last executing test programs: 2m39.381628025s ago: executing program 1 (id=886): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_GET_FPEXC(0xb, 0x0) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abfe0055acc8ef039a5be42200000000000000000100", 0x38}, 0x60) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r3 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffff0, 0xb, 0x5}}}}]}, 0x40}}, 0x4000010) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r10, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abfe0055acc8ef039a5be42200000000000000000100", 0x38}, 0x60) r11 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$TIOCGWINSZ(r11, 0x5413, &(0x7f0000000000)) 2m38.281715084s ago: executing program 1 (id=889): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bc0910008000000055090100000001569500000000000000180100002020702500000000002020207baaf8ff00000000bda100000102000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b5020000000000008500000005000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 2m37.935888153s ago: executing program 1 (id=891): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r5, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000280)=0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r7 = memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futimesat(r7, 0x0, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) mlock2(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x400006, 0x0, 0x9, '\x00', '\x00', '\x00', 0x0, 0x81, 0x3, 0xba, "b6855a32474f04ed0000ddcffbffffff"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 2m34.12401161s ago: executing program 1 (id=904): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x70bd28, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x200000000000000) 2m32.21670394s ago: executing program 1 (id=911): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) r4 = syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) io_uring_enter(r4, 0x2def, 0xb80c, 0x4e, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, 0x500}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4004890) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 2m31.980652582s ago: executing program 1 (id=912): setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clock_gettime(0x0, 0x0) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, 0x2710}}, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sync() sendfile(r3, r1, 0x0, 0x40008) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r6, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) 2m15.755309829s ago: executing program 32 (id=912): setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clock_gettime(0x0, 0x0) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, 0x2710}}, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sync() sendfile(r3, r1, 0x0, 0x40008) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r6, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) 2m14.284429906s ago: executing program 0 (id=949): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r6, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) (async) r7 = fsmount(r1, 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f00000000c0), 0x39b, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r9, 0x6a98047402e98331, 0x70bd2e, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2804c040}, 0x4886) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r9, 0x6a98047402e98331, 0x70bd2e, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2804c040}, 0x4886) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x0, 0x989680}, 0x1) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) (async) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000e0000611089000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 2m13.358624892s ago: executing program 0 (id=952): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f00000000c0)=""/24, 0x18, 0x0, &(0x7f0000000100)=""/114, 0x72}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x4, 0x4, 0x38, @mcast1, @mcast1, 0x1, 0x7, 0xb9, 0x9}}) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', r4, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x85}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000080)=0x7) ptrace$cont(0x9, r0, 0x8cb9, 0x4e0) 2m11.804038723s ago: executing program 0 (id=956): r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$netlink(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_REQ_SET_REG(r4, 0x0, 0x24044004) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0200020000000008000400010000", 0x23) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020026dd7000fd0101000000000000029900c50e00004d000000"], 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x80) sendto$inet(r0, 0x0, 0x0, 0x800, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0xff, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) sendmmsg(r7, &(0x7f0000004dc0)=[{{&(0x7f00000003c0)=@xdp={0x2c, 0x4, 0x0, 0x15}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001500)="0644c70615344fa6491bc72618069ea7d0fa51a607d6ee7d7ba544925eb4412394f5bd0eb49ef6a806cc85c5485992e354e0fce5dfb1eb0966558737953aa4c887f7fef774103591eb9a073c1f98a59f7a6696b2725d83cd9573afc031b67761245611d485f57b81f4e831a18162713240d510b542235f561b9e1ed090b4e6e107", 0x81}], 0x1}}], 0x1, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r8 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='user\x00', &(0x7f0000001980)='\xc9$#\xf1\xfe\xb8V\x00\xe9Ps\xfe\xf7\x80\xa2\xb2\xec\';iId\xd2\x1e\xe2g/\xc9\xba\x1d\xc9o9\x89]\xfe \x04\x13\xf0^Kc\rQQ\xf6\x81\'\xf6VM%\x9a\xb3\xeb\xcd;\x99{\xa4\x89/\x80j\x8d\x94\xb7\x89\x11\xc2\b\xb2\xc2\xa1\xaa\x1fQ\xb8\xc9\xc0\xbf\x9f\xf0\a\x04xb;\xc4dQ\x01S\xab\x95H\xadIK\xde\xd7\xaf\xcf\x11\xc2\x0eH\ni\xc1_\xf0\x91_1Z\xca\x7f\xcdn\x85\x83K\xac\xae0Q\x7fr\xe6v\xa2|\xcc\xf1(\xf0\xc1\xa6o\xa2\x87#F\x9d\xb2\x0f\x90\xa6!\x99\x0e\xd9\xa8U\xa5\xe1\x85\xcd&B\x90\xfb\x83\xa1\x1a\xd4[\x05S\xebm\xb3\xef\x19K\x16Gp,\xf2\x82D=', 0x0) 2m7.800321612s ago: executing program 0 (id=961): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0)) r1 = memfd_secret(0x80000) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={@private2, 0x34, r2}) 2m7.45402529s ago: executing program 0 (id=964): statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x7ff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x230802d, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@dfltuid={'dfltuid', 0x3d, r0}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '[['}}, {@dont_measure}]}}) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x11, r2, 0x80000000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000240), 0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x110, r4, 0x57fd9000) pselect6(0x40, &(0x7f0000000280)={0xff, 0x3, 0x88, 0x100, 0x2, 0x37, 0x4, 0x7}, &(0x7f00000002c0)={0x4, 0x3, 0xfffffffffffffff9, 0x7, 0x1ff, 0x7f, 0x2, 0x7}, &(0x7f0000000300)={0x4, 0x8000000000000000, 0x7, 0x4, 0x8000000000000001, 0xf35, 0x4, 0x1}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) io_setup(0x5, &(0x7f0000000400)=0x0) io_pgetevents(r5, 0x3, 0x4, &(0x7f0000000440)=[{}, {}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x8]}, 0x8}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000640)=@generic={&(0x7f0000000580)='./file1\x00', r6}, 0x18) r7 = syz_open_dev$usbfs(&(0x7f0000000680), 0x100000000, 0x200200) ioctl$USBDEVFS_GET_SPEED(r7, 0x551f) r8 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000740)=0x60) sendmsg$nfc_llcp(r8, &(0x7f0000000ac0)={&(0x7f0000000780)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x9, 0x6, "a64ccb15d9670b6acf4eca18af5eebbf0a7eef27bcb2f86309bd7167298cf1854657cb91b660ac1c9b9f1171daeb831b6b89c66e1f00704bf6b00c0f9fcc4c", 0x1}, 0x60, &(0x7f0000000a40)=[{&(0x7f0000000800)="8090ff1296f0f8e6d021f5768ba66543b7237fbbfff1125a65dc3cce2c6aa8b553771bf2728475c8bd4a76bdcb3cdaaafd9e9684c2c2419a425d5ab9db22e7ce2d10a79a0c3bebc5b36b77234c240ea8431e702e8f30610dda2cdd77d555ff4deb9271689a675e6c8074f4532909a28fc44bd882fa8179edfa158281d21de6593afbd2a772fbd4986dbf2567404dbb73599d0bd7b1fdd2a727d73323ac552292a243a5f96f43dd5fe1affdfec8f155316b21be5be33f16025541d5a6f9b7be002476fee0a26e29ccd8a6dab4f21d0440de81a82393cd34a7599ac42639e1c1ae319c5c92318e1d413ea338a57625e2c5", 0xf0}, {&(0x7f0000000900)="215279a8e6dbd1e8eef104690fd87c48a837f9c17f31da92a7336e28b089865594242c374d842ad984c2cc0ba13d3fc270f7ec81fc3819cbf15c6cefe2e1e5d7db5c9f3bacd48a287aebbd854aeeb0c510730fa5cee54520147d5704b93be993b797cc6be479874a395d3561287fc82e110005cd96bdb052ad4bab1b80598315bf1f1b2be3f6e91a5858fe143bbf172d1f3a96b725443aeaa1e81d523f3dacda76d06ee5eba9adf23aa8", 0xaa}, {&(0x7f00000009c0)="5d98b7d8c6f8e3cd1e3c3ac6e41b0ce704f4939a5a97632b2ed800be03594220592d4977a31a498f985b2054bffd6ccc2b485926d35b18d47acb19c0926728b86e24268818ba4c7d2db8481bce2784a73622a8a6", 0x54}], 0x3, &(0x7f0000000a80)={0x28, 0x110, 0x4, "4c04a6aea5b2452c347c8006371a6da2079f2970"}, 0x28, 0x4004080}, 0x40048000) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000b00), 0x60000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000b40)=0x13220, 0x4) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000b80)={@dev={0xfe, 0x80, '\x00', 0xf}}, 0x14) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x12, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x44}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r6}, @generic={0x2, 0x2, 0x3, 0x1, 0x32a0e22f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c80)='syzkaller\x00', 0x800, 0x55, &(0x7f0000000cc0)=""/85, 0x41100, 0x30, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d40)={0x4, 0x2, 0x1, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a80}, 0x94) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e40)={'macsec0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x8001, '\x00', r11, 0xffffffffffffffff, 0x5, 0x2}, 0x50) getsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, &(0x7f0000000f00), &(0x7f0000000f40)=0x4) mount$fuse(0x0, &(0x7f0000000f80)='./file1\x00', &(0x7f0000000fc0), 0x4002, &(0x7f0000001000)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions}, {@default_permissions}], [{@pcr={'pcr', 0x3d, 0xe}}, {@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@uid_gt={'uid>', r0}}]}}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r9, 0xc0385720, &(0x7f0000001100)={0x1}) r12 = getpid() process_vm_writev(r12, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/93, 0x5d}], 0x1, &(0x7f0000001300)=[{&(0x7f0000001200)=""/223, 0xdf}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001480)={@fallback=r3, r10, 0xd, 0x18, 0x0, @void, @value=r10}, 0x20) 2m6.163662243s ago: executing program 0 (id=966): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) r5 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x2100) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="46f581601510eb7572da889353043cc141cb47babc7583e5a56b9f69f4f054024a8c9b37dafde635ed90ef4e4f81fdb0f39b9de2b7444d69644e158f56e01a2fde8ab43334e4f72dc57d2655672d0e251fdc07928c1d7482e285704910a34e1f6193ee0be645fa50cdd9a0880cacbf050a70f33c9c17c4e643b60b8e5040aec82a7992f1acf9b64eea566d1a72404bab7a5155714566646de4e39310a0190271a119a5e143cfe594fe4e4d5d7a65ef53", @ANYBLOB="d2ec907f51622e46b58b25e9cb12e80004cbc5e70be0b5cba0dbec7a0b65e7c4fa989b88e8265265d6baf485cc85f0e7658defc2b3921d57edb2210a103eabd9fbe7c9e6d6dc850304bfebb8186c580adf941ac4906ebf749212f9ac025d34cfb036485658ac91300cdfcef8876b236107bf0d8783ceb368a5c5a168b100399efb864c852de8b965d2741f7d69d7d2f840b9956652", @ANYBLOB="8f2081b40a44ff3fb0cb59fadc83038f22da49d400b962c5fd49061e814ed29cab3a670cdddc4ce3feca4723f3b6ba0c4385924ca5bca9824f6cd41c36170c58261b4a6102aa29aeacdb13e03c053c10d575e0649ce34d110ea1d9959723814731b6362638f9030ce472de146d1d758c9890c6f8a0fac9d223e9930ee8b34f6e2dd2b1f52d5d1f2d39b85569b031e1470c54141ab7713ebec4c4a6d79d989f36c417c820e55646adc489e61324af9f3c656eb86b269a266819d68076312e56fc761cd2a9700c557b4cc4e73aaff47e57e766f3e1952a2aeba251d578a6", @ANYRESOCT=r0, @ANYRES8, @ANYRESOCT=r3], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800eb64100005eb0021218000000d000000b6"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000004) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m49.749526115s ago: executing program 33 (id=966): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) r5 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x2100) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="46f581601510eb7572da889353043cc141cb47babc7583e5a56b9f69f4f054024a8c9b37dafde635ed90ef4e4f81fdb0f39b9de2b7444d69644e158f56e01a2fde8ab43334e4f72dc57d2655672d0e251fdc07928c1d7482e285704910a34e1f6193ee0be645fa50cdd9a0880cacbf050a70f33c9c17c4e643b60b8e5040aec82a7992f1acf9b64eea566d1a72404bab7a5155714566646de4e39310a0190271a119a5e143cfe594fe4e4d5d7a65ef53", @ANYBLOB="d2ec907f51622e46b58b25e9cb12e80004cbc5e70be0b5cba0dbec7a0b65e7c4fa989b88e8265265d6baf485cc85f0e7658defc2b3921d57edb2210a103eabd9fbe7c9e6d6dc850304bfebb8186c580adf941ac4906ebf749212f9ac025d34cfb036485658ac91300cdfcef8876b236107bf0d8783ceb368a5c5a168b100399efb864c852de8b965d2741f7d69d7d2f840b9956652", @ANYBLOB="8f2081b40a44ff3fb0cb59fadc83038f22da49d400b962c5fd49061e814ed29cab3a670cdddc4ce3feca4723f3b6ba0c4385924ca5bca9824f6cd41c36170c58261b4a6102aa29aeacdb13e03c053c10d575e0649ce34d110ea1d9959723814731b6362638f9030ce472de146d1d758c9890c6f8a0fac9d223e9930ee8b34f6e2dd2b1f52d5d1f2d39b85569b031e1470c54141ab7713ebec4c4a6d79d989f36c417c820e55646adc489e61324af9f3c656eb86b269a266819d68076312e56fc761cd2a9700c557b4cc4e73aaff47e57e766f3e1952a2aeba251d578a6", @ANYRESOCT=r0, @ANYRES8, @ANYRESOCT=r3], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800eb64100005eb0021218000000d000000b6"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000004) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.612349994s ago: executing program 5 (id=1259): r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000180800024000000000080005400000000008000340000000d90d00004000000000140000001100010000000000000000000000000a"], 0x9c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') read$FUSE(r5, &(0x7f0000002500)={0x2020}, 0x2020) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000280), 0x4) 10.521526577s ago: executing program 6 (id=1261): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000001400", [0x0, 0x2000000000001]}}) 9.860365487s ago: executing program 6 (id=1264): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="040100001600010025bd70000000000000000000000000000000000000000000ff010000000000000000000000000001000000000a0000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000005c4ecf1600000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000004f000000000000000053"], 0x104}}, 0x0) 8.716852874s ago: executing program 5 (id=1266): r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd57087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e7fa095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0xffffffffffffffff, 0x8, 0x0, {0x0, 0x4, 0x3, 0x40100, 0x0, 0x81, 0x8000000, 0x8000, 0xa00, 0x4000, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r7, 0x0, 0x0) recvmmsg(r0, &(0x7f00000077c0)=[{{&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/47, 0x2f}, {&(0x7f0000009b80)=""/4092, 0x1000}], 0x2, &(0x7f0000001100)=""/200, 0xc8}, 0x6}, {{&(0x7f0000001200)=@qipcrtr, 0x80, &(0x7f0000001480)=[{&(0x7f0000001280)=""/62, 0x3e}, {&(0x7f00000012c0)=""/70, 0x46}, {&(0x7f0000003dc0)=""/1, 0x1}, {&(0x7f0000001380)=""/223, 0xdf}], 0x4, &(0x7f00000014c0)=""/240, 0xf0}, 0x101}, {{&(0x7f00000015c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000002900)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000007ac0)=""/178, 0xb2}, {&(0x7f0000002700)=""/73, 0x49}, {&(0x7f0000002780)=""/91, 0x5b}, {&(0x7f0000002800)=""/201, 0xc9}], 0x5, &(0x7f0000002980)=""/152, 0x98}}, {{&(0x7f0000002a40)=@tipc=@id, 0x80, &(0x7f0000003c00)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/56, 0x38}, {&(0x7f0000003b00)=""/132, 0x84}, {&(0x7f0000003bc0)=""/6, 0x6}], 0x4, &(0x7f0000003c40)=""/196, 0xc4}, 0x1bf}, {{&(0x7f0000003d40)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000007a00)=""/141, 0x8d}, {&(0x7f0000003e80)=""/76, 0x53}, {&(0x7f0000003f00)=""/102, 0x66}], 0x3, &(0x7f0000003fc0)=""/57, 0x86}}, {{&(0x7f0000004000)=@x25, 0x80, &(0x7f0000005300)=[{&(0x7f0000004080)=""/54, 0x36}, {&(0x7f00000040c0)=""/7, 0x7}, {&(0x7f0000004100)=""/2, 0xfffffffffffffe42}, {&(0x7f0000004140)=""/186, 0xba}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/215, 0xd7}], 0x6, &(0x7f0000005380)=""/89, 0x59}, 0x2}, {{&(0x7f0000005400)=@x25, 0x80, &(0x7f0000005600)=[{&(0x7f0000005480)=""/15, 0xf}, {&(0x7f00000054c0)=""/126, 0x7e}, {&(0x7f0000005540)}, {&(0x7f0000005580)=""/30, 0x1e}, {&(0x7f00000055c0)=""/38, 0x26}], 0x5}, 0x6}, {{&(0x7f0000005680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000006780)=[{&(0x7f0000005700)=""/52, 0x34}, {&(0x7f0000005740)=""/26, 0x1a}, {&(0x7f0000005780)=""/4096, 0x1000}], 0x3, &(0x7f00000067c0)=""/4096, 0x1000}, 0x100}], 0x8, 0x0, &(0x7f00000079c0)) r8 = timerfd_create(0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000001340)={0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000007b80)={{0x0, 0xffff, 0x4, 0x6, 0x9, 0x1, 0x81, 0x2b, 0x8, 0x0, 0x101, 0x7, 0x2, 0x0, 0x6ade}}) ioctl$BTRFS_IOC_INO_LOOKUP(r9, 0xd0009412, &(0x7f0000008b80)={r10}) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x61, &(0x7f0000000500)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000020000000000009c3f000000000080000000000000ff0000000000000000000000000000000000008735f0989d89e2d5db3f30db71169167643d790b58daed00f2d6fda4a47a164cc72bb4f721b32956dae4f61fc6e215bf1fce32526d71776a080b9840c293fa4c924c6fc4e17f3019114607d782dc62687ed8eeea2ea7698667d373538567255ae0d260d1a62a028a8a2632db5c681c50bd454d4c8e"], 0x48) ppoll(&(0x7f0000000100)=[{r8, 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r8, 0x40085400, &(0x7f0000000040)=0x1) 7.79431254s ago: executing program 6 (id=1271): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYRES8=r4, @ANYBLOB="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", @ANYRESOCT=r4], 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f000001b000)="2ed4dc0c2de827cdb1e444b08e461778252416906a16085fe3f9c8e0d4e31989c747975b08c221d030a1d24a748a9198947e4827f551bcc30882bbe56747547eb9ce179b5693020a2437de9ff1d2b18c749f1a3d14f14cbbc84a7857f421e1659daa610e29fc8c3304bbee13a103a563b281ceca1f75af6be472ddc68b7c9bd47ddb141495dcafc25069e63d981bf58271fd685e31ae4c985768f5019ed3ebe56e235a30f62323a7552e9f42fe4f6d8620a38df727cb4b5e3ab5a196f28dbff0629fd9510eb3060687ed552e5201c7d2557b92ff9e839bcd7a2ee05bf210d9f9c922666f388bc5b2d84608a44efd7959fe5113fb656a7ec838d4e700c63e5275a2930c47200b0425182394e8e8b7737c2f2921789ab36fcca250e3a1421b869b88df23ed9ead93d0d77a3de049e6fcefb5734ab1406565ab032b5ef25f2e4114e8a0beee6b8dc232709e945ed126376e750c6f3ccd941fe1362ed7a00b1ffeb33353170192e124ce41a2e6f94fb0b2d122674c05afbf0849b122dc3638e21ffc55da52fdd33d6fc895aa4e22bd71793ef6433fa2ae1ea26d2d2d6ec7c328439a7db8fab7a8510ae90e6dbb68b810447f780a0dabf47a3d3b6b93e8d4ace8658741de966e02c8a445ea90bf090401819ea807fc6250426bb45beed2790f41e6d22f0dc7192af5ce1517adba4040105c2a12ba561b9d54d66aa8e88a232c63621f7e6a7f2e1b6a0e4c3d3c77fa15a44a5bf51c0508ee9e8abf029ce7bb8a9cb4d9fddb75acd6cc55e503d5fdd1ba508066925af1f5000072aac0354591a537df2c3d32ade211a683b9ebcf0fff372342dedd9c05043beb20fa019d5b50014907664351199d24f462d1c67bdf65e6239723d849e381179b4108c70a83bbdc683a7a18bac354c8d18f38ea836d51c0ca7bb37b9d02474f9000784b508fb56a11ef320c0ddf9536b029c6a40ccd609a75b5b83a97f50ea9f50dd33387c5b08a9975e129d91836a781ae42f75aa789d8514c18080fa9b5e4b23489b7c7564a859fd5ff79bd1b923eff04bc1d422b6b9404c458d0976cf8c7768e267d0caf59142bf5ca4e6deb4c3fc1fc2c99482a88739aea83c20c62a7f967c84802ded36987d494adfacf6d14bbf5a411ac58cb3abc516e0a5490da1330719ad013e430efe1944a4a89f8c92a81c5b24bf0c8d9948f1f90de7e512e124d906ebc8ed3d0d53e8a99e572e9e325104010391e9686440874c5368f64cab45093c00422a91c21806dbf2003fc37822faa6c188305eacca1d958f0ed636c03ba2d7c93644975cc7f02de6454398b6ed511c27116dfaf61dca17f653f7c4aac2a56925ff57cacd87f9928e90b519988f0cdc44e751a8114613c6b984875dfc8f6b0ca5f65d490df6cf74da1f35b0d7cf3537ac93305ea14bcffdecb42b860cab0e16d31ea8c0aef94d89e4110cb4e154ad2609c933975676958aa6dd55b18dfc77dfd68bf821dd770d8212c62587b656f9dacb2d9c1e7d76b09733db4f631bd5627a900007fd2da7ca2249e171ba90409ff86b17dce2470ff3dbe5d04e013677f57305b337aec06f7f13e0f49fd7f497c5bdcabf805cde57a89e58f0177f1d2c39a0013d6065210e0bd4dc3110411a080a579c4d91f7ad77201d4517bf5f13782a2552c4ec8979003810596239a457da93de668627348adf0c2e1bc00593ec759f60cc40f7230b0aae308c2b658196ea08c2758dad4e193fc17bd0132efd3b12331d58b59f8d65e7d9cb683530ccaa79a85e9b5e3d22551aae8abc83ef6a25c0cf4cbc51ac3bb5425ac31ebd9224e967bd9a7123db7eda5644990d8d906d9f80a57a5942458eaff01df39d447ee92c06075bff5c2660cf628bdf0293b0b0d5f17a326637a300c6d774008ecfad08870bd5be4c7422ceb67df40fbf4358314717b982504be2c27389cf5080dcaef2d52297b83caa35e035fa0e275001baba578b144a4de8acc6f54ba0f36e05e6f8cadc768acad6ba1400e624fc7a153eb1841111b758ca80a0f5b6bbc4b5e4a441f72fd35ed45f5285c26af945f83e751ac920e17fa753b3349863889a753a6e47e4e086a2f2a5a96b7392570199827810c6a0261914a01f7f66201bb38c0fd6a71025c8f49589143c57737d58ca3e7bf0f84d516184dfe599ea554894c0002ca64786ecf66e2a5ca2597f6a511716823ce79ec0e399c8eea906d3e8d329c2a728ec9c6cea61baea56d4b3c6c78824926b688702ad524c9534679ed765ee484498701b3926d5a696544c86c560c4ba55a9b39512a8cce544d1b7f3f7d810bbf84985e43db34b93d349491914763dd68e2cff5cf26e3434cc1357438c10ed759961015165df77da072a4da5e2d4cebd68f2de2d47168ac2c3e7cbcb186eddfbdfcf0224098cdf35bcd7b0f992a19503e5eac9eca2d9021c0e12e5417eda3a881669b29eeeac3f27a0918c30f1e18a9cb97b642e9097d0531aca797f673332a9c39218d107b266b6a7cce6963d60cb3b5efa1f4a5b1bb972128d3c8f93d6baf3d2c3db9c2bc7f7bc146068f6736454d594192be6e7b937554d67bcf7afe68c8c982916f05146713716f7e8c85fb8e658cfd23b1fa9b5aff138403eae8f2efcb8e13ce500e59e0b8f6eea5f161993f9dda27a594f57f58871e25b969749e41e56df4f11612f93cca8642f280c9d0565b11997ca3b6e86f591128339571ca1baacbfba3306a8f1ba6aa58b75d3129eb4ae267f628b93cc172adacdf1c1b671947bb5fffea3eb838abd817a55bfdac7b2363d16e6bba669c8b1f82051705a237e4406bb0d61a4df8347fc341ce368deebf5427de4c6e92c94dbeea5dd2d346fe761957457daa96b6e9a771bb09e7be158616b57b33a98608ce7579d83926af3457f8d5619f2992f7b0bf7d4e835d58c15201eabf4bd1bc31bbaf0bcd3f180f89eb31d8909b289da6ed0c0b0fa03f94979049d6ec94d0975f690b68d27f48bebc8cd0fe00804044f4ec43d9fc3ac07496d78b9e98a36727a7de119593f97aae9941683ea014635c61fd5143bcb00f850fa9083c6dde254b96cbb517af310efb6d80cda06343725d031efe7f746f01e94d65d08283135b40b4e5f9f1d1a5d48f0d70936a68a9ba26972bd7f2744c7227b2bfa257985115ca878df9f497e5d97fb83ba8fc30b147ef1fdabfb314965f687fa0c70f6080fdfe9144f6b537799044644756653cf4aa661069bf63c4bcff2031d506463a19ee1343e227232e6c90d49ed28306d7bccb7679639bf089716340ff73b5a5742cccbab3b791eed16670000142b89c14ad3694afacc4c8cedd5d31b95583e81a7aa4a6a3d79ab3a3061373be33c96a64fc0ff702c9e5d9d136555571717b71f2a531fbdc151517a2f5782b24d403c8575a5fe7a269251824fb2fbffbf383fbfd0e8ff6d2b6d3cc1237af774dd92b9aab73f38c5f073b33a3342c9d61fa7df1515edecd5d17a2026a5c62f1b5dc789fd3916c3bf9abd49fe2333e132de79739ff5e2812aeb550905be9ebb40c20b3946dab4a52950dcfeb7460b630dacad425a0e79ab7483102f34985617b124b9b6a40cb1018a43b9dad1368a27b8f47ae4c8df5316cd8be169f7fdf231967ed34063178d227bf1bfacc7f2c190bf801a4f1719222680299e6a1088e139b2440de667b8e7ac4ef337ad2bc08f45ec0566997e9824000e16e96229ba2235ba8d2adc865c5105a8f4a4855bd8ac428f9d4e9459e0d8218c57842bd12f7e58aac6a46dd101c3829ac9c93649aff4e397e26bfc314281790a25274f3573d0ab9ab2dcb139625ac35e4dec2e36d52cb460797b0182e7c0b52f56a6f0db3ecf2e82931f87e7292a2d3b9a0f19f3d2ad1f8c8407a10423bb814190b4168995ce1d8559526374d62ba8a0ffff90d416b6ffb5d155d207292f7e01d4b247f1c835c23b0a86a386812449ed547b076634b6eafe0e3ce1e7d9b0cc4fe9e2c6f52e7f8afeb22b216f6471bc998afb08aecf106d6d80a44cd5846435ab4b81091b159abd246a0fed4a3b9824142c14dfa3868f7933beb503fe6788c0b09e5e9b24c4c4d59a516bba68c94e9506aa1d15ade9bc25530ae18e7e254d9533db66e77c24d5f63fb7ddac0016983fc7b6169cc2f7638e5fd6110ba09ddd7ece03e8a64ca0b00507b37c3d3714abcc73c671a43d0", 0xb8b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000001c0)={0x25, 0x0, 'client0\x00', 0x0, "fca77e7fbadd83c4", "fd6581ac4b8a5d32a2763732acee190e65e0f6d112d11261c517ef5eca53c5ee", 0x9, 0xfffffffa}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010", @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0), &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) 7.536606174s ago: executing program 5 (id=1272): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x2080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = getpgrp(0x0) syz_pidfd_open(r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r6}, 0x8) write$sndseq(r7, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x6, @tick, {0x5}, {}, @connect={{}, {0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @tick=0x6, {}, {}, @time=@time={0x6, 0x8}}], 0x70) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) getdents(r8, &(0x7f0000000140)=""/194, 0xc2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000041c0)=ANY=[@ANYBLOB="0100000000000000b2000040e4ce7f8817"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 6.964404292s ago: executing program 4 (id=1274): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r1 = syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) io_uring_enter(r1, 0x2def, 0xb80c, 0x4e, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 6.650661392s ago: executing program 4 (id=1276): r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000180800024000000000080005400000000008000340000000d90d00004000000000140000001100010000000000000000000000000a"], 0x9c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') read$FUSE(r5, &(0x7f0000002500)={0x2020}, 0x2020) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000280), 0x4) 6.467623536s ago: executing program 3 (id=1277): r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000180800024000000000080005400000000008000340000000d90d00004000000000140000001100010000000000000000000000000a"], 0x9c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') read$FUSE(r6, &(0x7f0000002500)={0x2020}, 0x2020) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="e2eaa739573388b086c10ba49495c91c137eda93fd48a22eba697cdbb411c779b7d2b04e541e05303c9d24ea6121ef05abc09e3d2145a5ff57b85ebc28acdab24e6aa5bfacb22220f8616ab6b04f685360b1c816664d05c4ae8a86fb3b998c578571aa0f82ee17915a5bec9e0aaf3df86a81d1db90d38e341be82bff486eeae28c837d0e72626cba83b5cdb219128affa72cbb9d392ceb0990b3d505d7515e053988253b6ac56b8e6c2bca596abd69d575551317d4453345482e0a753cb9dbf759f6f961ad29f8fbc48493bd23bc7bc3c1217174870583c48c", 0xd9}], 0x1, 0x4, 0x8, 0x15) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.352871966s ago: executing program 3 (id=1278): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x4, &(0x7f0000000300)="22f2ec292b6fcc26a5dbdf92389b9d42959e5685f33c6d4dd1ee492d08ae37658b84c8e5bb61752dc6cec600718f59860cdc11117964799f971390ff0e72679d881ed7b4f7a1ff7cc25896d12129feb647585990f25be51552fecb54796692750b4369699a1f01c63edf918cd98433c2725bb71555f3ced3b482f5a4e990f0adcecb590bf8a763ab2763569e8b9d256ef6c71af9549a52df65f375dede7a1e4acca83a007722af554bce62532700c321f980990a792eadfd0eddf8378f5fff3c67423fbc6af6a1f15ee6175d39b99f596c11474ce938871982336d2289dc881cf4af152bcc54aca7a65a0238cb8464611e3a68a0102a57") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x10002b, 0x5, 0x0, 0xff, 0x105}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000003000000000000000100000d0400000004000000040000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x20004005) 5.235995374s ago: executing program 4 (id=1280): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) pipe(&(0x7f0000000340)) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r2 = getpgid(0x0) sched_getattr(r2, &(0x7f0000000080)={0x38}, 0x3e, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = socket$kcm(0xa, 0x1, 0x106) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f00000197c0)=""/102400, 0x19000) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c041) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x751e83, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000280)={0x28, 0x7, 0x0, 0x0, &(0x7f0000579000/0x2000)=nil, 0x2000, 0xfffffffffffffffc}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r7, 0x3ba0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) 5.19828479s ago: executing program 3 (id=1281): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="08010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000403000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0], 0x108}}, 0x24008000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r6, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000004, 0x32, 0xffffffffffffffff, 0x2d75000) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8044) 5.126116402s ago: executing program 2 (id=1282): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="040100001600010025bd70000000000000000000000000000000000000000000ff01000000000000000000000000000100000000530000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000005c4ecf1600000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000004f000000000000000053"], 0x104}}, 0x0) 4.452357021s ago: executing program 6 (id=1283): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bc0910008000000055090100000001569500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000527010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b5020000000000008500000005000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 4.414108922s ago: executing program 2 (id=1284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7428bd7000fddbdf250a00000008000300", @ANYRES32=r4, @ANYBLOB="3800508005000200"], 0x54}, 0x1, 0x0, 0x0, 0x2000}, 0x40010) 4.411742624s ago: executing program 5 (id=1285): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="274376b211b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) (async) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x315500, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (rerun: 64) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r4 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) (rerun: 64) fallocate(r4, 0x0, 0x0, 0x8) fcntl$addseals(r4, 0x409, 0xe) (async, rerun: 64) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) (rerun: 64) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x0, {}, 0x1}, 0x18) (async, rerun: 64) sendfile(r6, 0xffffffffffffffff, 0x0, 0x1000000000000a) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0xffff}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)={0x40, 0x6}, 0x0, 0x0}) 4.252140704s ago: executing program 4 (id=1286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x7, &(0x7f0000001f80)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffb}, @tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x24}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97}, {&(0x7f0000000240)=""/121}, {&(0x7f0000000340)=""/107}, {&(0x7f00000001c0)=""/12}, {&(0x7f00000003c0)=""/124}, {&(0x7f0000001cc0)=""/213}, {&(0x7f0000000580)=""/181}], 0x0, &(0x7f00000009c0)=""/4096}, 0xbac00000}, {{&(0x7f00000006c0), 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214}, {&(0x7f0000000840)=""/201}]}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x12, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207}], 0x0, &(0x7f0000001b40)=""/173}, 0x7a}], 0x400000000000273, 0x2b, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x34, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01082cbd7000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="30005080110001000a62e339084eeef16f162471f4000000080007000000000005000200070000000800030005ac0f"], 0x58}, 0x1, 0x0, 0x0, 0x44151}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff0, 0x48}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x72, 0x1}, {0x3, 0x1}, {0x6c, 0x1}, {0x4}, {0x6, 0x1}, {0x2, 0x1}, {0x3}, {0x12}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0xb, 0x1}, {0x3}, {0x1b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000805}, 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 4.246596369s ago: executing program 6 (id=1287): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x804) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x400}, 0x94) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x3c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "3dd7b6d2db5b3550449e4977514874c2"}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xfffffffffffffe22, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r5, 0x800, 0x70bd25, 0x25dfd9fd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.051583196s ago: executing program 2 (id=1288): r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000180800024000000000080005400000000008000340000000d90d00004000000000140000001100010000000000000000000000000a"], 0x9c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') read$FUSE(r6, &(0x7f0000002500)={0x2020}, 0x2020) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="e2eaa739573388b086c10ba49495c91c137eda93fd48a22eba697cdbb411c779b7d2b04e541e05303c9d24ea6121ef05abc09e3d2145a5ff57b85ebc28acdab24e6aa5bfacb22220f8616ab6b04f685360b1c816664d05c4ae8a86fb3b998c578571aa0f82ee17915a5bec9e0aaf3df86a81d1db90d38e341be82bff486eeae28c837d0e72626cba83b5cdb219128affa72cbb9d392ceb0990b3d505d7515e053988253b6ac56b8e6c2bca596abd69d575551317d4453345482e0a753cb9dbf759f6f961ad29f8fbc48493bd23bc7bc3c1217174870583c48c", 0xd9}], 0x1, 0x4, 0x8, 0x15) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.884055448s ago: executing program 6 (id=1289): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) fchmod(r3, 0x1f) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xef76, 0x2, 0x1, 0xbfdffffc}, &(0x7f00000001c0), &(0x7f0000000300)) io_uring_enter(r4, 0x931, 0xffffffff, 0x3, 0x0, 0x59) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000040)={0x0, 0xffffffff, 0x2003, 0x1}) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000003070177d3398a09570ad6ab8bbe933f8e4ed70556fe1ad61be729df6eed662037bcc4f625721966ecb1f7fac195d7faf09aaa5bebca52c75b2195274425b3c48cf0edd2b99db3084843e045c59d628c894f75288c0dbca764a6e4dcce6cdaa108dea2e18f3b865c8d2cedb7854b1cb57024a1a96deed694eec8e67becefe8fd97aaa8c69fc65ef1ae6a01131c01f68682e05cdf4220afbb8c698bfcab753458142ec4ecc29a95ae2b0e01ce8aa8c653124b1d99f26918124952832a042c247e141406e7fb34f6e4811257"], 0x14}, 0x1, 0x0, 0x0, 0x28040891}, 0x84) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d919100000000000000000850000000f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0xdc6, 0xdb}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x20000000) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 3.170694434s ago: executing program 4 (id=1290): r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000180800024000000000080005400000000008000340000000d90d00004000000000140000001100010000000000000000000000000a"], 0x9c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') read$FUSE(r5, &(0x7f0000002500)={0x2020}, 0x2020) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000280), 0x4) 2.94331888s ago: executing program 2 (id=1291): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x4, &(0x7f0000000300)="22f2ec292b6fcc26a5dbdf92389b9d42959e5685f33c6d4dd1ee492d08ae37658b84c8e5bb61752dc6cec600718f59860cdc11117964799f971390ff0e72679d881ed7b4f7a1ff7cc25896d12129feb647585990f25be51552fecb54796692750b4369699a1f01c63edf918cd98433c2725bb71555f3ced3b482f5a4e990f0adcecb590bf8a763ab2763569e8b9d256ef6c71af9549a52df65f375dede7a1e4acca83a007722af554bce62532700c321f980990a792eadfd0eddf8378f5fff3c67423fbc6af6a1f15ee6175d39b99f596c11474ce938871982336d2289dc881cf4af152bcc54aca7a65a0238cb8464611e3a68a0102a57") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x10002b, 0x5, 0x0, 0xff, 0x105}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000004000000000000000100000d0400000004000000040000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x20004005) 2.395958846s ago: executing program 3 (id=1292): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prlimit64(r1, 0x7, &(0x7f00000001c0)={0x0, 0x10000}, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000008500)=ANY=[@ANYBLOB="66643d782a9c1ad969a85bbfc7ec23da51d8fef1a0ed85255917de1564904c61b2655864c39b4eb409db332cdf3ac6c4427c3a6685318c0f132ac92bc69be732c0d91370c85ebc8981b4c75b7bda18eb4c3408b7443a4c0a0e936c1c61d31efb6061ddbdf2ebab140b0cd8664cb7bcd9c71610033988bde2d10ec0329b14727b66482ecc53", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x3, {0x6, 0x8, 0x0, {0x8, 0x5, 0xc, 0xa, 0xa03, 0x8, 0x3, 0x7fffffff, 0x1, 0xc000, 0x80000000, r5, r6, 0x1, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r9, 0x1, &(0x7f0000000200)=0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c00) r11 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) (async) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r12) (async) setresgid(0x0, 0xffffffffffffffff, r12) socket$packet(0x11, 0x3, 0x300) (async) r13 = socket$packet(0x11, 0x3, 0x300) dup(r13) (async) dup(r13) r14 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x8f7, 0x2000) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r15, 0x0, 0xfffffffffffffffc}, 0x18) r16 = getpid() sched_setscheduler(r16, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r16, 0x2, &(0x7f0000000200)=0x7) r17 = geteuid() read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="21af1596de144749668fad24626da04802064f01e5742b702d65a4cf95adcbc7ae0a15d9bcbb0f84c61827914c737c487d033757ea43787994f9f7dcabb6ce6747a84e5bd3235a93e372aefb90107d5c5dd74e9a9cc6b5325da08abdc1fdd9361609", 0x62}, {&(0x7f00000000c0)="aeb11f5fd73840aabe01e3a43b4a095123dc4c02bb3c99bad83de05692bf736d7cc7ec0838fb8709ce75e0b4e66fc278fc73fea33ebcb51f3556fcba3b70dd8f215c4033184cb474db71c2adec36e5a204796c30dd88ce2561f710bc407861c046f86b652f02f4a1da2c0a", 0x6b}], 0x2, &(0x7f0000008600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r1, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r0, @ANYRES32=r15, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c00000000000000010000000200000066988a", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x20008084}, 0x20000000) bind$802154_raw(r0, &(0x7f0000000500)={0x24, @none={0x0, 0x2}}, 0x14) 1.646715069s ago: executing program 4 (id=1293): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.525935317s ago: executing program 2 (id=1294): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x4, &(0x7f0000000300)="22f2ec292b6fcc26a5dbdf92389b9d42959e5685f33c6d4dd1ee492d08ae37658b84c8e5bb61752dc6cec600718f59860cdc11117964799f971390ff0e72679d881ed7b4f7a1ff7cc25896d12129feb647585990f25be51552fecb54796692750b4369699a1f01c63edf918cd98433c2725bb71555f3ced3b482f5a4e990f0adcecb590bf8a763ab2763569e8b9d256ef6c71af9549a52df65f375dede7a1e4acca83a007722af554bce62532700c321f980990a792eadfd0eddf8378f5fff3c67423fbc6af6a1f15ee6175d39b99f596c11474ce938871982336d2289dc881cf4af152bcc54aca7a65a0238cb8464611e3a68a0102a57") r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x64, 0x0, &(0x7f0000000280)="e04eea217108939feafd68cff9a151e056746017131d83ccb77ab52872c905dc3bed4ae47d6b7b04f92ae80f7cc2a77a090154be3833deddb41e7edb431774d285b809b7f2ff1ccd412c58bb7237f4e6d0c7ff000e8ad557b83aeec255108b3ce1f2e1a4"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.224404037s ago: executing program 5 (id=1295): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000011000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000f1bcd399b81e1011f5aa5e5c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40880) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001040)={0x20, 0x0, &(0x7f0000000800)=[@request_death, @request_death], 0x0, 0x0, 0x0}) keyctl$revoke(0x3, r1) keyctl$read(0xb, r1, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)='\x00') 85.239799ms ago: executing program 2 (id=1296): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="040100001600010025bd70000000000000000000000000000000000000000000ff01000000000000000000000000000100000000005300000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000005c4ecf1600000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000004f000000000000000053"], 0x104}}, 0x0) 0s ago: executing program 3 (id=1297): setgroups(0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301", @ANYRESOCT], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): yzkaller0: entered promiscuous mode [ 257.717048][ T7631] syzkaller0: entered allmulticast mode [ 257.788679][ T7671] tipc: Resetting bearer [ 257.834574][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'. [ 257.875002][ T7671] tipc: Disabling bearer [ 257.955610][ T43] usb 5-1: USB disconnect, device number 16 [ 257.963508][ T7681] veth0_macvtap: left promiscuous mode [ 258.067060][ T7681] veth0_macvtap: entered promiscuous mode [ 259.408820][ T5977] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 259.754915][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 260.372585][ T5977] usb 3-1: Using ep0 maxpacket: 32 [ 260.389301][ T5977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.410460][ T5977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.428696][ T5977] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 260.468297][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.503889][ T5977] usb 3-1: config 0 descriptor?? [ 260.559197][ T5977] hub 3-1:0.0: USB hub found [ 260.645413][ T6111] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.748545][ T5977] hub 3-1:0.0: 1 port detected [ 260.779787][ T7719] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.473'. [ 260.832299][ T7719] netlink: zone id is out of range [ 260.837508][ T7719] netlink: zone id is out of range [ 260.870872][ T7719] netlink: get zone limit has 8 unknown bytes [ 260.879839][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.636568][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 261.835486][ T5977] hub 3-1:0.0: activate --> -90 [ 261.892226][ T7735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.933210][ T7735] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 261.960711][ T7737] netlink: 'syz.3.477': attribute type 12 has an invalid length. [ 262.037436][ T5926] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 262.241663][ T24] usb 3-1: USB disconnect, device number 25 [ 262.253487][ T7748] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 262.815554][ T7748] netlink: 224 bytes leftover after parsing attributes in process `syz.1.479'. [ 263.057143][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 264.587956][ T5905] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 265.081716][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.533026][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.551065][ T5905] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 265.568172][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 265.591159][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.603257][ T5905] usb 5-1: config 0 descriptor?? [ 265.649557][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'. [ 265.844410][ T3496] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.917870][ T7798] netlink: 48 bytes leftover after parsing attributes in process `syz.0.490'. [ 266.010236][ T7798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.275749][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.316865][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.641593][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.644009][ T5905] greenasia 0003:0E8F:0012.0006: ignoring exceeding usage max [ 266.775523][ T5905] greenasia 0003:0E8F:0012.0006: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 266.854447][ T5905] greenasia 0003:0E8F:0012.0006: no inputs found [ 267.280114][ T11] block nbd0: Possible stuck request ffff888025257000: control (read@0,1024B). Runtime 60 seconds [ 267.290957][ T11] block nbd0: Possible stuck request ffff8880252571c0: control (read@1024,1024B). Runtime 60 seconds [ 267.302352][ T11] block nbd0: Possible stuck request ffff888025257380: control (read@2048,1024B). Runtime 60 seconds [ 267.378658][ T11] block nbd0: Possible stuck request ffff888025257540: control (read@3072,1024B). Runtime 60 seconds [ 268.192220][ T5905] usb 5-1: USB disconnect, device number 17 [ 270.828073][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 270.963327][ T6111] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.510469][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.501'. [ 272.400728][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.692648][ T7903] binder: BINDER_SET_CONTEXT_MGR already set [ 275.698856][ T7903] binder: 7897:7903 ioctl 4018620d 200000000040 returned -16 [ 275.710922][ T7903] binder: 7897:7903 ioctl c0306201 200000000140 returned -11 [ 276.879256][ T7909] netlink: 'syz.4.515': attribute type 12 has an invalid length. [ 276.887545][ T6111] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.908611][ T7909] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.515'. [ 278.085192][ T7919] netlink: 52 bytes leftover after parsing attributes in process `syz.4.517'. [ 278.148612][ T7919] netlink: 31 bytes leftover after parsing attributes in process `syz.4.517'. [ 278.167687][ T3496] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.383336][ T7919] sg_write: process 387 (syz.4.517) changed security contexts after opening file descriptor, this is not allowed. [ 279.206897][ T7919] syzkaller1: entered promiscuous mode [ 279.239965][ T7919] syzkaller1: entered allmulticast mode [ 279.345056][ T7931] netlink: 'syz.0.518': attribute type 15 has an invalid length. [ 279.397696][ T5842] Bluetooth: Unexpected continuation frame (len 4) [ 280.651896][ T7949] IPv6: addrconf: prefix option has invalid lifetime [ 281.042445][ T5933] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 281.256904][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 281.388455][ T5933] usb 4-1: device descriptor read/64, error -32 [ 281.769399][ T5933] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 282.058212][ T7969] binder: BINDER_SET_CONTEXT_MGR already set [ 282.064397][ T7969] binder: 7962:7969 ioctl 4018620d 200000000040 returned -16 [ 282.803545][ T3496] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.930213][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.007956][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.095646][ T5933] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 283.138617][ T5842] Bluetooth: hci4: Malformed Event: 0x02 [ 283.315004][ T7996] Bluetooth: MGMT ver 1.23 [ 283.679166][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.229521][ T5933] usb 4-1: config 0 descriptor?? [ 286.289325][ T3496] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.501224][ T5933] usb 4-1: can't set config #0, error -71 [ 286.568815][ T5933] usb 4-1: USB disconnect, device number 16 [ 288.108730][ T1215] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 288.288541][ T1215] usb 5-1: Invalid ep0 maxpacket: 64 [ 288.399255][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.458583][ T1215] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 288.678779][ T1215] usb 5-1: Invalid ep0 maxpacket: 64 [ 288.802103][ T1215] usb usb5-port1: attempt power cycle [ 289.230117][ T1215] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 289.270929][ T1215] usb 5-1: Invalid ep0 maxpacket: 64 [ 289.396386][ T8053] loop7: detected capacity change from 0 to 16384 [ 289.448746][ T1215] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 289.492922][ T1215] usb 5-1: Invalid ep0 maxpacket: 64 [ 289.516040][ T1215] usb usb5-port1: unable to enumerate USB device [ 290.149300][ T8056] loop7: detected capacity change from 16384 to 0 [ 290.175651][ C1] I/O error, dev loop7, sector 13824 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 290.445883][ T8072] afs: Unknown parameter 'dyn;(Õ­ó' [ 292.383704][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.598767][ T5926] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 293.005451][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.067033][ T5926] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 293.147888][ T8093] xt_hashlimit: size too large, truncated to 1048576 [ 293.155391][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.228441][ T5926] usb 3-1: Product: syz [ 293.276559][ T5926] usb 3-1: Manufacturer: syz [ 293.330882][ T5926] usb 3-1: SerialNumber: syz [ 293.388345][ T5926] usb 3-1: config 0 descriptor?? [ 293.441082][ T5926] ljca 3-1:0.0: bulk endpoints not found [ 294.166171][ T8010] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.000209][ T8114] autofs4:pid:8114:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 295.029928][ T8117] autofs4:pid:8117:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 296.252428][ T5933] usb 3-1: USB disconnect, device number 26 [ 297.359879][ T11] block nbd0: Possible stuck request ffff888025257000: control (read@0,1024B). Runtime 90 seconds [ 297.372877][ T11] block nbd0: Possible stuck request ffff8880252571c0: control (read@1024,1024B). Runtime 90 seconds [ 297.384482][ T11] block nbd0: Possible stuck request ffff888025257380: control (read@2048,1024B). Runtime 90 seconds [ 297.399247][ T11] block nbd0: Possible stuck request ffff888025257540: control (read@3072,1024B). Runtime 90 seconds [ 297.999757][ T1107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.936497][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.878776][ T5905] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 301.157207][ T5905] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.192924][ T5905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.221391][ T5905] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 301.289077][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.426197][ T5905] usb 3-1: config 0 descriptor?? [ 301.697369][ T8206] futex_wake_op: syz.1.564 tries to shift op by 32; fix this program [ 301.786529][ T8208] loop2: detected capacity change from 0 to 7 [ 301.794628][ T8208] Dev loop2: unable to read RDB block 7 [ 301.800822][ T8208] loop2: unable to read partition table [ 301.806732][ T8208] loop2: partition table beyond EOD, truncated [ 301.813444][ T8208] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 301.944495][ T5905] lenovo 0003:17EF:6067.0007: item fetching failed at offset 0/2 [ 302.148560][ T5905] lenovo 0003:17EF:6067.0007: hid_parse failed [ 302.155118][ T5905] lenovo 0003:17EF:6067.0007: probe with driver lenovo failed with error -22 [ 302.170635][ T5905] usb 3-1: USB disconnect, device number 27 [ 304.518919][ T8016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.872951][ T8243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.888905][ T8243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.118978][ T5926] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 305.258447][ T5926] usb 5-1: device descriptor read/64, error -71 [ 305.528614][ T5926] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 305.678898][ T5957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.698635][ T5926] usb 5-1: device descriptor read/64, error -71 [ 305.728455][ T5918] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 305.848791][ T5926] usb usb5-port1: attempt power cycle [ 305.913823][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 305.943455][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.978462][ T5918] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 305.998027][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.023107][ T5918] usb 4-1: config 0 descriptor?? [ 306.042398][ T5918] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 306.169017][ T8273] netlink: 10 bytes leftover after parsing attributes in process `syz.2.578'. [ 306.438448][ T5926] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 307.193560][ T8279] fuse: Bad value for 'rootmode' [ 307.289458][ T5926] usb 5-1: device descriptor read/8, error -71 [ 307.548690][ T5926] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 307.699430][ T5926] usb 5-1: device descriptor read/8, error -71 [ 307.819070][ T5926] usb usb5-port1: unable to enumerate USB device [ 307.865161][ T5918] gspca_vc032x: reg_w err -71 [ 308.029559][ T5918] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 308.155995][ T5918] usb 4-1: USB disconnect, device number 17 [ 309.494096][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'. [ 310.083816][ T8311] vcan0: tx drop: invalid sa for name 0x0000040000000000 [ 310.171968][ T1107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.237026][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'. [ 311.440922][ T1107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.569836][ T8329] adf_ctl_ioctl: 15 callbacks suppressed [ 311.569856][ T8329] QAT: Invalid ioctl 1075883590 [ 311.580710][ T8329] QAT: Invalid ioctl 1075883590 [ 311.585702][ T8329] QAT: Invalid ioctl 1075883590 [ 311.590808][ T8329] QAT: Invalid ioctl 1075883590 [ 311.595823][ T8329] QAT: Invalid ioctl 1075883590 [ 311.600901][ T8329] QAT: Invalid ioctl 1075883590 [ 311.605964][ T8329] QAT: Invalid ioctl 1075883590 [ 311.612639][ T8329] QAT: Invalid ioctl 1075883590 [ 311.617602][ T8329] QAT: Invalid ioctl 1075883590 [ 311.622605][ T8329] QAT: Invalid ioctl 1075883590 [ 313.813309][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.598'. [ 315.903909][ T6096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.570350][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.204086][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.818124][ T8380] tipc: Started in network mode [ 317.823299][ T8380] tipc: Node identity 4af577d22a0e, cluster identity 4711 [ 317.863457][ T8380] tipc: Enabled bearer , priority 0 [ 317.896729][ T8389] syzkaller0: entered promiscuous mode [ 317.914689][ T8389] syzkaller0: entered allmulticast mode [ 318.140136][ T8404] tipc: Resetting bearer [ 318.337001][ T8379] tipc: Resetting bearer [ 318.468918][ T8379] tipc: Disabling bearer [ 319.906902][ T8422] adf_ctl_ioctl: 40 callbacks suppressed [ 319.906915][ T8422] QAT: Invalid ioctl 1075883590 [ 319.917602][ T8422] QAT: Invalid ioctl 1075883590 [ 319.922686][ T8422] QAT: Invalid ioctl 1075883590 [ 319.927608][ T8422] QAT: Invalid ioctl 1075883590 [ 319.932935][ T8422] QAT: Invalid ioctl 1075883590 [ 319.938248][ T8422] QAT: Invalid ioctl 1075883590 [ 319.943235][ T8422] QAT: Invalid ioctl 1075883590 [ 319.948241][ T8422] QAT: Invalid ioctl 1075883590 [ 319.953252][ T8422] QAT: Invalid ioctl 1075883590 [ 319.958189][ T8422] QAT: Invalid ioctl 1075883590 [ 321.165987][ T8425] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 321.761438][ T1107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.783796][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.927912][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 322.401573][ T8436] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 323.223404][ T8449] capability: warning: `syz.4.628' uses 32-bit capabilities (legacy support in use) [ 323.366571][ T8456] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 324.902323][ T8474] FAULT_INJECTION: forcing a failure. [ 324.902323][ T8474] name failslab, interval 1, probability 0, space 0, times 0 [ 324.915262][ T8474] CPU: 0 UID: 0 PID: 8474 Comm: syz.4.636 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 324.915291][ T8474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.915318][ T8474] Call Trace: [ 324.915329][ T8474] [ 324.915336][ T8474] dump_stack_lvl+0x189/0x250 [ 324.915358][ T8474] ? __pfx____ratelimit+0x10/0x10 [ 324.915376][ T8474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.915393][ T8474] ? __pfx__printk+0x10/0x10 [ 324.915418][ T8474] ? __pfx___might_resched+0x10/0x10 [ 324.915439][ T8474] should_fail_ex+0x414/0x560 [ 324.915458][ T8474] should_failslab+0xa8/0x100 [ 324.915477][ T8474] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 324.915493][ T8474] ? __alloc_skb+0x112/0x2d0 [ 324.915518][ T8474] __alloc_skb+0x112/0x2d0 [ 324.915543][ T8474] netlink_sendmsg+0x5c6/0xb30 [ 324.915573][ T8474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.915602][ T8474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.915625][ T8474] __sock_sendmsg+0x21c/0x270 [ 324.915646][ T8474] ____sys_sendmsg+0x505/0x830 [ 324.915674][ T8474] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.915705][ T8474] ? import_iovec+0x74/0xa0 [ 324.915730][ T8474] ___sys_sendmsg+0x21f/0x2a0 [ 324.915755][ T8474] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.915810][ T8474] ? __fget_files+0x2a/0x420 [ 324.915827][ T8474] ? __fget_files+0x3a0/0x420 [ 324.915872][ T8474] __x64_sys_sendmsg+0x19b/0x260 [ 324.915899][ T8474] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.915942][ T8474] do_syscall_64+0xfa/0x3b0 [ 324.915960][ T8474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.915974][ T8474] ? asm_sysvec_call_function_single+0x1a/0x20 [ 324.915990][ T8474] ? clear_bhb_loop+0x60/0xb0 [ 324.916008][ T8474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.916023][ T8474] RIP: 0033:0x7fef3338eb69 [ 324.916037][ T8474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.916050][ T8474] RSP: 002b:00007fef341a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.916067][ T8474] RAX: ffffffffffffffda RBX: 00007fef335b6080 RCX: 00007fef3338eb69 [ 324.916078][ T8474] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 324.916087][ T8474] RBP: 00007fef341a5090 R08: 0000000000000000 R09: 0000000000000000 [ 324.916097][ T8474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.916107][ T8474] R13: 0000000000000000 R14: 00007fef335b6080 R15: 00007ffcb4b591f8 [ 324.916129][ T8474] [ 326.453467][ T8480] Invalid source name [ 326.457701][ T8480] UBIFS error (pid: 8480): cannot open "/dev/sg0", error -22 [ 327.328663][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.528684][ T11] block nbd0: Possible stuck request ffff888025257000: control (read@0,1024B). Runtime 120 seconds [ 327.540270][ T11] block nbd0: Possible stuck request ffff8880252571c0: control (read@1024,1024B). Runtime 120 seconds [ 327.552151][ T11] block nbd0: Possible stuck request ffff888025257380: control (read@2048,1024B). Runtime 120 seconds [ 327.563526][ T11] block nbd0: Possible stuck request ffff888025257540: control (read@3072,1024B). Runtime 120 seconds [ 327.588620][ T5918] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 328.221683][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.379125][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 328.415480][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.456820][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.498901][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 328.526223][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 328.709446][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.724514][ T5918] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 328.738261][ T5918] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 328.758597][ T5918] usb 5-1: Manufacturer: syz [ 328.772036][ T5918] usb 5-1: config 0 descriptor?? [ 329.522758][ T8500] loop2: detected capacity change from 0 to 7 [ 329.544101][ T5206] Dev loop2: unable to read RDB block 7 [ 329.557524][ T8502] overlayfs: missing 'lowerdir' [ 329.558907][ T5206] loop2: unable to read partition table [ 329.576710][ T5206] loop2: partition table beyond EOD, truncated [ 329.598944][ T8500] Dev loop2: unable to read RDB block 7 [ 329.618871][ T8500] loop2: unable to read partition table [ 329.624786][ T8500] loop2: partition table beyond EOD, truncated [ 329.641683][ T8500] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 329.672344][ T8484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.682443][ T5206] Dev loop2: unable to read RDB block 7 [ 329.692327][ T5206] loop2: unable to read partition table [ 329.705007][ T8484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.718392][ T5206] loop2: partition table beyond EOD, truncated [ 329.725463][ T8507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.644'. [ 329.798840][ T8484] btrfs: Unknown parameter 'barrier$' [ 330.935886][ T8520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.009284][ T8520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.127459][ T5918] rc_core: IR keymap rc-hauppauge not found [ 331.549735][ T8522] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 331.568403][ T5918] Registered IR keymap rc-empty [ 331.598240][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 332.099378][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 332.200145][ T5918] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 332.307892][ T5918] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 332.352777][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 332.515889][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 332.546214][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 332.590149][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 332.629176][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 332.711126][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 332.758734][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 332.809303][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 332.848500][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 333.198529][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 333.862155][ T5918] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 333.878961][ T8016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.888383][ T5918] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 333.903922][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.933438][ T5918] usb 5-1: USB disconnect, device number 26 [ 334.215941][ T8558] netlink: 'syz.0.656': attribute type 1 has an invalid length. [ 334.223867][ T8558] netlink: 224 bytes leftover after parsing attributes in process `syz.0.656'. [ 335.425221][ T8572] overlayfs: failed to resolve './file1': -2 [ 335.841078][ T8579] fuse: Unknown parameter 'mc' [ 337.062198][ T8584] ip6tnl2: entered promiscuous mode [ 337.148470][ T8584] ip6tnl2: entered allmulticast mode [ 337.175324][ T8584] team0: Device ip6tnl2 is of different type [ 339.348214][ T8611] ISOFS: Unable to identify CD-ROM format. [ 339.399125][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.667808][ T1107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.043103][ T8605] netlink: 40 bytes leftover after parsing attributes in process `syz.0.669'. [ 340.590041][ T30] audit: type=1326 audit(2000000004.750:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8609 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8f8eb69 code=0x7fc00000 [ 340.713165][ T30] audit: type=1326 audit(2000000004.750:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8609 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f16c8f8eb69 code=0x7fc00000 [ 340.734910][ T30] audit: type=1326 audit(2000000004.750:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8609 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8f8eb69 code=0x7fc00000 [ 340.758516][ T30] audit: type=1326 audit(2000000004.750:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8609 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8f8eb69 code=0x7fc00000 [ 340.780316][ T30] audit: type=1326 audit(2000000004.750:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8609 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8f8eb69 code=0x7fc00000 [ 340.802110][ T30] audit: type=1326 audit(2000000004.750:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8609 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8f8eb69 code=0x7fc00000 [ 340.824099][ T30] audit: type=1326 audit(2000000004.750:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8609 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8f8eb69 code=0x7fc00000 [ 340.846236][ T30] audit: type=1326 audit(2000000004.750:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8609 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8f8eb69 code=0x7fc00000 [ 340.902273][ T30] audit: type=1326 audit(2000000004.760:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8609 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8f8eb69 code=0x7fc00000 [ 340.936356][ T30] audit: type=1326 audit(2000000004.760:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8609 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c8f8eb69 code=0x7fc00000 [ 341.000447][ T8622] block nbd4: shutting down sockets [ 341.010480][ T8621] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 341.017110][ T8621] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.045962][ T8621] vhci_hcd vhci_hcd.0: Device attached [ 341.213895][ T8622] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 341.220546][ T8622] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 341.246295][ T8622] vhci_hcd vhci_hcd.0: Device attached [ 342.064277][ T5919] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 342.156130][ T8621] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 342.231730][ T8622] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(19) [ 342.238390][ T8622] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 342.254379][ T5933] IPVS: starting estimator thread 0... [ 342.548681][ T8622] vhci_hcd vhci_hcd.0: Device attached [ 342.550602][ T8621] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 342.653161][ T8647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.719173][ T1215] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 344.058514][ T8644] IPVS: using max 24 ests per chain, 57600 per kthread [ 344.462788][ T8648] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(23) [ 344.469441][ T8648] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 344.508737][ T8648] vhci_hcd vhci_hcd.0: Device attached [ 344.555587][ T8621] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 344.568371][ T1215] usb 4-1: Using ep0 maxpacket: 16 [ 344.599014][ T8649] vhci_hcd: connection closed [ 344.600319][ T8016] vhci_hcd: stop threads [ 344.617365][ T8630] vhci_hcd: connection closed [ 344.618727][ T8624] vhci_hcd: connection reset by peer [ 344.620008][ T8642] vhci_hcd: connection closed [ 344.648738][ T8016] vhci_hcd: release socket [ 344.670258][ T8016] vhci_hcd: disconnect device [ 344.679650][ T8016] vhci_hcd: stop threads [ 344.690702][ T8016] vhci_hcd: release socket [ 344.697700][ T8016] vhci_hcd: disconnect device [ 344.719652][ T8016] vhci_hcd: stop threads [ 344.725698][ T8016] vhci_hcd: release socket [ 344.732259][ T8016] vhci_hcd: disconnect device [ 344.742508][ T8016] vhci_hcd: stop threads [ 344.756026][ T8016] vhci_hcd: release socket [ 344.939828][ T8016] vhci_hcd: disconnect device [ 346.017896][ T6096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.031126][ T8016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.152729][ T1215] usb 4-1: unable to get BOS descriptor or descriptor too short [ 346.172058][ T1215] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 346.289680][ T1215] usb 4-1: can't read configurations, error -71 [ 347.578020][ T5919] vhci_hcd: vhci_device speed not set [ 348.628784][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.692'. [ 349.362468][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 349.515922][ T8721] tmpfs: Bad value for 'mpol' [ 352.106252][ T6097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.714348][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 353.261730][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.706'. [ 353.803802][ T8752] CIFS: iocharset name too long [ 353.849067][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.992247][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'. [ 356.999269][ T8782] program syz.4.715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.518837][ T8016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 358.481141][ T11] block nbd0: Possible stuck request ffff888025257000: control (read@0,1024B). Runtime 150 seconds [ 358.497109][ T11] block nbd0: Possible stuck request ffff8880252571c0: control (read@1024,1024B). Runtime 150 seconds [ 358.508164][ T11] block nbd0: Possible stuck request ffff888025257380: control (read@2048,1024B). Runtime 150 seconds [ 358.519367][ T11] block nbd0: Possible stuck request ffff888025257540: control (read@3072,1024B). Runtime 150 seconds [ 358.593410][ T8796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'. [ 359.217571][ T8810] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 359.609746][ T1107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.752013][ T8809] netlink: 56 bytes leftover after parsing attributes in process `syz.0.724'. [ 359.948512][ T8809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.724'. [ 360.029241][ T8813] xt_hashlimit: invalid rate [ 360.360102][ T8822] loop6: detected capacity change from 0 to 63 [ 360.369628][ T8822] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.377934][ T8822] Buffer I/O error on dev loop6, logical block 1, async page read [ 360.386010][ T8822] Buffer I/O error on dev loop6, logical block 2, async page read [ 360.394002][ T8822] Buffer I/O error on dev loop6, logical block 3, async page read [ 360.402725][ T8822] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.410791][ T8822] Buffer I/O error on dev loop6, logical block 1, async page read [ 360.419016][ T8822] Buffer I/O error on dev loop6, logical block 2, async page read [ 360.427104][ T8822] Buffer I/O error on dev loop6, logical block 3, async page read [ 360.435198][ T8822] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.443295][ T8822] Buffer I/O error on dev loop6, logical block 1, async page read [ 361.192125][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'. [ 361.418561][ T8825] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 362.930426][ T8842] netlink: 80 bytes leftover after parsing attributes in process `syz.4.732'. [ 363.108675][ T5919] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 363.295393][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 363.296550][ T8016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.322497][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.343721][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 363.374363][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 363.516736][ T5919] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 363.536685][ T5919] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 363.557691][ T5919] usb 3-1: Manufacturer: syz [ 363.584770][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 363.614555][ T5919] usb 3-1: config 0 descriptor?? [ 363.832972][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 363.846117][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.861661][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.888424][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.910493][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.955794][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.016347][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.083455][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.877346][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.986796][ T5977] usb 3-1: USB disconnect, device number 28 [ 365.199351][ T1107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.719186][ T8883] xt_nat: multiple ranges no longer supported [ 368.179394][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'. [ 368.584900][ T8911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.636003][ T8919] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 369.212414][ T6097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 369.249065][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 369.434565][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 369.467801][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 369.510898][ T43] usb 3-1: config 8 has an invalid interface number: 24 but max is 1 [ 369.528376][ T43] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 369.580472][ T43] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 369.616484][ T43] usb 3-1: config 8 has no interface number 0 [ 369.654809][ T43] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 369.659434][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 369.708400][ T43] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 369.722608][ T43] usb 3-1: config 8 interface 24 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.239316][ T43] usb 3-1: config 8 interface 24 has no altsetting 0 [ 370.275318][ T43] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 370.318655][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.335423][ T43] usb 3-1: Product: syz [ 370.353803][ T43] usb 3-1: Manufacturer: syz [ 370.377726][ T43] usb 3-1: SerialNumber: syz [ 370.720888][ T8955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.761'. [ 370.810164][ T43] vmk80xx 3-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 370.862184][ T43] usb 3-1: USB disconnect, device number 30 [ 370.960034][ T6097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.518704][ T5933] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 371.801824][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.764'. [ 372.273213][ T5933] usb 4-1: device descriptor read/64, error -71 [ 372.517423][ T8968] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 372.530178][ T5933] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 373.385438][ T5933] usb 4-1: device descriptor read/64, error -71 [ 373.603573][ T5933] usb usb4-port1: attempt power cycle [ 373.646712][ T8978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 373.848383][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 374.012239][ T8983] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 374.018816][ T8983] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 374.028454][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 374.037670][ T43] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 374.069335][ T43] usb 3-1: config 4 has no interface number 0 [ 374.083509][ T5933] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 374.091546][ T43] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 374.145708][ T43] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 374.159818][ T8983] vhci_hcd vhci_hcd.0: Device attached [ 374.191459][ T43] usb 3-1: config 4 interface 51 has no altsetting 0 [ 374.200097][ T8984] vhci_hcd: connection closed [ 374.202366][ T59] vhci_hcd: stop threads [ 374.218537][ T43] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 374.228140][ T59] vhci_hcd: release socket [ 374.229403][ T5933] usb 4-1: device descriptor read/8, error -71 [ 374.232820][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.247552][ T59] vhci_hcd: disconnect device [ 374.259220][ T43] usb 3-1: Product: syz [ 374.280233][ T43] usb 3-1: Manufacturer: syz [ 374.285844][ T43] usb 3-1: SerialNumber: syz [ 374.318210][ T8975] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 374.358785][ T8975] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 374.648887][ T43] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -71 [ 374.683814][ T43] usb 3-1: USB disconnect, device number 31 [ 374.799067][ T6096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.384976][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.776'. [ 376.941417][ T1107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.075383][ T9016] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 377.083354][ T9016] netlink: 224 bytes leftover after parsing attributes in process `syz.0.774'. [ 377.805629][ T9023] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 378.656508][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.859571][ T9028] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 379.554055][ T9035] fuse: Bad value for 'fd' [ 379.852467][ T9043] adf_ctl_ioctl: 15 callbacks suppressed [ 379.852489][ T9043] QAT: Invalid ioctl 1075883590 [ 379.863322][ T9043] QAT: Invalid ioctl 1075883590 [ 379.868441][ T9043] QAT: Invalid ioctl 1075883590 [ 379.873428][ T9043] QAT: Invalid ioctl 1075883590 [ 379.878476][ T9043] QAT: Invalid ioctl 1075883590 [ 379.883476][ T9043] QAT: Invalid ioctl 1075883590 [ 379.888497][ T9043] QAT: Invalid ioctl 1075883590 [ 379.893849][ T9043] QAT: Invalid ioctl 1075883590 [ 379.899406][ T9043] QAT: Invalid ioctl 1075883590 [ 379.904506][ T9043] QAT: Invalid ioctl 1075883590 [ 381.250338][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.785'. [ 381.262090][ T6097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 381.839505][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.787'. [ 382.448520][ T5933] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 382.467556][ T9066] ÿ: renamed from bond_slave_0 (while UP) [ 382.481168][ T6096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.627560][ T9073] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 382.647863][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 382.830249][ T5933] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 382.841439][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.468348][ T5933] usb 3-1: Product: syz [ 383.472681][ T5933] usb 3-1: Manufacturer: syz [ 383.477319][ T5933] usb 3-1: SerialNumber: syz [ 383.523274][ T5933] usb 3-1: config 0 descriptor?? [ 383.770845][ T9083] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 383.822597][ T9083] nbd: error processing sock list [ 383.828229][ T9083] block nbd1: shutting down sockets [ 383.834805][ T5905] usb 3-1: USB disconnect, device number 32 [ 385.842602][ T9106] syz.1.798: attempt to access beyond end of device [ 385.842602][ T9106] loop1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 385.856811][ T9106] qnx4: unable to read the superblock [ 386.508783][ T5977] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 386.694787][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 386.970017][ T6096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.018469][ T5977] usb 4-1: Using ep0 maxpacket: 16 [ 387.066408][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.176921][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.217859][ T5977] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 387.262641][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.429582][ T9127] netlink: 'syz.1.801': attribute type 1 has an invalid length. [ 387.437384][ T9127] netlink: 224 bytes leftover after parsing attributes in process `syz.1.801'. [ 387.811394][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.858434][ T5977] usb 4-1: config 0 descriptor?? [ 388.328722][ T5977] corsair 0003:1B1C:1B02.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 388.889100][ T6299] block nbd0: Possible stuck request ffff888025257000: control (read@0,1024B). Runtime 180 seconds [ 388.900063][ T6299] block nbd0: Possible stuck request ffff8880252571c0: control (read@1024,1024B). Runtime 180 seconds [ 388.935148][ T6299] block nbd0: Possible stuck request ffff888025257380: control (read@2048,1024B). Runtime 180 seconds [ 388.981404][ T6299] block nbd0: Possible stuck request ffff888025257540: control (read@3072,1024B). Runtime 180 seconds [ 389.392373][ T5977] corsair 0003:1B1C:1B02.0008: Failed to get K90 initial state (error -71). [ 389.479400][ T5977] usb 4-1: USB disconnect, device number 24 [ 389.633277][ T9138] xt_CT: No such helper "snmp" [ 389.984741][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'. [ 391.019598][ T9154] hsr_slave_0 (unregistering): left promiscuous mode [ 391.022825][ T9164] loop2: detected capacity change from 0 to 7 [ 391.121715][ T9164] Dev loop2: unable to read RDB block 7 [ 391.164326][ T9164] loop2: unable to read partition table [ 391.200658][ T9164] loop2: partition table beyond EOD, truncated [ 391.240640][ T9164] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 392.722492][ T6096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.369480][ T6097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.993161][ T9212] adf_ctl_ioctl: 15 callbacks suppressed [ 394.993180][ T9212] QAT: Invalid ioctl 1075883590 [ 395.004119][ T9212] QAT: Invalid ioctl 1075883590 [ 395.009726][ T9212] QAT: Invalid ioctl 1075883590 [ 395.015044][ T9212] QAT: Invalid ioctl 1075883590 [ 395.020069][ T9212] QAT: Invalid ioctl 1075883590 [ 395.025088][ T9212] QAT: Invalid ioctl 1075883590 [ 395.030302][ T9212] QAT: Invalid ioctl 1075883590 [ 395.035283][ T9212] QAT: Invalid ioctl 1075883590 [ 395.040357][ T9212] QAT: Invalid ioctl 1075883590 [ 395.045400][ T9212] QAT: Invalid ioctl 1075883590 [ 399.119571][ T6096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 399.130956][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 399.471755][ T9251] netlink: 'syz.2.834': attribute type 2 has an invalid length. [ 400.176135][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 400.176156][ T30] audit: type=1800 audit(2000000064.840:297): pid=9263 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.838" name="bus" dev="overlay" ino=937 res=0 errno=0 [ 400.229796][ T9266] overlay: filesystem on ./file1 not supported as upperdir [ 400.269074][ T5918] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 400.422242][ T9269] netlink: 32 bytes leftover after parsing attributes in process `syz.3.839'. [ 401.032231][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.081170][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.118565][ T5918] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 401.138672][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.157528][ T5918] usb 5-1: config 0 descriptor?? [ 401.170022][ T9271] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 402.524829][ T9260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.568949][ T9260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.936615][ T6096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.960751][ T6097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.940832][ T5918] usbhid 5-1:0.0: can't add hid device: -71 [ 405.948467][ T5918] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 405.969784][ T5918] usb 5-1: USB disconnect, device number 27 [ 407.130660][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 410.243137][ T1107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.433374][ T9320] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 411.584174][ T9335] binder: BINDER_SET_CONTEXT_MGR already set [ 411.616298][ T9335] binder: 9334:9335 ioctl 40046207 0 returned -16 [ 411.922984][ T6097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 411.956713][ T30] audit: type=1326 audit(2000000076.620:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9344 comm="syz.1.860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe48c18eb69 code=0x0 [ 412.064537][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'. [ 412.718769][ T9351] fuse: root generation should be zero [ 413.734854][ T9362] comedi comedi3: comedi_config --init_data is deprecated [ 413.944096][ T9369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.866'. [ 414.241906][ T9380] 9pnet_fd: Insufficient options for proto=fd [ 414.466302][ T9388] overlay: Bad value for 'lowerdir' [ 414.873347][ T9394] overlayfs: failed to resolve './file0': -2 [ 415.265826][ T5933] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 415.623987][ T9401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.653250][ T5933] usb 5-1: no configurations [ 415.664926][ T5933] usb 5-1: can't read configurations, error -22 [ 415.761598][ T8016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 416.288618][ T5933] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 416.514204][ T5933] usb 5-1: no configurations [ 417.300027][ T8016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.311283][ T5933] usb 5-1: can't read configurations, error -22 [ 417.442402][ T5933] usb usb5-port1: attempt power cycle [ 417.704241][ T9419] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 417.712355][ T9419] netlink: 224 bytes leftover after parsing attributes in process `syz.1.879'. [ 417.968487][ T5933] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 418.157583][ T9432] bond0: entered promiscuous mode [ 418.163406][ T9432] ÿ: entered promiscuous mode [ 418.238624][ T5933] usb 5-1: device not accepting address 30, error -71 [ 418.263530][ T9432] bond_slave_1: entered promiscuous mode [ 418.298995][ T9432] bond0: entered allmulticast mode [ 418.868443][ T9432] ÿ: entered allmulticast mode [ 418.902014][ T9432] bond_slave_1: entered allmulticast mode [ 418.959473][ T11] block nbd0: Possible stuck request ffff888025257000: control (read@0,1024B). Runtime 210 seconds [ 418.973005][ T11] block nbd0: Possible stuck request ffff8880252571c0: control (read@1024,1024B). Runtime 210 seconds [ 418.988502][ T11] block nbd0: Possible stuck request ffff888025257380: control (read@2048,1024B). Runtime 210 seconds [ 419.028478][ T11] block nbd0: Possible stuck request ffff888025257540: control (read@3072,1024B). Runtime 210 seconds [ 419.063694][ T9444] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 420.284689][ T9457] dummy0: entered promiscuous mode [ 420.286993][ T9457] dummy0: left promiscuous mode [ 421.520246][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.898497][ T9475] netlink: 'syz.3.894': attribute type 7 has an invalid length. [ 421.906699][ T9475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.894'. [ 422.180968][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.897'. [ 422.808921][ T6097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.388108][ T9502] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 424.931884][ T9512] netlink: 'syz.1.904': attribute type 1 has an invalid length. [ 424.940265][ T9512] netlink: 224 bytes leftover after parsing attributes in process `syz.1.904'. [ 426.239017][ T9529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'. [ 426.278471][ T5948] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 426.291257][ T9529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.504560][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 426.553680][ T5948] usb 5-1: unable to get BOS descriptor or descriptor too short [ 426.688891][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 426.711689][ T9530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.910'. [ 426.738402][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 426.799207][ T5948] usb 5-1: can't read configurations, error -71 [ 427.295216][ T6096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.942938][ T8016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.579610][ T5933] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 429.776977][ T5933] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.847535][ T5918] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 429.858481][ T5933] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 429.880826][ T5933] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 429.897748][ T5933] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.937099][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.946345][ T5933] usb 3-1: Product: syz [ 429.968521][ T5933] usb 3-1: Manufacturer: syz [ 429.975916][ T5933] usb 3-1: SerialNumber: syz [ 430.012607][ T5933] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 430.019576][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 430.042202][ T5933] cdc_ncm 3-1:1.0: bind() failure [ 430.049570][ T5918] usb 4-1: config 4 has an invalid interface number: 9 but max is 0 [ 430.074328][ T5918] usb 4-1: config 4 has no interface number 0 [ 430.081196][ T5918] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 430.100972][ T5918] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 430.287292][ T5918] usb 4-1: config 4 interface 9 has no altsetting 0 [ 430.308981][ T5918] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 430.318100][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.333829][ T5918] usb 4-1: Product: syz [ 430.342583][ T5918] usb 4-1: Manufacturer: syz [ 430.347382][ T5918] usb 4-1: SerialNumber: syz [ 430.364336][ T9559] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 430.374220][ T9559] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 430.638400][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'. [ 431.158550][ T5918] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 431.322756][ T8004] usb 4-1: Failed to submit usb control message: -71 [ 431.334465][ T8004] usb 4-1: unable to send the bmi data to the device: -71 [ 431.351279][ T5918] usb 4-1: USB disconnect, device number 25 [ 431.363840][ T8004] usb 4-1: unable to get target info from device [ 431.379582][ T8004] usb 4-1: could not get target info (-71) [ 431.394754][ T8004] usb 4-1: could not probe fw (-71) [ 431.969136][ T9577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.010534][ T9577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.885633][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.922'. [ 433.230890][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.366905][ T5933] usb 3-1: USB disconnect, device number 33 [ 433.384892][ T30] audit: type=1400 audit(2000000098.030:299): lsm=SMACK fn=smack_inode_remove_acl action=denied subject="w" object="_" requested=w pid=9580 comm="syz.3.923" name="file1" dev="tmpfs" ino=1049 [ 433.681949][ T6097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.089704][ T9591] batadv_slave_1: entered promiscuous mode [ 434.198418][ T9586] batadv_slave_1: left promiscuous mode [ 435.003350][ T9600] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[9600] [ 436.310579][ T1215] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 437.334271][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.934'. [ 438.444350][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.525959][ T1215] usb 5-1: unable to read config index 0 descriptor/all [ 438.525999][ T1215] usb 5-1: can't read configurations, error -71 [ 438.950580][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 439.474577][ T6097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.996978][ T9658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.096701][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.782467][ T9665] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 443.779665][ T5957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.882685][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 443.901152][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 443.916340][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 443.943259][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 443.951202][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 444.069921][ T9676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.947'. [ 445.173911][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.947'. [ 445.193045][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.953'. [ 445.202472][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.452752][ T9699] netlink: 56 bytes leftover after parsing attributes in process `syz.4.951'. [ 446.155358][ T51] Bluetooth: hci5: command tx timeout [ 447.126904][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 447.912671][ T6096] Bluetooth: hci6: Frame reassembly failed (-84) [ 448.331234][ T5842] Bluetooth: hci5: command tx timeout [ 448.362646][ T9722] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 448.441692][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 449.015858][ T9721] 9pnet_fd: Insufficient options for proto=fd [ 449.025302][ T9722] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 449.055241][ T8016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.105410][ T11] block nbd0: Possible stuck request ffff888025257000: control (read@0,1024B). Runtime 240 seconds [ 449.116288][ T11] block nbd0: Possible stuck request ffff8880252571c0: control (read@1024,1024B). Runtime 240 seconds [ 449.127319][ T11] block nbd0: Possible stuck request ffff888025257380: control (read@2048,1024B). Runtime 240 seconds [ 449.138341][ T11] block nbd0: Possible stuck request ffff888025257540: control (read@3072,1024B). Runtime 240 seconds [ 449.330628][ T9673] chnl_net:caif_netlink_parms(): no params data found [ 450.331986][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 450.338528][ T5842] Bluetooth: hci6: command 0x1003 tx timeout [ 450.398688][ T51] Bluetooth: hci5: command tx timeout [ 450.970432][ T8016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 451.890297][ T9673] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.920134][ T9673] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.927516][ T9673] bridge_slave_0: entered allmulticast mode [ 451.957428][ T9673] bridge_slave_0: entered promiscuous mode [ 451.973403][ T9673] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.989176][ T9673] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.996647][ T9673] bridge_slave_1: entered allmulticast mode [ 452.009873][ T9673] bridge_slave_1: entered promiscuous mode [ 452.478796][ T51] Bluetooth: hci5: command tx timeout [ 452.948849][ T9673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.996960][ T9673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.273570][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 453.549007][ T5206] udevd[5206]: worker [5851] /devices/virtual/block/nbd0 timeout; kill it [ 453.840017][ T9673] team0: Port device team_slave_0 added [ 453.928723][ T5206] udevd[5206]: seq 12277 '/devices/virtual/block/nbd0' killed [ 453.930565][ T9673] team0: Port device team_slave_1 added [ 454.270810][ T9766] netlink: 52 bytes leftover after parsing attributes in process `syz.3.968'. [ 454.585417][ T9766] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 455.768991][ T6096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.876383][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.884393][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.918177][ T9673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.931387][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.938692][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.967319][ T9673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.216396][ T9779] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 456.392319][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 456.401689][ T9779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.970'. [ 456.689914][ T9673] hsr_slave_0: entered promiscuous mode [ 456.697030][ T9673] hsr_slave_1: entered promiscuous mode [ 456.704523][ T9673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.712784][ T9673] Cannot create hsr debugfs directory [ 456.719364][ T8016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.891077][ T9673] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 457.949130][ T9673] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 457.966579][ T9673] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 458.015901][ T9673] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 458.318709][ T9673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.425825][ T9673] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.446014][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.453172][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.489170][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.496309][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.392521][ T9673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.588370][ T1215] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 459.752415][ T9832] vxcan1: tx address claim with dest, not broadcast [ 459.760285][ T1215] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.778400][ T1215] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 459.791818][ T1215] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 459.801094][ T1215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.815094][ T1215] usb 5-1: config 0 descriptor?? [ 459.841147][ T1215] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 459.850309][ T1215] dvb-usb: bulk message failed: -22 (3/0) [ 460.389647][ T1215] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 460.432949][ T9828] dibusb: i2c wr: len=61 is too big! [ 460.432949][ T9828] [ 460.447391][ T1215] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 460.473845][ T1215] usb 5-1: media controller created [ 460.507246][ T1215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 460.590391][ T1215] dvb-usb: bulk message failed: -22 (6/0) [ 460.596547][ T1215] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 460.679892][ T1215] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 461.061994][ T8016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 461.230596][ T1215] dvb-usb: schedule remote query interval to 150 msecs. [ 461.237596][ T1215] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 461.311959][ T1215] usb 5-1: USB disconnect, device number 36 [ 461.492480][ T1215] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 461.625011][ T9673] veth0_vlan: entered promiscuous mode [ 461.689705][ T9673] veth1_vlan: entered promiscuous mode [ 461.898398][ T9673] veth0_macvtap: entered promiscuous mode [ 461.935761][ T9673] veth1_macvtap: entered promiscuous mode [ 462.063231][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.090504][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.171106][ T9673] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.180522][ T9673] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.208311][ T9673] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.221147][ T9673] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.264097][ T51] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 462.328778][ T5977] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 462.482208][ T9862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.988'. [ 462.491551][ T9862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.988'. [ 462.500948][ T9862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.988'. [ 462.817067][ T6096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 462.893607][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 462.925507][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 462.951633][ T5977] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 462.968802][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.973634][ T6096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.976912][ T5977] usb 5-1: Product: syz [ 462.976931][ T5977] usb 5-1: Manufacturer: syz [ 462.996269][ T6096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.036578][ T5977] usb 5-1: SerialNumber: syz [ 463.048641][ T5918] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 463.078842][ T5977] usb 5-1: config 0 descriptor?? [ 463.093476][ T5977] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 463.103576][ T9864] netlink: 'syz.2.989': attribute type 10 has an invalid length. [ 463.110459][ T6096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.121474][ T6096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.218282][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 463.227127][ T9865] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 463.436051][ T5977] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 463.984974][ T5918] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 463.993768][ T5918] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 464.002281][ T5918] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 464.010567][ T5918] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 464.018862][ T5918] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 464.028322][ T5918] usb 4-1: config 0 has no interface number 0 [ 464.034470][ T5918] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 464.059239][ T5977] usb 5-1: USB disconnect, device number 37 [ 464.118265][ T5918] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 464.148003][ T5918] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 464.159144][ T5918] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.446821][ T5918] usb 4-1: config 0 interface 125 has no altsetting 0 [ 464.469763][ T5918] usb 4-1: config 0 interface 125 has no altsetting 2 [ 464.563572][ T5918] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 464.573311][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.602860][ T5918] usb 4-1: Product: syz [ 464.624532][ T5918] usb 4-1: Manufacturer: syz [ 464.632643][ T5918] usb 4-1: SerialNumber: syz [ 464.679381][ T5918] usb 4-1: config 0 descriptor?? [ 464.865011][ T5918] usb 4-1: selecting invalid altsetting 2 [ 465.862322][ T9860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.869776][ T9860] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 465.881273][ T9860] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 465.901873][ C0] usb 4-1: async_complete: urb error -71 [ 465.907661][ C0] usb 4-1: async_complete: urb error -71 [ 465.916222][ T5918] get_1284_register: usb error -71 [ 465.921536][ T5918] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 465.960296][ T5918] usb 4-1: USB disconnect, device number 26 [ 466.418537][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 466.427086][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 466.435925][ T51] Bluetooth: hci0: hardware error 0x00 [ 467.974876][ T5957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.540900][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 468.900381][ T9909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1000'. [ 469.003627][ T9910] netlink: 'syz.4.1001': attribute type 1 has an invalid length. [ 469.201325][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 469.211515][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 469.220779][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 469.231687][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 469.240540][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 469.431892][ T9916] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 469.633998][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1002'. [ 469.643389][ T9918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1002'. [ 471.278623][ T5842] Bluetooth: hci6: command tx timeout [ 471.547178][ T9940] /dev/nullb0: Can't open blockdev [ 471.828366][ T1215] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 471.850845][ T9913] chnl_net:caif_netlink_parms(): no params data found [ 471.988960][ T1215] usb 4-1: Using ep0 maxpacket: 16 [ 472.005970][ T1215] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.031587][ T1215] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.063702][ T1215] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 472.078000][ T1215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.103321][ T1215] usb 4-1: Product: syz [ 472.107562][ T1215] usb 4-1: Manufacturer: syz [ 472.273338][ T1215] usb 4-1: SerialNumber: syz [ 473.370872][ T5842] Bluetooth: hci6: command tx timeout [ 473.951411][ T1215] usb 4-1: 0:2 : does not exist [ 473.999600][ T5957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.068291][ T30] audit: type=1326 audit(2000000138.730:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.5.1014" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99a898eb69 code=0x0 [ 474.112167][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.120368][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.127754][ T9913] bridge_slave_0: entered allmulticast mode [ 474.285158][ T9913] bridge_slave_0: entered promiscuous mode [ 474.316841][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.080793][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.088332][ T9913] bridge_slave_1: entered allmulticast mode [ 475.097205][ T9913] bridge_slave_1: entered promiscuous mode [ 475.336827][ T9913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.405230][ T9913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.438962][ T5842] Bluetooth: hci6: command tx timeout [ 475.527291][ T1215] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 475.607631][ T1215] usb 4-1: USB disconnect, device number 27 [ 475.610799][ T9913] team0: Port device team_slave_0 added [ 475.658776][ T9984] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1019'. [ 475.674783][ T9913] team0: Port device team_slave_1 added [ 475.704416][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.837722][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.852477][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.889434][ T9913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.906111][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.913851][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.968638][ T9913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.518702][ T5842] Bluetooth: hci6: command tx timeout [ 478.869499][ T9913] hsr_slave_0: entered promiscuous mode [ 478.879054][ T9913] hsr_slave_1: entered promiscuous mode [ 478.886262][ T9913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.939649][ T9913] Cannot create hsr debugfs directory [ 479.119196][ T11] block nbd0: Possible stuck request ffff888025257000: control (read@0,1024B). Runtime 270 seconds [ 479.130536][ T11] block nbd0: Possible stuck request ffff8880252571c0: control (read@1024,1024B). Runtime 270 seconds [ 479.159266][ T11] block nbd0: Possible stuck request ffff888025257380: control (read@2048,1024B). Runtime 270 seconds [ 479.170539][ T11] block nbd0: Possible stuck request ffff888025257540: control (read@3072,1024B). Runtime 270 seconds [ 479.688536][ T5977] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 479.861313][T10006] block device autoloading is deprecated and will be removed. [ 480.039308][ T5933] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 480.064339][ T5977] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 480.209204][ T5977] usb 4-1: config 0 has no interface number 0 [ 480.259027][ T5977] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 480.266236][T10018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.338658][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 480.401276][ T6097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.511279][ T5977] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 480.706664][ T5933] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.788437][ T5933] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 480.805725][ T5933] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.819073][ T5933] usb 3-1: config 0 interface 0 has no altsetting 0 [ 480.837656][ T5977] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 480.868441][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.890677][ T5977] usb 4-1: Product: syz [ 480.894903][ T5977] usb 4-1: Manufacturer: syz [ 480.900476][ T5933] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 480.913321][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.061108][ T5933] usb 3-1: Product: syz [ 481.066108][ T5977] usb 4-1: SerialNumber: syz [ 481.071182][ T5933] usb 3-1: Manufacturer: syz [ 481.075831][ T5933] usb 3-1: SerialNumber: syz [ 481.102780][ T5977] usb 4-1: config 0 descriptor?? [ 481.112048][ T5933] usb 3-1: config 0 descriptor?? [ 481.120655][T10010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 481.750611][ T5933] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 481.899271][T10013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.925698][T10013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.142288][T10029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.204868][T10029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.371843][ T5933] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 482.417419][ T9913] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 482.421229][ T5933] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 482.445145][ T9913] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 482.469881][ T5933] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 482.488462][ T43] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 482.502371][ T9913] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 482.567941][ T9913] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 482.670347][ T43] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.686808][ T43] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.712607][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 482.725442][ T43] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 482.745621][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.780662][ T43] usb 5-1: config 0 descriptor?? [ 482.889318][ T5977] usb 4-1: USB disconnect, device number 28 [ 482.916208][ T9913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.930673][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 482.980773][ T9913] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.009017][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.016253][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.035642][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.042841][ T6097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.360503][ T9913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.575206][ T43] usb 5-1: string descriptor 0 read error: -22 [ 483.600811][ T1107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.448540][ T43] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0009/input/input13 [ 484.503486][ T5977] usb 3-1: USB disconnect, device number 34 [ 484.652617][ T43] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0009/input/input14 [ 484.741531][T10048] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1035'. [ 484.797968][ T43] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0009/input/input15 [ 485.121683][ T43] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0009/input/input16 [ 485.365023][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1040'. [ 485.766957][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.826837][ T43] uclogic 0003:256C:006D.0009: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 485.946907][T10070] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 486.374988][ T9913] veth0_vlan: entered promiscuous mode [ 488.370771][ T43] usb 5-1: USB disconnect, device number 38 [ 490.100961][ T8016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.781336][T10082] 8021q: VLANs not supported on caif0 [ 490.819586][ T9913] veth1_vlan: entered promiscuous mode [ 491.203719][ T9913] veth0_macvtap: entered promiscuous mode [ 491.275422][ T9913] veth1_macvtap: entered promiscuous mode [ 491.298109][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.433828][T10102] FAULT_INJECTION: forcing a failure. [ 491.433828][T10102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.447350][T10102] CPU: 0 UID: 0 PID: 10102 Comm: syz.5.1048 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 491.447378][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.447397][T10102] Call Trace: [ 491.447409][T10102] [ 491.447419][T10102] dump_stack_lvl+0x189/0x250 [ 491.447449][T10102] ? irqentry_exit+0x74/0x90 [ 491.447474][T10102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.447519][T10102] should_fail_ex+0x414/0x560 [ 491.447546][T10102] _copy_from_user+0x2d/0xb0 [ 491.447577][T10102] __sys_bpf+0x1ed/0x860 [ 491.447611][T10102] ? __pfx___sys_bpf+0x10/0x10 [ 491.447675][T10102] __x64_sys_bpf+0x7c/0x90 [ 491.447704][T10102] do_syscall_64+0xfa/0x3b0 [ 491.447730][T10102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.447750][T10102] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 491.447771][T10102] ? clear_bhb_loop+0x60/0xb0 [ 491.447797][T10102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.447818][T10102] RIP: 0033:0x7f99a898eb69 [ 491.447837][T10102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.447856][T10102] RSP: 002b:00007f99a9729038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.447878][T10102] RAX: ffffffffffffffda RBX: 00007f99a8bb6160 RCX: 00007f99a898eb69 [ 491.447894][T10102] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 491.447907][T10102] RBP: 00007f99a9729090 R08: 0000000000000000 R09: 0000000000000000 [ 491.447921][T10102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.447934][T10102] R13: 0000000000000000 R14: 00007f99a8bb6160 R15: 00007ffef41c3998 [ 491.447967][T10102] [ 491.788533][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.082301][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.130119][ T9913] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.232673][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'. [ 492.582325][ T9913] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.595601][ T9913] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.604463][ T9913] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.221531][ T6096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.330374][ T6096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.468539][ T5933] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 494.502129][ T6096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.524120][ T6096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.658621][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 494.681093][ T5933] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 494.699193][ T5933] usb 3-1: config 0 has no interface number 0 [ 494.705380][ T5933] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 494.756857][ T5933] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 494.809756][ T5933] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 494.845039][ T5933] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 494.882061][ T5933] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 494.908542][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.924519][ T5933] usb 3-1: config 0 descriptor?? [ 494.943250][ T5933] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 495.198040][T10143] ceph: separator ':' missing in source [ 495.213471][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1061'. [ 495.239699][ T5933] usb 3-1: USB disconnect, device number 35 [ 495.249564][ T5933] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 495.356921][T10148] kAFS: No cell specified [ 495.678965][ T6097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.708287][ T5918] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 495.899104][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 495.930689][ T5918] usb 5-1: config 53 has an invalid interface number: 240 but max is 0 [ 496.459829][ T5918] usb 5-1: config 53 has no interface number 0 [ 496.489004][ T5918] usb 5-1: config 53 interface 240 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 496.560368][ T5918] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 496.577461][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.675879][ T5918] usb 5-1: Product: syz [ 496.680809][ T5918] usb 5-1: Manufacturer: syz [ 496.685463][ T5918] usb 5-1: SerialNumber: syz [ 496.699559][T10156] batman_adv: batadv0: Adding interface: dummy0 [ 496.705863][T10156] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.764346][T10148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 496.937173][T10156] batman_adv: batadv0: Interface activated: dummy0 [ 497.058764][ T6097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.440067][ T5918] kvaser_usb 5-1:53.240: error -ENODEV: Cannot get usb endpoint(s) [ 497.446690][T10160] batadv0: mtu less than device minimum [ 497.457612][ T5918] usb 5-1: USB disconnect, device number 39 [ 497.556210][T10163] virtio-fs: tag not found [ 497.949897][T10160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 497.962283][T10160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 497.974402][T10160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 497.985899][T10160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 497.997252][T10160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 498.008694][T10160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 498.020187][T10160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 498.031578][T10160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 498.043170][T10160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 499.279594][T10178] netlink: 'syz.4.1071': attribute type 15 has an invalid length. [ 500.203399][T10202] ip6erspan0: entered promiscuous mode [ 500.219872][T10202] tipc: Cannot configure node identity twice [ 500.301189][ T43] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 500.878910][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.893235][ T43] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 501.367985][ T43] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 501.470224][ T43] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 501.521507][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.561024][ T43] usb 5-1: config 220 has no interface number 2 [ 501.710188][ T43] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 501.724222][ T43] usb 5-1: config 220 interface 0 has no altsetting 0 [ 501.750930][ T43] usb 5-1: config 220 interface 76 has no altsetting 0 [ 501.757865][ T43] usb 5-1: config 220 interface 1 has no altsetting 0 [ 501.778674][ T43] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 501.788796][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.796918][ T43] usb 5-1: Product: syz [ 501.801245][ T43] usb 5-1: Manufacturer: syz [ 501.805959][ T43] usb 5-1: SerialNumber: syz [ 502.651896][ T43] usb 5-1: can't set config #220, error -71 [ 502.680869][ T43] usb 5-1: USB disconnect, device number 40 [ 502.903772][ T6096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 503.033726][ T5977] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 503.611414][ T5933] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 503.700808][ T5977] usb 3-1: config 6 has an invalid interface number: 108 but max is 0 [ 503.709337][ T5977] usb 3-1: config 6 has no interface number 0 [ 503.720419][ T5977] usb 3-1: config 6 interface 108 has no altsetting 0 [ 503.733297][T10225] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 503.746832][ T5977] usb 3-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=d2.1d [ 503.756356][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.768402][T10225] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 503.788301][ T5977] usb 3-1: Product: syz [ 503.803287][ T5977] usb 3-1: Manufacturer: syz [ 503.814703][ T5977] usb 3-1: SerialNumber: syz [ 503.819609][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 503.828689][ T5933] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 504.016636][ T5933] usb 4-1: config 0 has no interface number 0 [ 504.037490][ T5933] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.842368][ T5933] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.852730][ T5933] usb 4-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.865822][ T5933] usb 4-1: config 0 interface 2 has no altsetting 0 [ 504.896154][ T5933] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 505.007431][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.110374][ T5933] usb 4-1: config 0 descriptor?? [ 505.122381][ T5977] mos7840 3-1:6.108: missing endpoints [ 505.161046][ T5977] usb 3-1: USB disconnect, device number 36 [ 505.689213][ T5919] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 505.727809][T10239] virtio-fs: tag not found [ 505.848369][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 506.233284][ T5919] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 506.269843][ T5919] usb 5-1: config 1 has no interface number 0 [ 506.298781][ T5919] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 506.342155][T10242] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1087'. [ 506.371189][ T5919] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 506.382732][ T5919] usb 5-1: config 1 interface 105 has no altsetting 0 [ 506.400267][ T5919] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 506.412577][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.426718][ T5919] usb 5-1: Product: syz [ 506.434110][ T5919] usb 5-1: Manufacturer: syz [ 506.442787][ T5919] usb 5-1: SerialNumber: syz [ 506.457624][T10234] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 506.471456][T10234] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 506.640465][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.697930][T10249] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 506.710619][T10249] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 506.823490][ T5933] usbhid 4-1:0.2: can't add hid device: -71 [ 506.939824][ T5919] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 507.002314][ T5933] usbhid 4-1:0.2: probe with driver usbhid failed with error -71 [ 507.030941][ T5919] aqc111 5-1:1.105: probe with driver aqc111 failed with error -32 [ 507.365112][ T5933] usb 4-1: USB disconnect, device number 29 [ 508.377221][ T5919] usb 5-1: USB disconnect, device number 41 [ 508.562809][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 508.978720][T10288] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1097'. [ 509.318719][ T11] block nbd0: Possible stuck request ffff888025257000: control (read@0,1024B). Runtime 300 seconds [ 509.330271][ T11] block nbd0: Possible stuck request ffff8880252571c0: control (read@1024,1024B). Runtime 300 seconds [ 509.341938][ T11] block nbd0: Possible stuck request ffff888025257380: control (read@2048,1024B). Runtime 300 seconds [ 509.356336][ T11] block nbd0: Possible stuck request ffff888025257540: control (read@3072,1024B). Runtime 300 seconds [ 510.243098][T10303] random: crng reseeded on system resumption [ 512.741763][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 514.318603][ T6097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 516.053159][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 517.558566][T10373] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1119'. [ 517.568311][ T43] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 517.958580][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 517.992463][ T43] usb 5-1: config 0 has no interface number 0 [ 518.031117][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.078726][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.124903][ T43] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.172101][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 518.190097][ T43] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 518.217326][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.261117][ T43] usb 5-1: config 0 descriptor?? [ 519.270545][ T43] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.000A/input/input17 [ 519.286965][ T43] uclogic 0003:28BD:0042.000A: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 519.519734][ T5977] usb 5-1: USB disconnect, device number 42 [ 519.622039][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1124'. [ 520.256958][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 520.358542][ T5926] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 520.498329][ T5926] usb 4-1: device descriptor read/64, error -71 [ 520.747831][T10412] adf_ctl_ioctl: 15 callbacks suppressed [ 520.747851][T10412] QAT: Invalid ioctl 1075883590 [ 520.758973][T10412] QAT: Invalid ioctl 1075883590 [ 520.763963][T10412] QAT: Invalid ioctl 1075883590 [ 520.769037][T10412] QAT: Invalid ioctl 1075883590 [ 520.774360][T10412] QAT: Invalid ioctl 1075883590 [ 520.779600][T10412] QAT: Invalid ioctl 1075883590 [ 520.784575][T10412] QAT: Invalid ioctl 1075883590 [ 520.789838][T10412] QAT: Invalid ioctl 1075883590 [ 520.794955][T10412] QAT: Invalid ioctl 1075883590 [ 520.800239][T10412] QAT: Invalid ioctl 1075883590 [ 520.817494][T10414] can0: slcan on ttyS3. [ 520.837522][ T5926] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 521.009647][ T5926] usb 4-1: device descriptor read/64, error -71 [ 521.175677][ T5926] usb usb4-port1: attempt power cycle [ 521.442953][T10400] can0 (unregistered): slcan off ttyS3. [ 521.655168][T10416] net_ratelimit: 10 callbacks suppressed [ 521.655186][T10416] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 521.901048][ T5926] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 521.958230][ T5926] usb 4-1: device descriptor read/8, error -71 [ 522.378437][ T5926] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 522.413340][ T5926] usb 4-1: device descriptor read/8, error -71 [ 522.498930][ T5977] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 522.548650][ T5926] usb usb4-port1: unable to enumerate USB device [ 523.037012][ T5977] usb 5-1: device descriptor read/64, error -71 [ 523.280769][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.331817][ T5977] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 523.638492][ T5977] usb 5-1: device descriptor read/64, error -71 [ 523.764621][T10440] smc: net device bond0 applied user defined pnetid SYZ2 [ 524.208060][ T5977] usb usb5-port1: attempt power cycle [ 524.598493][ T5977] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 524.640542][ T5977] usb 5-1: device descriptor read/8, error -71 [ 525.997251][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 526.259683][T10466] adf_ctl_ioctl: 15 callbacks suppressed [ 526.259703][T10466] QAT: Invalid ioctl 1075883590 [ 526.270485][T10466] QAT: Invalid ioctl 1075883590 [ 526.275470][T10466] QAT: Invalid ioctl 1075883590 [ 526.280495][T10466] QAT: Invalid ioctl 1075883590 [ 526.285468][T10466] QAT: Invalid ioctl 1075883590 [ 526.290886][T10466] QAT: Invalid ioctl 1075883590 [ 526.295872][T10466] QAT: Invalid ioctl 1075883590 [ 526.300891][T10466] QAT: Invalid ioctl 1075883590 [ 526.306793][T10466] QAT: Invalid ioctl 1075883590 [ 526.312238][T10466] QAT: Invalid ioctl 1075883590 [ 526.339436][T10464] Invalid logical block size (130) [ 526.494321][T10471] virtio-fs: tag not found [ 528.077523][T10484] fuse: Unknown parameter '184467440737095516150x000000000000000800000000000000000000' [ 529.045677][ T1107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 529.598424][ T30] audit: type=1326 audit(2000000194.260:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f99a8985b27 code=0x7ffc0000 [ 530.648253][ T30] audit: type=1326 audit(2000000194.260:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f99a892ad69 code=0x7ffc0000 [ 531.613284][ T30] audit: type=1326 audit(2000000194.260:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a898eb69 code=0x7ffc0000 [ 531.614529][ T5957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.595727][ T30] audit: type=1326 audit(2000000194.260:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f99a8985b27 code=0x7ffc0000 [ 532.617509][ T30] audit: type=1326 audit(2000000194.260:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f99a892ad69 code=0x7ffc0000 [ 532.898972][ T30] audit: type=1326 audit(2000000194.260:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f99a898eb69 code=0x7ffc0000 [ 532.925983][ T30] audit: type=1326 audit(2000000194.260:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f99a8985b27 code=0x7ffc0000 [ 532.992363][ T30] audit: type=1326 audit(2000000194.260:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f99a892ad69 code=0x7ffc0000 [ 533.020007][ T30] audit: type=1326 audit(2000000194.280:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a898eb69 code=0x7ffc0000 [ 533.067621][T10512] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 533.075609][ T30] audit: type=1326 audit(2000000194.280:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f99a8985b27 code=0x7ffc0000 [ 534.054447][T10524] virtio-fs: tag not found [ 534.449825][ T5926] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 534.638497][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 534.651131][ T5926] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 534.667438][ T5926] usb 6-1: config 0 has no interface number 0 [ 534.695021][ T5926] usb 6-1: config 0 interface 172 has no altsetting 0 [ 534.726266][ T5926] usb 6-1: New USB device found, idVendor=0979, idProduct=0280, bcdDevice=18.b8 [ 534.756674][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.868753][ T6096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 534.878195][ T5926] usb 6-1: Product: syz [ 534.918047][ T5926] usb 6-1: Manufacturer: syz [ 534.986026][ T5926] usb 6-1: SerialNumber: syz [ 535.501440][ T5926] usb 6-1: config 0 descriptor?? [ 535.510052][ T5926] gspca_main: jeilinj-2.14.0 probing 0979:0280 [ 535.601492][T10532] netlink: 'syz.2.1162': attribute type 1 has an invalid length. [ 535.638255][T10532] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1162'. [ 535.653511][T10534] bond0: option use_carrier: invalid value (4) [ 535.677694][T10532] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1162'. [ 536.016781][ T1215] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 536.282492][ T1215] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 536.398321][ T1215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.495366][ T1215] usb 3-1: config 0 descriptor?? [ 537.683197][ T5905] usb 6-1: USB disconnect, device number 2 [ 537.999401][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 538.092439][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.102772][T10583] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.619650][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.648705][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.625832][ T1215] pegasus 3-1:0.0: can't reset MAC [ 539.645578][ T1215] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 539.709152][T10618] adf_ctl_ioctl: 15 callbacks suppressed [ 539.709173][T10618] QAT: Invalid ioctl 1075883590 [ 539.720312][T10618] QAT: Invalid ioctl 1075883590 [ 539.725326][T10618] QAT: Invalid ioctl 1075883590 [ 539.730484][T10618] QAT: Invalid ioctl 1075883590 [ 539.735531][T10618] QAT: Invalid ioctl 1075883590 [ 539.740651][T10618] QAT: Invalid ioctl 1075883590 [ 539.745645][T10618] QAT: Invalid ioctl 1075883590 [ 539.750693][T10618] QAT: Invalid ioctl 1075883590 [ 539.755725][T10618] QAT: Invalid ioctl 1075883590 [ 539.760963][T10618] QAT: Invalid ioctl 1075883590 [ 540.054235][ T11] block nbd0: Possible stuck request ffff888025257000: control (read@0,1024B). Runtime 330 seconds [ 540.081017][ T11] block nbd0: Possible stuck request ffff8880252571c0: control (read@1024,1024B). Runtime 330 seconds [ 540.092263][ T11] block nbd0: Possible stuck request ffff888025257380: control (read@2048,1024B). Runtime 330 seconds [ 540.103460][ T11] block nbd0: Possible stuck request ffff888025257540: control (read@3072,1024B). Runtime 330 seconds [ 540.568516][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 540.865120][T10583] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.883887][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 540.918362][T10583] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.060161][T10583] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.098272][T10583] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.453662][T10532] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1162'. [ 541.611244][T10612] usb 3-1: USB disconnect, device number 37 [ 541.711886][T10647] netlink: 'syz.3.1180': attribute type 12 has an invalid length. [ 541.728278][T10647] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1180'. [ 542.177084][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1179'. [ 542.475401][T10664] 9pnet_fd: Insufficient options for proto=fd [ 542.535839][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1184'. [ 543.120903][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.195416][T10682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1188'. [ 543.268247][T10601] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 543.692276][T10601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.703531][T10601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.724275][T10601] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 543.762468][T10601] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.797746][T10601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.957165][T10601] usb 5-1: config 0 descriptor?? [ 544.013478][T10699] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 545.714669][T10731] sp0: Synchronizing with TNC [ 545.868500][T10607] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 546.319339][ T8000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.512102][T10607] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.534683][T10601] usbhid 5-1:0.0: can't add hid device: -71 [ 546.558309][T10601] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 546.586450][T10601] usb 5-1: USB disconnect, device number 47 [ 546.679027][T10607] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.689946][T10607] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 546.699397][T10607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.733172][T10607] usb 4-1: config 0 descriptor?? [ 547.097575][T10729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.372921][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1199'. [ 547.881174][T10729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.984174][T10749] adf_ctl_ioctl: 40 callbacks suppressed [ 547.984220][T10749] QAT: Invalid ioctl 1075883590 [ 547.995078][T10749] QAT: Invalid ioctl 1075883590 [ 548.000463][T10749] QAT: Invalid ioctl 1075883590 [ 548.005528][T10749] QAT: Invalid ioctl 1075883590 [ 548.010578][T10749] QAT: Invalid ioctl 1075883590 [ 548.016042][T10749] QAT: Invalid ioctl 1075883590 [ 548.021169][T10749] QAT: Invalid ioctl 1075883590 [ 548.026495][T10749] QAT: Invalid ioctl 1075883590 [ 548.031565][T10749] QAT: Invalid ioctl 1075883590 [ 548.036684][T10749] QAT: Invalid ioctl 1075883590 [ 548.270017][T10607] arvo 0003:1E7D:30D4.000B: unknown main item tag 0x0 [ 548.288427][T10607] arvo 0003:1E7D:30D4.000B: collection stack underflow [ 548.295402][T10607] arvo 0003:1E7D:30D4.000B: item 0 1 0 12 parsing failed [ 548.322233][T10607] arvo 0003:1E7D:30D4.000B: parse failed [ 548.333431][T10607] arvo 0003:1E7D:30D4.000B: probe with driver arvo failed with error -22 [ 548.588292][T10612] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 548.744489][T10612] usb 7-1: unable to get BOS descriptor or descriptor too short [ 548.748254][T10596] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 548.791819][T10612] usb 7-1: not running at top speed; connect to a high speed hub [ 548.830359][T10612] usb 7-1: config 7 has an invalid interface number: 26 but max is 0 [ 548.840978][T10612] usb 7-1: config 7 has an invalid descriptor of length 138, skipping remainder of the config [ 548.858261][T10612] usb 7-1: config 7 has no interface number 0 [ 548.867818][T10612] usb 7-1: config 7 interface 26 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.883485][T10718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 548.907478][T10612] usb 7-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice=93.eb [ 548.965465][T10612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.978273][T10596] usb 5-1: Using ep0 maxpacket: 8 [ 548.983553][T10612] usb 7-1: Product: syz [ 548.986155][T10596] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 548.994801][T10612] usb 7-1: Manufacturer: syz [ 549.004871][T10596] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 549.009669][T10612] usb 7-1: SerialNumber: syz [ 549.019178][T10596] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 549.324382][T10596] usb 5-1: Product: syz [ 549.336883][T10596] usb 5-1: Manufacturer: syz [ 549.350992][T10596] usb 5-1: SerialNumber: syz [ 549.498341][T10601] usb 4-1: USB disconnect, device number 34 [ 549.615274][T10596] usb 5-1: Invalid connection information received from device [ 549.820383][T10601] usb 5-1: USB disconnect, device number 48 [ 552.826718][ T8000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.865589][T10796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1212'. [ 554.207187][T10612] usb 7-1: unknown interface protocol 0x56, assuming v1 [ 554.215982][T10612] usb 7-1: cannot find UAC_HEADER [ 554.283342][T10612] snd-usb-audio 7-1:7.26: probe with driver snd-usb-audio failed with error -22 [ 554.661697][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.242121][T10805] adf_ctl_ioctl: 15 callbacks suppressed [ 555.242141][T10805] QAT: Invalid ioctl 1075883590 [ 555.252966][T10805] QAT: Invalid ioctl 1075883590 [ 555.257969][T10805] QAT: Invalid ioctl 1075883590 [ 555.263080][T10805] QAT: Invalid ioctl 1075883590 [ 555.268093][T10805] QAT: Invalid ioctl 1075883590 [ 555.273562][T10805] QAT: Invalid ioctl 1075883590 [ 555.278650][T10805] QAT: Invalid ioctl 1075883590 [ 555.283971][T10805] QAT: Invalid ioctl 1075883590 [ 555.289006][T10805] QAT: Invalid ioctl 1075883590 [ 555.294127][T10805] QAT: Invalid ioctl 1075883590 [ 555.924103][T10607] usb 7-1: USB disconnect, device number 2 [ 557.903163][T10825] virtio-fs: tag not found [ 557.939930][T10815] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 557.946536][T10815] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 557.963306][T10815] vhci_hcd vhci_hcd.0: Device attached [ 557.995768][T10819] vhci_hcd: connection closed [ 558.008285][T10718] vhci_hcd: stop threads [ 558.017281][T10718] vhci_hcd: release socket [ 558.058249][T10718] vhci_hcd: disconnect device [ 559.119496][T10694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.130845][T10607] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 559.324904][T10845] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 559.432778][T10607] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 559.469149][T10607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.363645][ T8000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 560.384169][T10607] usb 5-1: Product: syz [ 560.495254][T10607] usb 5-1: Manufacturer: syz [ 560.513055][T10607] usb 5-1: SerialNumber: syz [ 560.861759][T10607] usb 5-1: config 0 descriptor?? [ 561.073130][T10859] virtio-fs: tag not found [ 561.232962][T10863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'. [ 562.042332][T10882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.880784][T10600] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 562.920193][T10607] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 563.109299][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.121507][T10607] asix 5-1:0.0: probe with driver asix failed with error -71 [ 563.133603][T10607] usb 5-1: USB disconnect, device number 49 [ 563.208401][T10600] usb 7-1: Using ep0 maxpacket: 16 [ 563.215793][T10600] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 563.226077][T10600] usb 7-1: config 1 has no interface number 0 [ 563.275682][T10897] virtio-fs: tag not found [ 563.441407][T10600] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 563.452206][T10600] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 563.462768][T10600] usb 7-1: config 1 interface 105 has no altsetting 0 [ 563.472303][T10600] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 563.484983][T10600] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.493108][T10600] usb 7-1: Product: syz [ 563.497306][T10600] usb 7-1: Manufacturer: syz [ 563.502022][T10600] usb 7-1: SerialNumber: syz [ 563.555995][T10874] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 563.578550][T10874] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 564.348543][T10874] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 564.358374][T10874] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 564.446425][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1250'. [ 564.955935][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.068616][T10612] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 566.087189][T10934] tipc: New replicast peer: 255.255.255.255 [ 566.098260][T10934] tipc: Enabled bearer , priority 10 [ 566.134433][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'. [ 566.145004][T10935] tipc: Disabling bearer [ 566.151593][T10612] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 566.200142][ T8159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.237488][T10612] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 566.252634][T10600] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 566.315225][T10612] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 566.334336][T10600] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 566.384472][T10612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.416228][T10600] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 566.468391][T10601] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 566.572434][T10925] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 566.672259][T10600] aqc111 7-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 56:8d:78:3e:bb:76 [ 566.685749][T10612] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 566.749811][T10942] virtio-fs: tag not found [ 566.849014][T10600] usb 7-1: USB disconnect, device number 3 [ 567.202052][T10601] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 567.690471][T10600] aqc111 7-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 567.739652][T10601] usb 3-1: string descriptor 0 read error: -71 [ 567.745952][T10601] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 567.811762][T10612] usb 4-1: USB disconnect, device number 35 [ 567.819823][T10601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.040090][T10601] usb 3-1: can't set config #2, error -71 [ 568.046406][T10951] loop2: detected capacity change from 0 to 7 [ 568.072299][T10601] usb 3-1: USB disconnect, device number 38 [ 568.142141][T10951] Dev loop2: unable to read RDB block 7 [ 568.159049][T10951] loop2: unable to read partition table [ 568.165041][T10951] loop2: partition table beyond EOD, truncated [ 568.331659][T10951] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 568.393521][T10600] aqc111 7-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 568.438866][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1264'. [ 568.577788][T10600] aqc111 7-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 568.589249][T10600] aqc111 7-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 569.920576][T10967] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 570.168063][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.319409][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 570.640117][ T11] block nbd0: Possible stuck request ffff888025257000: control (read@0,1024B). Runtime 360 seconds [ 570.651689][ T11] block nbd0: Possible stuck request ffff8880252571c0: control (read@1024,1024B). Runtime 360 seconds [ 570.662895][ T11] block nbd0: Possible stuck request ffff888025257380: control (read@2048,1024B). Runtime 360 seconds [ 570.674192][ T11] block nbd0: Possible stuck request ffff888025257540: control (read@3072,1024B). Runtime 360 seconds [ 571.039588][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1269'. [ 571.618087][T10601] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 571.753333][T11002] adf_ctl_ioctl: 15 callbacks suppressed [ 571.753353][T11002] QAT: Invalid ioctl 1075883590 [ 571.764677][T11002] QAT: Invalid ioctl 1075883590 [ 571.770014][T11002] QAT: Invalid ioctl 1075883590 [ 571.774997][T11002] QAT: Invalid ioctl 1075883590 [ 571.780066][T11002] QAT: Invalid ioctl 1075883590 [ 571.785048][T11002] QAT: Invalid ioctl 1075883590 [ 571.790067][T11002] QAT: Invalid ioctl 1075883590 [ 571.795043][T11002] QAT: Invalid ioctl 1075883590 [ 571.800137][T11002] QAT: Invalid ioctl 1075883590 [ 571.806231][T11002] QAT: Invalid ioctl 1075883590 [ 571.918899][ T8159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 572.255233][T10596] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 572.263517][T10601] usb 7-1: device descriptor read/64, error -71 [ 573.080895][T10596] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 573.118661][T11014] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 573.136526][T10596] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.170386][T10601] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 573.358942][T10596] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 573.478078][T10596] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 573.519464][T10601] usb 7-1: device descriptor read/64, error -71 [ 573.538432][T10596] usb 6-1: Manufacturer: syz [ 573.688855][T10601] usb usb7-port1: attempt power cycle [ 573.732138][T10596] usb 6-1: config 0 descriptor?? [ 573.763896][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'. [ 573.968276][T10596] rc_core: IR keymap rc-hauppauge not found [ 573.995252][T10596] Registered IR keymap rc-empty [ 574.029582][T10596] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 574.060789][T10596] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input19 [ 574.093486][T11032] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1284'. [ 574.107706][T10596] usb 6-1: USB disconnect, device number 3 [ 574.577128][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1286'. [ 575.174273][T11047] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1281'. [ 575.370246][ T8000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.782972][T10596] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 576.981815][T10596] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 576.998319][T10596] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.088389][T10610] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 577.199481][T10596] usb 6-1: config 0 descriptor?? [ 577.207692][T10596] usb 6-1: can't set config #0, error -71 [ 577.312684][T11070] binder: BINDER_SET_CONTEXT_MGR already set [ 577.318821][T11070] binder: 11066:11070 ioctl 4018620d 200000000040 returned -16 [ 577.858607][T10596] usb 6-1: USB disconnect, device number 4 [ 577.994734][ T8000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.263300][T11069] Unsupported ieee802154 address type: 0 [ 578.321326][ T31] INFO: task syz.1.912:9536 blocked for more than 143 seconds. [ 578.348281][ T31] Not tainted 6.16.0-syzkaller #0 [ 578.353895][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.368399][T10610] usb 7-1: Using ep0 maxpacket: 8 [ 578.402135][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1296'. [ 578.429792][ T31] task:syz.1.912 state:D stack:24200 pid:9536 tgid:9535 ppid:5846 task_flags:0x400140 flags:0x00004006 [ 578.443065][ T31] Call Trace: [ 578.446652][ T31] [ 578.527250][ T31] __schedule+0x16aa/0x4c90 [ 578.578393][T10612] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 578.613380][ T31] ? schedule+0x165/0x360 [ 578.639802][ T31] ? __pfx___schedule+0x10/0x10 [ 578.647358][ T31] ? schedule+0x91/0x360 [ 578.652059][ T31] schedule+0x165/0x360 [ 578.689628][ T31] schedule_preempt_disabled+0x13/0x30 [ 578.713316][ T31] __mutex_lock+0x724/0xe80 [ 578.737846][ T31] ? __mutex_lock+0x51b/0xe80 [ 578.748650][ T31] ? sync_bdevs+0x1ac/0x340 [ 578.758302][T10612] usb 4-1: Using ep0 maxpacket: 32 [ 578.770143][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 578.784674][T10612] usb 4-1: unable to get BOS descriptor or descriptor too short [ 578.799990][ T31] ? iput+0x398/0x9d0 [ 578.806754][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 578.807442][T10612] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 578.823003][ T31] sync_bdevs+0x1ac/0x340 [ 578.828841][ T31] ksys_sync+0xb9/0x150 [ 578.835720][T10612] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.847777][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 578.853922][ T31] ? rcu_is_watching+0x15/0xb0 [ 578.860118][ T31] ? do_syscall_64+0xbe/0x3b0 [ 578.864967][T10612] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 578.875443][ T31] __ia32_sys_sync+0xe/0x20 [ 578.884737][ T31] do_syscall_64+0xfa/0x3b0 [ 578.895923][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.912525][T10612] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 578.937000][T10612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.945408][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.962807][T10612] usb 4-1: Product: syz [ 578.968427][ T31] ? clear_bhb_loop+0x60/0xb0 [ 578.973350][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.979788][T10612] usb 4-1: Manufacturer: syz [ 578.984564][T10612] usb 4-1: SerialNumber: syz [ 578.989335][ T31] RIP: 0033:0x7fe48c18eb69 [ 579.015135][ T31] RSP: 002b:00007fe48d08e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 579.028048][ T31] RAX: ffffffffffffffda RBX: 00007fe48c3b5fa0 RCX: 00007fe48c18eb69 [ 579.037456][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.048185][ T31] RBP: 00007fe48c3b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 579.056254][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.065674][ T31] R13: 0000000000000000 R14: 00007fe48c3b5fa0 R15: 00007fff1380c0b8 [ 579.074189][ T31] [ 579.079913][ T31] [ 579.079913][ T31] Showing all locks held in the system: [ 579.091195][ T31] 1 lock held by khungtaskd/31: [ 579.096326][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 579.114798][ T31] 2 locks held by getty/5600: [ 579.120799][ T31] #0: ffff88814ce1e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 579.228357][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 579.244595][T10610] usb 7-1: device descriptor read/all, error -71 [ 579.254125][T10612] usb 4-1: 0:2 : does not exist [ 579.271876][ T31] 1 lock held by udevd/5851: [ 579.277609][ T31] #0: ffff8881433c7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 579.318989][T10612] usb 4-1: USB disconnect, device number 36 [ 579.328100][ T31] 2 locks held by kworker/u8:23/8159: [ 579.333867][ T31] #0: ffff88801c73c948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 579.346472][ T31] #1: ffffc9000aaa7bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 579.358981][ T31] 2 locks held by kworker/u8:26/8170: [ 579.364653][ T31] 1 lock held by syz.1.912/9536: [ 579.378309][ T31] #0: ffff8881433c7358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 579.388231][ T31] 1 lock held by syz.0.966/9756: [ 579.393400][ T31] #0: ffff8881433c7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 579.403061][ T31] 3 locks held by kworker/0:10/10596: [ 579.408590][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 579.419824][ T31] #1: ffffc90003affbc0 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 579.430093][ T31] #2: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 579.441642][ T31] 6 locks held by kworker/1:15/10610: [ 579.447243][ T31] #0: ffff888020ed5548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 579.459422][ T31] #1: ffffc900043d7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 579.471526][ T31] #2: ffff888144f68198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 579.482520][ T31] #3: ffff88802822b510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 579.494448][ T31] #4: ffff8880280f4468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 579.504469][ T31] #5: ffffffff8edc8670 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750 [ 579.518060][ T31] [ 579.523481][ T31] ============================================= [ 579.523481][ T31] [ 579.532204][ T31] NMI backtrace for cpu 0 [ 579.532222][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 579.532246][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.532259][ T31] Call Trace: [ 579.532267][ T31] [ 579.532277][ T31] dump_stack_lvl+0x189/0x250 [ 579.532305][ T31] ? __wake_up_klogd+0xd9/0x110 [ 579.532337][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.532360][ T31] ? __pfx__printk+0x10/0x10 [ 579.532402][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 579.532438][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 579.532466][ T31] ? _printk+0xcf/0x120 [ 579.532497][ T31] ? __pfx__printk+0x10/0x10 [ 579.532527][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 579.532562][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 579.532621][ T31] watchdog+0xfee/0x1030 [ 579.532654][ T31] ? watchdog+0x1de/0x1030 [ 579.532694][ T31] kthread+0x70e/0x8a0 [ 579.532726][ T31] ? __pfx_watchdog+0x10/0x10 [ 579.532754][ T31] ? __pfx_kthread+0x10/0x10 [ 579.532784][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 579.532804][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.532823][ T31] ? __pfx_kthread+0x10/0x10 [ 579.532852][ T31] ret_from_fork+0x3fc/0x770 [ 579.532875][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 579.532913][ T31] ? __switch_to_asm+0x39/0x70 [ 579.532936][ T31] ? __switch_to_asm+0x33/0x70 [ 579.532959][ T31] ? __pfx_kthread+0x10/0x10 [ 579.532986][ T31] ret_from_fork_asm+0x1a/0x30 [ 579.533026][ T31] [ 579.533033][ T31] Sending NMI from CPU 0 to CPUs 1: [ 579.694696][ C1] NMI backtrace for cpu 1 [ 579.694713][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 579.694735][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.694747][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 579.694771][ C1] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 579.694787][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 579.694804][ C1] RAX: f5b44bde85bd1400 RBX: ffffffff81976918 RCX: f5b44bde85bd1400 [ 579.694818][ C1] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 579.694842][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 579.694856][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0b3f0 [ 579.694870][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a5db40 [ 579.694888][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 579.694903][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.694915][ C1] CR2: 000020000002a000 CR3: 00000000771e2000 CR4: 00000000003526f0 [ 579.694930][ C1] DR0: 0000000000000003 DR1: 0000000000000008 DR2: 0000000000000401 [ 579.694940][ C1] DR3: 0000000000001810 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 579.694952][ C1] Call Trace: [ 579.694959][ C1] [ 579.694965][ C1] default_idle+0x13/0x20 [ 579.694987][ C1] default_idle_call+0x74/0xb0 [ 579.695010][ C1] do_idle+0x1e8/0x510 [ 579.695029][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 579.695048][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.695066][ C1] ? __pfx_do_idle+0x10/0x10 [ 579.695090][ C1] ? do_idle+0x4ed/0x510 [ 579.695110][ C1] cpu_startup_entry+0x44/0x60 [ 579.695129][ C1] start_secondary+0x101/0x110 [ 579.695154][ C1] common_startup_64+0x13e/0x147 [ 579.695186][ C1] [ 579.696481][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 579.894249][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 579.903975][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.914033][ T31] Call Trace: [ 579.917315][ T31] [ 579.920249][ T31] dump_stack_lvl+0x99/0x250 [ 579.924847][ T31] ? __asan_memcpy+0x40/0x70 [ 579.929448][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.934650][ T31] ? __pfx__printk+0x10/0x10 [ 579.939258][ T31] panic+0x2db/0x790 [ 579.943175][ T31] ? __pfx_panic+0x10/0x10 [ 579.947612][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 579.953454][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 579.958834][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 579.965006][ T31] watchdog+0x102d/0x1030 [ 579.969363][ T31] ? watchdog+0x1de/0x1030 [ 579.973799][ T31] kthread+0x70e/0x8a0 [ 579.977877][ T31] ? __pfx_watchdog+0x10/0x10 [ 579.982574][ T31] ? __pfx_kthread+0x10/0x10 [ 579.987265][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 579.992479][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.997676][ T31] ? __pfx_kthread+0x10/0x10 [ 580.002276][ T31] ret_from_fork+0x3fc/0x770 [ 580.006874][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 580.012009][ T31] ? __switch_to_asm+0x39/0x70 [ 580.016779][ T31] ? __switch_to_asm+0x33/0x70 [ 580.021549][ T31] ? __pfx_kthread+0x10/0x10 [ 580.026148][ T31] ret_from_fork_asm+0x1a/0x30 [ 580.030934][ T31] [ 580.034226][ T31] Kernel Offset: disabled [ 580.038560][ T31] Rebooting in 86400 seconds..