80b0ed24fa99d8fcad3076fec39663c23a887516ad18d6db9fae9d2b8d470ac98d575a7efdd8db488fba9d8e69c143a560355b599ac3d0ef85bbbcd3e398a02db425c91d0a4e8f46dc0a6d18183027ed8dc710ebebb4be406e4799b15ec11746221be5a9037bd772201c3d2e6fff1063b65dc4776e75e3a67af0bd0489de6a28148742a03cb42be17dc0601f46ae4b877a1bfb8c7e43854db54fdf75b4147e3c22e21021b4efd77eeaf001946b83edd0d4ca3dad95a7dedeb661b9299630459c1ecff9f236577a6fc52b1624b3cb4a35998af9ab916b161935b143886e5a485c17c059dd44dc0129b92dba212567e31e8c64051efa3055cfa3cf59c0eeec850fab00f592efa9afb9606d4e222fc81741ddfa7134fdcfd23088fc477417ba7132b47bc8dd5a3b372ebc6ba942ca608e6ff44593868c11e8605598b612f9fff2b571c0ef0d0e24673a8ca2da890d347de065ecafdadaab4b1ff3d4d1ba0daafd8b8fa257b5a9c7564f99b9d2c00be2f63a7950d88b62273149964ee22166089582b38905a57fac60b72e1fe03b073498a150e77a60ed56210af6242fd5c215b029fdc7095e97686efe22d0d1e0685a9ab8f7d4d86bbc2e4ed4fa57194136bf7812561dccf26d940ca002c1a0ea0afc641a42f4bddc922c1d3a1fa286a85bf5cd2fac47b46ff2436333feca3278592dcb9cd0e3062b6c0b0caea5304a14fc2fb2e8763cc066fa937bb41bff3f04b9c5384c066f896da4d7850790160eb9d8aa3f633093ea22795d678c167ffc0c277a4f221eabaf3e2ae6b343b0381e7121a8ea26507635a9eccc28aa83803b9de368877b9a46553bcf9acd68a75669f5ae7651fe9143119a74b3a7e8507ac39550717d380404b8f4de8092f5fe36e5500706bc7381c3cfc6643d6fc10433cd5be2a9be05b80ed2a079508be672eaf3d3d3a7624cd729f474af7c9cfd05634c3805f9f34df10ea2e51345b8dd35bc8220a17f90bcc4dd8debe793906ef12785793057133e601a853b78513a7790cfd62ac8752488a195a4fa80be1d8afa7fc1cd46978d474ba7d432a387911873ce4ff69cc769ee8ef114cb1b3379e7aea6d4b598da0087a2a3da560ed9623225c528d5350f51570bf051bfb51f475a32b63ab27512dfc8fe2a4f7b9d8f76ad3d6a085a566fd666f27878f41a3c106c717a5933d914c7669a55852fea328bdc79dd412a8a7868328c9fe944e56f543dc5f58889cdc5b83fe912780f5a46f420e4a7eedb5fc1a421a3dcd2133005bf4f519779afc08576b0c9255a5be84c9dc559ba56c74be56f2fd6a71bd0c4d08b18994d63f1084187c83976f4df1fea8c90d1d71d49e3037582e048b45cbc79955297187c9e1397ba0a1dad68e01318dd36ade358eb71d5d9d6b775b004d7e918689770fadd6f512675602bf68250b1b913bf1a5583e2f6b18b0e45066bab1285b3f955bea841277051c3575cc0e96a18744ec7e81b6500ec56957fa637fa1b7974f3c6af33d1a929a44bc9cce3ebd24956fcb95e96b842428c10a28a31cef0b365777fe25178220cb749f893e4ff16dac5acbb8f55639c0d3d935abc8fb355f6a7cba8e20aefb2b47e9205fd8e2c7a66f453c4af6123fd28e8d3d334f16cc1d30aa0d0a416559ee3c2dd431b0d09e3596f877008ab58aabbc726fecf371810f7115585583a2fd35109763be2db7b9239227ef33312776a40291b4b016982c7d2dd0b957c6dcb503b8987a94d82ed4f6f83897c787394d01b4bdded73cd1d82d9e17a7b3f3b952feb91e58a16295563df8b438b54ce74c19dfd9f6490a5feedbebe770b526b8de634b289b13a19a153ffcb607b865027e1d4453f4143346479d909abc4312862783f5c712aab1e9934930a34c9f167a8f631cb39e0c45da2095d43d6be86952e45899e23e4e53dc950193733b7767f28e2108ba85eb3bf28790e896c7171283f6413afe17db0cb5925881c6cf48e270a4119c06ef3c5b2ad63c499aa9e87248403c62713135ec270e37f1074a93afa762c05e63b563725391a4fcae9e0a3e1c01011562cac1eb979a3ed60fea6bfd2b29815eda95f70c84adfd00f28077cf0d82f9a394b935a6bb076f8b774fa70cc3f6f81df5669cc7d989c9ec12b032c39090b80d46138395c19bb58339bc1428b11045fb248f16aeb09e08c68c8b78c5d100c99c7649443b0907b8e80959455356ef36924fb4e0de68336a686d3ed19a9f7d1ebf1f2a831565d4", @generic="cf4bfb30e4c5ef6c2212f82f7a19d2a8b3fa750c8cf7ba1e73063150f5b1d1c5e2c42699befc097d32a4080504f04028ce25fb7a6a933d3e2f52fad1930ed4d51548cd6292bcab92f87b5bad6c29a8bd30c385fd023e5559a3bd7b184e6cab152f9253f76c68fe6c9ad552dc3244", @nested={0x4, 0x79}, @typed={0x8, 0x130, 0x0, 0x0, @u32=0x80000}]}, @typed={0xc, 0x14c, 0x0, 0x0, @u64}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x10, 0x60, 0x0, 0x0, @binary="66b13226f227166c650e20c2"}, @nested={0x4, 0x10a}, @nested={0x4, 0x1a}, @typed={0xb, 0x36, 0x0, 0x0, @str=']^-#))\x00'}]}, @generic="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"]}, 0x2374}, {&(0x7f0000002700)={0x1394, 0x3b, 0x200, 0x70bd26, 0x25dfdbfb, "", [@nested={0xa8, 0x3c, 0x0, 0x1, [@generic="2ac2725ebc36465733ff598323d1e18cc2e21af4a4866ed813e9f287ce5f6c3b8f59d884703c7388ac6de5197ad4a69857cd11b668c86d5d779277dc1458b3bad6f4a6d036d9de08c94680efd253cb0c1a3d65fa96398d4d80e88bdc2333a33459837de1c3f4b5d81eee86efdbe7cccd910e170de3fa7949c97fea0eaddca81364a9cb6e81c8b4792235fb4e5f7d7efc5f4b1a17", @nested={0x4, 0x122}, @typed={0xc, 0x13f, 0x0, 0x0, @str='nl80211\x00'}]}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0x8}, @nested={0x111f, 0x141, 0x0, 0x1, [@generic="c434e131c26d97a8115f27b7a0a933bcfa5e", @generic="f41df0ac2f6955d39549286ac54c151075b83fad518d194693e9ca2babf615a3f9fe6ef23b2e7b715c367188a4302b240b7787e9c016226047e4e714097ad10c0da361b54a12a8d7b9140b9c3d6693249a9f2baca2ab246175d775f4c4780b565cdf8f27b43ae16287519d1d022b79854551d7d4a480d1947937dccba6e361b6656de6c26394592830ad59fd155121e139b68066ceba17557f7bb4c3617ba626699df15a9712dda2c3309622e774d270bf52471791438c74de9eef53b103afd25c09c6d4878062b1f6317d876a0c3f516e28560112b43611b7d08415f7acb644f3d40fceb3af0b258249911dc4d8d04bb90d5f9c123c3c1e90b5c96b7fca79e2d3e24f94360fe682ecebb67411134c2de9be5e54d961a2c4f9a5df04c05fb5121a8187a01ba3e30296e598c069c995a5f9a01c2439c89a5c19a230e3df9372a78ae09a381650df4495617bfb9bd696b6e320513afeb7f5c0d931b24046e8cc2ca1e5de7ede9a02c002244f651550a0fcfa728b7eebffaff7f6b113107bbe62bfdd79513157c852b2213c19f7c04a6acf8f7857d84931f3c663c0063282868d9469e5236580488ebdedd748c679c9441383e02f6937ac6b915c99243cf31d4db1798999c70764965780f8dc544e473d3c1fddf152b0aab406e54fb5fb692d00f5298d16dcf1ee9b02de48df9b23dba6308dbc53fadd608bb338e7f35c8c46a085c5db435aeb71babb1bf001e483b67860ff8f6c3612afb512b4369ad4027aa4afcc21f0a429b0c5a26055b262d5ca5ee04e2355bd94e96c16c1c182564865082b390ad9d8e49a4f5cae2b6665c41055df3f32f1fa5fcef18978515bda186f158ad3d3cd80a4548a8b09029b778d5bf842e5e193300cf8e195a9cc4ffb5c2bf399fa6865c7ad66710c2d683ab740a7e36d37646211477a289a970850227191567873f12ea2ebf209acda6e5d439816aa28349592c611a4aa039563cb0d3f8520a0f31307e4a4190ef2e2fab726686da39303505d3e48d8f9108f5dc38238b0fea2aa059f54e60ad3e4b33e4dcb4d8a0e39aba9f3e49708431b7e930c4016c90110cd7f17eb0cbb024ee4ce09dbd15fb660d80cf3d59e78e698590a44b2e83288d56ac663f3b77560ac4432be04e142cb13d7232303585fc27c73e46baa0e8c0f52b55ef1086c9f0fee6052df462e18b0c13998a6ec1421b9e0117797e62f3ef228c28ec728094550dd742fc66cee659cff493228a6e146188430e9075cd7436e12c36c82aed4f0fb787a418cb9c4f1d1ec3a168d9f9047c38aae5d4b194ab34e6d4dd19c796227bfbefb1304ecf907483999c42c2d59e1b2e3dd8cafa32c65424c0e131471611464ac28e5c8e15de0811a137e91f3e4541005a4f60a32e5ca2c800c5581b5069a8b1a4ca85483cda27f8e1b02dde886d9d037a4ba70cf51db1f781fcf0f732d25c631f2c75a85095bdd84f1fce84e97784d5fe7080afdf91f112fe971d3fa3934d06790355f93fa256ea7b25b18149e6b7b45fcf92e2732e137f5a0ed0014f2f462a0c452808e85b5bc9c0f0958cf69f85347d553af6b8ccf9d759d7cf3915dcedcd5d1135b1a9ca79ff2b82ec4d9d7bf5805140f04c9e7921468213ad65157a6e879dae34bdc273523bc35182a16984006bc39fd98d51ecc1d0af613ee713adfa471b515c3102aa0928da03fcbfc4753b0381056ee1c5b0e921c0d6645d081e46cbbe678043dfe24a7272ea144206942a90e7978e0240d507a7b8378453e5a55603d6ddead4adac93863e56f66c9302f3523239ccbc615231af3804aa4c9da9086aaa502fe09e6fb03540eb2952118d8295c95bed4990b29fbd098f8e18c67a66a2f599f2f726a9cb2148047af1cd332445fc454b79744f9c719ac51b0ff1e71502e8449c47cb1411be29f94d2971d3610e033d093975887c5891b26f4658b6c463816df2e80ca432f758290529109446636e016c5434c247c09b81b227c4e376b9c38d214e50bb3a6eb8b443d2fb119235c5d458d5a683687d91a272196b6a72e670e1943c6edcf8e56a39d000393f3bfb6e84cfbf24f1dc9541c6767d54298312567d7c3dc81f70edb4e350c27169a699ca4edd5db806c376b94b050181164bb24500631a516de3cb4921018d6861de00f9bb9f8f8fe2936863581e8c9f0f0ee30362789c4ce5d5db3b8ac77feaa8c74633755a52a6e284811682223f6357d8551425da0317a8c440e4f29ecc5e177ac0f2564d1153d971dbf6901fdb6b75e4d910719d8843ac388e31b8a3a37d9eea8f4e8f5191657d1b93bb1af0700bde46703a78e569df2360cb68604758cddd8cb2e4020dd279fdb7219e7568b8bc6d9abf76b3fa9bf69bbcc2f65d02fc0e7c97d679667f946c742a846d98b59302314b9e7afddd3130f25d396e273f78a8e0aef04bbbd84cf958b452bd3972f5ed270c991c94467989aee0f8183e0413f959a9e45346ca0ab6f96602f15248763ceff13437ff0c9fc11a4296d84bec7e8591720f421e8db507234e833c8818252b52b8e96245eca229890b7d7c5017d301da028fe872443e4d3607a6b1afd7df9e216485adc3c92a44e165076b3ac438d39df8bffca2382ad81f408c7879568461a41b51aedd3afacde75fb022ed0ca2de6ec82702ed3dfeda855b7082dc05314c85f994ef6e6feff115b25c7ed46d020d8e640fcc27c2761c6ed06a4af6891dc33480825cd709347c452f0f26096725ebe0b396f4b23d7edb931d5798015d04e3238f802b05be3ab87e22448daab22766633f5edb742752c9ad4afeebdd7d883f7d54205e3e93e4e13c501c7bc252939a239a6a9a78e87b3bd17f7c79da55d8f770036d6174851ac5e1581ec745353397cf15c71880d4a3232987d4495a6557e90877f2f0d65aec920008a8cd0c884154675e177e32051194062e5d33f2dd7c0c84ec590d54b00c5dce23cc8a1262494934bb3ed47b11713118681e52603c554f2f403db06fbc8998bbea99ad89f6bef63fb5150d4e6cbadd515fc3083179aba1ed41cb897b798ad4b06096fb5a4befea13cc3d1a49c116c28596d8eea113d069d5e38835a62ada1ed0bfc56ce9b2d7254df572e899f85d1dfe11259f45d4d29bd0b9d408923a811b14114f003ba4da93cdb2ce1f7c9713a7c411ed5f7e2ace05acd369c7c0ddf6762a78b36f33264b65bc2048326c011de2a85dee81d47b1f0134d3011e8504ef06f89465c98cd664558f468cc3d118f18ee075b5b77cd83774d36d80b4e5c215958062f60b88d30e389808c3aed92354454652c5e24002657850f06aabb4ab8ec084fe369b4806c6c5a6694fafc76f66f5b3c1252ed288af393a68e33dd11ae28b73af306a4eeeb1e6c13e925c3e14c3acd74f2721c5af1211af29175af9e09643e8decc1320147b75b46d2a3dddb9c6c0ec571236d329ea015ea969f0d37405f8279d0203a2d9e76e6295d02a6dc0f2f96f5d384ec36e148b40afa4501384c6346dae3402abe8b33153f7ccb1468115067694941b157cf1508d62923c7f5c98295a2080b1cc80285c69bcaf919a36fa655694b3b9e840f97fe64e8d2f4ba08d6311a783f7f90a670fb4cbd7c35c03e08224402c772681b987d51f7192721bc16fb134f35079a43e9ab4224904ec388bc2e08f4ed37901027b9cb8570242ce14809552de8834d39c9902bb8ad3943fe75040017810f1110e36c903dab424e225585dd2886a5406107e4ef1717412744e1c1347f89acf96c7ca6eb42f78a71aa6c3a5701c33ba1703896fc69749601b849c623602cef09c1100620d7a8efdea0784e4b8e124a91c731ecc8d7dd51254a51e6045ef6230081916bea0463fe6e759bee3f90ab2357264543055ace2bcde62278420b6757c479a90732f81382ad165d5770d8ffe66f567151cba7cec0d862f1dc0230f31d59cfa0e3ff1e245bc6455cb251bf19d6cbf6647656927271798be7b743746c9dccb9647b988d46a0ddd2f04936350681c0115873aa32eee3985b385719e94718b37a9eb7e2dfa09d2d2bea63ba3ee71f9b476ceabd4fac30350a0bcde83e4a30353d4c16c03da1fe88346dff4a5daf4e755669d8d45d7bbdd167105ce038a05329b8ae3ebcfb667362819ce7f1943716ddddf5fc32253089bfb5ffd267b525c362f8f6479ca725be4eedc198aa8d14ad5b751c769a1ad41ee54efcb5609d7b3bd4845ad87bfcb5ef004e018cd90a02e50f1eeda4550fc8454ba8430fe0b2ad0615784138d47b0a6c343224af65043d699f7cd5f0dad6d6ef1e192523c893453285106b5be86bb5050038e46aac236b20bcd0b5c94101c4016bf5dc5285d5ab50b813ab6e709b94abbeddd2c29b839e2b2900cfa4f864a1afb22e39599378e65e51d51a2e9dcefae3ac1bf1db6025060f1b38413981dbf8440cd48054aef5dc6c2f3246d0d38f4366390c3b254627bddad7a53998d43d72623d9156b20212cf18690ed4bacfee849c79e86224ac163f3b971363f1624c492afb1eb0a4dcdeccc8260596c182a2495c6a07bf54ff503972fd2b8821ff4ae168bdc4f1c1af2b9c26bd3fe1acb4465d23403bd3d9dee743bb9cdb694af0923ddd33e110360b63b7fc518cc4d9e74c9a3af0b7e39a11a4ed4e764d0f3da249110b257df8481092f3462baf82f5c883c5b490976870b1dbddd7f9b6fc3433c6bdda50521ee9c8a3466ba24d3c9fcea500327707e31be331f90377fe57b0c93fc76191e05514cd02db63a5d208019d0ce64ec60f85a932925f56b5c227e6d56b8ed2469df8f40c53425fdebb1b4057a636be8a6986d214c8cca86393a99c634501bdf120c37f99b3c589943b21d2251bdd50342dda8de809948f29c2827eecbed11df8b23f7c0df32ef2b636ca45d003ea7756e6816ae3c4fe670f92ef54112ed37f6775d5a7924a806eb04942495fa148699d2ac33c1e5f7a117d2718b60a2f032f8a5197b3127e3b6c744b19254657059f5fd0c901cb437994da4688f7ff17d559efef8a4a5036674f476d95ace4c70760f8e616a3d525404fbc47261d109ca1aa028c4cc90d2c16b25c548f7730e8b5bd2951def8f4cb88568a90f191ae96ea4bdaba17c4ce90370f7cb8362c2cd3abfb93b590bb190b6c7adf7ac3e2d773fb0568eb324e3d77c5e467201e0f518b718f0b2b07a4177874ff3093855d421ca8a2b466bc0ca7bf1985bc0e021a38f7f1c09ac3e35e0338dfee8a63df1936c7ca8f7e6e876d05ce68e56544f01f4ce6a27d39ea8da0a11303492af7704c21c848f74cd63b3060c0302d9a5563c3e454950c8ca39b1ccf50255713eae21686d20385faf3ddc64eee77e42051e1e7a58fcc7d17ec7544ca51bad37fd73d7c72908201bd0f75a5e0970b9f9970080b9a49744061af44899a8aa8647bcf8f94f6c530c424eaa7c6cf714bfe8f9ef4da646ec0e2e5d6662ab051e8b38dc59f800a6dc6e99f3988ea5babc8dae24f69d9dd49d0db03be552868bbdfae5c8cf5d9753ddfd1798cfda04e0d52972962708b659c278b9cd05be3291b4fbe9b645451d50f65c1e12a14d0485ee3164c6c335402434e20a998829f3da1c3918413bfcc59ff5982a0f0d8b161de9b85c192657d251d16919f0418b90065251da88c2ac68bdab9e81b31de9af3e473e2054638c8f35887d360d2a84ff92c6893c144f2c608e611872d4f2235cf95dab99335bc0831632237b3d580c5d0e37ea1a6a2d0cea576acc42f57698338f94470094a1d0d805d07d8e83f7a586adefe1b3289c5193a6dc8dbb63756d7d41bf9", @generic="18ee363f2fcdefe827c6254983c925a754fe0a679d4a337d8a78a9ecbd5cffa7ebe5d70f0d25b9693b532dd540a2216b4669f0b3a2c0ca8d08a65ed00b261bf138d9a07d9dd8b79030d3c58e5d0ede4f7f812807472a18e89a690f3fceac122adc853a8bcd8f13c023099cd1b56ea63efee2eaed8e29dbc05c503074b04049bb3feb9f05fbec3830acf2bccd597bff84753cf020227e7cd1525531c5498c3dc69c7c51fd6ac51323d6f61268e4a4768ba37be49cfa3c391dde500f13b2", @typed={0x4, 0x109}, @typed={0x47, 0x57, 0x0, 0x0, @binary="869438c8e3e596c21cb447f4e6aebdf70b973c426e6879963fd6c95454af2370da199a0b9971954ca96ecf7a557e52532627f9720d4390d39fc139c42ac1ccae76b49d"}]}, @typed={0x8, 0x92, 0x0, 0x0, @pid=r4}, @generic="1bea3974d9132976e0b264f4046f", @nested={0xfc, 0x2c, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="e8e92d007f134abaf8f25b71b1aae6f200746cc99caa7fb464ab97bd1017db2bbbc892e730e8c50c0f230dcc3f94b5297fd6757936d1faff0e6583dd7010dbd917acbf4fd8b57b718084e5f19218718bb7bf4bef28f31e55f67e3011a9dfa6be32bca4d4bcbc1cf2d2a436396190b72a177c469c24c11004093345f682f07411e68d92a5bef344ecb9557070105d4df76e300f178d57ebf00b1e48b5a1428a975e9cb52757726907822ecddd635b558f8056a7a4a08723bb01b2064200980502e37178ff42927e59323fd445ebd535703a9b140ca02dfb4d0ed4c9885249a4bb7d32f80aae8879f9e954a663d842b04e", @typed={0x4, 0x1d}]}, @nested={0x91, 0x8a, 0x0, 0x1, [@generic="321dab8af8bc377854f1035d9782f5ff262ed504efd854f507cc020479088fce7b9320f0d7479517363fff04193432c7578d05a90996885d1c43d35df238e22142c5a7ea42c5bb3f2c960fcd1753fc5946d20c133190f00a64256f0f8bca934d5c9764310cec91a213eef1794d30bd2503b57748167ede5d8433ca6cbfe09433650a64f8142509354693370c8c"]}, @typed={0x8, 0x4f, 0x0, 0x0, @fd=r7}]}, 0x1394}, {&(0x7f0000003b80)={0x1054, 0x18, 0x2, 0x70bd25, 0x25dfdbfd, "", [@generic="907d3d431f91206d0fd1e11b7a88a1130583c63caf82b080c8d0befc8fec0ee43136a47317ad5af632f860fe5960d91a776cf6b823fb5f", @typed={0x4, 0x142}, @typed={0x4, 0xec}, @nested={0x1004, 0x8c, 0x0, 0x1, [@generic="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"]}]}, 0x1054}, {&(0x7f0000004c00)={0x90, 0x1c, 0x20, 0x70bd25, 0x25dfdbfc, "", [@generic="d196461fa4fac9bf4c780bbe6c390c532d6bf565bc7a4252e0ac2c52c29a848c653c667bfb5374328f29c711e722a277a6872b86e5c0f8e0bb7367af49f89c8780af277151c9d9495b548440dc653f7084d4296e461b37ea6c8cbc6821cf30cef090cfd6a81838f7fba929a18d58bd0f65f0e51993073f604ba70f6e23121e9c"]}, 0x90}, {&(0x7f0000004cc0)={0x1fc, 0x3c, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x108, 0x79, 0x0, 0x1, [@nested={0x4, 0x135}, @generic="a66cb71eb534558883dbe7d6", @nested={0x4, 0xa5}, @nested={0x4, 0x13a}, @typed={0xe4, 0xa3, 0x0, 0x0, @binary="d3d300c289ab367140215e7dfdd8234d0d86dd9c2a036f957f4dd71d3b141223f0eec3e95e6e916595b79e35704cec83e9d2d70a01bc1dd761fa8e9657e4b62577f66ca2ff974c306cfa2a05bf86ac3efedfcbc48216fc4226c442f3629fc5deedbb5e82bffd41df7fcaa1c26453f32ae0ac915bb5715183e3200b6d5c676985f8865136f3be5ef7c36fbb98040b2e231dd07924b1e15afb579c9f8e0d11d3764813306c5943a26da4fbd9a3890374cd3a80dca6a8251f32fa6b55fee10656ecfb56ce9eccad4b5eef95d03270fdfa6ca062f6397089382ce00beae954e0ad81"}, @nested={0x4, 0x31}, @nested={0x4, 0x112}]}, @generic="85e54c46116cd3e13a253c5df9f89ac089ce97625283693ab9827acbc5b445754c0cd92de81e6d56bd7b5dffcab793e21e7baa562373886e1247461387a43b7e01ed9ebb6404ad1af54b3dea0472dec7123a0a58e4425f4f5ec218545d212af3be1d7c1ac7488fbfd215a8d1da5286a16295186f26202f03802d0469459be5248a70ff518c2474bdca8ea28c4579b094d57b5e42cb79469e0b241631551d90706a8a98cccc99e47083c36983c13085b75aa2cff9f16539ff15d55444d23f108424f5acd1a67ff28173b73b48bb3e518b2a16699dead6b61ad81b", @generic, @typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}}]}, 0x1fc}, {&(0x7f0000004ec0)={0x1014, 0x25, 0x2, 0x70bd25, 0x25dfdbfc, "", [@typed={0x4, 0xc4}, @generic="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"]}, 0x1014}, {&(0x7f0000003ac0)={0x30, 0x38, 0x200, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0x23, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x95, 0x0, 0x0, @uid=r8}, @generic="9194b48588a30a", @typed={0x8, 0x11a, 0x0, 0x0, @u32=0x9}]}, 0x30}], 0x7, &(0x7f0000006080)=[@cred={{0x1c, 0x1, 0x2, {r4, r9, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [r10, r6, r3, r11, r5, r1, r13, r5, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r5, r6]}}], 0x78, 0x4008040}, 0x4000884) 17.130648951s ago: executing program 7 (id=2609): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003d00), 0x0, 0x48800) shutdown(r0, 0x2) 15.986780808s ago: executing program 4 (id=2611): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0xbf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffc, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x2}}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf000000}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r1 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x20024c}, &(0x7f00000001c0), &(0x7f0000000280)) pwrite64(r1, &(0x7f00000002c0)="2c89c772186450e856958474f5f97edf1a072568ba1d7e9ecc45fea09f86e9ab329fb7d9e91a3e29777812e1805e51f99513cf5109576f5717ffa10c10c472e745db5c6aa961c8d30623d15d270c0f23b8ee42a817caeff5f15816dd4c5762384660361cf51c9d5304fe4dd78c393a2a18b18a721ef84e1df2a618161c7492c0051296a9cf572ab3ed0f865aedf5c3fe286c4a553c81fb6b331f429636cb2314180d7adbbd9fc9c2514b380e3d19a83b", 0xb0, 0xfff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$dri(0x0, 0x8, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, 0x0, 0x0) mkdir(0x0, 0x12) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x803, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000100), 0x4) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, 0x0, 0x1) 14.72319849s ago: executing program 7 (id=2614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) 14.350978585s ago: executing program 7 (id=2616): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x72bf, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) gettid() writev(r2, &(0x7f0000001600)=[{&(0x7f0000001380)="fd3089dc", 0x4}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0), 0x2, 0x1) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x3, 0x3, 0x0, 0x5, 0x1000, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0xfffe, 0x7, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5]}}}) 13.680980346s ago: executing program 7 (id=2617): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc05ee057ada978f61034835c9655cc8f5553beda9f730e151772060ac74b31cd73d524a83d2278bcacaf9ccf186df9ce51f99f2e19707", @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB="d8ee2eed708b5531a35c0d6ec0e7ad26d0b3a8dd10df50399beba11c9d1c05f625e0986a2d23b653aef5eb8d3458b15bb00ff6c347c0cf2d1a934384f3828d8fb8d40e9eeda0b5658f1d54010f1fb7d0e24decf879cf268dfbad059c888e7d68c1e826ee9c7be50a19f3bb80723fe29fec3ee7e499239baf0de537d378e80946009bac4befb6ff22fda5d090aed42befb8d4b2b9abf34f9e3bdf3c9db50787", @ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC], 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f7, &(0x7f00000026c0)={'ip6_vti0\x00', 0x0}) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) listen(0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000003, &(0x7f0000000800)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x107fe, @empty, 0x2}, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7}, r7, 0xb}}, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x4000010, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {&(0x7f0000000f80)}}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xfffffe7c, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044810) 11.730947877s ago: executing program 4 (id=2620): syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}], 0x10) listen(r2, 0xfffffffa) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x34000}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) 11.571444383s ago: executing program 3 (id=2621): prlimit64(0x0, 0x5, &(0x7f0000000180)={0xfffffffffffffffd, 0x5}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005"], 0xe4}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYRES32=r0], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x5, &(0x7f00000003c0)=[{0x9, 0x7f, 0x3, 0x81}, {0x1, 0xc, 0x7, 0x100}, {0x7, 0x2, 0x1, 0x4}, {0x7fff, 0x3, 0x9, 0xfffffffd}, {0xffff, 0x81, 0x1, 0x7}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x3, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000005c0)="a30f", 0x2, 0x10, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @local, 0x4}, 0x1c) shutdown(r5, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) 11.398455828s ago: executing program 7 (id=2622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) chdir(&(0x7f0000000380)='./file1\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) 11.118012494s ago: executing program 39 (id=2621): prlimit64(0x0, 0x5, &(0x7f0000000180)={0xfffffffffffffffd, 0x5}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005"], 0xe4}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYRES32=r0], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x5, &(0x7f00000003c0)=[{0x9, 0x7f, 0x3, 0x81}, {0x1, 0xc, 0x7, 0x100}, {0x7, 0x2, 0x1, 0x4}, {0x7fff, 0x3, 0x9, 0xfffffffd}, {0xffff, 0x81, 0x1, 0x7}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x3, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000005c0)="a30f", 0x2, 0x10, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @local, 0x4}, 0x1c) shutdown(r5, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) 10.749115564s ago: executing program 40 (id=2622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) chdir(&(0x7f0000000380)='./file1\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) 10.543166365s ago: executing program 4 (id=2626): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x72bf, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) gettid() writev(r2, &(0x7f0000001600)=[{&(0x7f0000001380)="fd3089dc", 0x4}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0), 0x2, 0x1) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x3, 0x3, 0x0, 0x5, 0x1000, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0xfffe, 0x7, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5]}}}) 9.409159937s ago: executing program 4 (id=2628): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r2, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0xff0f, 0x0, 0x0, 0x1001, 0x1fff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='p'], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, &(0x7f0000000040)=0x40) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) socket$tipc(0x1e, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) 8.962447373s ago: executing program 4 (id=2629): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) process_vm_readv(0x0, &(0x7f0000000140), 0x100000000000028b, 0x0, 0x12, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @long={0x3, 0xfffb, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x6274a5ca71beadeb}, 0x4000000) r2 = socket(0x2a, 0x2, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0xfe4, 0x9, 0x11, 0xafb}, 0x8) sendto$inet6(r3, &(0x7f0000000000)="d2b14a", 0x3, 0x4005, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1a04}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x2, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 8.065250243s ago: executing program 41 (id=2629): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) process_vm_readv(0x0, &(0x7f0000000140), 0x100000000000028b, 0x0, 0x12, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @long={0x3, 0xfffb, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x6274a5ca71beadeb}, 0x4000000) r2 = socket(0x2a, 0x2, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0xfe4, 0x9, 0x11, 0xafb}, 0x8) sendto$inet6(r3, &(0x7f0000000000)="d2b14a", 0x3, 0x4005, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1a04}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x2, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 6.405757044s ago: executing program 9 (id=2632): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="114f00000000000000ee100000000904000003fe03010009cd921f0002000000090505030000fcffff09058b1e200000000000000005000000a6c6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect(0x5, 0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a0601090512030008af07c109050c04400006030f07059acbcf32"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0xd, 0xc, &(0x7f0000000080)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b02, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r5, &(0x7f00000000c0)=[{'LINE1', @val={' \'', 'Master Capture Switch'}}], 0x33) read$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x214100) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r11}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x4, 0x1}, 0xb, 0x1, 0x0, 0x0, "ade3822092c67b3ceeb43f2f30c4a5a7694b1abaaf71ef50a7b1b6ce40258a168859d252dc84e31bfbab48eb0c95f6fa68fc83b1fa3d9c9ed650bcbc0a14d63f"}, 0x48}}, 0x4) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000004362002dc2d031005597fd3a25f2a72661fcdf43622cb1b005448a2239fd972a767b18256ed1e10cd64890243f2bde485171eceb9389c017fc684316f18750edda87d6bb", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000559920000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x800, 0x0, 0x0, 0x40f00, 0x36, '\x00', r11, 0x0, r12, 0x8, &(0x7f00000003c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x10, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r3, r8, r13], &(0x7f00000005c0)=[{0x2, 0x1}, {0x2, 0x3, 0xd, 0x1}], 0x10, 0xcd}, 0x94) r14 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(r14, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001) 3.055913959s ago: executing program 9 (id=2633): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x6274a5ca71beadeb}, 0x4000000) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0xfe4, 0x9, 0x11, 0xafb}, 0x8) sendto$inet6(r3, &(0x7f0000000000)="d2b14a", 0x3, 0x4005, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 2.86946421s ago: executing program 9 (id=2634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20) 1.875627853s ago: executing program 9 (id=2635): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x72bf, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) gettid() writev(r2, &(0x7f0000001600)=[{&(0x7f0000001380)="fd3089dc", 0x4}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0), 0x2, 0x1) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x3, 0x3, 0x0, 0x5, 0x1000, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0xfffe, 0x7, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5]}}}) 1.438923477s ago: executing program 9 (id=2636): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x44151}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$media(0x0, 0x66, 0x180502) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x84880, 0x0) 319.826152ms ago: executing program 9 (id=2637): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='g', 0x1, 0x4008891, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x40040) close_range(r2, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) 0s ago: executing program 42 (id=2637): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='g', 0x1, 0x4008891, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x40040) close_range(r2, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) kernel console output (not intermixed with test programs): 00000000000 R09: 0000000000000000 [ 749.059078][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.059091][T11956] R13: 00007f53027b6038 R14: 00007f53027b5fa0 R15: 00007ffd8a2160f8 [ 749.059125][T11956] [ 749.089565][T11962] netlink: 'syz.6.1301': attribute type 10 has an invalid length. [ 750.040690][T11962] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 750.124223][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.978450][T11991] Invalid source name [ 751.982527][T11991] UBIFS error (pid: 11991): cannot open "usrquota", error -22 [ 753.207855][T11999] delete_channel: no stack [ 753.313464][T11999] delete_channel: no stack [ 755.735232][T12015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.532465][T12037] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1321'. [ 759.712261][T12045] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 759.744590][ T24] IPVS: starting estimator thread 0... [ 759.908997][T12053] IPVS: using max 30 ests per chain, 72000 per kthread [ 760.525007][T12066] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1328'. [ 761.873813][T12080] No source specified [ 762.086446][T12088] __vm_enough_memory: pid: 12088, comm: syz.6.1340, bytes: 21199969873920 not enough memory for the allocation [ 762.129214][T12088] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1340'. [ 764.544035][T12108] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1344'. [ 765.562729][T12112] Invalid source name [ 765.585398][T12112] UBIFS error (pid: 12112): cannot open "usrquota", error -22 [ 765.638869][ T30] audit: type=1800 audit(1755679253.138:83): pid=12116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.1347" name="bus" dev="overlay" ino=520 res=0 errno=0 [ 767.124240][ T9242] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 767.748372][ T9242] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 767.761527][ T9242] usb 10-1: can't read configurations, error -22 [ 768.002033][ T9242] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 768.564249][ T9242] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 768.573012][ T9242] usb 10-1: can't read configurations, error -22 [ 768.601334][ T9242] usb usb10-port1: attempt power cycle [ 769.016843][ T9242] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 769.061878][ T9242] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 769.070739][ T9242] usb 10-1: can't read configurations, error -22 [ 769.240466][ T9242] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 769.329588][ T9242] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 769.340337][ T9242] usb 10-1: can't read configurations, error -22 [ 769.364873][ T9242] usb usb10-port1: unable to enumerate USB device [ 769.403248][ T9242] IPVS: starting estimator thread 0... [ 769.615080][T12157] IPVS: using max 49 ests per chain, 117600 per kthread [ 770.455271][T12161] sctp: [Deprecated]: syz.3.1361 (pid 12161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 770.455271][T12161] Use struct sctp_sack_info instead [ 771.592980][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 771.600307][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.892455][T12190] Invalid source name [ 772.896698][T12190] UBIFS error (pid: 12190): cannot open "usrquota", error -22 [ 773.960703][T12205] ALSA: mixer_oss: invalid index 40000 [ 776.711901][T12234] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1384'. [ 778.049262][T12243] 9pnet_fd: Insufficient options for proto=fd [ 778.096853][T12243] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1386'. [ 778.647198][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 778.823703][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 778.860308][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 779.124761][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.241053][ T10] usb 5-1: Product: syz [ 779.278100][ T10] usb 5-1: Manufacturer: syz [ 779.400023][ T10] usb 5-1: SerialNumber: syz [ 779.413163][ T10] usb 5-1: config 0 descriptor?? [ 779.645715][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 779.927623][T12259] ubi: mtd0 is already attached to ubi31 [ 780.862532][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 781.156979][T12245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.178524][T12245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.979644][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057b8a000: rx timeout, send abort [ 782.281564][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1396'. [ 782.665320][T12280] Invalid source name [ 782.669913][T12280] UBIFS error (pid: 12280): cannot open "usrquota", error -22 [ 782.716710][ T9169] usb 5-1: USB disconnect, device number 8 [ 783.715558][ T5932] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 783.906350][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 783.931243][ T5932] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 783.948565][ T5932] usb 5-1: config 0 has no interface number 0 [ 783.955496][ T5932] usb 5-1: config 0 interface 29 has no altsetting 0 [ 783.984130][ T5932] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 784.205122][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.577258][ T5932] usb 5-1: Product: syz [ 784.607590][ T5932] usb 5-1: Manufacturer: syz [ 784.830548][ T5932] usb 5-1: SerialNumber: syz [ 785.232570][ T5932] usb 5-1: config 0 descriptor?? [ 785.538532][ T5932] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 785.842336][ T5932] peak_usb 5-1:0.29 can0: sending command failure: -8 [ 785.850235][ T5932] peak_usb 5-1:0.29 can0: sending command failure: -8 [ 785.857897][ T5932] peak_usb 5-1:0.29 can0: sending command failure: -8 [ 786.664139][ T9242] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 786.667810][ T5932] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -8 [ 786.835504][ T9242] usb 4-1: Using ep0 maxpacket: 32 [ 786.889495][ T9242] usb 4-1: config 0 interface 0 has no altsetting 0 [ 786.929804][ T5932] usb 5-1: USB disconnect, device number 9 [ 786.947634][ T9242] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 786.957880][ T9242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.975866][ T9242] usb 4-1: Product: syz [ 786.989328][ T9242] usb 4-1: Manufacturer: syz [ 786.994788][ T9242] usb 4-1: SerialNumber: syz [ 787.059046][ T9242] usb 4-1: config 0 descriptor?? [ 787.077236][ T9242] gs_usb 4-1:0.0: Required endpoints not found [ 787.286507][ T9242] usb 4-1: USB disconnect, device number 19 [ 789.936454][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1415'. [ 789.988047][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1413'. [ 789.999054][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1413'. [ 790.075982][T12341] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 794.136323][ T9169] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 795.142089][ T9169] usb 10-1: Using ep0 maxpacket: 32 [ 795.163907][ T9169] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 795.196553][ T9169] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 795.212211][ T9169] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.233984][ T9169] usb 10-1: Product: syz [ 795.243378][ T9169] usb 10-1: Manufacturer: syz [ 795.282769][ T9169] usb 10-1: SerialNumber: syz [ 795.332623][ T9169] usb 10-1: config 0 descriptor?? [ 795.375145][ T9169] pvrusb2: Hardware description: Terratec Grabster AV400 [ 795.398856][ T9169] pvrusb2: ********** [ 795.403076][ T9169] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 795.907608][ T9169] pvrusb2: Important functionality might not be entirely working. [ 795.918469][ T9169] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 795.931256][ T9169] pvrusb2: ********** [ 795.948204][ T2344] pvrusb2: Invalid write control endpoint [ 797.530871][ T2344] pvrusb2: Invalid write control endpoint [ 797.560417][ T5932] usb 10-1: USB disconnect, device number 14 [ 797.757748][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 798.122993][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 798.134076][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 798.144837][ T2344] pvrusb2: Device being rendered inoperable [ 798.165709][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 798.190111][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 799.038920][ T2344] pvrusb2: Attached sub-driver cx25840 [ 799.045724][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 799.056583][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 799.414838][T12386] Invalid source name [ 799.419345][T12386] UBIFS error (pid: 12386): cannot open "usrquota", error -22 [ 799.930416][T12391] overlayfs: failed to resolve './file1': -2 [ 801.164632][T12400] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1430'. [ 803.512033][T12420] vim2m vim2m.0: vidioc_s_fmt queue busy [ 804.279537][T12432] Invalid source name [ 804.283958][T12432] UBIFS error (pid: 12432): cannot open "usrquota", error -22 [ 804.759680][T12434] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1442'. [ 805.423806][T12436] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1444'. [ 806.547484][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 807.112649][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 807.158835][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 807.203180][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 807.308738][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 807.324705][T12458] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 807.347264][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.357928][ T24] usb 7-1: Product: syz [ 807.363306][ T24] usb 7-1: Manufacturer: syz [ 807.368536][T12458] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 807.378458][ T24] usb 7-1: SerialNumber: syz [ 807.412986][ T24] usb 7-1: config 0 descriptor?? [ 807.450026][ T24] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 807.504741][ T24] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 808.151273][ T24] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 808.151947][ T24] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 809.197929][ T24] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 809.248205][ T24] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 809.298800][ T24] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 809.338777][ T24] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 809.352419][ T24] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 809.363939][ T24] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 809.398618][ T24] usb 7-1: USB disconnect, device number 18 [ 809.522586][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1451'. [ 809.571955][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1451'. [ 809.625262][T12475] Bluetooth: MGMT ver 1.23 [ 809.629809][T12475] Bluetooth: hci0: invalid len left 7, exp >= 103 [ 809.994459][T12483] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1458'. [ 810.826851][T12486] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 810.834060][T12486] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 811.567541][T12501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1459'. [ 813.099684][T12507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 816.915422][ T5932] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 817.150162][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 817.162632][ T5932] usb 5-1: config 0 interface 0 has no altsetting 0 [ 817.184930][ T5932] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 817.369593][T12556] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 818.067148][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.088436][ T5932] usb 5-1: Product: syz [ 818.093415][ T5932] usb 5-1: Manufacturer: syz [ 818.099387][ T5932] usb 5-1: SerialNumber: syz [ 818.260499][ T5932] usb 5-1: config 0 descriptor?? [ 818.586672][T12547] QAT: failed to copy from user cfg_data. [ 818.619106][T12561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.655203][T12561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.707853][T12547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.818192][T12565] No source specified [ 819.055357][T12547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.459982][ T5932] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 819.510136][ T5932] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 819.665473][ T5932] usb 5-1: USB disconnect, device number 10 [ 820.667906][T12583] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 823.410671][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1485'. [ 823.435278][ T9169] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 823.914400][ T9169] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 823.937765][ T9169] usb 4-1: config 0 has no interface number 0 [ 823.944595][ T9169] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 823.956699][ T30] audit: type=1804 audit(1755679307.687:84): pid=12599 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.1484" name="/newroot/119/file0" dev="tmpfs" ino=652 res=1 errno=0 [ 824.079775][T12600] vim2m vim2m.0: vidioc_s_fmt queue busy [ 824.669612][ T9169] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 824.683529][ T9169] usb 4-1: config 0 interface 255 has no altsetting 0 [ 824.791697][ T9169] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 824.805602][ T9169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.838851][ T9169] usb 4-1: config 0 descriptor?? [ 824.870507][ T9169] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 824.943270][T12605] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1487'. [ 824.952706][T12605] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1487'. [ 825.086843][ T9169] usb 4-1: USB disconnect, device number 20 [ 825.219714][T12608] netlink: 84 bytes leftover after parsing attributes in process `syz.9.1489'. [ 826.420679][T12628] macvtap2: entered allmulticast mode [ 826.426251][T12628] veth0_macvtap: entered allmulticast mode [ 831.327411][T12648] netlink: del zone limit has 4 unknown bytes [ 831.855060][T12663] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1502'. [ 832.127867][T12665] vim2m vim2m.0: vidioc_s_fmt queue busy [ 837.651866][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 837.661524][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 842.075590][T12717] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 843.926829][T12739] netlink: 'syz.6.1524': attribute type 32 has an invalid length. [ 843.936799][T12739] netlink: 'syz.6.1524': attribute type 10 has an invalid length. [ 843.946533][T12739] veth1_vlan: entered allmulticast mode [ 844.090636][T12740] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 844.943363][T12739] team0: Device veth1_vlan failed to register rx_handler [ 847.907410][T12778] Invalid source name [ 847.911686][T12778] UBIFS error (pid: 12778): cannot open "usrquota", error -22 [ 848.259642][T12773] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1532'. [ 851.516973][T12805] netlink: 'syz.7.1542': attribute type 10 has an invalid length. [ 851.591979][T12805] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 851.733858][T12809] ubi: mtd0 is already attached to ubi31 [ 852.203437][T12807] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 852.271616][ T9169] lo speed is unknown, defaulting to 1000 [ 852.740478][T12814] netlink: 'syz.3.1544': attribute type 1 has an invalid length. [ 852.756627][T12814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 853.602133][T12824] Invalid source name [ 853.606524][T12824] UBIFS error (pid: 12824): cannot open "usrquota", error -22 [ 858.622784][T12845] usb usb8: usbfs: process 12845 (syz.7.1553) did not claim interface 0 before use [ 859.183460][T12856] fuse: Unknown parameter '' [ 859.248921][T12854] netlink: 'syz.9.1556': attribute type 10 has an invalid length. [ 860.479537][T12861] FAULT_INJECTION: forcing a failure. [ 860.479537][T12861] name failslab, interval 1, probability 0, space 0, times 0 [ 860.495101][T12861] CPU: 0 UID: 0 PID: 12861 Comm: syz.7.1559 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 860.495130][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 860.495143][T12861] Call Trace: [ 860.495152][T12861] [ 860.495162][T12861] dump_stack_lvl+0x189/0x250 [ 860.495202][T12861] ? __pfx____ratelimit+0x10/0x10 [ 860.495227][T12861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 860.495252][T12861] ? __pfx__printk+0x10/0x10 [ 860.495284][T12861] ? __pfx___might_resched+0x10/0x10 [ 860.495306][T12861] ? fs_reclaim_acquire+0x7d/0x100 [ 860.495339][T12861] should_fail_ex+0x414/0x560 [ 860.495365][T12861] should_failslab+0xa8/0x100 [ 860.495389][T12861] __kmalloc_noprof+0xcb/0x4f0 [ 860.495409][T12861] ? alloc_pipe_info+0x1fd/0x4d0 [ 860.495433][T12861] alloc_pipe_info+0x1fd/0x4d0 [ 860.495457][T12861] splice_direct_to_actor+0xa5d/0xcc0 [ 860.495482][T12861] ? __lock_acquire+0xab9/0xd20 [ 860.495517][T12861] ? __lock_acquire+0xab9/0xd20 [ 860.495535][T12861] ? __pfx_direct_splice_actor+0x10/0x10 [ 860.495557][T12861] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 860.495589][T12861] do_splice_direct+0x181/0x270 [ 860.495614][T12861] ? __pfx_do_splice_direct+0x10/0x10 [ 860.495637][T12861] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 860.495668][T12861] ? rw_verify_area+0x258/0x650 [ 860.495703][T12861] do_sendfile+0x4da/0x7e0 [ 860.495738][T12861] ? __pfx_do_sendfile+0x10/0x10 [ 860.495777][T12861] __se_sys_sendfile64+0xd9/0x190 [ 860.495804][T12861] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 860.495826][T12861] ? rcu_is_watching+0x15/0xb0 [ 860.495856][T12861] ? do_syscall_64+0xbe/0x3b0 [ 860.495882][T12861] do_syscall_64+0xfa/0x3b0 [ 860.495905][T12861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.495924][T12861] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 860.495943][T12861] ? clear_bhb_loop+0x60/0xb0 [ 860.495969][T12861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.495989][T12861] RIP: 0033:0x7f530258ebe9 [ 860.496010][T12861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.496028][T12861] RSP: 002b:00007f53033d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 860.496050][T12861] RAX: ffffffffffffffda RBX: 00007f53027b5fa0 RCX: 00007f530258ebe9 [ 860.496064][T12861] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 860.496076][T12861] RBP: 00007f53033d1090 R08: 0000000000000000 R09: 0000000000000000 [ 860.496088][T12861] R10: 00000000003fffff R11: 0000000000000246 R12: 0000000000000001 [ 860.496100][T12861] R13: 00007f53027b6038 R14: 00007f53027b5fa0 R15: 00007ffd8a2160f8 [ 860.496130][T12861] [ 863.581965][T12868] ALSA: mixer_oss: invalid OSS volume '' [ 863.588673][T12868] ALSA: mixer_oss: invalid OSS volume '' [ 865.470713][T12895] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 865.477776][T12895] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 865.543220][T12895] vhci_hcd vhci_hcd.0: Device attached [ 865.590604][T12900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 865.660147][T12900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 865.704009][T12895] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 865.729660][T12895] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 865.743790][ T9169] vhci_hcd: vhci_device speed not set [ 865.768717][T12895] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 865.808325][ T9169] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 866.819483][T12895] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 866.893558][T12895] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 866.920240][T12900] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(18) [ 866.926938][T12900] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 867.257841][T12900] vhci_hcd vhci_hcd.0: Device attached [ 867.307161][T12905] vhci_hcd: connection closed [ 867.325417][ T5970] vhci_hcd: stop threads [ 867.438535][ T5970] vhci_hcd: release socket [ 867.594201][ T5970] vhci_hcd: disconnect device [ 867.595950][T12896] vhci_hcd: connection reset by peer [ 867.617084][ T6215] vhci_hcd: stop threads [ 867.621521][ T6215] vhci_hcd: release socket [ 867.632536][ T6215] vhci_hcd: disconnect device [ 869.197749][T12929] /dev/loop6: Can't lookup blockdev [ 872.244490][ T9169] vhci_hcd: vhci_device speed not set [ 873.514424][T12955] tipc: Enabling of bearer rejected, failed to enable media [ 873.967780][T12966] FAULT_INJECTION: forcing a failure. [ 873.967780][T12966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.989422][T12966] CPU: 0 UID: 0 PID: 12966 Comm: syz.6.1585 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 873.989454][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 873.989467][T12966] Call Trace: [ 873.989476][T12966] [ 873.989486][T12966] dump_stack_lvl+0x189/0x250 [ 873.989517][T12966] ? __pfx____ratelimit+0x10/0x10 [ 873.989541][T12966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 873.989564][T12966] ? __pfx__printk+0x10/0x10 [ 873.989590][T12966] ? __might_fault+0xb0/0x130 [ 873.989626][T12966] should_fail_ex+0x414/0x560 [ 873.989656][T12966] _copy_from_user+0x2d/0xb0 [ 873.989686][T12966] __sys_bpf+0x1ed/0x860 [ 873.989719][T12966] ? __pfx___sys_bpf+0x10/0x10 [ 873.989764][T12966] ? ksys_write+0x22a/0x250 [ 873.989787][T12966] ? __pfx_ksys_write+0x10/0x10 [ 873.989803][T12966] ? rcu_is_watching+0x15/0xb0 [ 873.989835][T12966] __x64_sys_bpf+0x7c/0x90 [ 873.989862][T12966] do_syscall_64+0xfa/0x3b0 [ 873.989884][T12966] ? lockdep_hardirqs_on+0x9c/0x150 [ 873.989906][T12966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.989936][T12966] ? clear_bhb_loop+0x60/0xb0 [ 873.989962][T12966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.989981][T12966] RIP: 0033:0x7fbe1618ebe9 [ 873.990001][T12966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.990019][T12966] RSP: 002b:00007fbe16f1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 873.990043][T12966] RAX: ffffffffffffffda RBX: 00007fbe163b5fa0 RCX: 00007fbe1618ebe9 [ 873.990057][T12966] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 873.990071][T12966] RBP: 00007fbe16f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 873.990083][T12966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.990095][T12966] R13: 00007fbe163b6038 R14: 00007fbe163b5fa0 R15: 00007fffb476a4a8 [ 873.990131][T12966] [ 875.498619][T12981] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1587'. [ 882.970041][T13021] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 883.116402][T13028] xt_TCPMSS: Only works on TCP SYN packets [ 885.006300][ T5931] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 887.404110][T13072] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1612'. [ 890.547766][T13113] Cannot find set identified by id 0 to match [ 895.737387][T13151] Invalid source name [ 895.737465][T13151] UBIFS error (pid: 13151): cannot open "usrquota", error -22 [ 896.913429][T13145] tty tty3: ldisc open failed (-12), clearing slot 2 [ 897.043242][T13159] netlink: 'syz.4.1635': attribute type 1 has an invalid length. [ 897.052385][T13159] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1635'. [ 897.900358][ T30] audit: type=1326 audit(1755679376.878:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13166 comm="syz.4.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059e18ebe9 code=0x7ffc0000 [ 897.938786][ T30] audit: type=1326 audit(1755679376.896:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13166 comm="syz.4.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f059e18ebe9 code=0x7ffc0000 [ 898.021899][ T30] audit: type=1326 audit(1755679376.896:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13166 comm="syz.4.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059e18ebe9 code=0x7ffc0000 [ 898.077911][ T30] audit: type=1326 audit(1755679376.906:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13166 comm="syz.4.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f059e18ebe9 code=0x7ffc0000 [ 898.230989][ T30] audit: type=1326 audit(1755679376.906:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13166 comm="syz.4.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059e18ebe9 code=0x7ffc0000 [ 898.504610][ T30] audit: type=1326 audit(1755679376.906:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13166 comm="syz.4.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f059e18ebe9 code=0x7ffc0000 [ 898.528052][ T30] audit: type=1326 audit(1755679376.906:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13166 comm="syz.4.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059e18ebe9 code=0x7ffc0000 [ 898.556037][ T30] audit: type=1326 audit(1755679376.906:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13166 comm="syz.4.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f059e18ebe9 code=0x7ffc0000 [ 899.342935][ T30] audit: type=1326 audit(1755679376.906:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13166 comm="syz.4.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059e18ebe9 code=0x7ffc0000 [ 899.671838][ T30] audit: type=1326 audit(1755679376.906:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13166 comm="syz.4.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f059e18ebe9 code=0x7ffc0000 [ 900.861007][T13199] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 902.968475][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 902.975623][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 905.462662][T13236] __vm_enough_memory: pid: 13236, comm: syz.7.1654, bytes: 21200314798080 not enough memory for the allocation [ 905.494398][T13236] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1654'. [ 906.975286][T13249] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.1656'. [ 912.312097][T13300] __vm_enough_memory: pid: 13300, comm: syz.3.1667, bytes: 21199655858176 not enough memory for the allocation [ 912.335708][T13300] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1667'. [ 912.638001][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 912.638023][ T30] audit: type=1400 audit(1755679390.639:110): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=13295 comm="syz.6.1670" path="/proc/1086/task/1087/fdinfo/3" dev="proc" ino=38598 [ 914.027218][T13323] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1678'. [ 914.057517][T13324] comedi: valid board names for 8255 driver are: [ 914.064602][T13324] 8255 [ 914.067497][T13324] comedi: valid board names for vmk80xx driver are: [ 914.074594][T13324] vmk80xx [ 914.849244][T13324] comedi: valid board names for usbduxsigma driver are: [ 914.856425][T13324] usbduxsigma [ 914.859846][T13324] comedi: valid board names for usbduxfast driver are: [ 914.867040][T13324] usbduxfast [ 914.870366][T13324] comedi: valid board names for usbdux driver are: [ 914.872278][ T30] audit: type=1326 audit(1755679392.192:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13319 comm="syz.3.1678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb69f8ebe9 code=0x0 [ 914.877072][T13324] usbdux [ 914.902702][T13324] comedi: valid board names for ni6501 driver are: [ 914.909620][T13324] ni6501 [ 914.912691][T13324] comedi: valid board names for dt9812 driver are: [ 914.925127][T13324] dt9812 [ 914.928195][T13324] comedi: valid board names for ni_labpc_cs driver are: [ 914.935375][T13324] ni_labpc_cs [ 914.938838][T13324] comedi: valid board names for ni_daq_700 driver are: [ 914.945972][T13324] ni_daq_700 [ 914.949377][T13324] comedi: valid board names for labpc_pci driver are: [ 914.956176][T13324] labpc_pci [ 914.959453][T13324] comedi: valid board names for adl_pci9118 driver are: [ 914.966519][T13324] pci9118dg [ 914.969800][T13324] pci9118hg [ 914.973032][T13324] pci9118hr [ 914.976376][T13324] comedi: valid board names for 8255_pci driver are: [ 915.021203][T13324] 8255_pci [ 915.040043][T13324] comedi: valid board names for s526 driver are: [ 915.062555][T13324] s526 [ 915.181965][T13324] comedi: valid board names for multiq3 driver are: [ 915.210346][T13324] multiq3 [ 915.336285][T13324] comedi: valid board names for pcmuio driver are: [ 915.509437][T13324] pcmuio48 [ 915.512651][T13324] pcmuio96 [ 915.531101][T13324] comedi: valid board names for pcmmio driver are: [ 915.540280][T13333] Invalid source name [ 915.544354][T13333] UBIFS error (pid: 13333): cannot open "usrquota", error -22 [ 915.564436][T13324] pcmmio [ 915.632595][T13324] comedi: valid board names for pcmda12 driver are: [ 915.813516][T13324] pcmda12 [ 915.816615][T13324] comedi: valid board names for pcmad driver are: [ 915.823140][T13324] pcmad12 [ 915.853680][T13324] pcmad16 [ 915.885847][T13324] comedi: valid board names for ni_labpc driver are: [ 916.058578][T13324] lab-pc-1200 [ 916.062955][T13324] lab-pc-1200ai [ 916.070191][T13324] lab-pc+ [ 916.080026][T13324] comedi: valid board names for atmio16 driver are: [ 916.108242][T13324] atmio16 [ 916.572444][T13324] atmio16d [ 916.575856][T13324] comedi: valid board names for ni_at_ao driver are: [ 916.595217][T13324] at-ao-6 [ 916.598326][T13324] at-ao-10 [ 916.601466][T13324] comedi: valid board names for ni_at_a2150 driver are: [ 916.649951][T13324] ni_at_a2150 [ 916.677502][T13324] comedi: valid board names for adq12b driver are: [ 916.701350][T13324] adq12b [ 916.718220][T13324] comedi: valid board names for mpc624 driver are: [ 916.745833][T13324] mpc624 [ 916.748884][T13324] comedi: valid board names for c6xdigio driver are: [ 916.785001][T13324] c6xdigio [ 916.851717][T13324] comedi: valid board names for aio_iiro_16 driver are: [ 916.858963][T13324] aio_iiro_16 [ 916.907814][T13324] comedi: valid board names for aio_aio12_8 driver are: [ 916.999501][T13324] aio_aio12_8 [ 917.003060][T13324] aio_ai12_8 [ 917.006379][T13324] aio_ao12_4 [ 917.042193][T13324] comedi: valid board names for fl512 driver are: [ 917.069826][T13324] fl512 [ 917.199679][T13324] comedi: valid board names for dmm32at driver are: [ 917.213268][T13324] dmm32at [ 917.216411][T13324] comedi: valid board names for dt282x driver are: [ 918.250944][ T30] audit: type=1326 audit(1755679395.906:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13354 comm="syz.7.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530258ebe9 code=0x7ffc0000 [ 918.282721][T13361] FAULT_INJECTION: forcing a failure. [ 918.282721][T13361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.464179][T13324] dt2821 [ 918.519785][T13324] dt2821-f [ 918.577797][T13324] dt2821-g [ 918.639590][T13324] dt2823 [ 918.646229][T13361] CPU: 0 UID: 0 PID: 13361 Comm: syz.7.1686 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 918.646261][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 918.646273][T13361] Call Trace: [ 918.646281][T13361] [ 918.646291][T13361] dump_stack_lvl+0x189/0x250 [ 918.646319][T13361] ? __pfx____ratelimit+0x10/0x10 [ 918.646342][T13361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 918.646364][T13361] ? __pfx__printk+0x10/0x10 [ 918.646391][T13361] ? __might_fault+0xb0/0x130 [ 918.646426][T13361] should_fail_ex+0x414/0x560 [ 918.646454][T13361] _copy_from_user+0x2d/0xb0 [ 918.646484][T13361] kstrtouint_from_user+0xc4/0x170 [ 918.646512][T13361] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 918.646557][T13361] proc_fail_nth_write+0x88/0x240 [ 918.646582][T13361] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 918.646614][T13361] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 918.646640][T13361] vfs_write+0x27e/0xa90 [ 918.646672][T13361] ? __pfx_vfs_write+0x10/0x10 [ 918.646703][T13361] ? __fget_files+0x2a/0x420 [ 918.646733][T13361] ? __fget_files+0x3a0/0x420 [ 918.646753][T13361] ? __fget_files+0x2a/0x420 [ 918.646787][T13361] ksys_write+0x145/0x250 [ 918.646809][T13361] ? __pfx_ksys_write+0x10/0x10 [ 918.646825][T13361] ? rcu_is_watching+0x15/0xb0 [ 918.646855][T13361] ? do_syscall_64+0xbe/0x3b0 [ 918.646882][T13361] do_syscall_64+0xfa/0x3b0 [ 918.646903][T13361] ? lockdep_hardirqs_on+0x9c/0x150 [ 918.646924][T13361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.646943][T13361] ? clear_bhb_loop+0x60/0xb0 [ 918.646969][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.646988][T13361] RIP: 0033:0x7f530258d69f [ 918.647008][T13361] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 918.647024][T13361] RSP: 002b:00007f53033b0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 918.647046][T13361] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f530258d69f [ 918.647060][T13361] RDX: 0000000000000001 RSI: 00007f53033b00a0 RDI: 0000000000000005 [ 918.647070][T13361] RBP: 00007f53033b0090 R08: 0000000000000000 R09: 00007f53033b0090 [ 918.647081][T13361] R10: 0000000000000002 R11: 0000000000000293 R12: 0000000000000001 [ 918.647091][T13361] R13: 00007f53027b6128 R14: 00007f53027b6090 R15: 00007ffd8a2160f8 [ 918.647126][T13361] [ 918.648801][ T30] audit: type=1326 audit(1755679395.906:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13354 comm="syz.7.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530258ebe9 code=0x7ffc0000 [ 919.324243][T13324] dt2824-pgh [ 919.327618][T13324] dt2824-pgl [ 919.330996][T13324] dt2825 [ 919.353166][T13324] dt2827 [ 919.361683][T13324] dt2828 [ 919.393764][T13324] dt2829 [ 919.412788][T13324] dt21-ez [ 919.469722][T13324] dt23-ez [ 919.481554][T13324] dt24-ez [ 919.493016][T13324] dt24-ez-pgl [ 919.496518][T13324] comedi: valid board names for dt2817 driver are: [ 919.718483][T13324] dt2817 [ 919.721515][T13324] comedi: valid board names for dt2815 driver are: [ 919.737060][T13324] dt2815 [ 919.751019][T13324] comedi: valid board names for dt2814 driver are: [ 920.631194][T13324] dt2814 [ 920.645389][T13324] comedi: valid board names for dt2811 driver are: [ 920.675807][T13324] dt2811-pgh [ 920.693805][T13324] dt2811-pgl [ 920.697285][T13324] comedi: valid board names for dt2801 driver are: [ 920.804679][T13324] dt2801 [ 920.808719][T13376] netlink: 'syz.9.1691': attribute type 29 has an invalid length. [ 920.826158][T13324] comedi: valid board names for das6402 driver are: [ 920.863871][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1691'. [ 920.910130][T13324] das6402-12 [ 920.921269][T13324] das6402-16 [ 921.172150][T13324] comedi: valid board names for das1800 driver are: [ 922.098053][T13324] das-1701st [ 922.101490][T13324] das-1701st-da [ 922.105553][T13324] das-1702st [ 922.162866][T13324] das-1702st-da [ 922.166520][T13324] das-1702hr [ 922.169841][T13324] das-1702hr-da [ 922.251905][T13324] das-1701ao [ 922.255375][T13324] das-1702ao [ 922.292231][T13324] das-1801st [ 922.295607][T13324] das-1801st-da [ 922.299240][T13324] das-1802st [ 922.445663][T13324] das-1802st-da [ 922.570603][T13324] das-1802hr [ 923.199124][T13324] das-1802hr-da [ 923.203031][T13324] das-1801hc [ 923.261467][T13324] das-1802hc [ 923.265446][T13324] das-1801ao [ 923.270396][T13324] das-1802ao [ 923.274971][T13324] comedi: valid board names for das800 driver are: [ 923.281683][T13324] das-800 [ 923.285429][T13324] cio-das800 [ 923.288928][T13324] das-801 [ 923.292328][T13324] cio-das801 [ 923.296315][T13324] das-802 [ 923.299570][T13324] cio-das802 [ 923.304201][T13324] cio-das802/16 [ 923.311407][T13324] comedi: valid board names for isa-das08 driver are: [ 923.487810][T13324] isa-das08 [ 923.491675][T13324] das08-pgm [ 923.500190][T13324] das08-pgh [ 923.523202][T13324] das08-pgl [ 924.317712][T13324] das08-aoh [ 924.321066][T13324] das08-aol [ 924.352794][T13324] das08-aom [ 924.365492][T13324] das08/jr-ao [ 924.491162][T13324] das08jr-16-ao [ 924.508840][T13324] pc104-das08 [ 924.523507][T13324] das08jr/16 [ 924.548648][T13324] comedi: valid board names for das16m1 driver are: [ 924.555327][T13324] das16m1 [ 924.567188][T13324] comedi: valid board names for dac02 driver are: [ 924.573669][T13324] dac02 [ 924.620899][T13324] comedi: valid board names for rti802 driver are: [ 924.639150][T13324] rti802 [ 924.642476][T13324] comedi: valid board names for rti800 driver are: [ 924.649391][T13324] rti800 [ 924.674521][T13324] rti815 [ 925.013126][T13324] comedi: valid board names for pcm3724 driver are: [ 925.114675][T13324] pcm3724 [ 925.203550][T13324] comedi: valid board names for pcl818 driver are: [ 925.336901][T13324] pcl818l [ 925.340024][T13324] pcl818h [ 925.343089][T13324] pcl818hd [ 925.346232][T13324] pcl818hg [ 925.384034][T13324] pcl818 [ 925.387187][T13324] pcl718 [ 925.410242][T13324] pcm3718 [ 925.434397][T13324] comedi: valid board names for pcl816 driver are: [ 925.490826][T13324] pcl816 [ 925.526551][T13324] pcl814b [ 925.572605][T13324] comedi: valid board names for pcl812 driver are: [ 926.387042][T13324] pcl812 [ 926.390085][T13324] pcl812pg [ 926.393231][T13324] acl8112pg [ 926.405834][T13324] acl8112dg [ 926.409842][T13324] acl8112hg [ 926.413100][T13324] a821pgl [ 926.416163][T13324] a821pglnda [ 926.435488][T13324] a821pgh [ 926.448858][T13324] a822pgl [ 926.457880][T13324] a822pgh [ 926.584740][T13324] a823pgl [ 926.594424][T13324] a823pgh [ 926.778005][T13324] pcl813 [ 926.789632][T13417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.952082][T13324] pcl813b [ 926.982482][T13324] acl8113 [ 927.483474][T13417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.487387][T13324] iso813 [ 927.519992][T13324] acl8216 [ 927.523527][T13324] a826pg [ 927.526529][T13324] comedi: valid board names for pcl730 driver are: [ 927.536909][T13324] pcl730 [ 927.540362][T13324] iso730 [ 927.543661][T13324] acl7130 [ 927.546725][T13324] pcm3730 [ 927.551357][T13324] pcl725 [ 927.554356][T13324] p8r8dio [ 927.557437][T13324] acl7225b [ 927.565703][T13324] p16r16dio [ 927.575329][T13324] pcl733 [ 927.587953][T13324] pcl734 [ 927.599996][T13324] opmm-1616-xt [ 927.613794][ T5931] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 927.623710][T13324] pearl-mm-p [ 927.646542][T13324] ir104-pbf [ 927.666217][T13324] comedi: valid board names for pcl726 driver are: [ 927.784756][T13425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 928.130994][T13324] pcl726 [ 928.285721][T13324] pcl727 [ 928.289787][T13324] pcl728 [ 928.295001][ T5931] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 928.307116][T13324] acl6126 [ 928.322919][T13324] acl6128 [ 928.340331][T13324] comedi: valid board names for pcl724 driver are: [ 928.351574][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.378108][T13324] pcl724 [ 928.390308][T13324] pcl722 [ 928.403209][ T5931] usb 5-1: Product: syz [ 928.411570][T13324] pcl731 [ 928.424007][T13324] acl7122 [ 928.430315][ T5931] usb 5-1: Manufacturer: syz [ 928.441631][T13324] acl7124 [ 928.450886][ T5931] usb 5-1: SerialNumber: syz [ 928.460813][T13324] pet48dio [ 928.467902][T13324] pcmio48 [ 928.477565][ T5931] usb 5-1: config 0 descriptor?? [ 928.483137][T13324] onyx-mm-dio [ 928.489822][T13324] comedi: valid board names for pcl711 driver are: [ 928.517224][T13324] pcl711 [ 928.526654][T13324] pcl711b [ 928.535879][T13324] acl8112hg [ 928.541081][T13324] acl8112dg [ 928.548330][T13324] comedi: valid board names for amplc_pc263 driver are: [ 928.621363][T13430] FAULT_INJECTION: forcing a failure. [ 928.621363][T13430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.635231][T13430] CPU: 0 UID: 0 PID: 13430 Comm: syz.3.1705 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 928.635259][T13430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 928.635273][T13430] Call Trace: [ 928.635281][T13430] [ 928.635289][T13430] dump_stack_lvl+0x189/0x250 [ 928.635319][T13430] ? __pfx____ratelimit+0x10/0x10 [ 928.635342][T13430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 928.635363][T13430] ? __pfx__printk+0x10/0x10 [ 928.635402][T13430] should_fail_ex+0x414/0x560 [ 928.635430][T13430] _copy_to_user+0x31/0xb0 [ 928.635459][T13430] simple_read_from_buffer+0xe1/0x170 [ 928.635485][T13430] proc_fail_nth_read+0x1df/0x250 [ 928.635514][T13430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 928.635541][T13430] ? rw_verify_area+0x258/0x650 [ 928.635570][T13430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 928.635596][T13430] vfs_read+0x200/0x980 [ 928.635633][T13430] ? __pfx___mutex_lock+0x10/0x10 [ 928.635669][T13430] ? __pfx_vfs_read+0x10/0x10 [ 928.635699][T13430] ? __fget_files+0x2a/0x420 [ 928.635726][T13430] ? __fget_files+0x3a0/0x420 [ 928.635746][T13430] ? __fget_files+0x2a/0x420 [ 928.635776][T13430] ksys_read+0x145/0x250 [ 928.635797][T13430] ? __pfx_ksys_read+0x10/0x10 [ 928.635813][T13430] ? rcu_is_watching+0x15/0xb0 [ 928.635841][T13430] ? do_syscall_64+0xbe/0x3b0 [ 928.635867][T13430] do_syscall_64+0xfa/0x3b0 [ 928.636000][T13430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.636026][T13430] ? asm_sysvec_call_function_single+0x1a/0x20 [ 928.636046][T13430] ? clear_bhb_loop+0x60/0xb0 [ 928.636070][T13430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.636090][T13430] RIP: 0033:0x7fcb69f8d5fc [ 928.636110][T13430] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 928.636128][T13430] RSP: 002b:00007fcb681f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 928.636151][T13430] RAX: ffffffffffffffda RBX: 00007fcb6a1b6090 RCX: 00007fcb69f8d5fc [ 928.636171][T13430] RDX: 000000000000000f RSI: 00007fcb681f60a0 RDI: 000000000000000b [ 928.636184][T13430] RBP: 00007fcb681f6090 R08: 0000000000000000 R09: 0000000000000000 [ 928.636196][T13430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.636208][T13430] R13: 00007fcb6a1b6128 R14: 00007fcb6a1b6090 R15: 00007ffc75a70f28 [ 928.636245][T13430] [ 928.933781][T13324] pc263 [ 928.945763][T13324] comedi: valid board names for amplc_pc236 driver are: [ 928.953194][T13324] pc36at [ 928.956463][T13324] comedi: valid board names for amplc_dio200 driver are: [ 928.963913][T13324] pc212e [ 929.089624][ T5931] usb-storage 5-1:0.0: USB Mass Storage device detected [ 929.102118][T13324] pc214e [ 929.105249][T13324] pc215e [ 929.144687][T13324] pc218e [ 929.150850][T13324] pc272e [ 929.175082][T13324] comedi: valid board names for comedi_parport driver are: [ 929.218378][T13324] comedi_parport [ 929.231506][T13433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 929.270648][T13324] comedi: valid board names for comedi_test driver are: [ 929.291608][ T5931] usb 5-1: USB disconnect, device number 11 [ 929.356156][T13324] comedi_test [ 929.378577][T13439] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 929.398590][T13324] comedi: valid board names for comedi_bond driver are: [ 929.420360][T13324] comedi_bond [ 929.805597][ T5931] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 931.100783][ T30] audit: type=1804 audit(1755679406.917:114): pid=13448 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1709" name="/newroot/363/file0" dev="tmpfs" ino=1924 res=1 errno=0 [ 931.325767][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 931.333309][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.377079][T13451] FAULT_INJECTION: forcing a failure. [ 931.377079][T13451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.390772][ T5931] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 931.412558][ T5931] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 931.419190][T13451] CPU: 0 UID: 0 PID: 13451 Comm: syz.3.1710 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 931.419218][T13451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 931.419229][T13451] Call Trace: [ 931.419237][T13451] [ 931.419245][T13451] dump_stack_lvl+0x189/0x250 [ 931.419272][T13451] ? __pfx____ratelimit+0x10/0x10 [ 931.419294][T13451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 931.419315][T13451] ? __pfx__printk+0x10/0x10 [ 931.419339][T13451] ? __might_fault+0xb0/0x130 [ 931.419371][T13451] should_fail_ex+0x414/0x560 [ 931.419396][T13451] _copy_from_user+0x2d/0xb0 [ 931.419428][T13451] kstrtouint_from_user+0xc4/0x170 [ 931.419453][T13451] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 931.419493][T13451] proc_fail_nth_write+0x88/0x240 [ 931.419516][T13451] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 931.419544][T13451] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 931.419567][T13451] vfs_write+0x27e/0xa90 [ 931.419596][T13451] ? __pfx_vfs_write+0x10/0x10 [ 931.419616][T13451] ? __fget_files+0x2a/0x420 [ 931.419642][T13451] ? __fget_files+0x3a0/0x420 [ 931.419660][T13451] ? __fget_files+0x2a/0x420 [ 931.419690][T13451] ksys_write+0x145/0x250 [ 931.419705][T13451] ? __fget_files+0x3a0/0x420 [ 931.419726][T13451] ? __pfx_ksys_write+0x10/0x10 [ 931.419750][T13451] ? do_syscall_64+0xbe/0x3b0 [ 931.419774][T13451] do_syscall_64+0xfa/0x3b0 [ 931.419792][T13451] ? lockdep_hardirqs_on+0x9c/0x150 [ 931.419811][T13451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.419829][T13451] ? clear_bhb_loop+0x60/0xb0 [ 931.419852][T13451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.419869][T13451] RIP: 0033:0x7fcb69f8d69f [ 931.419897][T13451] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 931.419913][T13451] RSP: 002b:00007fcb6ad18030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 931.419934][T13451] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb69f8d69f [ 931.419947][T13451] RDX: 0000000000000001 RSI: 00007fcb6ad180a0 RDI: 0000000000000003 [ 931.419958][T13451] RBP: 00007fcb6ad18090 R08: 0000000000000000 R09: 0000000000000000 [ 931.419970][T13451] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 931.419980][T13451] R13: 00007fcb6a1b6038 R14: 00007fcb6a1b5fa0 R15: 00007ffc75a70f28 [ 931.420013][T13451] [ 931.688202][T13454] Invalid ELF header type: 2 != 1 [ 931.694777][T13454] netlink: 'syz.3.1712': attribute type 1 has an invalid length. [ 931.765285][ T5931] usb 5-1: Manufacturer: syz [ 931.823767][ T5931] usb 5-1: config 0 descriptor?? [ 932.495203][T13462] trusted_key: encrypted_key: insufficient parameters specified [ 932.598658][ T5931] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 932.627144][ T5931] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 932.645383][ T5931] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 932.677935][ T5931] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 932.710793][ T5931] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 932.745867][ T5931] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [syz] on usb-dummy_hcd.4-1/input0 [ 932.799817][T13440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.828739][T13440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.909019][T13440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.043960][ T9242] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 933.077030][T13440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.085627][T13440] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1707'. [ 934.330691][T13440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.402592][ T9242] usb 7-1: config 16 has an invalid interface number: 46 but max is 0 [ 934.454752][ T9242] usb 7-1: config 16 contains an unexpected descriptor of type 0x2, skipping [ 934.464007][ T9242] usb 7-1: config 16 contains an unexpected descriptor of type 0x1, skipping [ 934.475586][T13440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.606973][ T9242] usb 7-1: config 16 contains an unexpected descriptor of type 0x1, skipping [ 934.702781][ T9242] usb 7-1: config 16 has no interface number 0 [ 934.839949][ T9242] usb 7-1: config 16 interface 46 altsetting 19 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 935.050530][ T9242] usb 7-1: config 16 interface 46 altsetting 19 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 935.266144][ T9242] usb 7-1: config 16 interface 46 altsetting 19 has an invalid descriptor for endpoint zero, skipping [ 935.278680][ T9242] usb 7-1: config 16 interface 46 altsetting 19 endpoint 0x6 has invalid wMaxPacketSize 0 [ 935.289216][ T9242] usb 7-1: config 16 interface 46 altsetting 19 has an invalid descriptor for endpoint zero, skipping [ 935.300870][ T9242] usb 7-1: config 16 interface 46 has no altsetting 0 [ 935.376502][ T9242] usb 7-1: New USB device found, idVendor=10c4, idProduct=815f, bcdDevice=a4.46 [ 935.516816][T13481] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 936.185533][ T9242] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.281542][ T9242] usb 7-1: Product: 薡䤥갻ǯ뎑饭᪳뗋섢跗浺鹕苐槷׆嶱敉➁ủ솅阭ḟꖍ枅⢼ꅳ㜧힟ﮄ㍣ᮠ䢙雚ⳏ醻쓻癅ᮠ᧢뉺̴숝爆 [ 936.496121][ T9242] usb 7-1: Manufacturer: ꋪy㗽㚧ꭓਸ਼ᗀ艃흴ꆄꩥ䊇걏Ϩ珏薝Ӓ䍊⇘촫ꔺ蕁괃㚭䥋㮬䮍馦⢢貌㫴➬꯽ও⳱鬖鬝깈⻞ࣿꬨ丨㙴磤裧흀屍벑봋⹵䦁救ᯃ됦칎霏ꂁ嶽奢ဟ閳糖꣐푼찒뿴뢖嗀胷缍ⵎ즁퍁⡞ꡋ핪绲࡝ᖂѲ꺱紐ⴔ폼Ĭ輍礖ꞯ둱ꏑ [ 936.505846][ T5931] usb 5-1: USB disconnect, device number 12 [ 936.689092][ T9242] usb 7-1: SerialNumber: syz [ 936.773955][ T9242] usb 7-1: can't set config #16, error -71 [ 936.868445][ T9242] usb 7-1: USB disconnect, device number 19 [ 938.698835][ T5931] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 939.438552][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 939.458178][ T5931] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 939.466731][ T5931] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 939.505496][ T5931] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 939.540626][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 939.573709][T13517] 9pnet_fd: Insufficient options for proto=fd [ 939.575199][ T5931] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 939.602516][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 939.616699][ T5931] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 939.628833][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.644556][ T5931] usb 4-1: config 0 descriptor?? [ 939.884672][ T5931] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 940.131940][ T24] usb 4-1: USB disconnect, device number 22 [ 940.153225][ T24] usblp0: removed [ 940.232237][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1732'. [ 942.345309][T13537] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1735'. [ 942.467548][T13531] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1735'. [ 943.293377][T13547] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1738'. [ 943.302844][T13547] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1738'. [ 944.460395][ T24] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 945.208985][ T24] usb 4-1: device descriptor read/64, error -71 [ 945.715167][ T24] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 945.860678][ T24] usb 4-1: device descriptor read/64, error -71 [ 946.012054][ T24] usb usb4-port1: attempt power cycle [ 949.034882][T13585] siw: device registration error -23 [ 950.428609][T13599] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1753'. [ 951.915970][T13608] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 951.925606][T13608] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 953.248653][T13625] tmpfs: Cannot enable quota on remount [ 953.578274][T13625] syz.7.1762: attempt to access beyond end of device [ 953.578274][T13625] nbd7: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 953.595658][T13625] SQUASHFS error: Failed to read block 0x0: -5 [ 953.603529][T13625] unable to read squashfs_super_block [ 954.993948][T13633] tipc: Started in network mode [ 954.999061][T13633] tipc: Node identity 6ae619484e8e, cluster identity 4711 [ 955.056446][T13633] tipc: Enabled bearer , priority 0 [ 956.166894][ T9242] tipc: Node number set to 610801992 [ 957.072392][ T30] audit: type=1326 audit(1755679430.735:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13622 comm="syz.3.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb69f8ebe9 code=0x7ffc0000 [ 957.125776][ T30] audit: type=1326 audit(1755679430.735:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13622 comm="syz.3.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb69f8ebe9 code=0x7ffc0000 [ 957.151076][ T30] audit: type=1326 audit(1755679430.754:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13622 comm="syz.3.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fcb69f8ebe9 code=0x7ffc0000 [ 957.173618][ T30] audit: type=1326 audit(1755679430.754:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13622 comm="syz.3.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb69f8ebe9 code=0x7ffc0000 [ 957.214919][ T30] audit: type=1326 audit(1755679430.754:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13622 comm="syz.3.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb69f8ebe9 code=0x7ffc0000 [ 957.242976][ T30] audit: type=1326 audit(1755679431.586:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13622 comm="syz.3.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb69f8ebe9 code=0x7ffc0000 [ 957.255343][T13633] macvlan1: entered allmulticast mode [ 957.265127][ T30] audit: type=1326 audit(1755679431.586:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13622 comm="syz.3.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb69f8ebe9 code=0x7ffc0000 [ 957.304798][ T30] audit: type=1326 audit(1755679431.586:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13622 comm="syz.3.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb69f8ebe9 code=0x7ffc0000 [ 957.344975][ T30] audit: type=1326 audit(1755679431.848:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13622 comm="syz.3.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb69f8d550 code=0x7ffc0000 [ 957.368007][T13645] FAULT_INJECTION: forcing a failure. [ 957.368007][T13645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.381449][T13645] CPU: 1 UID: 0 PID: 13645 Comm: syz.7.1766 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 957.381470][T13645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 957.381478][T13645] Call Trace: [ 957.381483][T13645] [ 957.381489][T13645] dump_stack_lvl+0x189/0x250 [ 957.381522][T13645] ? __pfx____ratelimit+0x10/0x10 [ 957.381537][T13645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 957.381550][T13645] ? __pfx__printk+0x10/0x10 [ 957.381566][T13645] ? __might_fault+0xb0/0x130 [ 957.381586][T13645] should_fail_ex+0x414/0x560 [ 957.381602][T13645] _copy_from_user+0x2d/0xb0 [ 957.381619][T13645] do_sock_getsockopt+0x17d/0x450 [ 957.381641][T13645] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 957.381657][T13645] ? do_syscall_64+0x20/0x3b0 [ 957.381670][T13645] ? __fget_files+0x3a0/0x420 [ 957.381683][T13645] ? __fget_files+0x2a/0x420 [ 957.381701][T13645] __x64_sys_getsockopt+0x1a5/0x250 [ 957.381717][T13645] ? do_syscall_64+0x20/0x3b0 [ 957.381731][T13645] ? do_syscall_64+0x20/0x3b0 [ 957.381746][T13645] do_syscall_64+0xfa/0x3b0 [ 957.381762][T13645] ? lockdep_hardirqs_on+0x9c/0x150 [ 957.381775][T13645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.381787][T13645] ? clear_bhb_loop+0x60/0xb0 [ 957.381802][T13645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.381814][T13645] RIP: 0033:0x7f530258ebe9 [ 957.381826][T13645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.381836][T13645] RSP: 002b:00007f53033d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 957.381850][T13645] RAX: ffffffffffffffda RBX: 00007f53027b5fa0 RCX: 00007f530258ebe9 [ 957.381859][T13645] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000003 [ 957.381867][T13645] RBP: 00007f53033d1090 R08: 0000200000000240 R09: 0000000000000000 [ 957.381874][T13645] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 957.381882][T13645] R13: 00007f53027b6038 R14: 00007f53027b5fa0 R15: 00007ffd8a2160f8 [ 957.381901][T13645] [ 957.588898][ T30] audit: type=1326 audit(1755679431.848:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13622 comm="syz.3.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb69f8ebe9 code=0x7ffc0000 [ 957.674193][T13646] tipc: Resetting bearer [ 957.953996][T13628] tipc: Disabling bearer [ 960.312025][T13673] __vm_enough_memory: pid: 13673, comm: syz.4.1772, bytes: 21200024027136 not enough memory for the allocation [ 961.674108][T13696] netlink: 'syz.7.1783': attribute type 2 has an invalid length. [ 961.682754][T13696] netlink: 'syz.7.1783': attribute type 1 has an invalid length. [ 961.690637][T13696] netlink: 'syz.7.1783': attribute type 1 has an invalid length. [ 961.730017][T13696] netlink: 'syz.7.1783': attribute type 2 has an invalid length. [ 962.817172][T13711] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1787'. [ 962.827483][T13711] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1787'. [ 965.011999][T13708] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.542566][T13708] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.847797][T13708] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.056750][T13708] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.126213][T13729] lo speed is unknown, defaulting to 1000 [ 966.421565][T13708] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.618730][T13708] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.720749][T13708] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.913853][T13708] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.944066][T13738] netlink: 'syz.3.1791': attribute type 2 has an invalid length. [ 968.607251][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 968.614334][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 968.981737][T13738] bridge: entered promiscuous mode [ 969.192369][T13747] syz_tun: entered allmulticast mode [ 970.344927][T13746] syz_tun: left allmulticast mode [ 970.772170][T13765] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1798'. [ 971.021868][T13765] vlan2: entered allmulticast mode [ 971.027533][T13765] gretap0: entered allmulticast mode [ 973.186688][T13776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1800'. [ 974.300325][T13750] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 975.589494][T13787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.438494][T13750] usb 10-1: device descriptor read/all, error -71 [ 979.389253][T13812] syz_tun: entered allmulticast mode [ 980.245039][T13815] netlink: 'syz.7.1811': attribute type 1 has an invalid length. [ 980.253611][T13815] netlink: 172 bytes leftover after parsing attributes in process `syz.7.1811'. [ 981.154913][T13822] FAULT_INJECTION: forcing a failure. [ 981.154913][T13822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.157140][T13820] trusted_key: encrypted_key: insufficient parameters specified [ 981.293284][T13822] CPU: 0 UID: 0 PID: 13822 Comm: syz.9.1813 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 981.293318][T13822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 981.293329][T13822] Call Trace: [ 981.293338][T13822] [ 981.293348][T13822] dump_stack_lvl+0x189/0x250 [ 981.293377][T13822] ? __pfx____ratelimit+0x10/0x10 [ 981.293401][T13822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 981.293421][T13822] ? __pfx__printk+0x10/0x10 [ 981.293529][T13822] ? __might_fault+0xb0/0x130 [ 981.293560][T13822] should_fail_ex+0x414/0x560 [ 981.293594][T13822] _copy_from_user+0x2d/0xb0 [ 981.293622][T13822] ? semctl_main+0xee/0x15f0 [ 981.293646][T13822] semctl_main+0x6f5/0x15f0 [ 981.293678][T13822] ? semctl_main+0xee/0x15f0 [ 981.293704][T13822] ? __lock_acquire+0xab9/0xd20 [ 981.293725][T13822] ? __pfx_semctl_main+0x10/0x10 [ 981.293807][T13822] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 981.293834][T13822] ? __pfx_vfs_write+0x10/0x10 [ 981.293866][T13822] __se_sys_semctl+0x31c/0x3a0 [ 981.293893][T13822] ? __pfx___se_sys_semctl+0x10/0x10 [ 981.293928][T13822] ? __pfx_ksys_write+0x10/0x10 [ 981.293946][T13822] ? rcu_is_watching+0x15/0xb0 [ 981.293974][T13822] ? do_syscall_64+0xbe/0x3b0 [ 981.294024][T13822] do_syscall_64+0xfa/0x3b0 [ 981.294048][T13822] ? lockdep_hardirqs_on+0x9c/0x150 [ 981.294070][T13822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.294092][T13822] ? clear_bhb_loop+0x60/0xb0 [ 981.294118][T13822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.294137][T13822] RIP: 0033:0x7f2d75b8ebe9 [ 981.294157][T13822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.294176][T13822] RSP: 002b:00007f2d7699a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 981.294200][T13822] RAX: ffffffffffffffda RBX: 00007f2d75db5fa0 RCX: 00007f2d75b8ebe9 [ 981.294214][T13822] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000002 [ 981.294227][T13822] RBP: 00007f2d7699a090 R08: 0000000000000000 R09: 0000000000000000 [ 981.294239][T13822] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 981.294252][T13822] R13: 00007f2d75db6038 R14: 00007f2d75db5fa0 R15: 00007ffcb17188e8 [ 981.294288][T13822] [ 982.361927][T13812] syz_tun: left allmulticast mode [ 985.884329][ T9242] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 986.088800][ T9242] usb 4-1: unable to get BOS descriptor or descriptor too short [ 986.141864][ T9242] usb 4-1: config 7 has an invalid interface number: 16 but max is 0 [ 986.176764][ T9242] usb 4-1: config 7 has no interface number 0 [ 986.194896][ T9242] usb 4-1: config 7 interface 16 altsetting 59 endpoint 0xC has invalid wMaxPacketSize 0 [ 986.218891][ T9242] usb 4-1: config 7 interface 16 altsetting 59 bulk endpoint 0xF has invalid maxpacket 1024 [ 986.266646][ T9242] usb 4-1: config 7 interface 16 has no altsetting 0 [ 986.290574][ T9242] usb 4-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=47.21 [ 986.303545][ T9242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.337796][ T9242] usb 4-1: Product: syz [ 986.494247][ T9242] usb 4-1: Manufacturer: syz [ 986.499888][ T9242] usb 4-1: SerialNumber: syz [ 986.514160][T13865] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 987.392024][ T9242] io_ti 4-1:7.16: required endpoints missing [ 987.421217][ T9242] usb 4-1: USB disconnect, device number 26 [ 987.620597][T13886] tipc: Started in network mode [ 987.639098][T13886] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 987.720448][T13886] tipc: Enabling of bearer rejected, failed to enable media [ 990.758363][T13909] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 990.887348][T13911] Bluetooth: MGMT ver 1.23 [ 994.111728][T13947] lo speed is unknown, defaulting to 1000 [ 994.999601][ T5932] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 995.765476][ T5932] usb 7-1: unable to get BOS descriptor or descriptor too short [ 995.803176][ T5932] usb 7-1: no configurations [ 995.876508][T13957] syz.9.1853 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 996.862764][ T5932] usb 7-1: can't read configurations, error -22 [ 1001.893029][T13979] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1003.048117][T13750] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1003.490217][T13750] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1003.549551][T13750] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1003.680248][T13750] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1003.732950][T13750] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1003.753813][T13750] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1003.806419][T13750] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1003.849520][T13750] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1003.874606][T13750] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1003.890119][T13750] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1003.904809][T13750] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1003.982889][T13750] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1004.007521][T13750] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1004.047486][T13750] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1004.073407][T13750] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1004.098857][T13750] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1004.158606][T13750] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1004.186218][T13750] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1004.196321][T13750] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1004.212942][T13750] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1004.225606][T13750] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1004.236717][T13750] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1004.911671][ T5931] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 1004.919303][T13750] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1004.968456][T13750] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1005.211323][T13750] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1005.220571][ T5931] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1005.273780][ T5931] usb 4-1: config 0 has no interface number 0 [ 1005.355934][ T5931] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1005.383712][T13750] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1005.450432][ T5931] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1005.459779][T13750] usb 5-1: string descriptor 0 read error: -71 [ 1005.602652][ T5931] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1005.635548][ T5931] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1005.689048][ T5931] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1005.754342][ T5931] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1005.807472][T13750] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1005.812842][ T5931] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1005.817483][T13750] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1005.854773][T13750] usb 5-1: config 0 descriptor?? [ 1005.878225][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.883618][T13750] usb 5-1: can't set config #0, error -71 [ 1006.825952][T13750] usb 5-1: USB disconnect, device number 13 [ 1006.905190][ T5931] usb 4-1: config 0 descriptor?? [ 1006.912371][T13993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1006.927457][T13993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1006.943132][ T5931] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1006.979345][ T5931] usb 4-1: USB disconnect, device number 27 [ 1007.004446][ T5931] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1008.487345][T14036] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1008.557379][T14021] infiniband syz1: set down [ 1008.631188][T14021] infiniband syz1: added ipvlan0 [ 1008.664585][T14021] syz1: rxe_create_cq: returned err = -12 [ 1008.712857][T14021] infiniband syz1: Couldn't create ib_mad CQ [ 1008.791123][T14021] infiniband syz1: Couldn't open port 1 [ 1008.916432][T14021] RDS/IB: syz1: added [ 1009.008825][T14021] smc: adding ib device syz1 with port count 1 [ 1009.102168][T14021] smc: ib device syz1 port 1 has pnetid [ 1011.093779][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1885'. [ 1013.916938][T14075] lo speed is unknown, defaulting to 1000 [ 1014.551941][ T5847] Bluetooth: hci1: ISO packet too small [ 1018.244337][T14090] lo speed is unknown, defaulting to 1000 [ 1018.250362][T14090] lo speed is unknown, defaulting to 1000 [ 1018.257431][T14090] lo speed is unknown, defaulting to 1000 [ 1018.268087][T14090] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1018.283278][T14090] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1018.307128][T14090] lo speed is unknown, defaulting to 1000 [ 1018.314728][T14090] lo speed is unknown, defaulting to 1000 [ 1018.321898][T14090] lo speed is unknown, defaulting to 1000 [ 1018.328992][T14090] lo speed is unknown, defaulting to 1000 [ 1018.336260][T14090] lo speed is unknown, defaulting to 1000 [ 1018.343405][T14090] lo speed is unknown, defaulting to 1000 [ 1021.894294][T13750] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1022.070357][T13750] usb 5-1: Using ep0 maxpacket: 32 [ 1022.110603][T13750] usb 5-1: config 0 has an invalid interface number: 213 but max is 0 [ 1022.130651][T13750] usb 5-1: config 0 has no interface number 0 [ 1022.162271][T13750] usb 5-1: config 0 interface 213 altsetting 2 endpoint 0xF has invalid maxpacket 1040, setting to 1024 [ 1022.182300][T13750] usb 5-1: config 0 interface 213 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 64 [ 1022.202816][T13750] usb 5-1: config 0 interface 213 has no altsetting 0 [ 1022.233204][T13750] usb 5-1: New USB device found, idVendor=0846, idProduct=9030, bcdDevice= 2.ca [ 1022.251153][T13750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.423514][T13750] usb 5-1: Product: syz [ 1022.443360][T13750] usb 5-1: Manufacturer: syz [ 1022.448906][T13750] usb 5-1: SerialNumber: syz [ 1023.189013][T13750] usb 5-1: config 0 descriptor?? [ 1023.195385][T14124] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1023.222821][T14124] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1023.234717][T13750] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1023.517802][ T5931] usb 5-1: USB disconnect, device number 14 [ 1025.604509][T14154] netlink: 'syz.7.1917': attribute type 39 has an invalid length. [ 1025.860982][T14161] netlink: 'syz.9.1916': attribute type 12 has an invalid length. [ 1026.494921][T14169] syz.7.1921 (14169) used greatest stack depth: 17992 bytes left [ 1033.905600][T14228] input: syz1 as /devices/virtual/input/input11 [ 1033.914342][T14226] input: syz1 as /devices/virtual/input/input10 [ 1033.966709][T14228] input: failed to attach handler leds to device input11, error: -6 [ 1034.277223][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1034.283700][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1036.987945][ T5847] Bluetooth: hci5: unexpected event for opcode 0x0c2d [ 1039.414820][T14292] syz.6.1955(14292): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1039.937364][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1039.937389][ T30] audit: type=1800 audit(1755679509.458:147): pid=14296 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.1955" name="bus" dev="overlay" ino=2016 res=0 errno=0 [ 1040.411252][T14291] delete_channel: no stack [ 1041.346470][ T5847] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1041.358837][ T5847] Bluetooth: hci5: Injecting HCI hardware error event [ 1041.381232][T14307] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1041.397043][T14306] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 1041.415567][ T5847] Bluetooth: hci5: hardware error 0x00 [ 1042.107983][T14314] binder: BINDER_SET_CONTEXT_MGR already set [ 1042.114270][T14314] binder: 14312:14314 ioctl 4018620d 200000000040 returned -16 [ 1043.627141][ T5847] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1046.961593][T13751] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1047.147487][T13751] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1047.158178][T13751] usb 4-1: config 0 has no interface number 0 [ 1047.186295][T13751] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1047.198801][T13751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.216088][T13751] usb 4-1: Product: syz [ 1047.687674][T13751] usb 4-1: Manufacturer: syz [ 1047.692633][T13751] usb 4-1: SerialNumber: syz [ 1048.501486][T13751] usb 4-1: config 0 descriptor?? [ 1048.749365][T13751] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1048.770906][T13751] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1048.815185][T13751] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1048.854781][T13751] usb 4-1: media controller created [ 1048.954634][T13751] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1049.077451][T13751] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1049.287351][T13751] usb 4-1: USB disconnect, device number 28 [ 1055.182060][T14394] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1056.183067][T14394] tipc: Enabled bearer , priority 10 [ 1057.373879][ T9242] tipc: Node number set to 3670271876 [ 1058.946191][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1994'. [ 1059.508265][T14421] bond_slave_0: entered promiscuous mode [ 1059.514063][T14421] bond_slave_1: entered promiscuous mode [ 1059.532075][T14421] macvtap1: entered promiscuous mode [ 1059.543862][T14421] bond0: entered promiscuous mode [ 1059.558574][T14421] macvtap1: entered allmulticast mode [ 1059.569616][T14421] bond0: entered allmulticast mode [ 1059.600348][T14421] bond_slave_0: entered allmulticast mode [ 1059.625364][T14421] bond_slave_1: entered allmulticast mode [ 1059.635270][T14421] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1059.656391][T14425] bond0: left allmulticast mode [ 1059.663082][T14425] bond_slave_0: left allmulticast mode [ 1059.668887][T14425] bond_slave_1: left allmulticast mode [ 1059.675007][T14425] bond0: left promiscuous mode [ 1059.680589][T14425] bond_slave_0: left promiscuous mode [ 1059.686317][T14425] bond_slave_1: left promiscuous mode [ 1062.155263][T14465] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1063.179337][ T9242] lo speed is unknown, defaulting to 1000 [ 1066.595296][ T5847] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 1066.716500][T14510] IPv4: Oversized IP packet from 127.202.26.0 [ 1069.708880][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2032'. [ 1070.369498][T14542] lo speed is unknown, defaulting to 1000 [ 1070.873076][ T5847] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1070.883403][ T5847] Bluetooth: hci3: Injecting HCI hardware error event [ 1070.894185][T13556] Bluetooth: hci3: hardware error 0x00 [ 1071.022658][ T9242] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1071.182973][ T9242] usb 7-1: Using ep0 maxpacket: 32 [ 1071.258505][ T9242] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.306138][ T9242] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.354229][ T9242] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1071.363394][ T9242] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.397681][ T9242] usb 7-1: config 0 descriptor?? [ 1072.248931][ T9242] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1072.290160][ T5847] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 1072.380682][ T9242] usb 7-1: USB disconnect, device number 22 [ 1072.814848][T14561] fido_id[14561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1073.096988][T13556] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1073.212509][T14542] lo speed is unknown, defaulting to 1000 [ 1073.710223][T14575] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2044'. [ 1083.487641][ T9980] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1083.840765][ T9980] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.031722][ T9980] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.042821][ T9980] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1084.053798][ T9980] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.101848][ T9980] usb 10-1: config 0 descriptor?? [ 1084.299897][T14638] delete_channel: no stack [ 1085.079534][ T30] audit: type=1800 audit(1755679551.200:148): pid=14638 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2066" name="bus" dev="overlay" ino=2286 res=0 errno=0 [ 1086.491606][T14649] siw: device registration error -23 [ 1087.176814][ T9980] usb 10-1: string descriptor 0 read error: -71 [ 1087.195814][ T9980] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 1087.204751][ T9980] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 1087.256811][ T9980] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 1087.276758][ T9980] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 1087.285667][ T9980] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 1087.350553][ T9980] usb 10-1: USB disconnect, device number 17 [ 1089.117018][T14680] block device autoloading is deprecated and will be removed. [ 1090.047385][T14692] siw: device registration error -23 [ 1090.857315][ T30] audit: type=1326 audit(1755679557.384:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14693 comm="syz.6.2084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe1618ebe9 code=0x0 [ 1094.299161][T14736] siw: device registration error -23 [ 1100.903760][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1100.910220][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1101.475593][ T30] audit: type=1326 audit(1755679567.319:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14786 comm="syz.4.2111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f059e18ebe9 code=0x0 [ 1105.774133][ T9242] libceph: connect (1)[c::]:6789 error -101 [ 1105.782157][ T9242] libceph: mon0 (1)[c::]:6789 connect error [ 1106.011409][T14831] ceph: No mds server is up or the cluster is laggy [ 1106.838290][ T9242] libceph: connect (1)[c::]:6789 error -101 [ 1106.852747][ T9242] libceph: mon0 (1)[c::]:6789 connect error [ 1110.070797][ T30] audit: type=1326 audit(1755679575.355:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14863 comm="syz.4.2135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f059e18ebe9 code=0x0 [ 1115.150806][T14908] netlink: 'syz.4.2151': attribute type 10 has an invalid length. [ 1116.217716][T14908] team0: Port device dummy0 added [ 1116.336365][T14923] netlink: 'syz.6.2155': attribute type 39 has an invalid length. [ 1116.613080][ T9205] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1117.576013][ T9205] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.635764][ T9205] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1117.700199][ T9205] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1117.778306][ T9205] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1117.786626][ T9205] usb 10-1: SerialNumber: syz [ 1118.167100][ T9205] usb 10-1: 0:2 : does not exist [ 1118.202702][ T9205] usb 10-1: USB disconnect, device number 18 [ 1119.011439][T14948] udevd[14948]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1128.589137][T15030] netlink: 'syz.3.2189': attribute type 6 has an invalid length. [ 1128.607185][T15030] input: syz1 as /devices/virtual/input/input12 [ 1133.737236][ T30] audit: type=1326 audit(1755679597.498:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15082 comm="syz.6.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1618ebe9 code=0x7ffc0000 [ 1133.764278][T15079] netlink: 'syz.3.2201': attribute type 3 has an invalid length. [ 1133.799228][ T30] audit: type=1326 audit(1755679597.498:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15082 comm="syz.6.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1618ebe9 code=0x7ffc0000 [ 1134.375344][ T30] audit: type=1326 audit(1755679597.498:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15082 comm="syz.6.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fbe1618ebe9 code=0x7ffc0000 [ 1134.514296][ T30] audit: type=1326 audit(1755679597.498:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15082 comm="syz.6.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1618ebe9 code=0x7ffc0000 [ 1135.156630][ T30] audit: type=1326 audit(1755679597.508:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15082 comm="syz.6.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1618ebe9 code=0x7ffc0000 [ 1135.437259][ T30] audit: type=1800 audit(1755679598.424:157): pid=15088 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2206" name="bus" dev="overlay" ino=2309 res=0 errno=0 [ 1143.028171][ T9242] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1143.159474][T15154] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1143.186743][T15154] CIFS: Unable to determine destination address [ 1145.196012][ T9242] usb 10-1: device descriptor read/all, error -71 [ 1145.859771][ T30] audit: type=1326 audit(1755679608.687:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.7.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530258ebe9 code=0x7ffc0000 [ 1147.659410][ T30] audit: type=1326 audit(1755679608.799:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.7.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f530258ebe9 code=0x7ffc0000 [ 1147.682154][ T30] audit: type=1326 audit(1755679608.799:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15175 comm="syz.7.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530258ebe9 code=0x7ffc0000 [ 1147.761333][ T30] audit: type=1800 audit(1755679610.614:161): pid=15182 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2232" name="bus" dev="overlay" ino=2340 res=0 errno=0 [ 1149.321714][T15200] lo speed is unknown, defaulting to 1000 [ 1149.680305][T15200] lo speed is unknown, defaulting to 1000 [ 1152.471950][T15228] delete_channel: no stack [ 1152.591799][ T30] audit: type=1800 audit(1755679615.001:162): pid=15228 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2247" name="bus" dev="overlay" ino=2359 res=0 errno=0 [ 1154.400590][T13556] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1155.224592][T15247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2254'. [ 1156.189039][T15254] netlink: 'syz.9.2255': attribute type 10 has an invalid length. [ 1156.840465][T15254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.848800][T15254] team0: Port device bond0 added [ 1158.797114][T15276] delete_channel: no stack [ 1158.849044][ T30] audit: type=1800 audit(1755679620.914:163): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2260" name="bus" dev="overlay" ino=2498 res=0 errno=0 [ 1162.593899][T15301] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2270'. [ 1164.460287][T15327] delete_channel: no stack [ 1164.545092][ T30] audit: type=1800 audit(1755679626.227:164): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2278" name="bus" dev="overlay" ino=2408 res=0 errno=0 [ 1165.689007][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1165.695712][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1174.547450][T15399] bridge1: entered promiscuous mode [ 1174.552946][T15399] bridge1: entered allmulticast mode [ 1174.569910][T15399] team0: Port device bridge1 added [ 1175.267618][T15404] tipc: Started in network mode [ 1175.303130][T15404] tipc: Node identity 7, cluster identity 4711 [ 1175.348710][T15404] tipc: Node number set to 7 [ 1176.006003][T15421] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1176.015556][T15421] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1179.396364][T15440] Invalid source name [ 1179.400528][T15440] UBIFS error (pid: 15440): cannot open "usrquota", error -22 [ 1179.802410][T15446] __vm_enough_memory: pid: 15446, comm: syz.3.2313, bytes: 21199655858176 not enough memory for the allocation [ 1181.233981][T15458] bridge1: entered promiscuous mode [ 1181.239473][T15458] bridge1: entered allmulticast mode [ 1181.278444][T15458] team0: Port device bridge1 added [ 1182.010562][T15463] netlink: 'syz.9.2319': attribute type 3 has an invalid length. [ 1182.019060][T15463] netlink: 'syz.9.2319': attribute type 3 has an invalid length. [ 1182.027259][T15463] netlink: 'syz.9.2319': attribute type 3 has an invalid length. [ 1182.035665][T15463] netlink: 'syz.9.2319': attribute type 3 has an invalid length. [ 1182.044505][T15463] netlink: 'syz.9.2319': attribute type 3 has an invalid length. [ 1182.053173][T15463] netlink: 'syz.9.2319': attribute type 3 has an invalid length. [ 1182.061716][T15463] netlink: 'syz.9.2319': attribute type 3 has an invalid length. [ 1182.070110][T15463] netlink: 'syz.9.2319': attribute type 3 has an invalid length. [ 1182.079440][T15463] netlink: 'syz.9.2319': attribute type 3 has an invalid length. [ 1182.088275][T15463] netlink: 'syz.9.2319': attribute type 3 has an invalid length. [ 1185.171581][T15489] __vm_enough_memory: pid: 15489, comm: syz.6.2327, bytes: 21199969873920 not enough memory for the allocation [ 1186.228160][T15492] tipc: Started in network mode [ 1186.343941][T15492] tipc: Node identity 7, cluster identity 4711 [ 1186.350213][T15492] tipc: Node number set to 7 [ 1186.386120][T15494] Invalid source name [ 1186.390489][T15494] UBIFS error (pid: 15494): cannot open "usrquota", error -22 [ 1187.185210][T15503] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1188.551466][T15504] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2330'. [ 1191.330036][T15518] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2337'. [ 1192.717562][T15546] Invalid source name [ 1192.722116][T15546] UBIFS error (pid: 15546): cannot open "usrquota", error -22 [ 1193.956956][T15556] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1194.277522][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2348'. [ 1194.325513][ T9980] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1194.713306][T15566] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2349'. [ 1195.554562][ T9980] usb 10-1: Using ep0 maxpacket: 32 [ 1195.591074][ T9980] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1197.115658][ T9980] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1197.125093][ T9980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.735366][ T9980] usb 10-1: Product: syz [ 1197.973043][ T9980] usb 10-1: config 0 descriptor?? [ 1198.307899][ T9980] usb 10-1: can't set config #0, error -71 [ 1198.339823][ T9980] usb 10-1: USB disconnect, device number 21 [ 1198.431750][T15589] siw: device registration error -23 [ 1202.331979][T15613] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2362'. [ 1209.408802][T15664] delete_channel: no stack [ 1209.645417][ T30] audit: type=1800 audit(1755679668.241:165): pid=15664 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.2375" name="bus" dev="overlay" ino=1574 res=0 errno=0 [ 1214.265076][ T30] audit: type=1800 audit(1755679672.834:166): pid=15700 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2384" name="bus" dev="overlay" ino=2645 res=0 errno=0 [ 1214.312007][T15700] delete_channel: no stack [ 1216.584333][T15709] __vm_enough_memory: pid: 15709, comm: syz.7.2387, bytes: 21200314798080 not enough memory for the allocation [ 1218.317149][T15718] delete_channel: no stack [ 1218.338561][ T30] audit: type=1800 audit(1755679676.595:167): pid=15718 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.2389" name="bus" dev="overlay" ino=1599 res=0 errno=0 [ 1219.051343][ T30] audit: type=1326 audit(1755679677.306:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15717 comm="syz.6.2390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe1618ebe9 code=0x0 [ 1220.531851][ T30] audit: type=1800 audit(1755679678.690:169): pid=15749 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2399" name="bus" dev="overlay" ino=2680 res=0 errno=0 [ 1220.584587][T15749] delete_channel: no stack [ 1222.054769][T15755] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2402'. [ 1222.726125][T15763] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1222.735358][T15763] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1223.871497][T15767] delete_channel: no stack [ 1224.242617][ T30] audit: type=1800 audit(1755679681.806:170): pid=15767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2404" name="bus" dev="overlay" ino=2699 res=0 errno=0 [ 1227.365475][T15782] Invalid source name [ 1227.387810][T15782] UBIFS error (pid: 15782): cannot open "usrquota", error -22 [ 1228.872845][T15806] Invalid source name [ 1228.885569][T15806] UBIFS error (pid: 15806): cannot open "usrquota", error -22 [ 1231.519990][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1231.553348][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1232.851415][T15842] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1233.989131][T15841] binder: BINDER_SET_CONTEXT_MGR already set [ 1234.000773][T15841] binder: 15836:15841 ioctl 4018620d 2000000002c0 returned -16 [ 1234.012919][T15841] binder: 15836:15841 ioctl c0306201 200000000240 returned -11 [ 1235.800490][ T30] audit: type=1800 audit(1755679692.901:171): pid=15859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2432" name="bus" dev="overlay" ino=1442 res=0 errno=0 [ 1235.834714][T15859] delete_channel: no stack [ 1237.519609][T15888] binder: 15887:15888 ioctl c0306201 200000000240 returned -11 [ 1239.330332][T15903] bridge1: entered promiscuous mode [ 1239.335754][T15903] bridge1: entered allmulticast mode [ 1239.355908][T15903] team0: Port device bridge1 added [ 1241.876855][T15927] binder: 15926:15927 ioctl c0306201 200000000240 returned -11 [ 1246.166534][T15936] delete_channel: no stack [ 1246.265636][ T30] audit: type=1800 audit(1755679702.143:172): pid=15946 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2460" name="bus" dev="overlay" ino=1476 res=0 errno=0 [ 1249.044807][T15974] binder: 15972:15974 ioctl c0306201 200000000240 returned -11 [ 1251.776865][T15998] delete_channel: no stack [ 1251.902675][ T30] audit: type=1800 audit(1755679707.915:173): pid=15998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.2476" name="bus" dev="overlay" ino=1718 res=0 errno=0 [ 1256.952373][T16041] syz_tun: entered allmulticast mode [ 1257.757174][T16042] delete_channel: no stack [ 1258.045538][ T30] audit: type=1800 audit(1755679713.519:174): pid=16042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2489" name="bus" dev="overlay" ino=2792 res=0 errno=0 [ 1259.564886][T16040] syz_tun: left allmulticast mode [ 1261.698950][T16075] bridge2: entered promiscuous mode [ 1261.704386][T16075] bridge2: entered allmulticast mode [ 1261.717216][T16075] team0: Port device bridge2 added [ 1265.498613][ T5970] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1268.769234][T16133] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1269.784378][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'. [ 1274.836837][T16194] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1283.941496][T16248] validate_nla: 39 callbacks suppressed [ 1283.941632][T16248] netlink: 'syz.9.2549': attribute type 1 has an invalid length. [ 1284.007593][T16248] netlink: 228 bytes leftover after parsing attributes in process `syz.9.2549'. [ 1287.525317][ T24] IPVS: starting estimator thread 0... [ 1287.633759][T16295] IPVS: using max 24 ests per chain, 57600 per kthread [ 1287.739259][T16297] NILFS (nullb0): couldn't find nilfs on the device [ 1293.654353][ T30] audit: type=1326 audit(1755679747.104:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16333 comm="syz.9.2574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d75b8ebe9 code=0x7ffe0000 [ 1293.821407][T16335] lo speed is unknown, defaulting to 1000 [ 1294.122221][ T9242] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1294.282874][ T9242] usb 4-1: device descriptor read/64, error -71 [ 1294.294079][T16345] bridge0: entered promiscuous mode [ 1294.310052][T16345] macvlan2: entered promiscuous mode [ 1294.560448][ T9242] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1294.721149][ T9242] usb 4-1: device descriptor read/64, error -71 [ 1294.861340][ T9242] usb usb4-port1: attempt power cycle [ 1295.462013][ T9242] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1295.518469][ T9242] usb 4-1: device descriptor read/8, error -71 [ 1295.804267][T16335] lo speed is unknown, defaulting to 1000 [ 1295.811200][ T9242] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1295.876126][ T9242] usb 4-1: device descriptor read/8, error -71 [ 1296.023673][ T9242] usb usb4-port1: unable to enumerate USB device [ 1297.009578][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1297.016411][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1297.394723][T16375] netlink: 'syz.6.2587': attribute type 10 has an invalid length. [ 1297.423524][T16375] team0: Device veth1_vlan failed to register rx_handler [ 1299.046398][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x3 [ 1299.064671][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.094794][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.115541][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.140498][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.160495][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.181693][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.201271][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.222504][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.239544][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.249307][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.257502][ T9242] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1299.272500][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.281474][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.294109][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.304567][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.313935][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.323054][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.332372][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.435187][ T9242] usb 5-1: Using ep0 maxpacket: 16 [ 1299.461011][ T9242] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1299.520363][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.562109][ T9242] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1299.577141][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.622932][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.688802][ T9242] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1299.795641][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.873411][ T9242] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1299.889057][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.910518][ T9242] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1299.920617][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.930393][ T9242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.944191][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1299.955026][ T9242] usb 5-1: Product: syz [ 1299.962686][ T9242] usb 5-1: Manufacturer: syz [ 1299.968403][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1300.020460][ T9242] usb 5-1: SerialNumber: syz [ 1300.029705][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1300.121478][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1300.208294][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1300.325840][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1300.342382][ T9242] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1300.432841][T13751] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 1300.489592][T13751] hid-generic 0000:007F:FFFFFFFE.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1300.571259][T16392] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1300.702580][T16414] fido_id[16414]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1301.961656][ T6206] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.216643][T13751] usb 5-1: USB disconnect, device number 15 [ 1302.240309][ T6206] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.257966][T13751] usblp0: removed [ 1302.603206][ T6206] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.542657][T16435] IPv4: Oversized IP packet from 172.20.20.24 [ 1303.550236][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1303.591021][T13751] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1303.638240][ T6206] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.753895][T13751] usb 5-1: device descriptor read/64, error -71 [ 1304.013937][T13751] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1304.202782][T13751] usb 5-1: device descriptor read/64, error -71 [ 1304.312349][ T6206] bridge_slave_1: left allmulticast mode [ 1304.318191][ T6206] bridge_slave_1: left promiscuous mode [ 1304.331525][T13751] usb usb5-port1: attempt power cycle [ 1304.340521][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.415638][ T6206] bridge_slave_0: left allmulticast mode [ 1304.441486][ T6206] bridge_slave_0: left promiscuous mode [ 1304.447519][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.500883][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1304.520651][T16446] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1304.530826][T16446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1304.542210][T16446] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1304.554178][T16446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1304.693843][T13751] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1304.726632][T13751] usb 5-1: device descriptor read/8, error -71 [ 1304.993133][T13751] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1305.325550][T13751] usb 5-1: device descriptor read/8, error -71 [ 1305.470953][T13751] usb usb5-port1: unable to enumerate USB device [ 1305.862726][T16452] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1305.876008][T16451] fuse: Bad value for 'fd' [ 1306.773381][T16446] Bluetooth: hci2: command tx timeout [ 1307.148958][ T6206] team0: Port device bridge1 removed [ 1307.638790][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x3 [ 1307.651220][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.672458][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.683465][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.692230][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.701031][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.710001][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.718262][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.740734][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.748792][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.776848][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.787393][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.800685][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.813008][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.823018][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.832156][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.843039][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.853383][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.863658][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.872152][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.880649][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.888986][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.899394][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.908071][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.944660][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.956407][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.965342][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.973497][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.982162][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1307.991062][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1308.001550][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 1308.032272][ T24] hid-generic 0000:007F:FFFFFFFE.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1308.201642][T16477] fido_id[16477]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1308.363326][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.376525][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1308.391035][ T6206] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1308.415074][ T6206] bond0 (unregistering): Released all slaves [ 1308.796515][ T6206] bond1 (unregistering): Released all slaves [ 1308.961023][T16446] Bluetooth: hci2: command tx timeout [ 1309.139489][ T6206] bond2 (unregistering): (slave veth3): Releasing active interface [ 1309.147789][ T6206] dummy0: entered promiscuous mode [ 1309.169513][ T6206] bond2 (unregistering): (slave dummy0): Releasing active interface [ 1309.375234][ T6206] bond2 (unregistering): Released all slaves [ 1309.958878][ T6206] bond3 (unregistering): Released all slaves [ 1310.475635][ T6206] tipc: Left network mode [ 1310.575499][T16444] lo speed is unknown, defaulting to 1000 [ 1311.193551][T16446] Bluetooth: hci2: command tx timeout [ 1311.457291][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x3 [ 1311.481649][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.495379][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.524918][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.539524][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.571416][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.594808][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.619444][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.637336][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.668431][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.694582][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.711509][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.724239][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.736078][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.747675][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.763222][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.779636][T13556] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1311.780949][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.801075][T13556] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1311.813940][T13556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1311.824488][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.832698][T13556] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1311.835247][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.866918][T13556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1311.937103][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.974172][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.984486][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1311.996838][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1312.007068][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1312.014908][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1312.023450][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1312.035111][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1312.043490][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1312.084348][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1312.094142][T16498] lo speed is unknown, defaulting to 1000 [ 1312.100197][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1312.122592][T16396] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 1312.144780][T16396] hid-generic 0000:007F:FFFFFFFE.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1312.240426][T16502] fido_id[16502]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1312.382607][T13556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1312.411123][T13556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1312.422461][T13556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1312.444881][T13556] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1312.455239][T13556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1312.907707][T16444] lo speed is unknown, defaulting to 1000 [ 1313.275869][T16503] lo speed is unknown, defaulting to 1000 [ 1313.404301][T16446] Bluetooth: hci2: command tx timeout [ 1313.951598][ T6206] hsr_slave_0: left promiscuous mode [ 1313.983298][ T6206] hsr_slave_1: left promiscuous mode [ 1314.000709][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1314.026040][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1314.056367][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1314.079270][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1314.090177][T16446] Bluetooth: hci0: command tx timeout [ 1314.153251][ T6206] veth0_macvtap: left allmulticast mode [ 1314.172325][ T6206] veth1_macvtap: left promiscuous mode [ 1314.183027][ T6206] veth0_macvtap: left promiscuous mode [ 1314.194067][ T6206] veth0_vlan: left promiscuous mode [ 1314.602038][T13556] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1314.615139][T13556] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1314.625194][T13556] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1314.635865][T13556] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1314.645512][T13556] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1314.683294][ T5847] Bluetooth: hci1: command tx timeout [ 1315.778018][ T24] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1315.936295][ T24] usb 10-1: device descriptor read/64, error -71 [ 1316.026391][ T6206] team0 (unregistering): Port device team_slave_1 removed [ 1316.115727][ T6206] team0 (unregistering): Port device team_slave_0 removed [ 1316.206457][ T24] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1316.302979][T16446] Bluetooth: hci0: command tx timeout [ 1316.346876][ T24] usb 10-1: device descriptor read/64, error -71 [ 1316.463489][ T24] usb usb10-port1: attempt power cycle [ 1316.858264][ T24] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1316.901867][T16446] Bluetooth: hci1: command tx timeout [ 1316.912474][ T24] usb 10-1: device descriptor read/8, error -71 [ 1316.988699][T16446] Bluetooth: hci4: command tx timeout [ 1317.064817][T16498] lo speed is unknown, defaulting to 1000 [ 1317.080652][ T9980] lo speed is unknown, defaulting to 1000 [ 1317.086684][ T9980] 3yz0: Port: 1 Link DOWN [ 1317.190656][ T24] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1317.260039][ T24] usb 10-1: device descriptor read/8, error -71 [ 1317.295917][T16444] chnl_net:caif_netlink_parms(): no params data found [ 1317.392303][ T24] usb usb10-port1: unable to enumerate USB device [ 1317.538639][T16503] lo speed is unknown, defaulting to 1000 [ 1317.601439][T16444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.612704][T16444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.623082][T16444] bridge_slave_0: entered allmulticast mode [ 1317.631780][T16444] bridge_slave_0: entered promiscuous mode [ 1317.646144][T16444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.654407][T16444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.662107][T16444] bridge_slave_1: entered allmulticast mode [ 1317.669396][T16444] bridge_slave_1: entered promiscuous mode [ 1317.678144][T16510] lo speed is unknown, defaulting to 1000 [ 1317.730530][ T6206] IPVS: stop unused estimator thread 0... [ 1317.863057][T16444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.895650][T16498] chnl_net:caif_netlink_parms(): no params data found [ 1317.923428][T16444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.067749][T16444] team0: Port device team_slave_0 added [ 1318.084361][T16444] team0: Port device team_slave_1 added [ 1318.220451][ T6206] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.368093][T16498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.375419][T16498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.388606][T16498] bridge_slave_0: entered allmulticast mode [ 1318.396745][T16498] bridge_slave_0: entered promiscuous mode [ 1318.405656][T16444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.413286][T16444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.440300][T16444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.454353][T16444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.461527][T16444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.487776][T16444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.523106][T16498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.526049][T16446] Bluetooth: hci0: command tx timeout [ 1318.531158][T16498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.543795][T16498] bridge_slave_1: entered allmulticast mode [ 1318.551632][T16498] bridge_slave_1: entered promiscuous mode [ 1318.680305][ T6206] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.699812][T16498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.714962][T16498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.985177][ T6206] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.096383][T16498] team0: Port device team_slave_0 added [ 1319.133847][T16446] Bluetooth: hci1: command tx timeout [ 1319.160831][ T6206] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.194513][T16444] hsr_slave_0: entered promiscuous mode [ 1319.202266][T16444] hsr_slave_1: entered promiscuous mode [ 1319.208643][T16444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1319.216626][T16446] Bluetooth: hci4: command tx timeout [ 1319.222835][T16444] Cannot create hsr debugfs directory [ 1319.235066][T16498] team0: Port device team_slave_1 added [ 1319.302399][T16498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.310154][T16498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.337494][T16498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.363382][T16503] chnl_net:caif_netlink_parms(): no params data found [ 1319.397005][T16498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.404476][T16498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.430912][T16498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.671202][T16498] hsr_slave_0: entered promiscuous mode [ 1319.678036][T16498] hsr_slave_1: entered promiscuous mode [ 1319.686298][T16498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1319.694252][T16498] Cannot create hsr debugfs directory [ 1319.946712][ T6206] bridge_slave_1: left allmulticast mode [ 1319.953164][ T6206] bridge_slave_1: left promiscuous mode [ 1319.974037][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.983406][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x3 [ 1319.994057][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.002232][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.003298][ T6206] bridge_slave_0: left allmulticast mode [ 1320.010215][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.022781][ T6206] bridge_slave_0: left promiscuous mode [ 1320.024178][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.029803][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.037619][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.052633][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.060744][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.068966][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.076995][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.084950][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.093369][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.102131][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.110629][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.121131][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.129118][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.137564][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.145711][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.161618][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.169745][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.177872][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.186220][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.194351][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.206168][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.214228][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.222413][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.231346][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.240207][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.248525][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.256453][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.264845][ T24] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 1320.297990][ T24] hid-generic 0000:007F:FFFFFFFE.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1320.391563][T16544] fido_id[16544]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1320.749752][T16446] Bluetooth: hci0: command tx timeout [ 1320.794770][ T6206] team0: Port device bridge1 removed [ 1321.111722][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1321.122994][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1321.135259][ T6206] bond0 (unregistering): Released all slaves [ 1321.164087][T16503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.172384][T16503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.180692][T16503] bridge_slave_0: entered allmulticast mode [ 1321.190719][T16503] bridge_slave_0: entered promiscuous mode [ 1321.201158][T16503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.208400][T16503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.216535][T16503] bridge_slave_1: entered allmulticast mode [ 1321.225387][T16503] bridge_slave_1: entered promiscuous mode [ 1321.354970][T16446] Bluetooth: hci1: command tx timeout [ 1321.362482][ T6206] tipc: Left network mode [ 1321.435002][T16446] Bluetooth: hci4: command tx timeout [ 1321.715302][T16503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.753702][T16503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.798205][T16510] chnl_net:caif_netlink_parms(): no params data found [ 1322.304468][T13556] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1322.321362][T13556] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1322.333307][T13556] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1322.345221][T13556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1322.355537][T13556] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1322.391658][T16503] team0: Port device team_slave_0 added [ 1322.658345][T16503] team0: Port device team_slave_1 added [ 1322.990159][ T6206] hsr_slave_0: left promiscuous mode [ 1323.009513][ T6206] hsr_slave_1: left promiscuous mode [ 1323.017198][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1323.024673][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1323.048815][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1323.056296][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.065855][ T6206] [ 1323.068280][ T6206] ====================================================== [ 1323.075618][ T6206] WARNING: possible circular locking dependency detected [ 1323.082641][ T6206] 6.16.0-syzkaller #0 Not tainted [ 1323.087667][ T6206] ------------------------------------------------------ [ 1323.094696][ T6206] kworker/u8:17/6206 is trying to acquire lock: [ 1323.100949][ T6206] ffff888079c84e00 (team->team_lock_key#12){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 1323.111212][ T6206] [ 1323.111212][ T6206] but task is already holding lock: [ 1323.118602][ T6206] ffff888021abad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2320 [ 1323.130368][ T6206] [ 1323.130368][ T6206] which lock already depends on the new lock. [ 1323.130368][ T6206] [ 1323.140894][ T6206] [ 1323.140894][ T6206] the existing dependency chain (in reverse order) is: [ 1323.150052][ T6206] [ 1323.150052][ T6206] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 1323.158528][ T6206] lock_acquire+0x120/0x360 [ 1323.163751][ T6206] __mutex_lock+0x182/0xe80 [ 1323.168800][ T6206] dev_set_mtu+0x10e/0x260 [ 1323.173758][ T6206] team_add_slave+0x8b8/0x2840 [ 1323.179080][ T6206] do_set_master+0x530/0x6d0 [ 1323.184286][ T6206] do_setlink+0xcf0/0x41c0 [ 1323.189233][ T6206] rtnl_newlink+0x160b/0x1c70 [ 1323.194504][ T6206] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1323.199996][ T6206] netlink_rcv_skb+0x205/0x470 [ 1323.205319][ T6206] netlink_unicast+0x75c/0x8e0 [ 1323.210691][ T6206] netlink_sendmsg+0x805/0xb30 [ 1323.215988][ T6206] __sock_sendmsg+0x21c/0x270 [ 1323.221281][ T6206] ____sys_sendmsg+0x505/0x830 [ 1323.226741][ T6206] ___sys_sendmsg+0x21f/0x2a0 [ 1323.232098][ T6206] __x64_sys_sendmsg+0x19b/0x260 [ 1323.237572][ T6206] do_syscall_64+0xfa/0x3b0 [ 1323.242633][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.249144][ T6206] [ 1323.249144][ T6206] -> #0 (team->team_lock_key#12){+.+.}-{4:4}: [ 1323.257424][ T6206] validate_chain+0xb9b/0x2140 [ 1323.262998][ T6206] __lock_acquire+0xab9/0xd20 [ 1323.268346][ T6206] lock_acquire+0x120/0x360 [ 1323.273474][ T6206] __mutex_lock+0x182/0xe80 [ 1323.278505][ T6206] team_device_event+0x182/0xa20 [ 1323.284503][ T6206] notifier_call_chain+0x1b3/0x3e0 [ 1323.290251][ T6206] dev_close_many+0x29c/0x410 [ 1323.295481][ T6206] unregister_netdevice_many_notify+0x619/0x2320 [ 1323.302352][ T6206] default_device_exit_batch+0x819/0x890 [ 1323.308620][ T6206] ops_undo_list+0x522/0x990 [ 1323.313823][ T6206] cleanup_net+0x4c5/0x800 [ 1323.318765][ T6206] process_scheduled_works+0xade/0x17b0 [ 1323.324840][ T6206] worker_thread+0x8a0/0xda0 [ 1323.329953][ T6206] kthread+0x70e/0x8a0 [ 1323.334720][ T6206] ret_from_fork+0x3fc/0x770 [ 1323.339851][ T6206] ret_from_fork_asm+0x1a/0x30 [ 1323.345230][ T6206] [ 1323.345230][ T6206] other info that might help us debug this: [ 1323.345230][ T6206] [ 1323.355508][ T6206] Possible unsafe locking scenario: [ 1323.355508][ T6206] [ 1323.362954][ T6206] CPU0 CPU1 [ 1323.368320][ T6206] ---- ---- [ 1323.373701][ T6206] lock(&dev_instance_lock_key#3); [ 1323.378919][ T6206] lock(team->team_lock_key#12); [ 1323.386484][ T6206] lock(&dev_instance_lock_key#3); [ 1323.394215][ T6206] lock(team->team_lock_key#12); [ 1323.399253][ T6206] [ 1323.399253][ T6206] *** DEADLOCK *** [ 1323.399253][ T6206] [ 1323.407406][ T6206] 5 locks held by kworker/u8:17/6206: [ 1323.412771][ T6206] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1323.423735][ T6206] #1: ffffc9000ac9fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1323.434715][ T6206] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1323.444516][ T6206] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 1323.454594][ T6206] #4: ffff888021abad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2320 [ 1323.466625][ T6206] [ 1323.466625][ T6206] stack backtrace: [ 1323.472511][ T6206] CPU: 1 UID: 0 PID: 6206 Comm: kworker/u8:17 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1323.472527][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1323.472537][ T6206] Workqueue: netns cleanup_net [ 1323.472556][ T6206] Call Trace: [ 1323.472562][ T6206] [ 1323.472569][ T6206] dump_stack_lvl+0x189/0x250 [ 1323.472586][ T6206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1323.472599][ T6206] ? __pfx__printk+0x10/0x10 [ 1323.472614][ T6206] ? print_lock_name+0xde/0x100 [ 1323.472628][ T6206] print_circular_bug+0x2ee/0x310 [ 1323.472644][ T6206] check_noncircular+0x134/0x160 [ 1323.472659][ T6206] validate_chain+0xb9b/0x2140 [ 1323.472673][ T6206] ? __lock_acquire+0xab9/0xd20 [ 1323.472687][ T6206] __lock_acquire+0xab9/0xd20 [ 1323.472699][ T6206] ? team_device_event+0x182/0xa20 [ 1323.472710][ T6206] lock_acquire+0x120/0x360 [ 1323.472720][ T6206] ? team_device_event+0x182/0xa20 [ 1323.472732][ T6206] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1323.472752][ T6206] __mutex_lock+0x182/0xe80 [ 1323.472765][ T6206] ? team_device_event+0x182/0xa20 [ 1323.472777][ T6206] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 1323.472792][ T6206] ? team_device_event+0x182/0xa20 [ 1323.472803][ T6206] ? __pfx___mutex_lock+0x10/0x10 [ 1323.472815][ T6206] ? __timer_delete_sync+0x218/0x2d0 [ 1323.472835][ T6206] team_device_event+0x182/0xa20 [ 1323.472847][ T6206] notifier_call_chain+0x1b3/0x3e0 [ 1323.472862][ T6206] dev_close_many+0x29c/0x410 [ 1323.472878][ T6206] ? __pfx_dev_close_many+0x10/0x10 [ 1323.472894][ T6206] unregister_netdevice_many_notify+0x619/0x2320 [ 1323.472909][ T6206] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1323.472923][ T6206] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1323.472934][ T6206] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1323.472950][ T6206] ? unregister_netdevice_queue+0x1b3/0x380 [ 1323.472964][ T6206] ? batadv_meshif_destroy_netlink+0x1dd/0x270 [ 1323.472981][ T6206] default_device_exit_batch+0x819/0x890 [ 1323.473001][ T6206] ? __pfx___might_resched+0x10/0x10 [ 1323.473014][ T6206] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1323.473030][ T6206] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1323.473044][ T6206] ? net_generic+0x1e/0x240 [ 1323.473059][ T6206] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1323.473074][ T6206] ops_undo_list+0x522/0x990 [ 1323.473092][ T6206] ? __pfx_ops_undo_list+0x10/0x10 [ 1323.473109][ T6206] cleanup_net+0x4c5/0x800 [ 1323.473125][ T6206] ? __pfx_cleanup_net+0x10/0x10 [ 1323.473141][ T6206] ? _raw_spin_unlock_irq+0x23/0x50 [ 1323.473151][ T6206] ? process_scheduled_works+0x9ef/0x17b0 [ 1323.473163][ T6206] ? process_scheduled_works+0x9ef/0x17b0 [ 1323.473176][ T6206] process_scheduled_works+0xade/0x17b0 [ 1323.473194][ T6206] ? __pfx_process_scheduled_works+0x10/0x10 [ 1323.473210][ T6206] worker_thread+0x8a0/0xda0 [ 1323.473235][ T6206] kthread+0x70e/0x8a0 [ 1323.473251][ T6206] ? __pfx_worker_thread+0x10/0x10 [ 1323.473263][ T6206] ? __pfx_kthread+0x10/0x10 [ 1323.473278][ T6206] ? _raw_spin_unlock_irq+0x23/0x50 [ 1323.473288][ T6206] ? lockdep_hardirqs_on+0x9c/0x150 [ 1323.473299][ T6206] ? __pfx_kthread+0x10/0x10 [ 1323.473313][ T6206] ret_from_fork+0x3fc/0x770 [ 1323.473325][ T6206] ? __pfx_ret_from_fork+0x10/0x10 [ 1323.473337][ T6206] ? __switch_to_asm+0x39/0x70 [ 1323.473350][ T6206] ? __switch_to_asm+0x33/0x70 [ 1323.473364][ T6206] ? __pfx_kthread+0x10/0x10 [ 1323.473377][ T6206] ret_from_fork_asm+0x1a/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1323.473396][ T6206] [ 1323.804779][T13556] Bluetooth: hci4: command tx timeout [ 1323.875370][ T6206] veth1_macvtap: left promiscuous mode [ 1323.881014][ T6206] veth0_macvtap: left promiscuous mode [ 1323.888033][ T6206] veth1_vlan: left promiscuous mode [ 1323.895989][ T6206] veth0_vlan: left promiscuous mode [ 1324.073206][ T6206] team0 (unregistering): Port device team_slave_1 removed [ 1324.088509][ T6206] team0 (unregistering): Port device team_slave_0 removed [ 1324.318571][ T6206] team0 (unregistering): Port device dummy0 removed [ 1324.367612][T16503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.375332][T16503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.401870][T16503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.597665][T13556] Bluetooth: hci3: command tx timeout [ 1325.124149][ T6206] IPVS: stop unused estimator thread 0... [ 1325.493003][ T6206] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.521335][ T6206] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.572651][ T6206] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.626526][ T6206] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.723829][ T6206] bridge_slave_1: left allmulticast mode [ 1325.730885][ T6206] bridge_slave_1: left promiscuous mode [ 1325.736661][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.745577][ T6206] bridge_slave_0: left allmulticast mode [ 1325.751259][ T6206] bridge_slave_0: left promiscuous mode [ 1325.757484][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.767656][ T6206] bridge_slave_1: left allmulticast mode [ 1325.774653][ T6206] bridge_slave_1: left promiscuous mode [ 1325.780628][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.789330][ T6206] bridge_slave_0: left allmulticast mode [ 1325.795377][ T6206] bridge_slave_0: left promiscuous mode [ 1325.801501][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.879546][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1325.890243][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1325.901259][ T6206] bond0 (unregistering): Released all slaves [ 1326.242378][ T6206] team0: Port device bond0 removed [ 1326.249094][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1326.259617][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1326.269606][ T6206] bond0 (unregistering): Released all slaves [ 1326.336525][ T6206] tipc: Left network mode [ 1326.670189][ T6206] hsr_slave_0: left promiscuous mode [ 1326.678416][ T6206] hsr_slave_1: left promiscuous mode [ 1326.684925][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.695674][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.705997][ T6206] hsr_slave_0: left promiscuous mode [ 1326.712017][ T6206] hsr_slave_1: left promiscuous mode [ 1326.731391][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.744761][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.753335][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.760945][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.771676][ T6206] veth1_vlan: left promiscuous mode [ 1326.777501][ T6206] veth0_vlan: left promiscuous mode [ 1326.957949][ T6206] team0 (unregistering): Port device team_slave_1 removed [ 1326.999842][ T6206] team0 (unregistering): Port device team_slave_0 removed [ 1327.136392][T12368] smc: removing ib device syz1 [ 1327.258028][ T6206] team0 (unregistering): Port device team_slave_1 removed [ 1327.276627][ T6206] team0 (unregistering): Port device team_slave_0 removed [ 1327.984359][ T6206] IPVS: stop unused estimator thread 0... [ 1328.031743][ T6206] bridge_slave_1: left allmulticast mode [ 1328.037448][ T6206] bridge_slave_1: left promiscuous mode [ 1328.046118][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.054268][ T6206] bridge_slave_0: left allmulticast mode [ 1328.059949][ T6206] bridge_slave_0: left promiscuous mode [ 1328.065949][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.075985][ T6206] bridge_slave_1: left allmulticast mode [ 1328.081758][ T6206] bridge_slave_1: left promiscuous mode [ 1328.088489][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.097420][ T6206] bridge_slave_0: left allmulticast mode [ 1328.103090][ T6206] bridge_slave_0: left promiscuous mode [ 1328.110287][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.197343][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.207582][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.218546][ T6206] bond0 (unregistering): Released all slaves [ 1328.272365][ T6206] bond0 (unregistering): Released all slaves [ 1328.337013][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.347386][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.358508][ T6206] bond0 (unregistering): Released all slaves [ 1328.598953][ T6206] hsr_slave_0: left promiscuous mode [ 1328.604857][ T6206] hsr_slave_1: left promiscuous mode [ 1328.611093][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.628250][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1328.636333][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.783155][ T6206] team0 (unregistering): Port device team_slave_1 removed [ 1328.824291][ T6206] team0 (unregistering): Port device team_slave_0 removed [ 1329.021189][ T6206] team0 (unregistering): Port device team_slave_1 removed [ 1329.061839][ T6206] team0 (unregistering): Port device team_slave_0 removed