last executing test programs: 24.062488025s ago: executing program 3 (id=102): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000002c0)=@generic={0x2, 0x4}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) iopl(0x3) r3 = getpid() mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000300)="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", 0xfe}, {&(0x7f0000000400)="681a2081d5004b465c37f501351902076f33f4e23e02a3a56301740a3bdb81c5e89bac15a71bb4c7ee9c4f3ad1bb83e12cc8784948324a0a30bf9150f4dbcb969e4ae8f1da0165cbe02695b0d94c180d35ab683735f139b368128831d95f967553475ab3775e5659f12f4af2234d563fcf979d9bf0225b0f94c66125671ded622a14e75ccc6d42c7abb385791cc3ddab1fe9b1fe2325db6d75b6ea53d2fbea3debea41a9762690726cbf", 0xaa}, {&(0x7f00000004c0)="b961a50fb0cbe1d040690c6aac4a2dadb1cf4c062a91be971833fd33c4333e4032d32e9986084fba225560c1dd4f5e1f2fea0b40beb6a279b3f73c58c238a965bc6e2c4e0b7007df39d8a4b7dd35df3def6910c704606c9d12ab8552fedcf5ccc39af6523453d8a18c5d3bd853c1012f18e1ef1af6e4ed7f8ecf8d6a3b21b08e171736e7e15132f0431258fceb77a5db28433af98f4274768770823d2a13c2635429d1ed29fb9c356e3b586ca9df4e3d3b00eaef68c09186d8fff0", 0xbb}, {&(0x7f0000000740)="193c0a9176e71b95dc239dbb3f65153fcfd0759ff37b2de28e54c519bc10944fdb7bb50447bfecd6951f5c04e1bacfda6db02bc3e5d2a5b4c4af6d14997dc8b6590a345360ce7567e8cd97884df0cb9a4aed41fa3816cc658967d68546ffc41f02a614f4e8415d9c25c48d141c8c7837701afe719822b1cb0be5516f3deb77158e1046377d308c7dcff0979310fed3ed64ee3623f1f7348e5acd31789b5305d2e9845e391d29c6", 0xa7}, {&(0x7f0000000580)="dcc3ea469a3d5bcf3b8e3f3b12de9cfd2c574727b0f06f62e83d628412fcf9947b9045a00aebaa6120a34d0be59c05058bbca5af104e24883e1bfe30e70bb8751bcbef67965253170956913a8c0fb0d50a2b9546e76e9a4b58844df2d0f882815ad1995b63285f319f25006d345dff5fe115923ba8590222e6ebccf86a52df", 0x7f}], 0x5, &(0x7f0000000680)="4269b40963490cbdf739880f299b1937ec7905400d7c89f31db7907e25f3bf081ee7ce80082f91e125cde1447cebcdf6e75e76e716a8f1fe9bb12a32af88032dfd9dbeca7f15c361d9e719a3728d2ab54f89815c21e46af5aa88df6e23977754e8fd5ef80a30715ff4bdd07a1193303df8d765a9dbb550108b5356cbbbf3772ac19fd0497b92e543b6474c124f67cd9eebab651e8265eb688b531f134865638c3861645982ea1916c11a885041ee2e07a3f664dcda", 0xb5, 0x24000044}, 0x4054) getresuid(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x181f, 0x401, 0xe2, 0x5, 0x2, 0x80000001, 0x1007, 0x800101, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000007, 0x1, 0x1, 0x6, 0x8, 0x40, 0x1, 0x9, 0x10c, 0x40004002, 0x2, 0x2000000a, 0x5, 0x1, 0xb0c0, 0xe, 0x400000ff, 0x400002, 0x4000004]}) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e24, 0x82, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}, 0x1c) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r7, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0xa00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.550146932s ago: executing program 0 (id=112): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xfffffffffffffffb, 0x2}) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f00000029c0), 0x400006d, 0x20000004) openat$kvm(0xffffffffffffff9c, 0x0, 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0xffffffffffff484d, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) syz_clone(0x2002000, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) 18.965073973s ago: executing program 3 (id=114): syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @random="a7d41414249a", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0xfffffffe, 0x3}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1e, &(0x7f00000000c0)=[{0x48, 0x37, 0xfc, 0x8}, {0x6, 0x6, 0x1, 0x57c}]}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) 17.105434311s ago: executing program 1 (id=115): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x20}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@allocspi={0x110, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@local, {0x3, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x2}, {0x4, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x4, 0x0, 0x90}, 0xc, 0xfffffffd}, [@migrate={0x4, 0x1b}, @coaddr={0x14, 0xe, @in=@rand_addr=0x64010100}]}, 0x110}}, 0x4808) 16.716294915s ago: executing program 3 (id=116): socket$inet(0x2, 0x3, 0x2) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x100000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x77e03000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020) 13.83460549s ago: executing program 3 (id=117): socket$inet(0x2, 0x3, 0x2) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x100000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$char_usb(r0, &(0x7f0000000100)=""/177, 0x39) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r5, &(0x7f0000001180)={0x2020}, 0x2020) 13.185214875s ago: executing program 0 (id=118): r0 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) shmdt(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x33d001) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000040)=""/84) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r3, 0x1000000, 0x4010, r4, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, 0x0}) capset(&(0x7f0000000140)={0x19980330, r5}, &(0x7f0000000180)={0x400, 0x7, 0x8, 0x8, 0x2, 0x1}) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f00000001c0)={0x4, 0x7}) unshare(0x50000000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x110) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000340)={0x1, 0x3, 0x1000, 0x2b, &(0x7f0000000240)="67e01e9e5f7bb6d9cdc88b5ecba51efca3806d14c80a772ea7cfd6f6189292dc012f9c20a682b6aa182a53", 0xa9, 0x0, &(0x7f0000000280)="1f723fe5447dc21525bd63222d2d7bedd518ee7af226d3a7fb15df84e2aef4d76f252c513bde386a8398a5178b965d9b2ac30d2aef08c0d19928f3069a85518842234f418a5df366cc12835b82c43131e3b75c83588720a2e7243db8f6fed3a58ecc3c3ca40eeb768bb46af0e7f998ebd29916002728c6b654e8e09733e8d34f3df6fc0f4864931ed40ce5cba846d9c993f9296cefca33b8d18d784e4b331e3e93b0242bcf46ae9102"}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4008001) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x125001, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000540)={"fa4a0fcfc93f9d0a759c17fa90abf0cd", 0x0, 0x0, {0x3, 0x149e4cfd}, {0x1, 0x40}, 0x7fff, [0x1, 0xcd6d, 0x80000000, 0x7fffffff, 0x9, 0x9, 0x8, 0x3, 0x7fffffff, 0x1, 0xf, 0x9, 0x3, 0x2, 0x10000000000000, 0x8000000000000001]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f00000006c0)={0x0, 0x7e, 0x0, [0x0, 0x6, 0x8, 0x3, 0x2], [0x2, 0x1, 0x1, 0x2, 0x9, 0xd101, 0xf, 0xffff, 0xcb, 0xffffffffffffff81, 0x5, 0xcb24, 0xfffffffffffffffb, 0xd, 0x1, 0x6, 0x5, 0x5, 0x80000001, 0x1b8, 0x4, 0x0, 0x1, 0x1, 0x8, 0x2, 0x0, 0xfffffffffffffffa, 0x6, 0x0, 0x7d06, 0xdd, 0x9, 0x5, 0x642f, 0x6, 0x100000001, 0x2, 0x1, 0x8000000000000000, 0x8000000000000001, 0x400, 0x87, 0x0, 0x98, 0x80000001, 0x6, 0x4, 0x8000000000000000, 0x2, 0x2535, 0x10, 0xffffffffffffffff, 0x25, 0x542, 0x7fff, 0xfffffffffffffff9, 0x100000000, 0x400, 0x24e, 0x3ff, 0xffffffffffff8001, 0x6, 0x7, 0xb40a4e1, 0x482, 0x9, 0x8000000000000000, 0x4, 0x0, 0xe, 0x1ff, 0x7, 0x81, 0x2, 0x3, 0x2, 0x9, 0x7, 0x4, 0x8, 0xff, 0x3, 0xd6f, 0x615d, 0x200, 0x2, 0x7, 0xbe4, 0x100000000, 0x4, 0x8, 0x1, 0x7fffffff, 0x7f, 0xe, 0xffffffff00000001, 0x10001, 0x100000000, 0x1ff, 0x100000000, 0x8, 0xffffffffffffffce, 0x0, 0x6, 0x1, 0x10, 0x9, 0x3, 0x2, 0x3, 0xa, 0x8001, 0x568, 0x40, 0x4, 0x4, 0x7, 0x9, 0x6, 0x40004000000]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000b00)={{r2}, r9, 0x8, @inherit={0x48, &(0x7f0000000640)={0x1, 0x0, 0x1, 0x3, {0x2, 0x4, 0x3, 0x2, 0xb}}}, @devid=r10}) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r2, 0x800c6f40, &(0x7f0000001b00)={""/4, 0x4}) clock_gettime(0x0, &(0x7f0000001b40)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001b80)={0x0, 0x0}) write$evdev(r2, &(0x7f0000001bc0)=[{{0x77359400}, 0x2, 0x2, 0x8}, {{0x0, 0xea60}, 0x1f, 0x9, 0x9}, {{r11, r12/1000+60000}, 0x5, 0x4, 0x81}, {{}, 0x5, 0x5, 0x7fff}, {{}, 0x2, 0x8, 0x80}, {{r13, r14/1000+60000}, 0x5, 0x7f, 0xfffffffb}], 0x90) r15 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001c80), 0x1b0000, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000001cc0)={r15}, 0x1) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r15, 0x84, 0x1e, &(0x7f0000001d00), &(0x7f0000001d40)=0x4) ioctl$VIDIOC_ENUM_FRAMESIZES(r15, 0xc02c564a, &(0x7f0000001d80)={0x4, 0x4f424752, 0x3, @stepwise={0x9, 0xf31, 0x1b, 0x1, 0x401, 0x1}}) socket$inet_smc(0x2b, 0x1, 0x0) 12.462352363s ago: executing program 4 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="000066646e6f3d54cf", @ANYRESHEX=r0, @ANYBLOB='q+']) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="54873607c1fd654f791b1b41b179d5628480dbd9c3208513807f536e771754f2b22e62daa111b6bc6dcdcd7aaa7f0250847dafddc695149c6bdf456b85a6239aa339df936142fa41432ad10ab4258a79fd691b631fae7860c0c2ce491fe16d548ce1c3528139c3b6a8", 0x69) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/42, 0x2a}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f0000000600)=""/238, 0xee}], 0x4}, 0x6914}, {{&(0x7f0000000740)=@caif=@rfm, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000007c0)=""/215, 0xd7}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/167, 0xa7}, {&(0x7f0000000a80)=""/251, 0xfb}, {&(0x7f0000000b80)=""/61, 0x3d}, {&(0x7f0000000bc0)=""/246, 0xf6}], 0x6, &(0x7f0000000d40)=""/191, 0xbf}, 0x10001}, {{&(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000e80)=""/42, 0x2a}, {&(0x7f0000000ec0)=""/199, 0xc7}], 0x2}, 0x8}, {{&(0x7f0000001000)=@nfc_llcp, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001080)=""/151, 0x97}, {&(0x7f0000001140)=""/95, 0x5f}, {&(0x7f00000011c0)=""/235, 0xeb}], 0x3}, 0x5}, {{&(0x7f0000001300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001380)=""/177, 0xb1}, {&(0x7f00000027c0)=""/94, 0x5e}], 0x2, &(0x7f0000002540)=""/49, 0x31}, 0x1}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002580)=""/30, 0x1e}], 0x1, &(0x7f0000002600)}, 0x4}], 0x6, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES64=r6, @ANYRES32=r4, @ANYRES32=0x41424344, @ANYBLOB="aa5c2634fd780018090300050a00000000000000000005d588380000"], 0x4a) sendmsg$NL80211_CMD_SET_STATION(r2, 0x0, 0x4000810) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) 11.967968916s ago: executing program 1 (id=123): chdir(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/102394, 0x18ffa}], 0x1, 0x0, 0x0) (fail_nth: 4) 11.729830357s ago: executing program 1 (id=124): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x0) listen(r1, 0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x6e22, 0x0, @loopback, 0x1}, 0x1c) 9.777935583s ago: executing program 2 (id=126): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000700)="c87b35043e70167a3e59c95cf2d2470a409aed8df615eda880680920e7ea2e4413084cba0ac21d664201fbe69bf2660ea3918ef0b6727862bbd91dfce9385577a868d3a94cbfd3756c4f", 0x4a}, {&(0x7f0000000300)="c071c346d7762184984cd6fc3bd9904a7df7f6f0cc0d7bf8e1359a106b1f25eb975e8b38ca101a0706ae6835", 0x2c}, {&(0x7f00000007c0)="e4e86ea4ab941009402773769eb1b04ad141f53294bf37a503b368ec7378ebb37de43aa11a211b4486253928fb4e4f8874d02cb4d8e961a9b6815ff9a2dec718f23e2b294767db301a17e9d6cd95d7f94a732e6a3c38750a53e71307f9fc58e26b1b9147df16e7b12720ed83999e722ea43c3f1b5b682f44ec468d762b1af6290f4bcd7fcc34e7facbf69dabcc4e95a7ac43f137e3a7d8bae77ad30928ac7aab8f3954ad4cb5430c93a4fd70f8ef79bbc8d44e9eda26d94c90354e", 0xbb}, {&(0x7f00000008c0)="96d2502e8c4241346fdc3fe5cee92278ad930f37caffe5853aaf307a54dbc2401f258383278cd81465da6006bf0e9fca4a645e7a170338ffda0e71555ad50ee0851a7e23c343e80a80696e0506ca8601cd8c75b2853fd821a0d92d4d6d39783a5a2b52c29ed15fe0c70a698e9a9d449df75692dd401991ce8398d5b1200f96486b0e945f82e8f195351587b2069eebd4108e37157a8cb58c6897ba7347", 0x9d}], 0x4}}], 0x1, 0x24044000) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000", 0x3b}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f", 0x10d}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a", 0xd1}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 9.777602502s ago: executing program 4 (id=127): socket$inet(0x2, 0x3, 0x2) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x100000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x77e03000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020) 7.827505084s ago: executing program 4 (id=128): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xfff8, 0x4, [0x6, 0x401, 0xfffc, 0x7]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000019300)={r1, @in6={{0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffe}}, 0x8b93, 0x800, 0xe, 0x9, 0x40, 0x7, 0xee}, 0x9c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0xb, &(0x7f0000000000)={0x4, 0xfffffffe, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1aa3491332a35e90, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 7.76927212s ago: executing program 0 (id=129): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x400006, 0x8}) 7.581867768s ago: executing program 0 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x44040) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x80000}) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r11 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r11, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) r12 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r12, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) 7.390020825s ago: executing program 1 (id=131): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x1, 0x1, @local}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.757591803s ago: executing program 3 (id=132): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) (fail_nth: 4) 4.352204539s ago: executing program 2 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfd, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x404c0d0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1, 0x45, 0x0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@remote, @bcast, @rose, @rose, @rose, @default, @remote, @netrom]}, &(0x7f00000000c0)=0x48, 0x80000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4, &(0x7f0000000000)=0x9, 0x8, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x210, 0x0, 0x0, [{{0x8, 0x0, 0x0, 0x400003, 0x5, 0x9, {0x6, 0x9, 0x0, 0x3, 0x4, 0x0, 0xffffffff, 0x59, 0x404, 0x1000, 0x3ff, r5, r6, 0x1, 0x5}}, {0x20000000000000, 0x537, 0x164, 0x0, ':-(\\N\f)\xfa\xd7%\x10\x9e\x04\x175\t\xc9\x80\x00\x00\t\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\b\x00\x00\x03\xf4/\xa5\xd2\xfd\\xfL\xa7N\xc8\xf1!gl\x17\x8c\xa5\xed\xdd\x80zv\xa8\xf9\xb93\x8bs\vtAl@\xe3\x93\xea\"\xbf\xb9y\xd3G (\xaf\x8d~h\x13W\xd3\x1b\x93\xe5\xc7\xc8:3\xdd4\x91;\x10g\xa7s\xact\xb9C\xfb\xe0\xb0]\xab\xed\x1b\x13\xdf5\xe1\x10\x96\xf8\xe6;\xdf\xbc\xfdP\x90%cq-\x0f[\xf6\n\x14\xf8\xf9\xd2^.[\xa8,-\v\xcb\xc9Q\xb4\xf7h\xf9$\xad\xd1/u\x9c\xc0\xa9\x01,5\x13{\xec\x19\xc4\xdf<\x80\xfc^\xe4\xb2\x91/N2k\x83\a\xc1w\x16\xefn\x1e\xf1\xe3\xd3\xe8Y\xc3\x86c\xc0\x86dL\x8e\x9d}L\xba\x83g\x84\xba]\x15\x96\x1e\xb8\x98\x94\x1dZ\xbf,B\x05j@S\x8f>7\vn\f\xef\xf6\xd8\xcb\x86XR\x85\x89\n\xca)(\t&\xdab\xa2\xf1/\xb6\xb5\x01\b\xdb\x04=\xfd\xe38\x0e\xebg\x82\xc7\xcc\xc73o\xf2\xcaN)%\x02\x8ajl\x90\xd91\x114{\xbb\xf1\xa3\xfc\x9e\x1eD\x17q\xd0T\xa7n\xba\x0f\xfc\xfa\xe7\xe6L\xb7[\x1a$\xdacZ\xc4+\"\x0f\xdfR\xcac\xff.\x9a\xfb\x9c\x16G\x02\xa6T\xb1\x10\xfe\xb48i\x97_\xe6\xed\x19`7-2L`\x81\xbcw\xff\x9d'}}]}, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', 'timers\x00'}) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000100)={0x3, @bcast, r5}) 4.31572866s ago: executing program 0 (id=134): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = openat$sysfs(0xffffff9c, 0x0, 0x42000, 0x10) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x80001, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvfrom(r3, 0x0, 0x0, 0x2040, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r5 = dup(0xffffffffffffffff) write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"a2e3ad204fc752f91b5d50f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x100f}}, 0x1006) syz_usb_control_io$hid(r4, 0x0, 0x0) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8, 0x0, 0x0, 0x4, 0x41000000, 0x0, 0x0, 0x1], [0x10000, 0x0, 0x3a7f7589, 0x0, 0x0, 0x0, 0x0, 0x80e1], [0x6, 0x0, 0x0, 0x3, 0x0, 0xffffffff]], '\x00', [{0x2, 0x3}, {}, {0x8}, {0x0, 0x1, 0x0, 0x1}, {0xc9}, {0x0, 0x8}, {0x80000001}, {0x72}, {0x40003}, {}, {0x0, 0xac}, {0x0, 0x4}]}) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00228b000000024001a0c2"], 0x0}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r6, 0x3b66, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xd1, 0x55, &(0x7f0000000380)="2ab78b566d38eb1ce673937736edcac54b90e2f7f350f5c99d6ccfda06f75a1c1a5c1c35b3996eaf06e625f7059d36f767fd0e4a642df43c458951272824f4376d6ef9b2eaa4b01c4db4bfdee595a70a6b473c8b78b0e4dd3a81830617306f230987383d2021674bf8ae62f8d00b0fe689a210f14c4b2f9b5ffe4bd17dfa707ee6c26bcaee0b6813b63d7581b962ab7638c95f76ff5c92a873cd0d1ea1d6a8e8538bf2f48b2656e2aaa1b101fe902a03129c0f3e4d06412dc0290ae999c3057174f0dbbae355acb0c8e260869179f85ca3", &(0x7f0000000480)=""/85, 0x0, 0x0, 0x37, 0x3e, &(0x7f0000000040)="6211b7a54f19a5646134e2f5dd206c69a827013cb18ea78f079f7cec88b1be167837e400a6d7164f37e4dacbd4d5e50bea85982f0a059e", &(0x7f0000000500)="994e78fee85389f81078a60c8d6cc34fa44ec4137ac3ba36da279b1de109c069ade30b4531bcbd007a3b3e35cc3def2125a4f29f3ae0c63aeb26ac970717", 0x4, 0x0, 0xac3}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$FUSE_STATX(r7, &(0x7f0000000200)={0x130, 0xfffffffffffffffe, 0x0, {0xc3d5, 0x200, 0x0, '\x00', {0x10800, 0x800, 0x3, 0x3, 0x0, 0x0, 0xc000, '\x00', 0x2, 0xb3, 0x7, 0x200, {0xa, 0x1}, {0x0, 0x1}, {0x89, 0x3}, {0x4}, 0x3, 0x5, 0x4, 0x3}}}, 0x130) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0x0, 0x1}) fcntl$getownex(r7, 0x10, &(0x7f00000005c0)={0x0, 0x0}) sched_setscheduler(r8, 0x5, &(0x7f0000000600)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000000)=0xfe, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x401, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x6}}, 0xcb4a, 0x99e6}, &(0x7f0000000080)=0x90) 3.885207289s ago: executing program 2 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xe, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) (fail_nth: 4) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 3.496321239s ago: executing program 2 (id=136): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x12, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) 3.181796805s ago: executing program 4 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001100)=[{{&(0x7f0000000400)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/175, 0xaf}, {&(0x7f0000000580)=""/112, 0x70}, {&(0x7f0000000700)=""/159, 0x9f}, {&(0x7f00000007c0)=""/89, 0x59}, {&(0x7f0000000480)=""/3, 0x3}, {&(0x7f0000000840)=""/109, 0x6d}, {&(0x7f00000008c0)=""/59, 0x3b}, {&(0x7f0000000900)=""/247, 0xf7}], 0x8, &(0x7f00000036c0)=""/4096, 0x1000}, 0x39}, {{&(0x7f0000000a80)=@alg, 0x80, &(0x7f0000000c80)=[{&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/160, 0xa0}, {&(0x7f0000000bc0)=""/75, 0x4b}, {&(0x7f0000000c40)=""/59, 0x3b}], 0x4, &(0x7f0000000cc0)=""/90, 0x5a}, 0xc2}, {{&(0x7f0000000d40)=@x25, 0x80, &(0x7f0000000f40)=[{&(0x7f00000056c0)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/171, 0xab}, {&(0x7f0000000e80)=""/161, 0xa1}], 0x3, &(0x7f0000000f80)=""/86, 0x56}, 0x7803}, {{&(0x7f0000001000)=@tipc=@id, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001080)=""/60, 0x3c}], 0x1}, 0x8001}], 0x4, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(r0, &(0x7f0000000080)='smaps\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ff0f0000000000009500000000000015cb350cd654cdfeaf21043b5a00"/45], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8007ff}, 0x94) request_key(&(0x7f0000000140)='id_legacy\x00', 0x0, 0x0, 0xfffffffffffffffe) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000000)) setregid(0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f0000000600)=0x1, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000001200)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40841) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 2.801390572s ago: executing program 1 (id=138): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)=ANY=[]) 2.433993273s ago: executing program 1 (id=139): socket$inet(0x2, 0x3, 0x2) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x100000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x77e03000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020) 2.026982992s ago: executing program 2 (id=140): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x8001020, r1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.026210621s ago: executing program 4 (id=141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x6e22, 0x0, @loopback, 0x1}, 0x1c) 945.826639ms ago: executing program 0 (id=142): socket$inet(0x2, 0x3, 0x2) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x100000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$char_usb(r0, &(0x7f0000000100)=""/177, 0x39) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r5, &(0x7f0000001180)={0x2020}, 0x2020) 566.386036ms ago: executing program 4 (id=143): io_uring_setup(0x4520, &(0x7f0000000380)={0x0, 0xdca4, 0x2000, 0x2, 0x2e6}) rename(&(0x7f0000000900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, 0x0, 0xfe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x4008032, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x44040) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x80000}) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r9, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r11 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r11, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) r12 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r12, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 82.290607][ T5782] cgroup: Unknown subsys name 'net' [ 82.531482][ T5782] cgroup: Unknown subsys name 'cpuset' [ 82.577273][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.459993][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.803069][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.838493][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.841375][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.842117][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.843119][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.843747][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.851181][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.870893][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.873532][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.873554][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.913638][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.916094][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.920653][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.931700][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.934079][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.954190][ T982] cfg80211: failed to load regulatory.db [ 87.006663][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.007754][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.010325][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.011023][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.014950][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.015518][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.026976][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.028090][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.028789][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.059004][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.831245][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 88.020547][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 88.027243][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 88.080954][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 88.094866][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 88.260860][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.261889][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.262220][ T5804] bridge_slave_0: entered allmulticast mode [ 88.263857][ T5804] bridge_slave_0: entered promiscuous mode [ 88.317308][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.317385][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.317506][ T5804] bridge_slave_1: entered allmulticast mode [ 88.319061][ T5804] bridge_slave_1: entered promiscuous mode [ 88.493226][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.493482][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.493701][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.494247][ T5795] bridge_slave_0: entered allmulticast mode [ 88.497673][ T5795] bridge_slave_0: entered promiscuous mode [ 88.500999][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.501121][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.501621][ T5796] bridge_slave_0: entered allmulticast mode [ 88.504308][ T5796] bridge_slave_0: entered promiscuous mode [ 88.560885][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.561126][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.561280][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.561391][ T5795] bridge_slave_1: entered allmulticast mode [ 88.562939][ T5795] bridge_slave_1: entered promiscuous mode [ 88.566217][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.576440][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.576653][ T5796] bridge_slave_1: entered allmulticast mode [ 88.598098][ T5796] bridge_slave_1: entered promiscuous mode [ 88.631570][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.631690][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.631804][ T5806] bridge_slave_0: entered allmulticast mode [ 88.633385][ T5806] bridge_slave_0: entered promiscuous mode [ 88.663835][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.663984][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.664131][ T5808] bridge_slave_0: entered allmulticast mode [ 88.665735][ T5808] bridge_slave_0: entered promiscuous mode [ 88.718293][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.718385][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.718489][ T5806] bridge_slave_1: entered allmulticast mode [ 88.720119][ T5806] bridge_slave_1: entered promiscuous mode [ 88.721189][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.721285][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.721578][ T5808] bridge_slave_1: entered allmulticast mode [ 88.723162][ T5808] bridge_slave_1: entered promiscuous mode [ 88.854380][ T5804] team0: Port device team_slave_0 added [ 88.864310][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.871275][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.906227][ T5804] team0: Port device team_slave_1 added [ 88.914275][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.917431][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.921097][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.924556][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.978953][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.981243][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.997983][ T5799] Bluetooth: hci2: command tx timeout [ 88.998119][ T5799] Bluetooth: hci0: command tx timeout [ 88.998194][ T5799] Bluetooth: hci1: command tx timeout [ 89.060217][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.060231][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.060246][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.063784][ T5795] team0: Port device team_slave_0 added [ 89.077943][ T61] Bluetooth: hci3: command tx timeout [ 89.096840][ T5796] team0: Port device team_slave_0 added [ 89.143428][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.143446][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.143473][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.147972][ T5795] team0: Port device team_slave_1 added [ 89.150935][ T5796] team0: Port device team_slave_1 added [ 89.154083][ T5806] team0: Port device team_slave_0 added [ 89.156514][ T61] Bluetooth: hci4: command tx timeout [ 89.159134][ T5808] team0: Port device team_slave_0 added [ 89.219333][ T5806] team0: Port device team_slave_1 added [ 89.223212][ T5808] team0: Port device team_slave_1 added [ 89.290665][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.290679][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.290694][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.292248][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.292258][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.292272][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.368668][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.368687][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.368710][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.370137][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.370148][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.370170][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.371383][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.371394][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.371415][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.374095][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.374108][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.374129][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.411806][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.411824][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.411847][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.426893][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.426910][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.426933][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.439138][ T5804] hsr_slave_0: entered promiscuous mode [ 89.440764][ T5804] hsr_slave_1: entered promiscuous mode [ 89.644527][ T5795] hsr_slave_0: entered promiscuous mode [ 89.645830][ T5795] hsr_slave_1: entered promiscuous mode [ 89.647742][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 89.647846][ T5795] Cannot create hsr debugfs directory [ 89.689267][ T5796] hsr_slave_0: entered promiscuous mode [ 89.690114][ T5796] hsr_slave_1: entered promiscuous mode [ 89.690749][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 89.690770][ T5796] Cannot create hsr debugfs directory [ 89.733916][ T5808] hsr_slave_0: entered promiscuous mode [ 89.734776][ T5808] hsr_slave_1: entered promiscuous mode [ 89.735370][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 89.735392][ T5808] Cannot create hsr debugfs directory [ 89.749930][ T5806] hsr_slave_0: entered promiscuous mode [ 89.751283][ T5806] hsr_slave_1: entered promiscuous mode [ 89.752194][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 89.752216][ T5806] Cannot create hsr debugfs directory [ 91.077399][ T61] Bluetooth: hci1: command tx timeout [ 91.077433][ T61] Bluetooth: hci0: command tx timeout [ 91.077453][ T61] Bluetooth: hci2: command tx timeout [ 91.131860][ T5804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.157314][ T5799] Bluetooth: hci3: command tx timeout [ 91.182730][ T5804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.214235][ T5804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.237230][ T5799] Bluetooth: hci4: command tx timeout [ 91.269478][ T5804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.379162][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.411841][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.440794][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.500200][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.627950][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.664287][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.707371][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.769183][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.901080][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.946991][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.002383][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.047004][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.208013][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.254627][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.254912][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.298116][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.335193][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.444003][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.485923][ T1469] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.494420][ T1469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.518824][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.544915][ T816] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.545063][ T816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.626670][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.629408][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.671695][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.671862][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.711922][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.712105][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.740633][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.760524][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.784799][ T816] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.784949][ T816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.833649][ T1469] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.838480][ T1469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.915890][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.965640][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.975077][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.977307][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.020649][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.020800][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.130703][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.157461][ T5799] Bluetooth: hci2: command tx timeout [ 93.157941][ T61] Bluetooth: hci0: command tx timeout [ 93.157955][ T5115] Bluetooth: hci1: command tx timeout [ 93.214444][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.214982][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.236512][ T5799] Bluetooth: hci3: command tx timeout [ 93.281154][ T1823] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.281339][ T1823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.316503][ T5799] Bluetooth: hci4: command tx timeout [ 93.380614][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.617769][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.841493][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.951072][ T5795] veth0_vlan: entered promiscuous mode [ 94.029679][ T5795] veth1_vlan: entered promiscuous mode [ 94.120547][ T5796] veth0_vlan: entered promiscuous mode [ 94.158435][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.190588][ T5796] veth1_vlan: entered promiscuous mode [ 94.224621][ T5795] veth0_macvtap: entered promiscuous mode [ 94.260421][ T5795] veth1_macvtap: entered promiscuous mode [ 94.301982][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.340565][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.369811][ T5796] veth0_macvtap: entered promiscuous mode [ 94.378345][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.412259][ T5796] veth1_macvtap: entered promiscuous mode [ 94.429030][ T5808] veth0_vlan: entered promiscuous mode [ 94.432493][ T1024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.439572][ T5804] veth0_vlan: entered promiscuous mode [ 94.442010][ T1024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.458932][ T1024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.476002][ T1024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.492339][ T5808] veth1_vlan: entered promiscuous mode [ 94.550846][ T5804] veth1_vlan: entered promiscuous mode [ 94.622020][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.699327][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.719020][ T5806] veth0_vlan: entered promiscuous mode [ 94.748534][ T1469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.768822][ T1469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.785921][ T1469] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.807349][ T5806] veth1_vlan: entered promiscuous mode [ 94.808387][ T1469] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.904598][ T5808] veth0_macvtap: entered promiscuous mode [ 94.914207][ T1469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.914231][ T1469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.981994][ T5808] veth1_macvtap: entered promiscuous mode [ 95.005488][ T5804] veth0_macvtap: entered promiscuous mode [ 95.119072][ T5804] veth1_macvtap: entered promiscuous mode [ 95.142030][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.142055][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.172099][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.229584][ T5806] veth0_macvtap: entered promiscuous mode [ 95.236521][ T5115] Bluetooth: hci1: command tx timeout [ 95.236567][ T5799] Bluetooth: hci2: command tx timeout [ 95.241419][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.244326][ T5799] Bluetooth: hci0: command tx timeout [ 95.251892][ T1823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.251911][ T1823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.273516][ T5806] veth1_macvtap: entered promiscuous mode [ 95.291344][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.316515][ T5799] Bluetooth: hci3: command tx timeout [ 95.323031][ T816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.341057][ T816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.368690][ T816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.379215][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.396464][ T5799] Bluetooth: hci4: command tx timeout [ 95.400325][ T816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.422924][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.422947][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.488459][ T1823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.493363][ T1469] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.528709][ T1469] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.540000][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.559271][ T1469] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.583864][ T5912] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.630202][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.843412][ T1823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.855491][ T1823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.904288][ T1823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.944351][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.274612][ T1823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.274633][ T1823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.475449][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.475472][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.576665][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.576690][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.656227][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.656251][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.916642][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.916666][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.178446][ T1469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.178470][ T1469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.836338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.836605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.990614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.996373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.000621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.006337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.016332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.026332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.036341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.046346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.403105][ T5929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 100.905187][ T5933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 108.472795][ T37] audit: type=1326 audit(1771418016.462:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5987 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e20c629 code=0x7ffc0000 [ 108.472852][ T37] audit: type=1326 audit(1771418016.462:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5987 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e20c629 code=0x7ffc0000 [ 108.472893][ T37] audit: type=1326 audit(1771418016.462:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5987 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a4e20c629 code=0x7ffc0000 [ 108.472933][ T37] audit: type=1326 audit(1771418016.462:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5987 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e20c629 code=0x7ffc0000 [ 108.472970][ T37] audit: type=1326 audit(1771418016.462:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5987 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e20c629 code=0x7ffc0000 [ 108.473010][ T37] audit: type=1326 audit(1771418016.462:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5987 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e20c629 code=0x7ffc0000 [ 108.473052][ T37] audit: type=1326 audit(1771418016.472:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5987 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e20c629 code=0x7ffc0000 [ 108.473092][ T37] audit: type=1326 audit(1771418016.472:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5987 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e20c629 code=0x7ffc0000 [ 108.473134][ T37] audit: type=1326 audit(1771418016.472:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5987 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a4e20c629 code=0x7ffc0000 [ 108.473174][ T37] audit: type=1326 audit(1771418016.472:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5987 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e20c629 code=0x7ffc0000 [ 109.091869][ T917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.092090][ T36] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.805957][ T917] usb 4-1: Using ep0 maxpacket: 8 [ 109.834467][ T917] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.834504][ T917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 109.834532][ T917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 109.876518][ T917] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 109.876549][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.876570][ T917] usb 4-1: Product: syz [ 109.876585][ T917] usb 4-1: Manufacturer: syz [ 109.876598][ T917] usb 4-1: SerialNumber: syz [ 109.936712][ T36] usb 2-1: unable to get BOS descriptor or descriptor too short [ 109.942478][ T36] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 109.942505][ T36] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.942593][ T36] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.987719][ T36] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.987750][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.987769][ T36] usb 2-1: Product: syz [ 109.987783][ T36] usb 2-1: Manufacturer: syz [ 109.987798][ T36] usb 2-1: SerialNumber: syz [ 110.051156][ T917] usb 4-1: config 0 descriptor?? [ 110.163601][ T6007] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.731816][ T5800] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.906494][ T917] rc_core: IR keymap rc-streamzap not found [ 112.906516][ T917] Registered IR keymap rc-empty [ 113.506750][ T5800] usb 3-1: Using ep0 maxpacket: 16 [ 113.511217][ T5800] usb 3-1: device descriptor read/all, error -71 [ 113.542189][ T917] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 113.779640][ T917] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 115.546699][ T36] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 115.546758][ T36] cdc_ncm 2-1:1.0: bind() failure [ 117.839207][ T36] cdc_ncm 2-1:1.1: skipping garbage [ 117.840251][ T36] cdc_ncm 2-1:1.1: invalid descriptor buffer length [ 117.840272][ T36] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 117.840318][ T36] cdc_ncm 2-1:1.1: bind() failure [ 117.895159][ T917] usb 4-1: USB disconnect, device number 2 [ 117.956218][ T36] usb 2-1: USB disconnect, device number 2 [ 121.301916][ T6053] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 124.586417][ T5874] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.746505][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 124.748993][ T5874] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 124.749039][ T5874] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 124.749095][ T5874] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 124.749123][ T5874] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 124.749148][ T5874] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.752241][ T5874] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 124.752271][ T5874] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 124.752292][ T5874] usb 3-1: Product: syz [ 124.752307][ T5874] usb 3-1: Manufacturer: syz [ 124.752321][ T5874] usb 3-1: SerialNumber: syz [ 124.774108][ T5874] usb 3-1: config 0 descriptor?? [ 124.779287][ T5874] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 124.928326][ T5874] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 125.024900][ T36] usb 3-1: USB disconnect, device number 4 [ 126.053989][ T5784] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 126.072608][ T36] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 126.212335][ T5784] usb 5-1: not running at top speed; connect to a high speed hub [ 128.314940][ T5784] usb 5-1: config 7 has an invalid interface number: 99 but max is 1 [ 128.314974][ T5784] usb 5-1: config 7 has an invalid interface number: 240 but max is 1 [ 128.314995][ T5784] usb 5-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 128.315013][ T5784] usb 5-1: config 7 has no interface number 0 [ 128.315028][ T5784] usb 5-1: config 7 has no interface number 1 [ 128.315102][ T5784] usb 5-1: config 7 interface 99 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 128.315122][ T5784] usb 5-1: config 7 interface 99 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 128.315143][ T5784] usb 5-1: config 7 interface 99 altsetting 13 endpoint 0xB has invalid maxpacket 1999, setting to 64 [ 128.315169][ T5784] usb 5-1: config 7 interface 99 altsetting 13 has a duplicate endpoint with address 0x9, skipping [ 128.315190][ T5784] usb 5-1: config 7 interface 99 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 128.315212][ T5784] usb 5-1: config 7 interface 99 altsetting 13 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 128.315253][ T5784] usb 5-1: config 7 interface 240 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 128.315280][ T5784] usb 5-1: config 7 interface 99 has no altsetting 0 [ 128.315297][ T5784] usb 5-1: config 7 interface 240 has no altsetting 0 [ 128.418307][ T5784] usb 5-1: New USB device found, idVendor=17cc, idProduct=0839, bcdDevice=91.cb [ 128.418341][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.418361][ T5784] usb 5-1: Product: 㢛툵獤 [ 128.418385][ T5784] usb 5-1: Manufacturer: 뎢맔Ẅ봥龂飅裫喝ᕒ쁳鲀䈽䧛맔羛롽㑘ᒌ挙碹᭖烟ϊ瘒ŏ覩뜏跴ƾ䑗乬㋧㺱퍟ﰞ있덩뷘㋹췢謨ᒊṶ츌❑喭탫⿫裃成숳Ⱪ믒ⅾᓅ巤亴齲㜎䕣僫딮ᫀ炫ꡩᾑ䫏繆≤ᘭq縘▐䠙횾塊龃遪ۧ䐻牟ﲹ헻ᑤ쮬浺㱊蘚啢켹괕澝ꄈ점ᒴ】芜⬶懵粊ꞿ榷㕥⻒졯䌻줳鳃矔ꝵ軷禀虇 [ 128.418417][ T5784] usb 5-1: SerialNumber: 䬊뉗薟桻晙䠒 [ 128.547504][ T6077] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 128.828882][ T5784] snd-usb-caiaq 5-1:7.99: can't set alt interface. [ 128.828909][ T5784] usb 5-1: unable to init card! (ret=-5) [ 128.834405][ T5784] snd-usb-caiaq 5-1:7.99: probe with driver snd-usb-caiaq failed with error -5 [ 129.191100][ T917] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.938458][ T5784] snd-usb-caiaq 5-1:7.240: can't set alt interface. [ 129.938483][ T5784] usb 5-1: unable to init card! (ret=-5) [ 129.939011][ T5784] snd-usb-caiaq 5-1:7.240: probe with driver snd-usb-caiaq failed with error -5 [ 129.996835][ T5784] usb 5-1: USB disconnect, device number 2 [ 130.186610][ T917] usb 3-1: Using ep0 maxpacket: 8 [ 130.190801][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.190837][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.190877][ T917] usb 3-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 130.190900][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.197979][ T917] usb 3-1: config 0 descriptor?? [ 130.446521][ T6099] capability: warning: `syz.0.50' uses deprecated v2 capabilities in a way that may be insecure [ 130.827897][ T917] usbhid 3-1:0.0: can't add hid device: -71 [ 130.828036][ T917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 130.873285][ T917] usb 3-1: USB disconnect, device number 5 [ 132.556530][ T6113] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 132.916480][ T5115] Bluetooth: hci4: command 0x0405 tx timeout [ 133.148634][ T6117] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.190688][ T6117] dvmrp0: entered allmulticast mode [ 133.205267][ T6116] dvmrp0: left allmulticast mode [ 133.455481][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.455584][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.464374][ T6134] netlink: 988 bytes leftover after parsing attributes in process `syz.1.61'. [ 134.749290][ T5800] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.166384][ T5800] usb 3-1: Using ep0 maxpacket: 32 [ 135.171186][ T5800] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 135.171217][ T5800] usb 3-1: config 0 has no interface number 0 [ 135.171279][ T5800] usb 3-1: config 0 interface 184 has no altsetting 0 [ 136.006610][ T6146] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 136.127449][ T5800] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 136.127483][ T5800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.127502][ T5800] usb 3-1: Product: syz [ 136.127516][ T5800] usb 3-1: Manufacturer: syz [ 136.127530][ T5800] usb 3-1: SerialNumber: syz [ 137.141344][ T5800] usb 3-1: config 0 descriptor?? [ 137.539166][ T5800] usb 3-1: can't set config #0, error -71 [ 137.604838][ T5800] usb 3-1: USB disconnect, device number 6 [ 138.069690][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.73'. [ 138.069888][ T6171] netlink: 'syz.3.73': attribute type 7 has an invalid length. [ 138.069904][ T6171] netlink: 'syz.3.73': attribute type 8 has an invalid length. [ 138.069917][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 138.138524][ T5784] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.156582][ T5874] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.886392][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 139.900615][ T5874] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 139.900636][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.908807][ T5784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.908844][ T5784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.908867][ T5784] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.908912][ T5784] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.908937][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.916058][ T5874] usb 1-1: config 0 descriptor?? [ 139.919750][ T5874] gspca_main: sq930x-2.14.0 probing 041e:403c [ 140.146733][ T5874] gspca_sq930x: reg_r 001f failed -32 [ 140.146850][ T5874] sq930x 1-1:0.0: probe with driver sq930x failed with error -32 [ 140.279311][ T6169] netlink: 'syz.0.72': attribute type 2 has an invalid length. [ 140.279334][ T6169] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 140.388022][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.498533][ T5784] usb 2-1: config 0 descriptor?? [ 140.500683][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.556073][ T5874] usb 1-1: USB disconnect, device number 2 [ 140.670113][ T6187] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 140.797992][ T6189] team0: Port device syz_tun added [ 140.968298][ T5784] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 140.968369][ T5784] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 140.968388][ T5784] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 140.968434][ T5784] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 140.968448][ T5784] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 140.968463][ T5784] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 140.968485][ T5784] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 140.968499][ T5784] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 140.987345][ T10] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 141.038726][ T5784] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 141.146402][ T10] usb 4-1: device descriptor read/64, error -71 [ 141.256935][ T6196] FAULT_INJECTION: forcing a failure. [ 141.256935][ T6196] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 141.256971][ T6196] CPU: 1 UID: 0 PID: 6196 Comm: syz.0.81 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 141.256993][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.257004][ T6196] Call Trace: [ 141.257012][ T6196] [ 141.257021][ T6196] dump_stack_lvl+0xe8/0x150 [ 141.257057][ T6196] should_fail_ex+0x46b/0x600 [ 141.257087][ T6196] _copy_from_iter+0x1d3/0x1670 [ 141.257117][ T6196] ? rcu_is_watching+0x15/0xb0 [ 141.257154][ T6196] ? __pfx__copy_from_iter+0x10/0x10 [ 141.257180][ T6196] ? __build_skb_around+0x22d/0x3c0 [ 141.257212][ T6196] ? __alloc_skb+0x193/0x390 [ 141.257241][ T6196] ? netlink_sendmsg+0x650/0xb40 [ 141.257276][ T6196] ? skb_put+0x11b/0x210 [ 141.257308][ T6196] netlink_sendmsg+0x6c0/0xb40 [ 141.257343][ T6196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.257375][ T6196] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.257401][ T6196] ____sys_sendmsg+0xa4e/0xac0 [ 141.257420][ T6196] ? __might_fault+0xaf/0x130 [ 141.257461][ T6196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.257495][ T6196] ? import_iovec+0x73/0xa0 [ 141.257523][ T6196] ___sys_sendmsg+0x2a5/0x360 [ 141.257542][ T6196] ? __lock_acquire+0x6b5/0x2cf0 [ 141.257572][ T6196] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.257631][ T6196] ? __fget_files+0x2a/0x420 [ 141.257658][ T6196] ? __fget_files+0x3a6/0x420 [ 141.257696][ T6196] __x64_sys_sendmsg+0x1c3/0x2a0 [ 141.257720][ T6196] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.257751][ T6196] ? __pfx_ksys_write+0x10/0x10 [ 141.257785][ T6196] do_syscall_64+0x14d/0xf80 [ 141.257811][ T6196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.257831][ T6196] ? trace_irq_disable+0x37/0x100 [ 141.257849][ T6196] ? clear_bhb_loop+0x40/0x90 [ 141.257874][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.257895][ T6196] RIP: 0033:0x7f25d2a5c629 [ 141.257915][ T6196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.257931][ T6196] RSP: 002b:00007f25d0cb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.257955][ T6196] RAX: ffffffffffffffda RBX: 00007f25d2cd5fa0 RCX: 00007f25d2a5c629 [ 141.257970][ T6196] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 141.257984][ T6196] RBP: 00007f25d0cb6090 R08: 0000000000000000 R09: 0000000000000000 [ 141.257997][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.258008][ T6196] R13: 00007f25d2cd6038 R14: 00007f25d2cd5fa0 R15: 00007fffb96c2fe8 [ 141.258042][ T6196] [ 141.264812][ T5784] usb 2-1: USB disconnect, device number 3 [ 141.473815][ T10] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 141.601982][ T6198] Illegal XDP return value 4294967274 on prog (id 8) dev N/A, expect packet loss! [ 141.628020][ T10] usb 4-1: device descriptor read/64, error -71 [ 142.031560][ T10] usb usb4-port1: attempt power cycle [ 142.689133][ T6203] FAULT_INJECTION: forcing a failure. [ 142.689133][ T6203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.689170][ T6203] CPU: 0 UID: 0 PID: 6203 Comm: syz.0.85 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.689193][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.689204][ T6203] Call Trace: [ 142.689212][ T6203] [ 142.689221][ T6203] dump_stack_lvl+0xe8/0x150 [ 142.689253][ T6203] should_fail_ex+0x46b/0x600 [ 142.689284][ T6203] _copy_from_user+0x2d/0xb0 [ 142.689311][ T6203] copy_from_sockptr+0x48/0x70 [ 142.689336][ T6203] ip_mroute_setsockopt+0x6ff/0xff0 [ 142.689357][ T6203] ? get_pid_task+0x20/0x1f0 [ 142.689393][ T6203] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 142.689415][ T6203] ? get_pid_task+0x20/0x1f0 [ 142.689442][ T6203] ? get_pid_task+0x20/0x1f0 [ 142.689467][ T6203] ? get_pid_task+0x20/0x1f0 [ 142.689513][ T6203] do_ip_setsockopt+0xf1e/0x2ea0 [ 142.689543][ T6203] ? vfs_write+0x9cb/0xba0 [ 142.689577][ T6203] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 142.689606][ T6203] ? __pfx_vfs_write+0x10/0x10 [ 142.689628][ T6203] ? do_sys_openat2+0x14c/0x200 [ 142.689652][ T6203] ? kmem_cache_free+0x185/0x690 [ 142.689674][ T6203] ? do_sys_openat2+0x14c/0x200 [ 142.689714][ T6203] ip_setsockopt+0x66/0x110 [ 142.689741][ T6203] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 142.689770][ T6203] do_sock_setsockopt+0x17c/0x1b0 [ 142.689803][ T6203] __x64_sys_setsockopt+0x143/0x1b0 [ 142.689836][ T6203] do_syscall_64+0x14d/0xf80 [ 142.689861][ T6203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.689881][ T6203] ? clear_bhb_loop+0x40/0x90 [ 142.689904][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.689923][ T6203] RIP: 0033:0x7f25d2a5c629 [ 142.689942][ T6203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.689958][ T6203] RSP: 002b:00007f25d0c95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.689980][ T6203] RAX: ffffffffffffffda RBX: 00007f25d2cd6090 RCX: 00007f25d2a5c629 [ 142.689995][ T6203] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000008 [ 142.690007][ T6203] RBP: 00007f25d0c95090 R08: 0000000000000010 R09: 0000000000000000 [ 142.690019][ T6203] R10: 0000200000003d80 R11: 0000000000000246 R12: 0000000000000001 [ 142.690032][ T6203] R13: 00007f25d2cd6128 R14: 00007f25d2cd6090 R15: 00007fffb96c2fe8 [ 142.690067][ T6203] [ 142.699247][ T6204] syz_tun: entered allmulticast mode [ 142.700675][ T6204] syz_tun: left allmulticast mode [ 142.736236][ T6194] fido_id[6194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 143.094929][ T10] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 143.113744][ T10] usb 4-1: device descriptor read/8, error -71 [ 143.563533][ T6212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.87'. [ 143.566799][ T10] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 143.603385][ T10] usb 4-1: device descriptor read/8, error -71 [ 143.769903][ T10] usb usb4-port1: unable to enumerate USB device [ 144.277214][ T6223] tmpfs: Unknown parameter 'grpquota_hardlimit' [ 144.576742][ T6228] syz.0.93 uses obsolete (PF_INET,SOCK_PACKET) [ 144.711975][ T6231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.95'. [ 147.197348][ T6254] comedi comedi2: reset error (fatal) [ 148.910537][ T6271] FAULT_INJECTION: forcing a failure. [ 148.910537][ T6271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.910575][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.0.108 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.910599][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.910611][ T6271] Call Trace: [ 148.910620][ T6271] [ 148.910629][ T6271] dump_stack_lvl+0xe8/0x150 [ 148.910665][ T6271] should_fail_ex+0x46b/0x600 [ 148.910697][ T6271] _copy_to_user+0x31/0xb0 [ 148.910729][ T6271] simple_read_from_buffer+0xe1/0x170 [ 148.910762][ T6271] proc_fail_nth_read+0x1be/0x230 [ 148.910789][ T6271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.910815][ T6271] ? rw_verify_area+0x2ac/0x4e0 [ 148.910846][ T6271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.910871][ T6271] vfs_read+0x212/0xa70 [ 148.910901][ T6271] ? __pfx_vfs_read+0x10/0x10 [ 148.910924][ T6271] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 148.910953][ T6271] ? lockdep_hardirqs_on+0x7a/0x110 [ 148.910980][ T6271] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 148.911007][ T6271] ? mutex_lock_nested+0x152/0x1d0 [ 148.911027][ T6271] ? fdget_pos+0x252/0x320 [ 148.911065][ T6271] ksys_read+0x156/0x270 [ 148.911089][ T6271] ? __pfx_ksys_read+0x10/0x10 [ 148.911108][ T6271] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 148.911149][ T6271] do_syscall_64+0x14d/0xf80 [ 148.911185][ T6271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.911205][ T6271] ? trace_irq_disable+0x37/0x100 [ 148.911223][ T6271] ? clear_bhb_loop+0x40/0x90 [ 148.911249][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.911269][ T6271] RIP: 0033:0x7f25d2a1cece [ 148.911288][ T6271] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 148.911305][ T6271] RSP: 002b:00007f25d0cb5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.911328][ T6271] RAX: ffffffffffffffda RBX: 00007f25d0cb66c0 RCX: 00007f25d2a1cece [ 148.911343][ T6271] RDX: 000000000000000f RSI: 00007f25d0cb60a0 RDI: 0000000000000004 [ 148.911356][ T6271] RBP: 00007f25d0cb6090 R08: 0000000000000000 R09: 0000000000000000 [ 148.911369][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.911381][ T6271] R13: 00007f25d2cd6038 R14: 00007f25d2cd5fa0 R15: 00007fffb96c2fe8 [ 148.911416][ T6271] [ 149.050453][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.106'. [ 149.449806][ T6276] Zero length message leads to an empty skb [ 157.356459][ T5800] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.518937][ T5800] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.518967][ T5800] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 157.519023][ T5800] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 157.519048][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.525260][ T5800] usb 3-1: config 0 descriptor?? [ 157.774728][ T5800] Bluetooth: Can't get state to change to load ram patch err [ 157.774749][ T5800] Bluetooth: Loading patch file failed [ 157.774790][ T5800] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 157.808673][ T5800] usb 3-1: USB disconnect, device number 7 [ 157.824519][ T6306] 9pnet_fd: Insufficient options for proto=fd [ 158.099768][ T6310] netlink: 9 bytes leftover after parsing attributes in process `syz.4.122'. [ 158.100027][ T6310] 0: renamed from hsr_slave_1 (while UP) [ 158.202096][ T6310] 0: entered allmulticast mode [ 158.202857][ T6310] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 158.236150][ T6313] FAULT_INJECTION: forcing a failure. [ 158.236150][ T6313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.236187][ T6313] CPU: 0 UID: 0 PID: 6313 Comm: syz.1.123 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.236210][ T6313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.236222][ T6313] Call Trace: [ 158.236230][ T6313] [ 158.236244][ T6313] dump_stack_lvl+0xe8/0x150 [ 158.236278][ T6313] should_fail_ex+0x46b/0x600 [ 158.236308][ T6313] _copy_to_user+0x31/0xb0 [ 158.236338][ T6313] rng_dev_read+0x3ec/0x7a0 [ 158.236371][ T6313] ? __pfx_rng_dev_read+0x10/0x10 [ 158.236402][ T6313] ? __lock_acquire+0x6b5/0x2cf0 [ 158.236437][ T6313] ? rw_verify_area+0x2ac/0x4e0 [ 158.236474][ T6313] vfs_readv+0x594/0x850 [ 158.236501][ T6313] ? __pfx_rng_dev_read+0x10/0x10 [ 158.236531][ T6313] ? __pfx_vfs_readv+0x10/0x10 [ 158.236570][ T6313] ? __fget_files+0x2a/0x420 [ 158.236600][ T6313] ? __fget_files+0x3a6/0x420 [ 158.236624][ T6313] ? __fget_files+0x2a/0x420 [ 158.236660][ T6313] __x64_sys_preadv+0x1a2/0x2b0 [ 158.236686][ T6313] ? __pfx___x64_sys_preadv+0x10/0x10 [ 158.236721][ T6313] do_syscall_64+0x14d/0xf80 [ 158.236748][ T6313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.236768][ T6313] ? trace_irq_disable+0x37/0x100 [ 158.236786][ T6313] ? clear_bhb_loop+0x40/0x90 [ 158.236812][ T6313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.236832][ T6313] RIP: 0033:0x7fb0aaf5c629 [ 158.236851][ T6313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.236868][ T6313] RSP: 002b:00007fb0a91b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 158.236892][ T6313] RAX: ffffffffffffffda RBX: 00007fb0ab1d5fa0 RCX: 00007fb0aaf5c629 [ 158.236908][ T6313] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 158.236921][ T6313] RBP: 00007fb0a91b6090 R08: 0000000000000000 R09: 0000000000000000 [ 158.236934][ T6313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.236946][ T6313] R13: 00007fb0ab1d6038 R14: 00007fb0ab1d5fa0 R15: 00007fff3397b5a8 [ 158.236980][ T6313] [ 158.667637][ T6318] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.681561][ T6325] capability: warning: `syz.0.118' uses 32-bit capabilities (legacy support in use) [ 162.808904][ T6333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.130'. [ 163.075908][ T6337] 9p: Bad value for 'rfdno' [ 165.999738][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 166.000405][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 166.262417][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 166.262641][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 166.275373][ T6357] FAULT_INJECTION: forcing a failure. [ 166.275373][ T6357] name failslab, interval 1, probability 0, space 0, times 1 [ 166.275411][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.2.135 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 166.275434][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.275446][ T6357] Call Trace: [ 166.275455][ T6357] [ 166.275464][ T6357] dump_stack_lvl+0xe8/0x150 [ 166.275498][ T6357] should_fail_ex+0x46b/0x600 [ 166.275529][ T6357] should_failslab+0xa8/0x100 [ 166.275555][ T6357] __kvmalloc_node_noprof+0x170/0x8e0 [ 166.275581][ T6357] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 166.275617][ T6357] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 166.275645][ T6357] ? do_raw_spin_lock+0x12b/0x2f0 [ 166.275684][ T6357] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 166.275712][ T6357] ? lockdep_hardirqs_on+0x7a/0x110 [ 166.275738][ T6357] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 166.275764][ T6357] ? rt_mutex_slowunlock+0x1cb/0x300 [ 166.275786][ T6357] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 166.275811][ T6357] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 166.275862][ T6357] ? 0xffffffffa02019d8 [ 166.275910][ T6357] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 166.275950][ T6357] ? _copy_from_user+0x94/0xb0 [ 166.275980][ T6357] ? bpf_test_init+0x113/0x150 [ 166.276003][ T6357] ? xdp_convert_md_to_buff+0x5b/0x330 [ 166.276032][ T6357] bpf_prog_test_run_xdp+0x81c/0x1160 [ 166.276075][ T6357] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 166.276117][ T6357] ? __fget_files+0x2a/0x420 [ 166.276156][ T6357] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 166.276184][ T6357] bpf_prog_test_run+0x2cd/0x340 [ 166.276210][ T6357] __sys_bpf+0x643/0x950 [ 166.276243][ T6357] ? __pfx___sys_bpf+0x10/0x10 [ 166.276268][ T6357] ? rt_mutex_slowunlock+0x1cb/0x300 [ 166.276305][ T6357] ? ksys_write+0x248/0x270 [ 166.276328][ T6357] ? __pfx_ksys_write+0x10/0x10 [ 166.276355][ T6357] __x64_sys_bpf+0x7c/0x90 [ 166.276383][ T6357] do_syscall_64+0x14d/0xf80 [ 166.276409][ T6357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.276428][ T6357] ? trace_irq_disable+0x37/0x100 [ 166.276446][ T6357] ? clear_bhb_loop+0x40/0x90 [ 166.276471][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.276490][ T6357] RIP: 0033:0x7f6a4e20c629 [ 166.276509][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.276526][ T6357] RSP: 002b:00007f6a4c45e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.276548][ T6357] RAX: ffffffffffffffda RBX: 00007f6a4e485fa0 RCX: 00007f6a4e20c629 [ 166.276563][ T6357] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 166.276576][ T6357] RBP: 00007f6a4c45e090 R08: 0000000000000000 R09: 0000000000000000 [ 166.276589][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.276602][ T6357] R13: 00007f6a4e486038 R14: 00007f6a4e485fa0 R15: 00007ffe19cee488 [ 166.276636][ T6357] [ 166.416428][ T5784] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 166.752459][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.752497][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.752519][ T5784] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.752565][ T5784] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.752588][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.768448][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 166.768652][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 166.787911][ T6351] ceph: No mds server is up or the cluster is laggy [ 166.835510][ T5784] usb 1-1: config 0 descriptor?? [ 167.279985][ T5784] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 167.280098][ T5784] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 167.280125][ T5784] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 167.280202][ T5784] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 167.280226][ T5784] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 167.280249][ T5784] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 167.280272][ T5784] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 167.280297][ T5784] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 167.364561][ T5784] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 167.489380][ T6366] ======================================================= [ 167.489380][ T6366] WARNING: The mand mount option has been deprecated and [ 167.489380][ T6366] and is ignored by this kernel. Remove the mand [ 167.489380][ T6366] option from the mount to silence this warning. [ 167.489380][ T6366] ======================================================= [ 167.514800][ T6014] usb 1-1: USB disconnect, device number 3 [ 167.743395][ T6365] fido_id[6365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 167.879643][ T6371] FAULT_INJECTION: forcing a failure. [ 167.879643][ T6371] name failslab, interval 1, probability 0, space 0, times 0 [ 167.879682][ T6371] CPU: 0 UID: 0 PID: 6371 Comm: syz.3.132 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 167.879706][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.879718][ T6371] Call Trace: [ 167.879731][ T6371] [ 167.879741][ T6371] dump_stack_lvl+0xe8/0x150 [ 167.879778][ T6371] should_fail_ex+0x46b/0x600 [ 167.879810][ T6371] should_failslab+0xa8/0x100 [ 167.879837][ T6371] __kmalloc_cache_noprof+0x84/0x690 [ 167.879862][ T6371] ? once_disable_jump+0x52/0x1a0 [ 167.879895][ T6371] once_disable_jump+0x52/0x1a0 [ 167.879927][ T6371] inet6_ehashfn+0x56a/0x5a0 [ 167.879963][ T6371] ? __pfx_inet6_ehashfn+0x10/0x10 [ 167.880007][ T6371] __inet6_lookup_established+0xe0/0xc60 [ 167.880034][ T6371] ? unwind_next_frame+0xa5/0x23c0 [ 167.880081][ T6371] ? __lock_acquire+0x6b5/0x2cf0 [ 167.880112][ T6371] ? __lock_acquire+0x6b5/0x2cf0 [ 167.880144][ T6371] ? __pfx___inet6_lookup_established+0x10/0x10 [ 167.880169][ T6371] ? __netif_receive_skb_core+0x2a0c/0x30a0 [ 167.880210][ T6371] tcp_v6_early_demux+0x458/0x980 [ 167.880249][ T6371] ip6_rcv_finish_core+0x32d/0x420 [ 167.880278][ T6371] ip6_rcv_finish+0x141/0x2e0 [ 167.880306][ T6371] NF_HOOK+0x336/0x3c0 [ 167.880328][ T6371] ? skb_orphan+0x4f/0xd0 [ 167.880361][ T6371] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 167.880383][ T6371] ? NF_HOOK+0x9e/0x3c0 [ 167.880405][ T6371] ? __pfx_NF_HOOK+0x10/0x10 [ 167.880431][ T6371] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 167.880462][ T6371] ? netif_receive_skb+0x102/0xbb0 [ 167.880491][ T6371] netif_receive_skb+0x278/0xbb0 [ 167.880523][ T6371] ? __pfx_netif_receive_skb+0x10/0x10 [ 167.880548][ T6371] ? rcu_is_watching+0x15/0xb0 [ 167.880575][ T6371] ? __local_bh_disable_ip+0x3c/0x420 [ 167.880603][ T6371] ? tun_rx_batched+0x191/0x760 [ 167.880625][ T6371] ? tun_rx_batched+0x191/0x760 [ 167.880651][ T6371] tun_rx_batched+0x1ee/0x760 [ 167.880682][ T6371] ? __pfx_tun_rx_batched+0x10/0x10 [ 167.880717][ T6371] ? tun_get_user+0x2669/0x3de0 [ 167.880741][ T6371] ? tun_get_user+0x2669/0x3de0 [ 167.880768][ T6371] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 167.880794][ T6371] ? lockdep_hardirqs_on+0x7a/0x110 [ 167.880825][ T6371] ? tun_get_user+0x2669/0x3de0 [ 167.880846][ T6371] tun_get_user+0x2a88/0x3de0 [ 167.880891][ T6371] ? __lock_acquire+0x6b5/0x2cf0 [ 167.880920][ T6371] ? __pfx_tun_get_user+0x10/0x10 [ 167.880946][ T6371] ? __lock_acquire+0x6b5/0x2cf0 [ 167.880991][ T6371] ? ref_tracker_alloc+0x339/0x4b0 [ 167.881014][ T6371] ? get_pid_task+0x20/0x1f0 [ 167.881046][ T6371] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 167.881073][ T6371] ? tun_get+0x1c/0x2f0 [ 167.881096][ T6371] ? tun_get+0x1c/0x2f0 [ 167.881124][ T6371] ? tun_get+0x1c/0x2f0 [ 167.881145][ T6371] ? tun_get+0x1c/0x2f0 [ 167.881173][ T6371] tun_chr_write_iter+0x119/0x200 [ 167.881200][ T6371] vfs_write+0x629/0xba0 [ 167.881231][ T6371] ? __pfx_vfs_write+0x10/0x10 [ 167.881265][ T6371] ? __fget_files+0x2a/0x420 [ 167.881305][ T6371] ksys_write+0x156/0x270 [ 167.881329][ T6371] ? __pfx_ksys_write+0x10/0x10 [ 167.881372][ T6371] do_syscall_64+0x14d/0xf80 [ 167.881399][ T6371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.881419][ T6371] ? trace_irq_disable+0x37/0x100 [ 167.881436][ T6371] ? clear_bhb_loop+0x40/0x90 [ 167.881463][ T6371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.881482][ T6371] RIP: 0033:0x7efdf19bcece [ 167.881502][ T6371] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.881518][ T6371] RSP: 002b:00007efdefc34fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.881541][ T6371] RAX: ffffffffffffffda RBX: 00007efdefc356c0 RCX: 00007efdf19bcece [ 167.881556][ T6371] RDX: 000000000000004e RSI: 0000200000000600 RDI: 00000000000000c8 [ 167.881569][ T6371] RBP: 00007efdefc35090 R08: 0000000000000000 R09: 0000000000000000 [ 167.881581][ T6371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.881593][ T6371] R13: 00007efdf1c76128 R14: 00007efdf1c76090 R15: 00007ffe47185158 [ 167.881630][ T6371] [ 168.971956][ T6379] process 'syz.2.140' launched '/dev/fd/4' with NULL argv: empty string added [ 169.939319][ T6385] netlink: 'syz.4.143': attribute type 27 has an invalid length. [ 170.486280][ C0] ------------[ cut here ]------------ [ 170.486297][ C0] refcount_t: underflow; use-after-free. [ 170.486304][ C0] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xb2/0x110, CPU#0: ktimers/0/16 [ 170.486350][ C0] Modules linked in: [ 170.486369][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.486392][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.486404][ C0] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 170.486433][ C0] Code: c4 b7 be 0a 67 48 0f b9 3a eb 4a e8 a8 88 2e fd 48 8d 3d c1 b7 be 0a 67 48 0f b9 3a eb 37 e8 95 88 2e fd 48 8d 3d be b7 be 0a <67> 48 0f b9 3a eb 24 e8 82 88 2e fd 48 8d 3d bb b7 be 0a 67 48 0f [ 170.486448][ C0] RSP: 0018:ffffc90000157948 EFLAGS: 00010246 [ 170.486465][ C0] RAX: ffffffff84948ceb RBX: 0000000000000003 RCX: ffff88801cad8000 [ 170.486479][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffffff8f5344b0 [ 170.486492][ C0] RBP: 0000000000000000 R08: ffff88801cad8000 R09: 0000000000000005 [ 170.486505][ C0] R10: 0000000000000100 R11: 0000000000000004 R12: ffff888039a0c070 [ 170.486518][ C0] R13: ffffc9000007a680 R14: ffff888039a0c080 R15: 000000007d4e4301 [ 170.486533][ C0] FS: 0000000000000000(0000) GS:ffff888126595000(0000) knlGS:0000000000000000 [ 170.486551][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.486566][ C0] CR2: 00007fb0aafa9d40 CR3: 000000000d9ba000 CR4: 00000000003526f0 [ 170.486586][ C0] Call Trace: [ 170.486594][ C0] [ 170.486604][ C0] __inet_csk_reqsk_queue_drop+0x657/0x700 [ 170.486640][ C0] reqsk_timer_handler+0x79a/0x1200 [ 170.486681][ C0] call_timer_fn+0x192/0x5a0 [ 170.486711][ C0] ? __pfx_reqsk_timer_handler+0x10/0x10 [ 170.486737][ C0] ? call_timer_fn+0xd4/0x5a0 [ 170.486764][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 170.486805][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 170.486832][ C0] ? __pfx_reqsk_timer_handler+0x10/0x10 [ 170.486863][ C0] __run_timer_base+0x6a3/0x9f0 [ 170.486909][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 170.486940][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 170.486968][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 170.487002][ C0] run_timer_softirq+0x67/0x170 [ 170.487030][ C0] handle_softirqs+0x1de/0x640 [ 170.487067][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 170.487093][ C0] run_ktimerd+0x69/0x100 [ 170.487130][ C0] smpboot_thread_fn+0x541/0xa50 [ 170.487160][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 170.487198][ C0] kthread+0x388/0x470 [ 170.487229][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 170.487255][ C0] ? __pfx_kthread+0x10/0x10 [ 170.487287][ C0] ret_from_fork+0x51e/0xb90 [ 170.487317][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 170.487341][ C0] ? __switch_to+0xc7d/0x1400 [ 170.487368][ C0] ? __pfx_kthread+0x10/0x10 [ 170.487400][ C0] ret_from_fork_asm+0x1a/0x30 [ 170.487453][ C0] [ 170.487464][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 170.487479][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.487502][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.487513][ C0] Call Trace: [ 170.487521][ C0] [ 170.487530][ C0] vpanic+0x1e0/0x670 [ 170.487564][ C0] panic+0xc5/0xd0 [ 170.487593][ C0] ? __pfx_panic+0x10/0x10 [ 170.487634][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 170.487672][ C0] __warn+0x315/0x4a0 [ 170.487699][ C0] ? refcount_warn_saturate+0xb2/0x110 [ 170.487730][ C0] ? refcount_warn_saturate+0xb2/0x110 [ 170.487759][ C0] __report_bug+0x29a/0x540 [ 170.487795][ C0] ? refcount_warn_saturate+0xb2/0x110 [ 170.487824][ C0] ? __pfx___report_bug+0x10/0x10 [ 170.487847][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 170.487887][ C0] ? refcount_warn_saturate+0xb7/0x110 [ 170.487926][ C0] report_bug_entry+0x19a/0x290 [ 170.487953][ C0] ? refcount_warn_saturate+0xb2/0x110 [ 170.487980][ C0] ? refcount_warn_saturate+0xb7/0x110 [ 170.488007][ C0] handle_bug+0xca/0x200 [ 170.488039][ C0] exc_invalid_op+0x1a/0x50 [ 170.488069][ C0] asm_exc_invalid_op+0x1a/0x20 [ 170.488089][ C0] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 170.488125][ C0] Code: c4 b7 be 0a 67 48 0f b9 3a eb 4a e8 a8 88 2e fd 48 8d 3d c1 b7 be 0a 67 48 0f b9 3a eb 37 e8 95 88 2e fd 48 8d 3d be b7 be 0a <67> 48 0f b9 3a eb 24 e8 82 88 2e fd 48 8d 3d bb b7 be 0a 67 48 0f [ 170.488140][ C0] RSP: 0018:ffffc90000157948 EFLAGS: 00010246 [ 170.488159][ C0] RAX: ffffffff84948ceb RBX: 0000000000000003 RCX: ffff88801cad8000 [ 170.488174][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffffff8f5344b0 [ 170.488187][ C0] RBP: 0000000000000000 R08: ffff88801cad8000 R09: 0000000000000005 [ 170.488201][ C0] R10: 0000000000000100 R11: 0000000000000004 R12: ffff888039a0c070 [ 170.488214][ C0] R13: ffffc9000007a680 R14: ffff888039a0c080 R15: 000000007d4e4301 [ 170.488239][ C0] ? refcount_warn_saturate+0xab/0x110 [ 170.488273][ C0] ? refcount_warn_saturate+0xab/0x110 [ 170.488301][ C0] __inet_csk_reqsk_queue_drop+0x657/0x700 [ 170.488335][ C0] reqsk_timer_handler+0x79a/0x1200 [ 170.488376][ C0] call_timer_fn+0x192/0x5a0 [ 170.488405][ C0] ? __pfx_reqsk_timer_handler+0x10/0x10 [ 170.488432][ C0] ? call_timer_fn+0xd4/0x5a0 [ 170.488459][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 170.488502][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 170.488528][ C0] ? __pfx_reqsk_timer_handler+0x10/0x10 [ 170.488559][ C0] __run_timer_base+0x6a3/0x9f0 [ 170.488605][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 170.488639][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 170.488666][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 170.488700][ C0] run_timer_softirq+0x67/0x170 [ 170.488729][ C0] handle_softirqs+0x1de/0x640 [ 170.488762][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 170.488785][ C0] run_ktimerd+0x69/0x100 [ 170.488812][ C0] smpboot_thread_fn+0x541/0xa50 [ 170.488841][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 170.488879][ C0] kthread+0x388/0x470 [ 170.488909][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 170.488935][ C0] ? __pfx_kthread+0x10/0x10 [ 170.488966][ C0] ret_from_fork+0x51e/0xb90 [ 170.488996][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 170.489021][ C0] ? __switch_to+0xc7d/0x1400 [ 170.489049][ C0] ? __pfx_kthread+0x10/0x10 [ 170.489081][ C0] ret_from_fork_asm+0x1a/0x30 [ 170.489139][ C0] [ 170.489542][ C0] Kernel Offset: disabled