last executing test programs: 24m5.374427984s ago: executing program 3 (id=520): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000240)=0x800004, 0x4) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/22, 0x16}], 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x02A\xb3\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x5) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) fallocate(r1, 0x0, 0x401, 0x40000b7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x26, 0x0, 0x0, 0x1f00, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r4], &(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffff}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000001c0), 0x6, 0x0) ioctl$EVIOCGPHYS(r6, 0x80404507, &(0x7f00000003c0)=""/145) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) 24m4.830077559s ago: executing program 3 (id=523): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000001580)=""/238, 0xee}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/185, 0xb9}], 0x4}}], 0x1, 0x10002, 0x0) 24m4.758461043s ago: executing program 3 (id=524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf25790afc46fe0000010200010008000600b07f00000c00060065bc7a222a4f8eda70e17abd7736b5838fc2a835a41a1c3cffab9abf4717e46e16c46c6bfdc816776a1b936d24936bf0e1fdc4cc35ac80c6674bab974d0afd3d2c02c7e3a7efe9b8d01a652b50d8aa5af3fca0857f241c971792cc80ff2d728d"], 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000300), &(0x7f0000000380)=0x8) sendto(r1, &(0x7f0000000080)="4a0f3ebd55e9cbb26c", 0x9, 0x814, &(0x7f00000000c0)=@l2={0x1f, 0xc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7f, 0x2}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x61, 0x2e, 0x61, 0x61]}}, 0x0, 0x1e, 0x0, 0x1, 0x68b}, 0x28) 24m4.715989503s ago: executing program 3 (id=525): r0 = socket(0x11, 0x5, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x4]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6577e547907561756c7420757365723a73797a20303030303030303030303030303030303430393300"], 0x2a, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8a7848, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r2, 0x400, 0x1) r3 = eventfd2(0x5, 0x801) io_setup(0x7, &(0x7f0000000100)=0x0) io_submit(r4, 0x2000000000000125, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000080)="16c14b6af89a21363e4b8e0a0938c4fbedec5b1e14026cd988fe5ea04234282bd8b9d38924403a4a1fd0c50bc85c612893d9c7a5590393de4f", 0x0, 0xffffffdfffffffbf}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x702, r1, &(0x7f0000000240)="b5ca97c370a5daf995de14280cacda6211f972251f55a6744c060de4b1cd893ff6b80964ebeeb348a8c8245da02ff5e68c5b01256c907005e7b5885da1a7ce00b86ea784b9a51c2b0989d534e711e1c941f5f4f1d4d8d1ed4ecc5a1add697c909d78e9fad49416d5272e6f2c4e5bd99650859eb37bbbad50d7aa9d13b09501294cf3d447ecddcbe89ba4b4c5e6550c42e8c9116ad2e4a64feb6b66bc35080df50f48d7994eaf7112c4", 0x0, 0x3, 0x0, 0x2, r3}]) close(r0) fanotify_init(0x8, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000500)={0xe000200c}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r0, &(0x7f0000000040)={0x80002017}) 24m4.343923715s ago: executing program 3 (id=527): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) io_setup(0x2, &(0x7f0000002400)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_setup(0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000006311bc00000000008510000002000000850000000500000095000000000000009520a505000000007127ba313654e019d335f6b37089023b6ff74203c64c4c79b70324929307da6c86d67a2927b66d12c3aea048f8852196d6b59e555cef320f76c69234c5f7d63569ced26765c14a6e66"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000767900ebe881f307d40e38574ad40000000000000000000000000000e0af7c04000000669418ae59d59dbbad3d9f9cc80bd335965bbe0fd7f9eedf95f44a5e3117c1099964561f4de8156d7be4c32415a30ffcf431e68db01ad4fb9a51bbac159a168bebb97a1972186e8e6f5531575d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=0x0, @ANYBLOB="050000056115fd71333f09a7dbaa66fb0b49ec007d84e99afd75e4a01b426c493e5ec8885638e1e70bcf0e33c6201325f7d7278495ae1938c3b8674065a91d01778b030aa53a37ce7eac505f0b7a1480c251e1399332ba6112bb304778e766", @ANYRES32=r1, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40044) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$FITHAW(r0, 0xc0045878) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r4, &(0x7f0000000000)=""/61, 0x29) getdents(r4, 0xffffffffffffffff, 0x5a) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0xe7e, 0x0) read$msr(r5, &(0x7f0000009b80)=""/102392, 0x18ff8) 24m2.167667582s ago: executing program 3 (id=535): r0 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x80c4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000001580)=""/238, 0xee}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/85, 0x55}], 0x4}}], 0x1, 0x10002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0xb01, &(0x7f0000000000)={0x11, 0x1, r3}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r6 = gettid() timer_create(0x1, &(0x7f00000001c0)={0x0, 0x12, 0x4, @tid=r6}, &(0x7f0000000380)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r10, 0x4140aecd, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x0) r11 = gettid() tkill(r11, 0x16) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r4], 0x28}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xbc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) pipe(&(0x7f0000000240)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0x1}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb1, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) 24m1.416778451s ago: executing program 32 (id=535): r0 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x80c4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000001580)=""/238, 0xee}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/85, 0x55}], 0x4}}], 0x1, 0x10002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0xb01, &(0x7f0000000000)={0x11, 0x1, r3}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r6 = gettid() timer_create(0x1, &(0x7f00000001c0)={0x0, 0x12, 0x4, @tid=r6}, &(0x7f0000000380)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r10, 0x4140aecd, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x0) r11 = gettid() tkill(r11, 0x16) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r4], 0x28}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xbc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) pipe(&(0x7f0000000240)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0x1}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb1, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) 15m58.225872625s ago: executing program 4 (id=3391): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000340)={'wg1\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x300, 0x8, 0x4, 0x9, 0xfffffffc, 0x4, 0x7, 0x8}}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4, 0xd}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x840) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0xe5402, 0x0) 15m56.962047163s ago: executing program 4 (id=3396): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000540)=&(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') readv(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) 15m56.054563363s ago: executing program 4 (id=3400): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd4}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}], 0x6c) r2 = syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) prlimit64(r3, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$kcm(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(r4, &(0x7f0000000000)='2', 0x1, 0x7) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x5, 0x10}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r6, 0xd6, "034bdcd78772b6558254443778c1c376473a1bce28d922acc96582de8506da0657500a41b0066e98c8183113caf5b237b154620b37833b45fe9b59c1876ee9b17371e6b557bca0912bb8c9f703aea7ac941fd5714f3e607b1aab1a445ac917449c2b76a7c83afa03bcb667d5d1ad9f2a1dbfe9e9e270053c287ffcb32f9f23bd674940dd2111151368354fa5c80edf62bcec51997166b03a36ce3ee33c0ed0012938e518766e99ee280f8cb603d4bb47c87b4474b9371ec58e30df5f5acdaedaf79a30895c6534eb640a2143ed674e222129dd29e58a"}, &(0x7f0000000280)=0xde) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x86a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0xc0, 0x51, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x28, 0x4, 0x3, 0x1, {0x7, 0x25, 0x1, 0x0, 0xcd, 0xb08a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x6, 0xe, {0x7, 0x25, 0x1, 0x8, 0x8, 0x1}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x40, 0xe5, 0x1, 0x10, 0x7}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r10, 0x0, 0x0) lseek(r10, 0x5, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x1, r8}) 15m54.11143299s ago: executing program 4 (id=3414): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xf}, &(0x7f00000002c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xf}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @loopback}}, 0x2, 0x7, 0x3, 0xc71, 0x8, 0x6, 0x6}, &(0x7f00000003c0)=0x9c) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @loopback}}, 0x2, 0x7, 0x3, 0xc71, 0x8, 0x6, 0x6}, &(0x7f00000003c0)=0x9c) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x202189d, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x20300, 0x0, 0x28}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x51c24, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x51c24, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 15m53.404373125s ago: executing program 4 (id=3419): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x700, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 15m52.294101061s ago: executing program 4 (id=3425): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}]}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000050000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c00020018001780140001"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 15m51.757243592s ago: executing program 33 (id=3425): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}]}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000050000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c00020018001780140001"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 9m41.949660978s ago: executing program 6 (id=5280): sched_setattr(0x0, 0x0, 0x0) r0 = syz_usbip_server_init(0x1) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x98bf, 0xc00, 0xfffffffc, 0x374}, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) write$usbip_server(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x6, 0x0, 0x0, &(0x7f0000000040)="d3", 0x1, 0xfff}) 9m39.787596606s ago: executing program 6 (id=5296): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) setreuid(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) setrlimit(0x8, &(0x7f0000000180)={0xfffffffffffffff7, 0x6}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x1}, 0x0, {0x2, 0x4e22, @empty}, 'lo\x00'}) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e28, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9m38.856409515s ago: executing program 6 (id=5297): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendto$inet6(r0, 0x0, 0x38, 0x43800, 0x0, 0x0) 9m38.71404755s ago: executing program 6 (id=5299): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x20, 0x40}}]}, 0x13c}}, 0x844) r1 = socket$inet(0x2, 0x2, 0x73) r2 = landlock_create_ruleset(&(0x7f0000000280)={0x0, 0x2, 0x1}, 0x18, 0x2) landlock_restrict_self(r2, 0x8) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @multicast2}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, r3}, 0xc) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x800000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 9m38.444318997s ago: executing program 6 (id=5304): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000001c0)={0xff0c2150, 0x1, &(0x7f0000000040)=[0x1], &(0x7f0000000100), &(0x7f0000000140), 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)}], 0x1}, 0x4000080) move_pages(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1], &(0x7f0000001680), 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb030018000000af1e605b0e5b3b47a2d9000000000c0000000c11000002000000000000"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x1}, 0x28) 9m36.678550011s ago: executing program 6 (id=5311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000b7}]}) (async) syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000000844060e804000010303010902"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00002e9000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00002ea000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, r3}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r4 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x80008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) syz_usb_connect$midi(0x0, 0xea, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x1, 0x1, 0x1, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, 0x5, [@midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x0, 0x6, [{0xd}, {0x2, 0x42}, {0xa2, 0x7}, {0x8, 0xe6}, {0x0, 0x81}, {0x9, 0x9}], 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x9, 0x5}, @midi_out_jack={0xd, 0x24, 0x3, 0x0, 0x8, 0x3, [{0x5, 0x2f}, {0x40, 0x6d}, {0x10, 0x2}], 0xfb}], [{{0x9, 0x5, 0x3, 0x10, 0x200, 0xb4, 0x9e, 0x2, {0x7, 0x25, 0x1, 0x3, "135879"}}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0xa, 0x5, 0x81, {0x12, 0x25, 0x1, 0xe, "6f3e7e2bfe3ba20c2e0c76f7eff1"}}}, {{0x9, 0x5, 0xe, 0x1, 0x0, 0x7, 0x0, 0x0, {0x9, 0x25, 0x1, 0x5, "2bd5be8774"}}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0xca, 0x9b, 0x6, {0x12, 0x25, 0x1, 0xe, "a929ce148c7de5c3650f4211f691"}}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0xd4, 0x7, 0xff, {0x12, 0x25, 0x1, 0xe, "5b17535caa0e981de5c8cbb3c70c"}}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0xfa, 0x9, 0x0, {0xd, 0x25, 0x1, 0x9, "1cad0b32bb4b4f464a"}}}, {{0x9, 0x5, 0x81, 0x10, 0xe07aba526620befe, 0x4, 0x5, 0x8, {0xe, 0x25, 0x1, 0xa, "c40563ab74f2e113b53d"}}}]}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0xff, 0xa}, 0x4c, &(0x7f0000000640)={0x5, 0xf, 0x4c, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0xe9, 0x3, 0x0, 0x1107, 0x9, [0xffcf, 0x60cf, 0xf]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8b, 0x81, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x5, 0x5, 0x800}, @ss_container_id={0x14, 0x10, 0x4, 0x39, "85eed7e751a114a4211ef88db5d2653f"}, @ptm_cap={0x3}]}, 0x1, [{0xf5, &(0x7f0000000780)=@string={0xf5, 0x3, "42331a055aa0a8377de9eebabfca92f5b59175407e594cbb23bf812959256c8dd7d0bda901c457770a0eee449bc68810190933549182193a443dad7fabbde3cb572cc36308e5f10e4317d0f277b0b83f1064c9fcc255c7e0bee085ec8164c0539a234eb162223041fc7df1e30f65599423e59880d8e9da2f01d9bb9c7a1a22c48d3d0dacdcb09283ab8b3fc31dd6a50a4f53f85a13528a0a877ccf3e73dce3885ac1e347685ef3c5d0a7d7b41377f5aab7fef20db6943564f8f4989456858e49d83a11ade96f98fe54eb0939cdcfd77774d51fb5f1efa09bdd689b91d8d9f08316d68f2cb073acf3e0026f40d8b92f7f89f40c"}}]}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, r7, 0x400, 0x1070bd27, 0x4, {0x5}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x3d}, 0x1, 0x0, 0x0, 0x20008000}, 0xc034) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r9, r11, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xd81, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450e0d7300660000f273907800000000ac1414aaeffa6718402e2a840a25759048c8f7015c5be6f0f03b7889268e4d1d88eb7db0b570ce15168bd621f234e9886a490375c2fc392c904b6cd60f0bf8f086fca887e4ed97ce53241ec7e1e0b8fe7def6dcf036fbe3bce3fd3f59f660fb654a89c86fea532bec13338a743d46a9fd1c443f0d3a7943783bca256c5429d8cbcdce8245a5b9693357cc10ea659e59082b7604bb9ea585e24807fa8300413c03297662eeb027824ed0c20fa872a6a7812f110a3f1da133fe5b9360af7aaa518eb27acc034cd33919215fd1c4982f9c20512f6290bff62c3d06aa42458ad5d964eca803f6eb9daf0ff5059c8484fa6ac7b244ca9d8d2fb89493ed118c44454e6773aabd988cef01464bd6ec6d86b9c5ad205f1997158c6c59ca21ac97787e36e00fce204f12157bfc47702bf8dec19c7cdf0b485322d7d35d6f2e379900c468345b60324775153ddc024f9e6a725b2abafe90700534df524fdc0ad704a5062cbfb74fa0106f8977eb671fe30c4c302a8ce99d9c10c1a2512ee304a1cdb8b9545d5fa6bc85a28dfcb28550ba8bff32246244f7826dd1a59df1208c1e448f849c974404f3610908e11c8380e3ddfdfa7e71fb599c11abf7a510fecf4a3b10333d89af0254aff22edda378c6fca08bb37ef12367300f9e21bd7ec18f976c89fd65174667e55ae8bd3b8efee639c203fd97ade60ad12bf425aeb3d4b638d1243f85071b2006b14e34d8a8d58770d5473e99d3f7e20757f222f8ad3d82f8b745a07992dde6d0f26cc4d5ef1082ca768274a46695ca0318d08748ac764c3daec8f1767055019ceefff6bc302ecb777762e2c3dd5c1ec736d051d855b6c0b1a9332181d8efaf0f6fbbb6636532744b896bfe1ab93f275575dede887ba2ffb24be12e18a944c4a8e32db303c9ec5513c50c413ff8fd8702dc593556f17952b1ab4b7e4a843cdd75c1475e8ac0431d0a2c401f7c7b9e20f53a6cecc5d519c2dada3ef96fc90bb3c98664c7e3b85479438781ca2049ddde1f9f194597197dae2350da647f3ccfa5ace5c8f765154ae269fcfad305808d5b2374006e9f7396f9693a134000c12458f9915376648f85d46ebb77dbb0b428256f24627223344c3636fb8f98cd4c5eb3f5542b3b4c19fd1f5780e6d1c0dac2408790f88901ec8952d8454c6be9910e99c0feb68f973da202c0c29923c938b52faf1a0eb88b502d3047cbcca14a478819a74415e1a8143c933e385308dea238094624fc18003d86ef1bc40792de1a875f76778b5acacffbcee8911d8daae7b48d27dbcb010062e823ee249974758b693fde87f18711593107cd240666294924ace2aaa099ae56cb2a11af327ccf33bb3e4164b3d4d83ce4fccf271a5976496697d48b28b5f6c6ccf646fc30d6277ff08a63b22d16082c6a282a2282fed6c43442138e8b66f885a16926f981977a598580bc2c8ce18b23047ac7673481b1fc2ab06a95890897635ec01f7eeea5656fb67cc5615340259c0b38e6c2aefe99e0a39ec38375e8ba1d99947bd18e4bf91742a7ab604e3407f0d2c314ec42d409df9befc5c52465437bf3eae3e4f22e3ae468cbd0fd4ee76160e79e158f0a568532298f71a9771e8ee5a7355a73e8dc9bbc99190ba2e9d1f720b051559e48bc0973e49a78470ed3f7410c297da192840dfff9417c17c287412f2e6f9b51176d51d1aa2066aee9c9ecd829f2b10055883f18e8240cae6103fed0db16a37dad4d360e6b10a410334c507b2ca748b04532f2bb1e1f8b023e3c7fd31bd0cb534d60cf15070366bcf77407818f2bc36590dd8303a1ba035add16273b92ab857708fe03087a8acb291952b6a4e5df550650945abdbfe436cf6d7cb0ebdc925791491eff334dd61beeb6fa59933a3e89b1271e3b598650749c8aeafe04fff38166b493dc7662762babdeedb79eea4bfd282c43952e288571294b98e4c95062a65bc0b2e25309d7f0337f622bad972e899527c792d3f62ee39ce4c3287bf4feb63155b9b76dfd10a9f43bebbe80739896920a224d081da5893ed69611a943dcfc16d55bccb31f985b7ad04dd76e5f662b57f261a4d9fb51748c8091de196b583b0409242a77123e48f8b6714185bff6eabb108b57bd6dd1883f6b0e0c4c4a1538563de01ab74845eb46034e9f67f70a0564c7c2fc2844d58b683408cd48895c5fc9cbca16a7a09464b3e47b7cf265b45ac7f3d831ce36bbef7efde19fab91a4f66f5fd6edb155947f6f8554437de2139e8867608eefcda18838f4cf26c3bb64511ca00de27faba9df0ff373609f6e26ed12fe2eed62072ea2a88d6a00bc09b1a331b9ee3fbfee831b0a21d2fc43997fe19501262298dfdf394383950e26e68de13893b1a84672c9a269759ed0b20060d0448d4ec0fa059880f83833ec81439874d97603f1d8f7d37aad941a12158437c1fe450030358ef095aa6231aebefc74f525ae77a3de696cfafb9b0f77754ec5dc13e0a4d0c3801de132cabd91f1d70585236719ff4c47e6289703625f1875b7c6caea3bd013f8b45dadcd446dbdd7826b1cd219a4a658ab84752210d0e74b4a5ca5520ad30edbbd32c5c7e34c58191921f80529d69cdeeacc22bb5e6cbc42ea554ba25281fbc0d096bd9c05276f5ebd66ebf9367595f3346e7fad0c40a5ef8ed9f1fa33018429af04ac161abf034ae39df611012757ecc247bc0b440ee68b6eb803c614abffa415528876e2bec8d5e1012aa40059706eebbde03ddd284865703f1856df1b3e96e7562d447393d0b591d794d859c5237021446fd5efd2d6dd40c0911d1b321a5e690cb64678d362783a8382b127534a0d7f34051c8ddf45dd861a1cfd415b9a0d4d09dfbeb38b7c7404f721cd9802cdd43a121d2e893e059a6da79f45a4220cf1d114ff3d151ba2e561ce9c26a6feffbc443f2dfb94b2cd23f2ea5d7e76f39ff7cd380507003a4c4f764e65c97c81e53d24a5e93709690c4ef3c442836ce7446e671a3730c7aaa6d17b30932bbd09da31bc26a9fc2b7d2e6954123eaef56eca6b7e9c92887a54da023f48a5bc00dab2188e62e927931d24b795bb91ce42cf6e13dc4145ad9aefa09b81de17eaa3c5f1841374e7dcba60a0ec7469788b22f02711f714b2bf5490e3bcb68cef16394eb6d865e749a0a512f1f7a2a4d5b3b5bbdc4212d9d1c9e6abec8870728a7f5cdb10ad79732e8932bc6cd259cf94a8d3b0331936b2b79a1aa4b5c3cecebdde9587ce53afa68f7e9f758bed544974709e92186665225a510b1a81ae0f471d93478d19e06c8ea7e94f2aafdab760039c66ec7de041ee916faa53af32192898d512555d0cf2c8c3147e8579021b9a2f0aaa4002031e5770a6c8fb3011d4273b5c72a93f2a96fe2da98fe0106e98461adf0bc0f29e9f59e3fe59e944b0d470e448439bb775efe3beb3696190145ed49ab08f0fb66f4b442adc73eb363de99db0bba4dfae58e00efc940a57228af0dd706a7caf96d22ad110ed0429bf5e535062bef0b8e35b7076c1cef00a706286a8771227cd7865dd120d646fa85de59598b5e6eb1da89e89ded515d8dd374b4084489f1b4c7f35fff1fa11480b924de37463a502442f2ec726f084b2630a2602e7158ce9d42eb5b9dceaf312702b2db4e921de45b20249aac5083a33d1e7d26ea06428d551db82ed12c521eca192da6e3a112affa0e9ed1446fb1f3ee031354c2615da20bc629a06d287869ffaf97e093d67c71d78243c253b7609e4ce95adb9637cef7e8f9b003f863b32b522d5822d346cc1cdfb7d46cdcd5588a1170d379b21ff6b4be39384adf4eaceedb5a11662c4ae1732743cdb05348b2435702a3a022c112d92e94e1563273fc43eb128adcb84093d6446e142f8c4cd4c5a2293137081ff582dcb2451f812ff3c13ca1cafab2c6487fcd9e606c8c6399081846ff391276708a6592174dfdf7c70058968b919587eec551cd092bad7ceb471e8e816b76bff96953966164389e65525961fc0b2f1fd5edba0bc949cf38d90160467cdc29aacd79a120415237c9efed6106a6854e92fb103e60f54f61b90d156d763adfcc8395c07ee4983fc99f2e2e4eb32ba20afcbd115c3e4b3f003f9f4ab61ff100240864116fc2bd85dc78dbdf65935de896e7f8c8114666c94e4c706b46c887ff79ed89f7a6d54fd8ce230c0c3be3bebbf355f2cffec5059166023f701c098e0864d6109694466b7ccb081df485734775b3285db442f75820e513d7893c6c203d51380c0cfa45f1fb0e3e653050e66d580acdcc317259ed3679454da42f3d5311445b6c668adb3ee7b8445dce387a339315ae3a2ad7bb7b2498151e31bd854a21183dc6386c72814599699b2eb9bfbeefb63cbc4d2de21473b672a2af05f7884e68d0548d66f95f8a6792a04152c540699a6aa67ed3873f9fd56887187f542a09de4089277cc0d6baafc9d783afd832c0f46f02ce40380976760fda7e5391a51815790509388de0ab6d71986ee7f90a4c9ef2b89539717499d36e95bf3b85b7f895e66b9b0530c48db4548ffdc16481b6d1a53fa7c2c002f5bb6f36bc0749828fff6307e6be01d95a54c760e27ce2332e758d4f7a9544dd4c10a1858ecb07b70ac96b89fb012b5233b61de2cf71361d2336b4ec385f289d14ce540b821007bbda35e0265643e32d67e8983c016268769df093075b41e5eca4130326d1f57c48e4e75d607e82da5e1b465927f85f5266a1538c390a237efd5efed9fc727328d4ed7c031082ef56144b7cd668248bb73da8cf98c415ca07c45a3c2ddb200ef125adf5fe03ae97198679b24cd8127d126b7806d6078980134c684f36b89dd57ce15d6e715a4aedceb974ed360843d1e9f20951b3769ac7ff3c4197d26b2bde174c1e8c704a2a6a270e03a5369f0620bf2d2c634e654d21833514cae228b5f36d47a35c16270ce8b692cc44c15cf787a550e5e15fddce64f36817a667babb5f67d1c2d2ab28ba57b99ba48fd8ca3299d73cc61dd38db8784c765c6f79f410f22137df2bbce0539fd10a0a13377862c90939ba1026846cbc67b80b4ba8b132b6dba7dae57ec2f5e30466f04afe4f1160aa6c208268b0ac4fcd244c5826fb724e6767be80a41e"], 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)=r9}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000004088070002000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5b}, 0x94) 9m36.373097924s ago: executing program 34 (id=5311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000b7}]}) (async) syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000000844060e804000010303010902"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00002e9000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00002ea000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, r3}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r4 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x80008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) syz_usb_connect$midi(0x0, 0xea, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x1, 0x1, 0x1, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, 0x5, [@midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x0, 0x6, [{0xd}, {0x2, 0x42}, {0xa2, 0x7}, {0x8, 0xe6}, {0x0, 0x81}, {0x9, 0x9}], 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x9, 0x5}, @midi_out_jack={0xd, 0x24, 0x3, 0x0, 0x8, 0x3, [{0x5, 0x2f}, {0x40, 0x6d}, {0x10, 0x2}], 0xfb}], [{{0x9, 0x5, 0x3, 0x10, 0x200, 0xb4, 0x9e, 0x2, {0x7, 0x25, 0x1, 0x3, "135879"}}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0xa, 0x5, 0x81, {0x12, 0x25, 0x1, 0xe, "6f3e7e2bfe3ba20c2e0c76f7eff1"}}}, {{0x9, 0x5, 0xe, 0x1, 0x0, 0x7, 0x0, 0x0, {0x9, 0x25, 0x1, 0x5, "2bd5be8774"}}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0xca, 0x9b, 0x6, {0x12, 0x25, 0x1, 0xe, "a929ce148c7de5c3650f4211f691"}}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0xd4, 0x7, 0xff, {0x12, 0x25, 0x1, 0xe, "5b17535caa0e981de5c8cbb3c70c"}}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0xfa, 0x9, 0x0, {0xd, 0x25, 0x1, 0x9, "1cad0b32bb4b4f464a"}}}, {{0x9, 0x5, 0x81, 0x10, 0xe07aba526620befe, 0x4, 0x5, 0x8, {0xe, 0x25, 0x1, 0xa, "c40563ab74f2e113b53d"}}}]}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0x4, 0x9, 0x1, 0xff, 0xa}, 0x4c, &(0x7f0000000640)={0x5, 0xf, 0x4c, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0xe9, 0x3, 0x0, 0x1107, 0x9, [0xffcf, 0x60cf, 0xf]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8b, 0x81, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x5, 0x5, 0x800}, @ss_container_id={0x14, 0x10, 0x4, 0x39, "85eed7e751a114a4211ef88db5d2653f"}, @ptm_cap={0x3}]}, 0x1, [{0xf5, &(0x7f0000000780)=@string={0xf5, 0x3, "42331a055aa0a8377de9eebabfca92f5b59175407e594cbb23bf812959256c8dd7d0bda901c457770a0eee449bc68810190933549182193a443dad7fabbde3cb572cc36308e5f10e4317d0f277b0b83f1064c9fcc255c7e0bee085ec8164c0539a234eb162223041fc7df1e30f65599423e59880d8e9da2f01d9bb9c7a1a22c48d3d0dacdcb09283ab8b3fc31dd6a50a4f53f85a13528a0a877ccf3e73dce3885ac1e347685ef3c5d0a7d7b41377f5aab7fef20db6943564f8f4989456858e49d83a11ade96f98fe54eb0939cdcfd77774d51fb5f1efa09bdd689b91d8d9f08316d68f2cb073acf3e0026f40d8b92f7f89f40c"}}]}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, r7, 0x400, 0x1070bd27, 0x4, {0x5}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x3d}, 0x1, 0x0, 0x0, 0x20008000}, 0xc034) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r9, r11, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xd81, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450e0d7300660000f273907800000000ac1414aaeffa6718402e2a840a25759048c8f7015c5be6f0f03b7889268e4d1d88eb7db0b570ce15168bd621f234e9886a490375c2fc392c904b6cd60f0bf8f086fca887e4ed97ce53241ec7e1e0b8fe7def6dcf036fbe3bce3fd3f59f660fb654a89c86fea532bec13338a743d46a9fd1c443f0d3a7943783bca256c5429d8cbcdce8245a5b9693357cc10ea659e59082b7604bb9ea585e24807fa8300413c03297662eeb027824ed0c20fa872a6a7812f110a3f1da133fe5b9360af7aaa518eb27acc034cd33919215fd1c4982f9c20512f6290bff62c3d06aa42458ad5d964eca803f6eb9daf0ff5059c8484fa6ac7b244ca9d8d2fb89493ed118c44454e6773aabd988cef01464bd6ec6d86b9c5ad205f1997158c6c59ca21ac97787e36e00fce204f12157bfc47702bf8dec19c7cdf0b485322d7d35d6f2e379900c468345b60324775153ddc024f9e6a725b2abafe90700534df524fdc0ad704a5062cbfb74fa0106f8977eb671fe30c4c302a8ce99d9c10c1a2512ee304a1cdb8b9545d5fa6bc85a28dfcb28550ba8bff32246244f7826dd1a59df1208c1e448f849c974404f3610908e11c8380e3ddfdfa7e71fb599c11abf7a510fecf4a3b10333d89af0254aff22edda378c6fca08bb37ef12367300f9e21bd7ec18f976c89fd65174667e55ae8bd3b8efee639c203fd97ade60ad12bf425aeb3d4b638d1243f85071b2006b14e34d8a8d58770d5473e99d3f7e20757f222f8ad3d82f8b745a07992dde6d0f26cc4d5ef1082ca768274a46695ca0318d08748ac764c3daec8f1767055019ceefff6bc302ecb777762e2c3dd5c1ec736d051d855b6c0b1a9332181d8efaf0f6fbbb6636532744b896bfe1ab93f275575dede887ba2ffb24be12e18a944c4a8e32db303c9ec5513c50c413ff8fd8702dc593556f17952b1ab4b7e4a843cdd75c1475e8ac0431d0a2c401f7c7b9e20f53a6cecc5d519c2dada3ef96fc90bb3c98664c7e3b85479438781ca2049ddde1f9f194597197dae2350da647f3ccfa5ace5c8f765154ae269fcfad305808d5b2374006e9f7396f9693a134000c12458f9915376648f85d46ebb77dbb0b428256f24627223344c3636fb8f98cd4c5eb3f5542b3b4c19fd1f5780e6d1c0dac2408790f88901ec8952d8454c6be9910e99c0feb68f973da202c0c29923c938b52faf1a0eb88b502d3047cbcca14a478819a74415e1a8143c933e385308dea238094624fc18003d86ef1bc40792de1a875f76778b5acacffbcee8911d8daae7b48d27dbcb010062e823ee249974758b693fde87f18711593107cd240666294924ace2aaa099ae56cb2a11af327ccf33bb3e4164b3d4d83ce4fccf271a5976496697d48b28b5f6c6ccf646fc30d6277ff08a63b22d16082c6a282a2282fed6c43442138e8b66f885a16926f981977a598580bc2c8ce18b23047ac7673481b1fc2ab06a95890897635ec01f7eeea5656fb67cc5615340259c0b38e6c2aefe99e0a39ec38375e8ba1d99947bd18e4bf91742a7ab604e3407f0d2c314ec42d409df9befc5c52465437bf3eae3e4f22e3ae468cbd0fd4ee76160e79e158f0a568532298f71a9771e8ee5a7355a73e8dc9bbc99190ba2e9d1f720b051559e48bc0973e49a78470ed3f7410c297da192840dfff9417c17c287412f2e6f9b51176d51d1aa2066aee9c9ecd829f2b10055883f18e8240cae6103fed0db16a37dad4d360e6b10a410334c507b2ca748b04532f2bb1e1f8b023e3c7fd31bd0cb534d60cf15070366bcf77407818f2bc36590dd8303a1ba035add16273b92ab857708fe03087a8acb291952b6a4e5df550650945abdbfe436cf6d7cb0ebdc925791491eff334dd61beeb6fa59933a3e89b1271e3b598650749c8aeafe04fff38166b493dc7662762babdeedb79eea4bfd282c43952e288571294b98e4c95062a65bc0b2e25309d7f0337f622bad972e899527c792d3f62ee39ce4c3287bf4feb63155b9b76dfd10a9f43bebbe80739896920a224d081da5893ed69611a943dcfc16d55bccb31f985b7ad04dd76e5f662b57f261a4d9fb51748c8091de196b583b0409242a77123e48f8b6714185bff6eabb108b57bd6dd1883f6b0e0c4c4a1538563de01ab74845eb46034e9f67f70a0564c7c2fc2844d58b683408cd48895c5fc9cbca16a7a09464b3e47b7cf265b45ac7f3d831ce36bbef7efde19fab91a4f66f5fd6edb155947f6f8554437de2139e8867608eefcda18838f4cf26c3bb64511ca00de27faba9df0ff373609f6e26ed12fe2eed62072ea2a88d6a00bc09b1a331b9ee3fbfee831b0a21d2fc43997fe19501262298dfdf394383950e26e68de13893b1a84672c9a269759ed0b20060d0448d4ec0fa059880f83833ec81439874d97603f1d8f7d37aad941a12158437c1fe450030358ef095aa6231aebefc74f525ae77a3de696cfafb9b0f77754ec5dc13e0a4d0c3801de132cabd91f1d70585236719ff4c47e6289703625f1875b7c6caea3bd013f8b45dadcd446dbdd7826b1cd219a4a658ab84752210d0e74b4a5ca5520ad30edbbd32c5c7e34c58191921f80529d69cdeeacc22bb5e6cbc42ea554ba25281fbc0d096bd9c05276f5ebd66ebf9367595f3346e7fad0c40a5ef8ed9f1fa33018429af04ac161abf034ae39df611012757ecc247bc0b440ee68b6eb803c614abffa415528876e2bec8d5e1012aa40059706eebbde03ddd284865703f1856df1b3e96e7562d447393d0b591d794d859c5237021446fd5efd2d6dd40c0911d1b321a5e690cb64678d362783a8382b127534a0d7f34051c8ddf45dd861a1cfd415b9a0d4d09dfbeb38b7c7404f721cd9802cdd43a121d2e893e059a6da79f45a4220cf1d114ff3d151ba2e561ce9c26a6feffbc443f2dfb94b2cd23f2ea5d7e76f39ff7cd380507003a4c4f764e65c97c81e53d24a5e93709690c4ef3c442836ce7446e671a3730c7aaa6d17b30932bbd09da31bc26a9fc2b7d2e6954123eaef56eca6b7e9c92887a54da023f48a5bc00dab2188e62e927931d24b795bb91ce42cf6e13dc4145ad9aefa09b81de17eaa3c5f1841374e7dcba60a0ec7469788b22f02711f714b2bf5490e3bcb68cef16394eb6d865e749a0a512f1f7a2a4d5b3b5bbdc4212d9d1c9e6abec8870728a7f5cdb10ad79732e8932bc6cd259cf94a8d3b0331936b2b79a1aa4b5c3cecebdde9587ce53afa68f7e9f758bed544974709e92186665225a510b1a81ae0f471d93478d19e06c8ea7e94f2aafdab760039c66ec7de041ee916faa53af32192898d512555d0cf2c8c3147e8579021b9a2f0aaa4002031e5770a6c8fb3011d4273b5c72a93f2a96fe2da98fe0106e98461adf0bc0f29e9f59e3fe59e944b0d470e448439bb775efe3beb3696190145ed49ab08f0fb66f4b442adc73eb363de99db0bba4dfae58e00efc940a57228af0dd706a7caf96d22ad110ed0429bf5e535062bef0b8e35b7076c1cef00a706286a8771227cd7865dd120d646fa85de59598b5e6eb1da89e89ded515d8dd374b4084489f1b4c7f35fff1fa11480b924de37463a502442f2ec726f084b2630a2602e7158ce9d42eb5b9dceaf312702b2db4e921de45b20249aac5083a33d1e7d26ea06428d551db82ed12c521eca192da6e3a112affa0e9ed1446fb1f3ee031354c2615da20bc629a06d287869ffaf97e093d67c71d78243c253b7609e4ce95adb9637cef7e8f9b003f863b32b522d5822d346cc1cdfb7d46cdcd5588a1170d379b21ff6b4be39384adf4eaceedb5a11662c4ae1732743cdb05348b2435702a3a022c112d92e94e1563273fc43eb128adcb84093d6446e142f8c4cd4c5a2293137081ff582dcb2451f812ff3c13ca1cafab2c6487fcd9e606c8c6399081846ff391276708a6592174dfdf7c70058968b919587eec551cd092bad7ceb471e8e816b76bff96953966164389e65525961fc0b2f1fd5edba0bc949cf38d90160467cdc29aacd79a120415237c9efed6106a6854e92fb103e60f54f61b90d156d763adfcc8395c07ee4983fc99f2e2e4eb32ba20afcbd115c3e4b3f003f9f4ab61ff100240864116fc2bd85dc78dbdf65935de896e7f8c8114666c94e4c706b46c887ff79ed89f7a6d54fd8ce230c0c3be3bebbf355f2cffec5059166023f701c098e0864d6109694466b7ccb081df485734775b3285db442f75820e513d7893c6c203d51380c0cfa45f1fb0e3e653050e66d580acdcc317259ed3679454da42f3d5311445b6c668adb3ee7b8445dce387a339315ae3a2ad7bb7b2498151e31bd854a21183dc6386c72814599699b2eb9bfbeefb63cbc4d2de21473b672a2af05f7884e68d0548d66f95f8a6792a04152c540699a6aa67ed3873f9fd56887187f542a09de4089277cc0d6baafc9d783afd832c0f46f02ce40380976760fda7e5391a51815790509388de0ab6d71986ee7f90a4c9ef2b89539717499d36e95bf3b85b7f895e66b9b0530c48db4548ffdc16481b6d1a53fa7c2c002f5bb6f36bc0749828fff6307e6be01d95a54c760e27ce2332e758d4f7a9544dd4c10a1858ecb07b70ac96b89fb012b5233b61de2cf71361d2336b4ec385f289d14ce540b821007bbda35e0265643e32d67e8983c016268769df093075b41e5eca4130326d1f57c48e4e75d607e82da5e1b465927f85f5266a1538c390a237efd5efed9fc727328d4ed7c031082ef56144b7cd668248bb73da8cf98c415ca07c45a3c2ddb200ef125adf5fe03ae97198679b24cd8127d126b7806d6078980134c684f36b89dd57ce15d6e715a4aedceb974ed360843d1e9f20951b3769ac7ff3c4197d26b2bde174c1e8c704a2a6a270e03a5369f0620bf2d2c634e654d21833514cae228b5f36d47a35c16270ce8b692cc44c15cf787a550e5e15fddce64f36817a667babb5f67d1c2d2ab28ba57b99ba48fd8ca3299d73cc61dd38db8784c765c6f79f410f22137df2bbce0539fd10a0a13377862c90939ba1026846cbc67b80b4ba8b132b6dba7dae57ec2f5e30466f04afe4f1160aa6c208268b0ac4fcd244c5826fb724e6767be80a41e"], 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)=r9}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000004088070002000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5b}, 0x94) 6m45.107680294s ago: executing program 7 (id=6097): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f00000fe180)={0x1, &(0x7f00000fe040)=[{0xc000000, 0x13e0, &(0x7f0000000080)=[0x800, 0x7ff, 0x1d, 0x2, 0x0, 0x7fff, 0xffff, 0x6, 0xfff, 0x401, 0x3, 0x101, 0xfffffffd, 0x5, 0x51a, 0x8, 0x6, 0x6, 0x1, 0x9, 0x6, 0x840, 0x5012, 0xe, 0xffffffff, 0x172, 0x3, 0x80000001, 0xffffffff, 0x0, 0x8000, 0x5, 0x2, 0x1, 0x10001, 0x4, 0xffffff80, 0x775, 0x8000, 0x3ff, 0x2, 0x8000, 0x8000, 0xcb59, 0xffffff05, 0xfffffb68, 0x5, 0x5457, 0x9, 0x7, 0x3e, 0x2, 0x0, 0x2, 0x101, 0x5, 0xfffffff0, 0x2c47, 0x2, 0x4, 0x4, 0x4, 0x7fffffff, 0x7a, 0x1, 0x6, 0xffff0001, 0xeda, 0x49, 0x1, 0x4, 0x0, 0x94c, 0xb, 0x6, 0x2, 0x6, 0x8001, 0x1000, 0x6, 0xda, 0x1, 0x2, 0x1, 0x8, 0x3, 0x2, 0x1ff, 0x5, 0xffff, 0x7, 0x62, 0x7a, 0x9, 0x69e, 0x0, 0xffff, 0x2, 0xc4, 0xffff, 0x10, 0x6, 0x7d1, 0x5, 0x2, 0x1000, 0xaec, 0x200000, 0x1, 0xd08, 0x9, 0x0, 0xffffff80, 0x800, 0x7, 0x2, 0x0, 0x5, 0x6, 0x7, 0x122b, 0x1000, 0x57, 0xf, 0xffff, 0x8, 0x1, 0x7f5, 0x3, 0x3, 0xed, 0x1, 0x0, 0x3, 0x0, 0xfff, 0x4, 0xffffffff, 0x8, 0x705b, 0x1ff, 0x0, 0x5, 0x4, 0x3, 0xf, 0x9, 0x5, 0x8000, 0x8, 0x401, 0x6, 0x7, 0x7, 0x4, 0x22, 0xff5, 0x6, 0x3, 0x2, 0x8, 0x7, 0x8001, 0xfff, 0x8000, 0xfc000000, 0x7, 0x9, 0xffffffa0, 0x5, 0x81, 0x6, 0x7, 0x68db, 0x3, 0xb, 0x5, 0x7fffffff, 0xd, 0x7, 0x0, 0x6, 0xe, 0x0, 0x2, 0x5d3164d9, 0xa, 0x2dec, 0x7, 0x7e, 0x0, 0x10000, 0x0, 0x10000, 0x112, 0x9, 0x2, 0x99, 0x4000, 0x1, 0x3, 0xfffffff8, 0x8, 0x4, 0x1ff, 0x3, 0xfffffff3, 0x10, 0x84, 0x3, 0x6, 0x8, 0x8, 0x3ff, 0x5, 0x500, 0x5, 0x8001, 0x5, 0xd, 0x2, 0xf, 0xe8a1, 0x4987, 0x1000, 0x6, 0x7, 0x2, 0x11, 0x5, 0x0, 0x8001, 0x8, 0xd, 0x18c, 0x7, 0x3, 0x9, 0x18, 0x47, 0xd889, 0x20000, 0x7, 0x9, 0x1, 0x7, 0x9, 0x924c, 0x7, 0x5, 0xff, 0x2, 0x8, 0x6, 0x9, 0x6, 0x2, 0x80, 0x8, 0x6, 0xe, 0x100, 0x0, 0xc7f, 0x0, 0x0, 0x0, 0x8, 0xd, 0x8, 0x5, 0xe16, 0x1, 0x5, 0x8000, 0x72e, 0x7fff, 0x0, 0x5, 0x28538666, 0xa, 0xffffffff, 0x8b, 0x79de, 0xffffffff, 0xeb4, 0x6, 0x2, 0xf, 0x7, 0x180000, 0xfffffeff, 0x85b, 0xe, 0x1, 0x0, 0x7fffffff, 0xf, 0x5, 0x3ff, 0x5, 0x4, 0x2, 0x5, 0x1, 0x9, 0xfffffff8, 0x1, 0xfd, 0x1, 0x800, 0x8, 0x6, 0x3, 0x68, 0xabb9, 0x6, 0xf, 0x4, 0x7d27, 0x17e9, 0x7ff, 0x7b, 0x6, 0x9, 0x7, 0x7, 0x3, 0x8, 0x400, 0xfffffffe, 0xffffffff, 0x0, 0x1, 0x1, 0xfffffffd, 0x7, 0xffffffff, 0x8, 0x3f, 0x7, 0x4338916a, 0x0, 0x9, 0x4, 0x2, 0xd55, 0x80, 0x84c, 0x5, 0x2, 0x8, 0x40, 0x0, 0x1, 0x2, 0x32, 0x14, 0x10001, 0xebd, 0xffff, 0x7f, 0x9, 0x5, 0x80000001, 0x0, 0x7, 0x0, 0x3, 0xc3, 0xa318, 0x2806, 0x0, 0x1, 0xffff, 0x1, 0x9, 0xfffffffd, 0x4f9, 0xeb, 0x3, 0x8, 0x7, 0x5, 0x3, 0x10000, 0x0, 0x4, 0xc, 0x6, 0x4, 0xfffff78e, 0x6, 0x28800000, 0x7, 0x0, 0x9, 0x4, 0x7, 0x2, 0x0, 0x1, 0xc1a, 0x5, 0x1000, 0x6, 0x7, 0x9978, 0x10, 0x0, 0x7, 0x1ff, 0x1, 0xfffffffd, 0x8, 0x2, 0x24, 0x3, 0x0, 0xe, 0x5e, 0x6, 0x2, 0x1, 0xe, 0x3, 0x6, 0x4, 0x3ff, 0x6, 0x3, 0x4, 0x9, 0x8, 0x101, 0xbe, 0x9, 0x445, 0x0, 0x1, 0x3, 0x1, 0x3, 0x1, 0x3, 0x570b, 0x40, 0x8, 0x5815, 0x6, 0x2, 0x3, 0x8, 0x6, 0x3, 0x5, 0x7, 0x7, 0xcb, 0x100, 0x7, 0x9ab, 0x7fff, 0x6, 0x8, 0x1, 0x1, 0x3, 0x7c99, 0x8, 0x3, 0x4, 0x5, 0x8, 0x6, 0x7ff, 0x0, 0x2, 0x4, 0x4, 0x9, 0x2, 0x2, 0x6, 0x2, 0x0, 0x7fffffff, 0x8, 0xfffffff1, 0x9, 0x251d, 0x8, 0x3, 0x4, 0x7, 0x5, 0x5, 0xf481, 0x5389e868, 0x6, 0xf, 0x9, 0x0, 0xffffffff, 0x3ff, 0x6, 0x9, 0x6159, 0x6, 0x7fff, 0x1dec, 0x2, 0x80000000, 0x1, 0x1, 0x2, 0x0, 0x4, 0xb351, 0x5245, 0x8, 0x8000000, 0x3ff, 0x80, 0xd6e8, 0x4, 0x6e, 0x800, 0x4, 0x9, 0x7, 0x0, 0x0, 0x3, 0x6dd7000, 0x1, 0x3ff, 0xa, 0x4, 0x6, 0x3, 0x40, 0x10, 0x6, 0x1, 0x9, 0x0, 0xfffffffc, 0x4, 0x7ff, 0x7, 0x7fffffff, 0x401, 0x5, 0xffff, 0x81, 0x9, 0x5, 0x7, 0xc3b1, 0x4b7, 0xd4, 0x3, 0x7, 0x40, 0x100, 0x80000000, 0x8, 0x8000, 0x9, 0x1, 0x100, 0xd, 0x1, 0x5eb, 0x7f, 0x81, 0xc, 0x3, 0x1, 0x9, 0x507a, 0x2, 0x9, 0x3, 0x8, 0x80000001, 0x3, 0x1, 0x3, 0x6, 0x6, 0x81, 0x8, 0xffffffff, 0x80, 0x79, 0xff93, 0x100, 0xc831, 0x6, 0x6, 0x7, 0x8001, 0x6, 0xed68, 0x0, 0x3, 0x82, 0x3, 0x40, 0x8, 0x7, 0x8, 0x2, 0x8, 0x1, 0x7fff, 0x5, 0x8b2, 0x40, 0x400, 0xbfe, 0x100, 0xc, 0x2, 0x0, 0x5, 0x683, 0x2, 0xd23b063, 0x1, 0x2, 0x7ff, 0x5, 0x8001, 0x8, 0x503, 0x6, 0x7fff, 0xb9, 0x5, 0xffff, 0xa7, 0xd9c8, 0x3, 0x2, 0x80, 0x5, 0x3, 0xe426, 0x4, 0x4, 0x9, 0x9, 0x5, 0x3af, 0x8001, 0x80000000, 0x3, 0x4, 0x6, 0x80000001, 0xfffff744, 0x4000, 0x9, 0x9, 0x7d, 0xffff074e, 0xf, 0x5, 0x9, 0x0, 0x6, 0x1, 0x3ff, 0xffffffff, 0x1, 0x120, 0x0, 0x8, 0x6, 0x0, 0x8, 0x5, 0x1ff, 0x3, 0x0, 0xe15f, 0x3, 0x3, 0xffffff4b, 0x5, 0x4, 0x7, 0xfffffff8, 0x64e6, 0x3, 0x500, 0x0, 0x9, 0x4, 0x7ff, 0x40000000, 0x0, 0x3, 0xee4, 0xf, 0x3, 0x4, 0xc86, 0x9, 0x1, 0xf, 0x9, 0x3000000, 0x80000000, 0x6c0, 0x8, 0x62800, 0x100, 0x6, 0x0, 0x7fff, 0xaa73, 0x0, 0xffffffff, 0x100, 0x1d97, 0x7, 0x3394, 0xc, 0x4, 0x6, 0x8, 0xff, 0x5, 0x3, 0x6, 0xa0000, 0x0, 0xff, 0x7fffffff, 0x2, 0x7fff, 0xa2b6, 0x9, 0x0, 0x9, 0x80000001, 0x9, 0xffff, 0xfff, 0x3, 0xdb8, 0x2, 0x2, 0x1, 0x1, 0x3, 0xa, 0x9, 0xfffffffb, 0x5, 0x0, 0x3, 0x4fbc, 0x3, 0x7ff, 0xfffffff8, 0x5, 0xfff, 0x611, 0x7, 0x4, 0x400, 0x95, 0x0, 0x5, 0xc0, 0x42e5, 0x1, 0x3, 0x3, 0x7, 0x7, 0x401, 0x0, 0x7, 0x0, 0x4973, 0x2a30000, 0x6, 0x6, 0x77200000, 0x7, 0x3, 0xad, 0x4b, 0x8, 0x2, 0x9, 0x7, 0x8, 0x4, 0x5, 0x7fff, 0x7f, 0x3ff, 0x9, 0x400, 0x4, 0x7, 0x6, 0x6, 0x9, 0x6, 0x1, 0x10001, 0x1000, 0x1, 0x2, 0x10001, 0xe, 0x3, 0xfffffffb, 0x8, 0x0, 0xb, 0x100, 0x8, 0xb0d, 0x7ff, 0x2, 0x1, 0xa, 0x4, 0x3, 0x2, 0xed57, 0x10001, 0x101, 0x8, 0x5, 0x0, 0x2fa57082, 0x8, 0x800, 0x1, 0x5, 0x1, 0x9, 0x4e, 0x3, 0x10000000, 0xfffeffff, 0x3, 0xe, 0x7, 0x8001, 0xb3a, 0xfff, 0xe35c, 0x1fbd7c06, 0xfffffffb, 0x5, 0x1, 0xf3, 0x8, 0x7, 0x3, 0x8, 0x1, 0x6, 0x1, 0x2, 0xffffff81, 0x6, 0x8, 0xfffffff7, 0xa3, 0x6, 0x0, 0xfffff470, 0x5, 0x7be, 0x7, 0x11f9, 0x7, 0xaf0, 0x5, 0x200, 0x80, 0x3, 0x1b, 0xf01, 0x5, 0x10001, 0x9, 0x9, 0x1841, 0xdb, 0x7, 0x9, 0xfff, 0x7f, 0x64b86e50, 0x7, 0x10, 0x9, 0xd8, 0x4, 0x7, 0x5, 0x7, 0x7, 0x80000000, 0x8, 0xfffffff8, 0x7fffffff, 0x1, 0x9, 0x9, 0x1, 0x6, 0x5, 0x8, 0x7, 0xffffff81, 0x2, 0x100, 0x4, 0x5, 0x6, 0x3, 0xb6, 0x8, 0x6, 0x8000, 0x9, 0xffffff7f, 0xa, 0x1, 0x8, 0x4, 0x81, 0xd, 0x0, 0x8001, 0x8, 0x9, 0x6, 0x7fff, 0x2, 0x6, 0x7fffffff, 0x8, 0x0, 0x6, 0x1, 0x5, 0x9, 0xfffffd49, 0x0, 0xb5, 0x80, 0x1, 0x83c2, 0x0, 0x1883, 0x3, 0x9, 0xffffff58, 0xf, 0x2, 0x80000000, 0x8, 0xffff0001, 0x0, 0x5, 0x0, 0x1, 0x3, 0xdca8, 0x40000000, 0x7, 0x1, 0x7fffffff, 0x0, 0x7fffffff, 0x9, 0xa000000, 0x3, 0x3, 0x0, 0xff, 0x5, 0x7, 0xff, 0x8a73, 0x8, 0xfffffffa, 0x9, 0x9539, 0x10001, 0x8, 0xffffffff, 0x6, 0x4, 0x9, 0x5, 0x703f, 0x7, 0xfffffffc, 0x100, 0x9, 0x24, 0x7, 0x7, 0x1, 0x1, 0xaf05, 0xfffffe00, 0x3, 0x8000, 0x10, 0x2, 0x9, 0x8, 0xf, 0x6, 0x8001, 0x3, 0xd3bf, 0xa2c5, 0x7, 0x8, 0x7ff, 0x3, 0x6, 0xfffffff9, 0x0, 0x7, 0xffffffff, 0x6, 0x1, 0x6d8, 0xb, 0x7, 0x1, 0x7, 0xffffffff, 0x2, 0xfffffc4e, 0x2, 0x1, 0x2, 0x8, 0x6e, 0x6, 0xf7c, 0x2, 0x0, 0x8, 0x2, 0x4, 0x9, 0x7, 0xf, 0x1, 0x4, 0x2, 0x51e, 0x5, 0x7, 0x9, 0x8, 0x9, 0x3ff, 0x1000, 0x7, 0x0, 0x9, 0x1, 0x55f750c1, 0x5, 0x6, 0x6, 0x59dae347, 0xa6, 0xfff, 0x9, 0x5, 0x1, 0x2, 0x0, 0xfffffffb, 0x1800000, 0x2, 0xfde, 0xfffffffb, 0x4, 0x1, 0x7, 0x3, 0x9, 0x9, 0x2, 0x4, 0x10000, 0x9, 0x2, 0xffffffff, 0x85, 0x7, 0x5fd, 0xa, 0x8, 0x5, 0x4, 0x2, 0x9, 0x4, 0x3, 0xf, 0x8, 0x9, 0x4, 0x7f, 0x5, 0x6800000, 0x101, 0xff, 0x7, 0x7, 0xd47, 0x7, 0xffffff57, 0x8, 0x5, 0x9, 0xd, 0x6, 0x7fff, 0x7fffffff, 0xfffffff8, 0x5, 0x7fff, 0x6, 0x2, 0x2, 0x8, 0x6, 0xffffff98, 0x640c, 0x8, 0x6, 0x5942, 0x7fffffff, 0x9, 0x400, 0x1, 0xf, 0x2, 0x6b, 0x5, 0xa0000000, 0x9, 0x9, 0x4, 0xa, 0x4, 0x3, 0x10001, 0x2, 0x200, 0x4, 0x3, 0x6, 0x4, 0x9, 0x0, 0xc9c, 0x80000001, 0x5, 0xf, 0x51, 0x1, 0xa, 0x1, 0x10, 0x8, 0x8, 0x1, 0x3, 0x0, 0x6, 0x8, 0x5b, 0x5, 0x7, 0x8, 0x7fffffff, 0xcfe, 0x5, 0x5, 0x8000, 0x4, 0x1, 0x9, 0x9, 0x0, 0x5, 0xd, 0x1, 0x8, 0x2, 0x6, 0x6, 0xff, 0x1, 0x0, 0x7, 0x7, 0x1, 0x6, 0x1, 0x3, 0x3, 0x1a89, 0x9, 0x27ce1aa2, 0x7, 0x8, 0x9, 0x10001, 0x5, 0x9, 0x6, 0x3, 0x4, 0x4, 0xfffffff9, 0x6, 0x2, 0x80, 0x1, 0x6, 0x7ea2, 0x2, 0x3, 0xe40a, 0x80000000, 0x1, 0xb9, 0x7b, 0x1000, 0x7, 0x0, 0x2, 0x8, 0x40, 0x2, 0x7fff, 0x101, 0x10000, 0x6, 0x100f, 0x7, 0x118, 0x9, 0xfaf5, 0x7, 0x7, 0x1ff, 0x8001, 0x401, 0x1, 0x4, 0xfffffff0, 0x0, 0x8001, 0x4, 0xfffffffd, 0x100, 0x2, 0x6, 0x5, 0xa, 0x30, 0x8, 0x5, 0x400, 0x3008b2d3, 0x1, 0x6, 0x9, 0x4, 0xffffffd0, 0x0, 0x2, 0x3000000, 0xe, 0x9, 0x2, 0x9, 0x4, 0x9, 0x80000001, 0x5f70, 0xa85a, 0x0, 0x5, 0x53, 0x5, 0xa, 0x101, 0x4, 0x7, 0x8, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x8000, 0x1, 0x10, 0x100, 0x8, 0xe, 0x0, 0x3ff, 0x1, 0xfb1d, 0x7, 0x66, 0x4, 0x233415b8, 0x5, 0x2, 0x1ff, 0x0, 0x1, 0x0, 0x8000, 0x10001, 0xe3c, 0x6, 0x8, 0x100000, 0x3, 0x6, 0x6, 0x7fffffff, 0x400, 0xfff, 0xb82, 0x8, 0x837, 0x3, 0x2000, 0xfffffffb, 0x6, 0x3, 0x7, 0x5, 0x4, 0x80000001, 0x8, 0xff, 0x6, 0x0, 0x8, 0x1, 0x6b, 0x2, 0x9, 0xfffffffe, 0xffffffff, 0x30000000, 0x0, 0x1, 0xfffffff7, 0x48, 0xcaa6, 0x5, 0xfff, 0x7, 0x2, 0x3, 0x5e, 0xef07, 0xff, 0x33d8324, 0x9, 0x10001, 0x4, 0x4f, 0x6, 0x8, 0x7, 0x1, 0x1, 0x2, 0xdf6, 0x8, 0x50d9, 0x9, 0xffff, 0x1, 0xffff, 0x4, 0x1ff, 0x2, 0x4, 0x6, 0x79b2, 0x8, 0x9, 0x1, 0x0, 0x1, 0x8, 0x1ff, 0x9, 0x3, 0x6f267158, 0x1000, 0xfc, 0x6, 0x9, 0x0, 0x7, 0x0, 0xfffffffd, 0x0, 0x10000, 0x6, 0x9, 0x817b, 0x100, 0x7, 0x4, 0x5, 0x1c, 0xfb8d, 0x10001, 0x8, 0xffff, 0x5, 0x3, 0xffffff99, 0x22d4, 0x1000, 0x10001, 0x3, 0x1, 0xe47, 0x0, 0x9, 0x39, 0x7, 0x7, 0x8, 0x5, 0x6d, 0x60, 0x1, 0x3, 0x6, 0x200, 0x1, 0x6, 0xfffffff4, 0x8, 0x8, 0x7, 0x0, 0x4, 0x0, 0xeb, 0x80, 0xf75, 0x6, 0x9, 0x200, 0xd18f, 0x7, 0x81, 0x2, 0x388d, 0x5, 0x6c, 0x1, 0x8, 0x9, 0x7, 0x4, 0xc, 0x4, 0x7fffffff, 0x1, 0x7c, 0x9, 0x5, 0x1, 0x6, 0x5, 0x0, 0x2, 0xd7, 0x2, 0x5, 0xffff, 0x81, 0xec, 0xe, 0xffff0000, 0x4cd9, 0x5, 0x6, 0x1, 0x8, 0x5, 0x9, 0x4ece5037, 0x0, 0x797f29c5, 0x2, 0x7b, 0x7ff, 0x4, 0x4c, 0x101, 0xc, 0x3, 0x4, 0x9, 0xa7, 0x3ff, 0xffff, 0xb803, 0x80000000, 0x6, 0x6, 0x6, 0xfffffff2, 0x80000000, 0x100, 0x81, 0x8, 0x8000, 0x7, 0x81, 0x6, 0x5, 0x7f, 0x9, 0x40, 0xfffffff8, 0xffffffff, 0x58, 0x0, 0x80000001, 0xa91, 0xf37, 0x400, 0xf6d, 0x80000000, 0xfffffff8, 0x9, 0x1, 0x67, 0xec2b, 0x3, 0xffff8001, 0x1, 0x3, 0x6, 0x6, 0x6, 0x8bf6, 0x3ff, 0x67, 0x8, 0x800, 0x93, 0x3ff, 0x5, 0x8001, 0x7, 0x4, 0x0, 0x1000, 0x28, 0x4, 0x5, 0x5, 0x8c, 0x57, 0x2, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0xb, 0xfffff4ac, 0x7ff, 0x2, 0x4, 0x1, 0x9, 0x401, 0x3, 0x6, 0xffffffff, 0x1, 0x70, 0x4, 0x7ff, 0x1000, 0x8, 0x8, 0xf, 0x67, 0x4249, 0x2, 0x0, 0x1, 0x0, 0x800, 0xb858, 0x9, 0x6b6, 0x4, 0x8, 0x4, 0xffff, 0xf4, 0x8, 0x58, 0x6, 0x6, 0x64e5be9, 0x7, 0x6, 0x2, 0xff, 0x9, 0x8, 0x5, 0x0, 0x2, 0x4, 0x9, 0x9, 0x7, 0x2, 0x7c, 0x2, 0xb4c, 0x7, 0x6, 0x6, 0x9, 0x8, 0x144, 0x9, 0x8, 0x7fff, 0x677c, 0x2c82, 0x192, 0x200, 0x8, 0x1000, 0x20, 0x59a5, 0x1d17, 0x13, 0x4, 0x4, 0x6, 0x9, 0x4, 0xa2, 0x0, 0x6, 0x4, 0x4, 0x0, 0xdc, 0x3, 0x1ff, 0x1, 0xffffffff, 0x6, 0xfffffffb, 0x2, 0x4, 0x240, 0x9, 0x6, 0x7fffffff, 0xede, 0x7, 0x8, 0x77, 0x5, 0x35, 0x3, 0x0, 0x9, 0x8000, 0x2, 0xff, 0x8, 0x80000001, 0x3, 0x0, 0x0, 0x90a, 0x1, 0x2, 0x68, 0x6, 0x8, 0x9, 0xfcb, 0x8, 0x8, 0x1ff, 0x3, 0xf, 0x101, 0x2, 0x3, 0x4, 0x7aa9, 0x10000, 0x7c9, 0x8, 0x2000, 0x2, 0x3, 0x5b0f, 0xc, 0x9, 0x7, 0x9, 0x2, 0x6, 0x8, 0x5729, 0x4, 0x3f, 0x8, 0xe5, 0x5, 0x4, 0x0, 0x520e1af2, 0x7ff, 0x167f819, 0x3, 0x81, 0x1000, 0x10001, 0x7, 0x7, 0x24, 0xc, 0xa, 0x10000, 0x6, 0x10, 0x720, 0x0, 0x1, 0xfffffffb, 0x5b, 0x3, 0x2, 0x7, 0x6, 0xfffffffe, 0x9, 0x7, 0xfffffff9, 0x8, 0x2, 0x0, 0x1, 0x0, 0x8001, 0x8001, 0x6, 0x10, 0xfffff4ad, 0x4, 0x0, 0x4, 0x7bf6, 0x9, 0x5, 0x0, 0x3, 0x7, 0x80000000, 0x3, 0x80, 0xa, 0x6, 0x3, 0x8, 0x7, 0x5, 0x9, 0xfffffffb, 0x3, 0x5, 0x0, 0x1, 0x40, 0x5, 0x1, 0xc, 0x807c, 0x2, 0x401, 0xfffffff7, 0x0, 0x0, 0x1, 0x3, 0xfffffffd, 0x9eb, 0x101, 0x91, 0xfffffff7, 0x4c, 0x8, 0x6, 0x7, 0xff, 0x5, 0x7a53, 0x1, 0x55, 0x3, 0x7, 0x48b, 0xc, 0xfffffffe, 0x1, 0x228d, 0x4, 0x0, 0x3, 0x8001, 0x1000, 0x80, 0x10001, 0x3, 0x10e0, 0x10000, 0x1, 0x7, 0x40, 0x2, 0x5, 0x8, 0x5, 0x2, 0x8000, 0x1dc, 0x0, 0x1, 0x4364, 0x6, 0x2, 0x8001, 0x1ff, 0x9b5e, 0x58a3, 0x9, 0xfffffff9, 0x1, 0x3, 0x401, 0x1000, 0x6, 0x8000, 0x2b5, 0x723, 0xea, 0x8, 0x4, 0x7f, 0x0, 0x28, 0x9, 0x80, 0xff, 0x4, 0x40, 0x2, 0x6, 0x56, 0xa, 0xdfb0, 0x9, 0x8, 0x80, 0x1, 0x5724, 0x80000000, 0x2, 0x7fffffff, 0x6, 0x5, 0x80000000, 0x1, 0x6, 0x3, 0x2, 0x0, 0x6, 0x2, 0x4, 0x1, 0x9, 0x0, 0x2, 0x10000, 0x4a73, 0x800, 0xe75, 0xa, 0x40, 0xc1b82f63, 0x8, 0xfffffffc, 0x2, 0x95b, 0x6, 0x7, 0x4, 0xe3, 0x1, 0xffffffff, 0xac3, 0xfffffff7, 0x99, 0x4, 0x2, 0xfffffffb, 0x862, 0x7f, 0x7ff, 0x0, 0x1, 0x1000, 0x7, 0x7, 0x7ff, 0x1, 0x200, 0x1ff, 0x4, 0x8944, 0x2, 0x3, 0x3, 0x6, 0x9, 0x0, 0x100, 0x9, 0x0, 0x15ee, 0x14, 0xe00, 0x6624, 0x10000, 0xdda9, 0x4, 0xfbb, 0xf0, 0x3, 0xf, 0x4, 0xfc, 0xf74f, 0x6, 0x4b9, 0x2, 0x891, 0xed56, 0x2, 0x3, 0x894, 0x2, 0x10, 0x8, 0x8, 0xfffff02e, 0x8, 0xe, 0x45b, 0x3, 0x8001, 0x9, 0x3, 0x5, 0x800, 0xf35, 0xb, 0x3, 0x68b, 0x8, 0x8, 0xfff, 0xffffce61, 0xffffffff, 0x9, 0x1, 0x2, 0x10001, 0x0, 0xfffffffd, 0x5, 0x5, 0x3ff, 0x1000, 0xa1, 0x251d, 0x8, 0x0, 0x0, 0x7, 0x1, 0x4, 0x10, 0x3396, 0x6, 0x2, 0x51, 0x7, 0xa, 0x1000, 0x0, 0x9, 0xf48, 0x10, 0x22cd, 0x0, 0x6, 0x2cf0, 0x2, 0x829, 0x7f, 0x71d, 0x7, 0x0, 0x3844, 0xb3, 0x7, 0x8, 0x4, 0x5, 0x0, 0x9, 0x4, 0x3b27, 0x4, 0x3, 0x0, 0x5, 0x677, 0x3, 0xe, 0x4, 0xc, 0xfffffe00, 0x7, 0xffff5138, 0x800, 0xfff, 0x4, 0x2, 0x10001, 0x6, 0x6, 0xe0, 0x1ff, 0x2, 0x0, 0x8, 0x7, 0x4, 0x7d782e2c, 0x6, 0x9, 0xffff, 0x3, 0x81, 0xfff, 0x5, 0x1c39, 0x98, 0xfffff97d, 0x6, 0x0, 0xffffffff, 0xff, 0xb, 0x8, 0x9f, 0x1e, 0x5, 0x5, 0x9, 0x1, 0x8, 0x6, 0x4, 0xfff, 0x3, 0x200, 0xa, 0x5, 0xe5, 0x8, 0x4, 0x5, 0x1, 0x2, 0x4d0a9bb9, 0x2, 0x8, 0xdc, 0x8000, 0x3, 0x0, 0x4, 0x3, 0x57, 0x6, 0x9c, 0x8, 0x9, 0x4, 0x8, 0x6421, 0xfffffc01, 0x8, 0x7, 0x2, 0x6a4, 0x10, 0x10, 0x2, 0x4, 0xfffffffb, 0x5, 0xc90d47c8, 0x5, 0x1000, 0xfffffffc, 0xecde, 0x3, 0xffff, 0x4, 0x24, 0x10001, 0x2, 0x5, 0x5, 0x911b, 0x3, 0x6, 0x1, 0xfffffffb, 0x7, 0x8000, 0x4, 0x4, 0x2, 0xfff, 0x2, 0xfff, 0x4, 0x4, 0x6, 0x8, 0xfffffff8, 0x6, 0x6, 0x9, 0x7, 0x6e1b, 0x9, 0x5ab, 0xf, 0x2, 0xc, 0x5, 0x2, 0x4, 0x1, 0x3, 0x3e, 0x7fff, 0xf5c8, 0xe1, 0x5, 0x3, 0x9, 0x10000, 0x1, 0xc, 0x3, 0x5, 0x4, 0x3, 0xfff, 0x2, 0xfffffff9, 0x400, 0x240, 0xb, 0x4, 0x8, 0x101, 0x5, 0xfffffff7, 0x401, 0x1, 0x4, 0x8, 0x401, 0x8, 0x9, 0x8001, 0x3, 0xeab, 0x0, 0xa, 0x1, 0x101, 0x1, 0x5, 0x400, 0x4, 0x0, 0x7, 0x7, 0x0, 0xfffffff9, 0x5, 0x7ff, 0x7, 0x1010000, 0xf56, 0x0, 0x7fff, 0x1, 0x8, 0x5, 0x6, 0x9, 0x80000000, 0xdb, 0x3c299460, 0x9, 0x40, 0x9, 0x5765, 0x80000000, 0xc7, 0x7, 0x9, 0x5, 0x1, 0xc73, 0x30000, 0x4, 0x7, 0x5, 0x7, 0x3, 0x7ff, 0x5, 0x7, 0x8, 0x5, 0x2, 0x1ff, 0x1, 0x7, 0x8, 0x5, 0x3, 0x8c09, 0x5bab, 0x380, 0x1, 0xfffff068, 0x5, 0x1, 0x5, 0x1, 0x0, 0x380000, 0xe, 0x0, 0xbe3553f, 0x7, 0xc, 0x7ff, 0x400, 0xb, 0x1, 0x9, 0x10, 0xfffffff9, 0x10001, 0x6, 0x2, 0x1, 0xc, 0x6792b09d, 0xfffffffc, 0x0, 0x8000000, 0x5, 0x401, 0x4, 0x0, 0x2, 0x6, 0x10000, 0x0, 0xfff, 0xa, 0x10000, 0x3, 0x0, 0x10001, 0xffff8001, 0x6, 0x1000, 0x45, 0x100, 0xfadd, 0x1ff, 0x28, 0x933, 0x6, 0x8, 0x4, 0x7, 0x6, 0xf, 0x1, 0x4, 0x200, 0x1c000, 0x7, 0x2, 0x5, 0x6, 0x9, 0x2, 0xfff, 0x7, 0x8, 0xa, 0xf222, 0x8d9, 0x401, 0x6, 0x7fffffff, 0x74e, 0x8ad, 0x30000000, 0xfe58, 0x411, 0x4, 0x81, 0xdc8, 0xab47, 0x2, 0x4, 0x5, 0x4, 0x1, 0x0, 0x3, 0x40, 0x3, 0x5, 0x400, 0x1, 0x6, 0x7ff, 0x9, 0x10000, 0x0, 0x2, 0xe, 0x30000000, 0x8, 0x8, 0x80000001, 0x0, 0x9, 0x1, 0x9, 0x8, 0x7, 0xe7, 0x2f0, 0x1, 0x3fc, 0xfffffffa, 0x1, 0xa, 0x5, 0x1, 0x10001, 0xb, 0x9911, 0x2, 0x972d, 0xfe, 0x4, 0x9b, 0x9, 0x1, 0x4, 0x1, 0x0, 0x79, 0x1, 0x3, 0x3, 0x2, 0x1, 0xe, 0x5, 0x3, 0x2, 0x3f, 0x20000000, 0x0, 0x3, 0x2, 0x0, 0x400, 0xffffff7f, 0x4, 0x4, 0x0, 0x0, 0x78, 0x5, 0x3, 0x1, 0x8, 0x1, 0xffffffff, 0x4, 0x1451, 0x6, 0x5, 0x144, 0x6, 0x81, 0x10, 0x5, 0x401, 0x34, 0x6, 0x8, 0x8, 0x101, 0x0, 0x8, 0x81, 0x0, 0x4, 0x5, 0x9, 0x0, 0x7, 0x2, 0x1e958355, 0x4, 0x3, 0x70, 0x5, 0x401, 0x1, 0x1, 0x38, 0x8, 0x0, 0x1000, 0xfff, 0x5, 0xff, 0x0, 0x5, 0x6, 0x3, 0xf39d, 0x200, 0x7, 0x1ff, 0xf2, 0x3, 0x5, 0x0, 0x6, 0x5, 0x8, 0x8000, 0x5, 0x4, 0x7fffffff, 0x7, 0x1, 0xf616, 0x0, 0x3, 0xfffffff8, 0x58, 0x6, 0x1, 0x3, 0x2, 0xb, 0x100, 0x6, 0x10000, 0x7fffffff, 0xc, 0xffff8001, 0x8000, 0x0, 0x1, 0xffff8692, 0x1, 0x2, 0x2, 0x55, 0xf, 0xd3, 0x0, 0x3, 0x6, 0x81, 0x3, 0x100, 0x5, 0x1, 0xe, 0x3ff, 0x4, 0x5e5, 0x80, 0x2, 0x1f, 0x1, 0xb8d9, 0x7fff, 0xffffffff, 0x9e, 0x3, 0x3, 0x7, 0x7, 0x2, 0x6, 0x3, 0xa0f, 0xe, 0x0, 0xfff, 0x100, 0x7fff, 0x8, 0xffff8001, 0x3081, 0x1, 0x7ff, 0x100, 0x1, 0x672e518f, 0xb3, 0x8, 0x5, 0x6, 0x9, 0x2, 0x3, 0x10001, 0x7, 0x10, 0x4, 0xfffffffd, 0x9, 0xd7, 0x401, 0x8, 0x9, 0x7, 0x80, 0x9, 0x1, 0x5, 0x2, 0x6, 0x1000, 0x0, 0x6, 0x9, 0xc6, 0x4, 0x7, 0x3ff, 0x3ff, 0x7, 0x6, 0x2, 0x7ff, 0x40, 0x6, 0xffffffff, 0x1, 0x8, 0x1, 0x3, 0x2, 0x7, 0x6, 0xc5, 0x4, 0x8, 0x5, 0x5, 0x80000000, 0x3ff, 0x7, 0xfff, 0xfffffff7, 0x100, 0x8000, 0x49e, 0x6, 0x5, 0x2, 0x4, 0x0, 0x3, 0x40, 0xc, 0x6, 0x1, 0x5a, 0x7, 0x3, 0x188b44d3, 0xffffffff, 0x4, 0x80000001, 0x7fff, 0x4e03, 0x9, 0x9, 0x9, 0x5, 0x401, 0x13, 0x9, 0x4775, 0x675, 0xc9ac, 0xfc, 0xff, 0x400, 0x6, 0x4, 0x6, 0x5, 0x8, 0x2, 0xeb, 0x6, 0xffffffff, 0x5, 0x0, 0x10000, 0x7fc, 0x74, 0x5, 0x7, 0xec1, 0x6, 0x2, 0x5, 0xff, 0x5, 0x3, 0x7f, 0x40, 0x1, 0x7ff, 0x2, 0x0, 0x7, 0x3e, 0x3, 0x1000, 0x10001, 0x1, 0x9, 0x0, 0x1, 0x9, 0x7, 0x7, 0x6, 0x0, 0xfffffff9, 0x2, 0x6, 0x4, 0x3, 0xc8, 0x9, 0x4, 0x7, 0x7, 0x705e, 0x4, 0x0, 0x80, 0x9, 0xa57, 0x143f, 0x217, 0x81, 0x4, 0x1000, 0x80000001, 0x3ff, 0x9, 0x2, 0x3ff, 0xf, 0xffff4788, 0xbd6, 0x6d, 0x1, 0xfd, 0x4f4, 0x9, 0x7ff, 0x5, 0x1ff, 0xffff7fff, 0x6, 0x6, 0xfff, 0x41c7, 0x0, 0x8, 0x25, 0x2, 0x773e080b, 0x8, 0xff, 0x3, 0x4, 0x40, 0x100, 0xa, 0x4c5, 0x4, 0x0, 0x1e, 0x1, 0x1, 0x80, 0x10, 0x8, 0x9, 0x2, 0x7, 0x1, 0x9, 0x15455ea9, 0xa, 0x0, 0x0, 0x8, 0x800, 0x800, 0x7, 0x9, 0x1, 0x4, 0x81, 0x8000, 0x3, 0x7, 0x8000, 0x200, 0x81, 0x71, 0x2, 0x2, 0x2, 0x8, 0x70, 0x4, 0x7, 0x2000, 0x5, 0x3, 0x9, 0x5, 0x1, 0x71, 0x100, 0x2, 0xbca, 0x7, 0x2, 0x2, 0x7, 0x5, 0x5, 0x0, 0x81, 0xd, 0x4, 0xd, 0x7fff, 0x1, 0x80000001, 0x9, 0x8, 0x8, 0x8, 0x6, 0x3, 0x7, 0x867f1ee1, 0xfff, 0xd7, 0x80000000, 0x7, 0x2776, 0xfff, 0x4c7, 0xc, 0xf762, 0x3, 0x0, 0x8, 0x4, 0x8, 0x49, 0x10, 0x400, 0x2, 0x6, 0x800, 0x4, 0x8, 0x4, 0x5, 0x80000001, 0x8001, 0xa, 0x5, 0xc2c, 0xd61, 0x5, 0x2, 0x400, 0x80000001, 0x3, 0x3, 0x4cc3, 0x3, 0x2, 0x4, 0x9, 0x80, 0xa0f1, 0x7, 0x12e2ad79, 0x0, 0x0, 0x8, 0xc00000, 0xfffffff9, 0x4, 0x1ff, 0xf8, 0xe, 0x8, 0x18a4, 0x2, 0x9, 0xfff, 0x100, 0x800, 0x8000, 0x386, 0x0, 0xb, 0x1200, 0x800, 0x1f3e0000, 0x2, 0x1, 0x2, 0x9, 0x5, 0x0, 0xffffffff, 0x7, 0xa, 0x0, 0x9, 0x0, 0x9, 0x6, 0x401, 0x2, 0x7, 0x1, 0x1ff, 0x200, 0xf7, 0x8, 0x3, 0x8, 0x7, 0x9, 0x6, 0x9, 0x5, 0x401, 0x2, 0x7, 0x5, 0x7, 0xd, 0x4, 0x7, 0x7, 0x3, 0x6, 0xfffffff8, 0x9bd2, 0x5, 0x9, 0x3, 0x0, 0x6, 0xfffffff8, 0xb18e, 0x0, 0xb5b, 0x6, 0x9, 0x2, 0xa, 0x7f, 0x7, 0x400, 0xffff, 0x2, 0x80, 0x1, 0xff, 0xad8, 0x4, 0x91, 0x6, 0x1, 0x9fc, 0x2, 0x8000, 0x400, 0x6, 0xe, 0x2, 0x7, 0x0, 0x7733, 0x2, 0x929c454b, 0xe, 0x92, 0x69a7416, 0xc7b, 0x1000, 0xfffffffd, 0x3, 0xff, 0xffff, 0x100, 0x7, 0x2, 0x696ebbb1, 0x84, 0xe4, 0x4, 0xef, 0x85, 0x3, 0x7, 0x0, 0x7, 0x6, 0x800, 0x5, 0x6, 0x1, 0xe700, 0x0, 0x4, 0xdf3d, 0x4, 0x53, 0x5, 0x7, 0x7, 0x6, 0x1, 0x26ae, 0x7, 0x7ff, 0xba19, 0x8ea9, 0x3, 0x4, 0x8, 0x1, 0x8, 0x100, 0x5, 0x7ff, 0x5, 0xf, 0x8, 0x200, 0x6, 0x2, 0x6, 0x1ff, 0xffffffee, 0x6, 0x3, 0x7, 0x80, 0x5, 0x50, 0x47, 0x2, 0x8, 0xfffffffc, 0x40, 0x0, 0x81, 0x4, 0x9, 0xf, 0xfff, 0x3, 0xffffffbb, 0x2, 0xfff, 0x9, 0x10000, 0x1, 0x4bbe, 0x3, 0x4, 0x9, 0x9, 0x6, 0x6, 0x0, 0xe, 0x5, 0x9, 0x1, 0x101, 0x10001, 0x800, 0x8000, 0xb17, 0x2, 0x0, 0xb148, 0xb, 0x7ff, 0xfffffff9, 0xc, 0x8, 0x7, 0x0, 0x2, 0x272b, 0x7, 0x8, 0x81, 0x2, 0x2, 0xc566, 0x0, 0xfffffffa, 0x8, 0x10, 0x85, 0x1000, 0x5, 0xfffff000, 0x800, 0xf, 0x7, 0xba9, 0x9de5, 0x7ff, 0x2, 0x401, 0x6a72, 0x0, 0x5, 0x6, 0x9, 0x81, 0xa3c8, 0xfffff679, 0xf0, 0x4, 0x8, 0x5, 0x6, 0x3, 0x8, 0x8, 0xa, 0xfff, 0x3, 0x5, 0x7, 0x8a, 0x800, 0x5, 0x8, 0x6, 0x3, 0x1, 0x1, 0x7, 0x7ff, 0x8, 0x6c34, 0xc00, 0xc, 0xffffc048, 0x1, 0xfffffeff, 0x7, 0x0, 0xd7, 0x8, 0x7, 0x3, 0x6, 0x9, 0x7f, 0x7ff, 0x46bd, 0xb, 0x1e, 0x9, 0x159, 0x4, 0xb, 0x9, 0x2, 0x3, 0x1, 0xfff, 0x8, 0x9, 0x100, 0x1000, 0xfffffff8, 0xffff801d, 0x8, 0x8, 0x7, 0x6, 0x57, 0xce, 0xa, 0x946, 0x4, 0xfffffff7, 0x2, 0x9, 0xbc, 0x7, 0x4, 0x9, 0x4, 0x0, 0xd, 0x9, 0x0, 0x49, 0x17e2, 0x8001, 0x5, 0x6, 0x8, 0x10000, 0x7, 0xafc, 0x4, 0x7788, 0xa07, 0x52f0, 0x977e, 0x2, 0x1, 0x1, 0x3, 0x8, 0x9, 0x61a, 0x1, 0x7, 0x6, 0xe, 0x7, 0x6, 0xffffffff, 0x4, 0x1a, 0x7f, 0x1, 0x9, 0x3ff, 0xcd, 0x3, 0xe0, 0x6fe2, 0xcc3, 0xc, 0x4, 0x2, 0xfff, 0x7, 0x4240, 0xd, 0x0, 0x1, 0x4, 0x1, 0x3ff, 0x6, 0x6, 0x7, 0x7, 0x9b, 0x0, 0x81, 0xffff, 0xc54d, 0xff, 0x3, 0x8, 0x6, 0x80000000, 0x389, 0x36f8, 0x3, 0x2e, 0x2, 0xffffffff, 0x125f598a, 0x4, 0xb, 0x1, 0x100, 0x7fff, 0x6, 0x4, 0x6, 0x2, 0xfffff371, 0x5, 0x5, 0x3, 0x7, 0x4, 0x3, 0x4, 0x1, 0x1, 0x4, 0x4, 0xe, 0xfffffff8, 0x0, 0xad47, 0x1, 0x2, 0x4f, 0x2, 0x7ff, 0xd, 0x8, 0x5, 0xa, 0xffffff54, 0x6, 0xa, 0x6, 0xc, 0x2, 0x887d, 0x6, 0x0, 0x40, 0x8001, 0x9dd, 0x63, 0x3, 0x0, 0x2, 0x5, 0x80, 0x3, 0x100, 0x0, 0x3, 0xfffffffd, 0x2, 0x3, 0x1, 0x1ff, 0xc493, 0x1, 0xf3, 0x2, 0x2, 0x2, 0x484cc398, 0x4, 0x6, 0xba7c, 0x7, 0x1fb, 0x3, 0x9, 0x1, 0x7fff, 0x6, 0x5, 0x81, 0x5, 0x9, 0x2, 0x9, 0xba, 0x9, 0x7, 0xb45, 0x3, 0xa, 0xff1, 0x2, 0x6, 0xfff, 0xb, 0xe, 0x7, 0x4, 0x3, 0x5, 0xe05, 0x9, 0xffffffff, 0x48000, 0x5, 0x0, 0x9, 0x4, 0x4, 0x1a1ef86a, 0x3, 0x3, 0x101, 0xffffffff, 0x3, 0x9, 0x7, 0x4, 0x9, 0x4, 0x7, 0x2, 0x4, 0x400, 0x3ff, 0x2, 0xe, 0xd093, 0x8, 0x1, 0x5, 0x7, 0x8000, 0x7, 0x0, 0x5, 0x8, 0x424c, 0x1, 0xe1a8, 0x5, 0x2, 0xa9, 0x6, 0x5566, 0x2, 0x0, 0x2, 0x3ff, 0x8, 0x7, 0x7ff, 0xab0, 0x1000, 0x7f, 0x2, 0xcc, 0x8, 0x5, 0x6, 0x4, 0x9, 0xfffffffd, 0x2, 0x401, 0x3, 0x7fff, 0x4c, 0x8, 0x1, 0xd7, 0x81, 0x7, 0x0, 0x5, 0x4, 0x838e, 0x1, 0x1ff, 0x10001, 0xffff3017, 0x5, 0x9, 0x27, 0x155, 0xcfce, 0x10001, 0x400, 0x98, 0x7, 0x4649, 0x9, 0x8, 0x7ff, 0x0, 0xec2, 0x8a4, 0x1, 0x10, 0x7, 0x80, 0xffff, 0xffff4721, 0x8, 0x3, 0x2, 0x5, 0x2, 0xe3, 0x4, 0x1000, 0x5, 0x1, 0xfffffff8, 0x0, 0x7, 0x6157, 0x3, 0x9, 0x80000000, 0x401, 0x1000, 0xffffffff, 0x9, 0x80000001, 0x7a, 0xffff, 0x8, 0x9, 0x9, 0xffffff83, 0x4a0, 0x1ff, 0xaa61, 0x10001, 0x81, 0x10000, 0x8, 0x0, 0x1ff, 0xb, 0x8, 0x7f, 0x8, 0x1, 0xc0, 0x5, 0x6, 0xc, 0x10, 0x1, 0x800, 0x8, 0xffffffff, 0x1, 0x5, 0x9, 0xf, 0x4, 0x200, 0x8001, 0x3, 0x9e, 0x4, 0x64c0, 0x7b, 0x6, 0x800, 0x0, 0x5d, 0x10000, 0xf, 0x6, 0x8, 0x0, 0xfffffff3, 0x99, 0x0, 0x4, 0x6, 0x9, 0x1fe, 0x2, 0x2, 0xff, 0x101000, 0x4, 0xfffffff8, 0xffffffff, 0x7ff, 0x80000001, 0x3, 0x2, 0x80000001, 0x8001, 0x4, 0x2, 0x40, 0x9, 0x72c, 0x9, 0xd3, 0x6e3, 0x0, 0x9, 0x2, 0x1, 0x7b0afc83, 0x4, 0x5, 0x1, 0x6, 0x0, 0x3, 0x400, 0x8, 0x8, 0x6, 0x3, 0x3, 0x6, 0x6, 0xb, 0x9, 0x0, 0x1bc1, 0xfffeffff, 0x28ed, 0x6, 0x40, 0x589, 0x7ff, 0x6, 0x536, 0xe, 0x2, 0x5, 0xb48, 0x6, 0x4, 0xfff, 0x1, 0x6, 0x0, 0x8, 0x9, 0x4, 0x6, 0x3, 0x51, 0x81, 0x3, 0x5, 0x7, 0x4, 0x8, 0x6, 0x5, 0x0, 0x3, 0x2, 0x2, 0xf, 0xfffffffe, 0x0, 0x4df, 0x3e, 0xfffff7cf, 0x3, 0x9, 0x1be, 0x6, 0x0, 0x7, 0x5, 0x6, 0x9, 0x0, 0x2, 0x200, 0x897, 0x0, 0x3, 0x4, 0x4, 0x7, 0x9a, 0x0, 0x1, 0x53, 0x7, 0x7, 0x9, 0x8, 0xffffffff, 0x10001, 0x3, 0x4, 0x1, 0x2, 0x3, 0x7, 0x101, 0x2d7, 0x0, 0x3, 0x5d, 0xdd000000, 0x6, 0x7, 0x3, 0xfffffffd, 0x200, 0xffffffd5, 0x1, 0x5dcb, 0xd, 0x40, 0xfffff001, 0x2, 0x3, 0x9, 0x4, 0x0, 0x5, 0x2, 0x1, 0x6, 0x2, 0xfffffe00, 0x8, 0x7fff, 0x400, 0xfffffff6, 0x81, 0xc75d, 0x1ff, 0xff1, 0x1, 0x0, 0x7ff, 0x55, 0x7, 0x8, 0x0, 0x8, 0x5, 0x7fffffff, 0x2, 0x0, 0x8, 0x3, 0xfff, 0x7, 0x5, 0x9, 0x6, 0xfffffffe, 0x4, 0x1000, 0x1, 0x0, 0x31, 0x3, 0x2, 0x1000, 0x9382, 0x6, 0x9, 0x4, 0x28ac, 0x7f, 0x654, 0x3, 0xd15, 0x3, 0xfffffff7, 0x9, 0x3, 0x7, 0x3, 0x0, 0xffffff80, 0x81, 0xfffffffa, 0x3, 0x0, 0x1000, 0x5, 0x66, 0x4, 0x3, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x800, 0xfffff8a5, 0x0, 0xb04, 0xc5, 0x3, 0x4, 0x80, 0x2, 0xc, 0x964, 0xc3, 0x2, 0x8, 0x8, 0x8a2, 0x9, 0x2, 0x3, 0x2, 0x10001, 0x9, 0x6, 0x5, 0xffffffff, 0x7b, 0x2, 0x5, 0x2, 0x7, 0x8, 0x400, 0x5, 0x6, 0x0, 0x3e1c, 0x10000, 0x8, 0x4, 0x8, 0x4, 0xcb, 0x7d, 0xf, 0x6, 0x5, 0x4, 0x1, 0x5, 0x7, 0x9, 0x4c9c63c2, 0x62c3, 0xffff, 0x8165, 0x7, 0x8, 0x6ac, 0xb, 0xffffffff, 0x5, 0xffffff48, 0x0, 0x9, 0x2, 0x2, 0x2, 0x2, 0x5, 0x5df, 0x5, 0xffff, 0x2, 0x6, 0x6, 0x5, 0x5, 0x2, 0x6, 0x8, 0x0, 0x81, 0x8, 0x6, 0x800, 0x200, 0x7, 0xe00, 0x6, 0x400, 0xc5, 0x7fffffff, 0x1, 0x1ff, 0x1, 0x3, 0x5, 0xe789, 0xfff, 0x2, 0x8, 0x5, 0x0, 0x7, 0x5, 0x4, 0x7, 0x2, 0x2bf1f28b, 0x9, 0x7, 0x9, 0x0, 0x6, 0xff, 0xcb88, 0x19b, 0x0, 0x6b13aaa7, 0x9, 0x3, 0x5, 0xe, 0x331, 0xfffffff5, 0x0, 0x7, 0x7, 0x6, 0x4, 0x8, 0x9, 0xffffb05d, 0x3, 0xfffffffe, 0x10, 0x9, 0x100, 0x7fffffff, 0x8000, 0x38000000, 0xd2, 0x1, 0x200, 0x5, 0x7, 0x6a8f, 0x7ff, 0xb, 0x8, 0x7, 0xc, 0x1, 0x7, 0xf8, 0xa5, 0x5, 0x2, 0x1f09, 0x7fffffff, 0x2, 0x6, 0x3, 0x3fe2, 0x98a, 0x100, 0x0, 0x733, 0x10, 0xc331, 0x5a, 0x10000, 0x7, 0x3, 0x8, 0x3, 0x6, 0x0, 0x4, 0x0, 0x4, 0xff, 0xfffffffc, 0x5, 0xa1, 0x3, 0xffe0000, 0x9, 0x5, 0x1, 0x6, 0x85, 0x5, 0x3, 0x3, 0x8, 0xfffff5c0, 0x28, 0x2a000000, 0xb8, 0x31, 0x6, 0x1, 0xf8, 0x59, 0x798e6232, 0x1, 0xff, 0x6, 0x80, 0x2, 0xfffffff9, 0x8, 0x4212, 0x101, 0x401, 0x240, 0xf474, 0x10, 0xfffffffd, 0x1, 0xf9f, 0x0, 0xe04c, 0xa, 0x3, 0x5e, 0x8, 0xef, 0x9, 0x4, 0xfff, 0x7, 0xd, 0x4, 0x6, 0x6, 0x1000, 0xfffffffa, 0x6e1, 0x5, 0x200, 0xffffffff, 0x2, 0xac3b, 0x3, 0x8000, 0x40, 0x200, 0x5, 0x1000, 0x0, 0xc89, 0x2ef61383, 0xaeae, 0xf2, 0x8, 0x3, 0x400, 0x1, 0x100, 0x71fa, 0xfffffffb, 0x2, 0x10000, 0x1, 0x8001, 0x40, 0xd, 0x100, 0xffffff2e, 0x1, 0x5, 0x1, 0x9, 0x747, 0x4, 0x80000000, 0xe, 0x0, 0x3, 0xffffffff, 0x1000, 0x80, 0x1, 0x7, 0x1, 0x4a, 0xd4d, 0x4, 0x0, 0x7, 0x10000, 0x8f, 0xfffffff8, 0x9, 0x6, 0xffffff01, 0x8, 0x1, 0xfff, 0x8, 0x5, 0xf, 0x4, 0x7, 0x5, 0xffffffff, 0x5c6, 0x1, 0xdc5, 0x6, 0x3, 0x0, 0xc3, 0x1, 0x3, 0xf0, 0x6, 0x4, 0x6, 0x7, 0x5, 0x4, 0x3, 0x5, 0x3ff, 0x4, 0x10001, 0xe90, 0x3, 0x10001, 0x2, 0x9, 0x7, 0x6, 0x8, 0x0, 0xff, 0x1, 0xa5, 0x2, 0x7, 0x9, 0x2, 0x6, 0xee, 0xffff, 0x86e, 0x3ff, 0x2, 0x10001, 0x2, 0xb6, 0x0, 0x9, 0x5, 0x5, 0x7b50, 0x10, 0x10000, 0x8, 0x2, 0x4, 0xe0cab51, 0x7, 0x7, 0x4, 0x0, 0xe, 0xe, 0x5, 0x10, 0x8, 0x9, 0x1, 0x2d90, 0xc, 0xaa7, 0x2, 0x4, 0xfffffffd, 0x4, 0x4, 0x3, 0xfffffc00, 0x99be, 0x7fffffff, 0x2, 0xa, 0x5, 0xfffffffd, 0x7ff, 0x6, 0x7ff, 0x1, 0xffff, 0x6, 0x8, 0x4, 0x8, 0x5, 0xc, 0x2, 0x3, 0x8, 0x401, 0x0, 0x7f, 0x3, 0x80000000, 0xe, 0x9, 0x5, 0x7, 0x3ff, 0x3, 0x2, 0x3, 0xb7fd, 0x100, 0x3ff, 0x49, 0xb7, 0xe104, 0xfffffff8, 0x9, 0xffffffff, 0x9, 0x6e4e, 0xd, 0x7fff, 0xfffffffc, 0x6, 0x80000001, 0x7, 0x7, 0x80000000, 0xffffffff, 0x81, 0x0, 0x1000, 0x1, 0x7, 0x5, 0x7, 0x3, 0x6, 0x9, 0x38000000, 0x6, 0x8, 0x7ff, 0x7, 0xa35a, 0x9, 0x6, 0x7, 0x8001, 0x2, 0x0, 0x1, 0xfff, 0x81, 0x9, 0x7f, 0xccc, 0x1489, 0x5bb291bd, 0x1, 0xc, 0x80000001, 0x7, 0x9a51, 0x7, 0xcb, 0x1, 0x10, 0x8, 0x174, 0x0, 0x7, 0x1, 0x5, 0x2, 0x7ffe6a4c, 0x7, 0xa2a, 0x910, 0x100, 0x3, 0x5, 0x9, 0x7, 0x5, 0x2, 0xf, 0x9, 0x9, 0x5, 0x7, 0x7fff, 0x6, 0x7fff, 0x5, 0x10000, 0x81, 0x8, 0x1, 0x1e, 0xd3, 0x5, 0x9, 0x9, 0x708, 0x9, 0x6, 0x10, 0x7f, 0xd, 0x3, 0x2, 0xb, 0x6, 0x5, 0x8, 0x3, 0x6, 0x2, 0x7, 0x2, 0x80000000, 0x106, 0x2, 0xb3, 0xd, 0x4, 0x5, 0x5, 0x4, 0x0, 0x3ff, 0x4, 0x5, 0xffff, 0x10000, 0xfffffff8, 0x3, 0x8, 0xffffffff, 0x1, 0xc7ba, 0x26, 0x9, 0x3c, 0x80000001, 0x5, 0xf, 0x6, 0xf5, 0x1, 0x40000000, 0x6, 0xc00, 0x8, 0x4, 0xffffffff, 0x7f, 0x0, 0x9, 0x80000001, 0x81, 0x7, 0x1000, 0x10001, 0x6, 0x8001, 0x623, 0x6, 0x200, 0x5, 0x10001, 0x7, 0xc, 0x1000, 0x7fffffff, 0x7fffffff, 0xfffffc01, 0x3, 0x3, 0x8, 0x8001, 0xbb9, 0x7f, 0x9, 0x401, 0x9, 0x0, 0x10, 0x3, 0x0, 0x400, 0x80000000, 0x6, 0x6, 0xfffffffe, 0xb, 0x0, 0x9, 0xffff7fff, 0x5, 0x2, 0xf, 0x2, 0xffff, 0x3d5, 0x6, 0xd, 0x7, 0x9, 0x5, 0x5b80, 0x1000, 0x9, 0x5, 0x7fff, 0xbac8, 0x5, 0x5, 0x4a3, 0x7, 0xdd8, 0xe85, 0x1000, 0x5, 0xe98b, 0x40, 0x80000000, 0x2, 0x4, 0x7, 0x1, 0x1ff, 0x18, 0x1b, 0x5, 0x0, 0x4, 0x4, 0x3ff, 0x3, 0x3, 0x6, 0x9181, 0x200, 0x8, 0x0, 0x4e, 0xd, 0x7fffffff, 0x11cbfc30, 0x3, 0x9, 0xa87c, 0xc1b9, 0x8, 0xd, 0xfe, 0x7, 0x8000, 0xc80d, 0x400, 0x94, 0x3, 0x8, 0x0, 0x7, 0x8, 0x4, 0x6, 0x7, 0x5, 0x6, 0x0, 0xe, 0x0, 0x5, 0x6, 0xe9c, 0x1, 0x10, 0x1, 0x7, 0x3, 0x401, 0x7b, 0x3, 0xfffffffe, 0xfffffff8, 0xc, 0x1, 0x7ff, 0x3ff, 0x74df, 0xfff, 0x4, 0x4, 0x5, 0xd33, 0x0, 0x5, 0x7, 0xbe, 0x20, 0x9, 0x0, 0x7, 0x7, 0xfb, 0x3, 0x5, 0x2, 0x1, 0x4, 0x6, 0xfff, 0x2, 0x50, 0x3, 0x3, 0x7fff, 0x6, 0x6, 0x6, 0xdf6f, 0x3, 0x4, 0x7, 0x80000000, 0x3, 0x7, 0x18, 0x80, 0xfffffffb, 0x10001, 0x8000, 0x5, 0x9, 0xcc, 0x0, 0xb, 0x4, 0x8, 0x5, 0x8, 0x4d0, 0x9, 0x2, 0xc64, 0x8, 0x2, 0x5a9, 0xc1, 0x52, 0x4, 0xcf, 0xe, 0x374, 0x6, 0x1, 0x4a01, 0x8, 0xfffffa54, 0x7, 0x4ab3, 0x7f, 0x1, 0x9, 0x6, 0x8d7b, 0x8, 0x8, 0x7, 0x9, 0x8, 0x5, 0x8, 0xc, 0x2, 0x2c, 0x3, 0x3, 0xb2, 0x4, 0xb55, 0x3, 0x4, 0x1, 0x2, 0x0, 0x7fff, 0x80000001, 0x1, 0x968, 0x2, 0x9, 0x10, 0xd80, 0x0, 0xce, 0x9, 0xfffffffc, 0x8, 0x2, 0x6c1, 0xb, 0x6, 0x8, 0x9, 0xfffffff8, 0x1000, 0x7ff, 0x6, 0xfffff6f9, 0x0, 0xba3ba200, 0x5, 0x8001, 0x9, 0x3a1, 0x8, 0x2, 0x0, 0x9, 0x0, 0x3, 0x7ff, 0x0, 0x800, 0x1, 0x3, 0xffffffff, 0x800, 0x4, 0xe3, 0x2, 0x66, 0x1, 0x8000, 0x0, 0x8, 0x9, 0x4, 0x6, 0xfff, 0x7ff, 0x4, 0x7, 0x0, 0x81, 0x5, 0x5, 0x626, 0xe31, 0x1, 0x2c, 0x200, 0x7, 0x0, 0x8, 0x1, 0x2, 0xc2, 0x8, 0x1, 0x5, 0x6, 0x8, 0x7, 0x8, 0x401, 0x4, 0x4, 0x2, 0x1, 0xe7, 0x8, 0x2ea1, 0x3, 0xff, 0x0, 0x92, 0x7fff, 0x1, 0x7, 0x6, 0x2, 0xb, 0x3, 0x8, 0x3, 0x80000001, 0x7, 0x4, 0x9, 0xfffff151, 0x1, 0xfff, 0xf, 0x9, 0x53, 0x9, 0x3, 0x1, 0xa, 0x8, 0x9, 0x8000, 0x8b, 0xf4, 0x8001, 0x100, 0x1, 0x8, 0x101, 0x9, 0x5, 0xb, 0x5, 0x0, 0x1, 0x9, 0x100, 0x8df5, 0x4bb6, 0x2aaf, 0x1ff, 0x3, 0x47, 0x1000, 0x9, 0x9, 0x4507751f, 0x1, 0x9, 0x1, 0x1, 0x3ff, 0x37, 0x3cb, 0xfffffffe, 0x543, 0x5, 0x5c55, 0x7, 0x2f, 0x5, 0x2, 0x5, 0x583d, 0x7, 0x4000, 0x5, 0x8, 0x4, 0x1, 0x31d0, 0x1, 0x7, 0x6, 0x9, 0x5d6a, 0x10, 0xc0, 0x100, 0x2, 0x7, 0x40, 0xc5, 0x9, 0x401, 0x4, 0x0, 0xcdb3, 0x2, 0x9, 0xffff, 0xf47d, 0x7, 0xac, 0x8c, 0xffffffff, 0xfffffaa5, 0x8, 0x80, 0x49cc, 0x4, 0x7, 0xc, 0x3ff, 0x4, 0x2, 0x800, 0x69, 0x40, 0x7, 0x1, 0xc, 0x6, 0x1, 0x2db, 0x8, 0x10001, 0x9, 0x0, 0x800, 0x2, 0x1, 0x80000000, 0x7fffffff, 0x6, 0x5, 0x2000000, 0x6, 0xf, 0x34c, 0xfff, 0x2, 0x543, 0x8, 0x6, 0x39c, 0xffffff5c, 0x63, 0x2, 0x5, 0x4, 0x1, 0x6, 0x6, 0x9, 0x7, 0x4, 0x1901, 0xfffff6b0, 0x8, 0x3f, 0x229, 0x0, 0x9c2, 0x3, 0x1, 0x2, 0x7, 0x2, 0x4, 0x8000, 0x7, 0x2, 0xac3, 0x81, 0x512, 0x6, 0x2, 0x401, 0x8, 0x5, 0x58826a6e, 0x400, 0x80, 0x8, 0xd, 0x8, 0x1, 0x4, 0x63, 0x1, 0x5, 0x8, 0xf, 0x3d, 0x679ea520, 0x1000, 0x5, 0x2, 0x9, 0x1ff, 0x3ff, 0x3, 0x5, 0x7, 0x400, 0xffff, 0x101, 0xbf1, 0x40, 0x8001, 0x76, 0x6, 0x5, 0xb, 0x2, 0x586, 0x3ff, 0x3b, 0x0, 0xf7400, 0x4, 0x8, 0x0, 0x6, 0x6, 0x401, 0x480000, 0x7fff, 0x101, 0x1, 0x9882, 0x5, 0x4, 0x1, 0xba3, 0x1, 0x36, 0x242b270d, 0xc5, 0x1, 0x9, 0x0, 0x8000, 0x1, 0xfffffffd, 0x8, 0x229, 0x7, 0x4, 0x1ca6, 0xf, 0xdb, 0x6, 0x0, 0xbf9, 0xfffffffa, 0x7fffffff, 0x10, 0xd6, 0x80000001, 0x89, 0x2, 0x7fffffff, 0x7, 0x5, 0x5, 0x0, 0x2, 0x3, 0x49a5, 0xffffffff, 0x6, 0x3f80, 0x75, 0x0, 0x3, 0x5, 0x7d, 0x8000, 0x8, 0x10000, 0x2, 0x2, 0xfffffffd, 0xffffffff, 0x0, 0x5, 0xf7f5, 0x5, 0xe6, 0x500000, 0xf936, 0xfffffffe, 0x7, 0x35a4, 0x2, 0x4, 0x7, 0x7, 0xfffffffe, 0xfffffbff, 0xce, 0x6, 0xd80, 0x4da, 0x7, 0x0, 0x6, 0x1, 0x8000, 0x8, 0x4, 0x0, 0x401, 0x71, 0xfba, 0x100, 0x401, 0x5, 0x3, 0x1, 0x7, 0x3, 0x1, 0x3, 0x8, 0x8, 0x8, 0x101, 0x40, 0x2, 0x2, 0x0, 0x200, 0x0, 0x3, 0x72, 0x5, 0x6, 0x1d, 0x48, 0x3, 0x40, 0xe, 0x5ce095b7, 0xb0, 0x0, 0x10, 0x1, 0x1ff, 0x10, 0x0, 0x90, 0x7, 0x9, 0x7, 0x7, 0xe0, 0x1, 0x0, 0x8, 0x80000001, 0x7ff, 0xbf, 0x1000, 0x2, 0x791c4f92, 0x80000000, 0x2, 0x5, 0x80000000, 0x0, 0x9, 0x9, 0x8, 0x8, 0x0, 0x7, 0xe8, 0x1, 0x0, 0x5, 0x8001, 0x0, 0xaae0, 0x4, 0x38d8, 0x6, 0x999, 0x10001, 0xccc, 0x7, 0xf, 0x4, 0x5, 0x7f, 0x129, 0x3], 0x0, 0x2}]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) 6m45.032304733s ago: executing program 7 (id=6098): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea443000905", @ANYRES64], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x7, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x20000000}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x8c}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r4) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x30, r5, 0x831b97362602f4f3, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x20000090) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4b}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1229}]}, 0x30}}, 0x800) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r6, r3, &(0x7f00000000c0)=0x8b, 0x3fffff) syz_io_uring_setup(0x7d1a, &(0x7f0000000700)={0x0, 0x100577, 0x2, 0x3, 0x42}, 0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x7fe4d2ddf000, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x50}, 0x94) 6m42.363273714s ago: executing program 7 (id=6105): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) read$FUSE(r1, &(0x7f0000000900)={0x2020}, 0xfffffffffffffff0) close(0x3) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES64=r2, @ANYRES64=r1, @ANYRES64=r2], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000080)={0x14}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16=r6], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000a3013528e0c3"], 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 6m38.24066732s ago: executing program 7 (id=6119): unshare(0x40400) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) ioperm(0x0, 0x2, 0x80) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}], 0x1, 0x40045) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) getxattr(0x0, &(0x7f0000005180)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000004c0)=0x5, 0x4) 6m37.962219065s ago: executing program 7 (id=6121): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14042bfdeffc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (fail_nth: 2) 6m37.678066843s ago: executing program 7 (id=6123): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) keyctl$join(0x7ffffffe, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1, 0x34) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x2}}, @var={0x8, 0x0, 0x0, 0xe, 0x5, 0x1}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0xb, 0x3}, {0x9, 0x4}, {0xb}, {0xa, 0x2}, {0x8, 0x1}]}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/184, 0x7f, 0xb8, 0x1, 0x7, 0x10000, @value=r2}, 0x28) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x3ff, '\x00', 0x0, r4, 0x2, 0x4, 0x1}, 0x50) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x1c, 0x80, 0x1a00, 0xf7, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0xfffffffb}, 0x50) syz_emit_ethernet(0x227, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r9 = socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000100)='tunl0\x00') fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) keyctl$join(0x7ffffffe, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1, 0x34) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x2}}, @var={0x8, 0x0, 0x0, 0xe, 0x5, 0x1}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0xb, 0x3}, {0x9, 0x4}, {0xb}, {0xa, 0x2}, {0x8, 0x1}]}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/184, 0x7f, 0xb8, 0x1, 0x7, 0x10000, @value=r2}, 0x28) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x3ff, '\x00', 0x0, r4, 0x2, 0x4, 0x1}, 0x50) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x1c, 0x80, 0x1a00, 0xf7, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0xfffffffb}, 0x50) syz_emit_ethernet(0x227, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r9 = socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000100)='tunl0\x00') fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000004c0)=0x59, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x5}, 0x1c, &(0x7f0000000480)}}], 0x1, 0xc010) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x3ff}, &(0x7f0000000300)=0x8) 3m18.186961224s ago: executing program 5 (id=6868): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m17.917020337s ago: executing program 5 (id=6871): r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000021c0)='devtmpfs\x00', 0x22008d0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='D', 0x1}], 0x1}, 0x4048841) recvmsg(r6, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000047c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x138, 0x208, 0x138, 0x138, 0x138, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xffffffff, 0x1, @ipv4=@broadcast, 0x4e23}}}, {{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, [0x0, 0xffffff00, 0xff000000], [0x0, 0xffffff00, 0x0, 0xff], 'veth0_vlan\x00', 'virt_wifi0\x00', {0xff}, {}, 0x3c, 0x7, 0x2, 0x27}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x9, 0xe}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@remote, 0xa, 0x5, 0x8}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xff, 0xffffffff, 0xffffffff, 0xffffff00], [0xff000000, 0xffffffff, 0xff, 0xff], 'dvmrp0\x00', 'netpci0\x00', {0xff}, {}, 0x89, 0x7, 0x0, 0x41}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @empty, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xffffffff, 0xffffff00, 0xff], 'tunl0\x00', 'wg0\x00', {0xff}, {}, 0x33, 0x7, 0x3, 0x10}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x8, 0x10}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xf8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7b}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfd}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2c8d0}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') ioctl$EVIOCSFF(r10, 0x40304580, &(0x7f0000000b40)={0x0, 0x9, 0xff80, {0x1, 0x1}, {0x62, 0x4}, @cond=[{0x9, 0xf000, 0x7, 0x8, 0x1, 0x7ff}, {0x7, 0x9, 0x4, 0x5, 0x6fe, 0x9}]}) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)}, 0x0) read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x5ecfb203) socket$nl_route(0x10, 0x3, 0x0) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) write$smackfs_netlabel(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="30303030303030303030303030303036353533352e30303030303030303030303030303036353533362e30303030303030303030303030303030303030342e30303030303030303030303030362e202f7379732f62732f736d61636b66732f6e65746c6162656c00008b073d5ec7fde6315d8bf098612a17e09db4c02fd459375e00f3a8c03a62e2871e759e9d463a9d3ee034fc309d838cf01ae510d44f1a0a2e86e5222a71050d48a1dc70ac9d6f267584d56e4917c1622f730ab5cb9f19b197815e32dc4b5bf79429dff8cb00c61c7705fbf3e70d"], 0x6f) 3m15.787685402s ago: executing program 5 (id=6883): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xc8000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000050000000200000004"], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x20000c4}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x12, 0x0, 0x5, 0x3, 0x0, {0x7}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f00000003c0)={{0x89, @rand_addr=0x1, 0xdffd, 0x2, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x0, 0x2000040}}, 0x44) ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000)) 2m59.269487977s ago: executing program 36 (id=6883): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xc8000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000050000000200000004"], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x20000c4}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x12, 0x0, 0x5, 0x3, 0x0, {0x7}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f00000003c0)={{0x89, @rand_addr=0x1, 0xdffd, 0x2, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x0, 0x2000040}}, 0x44) ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000)) 57.762068232s ago: executing program 0 (id=7501): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x87, 0x35, 0x80, 0x8, 0x7c4, 0xa001, 0x92c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7f, 0x40, 0x9, "", [{{0x9, 0x4, 0xcf, 0xf7, 0x0, 0x36, 0x40, 0xa8, 0x14}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x4, 0x1}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r1, &(0x7f0000000100)) unshare(0x40600) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x111ffe) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='limits\x00') sendmmsg$alg(r2, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 54.565831498s ago: executing program 0 (id=7512): syz_usb_connect$uac2(0x2, 0x87, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010200000020b4041d00000080020301090275000301741f1fecd886ecde27a009080b010201062006090400000001012000092401f2de0a1500050c2403050603030305070002200009050109000206d7080825010206060100090402000001022000090402010101022000090582090002d70e040825018130060500"], &(0x7f0000000500)={0x0, 0x0, 0x50, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x7f6e}, 0x18, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000980)={0x14, &(0x7f0000000540)={0x20, 0x0, 0xed, {0xed, 0xa, "01c725bbbd7e89e1ac3bd95493dac01db257c51210946012e2ad7c5e2d67278e54903880be9de1ac9d4001fc761ddcddefe2e7b9f6e82df62fb006ffe5dec1f6336ddbbfaac8ff57fbbdaa8105d573cad57bc69e6059beb3e665bc33aaf0691b1f539297fbb011707ec44da945b1af619701b5bbe8e8a7d034fc5a914e16516d9a61e1d4f7d1480ecad2e570816369190e72147fddf1841dfa377db3d8e8814e16ba13b705e7e4a8872a2d5d701e1df2c02ba533d2dc99add1fd5e08c4d6354d758364aa71166e6af9cbc6929a7b07720ccf3cdef80790b904249b8580244469c314e5cf0de570e5ec8d11"}}, &(0x7f0000000880)={0x0, 0x3, 0xe5, @string={0xe5, 0x3, "ca1089e80d4300462d9474601fba3ca4ec7e2595bd2b967aa2ab17afac82a950a3ac78dbd718ea7cbbde91196206f02bdd570131bc5e81ac12f8afe125a24d37761bea62db5d1ae7315e88b1c4bac61c5bb2be9159de15f0cae347e679cb035864fd402ec440e59cd53a69a76151389cb768bb918ef98cf9b98a99c302bbf6af2847d58a8cf0597ad7e1ae95e5ba6e1d0e169b00cea47c9d8c70bee4a0f6378dddcd8aca457e7d69688e6710dc2fed32abd7bf215d3477e510912fe4f78909590e5a8b1bd320a852d3041cb309cc9c2871594381c6f1ba41c5483b4bd02d21cb435daa"}}}, &(0x7f0000000c80)={0x44, &(0x7f00000009c0)={0x0, 0x17, 0xea, "f1aa1788637142b4c84c831df6da9078ec9da89374b55360dd31889b6a9872396ad36045d31c183534ad8f72cd3ce13da22e6f39cb1517a973ab612cb264cbab070192bede03693e76b26d09f1bb3e916f56af9183beb3ef0e342059489d49ca0f93bba150c5b4d102f884657d3f8c865dc71413e38deda10cfc7cae0100c5041f89b9fdad4d2192d8ae8efc81216eebf47c7bcb25ee0b6ea736e9c72a2a4a4a3f60c794276e9df7bbd9de25b2c2975efff6d091e8fb9bab4d9370a3c262ed6bfbb98d349245d67827120f6ce64ffac2ae71751f7a1be75d4bccc4dad461a529ada1f187cce491261720"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xb9}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000b40)={0x20, 0x81, 0x3, "219abb"}, &(0x7f0000000b80)={0x20, 0x82, 0x1, "cd"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "0a2588"}, &(0x7f0000000c00)={0x20, 0x84, 0x4, "2e0529f5"}, &(0x7f0000000c40)={0x20, 0x85, 0x3, "ec46ff"}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000380)={0x300a, r0}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mq_timedsend(0xffffffffffffffff, 0x0, 0xff7f, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) landlock_restrict_self(r1, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730133000000000095000000000000006dd49ce32174533466dea5d576455601e2fb1b5f31e4419a986250033107fbd0a73eb80c10a24968f8126dd26538975e8b2d8755d6dec5bb047740716c1457a324f349bc95093f3982cbb72b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 22.617509089s ago: executing program 8 (id=7590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = accept(r3, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r4, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x3f8}, 0x1, 0x0, 0x0, 0x40800}, 0x4000040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000300)={0x1, {{0xa, 0x4e24, 0x7f, @local, 0xff}}}, 0x88) bind$x25(r5, &(0x7f0000000080), 0x12) close(r3) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x800) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 21.342834436s ago: executing program 8 (id=7593): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) socket(0x1a, 0x4, 0xffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f00000021c0)=@vmx={0x0, 0x0, 0x2080, {0x58000, 0xffff1000, {0x2}, 0x1, 0x3769}, {"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", "d0a1be09b2e4e8ddc3be4df62e79ae39a2c52bf00b91b856a83e8d3f4f955fe4e0f63159e08a6f2a8b46f3e66e0b25b5a98f41e8a7e5f9ffee3d9103866829f1e2a5286a6b009ded2f62c5c956216ab2b517836df321ed4cc4423e2ab66be00ae56ada57a6eac065788df113e8e9405588e96078d8a3db450727485f6926dd46a9178a9e042c0a12ae6dfc66302d3eb3200e645009e614a46b83811da86df6eb2a9fa27077807e024b0a28769f22ad491782cbb24da1491560a44311c8dd8876bc609e4e502307ed115f7fd1866d872e400caa4c19ba47bb8b617e3daf580a83ba4dd98b87c2133ecc65ef356c08bcdfd2b9ea69f7d22b8506a1c20b5028eddd471fe79bc0c040a10589de6610f8592a6921155696c1024ecd1b63a04c08f922446262cf7c2a0d9b340205952f2bef39e2a09348ad78daad5ab3e2de23d81518f98f4d7437a722c4d3dc0da8bc84d31ea37028b1473abf5b5b0a7cb7c997ad80dc66f0ce2eb27983d77b85c7c03b706c8df5043a525dac9f8046b1978e500f55af7c6c487fc4a3c777ebe4d706fd70da2301ee3487074f3bceca6ecc3c365a2b6969df0d87709dc10558a002d6bfbc58f70b512655b2251d137800377bfb4e6703600946458a77c0942aefbb74ed24b78dd92ec1aa4cb696ffefbec846145637ae4ab44e0a6904c4094ce3ffc9deaece5f62da5d204627b1708eeaec69dbd01fc7b3ad00ef0a61411167baa77f54b19b0398a3570b28e5b77ac38e27e2e765820f576deac46a1c6217f28e4124d70ad668cfb06201d6e71d17e878b9f43dcba4ed03b7ce11ecd41a63d5963e3e40a1617d4a9fd0671fa80b4513413359f84aa4bf6179da963017821aa801aa3177d14f460856fb60e70921c264bbd55d1f205163be4ee4c5c28737e6732c1fa2b406b9e5f164142d78c3910509ef6a402fef527f4c6c593525f47f9d9394c5eda6e90f43ecd6d22f75bc61044483566db6caa1c3d162f71115189eab058be921bc50d65164d9e1e920d07ee7dd8a59e15134cdcf187833eeb55f6503fb55eff585c77646139abd351e0d6f478a6a8c6cc0cad96e02d351dd9e4872bc9905890e1624e8a19266faa2381fc1e65579838408cb6dfca2e6f37b1215f616f99414946916a58eb9a387a40b25a7c495303e992e5bc423425a38251514b382061ee4c2b11c9e5dd76caea03d72dbbc26e0e7662b1ee98164e66090a7c0ad952379522bb223b4c5d4b7109c997fe59e7e494db32a9916b2a8d7d2256d833d24c7faeb014c5902f2f607fc5d9f70e2ebc9524ff7b8cc004833659cbb4f3d976e12b2abef134d92c3a8feb494f5814f8a194b5e5d9b27c67533bb0585a8f894dd890b4392de235896c70cb555bdb598e45c9c1a3a31120053beac58a58de8486accb59057522c58cfbd4dff3b3ef02d3072c7912650b031df2520222ed2e013c7e78c404c2818c2e4bf28280403bc5cebbdd081845d7e2848aad9ab8519f8b4ecd510ed71a9c058472b64904031a914e5d5c1db29eaa1c5ef4308adf1a9cf2ef4a795f91c48fdba27fe9f7a7e4cc785426df287bf93d1e4510bd85bb9027e834376cd603b18c7218124bbf188755f3a70234b5c3a9135320c33be7c7ab8fb97d82cbf6d25bd0102e5630bd9a80d8b9a269c81ef28ccf04605a9c518e931bad3b88207909099194a4ae803ccbb635b82aab0460ba439b80df33d8294e5ab779bf88bc47cd62fea6dcecb2e1bec8ecabbf9985f6863b22f8617e5acd178ddf59b0c107c3fce40eaf7f1b8d2d9d1681eed515936f5c046a5aca43b1782252fbd8ec1c438b5380f5ff41db6f85097eb34e4574b3ef9f716cadc9446b7393e1da1676177a6f23dd533d08c218cc2cc5598e092772ff23fa6768f71bf5e52469f97ad103bc4b760f061e7d88a003dccff1917b95e3302bae7216cbcfa507d19c6be841e47f7019ee47b7377b7057a94d9c364d8bcfa52690785c3c3671736049e6c76340538e0c65037c3ecafbb6387a060bf2d086a589c80822545409b30efbdc00ea1448044a1456b4e1e715865555b0c76f998696ebcae839bae304894747c10f0a6230272bec7ee7ee2ab4d1e2d6491161941d877a670459d16a69e54896fcbef83f38460b5bcb4217d1fe10971e8bfe1655e5f73f89b40332b57558e290f008d00030525090ed86854a2efab78a67f47a80c23955060d5d528d9bb7df99080116e638ed0d81a6f61a3a0fb0cf7f4b585c4fe91e0234fd6878e397a3150b49e02ac480886446bfe464dbebf999137ccc720d8cdea071121400df9ac2f10ad12e0ff459e802bd2aa052be5235580d523a941efc97b5e1d0cc31e50628b948d8eb03ae9aa6bfb2960ccee27f85868aeb3524bf5e061cb67152707f55dac0c57ce5467c20287a1993ba923e4ba197cb643037b93cc40d7722abc59f6cd1267d4df4fedc7f9a48684d004bf6a22d109d4b68114f2803c03f3f9fab1a128c7d729fc6943d9affe35a8722a00217f4661140af28b04e3ad2da503bacb4238ca3a2bbb77636ceff00d12e58b1b2e2410f18492aa3d460fa95fc11bcca5d637d457ef4277d36d88f9c43bcea4a157f4a70bc34b79aacdccf18307a187474f7273e9ed90c196403d60210d47c73f60124c9a6fa1ef5ce33dc8cce917a2826441e4c94fc58d8c588e05f967063ff60549441b44926a2b3d3f9697f5af3e4ce31f6272223d8420e8e1065192ed99e5aa132fe12c6d212769dbe91172b9d18b4d7a3ff7ff5bc38d10ac41522c4feeb107332aab266e87b29bc5bc6fc206f7a47361d4e03b3a614b72956b2453e5a2735f7062ec2b39b80ce71962ac0c47946cd7a0276f754beb864cd2468d3bb7e6aa6c05af6737e92a72ae324b7eb7cdb76b9c526e042222ab360c4984f298f3222b24a88e2647a1b510ccdbac9f90ad94bc64c2988d027438ce3fb8cd704e3ffe78f2f56539e8065bb9ace52f690ad9e44b3fac7e17d7b3ce6c2e2d82ae37291fa62958e35ca9cef51ff6b435fb6241721f94ee3c5b9bfca2f3610946d7a5516c457210b98a48976e99afeedf65cf3c2e18b18343d49b5600ceba0e17b0065752df48f0165627a70282b2c9055628197cd25fdb63e37f2f196930f01f5510b8068f4ae70c76c4c67c9c5afab452746c5de75e3743d7bd066ecd511bf08f19c832ddc7c8e2aa03e57c5014eef488311603f2d6ea04ef7adc73a1b653148c0cd836bc642f08d622c796e066ad9daea362bedb08191206368c50ed7436d3e5b961f09c26b5ce2547269e3f024d20f61d544d18f9360f6206978f7c0a71613070956cfedf35cc6d4384882a4f7cbcc16a48f19fa0bacd8e36524a3568aa1ad7dc35d906ca860d9221c93fd34fdb5a27b2f1f562def4930f172031620fe6c247e1ed5ca143a5e0c1ed4539e8020a6908f271f7437c4667a9ccc06adb22a8b31a3374dd860d598f07201401ce9aac911f528d9ea252bcd903e7e93d42c012ea139ef059dce5ab76d2856e8bfda6f9bc086db33a6bd12fb05b3c5153d52a60f41c59b3636231a35288692832ab0ce7b2e53e581415fc293a04e8880664321b408676cafcad0605cb315c9b04dd7ca0658645dd648337a3260832e655a78da800cafd9214c60e32c43875be3fecb231a596ebb10564fefa960a60a97110d46d7173dcbfc8ac895b223b9bbea376956d1d6d780401449f06a442b82e0ad5fd950af77950f35ea44f22057760c4f867b328d2a494a07658398a30b5cc004b1cd4cef31bd41d190a6c1bdab0cd31fe3dbb8552f576a9c064dc32e336261479a1d07bb748f1eaea38e18050b0287916c05112bdf418bf1d328b7166baee8130fc1c5bc9497233c8fa351883d1dc0934f7f60e4c54100feecb210711ce2762ec06edd0615ad9f8ac7b8ab9f9f2aaeb02c309c5c35888cc15e57477eede6af6edba2498b93d91385c05128062acea0ab82d377168a0f29d5b8969e94b60760434cd9cf5753e4b6daf6a431aeacfae82afa142fb74365a7973fe510a823fe38c9007a2c1bf5e1d8ecd2de0a499efdcfa85fec8f6a38adfb29f978e4a9d170f605acaaaf92946aec16574a8ddc6094f0f71839a43ae5a382bfb77b6565891c84d392e3a99e2349530c62b275fd256530b03983dcaec4769ed17501acf21723f493b6f9febf5e7617488f530497667bf5064f65d91e5003a908aa40670b6a2fa5de2c0db28eef2cd1e8aa3401e9230f9c2d10b57440dbb3ed412bc8d4430a3033e181ab93df03ab0b25394ace3f457081064f76ff6c3d3521c75f3e33385b95d860eab7724f937360eda6f747b9703df3990994c44eb47db338a18df16674be92dcbcb184b1058facf8207003c6fbaec73ab2d89a5622979b73ede1b9f563c2283ad0f955e54289abdaa1651d974aa728f9878ba88ff1873338af667e58d21f5412ca13e4f6c6d878db8a563bfa7381becddfa2f303e07ab32f8099bb00fac5ef69c19836541406efe392e3ceecc17d1b4ff6bd4d085933afa2fc0c131bf7bc863e0700ab1a7ac1015767273556ae015b6dfa88d0d63fae9a6148f9a7202a571944ef900550b36f39835dac60be81767f2c496e9aecd83924476c32e70d35f3044dea5da4a60e2d958de7ed768f5fdd5017cd3a00c3266e471162fc78f191b6c81b13473263eb4bd3c55577433e3ae3373475fbe341811f6544066e0db3586850f35adf5158d5d7aa42dc03162e843541d25c1da659f2167e99aa40f110b971cd87999fdebff3c222632c897149201282547b7d558b7dcf4afa31f8e3fb8dfa05f49bd1173c59050d0389d76ca91772cae6f6412a7f05f0be317228eae201d3d50b979efa56f8a745a9d3c24867fbe2f0e97de14f79b9cbae1fd8b39be2eb0a361bca12c942fa321072710655b219c754e62a967ad3b875eafac04bd106c7a41708089a2b75312bb4f1abc6d617c51b5e217e93dafaf4361ef10ec311f9db064a021ff2fcbe263b4596f9d2301c7276b33dd1c70c792c9cff0a8f84ef9da354710711bbf96f494db6d6747793ef6d86cd0770fc65827784448e15bc72ad5de0b15342288ad27e62f80f78084730b2e49561b8cf202d1cb328d60bb056106eb826c38defeca9f50d3ba7e4787046913a781d0e88fc0bf5258971916fc1dceef8736d1bedbce90edeacf1e189a2643981831f99601fcbba0c3dbe918b3dd157ba5f77a87af22ffeb2f8eea175efd680c90e97d431e52cfe941b238b8db7ac2a241dc1d2d3d681f365a65f74e65ad68a03f3cda76292baca3d6acfe8ff5f27c17dda2efa1f9d41bc31416540fc4644988661e6ab0b9e1befe44b458b56c7c0ddb4851fc9a4e7ff01e429b1e4cdbfe376e64640cf6cfb45e1c5ee31931cfe27c8f8a4ba4e8cd1773a3df45631c4eb8daf0ec26b9ff282391dd3beffd01b97be3686cbaca7865d18f1a117a23a867af423dd0d0ab1dd15630ba2aa64426f158d23c7328fcf6d753e4ab24100c3824fb5edbecfe40d8eb313184c1eaea45d6a11fd59559b6430fcd747d8eaeef8d49e0cb0163cf968ff3f4e087422b36fff4d0acc8a84ddfeeac8e5a3545f19b1a7a9b216a99cab854ed4f4466d5ca33fa29699585e50a827b2f1e8ef10f747bd0cd6e7cebc78993f286f44514e6fd84858e1d8c09ff89f9ebeaefbcfd740f49745a866aa9c64d070248ea3427a62c38e3bee58287d820985a56296b3259e1f07c3bec3b3ce9e0301092e91baaff3f27570b09aedad02006388aff57802486f37f8cf07ef2deedf50c96099ed1528c"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000100)=[{}, {}], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x19, 0x0, 0x0) fchdir(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x2, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000500000d00000000fd"], &(0x7f0000001f00)=""/4096, 0x4e, 0x1000, 0x1, 0x2, 0x10000, @value=r3}, 0x28) 19.761946503s ago: executing program 8 (id=7596): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x20, 0x22, 0x17, {0x17, 0x2, "b792783c57964ba7a8349e195be5d6f33fad9523bc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 17.933840006s ago: executing program 8 (id=7602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = accept(r3, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r4, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x3f8}, 0x1, 0x0, 0x0, 0x40800}, 0x4000040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000300)={0x1, {{0xa, 0x4e24, 0x7f, @local, 0xff}}}, 0x88) bind$x25(r5, &(0x7f0000000080), 0x12) close(r3) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x800) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 16.551738721s ago: executing program 8 (id=7606): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x1, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000180)={0xfffffffffffffff9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000240)="29a3eda083e09799054e", 0xf000}, {0x0}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000820000000400000002"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f0000000500), 0x0}, 0x20) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x9, 0xfffffffffffffff8, 0x9f, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4d3, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7, 0x3, 0xfffffffe}}, 0xe8) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) r8 = timerfd_create(0x0, 0x800) timerfd_gettime(r8, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10440, 0x1ff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) 15.217967722s ago: executing program 8 (id=7609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @default}, [@remote, @null, @default, @remote, @default, @null, @default, @default]}, &(0x7f00000004c0)=0x48, 0x80800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) accept$netrom(r3, &(0x7f0000000b00)={{}, [@null, @remote, @bcast, @remote, @netrom, @rose, @null, @null]}, &(0x7f0000000b80)=0x48) listen(r2, 0x70) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000000040)=0xff000000, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080), 0x4) setregid(0xffffffffffffffff, r6) getegid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = getpid() kcmp(r9, r8, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r10, 0xfffffffd) 8.737987309s ago: executing program 1 (id=7620): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000008, 0x3032, 0xffffffffffffffff, 0xcac60000) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x101e00, 0x0) poll(&(0x7f0000000000)=[{r0, 0x4002}, {r0, 0x5000}, {r0, 0x110c}, {r0}, {r0, 0x51a2}, {r0, 0x1200}], 0x6, 0x3) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000540)=ANY=[@ANYRESHEX]) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001040)='/sys/power/wakeup_count', 0x181000, 0x58) io_submit(0x0, 0x0, &(0x7f0000000500)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 8.695615107s ago: executing program 2 (id=7621): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x10, 0x8, 0x2c, 0x6, 0x40000, 0x4, 0x2, 0x81, 0xffffff19}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x1002001, 0xde60fe10fea4447b, 0x3ff, 0x7fff, 0x0, 0x40000006, 0x0, 0x0, 0x10, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r7, 0x80045518, &(0x7f0000000180)=0xad) dup3(r7, r5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000100)=0x3) 7.462557516s ago: executing program 9 (id=7622): userfaultfd(0x80801) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.456727308s ago: executing program 2 (id=7623): socket$netlink(0x10, 0x3, 0x400000000000004) socket(0x2, 0x3, 0xff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) setgroups(0x0, 0x0) setuid(0xee00) ptrace$ARCH_MAP_VDSO_64(0x1e, 0xffffffffffffffff, 0xfffffffffffffe00, 0x2003) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)) 7.364493947s ago: executing program 1 (id=7624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$midi(0x2, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000106307312040000102030109024900010108400009040000020103308107240103000700062402020000040702010a2501067be189450d2c09050d0240000549030825"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x19f, &(0x7f00000003c0)={@remote, @local, @void, {@mpls_mc={0x8848, {[{0xa}], @ipv6=@tipc_packet={0xe, 0x6, "4058c5", 0x165, 0x6, 0xff, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@fragment={0x0, 0x0, 0x8, 0x1, 0x0, 0xd, 0x68}, @hopopts={0x2c}, @fragment={0x2c, 0x0, 0x7f, 0x0, 0x0, 0x1d, 0x65}, @srh={0x88, 0x2, 0x4, 0x1, 0x4c, 0x10, 0xac9d, [@private2]}, @dstopts={0x5c, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x1d, 0x0, 0x6c, 0x0, 0x0, 0x1, 0x68}, @srh={0x11, 0x12, 0x4, 0x9, 0x9, 0x10, 0x7, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @private0, @mcast1, @local, @empty]}, @hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x7}]}, @dstopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0xf68}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @pad1]}], @payload_mcast={{{{{{0x2d, 0x0, 0x1, 0x1, 0x1, 0xb, 0x2, 0x2, 0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0xdbb1, 0xa5, 0x1, 0x4e21, 0x4e21}, 0x4}, 0x2, 0x4}, 0x2}}, [0x0]}}}}}}}, &(0x7f0000000580)={0x0, 0x1, [0x3b0, 0xee4, 0xa77, 0x29c]}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000016c0)=""/235, 0xeb}], 0x1, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0x2}, {0x7}, {}, @addr={0x2, 0xf}}, {0x0, 0x0, 0x2, 0x0, @time={0xfffe, 0x40}, {}, {0xa}, @connect={{0x5, 0x6}, {0x3}}}, {0x2, 0xfd, 0x0, 0x0, @time={0x5, 0x7fffffff}, {0x0, 0x8}, {}, @result={0x4, 0xcb}}, {0x0, 0x0, 0x1, 0x0, @time, {0x4, 0x7f}, {0x4, 0xf9}, @connect={{0xbe, 0xfc}, {0x0, 0x5}}}], 0x70) close$fd_v4l2_buffer(r3) 7.317960687s ago: executing program 9 (id=7625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = accept(r3, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r4, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x3f8}, 0x1, 0x0, 0x0, 0x40800}, 0x4000040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000300)={0x1, {{0xa, 0x4e24, 0x7f, @local, 0xff}}}, 0x88) bind$x25(r5, &(0x7f0000000080), 0x12) close(r3) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x800) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) listen(r7, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 6.110006443s ago: executing program 9 (id=7626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x7, 0x1, 0x1, 0x0, 0xe}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 5.090972535s ago: executing program 2 (id=7627): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3fd, {0x0, 0x0, 0x0, r1, {0xffe0, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0x541b, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r6, &(0x7f0000003500)={0x18, 0x0, r7, {0xffffcc9b}}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.784824471s ago: executing program 9 (id=7628): r0 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x8000000000000001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000700000008000a40000000000900220073797a31000200000000010073797a30000000000800054000000008080003400000000808000740000000a90800064000000000140000001000010000000000000000000084000a"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x1000, 0x1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x4008000) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f0000000200)={[{@subsystem='blkio'}, {@release_agent={'release_agent', 0x3d, './file0'}}], [{@obj_role={'obj_role', 0x3d, '*[#)@\\}]'}}, {@fsmagic={'fsmagic', 0x3d, 0x160}}, {@smackfsdef={'smackfsdef', 0x3d, '_.'}}, {@dont_appraise}, {@permit_directio}, {@dont_measure}, {@seclabel}]}) r3 = syz_open_procfs(r0, &(0x7f0000000000)='net/unix\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) pread64(r3, &(0x7f0000000080)=""/220, 0xdc, 0x4009) read$FUSE(r3, &(0x7f0000005000)={0x2020}, 0x2020) 4.456605707s ago: executing program 1 (id=7629): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) fchmod(r1, 0x1c) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x0, 0x1, 0x64d5, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x800) 3.673970178s ago: executing program 0 (id=7523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000480)={0x2, &(0x7f0000000880)=[{0x9874, 0x5, 0x8, 0x40}, {0x7, 0x40, 0xc9, 0x6}]}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000008c0)=r4, 0x4) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x40240c4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330283ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0xfb, 0x60000000, 0x0, 0x77, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001a0001002bbd7000fbdbdf250a8080779d"], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000008000000070000001a010000060400000000000001030000000000302e61615f00"], 0x0, 0x34}, 0x28) readv(r2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r9}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r9, 0x211d9572}, &(0x7f00000001c0)=0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000006400010000060202022edf7f2b020202010782848b9612182418efc7b5974fa3ba4e39acbd41a88fdb5bcd60c13ba1b4320482ccfd948ce335ef5e662bb8778ee1b624bc1daed12dcb526af0534434aa1234b9d191cc88f6fa"], 0x35) 3.570785779s ago: executing program 1 (id=7630): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) fchmod(r1, 0x1c) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x0, 0x1, 0x64d5, 0x0, 0x4}}) (fail_nth: 1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x800) 3.502654956s ago: executing program 9 (id=7631): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b5738", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb", 0x18}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0xc0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x1, 0x10062, 0x0) rt_sigqueueinfo(0x0, 0x9, &(0x7f00000023c0)={0x20, 0x2, 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r6, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40d5}, 0x20008010) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff00000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c000280080007000a0101020a000100aaaaaaaaaa000000"], 0x48}}, 0x840) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000003a4201000000000065000000000000005f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 2.9219242s ago: executing program 1 (id=7632): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0xaf606d2302321f9d, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001304"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x8084) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_usb_control_io$hid(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r7}, 0x20) syz_usb_connect(0x5, 0x59, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ec1bb2106c04e014010001020301090201b69e0000000009046900000e010000182402010202"], 0x0) 2.776328366s ago: executing program 2 (id=7633): syz_open_dev$vbi(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) 2.311713672s ago: executing program 0 (id=7634): socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.644800805s ago: executing program 0 (id=7635): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x5000) readv(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000140)=""/150, 0x96}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f0000000400)=""/191, 0xbf}], 0x4) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x103, 0x0) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000006180)={&(0x7f00000060c0), 0xc, &(0x7f0000000000)={&(0x7f0000006100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000882}, 0x20000880) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, &(0x7f0000000040)=""/61, &(0x7f0000000080)=0x3d) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)) 1.552818947s ago: executing program 2 (id=7636): socket$netlink(0x10, 0x3, 0x400000000000004) socket(0x2, 0x3, 0xff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) setgroups(0x0, 0x0) setuid(0xee00) ptrace$ARCH_MAP_VDSO_64(0x1e, 0xffffffffffffffff, 0xfffffffffffffe00, 0x2003) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)) 579.515762ms ago: executing program 37 (id=7609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @default}, [@remote, @null, @default, @remote, @default, @null, @default, @default]}, &(0x7f00000004c0)=0x48, 0x80800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) accept$netrom(r3, &(0x7f0000000b00)={{}, [@null, @remote, @bcast, @remote, @netrom, @rose, @null, @null]}, &(0x7f0000000b80)=0x48) listen(r2, 0x70) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000000040)=0xff000000, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080), 0x4) setregid(0xffffffffffffffff, r6) getegid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = getpid() kcmp(r9, r8, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r10, 0xfffffffd) 556.212369ms ago: executing program 9 (id=7638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$midi(0x2, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000106307312040000102030109024900010108400009040000020103308107240103000700062402020000040702010a2501067be189450d2c09050d0240000549030825"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x19f, &(0x7f00000003c0)={@remote, @local, @void, {@mpls_mc={0x8848, {[{0xa}], @ipv6=@tipc_packet={0xe, 0x6, "4058c5", 0x165, 0x6, 0xff, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@fragment={0x0, 0x0, 0x8, 0x1, 0x0, 0xd, 0x68}, @hopopts={0x2c}, @fragment={0x2c, 0x0, 0x7f, 0x0, 0x0, 0x1d, 0x65}, @srh={0x88, 0x2, 0x4, 0x1, 0x4c, 0x10, 0xac9d, [@private2]}, @dstopts={0x5c, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x1d, 0x0, 0x6c, 0x0, 0x0, 0x1, 0x68}, @srh={0x11, 0x12, 0x4, 0x9, 0x9, 0x10, 0x7, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @private0, @mcast1, @local, @empty]}, @hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x7}]}, @dstopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0xf68}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @pad1]}], @payload_mcast={{{{{{0x2d, 0x0, 0x1, 0x1, 0x1, 0xb, 0x2, 0x2, 0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0xdbb1, 0xa5, 0x1, 0x4e21, 0x4e21}, 0x4}, 0x2, 0x4}, 0x2}}, [0x0]}}}}}}}, &(0x7f0000000580)={0x0, 0x1, [0x3b0, 0xee4, 0xa77, 0x29c]}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000016c0)=""/235, 0xeb}], 0x1, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0x2}, {0x7}, {}, @addr={0x2, 0xf}}, {0x0, 0x0, 0x2, 0x0, @time={0xfffe, 0x40}, {}, {0xa}, @connect={{0x5, 0x6}, {0x3}}}, {0x2, 0xfd, 0x0, 0x0, @time={0x5, 0x7fffffff}, {0x0, 0x8}, {}, @result={0x4, 0xcb}}, {0x0, 0x0, 0x1, 0x0, @time, {0x4, 0x7f}, {0x4, 0xf9}, @connect={{0xbe, 0xfc}, {0x0, 0x5}}}], 0x70) close$fd_v4l2_buffer(r3) 510.196842ms ago: executing program 2 (id=7639): futex_waitv(&(0x7f0000000e40)=[{0x0, &(0x7f0000000000), 0x82}, {0x0, &(0x7f0000000080), 0x82}, {0x5, &(0x7f00000001c0)=0x4, 0x2}], 0x3, 0x0, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400", @ANYBLOB="851ec00ccdc13b538a7c92fb4eef4076049f6609b8afb348", @ANYRES32=0x0], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYBLOB="70000000050601080000000000000000010000000900020073797a310000000009000200be055ed1177c54170900020073797a300000000005000100070000000900020073797a30000000000900020073797a310000ddff0800020073797a3000000000fb78724273795faf53e0ab7a3100000000"], 0x70}, 0x1, 0x0, 0x0, 0x44010}, 0x4f1350d975b79c1d) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f00000008c0)={&(0x7f0000000840)=[{&(0x7f0000000480)="c315376abbebffbd1a2649fdfda0d4856f7611f7e992a5f3661692fc528696d0aa7385338f765c896db54dee991b67d50e2d161d4cbe161bbcd4984b6eca9e0744fec058e27af51cc0dea95b347b4a35ab510588a1c2bccf313ffd44", 0x5c}, {&(0x7f0000000500)="aa2354d5b6c08b19623e5a8ba1c5144428f35c0e2ee084e3d7a8acd57221e7d3e131e62261e0f4e630eeb2ce7d524796faa2382eed1828433804129283608e9d9e73ed50efb484c3623a577e44e974c73556847ab83e264f5a83373c605044eab79204a7ef3ff311e98f9b1a468661d2aa9b69e224e24c520cd4512ec06be962caeed2c8d1f2aa5bb4a8df8c20c3b71a010cec04f498d60f50beb42037742db1ac89f6e767ab445f543fe8a81a51535815a61374697993a068a8738d41c5fd9a39192045f79f02d28e48abe7aa60ce5fcca94c1bad", 0xd5}, {&(0x7f0000000600)="f251c0d11ec76717c47fcfda55e8d66f34363cd0e715900e4691ea652b45a24833b872a0b1c388d8d0877154966022a76d031934ad2ffb69831165c777eccfcf7a107bc53083664d03dee0c93b671b586dc31ef474cf00c7bce34ccd3b03fb073a3031b480c28440668151651928c7cb6eead5a5c7e3477ada8d1058bb36f789476ecb194aaea6d00d652d83938d56ab6d1a9005fe9ba4ce674a8e529630b5f7b0509853c9f9cee444df32e56b9acfc0e5bc48b2308a838b2db88c4964e44406bff806d007d11c93bd492e", 0xcb}, {&(0x7f0000000700)="55cfa86ef34aab181ee408ad9affc1f9", 0x10}, {&(0x7f0000000740)="8cd11267eeee65705e3b27810282f1722626fd8e60774bb8902bc6620a540ac239fc4e9f0915a8ca38e73473bd919d39eaca04824e73564cc11408e046edaff27c6d04115a30edd15bc9552017445f635902709d51970d484698683e2806160d8495158734c5cb14f7979956ee49583d2f5e695f4ceb3b5b30f4fd15f97d3715425b6a623e6d070bbba4a5afb5f918c819da8ce9fc0db9ebb787da07dce596fdaee71a6711b9f29d2e63c61946505ac7a1f96ddf5ef2cec46a745b6418712d5419ef0326e56e86004e6df0338a17e6e5621f15a51190c987", 0xd8}], 0x5, 0x1, 0x0, 0x8000, 0x2, 0xfffffffffffffffc, 0x5, 0x1000}) 190.619556ms ago: executing program 0 (id=7640): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x1000000) 0s ago: executing program 1 (id=7641): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socket(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008b000000350000000000000085007900a400000095"], 0x0, 0xc77, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) kernel console output (not intermixed with test programs): ket option. [ 1548.444691][T28093] Use struct sctp_assoc_value instead [ 1548.559281][ T5913] udevd[5913]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1548.581015][ T5126] usb 2-1: USB disconnect, device number 126 [ 1548.599008][T28086] fido_id[28086]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1548.687690][T28099] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1548.909935][ T5913] udevd[5913]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1548.966645][T22035] udevd[22035]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1549.122341][T15409] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1549.380337][ T5913] udevd[5913]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1549.395154][T15409] usb 9-1: Using ep0 maxpacket: 32 [ 1549.399527][T15409] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1549.399554][T15409] usb 9-1: config 0 has no interface number 0 [ 1549.399600][T15409] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1549.420315][T15409] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1549.420346][T15409] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.420366][T15409] usb 9-1: Product: syz [ 1549.420381][T15409] usb 9-1: Manufacturer: syz [ 1549.420395][T15409] usb 9-1: SerialNumber: syz [ 1549.487915][T15409] usb 9-1: config 0 descriptor?? [ 1549.750932][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1549.827825][T28126] FAULT_INJECTION: forcing a failure. [ 1549.827825][T28126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1549.827904][T28126] CPU: 0 UID: 0 PID: 28126 Comm: syz.0.7119 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1549.827930][T28126] Tainted: [L]=SOFTLOCKUP [ 1549.827936][T28126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1549.827947][T28126] Call Trace: [ 1549.827956][T28126] [ 1549.827965][T28126] dump_stack_lvl+0xe8/0x150 [ 1549.828075][T28126] should_fail_ex+0x46b/0x600 [ 1549.828096][T28126] _copy_from_user+0x2d/0xb0 [ 1549.828109][T28126] get_itimerspec64+0xaa/0x310 [ 1549.828123][T28126] ? __pfx_get_itimerspec64+0x10/0x10 [ 1549.828133][T28126] ? lockdep_hardirqs_on+0x7a/0x110 [ 1549.828148][T28126] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1549.828162][T28126] __x64_sys_timer_settime+0x15c/0x270 [ 1549.828176][T28126] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 1549.828197][T28126] do_syscall_64+0x14d/0xf80 [ 1549.828210][T28126] ? trace_irq_disable+0x3b/0x150 [ 1549.828223][T28126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.828233][T28126] ? clear_bhb_loop+0x40/0x90 [ 1549.828247][T28126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.828257][T28126] RIP: 0033:0x7fcfcb54c819 [ 1549.828270][T28126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.828279][T28126] RSP: 002b:00007fcfc977d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 1549.828291][T28126] RAX: ffffffffffffffda RBX: 00007fcfcb7c6090 RCX: 00007fcfcb54c819 [ 1549.828299][T28126] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 1549.828306][T28126] RBP: 00007fcfc977d090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.828313][T28126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1549.828319][T28126] R13: 00007fcfcb7c6128 R14: 00007fcfcb7c6090 R15: 00007fff77396708 [ 1549.828335][T28126] [ 1549.988290][T28128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.991931][T28128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.204379][T15409] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1550.204433][T15409] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1550.204451][T15409] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1550.204542][T15409] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1550.227040][T15409] usb 9-1: USB disconnect, device number 35 [ 1550.312107][T28135] netlink: 'syz.2.7121': attribute type 10 has an invalid length. [ 1550.312175][T28135] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7121'. [ 1552.504235][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1552.884898][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1552.911314][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1553.076713][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1553.279390][ T810] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1553.318197][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1553.340343][T28184] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7134'. [ 1553.432024][ T810] usb 9-1: Using ep0 maxpacket: 16 [ 1553.434497][ T810] usb 9-1: config 0 has no interfaces? [ 1553.438786][ T810] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1553.438816][ T810] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.438837][ T810] usb 9-1: Product: syz [ 1553.438852][ T810] usb 9-1: Manufacturer: syz [ 1553.438867][ T810] usb 9-1: SerialNumber: syz [ 1553.495900][ T810] usb 9-1: config 0 descriptor?? [ 1553.666583][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1554.199187][T28140] Process accounting resumed [ 1554.326065][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1554.503135][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1555.203814][T23831] usb 9-1: USB disconnect, device number 36 [ 1556.718916][ T5913] udevd[5913]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1556.727316][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1556.875437][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1556.898626][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1557.041456][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1557.047192][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1557.047225][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1557.047247][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1557.047291][ T9] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1557.047314][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.122905][ T9] usb 10-1: config 0 descriptor?? [ 1558.013815][ T9] shield 0003:0955:7214.0045: unknown main item tag 0x0 [ 1558.019740][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input216 [ 1558.286307][T28297] netlink: 'syz.2.7162': attribute type 49 has an invalid length. [ 1558.322295][ T9] shield 0003:0955:7214.0045: Registered Thunderstrike controller [ 1558.322628][ T9] shield 0003:0955:7214.0045: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 1558.370835][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1558.386617][T15409] shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1558.386941][T15409] shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1558.387256][T15409] shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1558.423817][T15409] shield 0003:0955:7214.0045: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1558.449230][ T9] usb 10-1: USB disconnect, device number 4 [ 1559.616614][ T6096] udevd[6096]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1559.734963][T28323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1559.753734][T28323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7171'. [ 1559.753758][T28323] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1559.801117][T28323] netlink: 'syz.1.7171': attribute type 8 has an invalid length. [ 1559.801137][T28323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7171'. [ 1559.841756][ T5880] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 1560.196580][ T5880] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.199802][ T5880] usb 9-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1560.199833][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.199854][ T5880] usb 9-1: Product: syz [ 1560.199869][ T5880] usb 9-1: Manufacturer: syz [ 1560.199884][ T5880] usb 9-1: SerialNumber: syz [ 1560.205477][ T5880] usb 9-1: config 0 descriptor?? [ 1560.211085][ T5880] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1560.211134][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 1560.539748][T28342] netlink: 'syz.2.7174': attribute type 10 has an invalid length. [ 1560.559773][T22095] Bluetooth: hci2: link tx timeout [ 1560.562984][T22095] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1560.628166][T28316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.628680][T28316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.656132][ T5880] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1560.659418][ T5880] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1560.659478][ T5880] usb 9-1: media controller created [ 1560.663506][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1560.674492][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 1560.674572][ T5880] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1560.690841][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input217 [ 1560.707838][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1560.723090][ T5880] dvb-usb: schedule remote query interval to 150 msecs. [ 1560.723147][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 1560.737051][ T5880] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1560.755185][ T5880] usb 9-1: USB disconnect, device number 37 [ 1560.771295][T28342] team0: Port device dummy0 added [ 1560.885251][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1561.051186][ T5880] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1561.242842][ T9] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1561.706282][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1561.706473][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.706528][ T9] usb 10-1: Product: syz [ 1561.706580][ T9] usb 10-1: Manufacturer: syz [ 1561.706597][ T9] usb 10-1: SerialNumber: syz [ 1561.955652][ T9] usb 10-1: config 0 descriptor?? [ 1562.144840][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1562.224972][ T9] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1562.250515][T28363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7180'. [ 1562.306332][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1562.557089][T28344] Bluetooth: hci2: command 0x0406 tx timeout [ 1562.618180][T28352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1562.620118][T28352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1562.641899][ T5880] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1562.644030][T28352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1562.644816][T28352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1562.648018][ T9] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1562.688966][ T9] usb 10-1: USB disconnect, device number 5 [ 1562.795034][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 1562.800794][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1562.800831][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1562.800855][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1562.800896][ T5880] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1562.800920][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.808592][ T5880] usb 2-1: config 0 descriptor?? [ 1562.993990][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1563.381658][ T5880] input: HID 0955:7214 Haptics as /devices/virtual/input/input218 [ 1563.945078][ T5880] shield 0003:0955:7214.0046: Registered Thunderstrike controller [ 1563.945428][ T5880] shield 0003:0955:7214.0046: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1564.017897][ T5859] shield 0003:0955:7214.0046: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1564.018223][ T5859] shield 0003:0955:7214.0046: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1564.018535][ T5859] shield 0003:0955:7214.0046: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1564.018851][ T5859] shield 0003:0955:7214.0046: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1564.094817][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1564.137798][ T5880] usb 2-1: USB disconnect, device number 127 [ 1564.218139][T28381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1564.295368][ T5913] udevd[5913]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1564.461117][T23831] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1564.556063][ T5913] udevd[5913]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1564.590275][T28399] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7195'. [ 1564.590297][T28399] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7195'. [ 1564.590305][T28399] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7195'. [ 1564.613862][T23831] usb 9-1: Using ep0 maxpacket: 32 [ 1564.633466][T23831] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1564.633501][T23831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1564.633528][T23831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1564.636072][T23831] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1564.636101][T23831] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.636122][T23831] usb 9-1: Product: syz [ 1564.636135][T23831] usb 9-1: Manufacturer: syz [ 1564.636149][T23831] usb 9-1: SerialNumber: syz [ 1564.712110][T23831] usb 9-1: config 0 descriptor?? [ 1564.713519][T28385] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1564.720113][T23831] hub 9-1:0.0: bad descriptor, ignoring hub [ 1564.739569][T23831] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1564.746211][T23831] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input219 [ 1564.763358][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1564.763422][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1564.927915][ T5880] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1565.011761][ C1] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1565.011806][T17086] usb 9-1: USB disconnect, device number 38 [ 1565.109179][ T810] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1565.155871][T28409] netlink: 'syz.2.7199': attribute type 10 has an invalid length. [ 1565.155893][T28409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7199'. [ 1565.156565][T28409] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1565.157012][T28409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1565.270752][ T810] usb 10-1: Using ep0 maxpacket: 16 [ 1565.273801][ T810] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1565.273887][ T810] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1565.277639][ T810] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1565.277667][ T810] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.277687][ T810] usb 10-1: Product: syz [ 1565.277702][ T810] usb 10-1: Manufacturer: syz [ 1565.277717][ T810] usb 10-1: SerialNumber: syz [ 1565.346263][ T810] usb 10-1: config 0 descriptor?? [ 1565.360103][ T810] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1565.360139][ T810] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1565.529083][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.529112][ T5880] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1565.529163][ T5880] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1565.529186][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.555457][ T5880] usb 2-1: config 0 descriptor?? [ 1565.560900][ T5880] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1565.560948][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 1565.592284][ T5880] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1565.593143][ T5880] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1565.593266][ T5880] usb 2-1: media controller created [ 1565.601320][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1565.638639][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 1565.638723][ T5880] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1565.644565][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input220 [ 1565.657818][ T5880] dvb-usb: schedule remote query interval to 150 msecs. [ 1565.657840][ T5880] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1565.765258][T17086] usb 2-1: USB disconnect, device number 2 [ 1565.887602][T17086] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1565.971011][ T810] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1565.974583][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1566.001520][ T810] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1566.114192][T28416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1566.211868][T28417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7201'. [ 1566.225656][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1566.491880][T17086] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1566.618764][T17086] usb 9-1: device descriptor read/64, error -71 [ 1566.852091][T17086] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1566.963554][ T810] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 1566.964475][ T810] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 1566.964883][ T810] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 1566.975936][T17086] usb 9-1: device descriptor read/64, error -71 [ 1566.993170][ T810] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 1567.002637][ T810] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 1567.003057][ T810] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 1567.029465][ T810] usb 10-1: USB disconnect, device number 6 [ 1567.080839][T17086] usb usb9-port1: attempt power cycle [ 1567.393343][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1567.414189][T17086] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1567.433654][T17086] usb 9-1: device descriptor read/8, error -71 [ 1567.462544][T23831] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 1567.540538][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1567.752586][T23831] usb 2-1: Invalid ep0 maxpacket: 32 [ 1567.805724][T17086] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1567.832471][T17086] usb 9-1: device descriptor read/8, error -71 [ 1567.896813][T23831] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 1567.928818][T17086] usb usb9-port1: unable to enumerate USB device [ 1567.987438][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1568.020753][ T810] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1568.032857][T23831] usb 2-1: Invalid ep0 maxpacket: 32 [ 1568.033405][T23831] usb usb2-port1: attempt power cycle [ 1568.137990][ T810] usb 10-1: device descriptor read/64, error -71 [ 1568.279169][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1568.356600][T23831] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 1568.375650][ T810] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1568.377161][T23831] usb 2-1: Invalid ep0 maxpacket: 32 [ 1568.499443][ T810] usb 10-1: device descriptor read/64, error -71 [ 1568.499719][T23831] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 1568.523020][T23831] usb 2-1: Invalid ep0 maxpacket: 32 [ 1568.523608][T23831] usb usb2-port1: unable to enumerate USB device [ 1568.604927][ T810] usb usb10-port1: attempt power cycle [ 1568.928077][ T810] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1568.949135][ T810] usb 10-1: device descriptor read/8, error -71 [ 1569.161547][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1569.185282][ T810] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1569.205023][ T810] usb 10-1: device descriptor read/8, error -71 [ 1569.229512][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1569.309708][ T810] usb usb10-port1: unable to enumerate USB device [ 1569.688051][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1569.717278][T28467] netlink: 'syz.8.7222': attribute type 10 has an invalid length. [ 1569.774376][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1569.804962][T28469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1569.914922][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1570.236220][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1570.406196][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1570.518882][ T5880] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1570.522872][T28486] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1570.648812][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1570.664078][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 1570.667398][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.667449][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1570.667491][ T5880] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1570.667513][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.736520][ T5880] usb 2-1: config 0 descriptor?? [ 1570.754506][ T5880] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1570.797394][T28496] program syz.8.7237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1570.931204][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1570.973896][T28502] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7240'. [ 1571.862607][T28502] overlayfs: missing 'workdir' [ 1572.381116][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1572.851024][T28527] program syz.0.7250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1573.053019][T17086] usb 2-1: USB disconnect, device number 7 [ 1573.226079][T28540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7256'. [ 1573.226103][T28540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7256'. [ 1573.231388][T28540] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.7256'. [ 1573.280869][T28540] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7256'. [ 1573.302807][T28540] syzkaller1: entered promiscuous mode [ 1573.302835][T28540] syzkaller1: entered allmulticast mode [ 1573.411730][T28543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7257'. [ 1573.746601][T28550] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7258'. [ 1573.748800][T28550] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7258'. [ 1573.877224][T28554] program syz.9.7262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1574.028305][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1574.104293][T28568] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7265'. [ 1574.127992][T28568] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7265'. [ 1574.203136][ T5913] udevd[5913]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1574.258391][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1574.345038][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1574.422202][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1574.440106][T28580] FAULT_INJECTION: forcing a failure. [ 1574.440106][T28580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.441130][T28580] CPU: 0 UID: 0 PID: 28580 Comm: syz.0.7270 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1574.441147][T28580] Tainted: [L]=SOFTLOCKUP [ 1574.441151][T28580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1574.441159][T28580] Call Trace: [ 1574.441163][T28580] [ 1574.441168][T28580] dump_stack_lvl+0xe8/0x150 [ 1574.441191][T28580] should_fail_ex+0x46b/0x600 [ 1574.441210][T28580] _copy_from_user+0x2d/0xb0 [ 1574.441226][T28580] ___sys_sendmsg+0x1c6/0x360 [ 1574.441243][T28580] ? __pfx____sys_sendmsg+0x10/0x10 [ 1574.441274][T28580] ? __fget_files+0x2a/0x420 [ 1574.441287][T28580] ? __fget_files+0x3a6/0x420 [ 1574.441305][T28580] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1574.441320][T28580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1574.441338][T28580] ? __pfx_ksys_write+0x10/0x10 [ 1574.441359][T28580] do_syscall_64+0x14d/0xf80 [ 1574.441373][T28580] ? trace_irq_disable+0x3b/0x150 [ 1574.441386][T28580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.441397][T28580] ? clear_bhb_loop+0x40/0x90 [ 1574.441410][T28580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.441420][T28580] RIP: 0033:0x7fcfcb54c819 [ 1574.441431][T28580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.441441][T28580] RSP: 002b:00007fcfc979e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1574.441459][T28580] RAX: ffffffffffffffda RBX: 00007fcfcb7c5fa0 RCX: 00007fcfcb54c819 [ 1574.441467][T28580] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1574.441474][T28580] RBP: 00007fcfc979e090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.441480][T28580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1574.441486][T28580] R13: 00007fcfcb7c6038 R14: 00007fcfcb7c5fa0 R15: 00007fff77396708 [ 1574.441502][T28580] [ 1574.697048][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1574.788077][T28557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1574.817413][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1574.976646][ T9] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1575.121248][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1575.123536][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1575.123557][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1575.123569][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1575.123594][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1575.123607][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.131997][ T9] usb 9-1: config 0 descriptor?? [ 1575.156964][T28586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1575.403787][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1575.564519][ T9] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 1575.564559][ T9] microsoft 0003:045E:07DA.0047: ignoring exceeding usage max [ 1575.706650][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0047/input/input221 [ 1575.816381][ T9] microsoft 0003:045E:07DA.0047: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1575.910865][ T9] usb 9-1: USB disconnect, device number 43 [ 1577.103608][T28623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1577.131267][T28620] FAULT_INJECTION: forcing a failure. [ 1577.131267][T28620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1577.131308][T28620] CPU: 1 UID: 0 PID: 28620 Comm: syz.0.7284 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1577.131334][T28620] Tainted: [L]=SOFTLOCKUP [ 1577.131342][T28620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1577.131353][T28620] Call Trace: [ 1577.131361][T28620] [ 1577.131370][T28620] dump_stack_lvl+0xe8/0x150 [ 1577.131401][T28620] should_fail_ex+0x46b/0x600 [ 1577.131434][T28620] _copy_to_user+0x31/0xb0 [ 1577.131458][T28620] simple_read_from_buffer+0xe1/0x170 [ 1577.131488][T28620] proc_fail_nth_read+0x1be/0x230 [ 1577.131515][T28620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1577.131542][T28620] ? rw_verify_area+0x2ac/0x4e0 [ 1577.131568][T28620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1577.131594][T28620] vfs_read+0x212/0xa80 [ 1577.131628][T28620] ? __pfx_vfs_read+0x10/0x10 [ 1577.131656][T28620] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1577.131680][T28620] ? lockdep_hardirqs_on+0x7a/0x110 [ 1577.131703][T28620] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1577.131725][T28620] ? mutex_lock_nested+0x152/0x1d0 [ 1577.131742][T28620] ? fdget_pos+0x252/0x320 [ 1577.131773][T28620] ksys_read+0x156/0x270 [ 1577.131801][T28620] ? __pfx_ksys_read+0x10/0x10 [ 1577.131837][T28620] do_syscall_64+0x14d/0xf80 [ 1577.131859][T28620] ? trace_irq_disable+0x3b/0x150 [ 1577.131881][T28620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.131900][T28620] ? clear_bhb_loop+0x40/0x90 [ 1577.131925][T28620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.131944][T28620] RIP: 0033:0x7fcfcb50d04e [ 1577.131962][T28620] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1577.131978][T28620] RSP: 002b:00007fcfc977cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1577.131999][T28620] RAX: ffffffffffffffda RBX: 00007fcfc977d6c0 RCX: 00007fcfcb50d04e [ 1577.132013][T28620] RDX: 000000000000000f RSI: 00007fcfc977d0a0 RDI: 0000000000000005 [ 1577.132025][T28620] RBP: 00007fcfc977d090 R08: 0000000000000000 R09: 0000000000000000 [ 1577.132038][T28620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1577.132049][T28620] R13: 00007fcfcb7c6128 R14: 00007fcfcb7c6090 R15: 00007fff77396708 [ 1577.132081][T28620] [ 1577.202941][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1577.294098][T28612] fido_id[28612]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1577.774571][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1578.910342][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1578.959190][T28665] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1579.016951][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1579.350569][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1579.534966][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1579.573224][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1579.599753][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1579.932272][T28694] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7312'. [ 1580.058369][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1580.181826][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1580.394961][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1581.669343][T28726] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7325'. [ 1582.816270][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1583.753204][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1583.888700][T28751] overlayfs: missing 'lowerdir' [ 1583.925699][T28752] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7335'. [ 1584.218564][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1584.396990][T28758] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7334'. [ 1585.134706][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1585.356707][T28764] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1585.415101][T17086] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1585.513847][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1585.582472][T17086] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1585.584173][T17086] usb 10-1: not running at top speed; connect to a high speed hub [ 1585.608530][T17086] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.608586][T17086] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1585.612201][T17086] usb 10-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 1585.612230][T17086] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.612252][T17086] usb 10-1: Product: syz [ 1585.612267][T17086] usb 10-1: Manufacturer: syz [ 1585.612281][T17086] usb 10-1: SerialNumber: syz [ 1586.433457][T17086] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1586.775871][T28777] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1586.901282][T17086] usb 10-1: USB disconnect, device number 11 [ 1587.411126][T28786] FAULT_INJECTION: forcing a failure. [ 1587.411126][T28786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1587.411165][T28786] CPU: 0 UID: 0 PID: 28786 Comm: syz.0.7345 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1587.411193][T28786] Tainted: [L]=SOFTLOCKUP [ 1587.411200][T28786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1587.411219][T28786] Call Trace: [ 1587.411227][T28786] [ 1587.411235][T28786] dump_stack_lvl+0xe8/0x150 [ 1587.411268][T28786] should_fail_ex+0x46b/0x600 [ 1587.411301][T28786] _copy_from_user+0x2d/0xb0 [ 1587.411323][T28786] ___sys_sendmsg+0x1c6/0x360 [ 1587.411352][T28786] ? __pfx____sys_sendmsg+0x10/0x10 [ 1587.411413][T28786] ? __fget_files+0x2a/0x420 [ 1587.411435][T28786] ? __fget_files+0x3a6/0x420 [ 1587.411467][T28786] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1587.411492][T28786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1587.411524][T28786] ? __pfx_ksys_write+0x10/0x10 [ 1587.411566][T28786] do_syscall_64+0x14d/0xf80 [ 1587.411587][T28786] ? trace_irq_disable+0x3b/0x150 [ 1587.411615][T28786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.411634][T28786] ? clear_bhb_loop+0x40/0x90 [ 1587.411658][T28786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.411678][T28786] RIP: 0033:0x7fcfcb54c819 [ 1587.411696][T28786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1587.411721][T28786] RSP: 002b:00007fcfc979e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1587.411741][T28786] RAX: ffffffffffffffda RBX: 00007fcfcb7c5fa0 RCX: 00007fcfcb54c819 [ 1587.411755][T28786] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1587.411768][T28786] RBP: 00007fcfc979e090 R08: 0000000000000000 R09: 0000000000000000 [ 1587.411780][T28786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1587.411793][T28786] R13: 00007fcfcb7c6038 R14: 00007fcfcb7c5fa0 R15: 00007fff77396708 [ 1587.411825][T28786] [ 1587.632066][ T6508] udevd[6508]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1587.687647][ T5913] udevd[5913]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1587.718458][ T6096] udevd[6096]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1588.392567][ T5913] udevd[5913]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1588.453457][T15409] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1588.576443][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1588.662320][T28795] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7349'. [ 1588.674301][T15409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1588.674334][T15409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1588.674373][T15409] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1588.674398][T15409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.677745][ T5913] udevd[5913]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1588.689888][T28789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1588.712098][T15409] usb 2-1: config 0 descriptor?? [ 1589.074746][T15409] ath6kl: Failed to submit usb control message: -71 [ 1589.074793][T15409] ath6kl: unable to send the bmi data to the device: -71 [ 1589.074810][T15409] ath6kl: Unable to send get target info: -71 [ 1589.111199][T15409] ath6kl: Failed to init ath6kl core: -71 [ 1589.638339][T15409] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1589.722664][T15409] usb 2-1: USB disconnect, device number 8 [ 1590.632074][ T6096] udevd[6096]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1590.652981][T28813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7356'. [ 1590.686775][ T5913] udevd[5913]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1591.126918][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1591.354984][T28828] netlink: 64 bytes leftover after parsing attributes in process `syz.9.7360'. [ 1591.398505][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1592.164572][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1592.294618][T28839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7364'. [ 1592.395162][T28841] netlink: 148 bytes leftover after parsing attributes in process `syz.8.7365'. [ 1592.435401][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1592.617763][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1593.301483][T28856] fuse: Bad value for 'fd' [ 1593.346674][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1593.764625][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1593.809441][T28864] bridge0: port 3(netdevsim0) entered blocking state [ 1593.809559][T28864] bridge0: port 3(netdevsim0) entered disabled state [ 1593.809778][T28864] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1593.812653][T28864] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1593.813554][T28864] bridge0: port 3(netdevsim0) entered blocking state [ 1593.813690][T28864] bridge0: port 3(netdevsim0) entered forwarding state [ 1593.846895][T28868] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7372'. [ 1593.893209][T28866] tipc: Enabled bearer , priority 0 [ 1593.894443][T28866] syzkaller0: entered promiscuous mode [ 1593.894466][T28866] syzkaller0: entered allmulticast mode [ 1594.534685][T28868] tipc: Resetting bearer [ 1594.643874][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1594.688604][T28865] tipc: Resetting bearer [ 1594.705150][ T37] audit: type=1800 audit(1776163518.796:2198): pid=28881 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.7376" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1594.911684][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1595.151123][T28865] tipc: Disabling bearer [ 1595.475171][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1595.510652][T28893] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7382'. [ 1595.815332][T28898] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7385'. [ 1596.771162][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1597.617979][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1598.009824][T28928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7392'. [ 1598.198367][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1598.567294][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1598.606102][T28941] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1598.791337][T28947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1599.189917][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1599.510350][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1599.749065][T17086] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1599.923340][T17086] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1599.923373][T17086] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1599.923417][T17086] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1599.923441][T17086] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.027248][T17086] usb 10-1: config 0 descriptor?? [ 1600.280986][T17086] ath6kl: Failed to submit usb control message: -71 [ 1600.281036][T17086] ath6kl: unable to send the bmi data to the device: -71 [ 1600.281051][T17086] ath6kl: Unable to send get target info: -71 [ 1600.311805][T17086] ath6kl: Failed to init ath6kl core: -71 [ 1600.313217][T17086] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1600.352662][T17086] usb 10-1: USB disconnect, device number 12 [ 1600.429684][ T5913] udevd[5913]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1600.553052][ T6096] udevd[6096]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1600.625292][T28973] program syz.1.7407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1600.760053][ T5880] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1600.911710][ T5880] usb 9-1: Using ep0 maxpacket: 32 [ 1600.917289][ T5880] usb 9-1: config 0 has an invalid interface number: 162 but max is 0 [ 1600.917315][ T5880] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.917336][ T5880] usb 9-1: config 0 has no interface number 0 [ 1600.955085][ T5880] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1600.955115][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.955135][ T5880] usb 9-1: Product: syz [ 1600.955150][ T5880] usb 9-1: Manufacturer: syz [ 1600.955165][ T5880] usb 9-1: SerialNumber: syz [ 1601.006096][ T5880] usb 9-1: config 0 descriptor?? [ 1601.027461][ T5880] usb 9-1: bad CDC descriptors [ 1601.029454][ T5880] usb 9-1: unsupported MDLM descriptors [ 1601.058173][T28344] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1601.094870][T28344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1601.097635][T28344] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1601.101445][T28344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1601.113788][T28344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1601.420800][ T5880] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1601.433297][ T5126] usb 9-1: USB disconnect, device number 44 [ 1601.639154][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.643531][ T5880] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1601.643559][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.643581][ T5880] usb 2-1: Product: syz [ 1601.643596][ T5880] usb 2-1: Manufacturer: syz [ 1601.643611][ T5880] usb 2-1: SerialNumber: syz [ 1601.685893][ T5880] usb 2-1: config 0 descriptor?? [ 1601.698062][ T5880] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1601.698111][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 1601.745924][ T5880] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1601.746771][ T5880] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1601.746824][ T5880] usb 2-1: media controller created [ 1601.748509][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1601.804492][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 1601.804580][ T5880] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1601.827112][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input222 [ 1601.829797][ T5880] dvb-usb: schedule remote query interval to 150 msecs. [ 1601.829852][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 1601.859598][ T5880] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1601.891739][T28979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1601.912152][T28979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1601.915148][ T5880] usb 2-1: USB disconnect, device number 9 [ 1602.006854][ T5880] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1602.157572][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1602.262145][T28984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1603.172785][T28344] Bluetooth: hci3: command tx timeout [ 1603.786947][ T6291] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.852015][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1603.944766][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1604.113269][T17086] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1604.614555][T17086] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1604.615285][T17086] usb 10-1: not running at top speed; connect to a high speed hub [ 1604.682903][T17086] usb 10-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 1604.682932][T17086] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1604.706677][T17086] usb 10-1: New USB device found, idVendor=04b4, idProduct=001d, bcdDevice= 0.00 [ 1604.706708][T17086] usb 10-1: New USB device strings: Mfr=128, Product=2, SerialNumber=3 [ 1604.706727][T17086] usb 10-1: Product: syz [ 1604.706741][T17086] usb 10-1: Manufacturer: syz [ 1604.706754][T17086] usb 10-1: SerialNumber: syz [ 1605.159482][T28344] Bluetooth: hci3: command tx timeout [ 1606.281840][ T6291] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.027249][T17086] usb 10-1: USB disconnect, device number 13 [ 1607.056381][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1607.121473][T28344] Bluetooth: hci3: command tx timeout [ 1607.230244][ T5913] udevd[5913]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1607.308622][T29027] netlink: 148 bytes leftover after parsing attributes in process `syz.9.7425'. [ 1607.431728][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1607.652544][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1607.836725][ T6291] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.957557][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1608.399219][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1608.610955][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1608.708331][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1608.829423][ T6291] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.931995][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1608.978367][T29066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1609.102487][T28344] Bluetooth: hci3: command tx timeout [ 1609.268264][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1609.295496][T28974] chnl_net:caif_netlink_parms(): no params data found [ 1609.946548][ T5913] udevd[5913]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1609.992680][T28974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.992801][T28974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.993031][T28974] bridge_slave_0: entered allmulticast mode [ 1609.995555][T28974] bridge_slave_0: entered promiscuous mode [ 1610.129711][T28974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.129833][T28974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.130043][T28974] bridge_slave_1: entered allmulticast mode [ 1610.149140][T28974] bridge_slave_1: entered promiscuous mode [ 1610.211995][ T6291] bridge_slave_1: left allmulticast mode [ 1610.212024][ T6291] bridge_slave_1: left promiscuous mode [ 1610.212255][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.261022][T29089] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7441'. [ 1610.275889][ T6291] bridge_slave_0: left allmulticast mode [ 1610.275916][ T6291] bridge_slave_0: left promiscuous mode [ 1610.276247][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.281377][T29101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1612.053200][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1613.639212][ T6291] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 1613.790617][ T6291] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1613.827728][ T6291] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1613.848681][ T6291] .` (unregistering): Released all slaves [ 1613.858023][ T6291] bond1 (unregistering): Released all slaves [ 1614.190468][T28974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.207943][T28974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.388798][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1614.465375][T28974] team0: Port device team_slave_0 added [ 1614.996087][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1615.098720][T28974] team0: Port device team_slave_1 added [ 1615.235391][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1615.252106][T28974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.252123][T28974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.252157][T28974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1615.254342][T28974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1615.254356][T28974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.254382][T28974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1615.421835][T28974] hsr_slave_0: entered promiscuous mode [ 1615.423181][T28974] hsr_slave_1: entered promiscuous mode [ 1615.424169][T28974] debugfs: 'hsr0' already exists in 'hsr' [ 1615.424194][T28974] Cannot create hsr debugfs directory [ 1615.534842][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1615.964473][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1616.364355][T29145] netlink: 'syz.1.7460': attribute type 4 has an invalid length. [ 1616.364373][T29145] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.7460'. [ 1616.401056][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1616.477462][T29148] netlink: 148 bytes leftover after parsing attributes in process `syz.8.7461'. [ 1616.568940][T15409] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1616.583369][ T6291] hsr_slave_0: left promiscuous mode [ 1616.644756][ T6291] hsr_slave_1: left promiscuous mode [ 1616.712674][T15409] usb 10-1: Using ep0 maxpacket: 32 [ 1616.730754][T15409] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 1616.734005][T15409] usb 10-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 1616.734040][T15409] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.734061][T15409] usb 10-1: Product: 㠊 [ 1616.734075][T15409] usb 10-1: Manufacturer:   [ 1616.734089][T15409] usb 10-1: SerialNumber: 摇뫱鞫訿ј㾩姝⽴ꖯӊ蝹꓈඘廂焷般臈 [ 1616.869195][ T6291] veth1_macvtap: left promiscuous mode [ 1616.869687][ T6291] veth0_macvtap: left allmulticast mode [ 1616.870253][ T6291] veth0_macvtap: left promiscuous mode [ 1616.871372][ T6291] veth1_vlan: left promiscuous mode [ 1616.872591][ T6291] veth0_vlan: left promiscuous mode [ 1617.951560][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1618.012764][T29165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7462'. [ 1618.012791][T29165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7462'. [ 1618.197486][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1618.391399][ T6291] team0 (unregistering): Port device team_slave_1 removed [ 1618.410164][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1618.542774][ T6291] team0 (unregistering): Port device team_slave_0 removed [ 1618.613644][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1619.050984][ T6291] team0 (unregistering): Port device dummy0 removed [ 1619.216826][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1619.236232][T29178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7468'. [ 1619.236250][T29178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7468'. [ 1619.236328][T29178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7468'. [ 1619.236344][T29178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7468'. [ 1619.367979][T15409] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 1619.491376][T15409] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1619.551478][T15409] usb 10-1: USB disconnect, device number 14 [ 1619.844053][ T5918] udevd[5918]: symlink '../../loop5' '/dev/disk/by-diskseq/97.tmp-b7:5' failed: Read-only file system [ 1619.871134][ T6507] udevd[6507]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1619.891376][ T6508] udevd[6508]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1621.312081][ T5913] udevd[5913]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1621.705125][T29208] netlink: 148 bytes leftover after parsing attributes in process `syz.9.7478'. [ 1621.845726][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1622.446255][ T6291] IPVS: stop unused estimator thread 0... [ 1622.786942][T29224] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7483'. [ 1622.795594][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1623.167372][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1623.281572][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1623.281642][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1623.446574][ T37] audit: type=1326 audit(1776163548.939:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29223 comm="syz.9.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d5cc819 code=0x7ffc0000 [ 1623.446709][ T37] audit: type=1326 audit(1776163548.939:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29223 comm="syz.9.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d5cc819 code=0x7ffc0000 [ 1623.446750][ T37] audit: type=1326 audit(1776163548.939:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29223 comm="syz.9.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d5cc819 code=0x7ffc0000 [ 1623.446789][ T37] audit: type=1326 audit(1776163548.939:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29223 comm="syz.9.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d5cc819 code=0x7ffc0000 [ 1623.446827][ T37] audit: type=1326 audit(1776163548.939:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29223 comm="syz.9.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fb72d5cc819 code=0x7ffc0000 [ 1623.446866][ T37] audit: type=1326 audit(1776163548.939:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29223 comm="syz.9.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d5cc819 code=0x7ffc0000 [ 1623.446908][ T37] audit: type=1326 audit(1776163548.939:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29223 comm="syz.9.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d5cc819 code=0x7ffc0000 [ 1623.446947][ T37] audit: type=1326 audit(1776163548.939:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29223 comm="syz.9.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d5cc819 code=0x7ffc0000 [ 1623.446989][ T37] audit: type=1326 audit(1776163548.939:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29223 comm="syz.9.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d5cc819 code=0x7ffc0000 [ 1623.447028][ T37] audit: type=1326 audit(1776163548.939:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29223 comm="syz.9.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb72d5cc819 code=0x7ffc0000 [ 1623.548150][ T5859] IPVS: starting estimator thread 0... [ 1623.555061][T29238] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1623.556806][T29238] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20002 [ 1623.621919][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1623.646616][T29240] IPVS: using max 8 ests per chain, 19200 per kthread [ 1623.754098][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1624.748549][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1624.944780][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1625.085282][T29265] netlink: 148 bytes leftover after parsing attributes in process `syz.8.7490'. [ 1625.314163][T29273] netlink: 84 bytes leftover after parsing attributes in process `syz.9.7492'. [ 1625.406878][T29277] overlay: Unknown parameter 'seclabel' [ 1625.459398][T29273] overlayfs: missing 'lowerdir' [ 1625.459593][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1625.920803][T29285] overlayfs: workdir and upperdir must reside under the same mount [ 1626.144337][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1626.197030][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1626.211047][T29289] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1626.214085][T29289] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20002 [ 1626.268046][T28974] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1626.318567][T28974] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1626.379983][T28974] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1626.567965][T28974] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1626.640133][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1626.703690][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1626.780061][T15409] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1626.925137][T15409] usb 10-1: Using ep0 maxpacket: 16 [ 1626.940851][T15409] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1626.940886][T15409] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1626.993288][T17086] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1627.007869][T15409] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1627.007975][T15409] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.007997][T15409] usb 10-1: Product: syz [ 1627.008011][T15409] usb 10-1: Manufacturer: syz [ 1627.008026][T15409] usb 10-1: SerialNumber: syz [ 1627.072879][T15409] usb 10-1: config 0 descriptor?? [ 1627.097212][T15409] em28xx 10-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1627.132681][T17086] usb 9-1: Using ep0 maxpacket: 16 [ 1627.134908][T17086] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1627.135979][T17086] usb 9-1: config 8 has an invalid interface number: 111 but max is 0 [ 1627.136003][T17086] usb 9-1: config 8 has no interface number 0 [ 1627.136034][T17086] usb 9-1: config 8 interface 111 has no altsetting 0 [ 1627.139138][T17086] usb 9-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=c5.04 [ 1627.139164][T17086] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.139183][T17086] usb 9-1: Product: syz [ 1627.139197][T17086] usb 9-1: Manufacturer: syz [ 1627.139210][T17086] usb 9-1: SerialNumber: syz [ 1627.177887][ T6007] udevd[6007]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1627.432753][T17086] kaweth 9-1:8.111: couldn't find required endpoints [ 1627.439963][T28974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1627.486459][T17086] usb 9-1: USB disconnect, device number 45 [ 1627.554986][T28974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1627.581860][ T6408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.583381][ T6408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1627.617882][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.625472][ T6409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1628.357006][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1628.549719][T29342] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1628.571097][T29342] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20002 [ 1628.571236][T15409] IPVS: starting estimator thread 0... [ 1628.656730][T29346] IPVS: using max 7 ests per chain, 16800 per kthread [ 1628.844220][T28974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1629.125481][T28974] veth0_vlan: entered promiscuous mode [ 1629.165877][T28974] veth1_vlan: entered promiscuous mode [ 1629.393693][T28974] veth0_macvtap: entered promiscuous mode [ 1629.595526][T15409] usb 10-1: USB disconnect, device number 15 [ 1629.780736][T28974] veth1_macvtap: entered promiscuous mode [ 1629.975243][T28974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1630.033026][T28974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1630.096839][T25784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.103242][T25784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.103275][T25784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.103295][T25784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.225463][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1630.961405][T15409] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1630.964260][T29381] program syz.9.7515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1631.007775][ T6409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.007796][ T6409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.104750][T15409] usb 2-1: Using ep0 maxpacket: 16 [ 1631.109285][T15409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.109318][T15409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.109340][T15409] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1631.109383][T15409] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1631.109405][T15409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.180520][T15409] usb 2-1: config 0 descriptor?? [ 1631.276859][ T6408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.276881][ T6408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.603979][T15409] usbhid 2-1:0.0: can't add hid device: -71 [ 1631.604104][T15409] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1631.666214][T15409] usb 2-1: USB disconnect, device number 10 [ 1631.897206][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1631.923833][ T6096] udevd[6096]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1631.999742][ T5859] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1632.079563][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1632.142541][ T5859] usb 9-1: Using ep0 maxpacket: 8 [ 1632.157467][ T5859] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.157526][ T5859] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1632.157550][ T5859] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.173153][ T5859] usb 9-1: config 0 descriptor?? [ 1632.197333][ T5859] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1632.554682][T29401] random: crng reseeded on system resumption [ 1633.257629][ T5859] gspca_vc032x: reg_w err -110 [ 1633.257729][ T5859] vc032x 9-1:0.0: probe with driver vc032x failed with error -110 [ 1633.453761][T29390] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7517'. [ 1633.453800][T29390] netlink: 'syz.8.7517': attribute type 1 has an invalid length. [ 1633.508015][T29390] hpfs: Bad magic ... probably not HPFS [ 1633.552926][ T5126] usb 9-1: USB disconnect, device number 46 [ 1633.573915][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1633.811707][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1634.411834][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1634.614445][T29428] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7528'. [ 1635.784067][T22095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1635.820207][T22095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1635.841814][T22095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1635.846091][T22095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1635.874005][T22095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1636.467514][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1636.603420][T29440] FAULT_INJECTION: forcing a failure. [ 1636.603420][T29440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1636.603464][T29440] CPU: 1 UID: 0 PID: 29440 Comm: syz.1.7532 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1636.603523][T29440] Tainted: [L]=SOFTLOCKUP [ 1636.603540][T29440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1636.603566][T29440] Call Trace: [ 1636.603583][T29440] [ 1636.603602][T29440] dump_stack_lvl+0xe8/0x150 [ 1636.603662][T29440] should_fail_ex+0x46b/0x600 [ 1636.603732][T29440] _copy_from_iter+0x3b0/0x1670 [ 1636.603815][T29440] ? __pfx__copy_from_iter+0x10/0x10 [ 1636.603861][T29440] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1636.603884][T29440] ? lockdep_hardirqs_on+0x7a/0x110 [ 1636.603906][T29440] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1636.603928][T29440] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1636.603945][T29440] ? reacquire_held_locks+0x104/0x190 [ 1636.603964][T29440] ? skb_put+0x11b/0x210 [ 1636.603988][T29440] bt_skb_sendmsg+0x34a/0x5d0 [ 1636.604014][T29440] ? __pfx_bt_skb_sendmsg+0x10/0x10 [ 1636.604042][T29440] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1636.604067][T29440] ? lockdep_hardirqs_on+0x7a/0x110 [ 1636.604094][T29440] rfcomm_sock_sendmsg+0x2ac/0x470 [ 1636.604118][T29440] ? __pfx_rfcomm_sock_sendmsg+0x10/0x10 [ 1636.604137][T29440] sock_write_iter+0x4a1/0x4f0 [ 1636.604165][T29440] ? __pfx_sock_write_iter+0x10/0x10 [ 1636.604214][T29440] do_iter_readv_writev+0x62b/0x8d0 [ 1636.604238][T29440] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1636.604266][T29440] ? rw_verify_area+0x25b/0x4e0 [ 1636.604296][T29440] vfs_writev+0x345/0x9a0 [ 1636.604326][T29440] ? __pfx_vfs_writev+0x10/0x10 [ 1636.604362][T29440] ? __fget_files+0x2a/0x420 [ 1636.604389][T29440] ? __fget_files+0x3a6/0x420 [ 1636.604411][T29440] ? __fget_files+0x2a/0x420 [ 1636.604442][T29440] do_writev+0x15a/0x2e0 [ 1636.604465][T29440] ? __pfx_do_writev+0x10/0x10 [ 1636.604498][T29440] do_syscall_64+0x14d/0xf80 [ 1636.604520][T29440] ? trace_irq_disable+0x3b/0x150 [ 1636.604541][T29440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.604560][T29440] ? clear_bhb_loop+0x40/0x90 [ 1636.604584][T29440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.604603][T29440] RIP: 0033:0x7f803a57c819 [ 1636.604621][T29440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1636.604638][T29440] RSP: 002b:00007f80387ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1636.604659][T29440] RAX: ffffffffffffffda RBX: 00007f803a7f5fa0 RCX: 00007f803a57c819 [ 1636.604674][T29440] RDX: 0000000000000002 RSI: 0000200000019880 RDI: 0000000000000004 [ 1636.604686][T29440] RBP: 00007f80387ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.604699][T29440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.604711][T29440] R13: 00007f803a7f6038 R14: 00007f803a7f5fa0 R15: 00007ffe83ee0308 [ 1636.604742][T29440] [ 1636.719748][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1637.042319][T29445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7534'. [ 1637.042336][T29445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7534'. [ 1637.375737][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1637.469843][T29454] netlink: 'syz.1.7535': attribute type 2 has an invalid length. [ 1637.666590][ T5126] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 1637.814931][ T5126] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1637.815405][ T5126] usb 9-1: not running at top speed; connect to a high speed hub [ 1637.816364][ T5126] usb 9-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 1637.816379][ T5126] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1637.818282][ T5126] usb 9-1: New USB device found, idVendor=04b4, idProduct=001d, bcdDevice= 0.00 [ 1637.818298][ T5126] usb 9-1: New USB device strings: Mfr=128, Product=2, SerialNumber=3 [ 1637.818309][ T5126] usb 9-1: Product: syz [ 1637.818317][ T5126] usb 9-1: Manufacturer: syz [ 1637.818325][ T5126] usb 9-1: SerialNumber: syz [ 1637.982288][T28344] Bluetooth: hci1: command tx timeout [ 1639.962064][T28344] Bluetooth: hci1: command tx timeout [ 1640.636112][ T5126] usb 9-1: USB disconnect, device number 47 [ 1640.804484][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1640.882524][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1640.930016][T29464] dlm: plock device version mismatch: kernel (1.2.0), user (1.512.4194304) [ 1641.132192][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1641.187846][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1641.478198][ T5126] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1641.621276][ T5126] usb 3-1: Using ep0 maxpacket: 8 [ 1641.627491][ T5126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1641.651011][ T5126] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1641.651041][ T5126] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1641.651062][ T5126] usb 3-1: Product: syz [ 1641.651077][ T5126] usb 3-1: Manufacturer: syz [ 1641.651092][ T5126] usb 3-1: SerialNumber: syz [ 1641.655618][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1641.943184][T28344] Bluetooth: hci1: command tx timeout [ 1641.968819][T29485] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7543'. [ 1641.986626][ T5126] usb 3-1: palm_os_3_probe - error -32 getting connection information [ 1641.986734][ T5126] visor 3-1:1.0: probe with driver visor failed with error -32 [ 1642.002976][T29487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.014416][T29487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.136344][ T5880] usb 3-1: USB disconnect, device number 64 [ 1642.311883][T29485] ipvlan2: entered allmulticast mode [ 1642.312334][ T6007] udevd[6007]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1642.312963][T29485] syz_tun: entered allmulticast mode [ 1642.538947][T29495] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7545'. [ 1642.588669][T29493] FAULT_INJECTION: forcing a failure. [ 1642.588669][T29493] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.588706][T29493] CPU: 0 UID: 0 PID: 29493 Comm: syz.2.7544 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1642.588722][T29493] Tainted: [L]=SOFTLOCKUP [ 1642.588726][T29493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1642.588733][T29493] Call Trace: [ 1642.588738][T29493] [ 1642.588743][T29493] dump_stack_lvl+0xe8/0x150 [ 1642.588781][T29493] should_fail_ex+0x46b/0x600 [ 1642.588813][T29493] should_failslab+0xa8/0x100 [ 1642.588835][T29493] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1642.588862][T29493] ? __alloc_skb+0x1d0/0x7d0 [ 1642.588876][T29493] ? lockdep_hardirqs_on+0x7a/0x110 [ 1642.588893][T29493] __alloc_skb+0x1d0/0x7d0 [ 1642.588904][T29493] ? netlink_ack_tlv_len+0x6c/0x210 [ 1642.588916][T29493] netlink_ack+0x146/0xa50 [ 1642.588924][T29493] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1642.588934][T29493] ? ref_tracker_free+0x673/0x820 [ 1642.588949][T29493] ? __copy_skb_header+0xa3/0x4a0 [ 1642.588976][T29493] ? __pfx_ref_tracker_free+0x10/0x10 [ 1642.588991][T29493] ? __skb_clone+0x63/0x7a0 [ 1642.589008][T29493] netlink_rcv_skb+0x2b6/0x4b0 [ 1642.589019][T29493] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1642.589030][T29493] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1642.589046][T29493] ? netlink_deliver_tap+0x2e/0x1b0 [ 1642.589060][T29493] netlink_unicast+0x831/0x9f0 [ 1642.589083][T29493] ? __pfx_netlink_unicast+0x10/0x10 [ 1642.589099][T29493] ? netlink_sendmsg+0x650/0xb40 [ 1642.589109][T29493] ? skb_put+0x11b/0x210 [ 1642.589122][T29493] netlink_sendmsg+0x813/0xb40 [ 1642.589137][T29493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1642.589149][T29493] ? unwind_get_return_address+0x4d/0x90 [ 1642.589162][T29493] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1642.589180][T29493] ____sys_sendmsg+0x94c/0x9c0 [ 1642.589197][T29493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1642.589215][T29493] ? import_iovec+0x73/0xa0 [ 1642.589228][T29493] ___sys_sendmsg+0x2a5/0x360 [ 1642.589244][T29493] ? __pfx____sys_sendmsg+0x10/0x10 [ 1642.589274][T29493] ? __fget_files+0x2a/0x420 [ 1642.589287][T29493] ? __fget_files+0x3a6/0x420 [ 1642.589305][T29493] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1642.589319][T29493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1642.589337][T29493] ? __pfx_ksys_write+0x10/0x10 [ 1642.589356][T29493] ? __secure_computing+0xe1/0x2a0 [ 1642.589374][T29493] do_syscall_64+0x14d/0xf80 [ 1642.589386][T29493] ? trace_irq_disable+0x3b/0x150 [ 1642.589399][T29493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.589409][T29493] ? clear_bhb_loop+0x40/0x90 [ 1642.589422][T29493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.589433][T29493] RIP: 0033:0x7fb9da23c819 [ 1642.589444][T29493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1642.589453][T29493] RSP: 002b:00007fb9d8496028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1642.589466][T29493] RAX: ffffffffffffffda RBX: 00007fb9da4b5fa0 RCX: 00007fb9da23c819 [ 1642.589474][T29493] RDX: 0000000000008018 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1642.589481][T29493] RBP: 00007fb9d8496090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.589488][T29493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1642.589494][T29493] R13: 00007fb9da4b6038 R14: 00007fb9da4b5fa0 R15: 00007ffe611d0da8 [ 1642.589510][T29493] [ 1643.043131][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1643.164646][T29500] netlink: 'syz.2.7546': attribute type 3 has an invalid length. [ 1643.391877][ T5859] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1643.582930][ T5880] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1643.590519][ T5859] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1643.590555][ T5859] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1643.631598][ T5859] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1643.631628][ T5859] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1643.631649][ T5859] usb 3-1: Manufacturer: syz [ 1643.631664][ T5859] usb 3-1: SerialNumber: syz [ 1643.743534][ T5880] usb 10-1: Using ep0 maxpacket: 16 [ 1643.746029][ T5880] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1643.746048][ T5880] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1643.749329][ T5880] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1643.749346][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.749358][ T5880] usb 10-1: Product: syz [ 1643.749419][ T5880] usb 10-1: Manufacturer: syz [ 1643.749428][ T5880] usb 10-1: SerialNumber: syz [ 1643.827557][ T5880] usb 10-1: config 0 descriptor?? [ 1643.892888][ T5880] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1643.892924][ T5880] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1643.924247][T28344] Bluetooth: hci1: command tx timeout [ 1643.942431][ T5859] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 1643.954832][ T5859] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input223 [ 1643.961391][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1643.961638][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1643.961859][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1643.962079][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1643.962399][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1643.962628][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1643.962869][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1643.963089][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1643.963108][ C1] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1644.055876][ T5859] usb 3-1: USB disconnect, device number 65 [ 1644.345301][T29427] chnl_net:caif_netlink_parms(): no params data found [ 1644.482301][ T5880] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1644.483117][ T5880] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1644.485601][ T5880] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1644.485615][ T5880] em28xx 10-1:0.0: No AC97 audio processor [ 1644.634023][ T6007] udevd[6007]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1644.903139][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1645.042509][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1645.163882][T29427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.164063][T29427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.164288][T29427] bridge_slave_0: entered allmulticast mode [ 1645.167947][T29427] bridge_slave_0: entered promiscuous mode [ 1645.216693][T29427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.216813][T29427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.216998][T29427] bridge_slave_1: entered allmulticast mode [ 1645.239986][T29427] bridge_slave_1: entered promiscuous mode [ 1645.342156][T29427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1645.370625][T29427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.429608][ T12] bridge_slave_1: left allmulticast mode [ 1645.429632][ T12] bridge_slave_1: left promiscuous mode [ 1645.429809][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.517468][ T5913] udevd[5913]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1645.538352][ T12] bridge_slave_0: left allmulticast mode [ 1645.538371][ T12] bridge_slave_0: left promiscuous mode [ 1645.538524][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.547868][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1646.275982][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1646.299023][T15866] usb 10-1: USB disconnect, device number 16 [ 1646.300310][T15866] em28xx 10-1:0.0: Disconnecting em28xx [ 1646.340938][T15866] em28xx 10-1:0.0: Freeing device [ 1646.495319][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1647.681553][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1648.794467][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1650.468498][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1650.538498][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.574019][ T12] bond0 (unregistering): Released all slaves [ 1651.665879][T29536] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7555'. [ 1651.665911][T29536] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7555'. [ 1651.710550][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1651.774634][T29427] team0: Port device team_slave_0 added [ 1651.948557][T29427] team0: Port device team_slave_1 added [ 1651.991784][ T5859] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1652.153433][ T5859] usb 9-1: Using ep0 maxpacket: 16 [ 1652.156733][ T5859] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1652.156764][ T5859] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1652.159260][ T5859] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1652.159286][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.159305][ T5859] usb 9-1: Product: syz [ 1652.159313][ T5859] usb 9-1: Manufacturer: syz [ 1652.159321][ T5859] usb 9-1: SerialNumber: syz [ 1652.173276][ T5859] usb 9-1: config 0 descriptor?? [ 1653.021640][ T5859] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1653.021662][ T5859] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1653.478511][T29427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1653.478539][T29427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.478565][T29427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1653.629837][ T5126] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1653.646990][ T5859] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1653.647603][ T5859] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1653.648330][ T5859] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1653.648347][ T5859] em28xx 9-1:0.0: No AC97 audio processor [ 1653.691062][T29588] vlan2: entered allmulticast mode [ 1653.691076][T29588] veth0_to_bond: entered allmulticast mode [ 1653.714058][T29427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1653.714076][T29427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.714103][T29427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1653.852894][ T5126] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1653.852962][ T5126] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1653.852986][ T5126] usb 10-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1653.852998][ T5126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.894255][ T5126] usb 10-1: config 0 descriptor?? [ 1653.895041][T29591] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1654.011025][ T12] hsr_slave_0: left promiscuous mode [ 1654.049269][ T12] hsr_slave_1: left promiscuous mode [ 1654.051300][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1654.108760][T29588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1654.109297][T29588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1654.244377][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1654.488860][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1654.622731][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1654.712147][ T5880] usb 9-1: USB disconnect, device number 48 [ 1654.721203][ T5880] em28xx 9-1:0.0: Disconnecting em28xx [ 1654.748642][ T5880] em28xx 9-1:0.0: Freeing device [ 1654.801903][T15409] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1654.850846][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1654.944127][T15409] usb 3-1: Using ep0 maxpacket: 32 [ 1654.949257][T15409] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1654.949291][T15409] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1654.949356][T15409] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1654.998488][T15409] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1654.998625][T15409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.998646][T15409] usb 3-1: Product: syz [ 1654.998660][T15409] usb 3-1: Manufacturer: syz [ 1654.998730][T15409] usb 3-1: SerialNumber: syz [ 1655.069954][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1655.071629][T15409] usb 3-1: config 0 descriptor?? [ 1655.073586][T29601] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1655.140017][T15409] hub 3-1:0.0: bad descriptor, ignoring hub [ 1655.140268][T15409] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1655.190880][T15409] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input225 [ 1655.440271][ T5859] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 1655.589758][ T5859] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1655.590656][ T5859] usb 9-1: not running at top speed; connect to a high speed hub [ 1655.609101][ T5859] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.609158][ T5859] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1655.640224][ T5859] usb 9-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 1655.640255][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.640276][ T5859] usb 9-1: Product: syz [ 1655.640290][ T5859] usb 9-1: Manufacturer: syz [ 1655.640305][ T5859] usb 9-1: SerialNumber: syz [ 1656.099893][ T5859] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1656.185375][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1656.364011][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1656.515061][ T5859] usb 9-1: USB disconnect, device number 49 [ 1656.795950][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1656.873504][ T6507] udevd[6507]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1657.315725][ T5859] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1657.473624][ T5859] usb 9-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 1657.473652][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.474006][ T5859] usb 9-1: Product: Љ [ 1657.474022][ T5859] usb 9-1: Manufacturer: 㡙 [ 1657.474038][ T5859] usb 9-1: SerialNumber:  [ 1657.564044][ T5126] usbhid 10-1:0.0: can't add hid device: -71 [ 1657.566958][ T5126] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1657.733729][ T5126] usb 10-1: USB disconnect, device number 17 [ 1657.802366][ T5859] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1657.805462][ T5859] usb 9-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1657.805488][ T5859] usb 9-1: found format II with max.bitrate = 2679, frame size=0 [ 1657.805508][ T5859] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1657.968617][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1657.969762][T15409] usb 3-1: USB disconnect, device number 66 [ 1658.038195][ T5859] usb 9-1: USB disconnect, device number 50 [ 1658.075601][T29620] IPv6: addrconf: prefix option has invalid lifetime [ 1658.140605][T29622] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7576'. [ 1658.914334][ T6007] udevd[6007]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1659.063128][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1659.199787][ T6007] udevd[6007]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1659.217293][T29629] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1659.264753][T29427] hsr_slave_0: entered promiscuous mode [ 1659.324462][ T6508] udevd[6508]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1659.352116][T29427] hsr_slave_1: entered promiscuous mode [ 1659.677791][T15409] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1659.687519][ T5859] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1659.841877][ T5859] usb 9-1: Using ep0 maxpacket: 16 [ 1659.851239][T15409] usb 3-1: Using ep0 maxpacket: 16 [ 1659.853413][T15409] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.853443][T15409] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1659.853466][T15409] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1659.853506][T15409] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1659.853529][T15409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.863370][T15409] usb 3-1: config 0 descriptor?? [ 1659.900468][ T5859] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.900496][ T5859] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1659.940018][T17086] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1659.952180][ T5859] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1659.952213][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.952234][ T5859] usb 9-1: Product: syz [ 1659.952248][ T5859] usb 9-1: Manufacturer: syz [ 1659.952264][ T5859] usb 9-1: SerialNumber: syz [ 1660.092223][T17086] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1660.093210][T17086] usb 2-1: not running at top speed; connect to a high speed hub [ 1660.125438][T17086] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.125554][T17086] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1660.129456][T17086] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 1660.129488][T17086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.129558][T17086] usb 2-1: Product: syz [ 1660.129574][T17086] usb 2-1: Manufacturer: syz [ 1660.129587][T17086] usb 2-1: SerialNumber: syz [ 1660.220868][ T5859] usb 9-1: 0:2 : does not exist [ 1660.221035][ T5859] usb 9-1: unit 9 not found! [ 1660.240985][ T5859] usb 9-1: 4:0: cannot get min/max values for control 9 (id 4) [ 1660.301700][ T5859] usb 9-1: 4:0: cannot get min/max values for control 10 (id 4) [ 1660.457102][ T5859] usb 9-1: USB disconnect, device number 51 [ 1660.489756][T15409] input: HID 0955:7214 Haptics as /devices/virtual/input/input226 [ 1660.722789][T17086] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1660.854084][ T12] IPVS: stop unused estimator thread 0... [ 1661.009319][T15409] shield 0003:0955:7214.0048: Registered Thunderstrike controller [ 1661.009801][T15409] shield 0003:0955:7214.0048: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1661.067309][ T5126] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1661.067693][ T5126] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1661.067997][ T5126] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1661.070287][ T5126] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1661.115415][T15409] usb 3-1: USB disconnect, device number 67 [ 1661.246236][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1661.266779][T17086] usb 2-1: USB disconnect, device number 11 [ 1661.282973][ T37] kauditd_printk_skb: 86 callbacks suppressed [ 1661.282988][ T37] audit: type=1326 audit(1776163588.679:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29655 comm="syz.1.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803a57c819 code=0x7ffc0000 [ 1661.283017][ T37] audit: type=1326 audit(1776163588.679:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29655 comm="syz.1.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803a57c819 code=0x7ffc0000 [ 1661.316849][ T37] audit: type=1326 audit(1776163588.731:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29655 comm="syz.1.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f803a57c819 code=0x7ffc0000 [ 1661.316897][ T37] audit: type=1326 audit(1776163588.731:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29655 comm="syz.1.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803a57c819 code=0x7ffc0000 [ 1661.316936][ T37] audit: type=1326 audit(1776163588.731:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29655 comm="syz.1.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803a57c819 code=0x7ffc0000 [ 1661.324351][ T37] audit: type=1326 audit(1776163588.731:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29655 comm="syz.1.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f803a57c819 code=0x7ffc0000 [ 1661.324399][ T37] audit: type=1326 audit(1776163588.731:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29655 comm="syz.1.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803a57c819 code=0x7ffc0000 [ 1661.324437][ T37] audit: type=1326 audit(1776163588.731:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29655 comm="syz.1.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803a57c819 code=0x7ffc0000 [ 1661.330802][ T37] audit: type=1326 audit(1776163588.742:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29655 comm="syz.1.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f803a57c819 code=0x7ffc0000 [ 1661.396307][ T37] audit: type=1326 audit(1776163588.815:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29655 comm="syz.1.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803a57c819 code=0x7ffc0000 [ 1661.459290][ T5880] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1661.598634][ T6096] udevd[6096]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1661.635712][ T5880] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1661.635742][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.635761][ T5880] usb 10-1: Product: syz [ 1661.635776][ T5880] usb 10-1: Manufacturer: syz [ 1661.635790][ T5880] usb 10-1: SerialNumber: syz [ 1661.693407][ T6096] udevd[6096]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1661.769698][ T6507] udevd[6507]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1661.802826][ T5880] usb 10-1: config 0 descriptor?? [ 1662.985857][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1663.423918][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1663.478218][ T5880] usb 10-1: Firmware version (0.0) predates our first public release. [ 1663.478245][ T5880] usb 10-1: Please update to version 0.2 or newer [ 1663.550187][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1663.571207][ T5913] udevd[5913]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1663.661894][T29688] sctp: [Deprecated]: syz.9.7585 (pid 29688) Use of int in maxseg socket option. [ 1663.661894][T29688] Use struct sctp_assoc_value instead [ 1664.754133][ T5880] usb 10-1: USB disconnect, device number 18 [ 1664.901543][ T6508] udevd[6508]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1665.107806][T17086] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1665.144896][ T6007] udevd[6007]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1665.198732][ T9] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1665.294689][ T6096] udevd[6096]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1665.319964][T17086] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1665.320674][T17086] usb 2-1: not running at top speed; connect to a high speed hub [ 1665.322133][T17086] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.322185][T17086] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1665.324218][T17086] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 1665.324241][T17086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.324259][T17086] usb 2-1: Product: syz [ 1665.324270][T17086] usb 2-1: Manufacturer: syz [ 1665.324283][T17086] usb 2-1: SerialNumber: syz [ 1665.339538][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1665.404979][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1665.405013][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1665.405035][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1665.405153][ T9] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1665.405176][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.410609][ T9] usb 9-1: config 0 descriptor?? [ 1665.649856][ T5880] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1665.813787][ T5880] usb 10-1: Using ep0 maxpacket: 32 [ 1665.818762][ T5880] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1665.818789][ T5880] usb 10-1: config 0 has no interface number 0 [ 1665.818834][ T5880] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1665.825028][ T5880] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1665.825057][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.825079][ T5880] usb 10-1: Product: syz [ 1665.825095][ T5880] usb 10-1: Manufacturer: syz [ 1665.825110][ T5880] usb 10-1: SerialNumber: syz [ 1665.908603][T17086] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1665.934176][ T5880] usb 10-1: config 0 descriptor?? [ 1665.962123][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input227 [ 1666.153831][ T9] shield 0003:0955:7214.0049: Registered Thunderstrike controller [ 1666.156682][ T9] shield 0003:0955:7214.0049: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 1666.223716][T15409] shield 0003:0955:7214.0049: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1666.225295][T15409] shield 0003:0955:7214.0049: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1666.226902][T15409] shield 0003:0955:7214.0049: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1666.227394][T15409] shield 0003:0955:7214.0049: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1666.247225][ T9] usb 9-1: USB disconnect, device number 52 [ 1666.325529][T17086] usb 2-1: USB disconnect, device number 12 [ 1666.494933][T29718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1666.532531][T29718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.670140][T29721] program syz.1.7601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1667.220773][ T5880] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1667.220819][ T5880] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1667.220836][ T5880] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1667.220917][ T5880] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1668.212086][ T5880] usb 10-1: USB disconnect, device number 19 [ 1669.310060][ T6096] udevd[6096]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1669.444654][ T5918] udevd[5918]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1669.446358][ T6007] udevd[6007]: symlink '../../loop8' '/dev/disk/by-diskseq/100.tmp-b7:8' failed: Read-only file system [ 1669.537194][T29427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1669.573396][T29427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1669.585333][ T6096] udevd[6096]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1669.619109][T29427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1669.734843][ T6007] udevd[6007]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1669.836260][T29427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1670.203975][ T9] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1670.585201][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1670.585849][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 1670.587186][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.587227][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1670.589005][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 1670.589020][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.589037][ T9] usb 3-1: Product: syz [ 1670.589045][ T9] usb 3-1: Manufacturer: syz [ 1670.589052][ T9] usb 3-1: SerialNumber: syz [ 1670.921105][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1671.154908][ T9] usb 3-1: USB disconnect, device number 68 [ 1672.310865][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1672.498005][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1673.645645][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1673.874938][T29427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1673.943570][T29427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1673.971610][T16868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.971815][T16868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1673.974423][T28145] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1674.010463][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.024125][ T7194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1674.117493][T28145] usb 3-1: Using ep0 maxpacket: 32 [ 1674.122033][T28145] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1674.133064][T28145] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 27, changing to 7 [ 1674.133107][T28145] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1624, setting to 1024 [ 1674.143501][T28145] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1674.143528][T28145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.143549][T28145] usb 3-1: Product: syz [ 1674.143562][T28145] usb 3-1: Manufacturer: syz [ 1674.143576][T28145] usb 3-1: SerialNumber: syz [ 1674.279111][T17086] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1674.441026][T17086] usb 10-1: Using ep0 maxpacket: 32 [ 1674.444793][T17086] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1674.444819][T17086] usb 10-1: config 0 has no interface number 0 [ 1674.444926][T17086] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1674.449708][T17086] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1674.449789][T17086] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.449810][T17086] usb 10-1: Product: syz [ 1674.449824][T17086] usb 10-1: Manufacturer: syz [ 1674.449835][T17086] usb 10-1: SerialNumber: syz [ 1674.486651][T29793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.499101][T29793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.567562][T17086] usb 10-1: config 0 descriptor?? [ 1674.739418][T29792] netlink: 'syz.2.7616': attribute type 1 has an invalid length. [ 1674.741630][T29792] netlink: 'syz.2.7616': attribute type 2 has an invalid length. [ 1674.842151][T28145] usb 3-1: failed waiting for Axe-Fx III to boot: -71 [ 1674.842225][T28145] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1674.972363][T28145] usb 3-1: USB disconnect, device number 69 [ 1675.139100][T29810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.160309][T29810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.510851][T17086] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1675.510908][T17086] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1675.510926][T17086] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1675.511018][T17086] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1675.535320][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1675.538899][T17086] usb 10-1: USB disconnect, device number 20 [ 1675.903846][T29427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.044671][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1676.073803][T29427] veth0_vlan: entered promiscuous mode [ 1676.095931][T29427] veth1_vlan: entered promiscuous mode [ 1677.246775][T29427] veth0_macvtap: entered promiscuous mode [ 1677.276179][T29427] veth1_macvtap: entered promiscuous mode [ 1677.348389][T29427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1677.380471][T29427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1677.423590][T16720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.424872][T16720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.424914][T16720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.424950][T16720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.420552][T17086] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1678.568956][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1678.801095][T17086] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1678.808254][T17086] usb 2-1: not running at top speed; connect to a high speed hub [ 1678.825885][T17086] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.825936][T17086] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1679.406838][T17086] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 1679.406869][T17086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.406891][T17086] usb 2-1: Product: syz [ 1679.406905][T17086] usb 2-1: Manufacturer: syz [ 1679.406921][T17086] usb 2-1: SerialNumber: syz [ 1679.650236][T17086] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1679.685073][ T6007] udevd[6007]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1679.722352][T17086] usb 2-1: USB disconnect, device number 13 [ 1680.005279][T29861] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7628'. [ 1680.092651][T25784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.092671][T25784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.256894][ T6401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.256915][ T6401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.046810][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1681.150925][T29869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1681.158824][T29869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1681.507908][T29873] FAULT_INJECTION: forcing a failure. [ 1681.507908][T29873] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.508002][T29873] CPU: 0 UID: 0 PID: 29873 Comm: syz.1.7630 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1681.508028][T29873] Tainted: [L]=SOFTLOCKUP [ 1681.508034][T29873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1681.508046][T29873] Call Trace: [ 1681.508054][T29873] [ 1681.508062][T29873] dump_stack_lvl+0xe8/0x150 [ 1681.508096][T29873] should_fail_ex+0x46b/0x600 [ 1681.508128][T29873] should_failslab+0xa8/0x100 [ 1681.508150][T29873] __kmalloc_noprof+0xdf/0x7b0 [ 1681.508169][T29873] ? kfree+0x4d/0x6c0 [ 1681.508192][T29873] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1681.508221][T29873] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1681.508253][T29873] ? tomoyo_path_number_perm+0x219/0x630 [ 1681.508273][T29873] tomoyo_path_number_perm+0x246/0x630 [ 1681.508303][T29873] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1681.508326][T29873] ? __lock_acquire+0x6b5/0x2cf0 [ 1681.508358][T29873] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1681.508378][T29873] ? arch_scale_cpu_capacity+0x18/0xb0 [ 1681.508420][T29873] ? __fget_files+0x2a/0x420 [ 1681.508445][T29873] ? __fget_files+0x2a/0x420 [ 1681.508465][T29873] ? __fget_files+0x3a6/0x420 [ 1681.508485][T29873] ? __fget_files+0x2a/0x420 [ 1681.508511][T29873] security_file_ioctl+0xc3/0x2a0 [ 1681.508534][T29873] __se_sys_ioctl+0x47/0x170 [ 1681.508555][T29873] do_syscall_64+0x14d/0xf80 [ 1681.508578][T29873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.508595][T29873] ? clear_bhb_loop+0x40/0x90 [ 1681.508618][T29873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.508636][T29873] RIP: 0033:0x7f803a57c819 [ 1681.508652][T29873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1681.508667][T29873] RSP: 002b:00007f80387ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1681.508688][T29873] RAX: ffffffffffffffda RBX: 00007f803a7f6090 RCX: 00007f803a57c819 [ 1681.508703][T29873] RDX: 00002000000083c0 RSI: 0000000040345410 RDI: 0000000000000006 [ 1681.508716][T29873] RBP: 00007f80387ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1681.508728][T29873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1681.508738][T29873] R13: 00007f803a7f6128 R14: 00007f803a7f6090 R15: 00007ffe83ee0308 [ 1681.508769][T29873] [ 1681.508913][T29873] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1681.799356][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1681.799411][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1681.871359][ T5880] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1681.935307][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1681.988279][T17086] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1682.014120][ T5880] usb 10-1: Using ep0 maxpacket: 8 [ 1682.017168][ T5880] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1682.017201][ T5880] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1682.017225][ T5880] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1682.017250][ T5880] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1682.017277][ T5880] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1682.017315][ T5880] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1682.017339][ T5880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.032796][ T5880] usb 10-1: config 0 descriptor?? [ 1682.034571][T29875] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1682.127185][T17086] usb 2-1: Using ep0 maxpacket: 32 [ 1682.130214][T17086] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1682.130239][T17086] usb 2-1: config 0 has no interface number 0 [ 1682.130355][T17086] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1682.146735][T17086] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1682.146764][T17086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.146784][T17086] usb 2-1: Product: syz [ 1682.146798][T17086] usb 2-1: Manufacturer: syz [ 1682.146861][T17086] usb 2-1: SerialNumber: syz [ 1682.188629][T17086] usb 2-1: config 0 descriptor?? [ 1682.445090][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1682.678486][T29885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1682.679168][T29885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1682.813835][T28344] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 1682.822748][ T5880] usb 10-1: USB disconnect, device number 21 [ 1682.887548][T17086] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1682.887601][T17086] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1682.887619][T17086] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1682.887707][T17086] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1682.945787][T17086] usb 2-1: USB disconnect, device number 14 [ 1683.076716][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1683.156632][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1684.398590][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 1684.482043][T29902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7639'. [ 1684.571286][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/99.tmp-b7:0' failed: Read-only file system [ 1684.632156][T10311] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 1684.848533][T10311] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1684.849249][T10311] usb 10-1: not running at top speed; connect to a high speed hub [ 1684.850635][T10311] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1684.850685][T10311] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1684.887715][T10311] usb 10-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 1684.887838][T10311] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.887860][T10311] usb 10-1: Product: syz [ 1684.887874][T10311] usb 10-1: Manufacturer: syz [ 1684.887888][T10311] usb 10-1: SerialNumber: syz [ 1685.178339][T28344] ================================================================== [ 1685.178356][T28344] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 1685.178391][T28344] Read of size 8 at addr ffffc90012f40008 by task kworker/u9:1/28344 [ 1685.178407][T28344] [ 1685.178420][T28344] CPU: 0 UID: 0 PID: 28344 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1685.178447][T28344] Tainted: [L]=SOFTLOCKUP [ 1685.178454][T28344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1685.178466][T28344] Workqueue: hci0 hci_rx_work [ 1685.178488][T28344] Call Trace: [ 1685.178495][T28344] [ 1685.178503][T28344] dump_stack_lvl+0xe8/0x150 [ 1685.178525][T28344] print_report+0xba/0x230 [ 1685.178543][T28344] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1685.178561][T28344] kasan_report+0x117/0x150 [ 1685.178575][T28344] ? rt_spin_lock+0x20e/0x400 [ 1685.178594][T28344] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1685.178615][T28344] __list_del_entry_valid_or_report+0xb5/0x190 [ 1685.178635][T28344] kcov_remote_start+0x2af/0x710 [ 1685.178653][T28344] hci_rx_work+0x10f/0x1030 [ 1685.178672][T28344] ? process_scheduled_works+0xa8d/0x18c0 [ 1685.178691][T28344] process_scheduled_works+0xb6e/0x18c0 [ 1685.178724][T28344] ? __pfx_process_scheduled_works+0x10/0x10 [ 1685.178745][T28344] ? assign_work+0x3d5/0x5e0 [ 1685.178764][T28344] worker_thread+0xa53/0xfc0 [ 1685.178799][T28344] kthread+0x388/0x470 [ 1685.178813][T28344] ? __pfx_worker_thread+0x10/0x10 [ 1685.178831][T28344] ? __pfx_kthread+0x10/0x10 [ 1685.178846][T28344] ret_from_fork+0x51e/0xb90 [ 1685.178866][T28344] ? __pfx_ret_from_fork+0x10/0x10 [ 1685.178884][T28344] ? __switch_to+0xc7d/0x1450 [ 1685.178902][T28344] ? __pfx_kthread+0x10/0x10 [ 1685.178916][T28344] ret_from_fork_asm+0x1a/0x30 [ 1685.178935][T28344] [ 1685.178941][T28344] [ 1685.178945][T28344] The buggy address belongs to a vmalloc virtual mapping [ 1685.178959][T28344] Memory state around the buggy address: [ 1685.178982][T28344] BUG: unable to handle page fault for address: fffff520025e7fe0 [ 1685.178991][T28344] #PF: supervisor read access in kernel mode [ 1685.178999][T28344] #PF: error_code(0x0000) - not-present page [ 1685.179007][T28344] PGD 23fff5067 P4D 23fff5067 PUD 1aac9067 PMD 52211067 PTE 0 [ 1685.179033][T28344] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 1685.179049][T28344] CPU: 0 UID: 0 PID: 28344 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1685.179069][T28344] Tainted: [L]=SOFTLOCKUP [ 1685.179075][T28344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1685.179084][T28344] Workqueue: hci0 hci_rx_work [ 1685.179098][T28344] RIP: 0010:kasan_metadata_fetch_row+0x12/0x30 [ 1685.179117][T28344] Code: 6a 8d e9 07 fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <48> 8b 0c 06 48 8b 44 06 08 48 89 47 08 48 89 0f c3 cc cc cc cc cc [ 1685.179130][T28344] RSP: 0018:ffffc900051a78a8 EFLAGS: 00010802 [ 1685.179141][T28344] RAX: dffffc0000000000 RBX: ffffc90012f40008 RCX: c1ca61064459b200 [ 1685.179153][T28344] RDX: 0000000000000000 RSI: 1ffff920025e7fe0 RDI: ffffc900051a78d0 [ 1685.179163][T28344] RBP: ffffc900051a7928 R08: 0000000000000000 R09: 0000000000000000 [ 1685.179173][T28344] R10: dffffc0000000000 R11: fffff52000a34f19 R12: ffffc90012f3ff00 [ 1685.179183][T28344] R13: ffffc900051a78d0 R14: ffffc90012f40000 R15: ffffc900051a78b0 [ 1685.179194][T28344] FS: 0000000000000000(0000) GS:ffff88812632f000(0000) knlGS:0000000000000000 [ 1685.179207][T28344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1685.179217][T28344] CR2: fffff520025e7fe0 CR3: 000000006707a000 CR4: 00000000003526f0 [ 1685.179230][T28344] Call Trace: [ 1685.179235][T28344] [ 1685.179240][T28344] print_memory_metadata+0x87/0x400 [ 1685.179261][T28344] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1685.179280][T28344] kasan_report+0x117/0x150 [ 1685.179293][T28344] ? rt_spin_lock+0x20e/0x400 [ 1685.179306][T28344] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1685.179327][T28344] __list_del_entry_valid_or_report+0xb5/0x190 [ 1685.179345][T28344] kcov_remote_start+0x2af/0x710 [ 1685.179362][T28344] hci_rx_work+0x10f/0x1030 [ 1685.179379][T28344] ? process_scheduled_works+0xa8d/0x18c0 [ 1685.179398][T28344] process_scheduled_works+0xb6e/0x18c0 [ 1685.179425][T28344] ? __pfx_process_scheduled_works+0x10/0x10 [ 1685.179445][T28344] ? assign_work+0x3d5/0x5e0 [ 1685.179464][T28344] worker_thread+0xa53/0xfc0 [ 1685.179490][T28344] kthread+0x388/0x470 [ 1685.179504][T28344] ? __pfx_worker_thread+0x10/0x10 [ 1685.179522][T28344] ? __pfx_kthread+0x10/0x10 [ 1685.179536][T28344] ret_from_fork+0x51e/0xb90 [ 1685.179555][T28344] ? __pfx_ret_from_fork+0x10/0x10 [ 1685.179572][T28344] ? __switch_to+0xc7d/0x1450 [ 1685.179590][T28344] ? __pfx_kthread+0x10/0x10 [ 1685.179604][T28344] ret_from_fork_asm+0x1a/0x30 [ 1685.179622][T28344] [ 1685.179632][T28344] Modules linked in: [ 1685.179646][T28344] CR2: fffff520025e7fe0 [ 1685.179657][T28344] ---[ end trace 0000000000000000 ]--- [ 1685.179668][T28344] RIP: 0010:kasan_metadata_fetch_row+0x12/0x30 [ 1685.179685][T28344] Code: 6a 8d e9 07 fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <48> 8b 0c 06 48 8b 44 06 08 48 89 47 08 48 89 0f c3 cc cc cc cc cc [ 1685.179697][T28344] RSP: 0018:ffffc900051a78a8 EFLAGS: 00010802 [ 1685.179709][T28344] RAX: dffffc0000000000 RBX: ffffc90012f40008 RCX: c1ca61064459b200 [ 1685.179720][T28344] RDX: 0000000000000000 RSI: 1ffff920025e7fe0 RDI: ffffc900051a78d0 [ 1685.179730][T28344] RBP: ffffc900051a7928 R08: 0000000000000000 R09: 0000000000000000 [ 1685.179740][T28344] R10: dffffc0000000000 R11: fffff52000a34f19 R12: ffffc90012f3ff00 [ 1685.179750][T28344] R13: ffffc900051a78d0 R14: ffffc90012f40000 R15: ffffc900051a78b0 [ 1685.179761][T28344] FS: 0000000000000000(0000) GS:ffff88812632f000(0000) knlGS:0000000000000000 [ 1685.179773][T28344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1685.179789][T28344] CR2: fffff520025e7fe0 CR3: 000000006707a000 CR4: 00000000003526f0 [ 1685.179806][T28344] Kernel panic - not syncing: Fatal exception [ 1685.180158][T28344] Kernel Offset: disabled