last executing test programs: 15m39.723449811s ago: executing program 32 (id=350): syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x4, 0x8112) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 15m38.636371333s ago: executing program 33 (id=351): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 15m37.000412649s ago: executing program 34 (id=352): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6(0xa, 0x4, 0x8000000003c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket(0xa, 0x2400000001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0100030010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 7m33.017588961s ago: executing program 2 (id=1137): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000f80)={0x0, 0x3, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x5, 0xfffffffb, 0xfd, 0x4, "d206a0ebd7cedfd17ebd04c00ed476b4"}) 7m31.924219392s ago: executing program 2 (id=1139): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000890) socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x80, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 7m26.360847212s ago: executing program 2 (id=1150): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0x7, 0x3, 0x6}, {0x400, 0x6, 0x6, 0x3}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x34, r2, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f00000001c0), 0x7) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) munlockall() r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="4a01d5b7ec36c822e84db72788", 0xd}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10) 7m19.034461595s ago: executing program 2 (id=1162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) 7m15.205334455s ago: executing program 2 (id=1168): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80040100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) ptrace$peek(0x2, r0, &(0x7f0000000000)) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x103080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, 0x0) 7m11.203683412s ago: executing program 2 (id=1171): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x5, 0x0, 0x9, 0x7, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x100}}, 0x40) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x108, 0x13, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xb8, 0x8, "bfd7a4d86969e824b81a5f41ed96899481874a9a3323c3d8ffaa07ad083dad9ffb137a4e06f6ffbf52f821e59fd123309fda4da7082f5f9445c1d41b383384291cdb05720203ee576f68e6fdc4f96ac67f314a3ab2890e8c1c7356b12d0ce200c99f4de0980f5ef90b009ff03b0311804d178bbf5e2da637e613172564f0b0127aa41735b9bc86606dfd6b912f34cfae6eb22f3d8f05600930aaaefaa538c07a5419e8cfe0f6d99df7c424e51de7fd53e3b51722"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x108}, 0x1, 0x0, 0x0, 0x11}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_RMID(0x0, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20b00, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x800000000000000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x1, 'bond0\x00', {}, 0x240}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e23, 0x180000, @local, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000}}], 0x18}, 0x30000004) 7m3.163180158s ago: executing program 35 (id=1160): socket$rds(0x15, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29) getpid() setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14) rename(0x0, &(0x7f00000000c0)='./file1/file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x7, 0x7fffffff, 0x8, 0x4, 0x9, 0xf5, 0x4, 0x8080ffa, 0x5, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x4, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x9, 0x2000000f, 0x55, 0x8, 0x9, 0x4, 0x100008, 0x6, 0x10, 0xee, 0x4, 0x7ffd]}) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) fchown(r10, 0x0, 0xee00) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7a, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd099, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000400)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 6m55.978147984s ago: executing program 36 (id=1171): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x5, 0x0, 0x9, 0x7, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x100}}, 0x40) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x108, 0x13, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xb8, 0x8, "bfd7a4d86969e824b81a5f41ed96899481874a9a3323c3d8ffaa07ad083dad9ffb137a4e06f6ffbf52f821e59fd123309fda4da7082f5f9445c1d41b383384291cdb05720203ee576f68e6fdc4f96ac67f314a3ab2890e8c1c7356b12d0ce200c99f4de0980f5ef90b009ff03b0311804d178bbf5e2da637e613172564f0b0127aa41735b9bc86606dfd6b912f34cfae6eb22f3d8f05600930aaaefaa538c07a5419e8cfe0f6d99df7c424e51de7fd53e3b51722"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x108}, 0x1, 0x0, 0x0, 0x11}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_RMID(0x0, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20b00, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x800000000000000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x1, 'bond0\x00', {}, 0x240}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e23, 0x180000, @local, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000}}], 0x18}, 0x30000004) 2m52.879477456s ago: executing program 6 (id=1657): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'ip6tnl0\x00', 0x0}) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) 2m50.894709709s ago: executing program 6 (id=1658): syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f00000007c0)='//+9\xfdAQBv=K9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\xa5\xc2 nU\xab\xdc\xd0\xd6\xf6\xb9\x00\x00\x00\x00\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2$\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x91\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2Jl\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x05\x00\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\x01\x00@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6c\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7\x00\x00\x00\x00\x00\x00\x00\x00P\xf3\xaa\xa72\xf6\xf0\xe7M)\t\xc8\x82g\xaaR\x0e\x94\xb8b\x19 \f\xf81\xd5\x84\xd4\x17\x1c\x9e\x1a\x99\xf3M\xc0\xc6 \xad&\x03\xa1\xed\xa9\xd7\xe9o;\x1b\xaf\b\xdeU\xed\x04!\x813\xdeR\x92u\xcfi\x907$\xb6P\xf9\x90\xebK0\xce\xb2\xda:\xe3u=\xe8gw\xc6\xf9Y$\x90/3#\xe2\x99\x9d\f\xb0\x1b\x9c\xb8\x89H YE\xb5\xb7\xb4[3J\xf1g#\xab\xfe\'Q\xf6\x83\xa6\xab\xf9\xfb\xd8\x04us\xc7\xf8_\x8f\xd9,\x00\x8d\xcce>^\x98\x8f\xb4\xe6I\x1f\xc1\xfd-\xa6\x93j>\x1f\x0f\x01\x19\xcb\xdc?\xa3r\xa0\xcdv\x12\xb8\x8bB<\x9c\x86\xbe\xdcFN\x19\xa5\f!w\x18x\xad\xdfRQ\x1d\xc1\'\xd4\x16{\xd2\xadDR\xa6Y\xc8\xfe8\xdf\x88\x9c\x8f\x90\xff6{\xc2E;isd\xc9\xfb\xe6\v\xd7\xd6\xff\x115\xbb\x9c\x14\x83V\xe4\x9fd\xd7\x1b\x1a\n\xd8\xc1\xe5\x86\xc6\xfc\xba\xb3\xac\xfb\xb6\xcd\x1a\xbd\xcf\xbaA\xf1\xfe\x82\x88v\xd0\xb1#\x1d\xfed\xb3\xac\xd9\x85\xf6a\xffU&\x15\xb7\xc5\xc4\xe6\xc0\x85\xca,F\xa2\xb3\xa4\xfc\x85\xf0\xca\x8f\xb5\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xfa, 0xd, 0x29f, 0x3, 0x1ff, 0xfffffffe, 0x8, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x9, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x20001ef, 0x5, 0x8, 0x86, 0x3, 0x595d5d82, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x800, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x7, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9604, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x9, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2004c0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, 0x0, 0x0) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2m47.137123674s ago: executing program 8 (id=1668): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r2}, 0x0) close(r0) 2m46.471383616s ago: executing program 8 (id=1669): unshare(0x8000000) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno', 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xfffc, @empty, 0x9}, 0x1c) shutdown(r0, 0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2m44.895661179s ago: executing program 8 (id=1672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008010007500500300012800b00010067656e65766500002000028014000700fc01000097bc41f3"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m43.214291748s ago: executing program 4 (id=1675): r0 = socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) 2m43.112510553s ago: executing program 7 (id=1676): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r1) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) sigaltstack(&(0x7f00000001c0)={0x0, 0x80000002}, &(0x7f0000001380)={0x0}) listen(r0, 0xa) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) shutdown(r0, 0x1) sendmsg(r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000000200000000000000bbd1d2f2c673ae02072af06fa3756009f4cc327e40ae5deff436b356d5db95ff44eb0025345922fa805f0bd6e0167172324ba4b78b7066c6768811a66f53d634f89d8906bb420a85b452a1f5b2ef38ab87415c1167fe070ed35e06963aa79413495f3e5e51c32606938bf5abfa5c87a085d9bf2eb2bb88a4b557b1b1715d047e12c7a39e5f553bb848049fbe92fdbf281cdd03622afe72570a13e6c9a824f483a5636a5ab8a4f9f6ca0525871fe359ecdece83d1eb1e02cc4abf2e397246"], 0x18}, 0x0) sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x24046850}, 0x0) 2m42.920964752s ago: executing program 8 (id=1677): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r2}, 0x0) close(r0) 2m42.841130426s ago: executing program 7 (id=1678): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000480)=@IORING_OP_SOCKET={0x2d, 0x40, 0x0, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8286ca8cebed636a, {0x0, 0x0, 0x4a05}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) 2m42.220786345s ago: executing program 4 (id=1679): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x400, 0x6, 0x6, 0x3}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x34, r3, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) ptrace(0x10, 0x0) ptrace$poke(0x5, 0x0, &(0x7f00000001c0), 0x7) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r3, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20054000) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) munlockall() r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="4a01d5b7ec36c822e84db72788", 0xd}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10) 2m42.210550475s ago: executing program 8 (id=1680): mkdir(&(0x7f0000000300)='./bus\x00', 0x63) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 2m42.016485694s ago: executing program 6 (id=1681): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4, 0x1}, 0x10) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x40800) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m41.696781759s ago: executing program 4 (id=1682): socket$rds(0x15, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, 0x0, r2, r3, 0x0, &(0x7f0000000480)) dup(r0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29) getpid() setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 2m41.573122205s ago: executing program 7 (id=1683): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x800006dc, 0x0, 0x6, 0x9e93, 0x17, "1012a2c2030800001fe550bf0d08000000e956"}) unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r1, 0x0) 2m40.865058978s ago: executing program 6 (id=1684): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000000, 0x80000000, 0x3, 0xdcd8, 0x1ff}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f", 0xe, 0x20000090, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x9, 0x6, @multicast}, 0x14) socket(0x1a, 0x4, 0x6) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r6, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0x8000001, 0xf, &(0x7f00000000c0)=[0x138d, 0x5, 0x7d, 0xffff32eb, 0x2, 0x8, 0x2d7b, 0x41f, 0x0, 0x3, 0x0, 0x7, 0xfe09, 0xd2, 0x80000002], 0x0, 0x4400003}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) 2m39.625162946s ago: executing program 8 (id=1685): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80040100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x0, 0x0) ioctl(r3, 0x40946400, &(0x7f0000000100)='dt2811-pgh\x00') sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0xe, &(0x7f0000000200)={@random="aaaaaaaaaaaa", @random="aaaaaaaaaabb", @void, {@generic={0x800}}}, 0x0) 2m39.568850689s ago: executing program 7 (id=1686): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r1) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) sigaltstack(&(0x7f00000001c0)={0x0, 0x80000002}, &(0x7f0000001380)={0x0}) listen(r0, 0xa) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) shutdown(r0, 0x1) sendmsg(r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000000200000000000000bbd1d2f2c673ae02072af06fa3756009f4cc327e40ae5deff436b356d5db95ff44eb0025345922fa805f0bd6e0167172324ba4b78b7066c6768811a66f53d634f89d8906bb420a85b452a1f5b2ef38ab87415c1167fe070ed35e06963aa79413495f3e5e51c32606938bf5abfa5c87a085d9bf2eb2bb88a4b557b1b1715d047e12c7a39e5f553bb848049fbe92fdbf281cdd03622afe72570a13e6c9a824f483a5636a5ab8a4f9f6ca0525871fe359ecdece83d1eb1e02cc4abf2e397246"], 0x18}, 0x0) sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x24046850}, 0x0) 2m38.946788298s ago: executing program 6 (id=1687): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008010007500500300012800b00010067656e65766500002000028014000700fc01000097bc41f3"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m38.793134936s ago: executing program 7 (id=1688): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r2}, 0x0) close(r0) 2m38.734538948s ago: executing program 4 (id=1689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r1, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) 2m38.458454191s ago: executing program 7 (id=1690): syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f00000007c0)='//+9\xfdAQBv=K9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\xa5\xc2 nU\xab\xdc\xd0\xd6\xf6\xb9\x00\x00\x00\x00\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2$\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x91\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2Jl\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x05\x00\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\x01\x00@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6c\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7\x00\x00\x00\x00\x00\x00\x00\x00P\xf3\xaa\xa72\xf6\xf0\xe7M)\t\xc8\x82g\xaaR\x0e\x94\xb8b\x19 \f\xf81\xd5\x84\xd4\x17\x1c\x9e\x1a\x99\xf3M\xc0\xc6 \xad&\x03\xa1\xed\xa9\xd7\xe9o;\x1b\xaf\b\xdeU\xed\x04!\x813\xdeR\x92u\xcfi\x907$\xb6P\xf9\x90\xebK0\xce\xb2\xda:\xe3u=\xe8gw\xc6\xf9Y$\x90/3#\xe2\x99\x9d\f\xb0\x1b\x9c\xb8\x89H YE\xb5\xb7\xb4[3J\xf1g#\xab\xfe\'Q\xf6\x83\xa6\xab\xf9\xfb\xd8\x04us\xc7\xf8_\x8f\xd9,\x00\x8d\xcce>^\x98\x8f\xb4\xe6I\x1f\xc1\xfd-\xa6\x93j>\x1f\x0f\x01\x19\xcb\xdc?\xa3r\xa0\xcdv\x12\xb8\x8bB<\x9c\x86\xbe\xdcFN\x19\xa5\f!w\x18x\xad\xdfRQ\x1d\xc1\'\xd4\x16{\xd2\xadDR\xa6Y\xc8\xfe8\xdf\x88\x9c\x8f\x90\xff6{\xc2E;isd\xc9\xfb\xe6\v\xd7\xd6\xff\x115\xbb\x9c\x14\x83V\xe4\x9fd\xd7\x1b\x1a\n\xd8\xc1\xe5\x86\xc6\xfc\xba\xb3\xac\xfb\xb6\xcd\x1a\xbd\xcf\xbaA\xf1\xfe\x82\x88v\xd0\xb1#\x1d\xfed\xb3\xac\xd9\x85\xf6a\xffU&\x15\xb7\xc5\xc4\xe6\xc0\x85\xca,F\xa2\xb3\xa4\xfc\x85\xf0\xca\x8f\xb5\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xfa, 0xd, 0x29f, 0x3, 0x1ff, 0xfffffffe, 0x8, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x9, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x20001ef, 0x5, 0x8, 0x86, 0x3, 0x595d5d82, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x800, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x7, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9604, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x9, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2004c0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, 0x0, 0x0) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2m38.405099713s ago: executing program 6 (id=1691): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000480)=@IORING_OP_SOCKET={0x2d, 0x40, 0x0, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8286ca8cebed636a, {0x0, 0x0, 0x4a05}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) 2m38.235613881s ago: executing program 4 (id=1692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80040100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) ptrace$peek(0x2, r0, 0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x103080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000140)=0x1) 2m36.106119471s ago: executing program 4 (id=1693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x29}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) close(r0) 2m23.726854231s ago: executing program 37 (id=1685): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80040100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x0, 0x0) ioctl(r3, 0x40946400, &(0x7f0000000100)='dt2811-pgh\x00') sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0xe, &(0x7f0000000200)={@random="aaaaaaaaaaaa", @random="aaaaaaaaaabb", @void, {@generic={0x800}}}, 0x0) 2m19.785422445s ago: executing program 38 (id=1690): syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f00000007c0)='//+9\xfdAQBv=K9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\xa5\xc2 nU\xab\xdc\xd0\xd6\xf6\xb9\x00\x00\x00\x00\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2$\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x91\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2Jl\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x05\x00\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\x01\x00@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6c\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7\x00\x00\x00\x00\x00\x00\x00\x00P\xf3\xaa\xa72\xf6\xf0\xe7M)\t\xc8\x82g\xaaR\x0e\x94\xb8b\x19 \f\xf81\xd5\x84\xd4\x17\x1c\x9e\x1a\x99\xf3M\xc0\xc6 \xad&\x03\xa1\xed\xa9\xd7\xe9o;\x1b\xaf\b\xdeU\xed\x04!\x813\xdeR\x92u\xcfi\x907$\xb6P\xf9\x90\xebK0\xce\xb2\xda:\xe3u=\xe8gw\xc6\xf9Y$\x90/3#\xe2\x99\x9d\f\xb0\x1b\x9c\xb8\x89H YE\xb5\xb7\xb4[3J\xf1g#\xab\xfe\'Q\xf6\x83\xa6\xab\xf9\xfb\xd8\x04us\xc7\xf8_\x8f\xd9,\x00\x8d\xcce>^\x98\x8f\xb4\xe6I\x1f\xc1\xfd-\xa6\x93j>\x1f\x0f\x01\x19\xcb\xdc?\xa3r\xa0\xcdv\x12\xb8\x8bB<\x9c\x86\xbe\xdcFN\x19\xa5\f!w\x18x\xad\xdfRQ\x1d\xc1\'\xd4\x16{\xd2\xadDR\xa6Y\xc8\xfe8\xdf\x88\x9c\x8f\x90\xff6{\xc2E;isd\xc9\xfb\xe6\v\xd7\xd6\xff\x115\xbb\x9c\x14\x83V\xe4\x9fd\xd7\x1b\x1a\n\xd8\xc1\xe5\x86\xc6\xfc\xba\xb3\xac\xfb\xb6\xcd\x1a\xbd\xcf\xbaA\xf1\xfe\x82\x88v\xd0\xb1#\x1d\xfed\xb3\xac\xd9\x85\xf6a\xffU&\x15\xb7\xc5\xc4\xe6\xc0\x85\xca,F\xa2\xb3\xa4\xfc\x85\xf0\xca\x8f\xb5\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xfa, 0xd, 0x29f, 0x3, 0x1ff, 0xfffffffe, 0x8, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x9, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x20001ef, 0x5, 0x8, 0x86, 0x3, 0x595d5d82, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x800, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x7, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9604, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x9, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2004c0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, 0x0, 0x0) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2m19.706528818s ago: executing program 39 (id=1691): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000480)=@IORING_OP_SOCKET={0x2d, 0x40, 0x0, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8286ca8cebed636a, {0x0, 0x0, 0x4a05}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) 2m19.595036264s ago: executing program 40 (id=1693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x29}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) close(r0) 1m34.302648224s ago: executing program 1 (id=1735): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) 1m32.565363866s ago: executing program 1 (id=1740): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000480)=@IORING_OP_SOCKET={0x2d, 0x40, 0x0, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8286ca8cebed636a, {0x0, 0x0, 0x4a05}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0x51, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef5540", 0x0}, 0x4c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f00000000c0), 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000005c0)="b3ccc1474497fe0c72cca98912822b22b08363dcbaf00856c03cd5f1f68e43be358a15fdf8846b01e09e017dc0859b8cf98e0bc3badad9b439cd17b6589434fb02a771d4a1f5edf252acba8620088947019620d86df776931ed20463525431911c3aaea1", 0x64}, {&(0x7f0000000800)="1a98fa7c48cbb54ff6021ee4e95b6428a67c45f1cbece9416ec129907981671c1828c153bce52bc0f3b8f5725440de1494b7df6002200bce8b2d18d531b2036ff96fedf9d2d393345cb3c9c786d04627eef61d13595d95eb26d4f305534d239cbe9e34135a7665537efdeb21dc74669a42a76685d7619d1a6b02da65fd3c735e7922bd7c96e6a30b9912974b1f01f00e77773e9544c3a60b6e5203a36a258475adecca9228f4c465835f74f71dd167858b4d50021f5afe145313d40350d6c1f86fd67c052971cc610475424d5ee4af68a6174b974ae07a9a890b994d69f4fe9c8bf648f5ce6171e913026527588a788fffd21d147c281295893bac0d0932591e92a9932365e30a35741776f53dab395d4d0a323d9954cbe7f6af651cafd9511240c809abc19a2bfebd60e32257e0eb5e7e49fbea6857ea1bd4bcfca4b358106e9edf0d04cc6cef991fdb52955939dd0e04ce91667d19cc552b95f6aea50a3e6e8f9f47f4f660818c44b1b41293d2808431a8e0d7d457c675874504c5d5cced4802f89c4c53c068b69bc40cdecfb9b7832f42eaadeb98772a01aeb602750b2f2231e94d66bd26503949bf75326787d88b0b10b92613b849024e86a2397cabffcde0cba2eaec6613edb259b5f0fe467cae015e823bc9ad18924f29548a42fd874a4e0930959e0ea967f49a109d624e1d411201aa279ed1fbd69cdfc3ad6cf0888501cc7ca627ff5434450d9e88c8f93ab0dfce7f851af326c86afe2d74edc2173b3eeb0bb0fe1fef57e184ba29d689b3064b0edfbf0455cf270065d2b7c44dcdddb12b04810a70e1321c6adcd411aacfa38d71e37057209d80b55a89f316b888f8a6ff4bda323269c3574979e00a0932e4ead49113e1dfa2ef4d6d422e94fbee98adf2fc9cbdff18b92e7db75806b4e081ffe1589f6c5f8ff4e4b4993e91d328b1f31c3bbc817fcdd3decb753dd2bb331e194efca6c45211770d3dc5c97f8a23962a3f23139d780bc8ff3aa87faee24542744750794c89807fef8dbeb22c71a4f5d0bfda18226db8b2a5e674748b320cffc18c9f7558441a17baf73e7ac2e6c4cb2ddd93d31b62367e3611d7e07ed47514d352ce9b002513a8481a11ef5e89f2aa865bd4a8f6e7542a3dad4c8c589c2bbe528983559178b978627ad2241dd5263efc9403ad21763ee32a668d2b413cddcdb0ce4081a91c056a6dc878e6066bc9624d21954854615512982c4fc79f5016d502d93ce42efd1a5f72bd6529ba5b1b73acf48052ae0dde605030909a0f7f5a6de2a8dd64f4a71aec752a226bb116227f600de6250c5bf8aecf364af2776fe12d808483b9d64dd4f869d4791b47102ac2be6143f20745de5629c24f599bff0f553f0a17f86a63ee930d04007d4b9b2b473b1193a43ab5401c43fc6b8d6be4f5d337bb6cc5b19998ba615be8ea7fbb553de90ef35c9ba97d63d7302aa5029b72cfdce603a68c65658505d84a538c7ea256df753dbb021412c601fe0b0f35da38f40809969e550f79a35492378f89e0e679c8831f21643ae0ae13731734723b16393fa7bca17e1c4cdac3ed13fa1bcac2df992c746780fe514b780c5140df411ca831cca6af3c7a2ac011c6a03c89b68b54c10d893a041d55fbe42de63cb36d6167818cb484a87d35dfc523e854e7dd5c0b99e72ae8d4d5d9375751ff341581bab0f0437d3d45aadcad08592960abff67882ccc5eb5eb3f112c42e2b483257af415974f7424d2a9352cc36bf0e3548a98bc483ca7d4f7831c1c11c55c06322b1d2a2993b00003c9a924d0dc3afd619495e9ef7378ed447e6d7686d699bba6b3da6f8be5b5b7aead218aa09cf9a93026329d0ffffaa11e972d64bfad58f936d1c0169d30ef894482940253bfb13780dad008b3e221b90c0ec21f8ac906c2c195e0a80667f878667e519aa651eeda1b36064316d37ad704b59b83eb9bce92ce91de953167c7758c93a69a6689fbafcad2eca20306749d9690a5676d5e52f8d8b475dede44621ab3bd96b876b7510411d9ab5efc843ad6fae6615f45534e2a91c4aa0dd9d968d405da404700cf37069fdee307d1858cd29f9abc74da5720c8b1c1d5696169b18db3069f83e9a70c6edf41eda10a18a22331b10a855c5406ff63aef87b6526a09b7c126f914633300e1c54ab7d3710b9bd5cfb78785b1acfb16c42c2156e722c4e3b1876d64b00f2e0cbd07598d0cfd8bcfc8d034b4cf0f594a9407b72a727f865040c2b3b68bf2ba3956119fb2731d42a3e859ed7ffbf4d1d1c76ad08c41fa8d352a4c9237a73b3867e16d2c9b7f9c39321e3e229cad0f7f0758d06e32a1a79063d693aa15c36ee5a1070e7bd0b6e22ca899f5aa7987198318a02c6f4ac99a4caac1034f9faa4eddcd9bf2e3d61fd66c754936ba92b8eecc4402712eb05b826b9f347c1244c594d6af453a343394d40e8d25626b85351101747bb8714d37735c84cc95bcd3a7a94aa7f3c169676eaa4b5ab080284b1d0e4c0db40a96f2ebe9c4aa06691cfa945a9eddcc0ba91628f0e7471564ac7e34567468fd7059bc1b54efe6738a981d1847b7ab1d3cbeee1cc28188e4c45b9b9ff83175bc0e50de845f3ab6532b9c7b73dd44a1e42fdc4ae4ffcf0e820283c01c5c55dcfb28c438fd831d7f4e7a96eb439bcaeb1b15f9d7c3c0ded51c01b4ff9142e593958865eaf6cb17241436e82c5c3792817a72a16e224bb989e6bcef94fb430252bd18785eefaf7674c1ea2ad6749a9190b5b0b79d7cd52b1d86e2fbec20067ae72b96734a55975cc46a62e11fb1a6907fa476b29be80902b6e8ecaadbf1aeb1cfbd3e9d5ab01c2cd7c78f08d424e00daea345e8a1a4814cc59f131c82c8d726d5ff51bf4dbd905577242c0793b02d4f59a879ea5f36894973102c5d622f76f3ab287cd936bcb63134eb29d4a961b4c072573ded6214e87ee9923ad84d9f14d2c3c873c2c58935adb1f2ed02e61c66e63584862f0258a68255d6fb8151bbd3c37f917bd62ea4eea780258b26f6f31d4e2b27b30c45348958dd36c5f058883eb29f073c7cd10a98b4806c897664fecf4fa2aaff0562d8828adff448ebb73bb5823689319d23ddb89c0a5c9a637b97a58c68645ccaeb7c22436ecebf5a16cb467c58fb963cf9980a1a556a191aa317687e5c544831f2e69ed97b028cff8e1f20bdf95012a96443887cd94a93026e4ae74fc8de291f443cecb4c6dd72089feda7f8bddb0280a24bf12c1dd8deb2b6d19694c2c8d327cf141a159ebdeebec0827c6151cac72a45e1a2187dff22612307061648e56cb06e1abb43569746bf09ba63394c2ac88b24d5616d4b7f4f1e7fe6d9ccd69521eb317fc4805e321b281fe45864aa301b790aec1d4098cee3f615bc4ab19f7b3a820f1f8c25bce4c1f96b5d77864b9b716f27aa247fcc67dee318904fd9dfcbc62a99a38c21a954b815166d30350ba10bcd99c21348edfb80c46f8470577656557c82139cb72e0ce06a8fc7ed8287813885c87e89a181d965aaadb29621877ef56e00ca76df36671f18bbe60d0c03d4ba3338bdfdb2edb1eab95bc5b1a2287c0170cba00d0253963a37fda15d3a0cd14687fee3b35186b0f8487d3a8f38be6e82a00d87771eb300c4cae2cd4c8db0694c2d8d6670de7ff1aefe606722fc15c88d63024ee459016a9a0e62d1b8c5c37782b7607a47931ae5a01ad3f9c811dc82137a3fb622270c5e9bd1d7571dafbc28446f98c1c54ba47a49bed83d33a20d142a7abf84359060b52c56258cbff5ea0c54713eb550c110e6b97b5b101de9dd7988d37400290e0207301c723d7303a2439e8bb3cf514e1486579e218d5375c981c00e163044791fe97ce2803357ffe8e23c742160cb2ceca933d76dad1618ba3a9d7dca41c766e857d9be32dc652538c3fbd678997f073bbfed84178b35afa702ea2d1bbb38dda736ada1f50157e82b5a19255e744c075efe09a5cf933db5ae59ac31f411371220360b1f13b3a6e83444ab8c480791dc78dc2b77e24b3ba8d2089b3f041c3ffbd10cf13d1d91151c4c2861e1b68abbcda3a46d08595a218193fc86c6e44d2f1e608cfe30087bf275ecef02c5b630d24fffeb1152b37dfbd0789f500383b2d7640983390a3154ae857cd44e705c51acb38f93264f5d2ba2f8eb46bcb28bf9f8b7686795c325ce595a14a604bdb8e57d648d5125bff35bfa5998c43ecffb784fbf803fae678289f1fdb5e50acafa3380ed3803ef929edaf4e77b23744b93bd967801ae929f34d52351b42b99b517feb193deb74af25e72b644f0fefe9589f4cb185be3d503f157c03140b2c083ef3f0426d9380b0d366568ce3e80d69b48eb3b6a144f68897dbd25b546d6ef64a08dc2c8fb95e0b8c1a9e53e6739a2ac46cee6d84397e4e76def474f8d9c4bc3fd01cf2dadcbc64cf2cf334d985da92d91b39d1f53dddc5ab9a6842e52da8485ba97aeb5cf68c56b7a97b4a0e46f9f104d3d4f9540c4b5f41ffffbbc39c4bcdd6a04915765a881a9615440b44dfa4740bf30babe1e2991992115f176706dfe2d2cd38d03ad088269bcedd035dc28103463eb0c79c319230d07110bb671ed33c791c0c3f429c9ee8694c62c0f11d05fca5f2fd3e192645a051f4ec0def3cf94b2f0f47ea75ecb29edbf42bf00db4d0f1dc530fcc39b0ed3bd2fd17658988f8aa254db42dfaeb382068144cd89c310b0e6b433a81400561a8b308e6551b07b04f7fc040818034816c62683c5dfefd444b9b677e4ab20d554138536cf2df253001b35c5c61288212c0c62a38efe4277c9578f35df76544b7dbb5e5ab76e97a172f7a1ddbafc1d5d739bfde75c3287ff1c78a6f1b9defbda77d92f118fe8e58ffbe727ef09c8616c4c983f5ba8ddc4d503c0e9a9f0725456d5af3a86709cdcbfdbfddb7afe5e528b21fae3429785730724d26a5be1fd809b489ae5af63bd14eeedd665462b0c64d47bd67b02e17445d1f0c78a7924dd8762c42fdb435ba8d35050bc2bfbd36374c8a3b730c247bc15a07220acf9abd71ef48e4fbc089cc3b6dffac7f332958a14c0ced7192a2b1f2cc75f862aa48ac31f4d1b14807332737edddbab2a3510e027efe8b9662575d08534b698b5928c19c6a5e74b9b49d58a0b89996ca8680bc3526bc7a2963b7bb02ce0e89a1ff0ee22066d351d5422e4dfa112fbb896835cb8ae6f48a420c728f5ef7e4ccbe2dd47cf3b75d6e159239ca3197753bcf669caa564dc833983144fe712982c42a60eb74d504643ba87869b266a00a8f0d2b8c7ae4e1aa3d87e7dc408ea75dd7da1688a423c2ee5db917770fa6ff78cef7a1901b15655f6b3329a40482cb40f3b03b4db6bd11ac88bd666bf2b3902af6acc1bd08a76190c35842bf7a9932a910ffcd6b9f18d1651d4dd2238c81a03cdaf043a0d48ef915e3b3d8c3e78fbc7045ea30fbc68a347cdd5e814d0ad0c508ef146eea8b48d0dd3bfdabc724453ce983adb0e26b34481f5080826f4699019e7b79d2439ead4e093969e5a5aa0c71a976e9d953ba6c23628e7841c94044fa7934d6552d08cd59873b65221acb7e06209affc3ea75d0ec8ea89328618e960e47648cffaf55b17523bfd752ef38c875e210a34eb04eb7ab8f008604232424a22b362087c214f7e8c52a65e1684ed9e33683826a22f2bf9bbc6023325dc6bba6d7d8f4b6c64a79fafcad3b2fdaa08e97c6033d133e80d9bce3f25d4b27335c8289b272a0d7d3cd82da307e77f3474003cd39904cc8e24e15bb846cbf4c8d4597f287c8aeb350c8caf01351774b7bbdf4ee6380", 0x1000}, {&(0x7f0000001800)="dd4283c33ea91495367e99d7994de1c113d1f2e38d8d989267efd28196a7bbc2027512daef3365555a4a48ac436be619b8bf83925ca5fe31a0a024a94b1390b48df63204f9f3b1e0180b1d29aa1332f4067910d4211af3bb0cb9f2dbdf1f025efc9e0ad043994951b85cc0d33e50d1ecf4ce77240bea856ae1", 0x79}, {&(0x7f0000001880)="bdb5c04bbf0feadd7474aa90f0620cac97230ae6757326b8643ec025f3332bcd362e6ae37bca399a6c942e6260089ebfebb735add9b425ff6c95c1bcbd9f729506c933b901d769114075f90b3704d29669d9bd95cda1ef7b23a149995cdf46b4135e15add832bd82a8e82a5ae74a92da641dc7acc4f953426b4800db35a36ecc9e5153d613b627a92bc886f17a36c2e60411ca78df3daeb6ede3ae976076714a13e6049fd3c05aaf4af87f4c2392e57f4254b0632492396b", 0xb8}, {&(0x7f0000001980)="a3d9e5dcbdda419d8951085aa5dabc2983566e556f24c38115a80749c9aa4a2fdada087b0bbe8f8ea2df6d8321bc0534131ef8a77b301f6c7f5df1a501536e99c84953c2191fb6019ad8f686eade7709d8029ff92e7e05206c6802236337373c02069fbc875fad6880a39d83d62d0699675cb827ce2358cb0504ff94b51fe42f259641632fadc181191576e51a2875415ca2767f47c56e3b8715663cd5730c959d5c23641136033d1ecd15458710", 0xae}, {&(0x7f0000001a40)="5a7675c90fbb810c7c6383649bcdd10f6463d9056815884139fff94391a334c22f0b0114160b19ea28e4eaebbad121adf0d8273e3fbf50f0cb75cc0b36ff79e017a52a6a3cf3967a8b23f52dffd3c8db312d48b1fbee74bf40fbc45065c5613167188ff15211bf3761eb553c67ed8d1b67e3fcee018cb254963fae058cacc041b4", 0x81}, {&(0x7f0000001b00)="6118d9d64e23d96a3a74c4b8a67a9da6acd1bf9029a80535b5e064cbcd424674fa37c21fc48209b8dfe5f11aac24b9ece98bbe1247472125c234d647d34a3806d9170a2954e1ee54c321d4108c68a3ad39043a44d7c1b45400def419030bb50ec09d238dc6ac99ef019de9671507b4406db8a167554b95a6b9eed7cf38c9b79273970cdcddb9cd7b34e93a6d80c70c3785cd5bf4a2832cb61e9da43b21a4d8d311a0195bd7a3d9b7d85e45243d53ad4bae73ea5f9f3c4200989203de3099c05198270ae3cb309393b8fbf8cc2283ee2b45719705472a7449031289f0855df6cea2", 0xe1}, {&(0x7f0000001c00)="a6450d8fc8440310e754fb3e88b387308174d25adb3aaee7cab1db7b3b251e97d3d9935f68b13ff9add278e9e0e91c341ec7d1e36825", 0x36}, {&(0x7f0000001c40)="0cfbce257dae3ba51694ed5364833eb1a90021b597c014281e28e375096847890293deaf6ba1671a9111cc6ff20eb04f4e56f79568b9ea97d702ab5af835f30934e3d3cca58498367cc208c29aa73d6cc525d5c4c238fc844d9778670b75ec070e3533458d240a6978afcdddf5f1de6ef5511640dc17af79608ffa81cd519726a795308f51d260f43638", 0x8a}], 0x9, &(0x7f0000001d80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x30}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x3}]}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x3b, 0x7, '\x00', [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x28, {0x0, 0x8, 0x1, 0x5, [0x3, 0x100000001, 0x7, 0xffffffff]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @hopopts={{0xc0, 0x29, 0x36, {0x0, 0x14, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @pad1, @hao={0xc9, 0x10, @private0}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x28, {0x3, 0x8, 0x6, 0x7, [0x9, 0x4000000000000, 0x3458, 0x9]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0}, @generic={0x10, 0x37, "a7c8979e783034c37a8b2fb70f6f3f080d70423d1f1fb0dc6ea6da8fa58c35ad413bb278e826657480b33a1f0d87e1fc7e8e06775e5825"}, @padn={0x1, 0x1, [0x0]}]}}}], 0x168}}], 0x1, 0x811) 1m28.469335888s ago: executing program 1 (id=1745): syz_usb_connect(0x5, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x110, 0xae, 0x76, 0xbe, 0x20, 0xcf3, 0xb003, 0xbf24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x9, 0xb0, 0x7, "", [{{0x9, 0x4, 0xf9, 0x6, 0x0, 0x8f, 0xf8, 0x1a, 0xf}}]}}]}}, 0x0) 1m25.959950805s ago: executing program 1 (id=1752): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa0904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1f8, 0x20a, 0x278, 0x1f8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4917, 0xfffb, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x27, 0xe, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m24.364898469s ago: executing program 1 (id=1758): r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) 1m23.869010553s ago: executing program 1 (id=1761): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) r3 = dup(r0) write$UHID_INPUT(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @local}}, 0x100, 0x6}, &(0x7f00000000c0)=0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = socket$kcm(0x23, 0x5, 0x0) listen(r5, 0x800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00000000", 0x54}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r5, 0x0, 0x0, 0x80000) read(r0, &(0x7f0000000480)=""/266, 0x10a) openat(r3, 0x0, 0x121842, 0x62) ptrace$poke(0x13, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m8.55380249s ago: executing program 41 (id=1761): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) r3 = dup(r0) write$UHID_INPUT(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @local}}, 0x100, 0x6}, &(0x7f00000000c0)=0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = socket$kcm(0x23, 0x5, 0x0) listen(r5, 0x800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00000000", 0x54}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r5, 0x0, 0x0, 0x80000) read(r0, &(0x7f0000000480)=""/266, 0x10a) openat(r3, 0x0, 0x121842, 0x62) ptrace$poke(0x13, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 14.929223331s ago: executing program 3 (id=1903): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x840000000002, 0x3, 0x100) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000580), 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r3, r0, 0x68, 0x1) syz_ublk_setup_queues(0xffffffffffffffff, r1, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x16e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 14.659939763s ago: executing program 3 (id=1905): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='pstore\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf25"], 0x1c}}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r2) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100000000004f39d14812"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002180), r5) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={0x0, 0x8c}}, 0x4081) 14.392998386s ago: executing program 5 (id=1906): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7f, 0x7, 0x4, 0x8, 0x10, "10ec666563eb7c228268553b3d61b2df66467b"}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000180)=0x19ce, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) prlimit64(r4, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x809d) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) write$UHID_INPUT(r7, &(0x7f0000000e40)={0x8, {"ace0e6aa42f37706cd5797c96b9364b32a1a7cee34790852c1ad2e4d7cc38bea207cdbfd834f2d3eb9be7c18e7b8a73ad84142bea6df04b7927204ceba2b4b92686b639923868b0d527655fdeb4e2f5dd25231db979a6ead8a29424f9dab295fb76e14a4deb2d66d918ea82f63d9673e6ed7d1b77e1fe501b5717c645785dd4d10f018f354ad9a04840ab7e4019a118a493fd0e5e5a26f3bf6f4f5991007a07dfe5db78c41dcb7509e0a9b907b19890acc0c9e626cadec492382c2020e51ae4be2c941238af607d80c4693ec6d43753c6bf1f95981d89ec7366623e136b18de179d9a25b885e7697647b14939c224a955e39f0d063202d1dcb7d0f664d096bcc8d011fee4d2cad0f6c8a6f94ab72c9ea820c1ef9f50e4d76b7938cc924f392bedb79ef3409bbfe0615be1b6e7ee3ecfa2ebd31e5254b2c7a4d4a39eb7723f2819414765cfacc20cfb79d1fa09a4b9b3571c7a7b00c123093302789b3518e16ff8419dca882edcbbc656bab8184a64509b9c735fdbb63e7330a7b2a577db115f577f68ced730f0f871adaf6e56ea25b020ffc3d8f0103177745ce9c65614a93ad3a2ac26097c0b6077fc472513b476f4a62dd76d1d93f556ac09572ef137ea6c29c93a2b1e5f4fb44af211b49d54cd632463918c19021689a8db27aadff957287c72c011ee7a8144cb80b6e623e6737dd73e962387609fd7ba8949f865e4bfaad09ef5086e5f1443ca058f9beb3b938c9dfe5cdf0cdafa8eb3da0b7d09b986992c2ea0244348602ae2642bef15d820bcbd0cdb7d8a254357d1623d0d73416ee9396ca5dc775b2426e7b29a00d6677db10d3e18e504542560e0bf432699edea748165872e9a48418feebc7f0f446b6414019000711218a408d6994b927450f91668695c5b84ce8a2a1f28793120f24eced36bab433cc77c6a1fa1fa8b010ba34c46e739560158c106aed9acc87b391a865006b0659fb066d4131c11410fc64a627b876815583b0ace7f868c5d5c87abc14996d4b20d0caf5b1b62c8572cfb29ae6235f2d6c6f2b25eca444977b481120bcc69712e7c057e30b41aea57e69dee4353a2a76a3142d5a9b8644251ba0e756c7baa752bd34d23a67be635a080f62051b92200857e7d488b531d08c251311d4d583bb43831dd24d39144923f5a2ea6385a47228403719ec99f82ab76cfa7eab4ccc869ac0e7a3cf0eeb8b8fee16d2436911f2cfdb7df352c2997b88dedb67c82954345268f8f1fbcf92779014e8d8751db9083511cc2091554c8402380b310abf24b87aeb037863f0eb2b720b3601a58001ac17afffed467d3f1abf43fcacefa68b1623a27246204091774d1d16c9912c7edc148946c7c2d3addc4298b7426e60efed743cb86be4b76223c04287de6f340a255bbe30df52108bac11f4142ab5a9e260ee2e7087a26bba40a9f9c6dbbe5ae789f8aaa7775e62d0b3ffe1c6d9294612b1fb4fe36a981a31f833389946aaf25a5d5837b12f17e989d9ad3054e5954b54abe299794f6f1567ac7e8cba86989b0184da2b2b311e064483ac625cdac8d66e07aa9e493495942e98b116b8f42cb53c1d0d80b12cdf7066e54943a74f9b224edfe39c8b25de8f63514b247645f98b14567986eefaa021125069ee97f4a445ea71e1d766029da7781c5c364ef9c5a18a817fef9d46e7de198c39d8821112786190fd5cf255fb527171835d21a4f406fefe00c7268a440b08826c94d4570aaa2d86ee351486542b68660487a748a8f4f5b4a5c0255b0dd63ef636d06673cba5eebf582736f6814d2f345d22af49ef231c78c104bb80f1900587c85d8a6e40bfc6eee2f3b015b98f23e4c4fc466d00e1bd94067f008f519182f6cefcb3565b4360a67d2901a7e0cd160f4c7ce3eeccb8ab821851c49f3b135aff27c69ddb435f33146b9a820f3c60b4ea02154140100201e4abbfcca3cf1bd953b351fd0fbbe65c8fda4153ec949ed3c1ed58a5ac6a2e435636ca7114db1060f0765f364a1a7d4757da96583c33b56a36460cd8fa7949b812b118f1529c96d1308957b5fa469227254267926d54d269a97b50aac57b246b316c7a4f441795cdfa505ec5eacd493a5066f8b9215ad6839997546d4975c3b36297ba56a5dca0b06a9e10b8b207cdad709fa939884bf902b0016cd20cf3cd52056e57147d74c067ef7759ce9fef7a393f1a334adbc0820853a5de261c9abf9bda7729bb72e9666c667c7b3eb4cef0cf31d0bfebe447b3b4433855da238a6669bb65ae0854b76c7a270461a79998af189ab188d9670af65403f8eea25c362ae82bbe1312e0720c13b3cbc8ef6a8723b4fd348e2964bd00140c8c4d98a7011643b5c68c716ad51d7880f2423e3bf8bfd926f0b019e02943bcde7c31e6cfe61b02218206c8774278381698a2e6a1d1e85063b1fa4c86e7cb2e8346424be2af83af35a5f49372ddbbb8b2ec229f46e8c9034ecdf7a02dd37be6191fc6a3bf76e2a0b3d755f259426d27ec872e48118f5f34953afebdf34c55bd0da1ed097d53914e2c5f3df0206764853b89837ee485555d506260ad10cfe532ea4d98fdc3a5ee79390741be8fe7c90474e8793630c6c7458a108bb00f9e51cc71ed24c3e7a9c4a475f2f61bf8ba85aaea139fc8a6c87925c2e29ba48aa1e7a0d74ab3aa96bcb427d99f6d08caf8107d1c60835ce31bfc18cb1f6e29cb6f96f0d8af1135f04b45b7bb7c351d7af540f7e2093fa4f4eb62bcc1dec8335137ec2dc4fcd5310bf3a442f178b54f55f38442e4a51a0c292e192f6ebc051505d7f6633a2cd9e2f7a4d3cdfb227d9e1ca1c01fe2d4445107c90c128a77f8e02710b07ca50b92cf0a742b203a183e0b7b3d336b5c795511be3cbd3a7a4a2f91260fada36df96028c25a4872e6ae2b505a8a1e85476457e750107bb69193f2aa45f3d00d008b3449f909f086c9cbb1a4c5a59de082491383cb0cdf3fe031c06219656b629bc955c3abf47a2add4466308cb04fbc6b81a6d6cbb55634441f2b7f66f1bd36ab56e6abbc731b7f941af718194a08d6173018529a11f6f4410de949c94c006322fb879ff7a2b7d790f5dae01231dbfc6d53eec604e01b76887b6719652eaa842f38e3622e5a551d226fe71cebbdb1133126a36ec9ba0b3ef379511c5a4c48873bd2477742541745ed81cee58711ebaa2f031b436a1a58d001894ce25b1db6ccab2f6dec531e0cc1d916e862b64588316ee84acdc8c94e5110eb321e35bff912e88e6024f8d93edebd8013a7d39f47c33c0fdf01faaaaaab23e1fab13725b8a1cb89b03997d3bfb05c8627658700ab83fa232b7a31c20c3f53c16bdf78408cb6ff49edd2f9adac931635241aa5868d57e9c91266530b291065db025a7de16e5c5d588a24295d038394810f4be6cb77f9bf2fd4cb3012d06ce1f4c708e8ff7df324b02edcf7888a30fc83cc78309251754b9c32b866bfe841e81ca5ea7e64fe4ce99117d66fc88590687e965fd4ead99598ce01892ba8801800bd1471bed25d895de4d13a2b7ee2e5dd61821b156ac965e8be2e2a923f6ce3645cab99551d02c35940390c8fafd2144c36a7c7d89c1499d6ead461d7b5dbce9fa24a3a9aa2734d2d441955c06c0c40c9c53a8712ba01deb7029a89531109ad9bc296187eca0382ef16f2d7a5cd77a6cea17f1753f7449b760fdab702a3e64a2854664f75387d518e8cf335ef5ce2475892cde71dababe930555bab0fb6e727dd46c74b295229fb5149f2d4c19b7d0fbe902c5ce49c67b5c1b440db34a4149516862b543fb7d97884f478ced421989a3793998cae85df003c3733fae8d6c76a62bce5e6de9cf4ed3fa15fdeace1e9c5864f4d329acd2069cd9068e28bc6fcc9af93fefd50912185ec7e7abefd47271432f7d62ebcc6a875ba76376b4b227224f3c7aa4c6816ceec616f5e26cd4a17fdd83e3cbecb301a701648073dedab265a8fb4500cf6832044d1b94c02bc2dd2fd3e86bf35f84cb6a473d1b3e20fccabffba1be294d35b413db0fe79dddd6b57f72e69a71d2a697432850b5a5df2fd9d79301b84db3409c4efcbe3fc2dd50f64c06010b71d94fe69ec39d95abcff3eaef3328ab103a716bd9477907a53854e95a5a8f1ed9beb7116660b304bed7e6b47a1f0b94264819d3d333e71eed8aff455701b3decb354ea3bd49bb06eaa90e161ec5ba37211cd3a3cdf492a0a2da8956adea087d78b6c6cf4deb75107b2e9d5f14fa188a9ca14092a7ec258b4923f8f49904abedfe4c9c78ae1b4c149aad0ceb30909fa00be2d3ab9cd25e8522ef4d6526ea7c040dbdeb98b19899327c5e5b58bff197e28bb22c97d04022d1f7705723b8ed9261324f7cf18b912d34378ab3d45d2ba53f87d0756d51389440bde60f1b289613c36f7ff9dc029fcdf290c1d4a4ebb53da03fc3b2d2dce73bf18e90dc412eab0d7e25d7749a29bda9f45d3e2b1dd0462aa4b52c0084b9730522e1b290b7e78b96d12c4bda8f57596121ace658ffb30673e096c65eef3057cfe08f0bbf51216426fd0955cc639b4431929f07c953e7ec5828c61ecd13bca618fe65e077328ba7f298a8fbc79236c34a5d519e48fbd482468d300de96674527aa26c94e67e5afdfcde58e667cbeeb330333e8375325601776131e9ca33f0fd52d8f1dcc6868ea9ca287ae430d3af60459e23b05bb40b52b8da61f77d3a7cabae872d4a6cf7b124e66b0c38943334b946a0fab3d023beb22d82464b6195404378c9140bfd25278ca9081b544b0cb8f8ac1b05700d315a6510b889e0dcd8a21995a05f756344726f99098cf2d559d43177afc0594331fa19e00e4d9e0988d745526a20201b5ae1c8b22e0439e76adbf69e3343de8d40b38939b02e61ffee6a57310f0f739bc872a9a0f5b33d5d9207911d65bfaee586e4232c64a059f21b504983f47ffffe0559f8e7da0215f55bd74a3bb4be59cb5675a45302c32a67a0d9bfdaff85b68793465391203be71f4fc72767297a4359608d5682231672ca4affd5d21dce2dd8cc3409e03296809d777dbbf44d71fff2e55c48d0eb354e880ec84200e868ad16f99e13c0218128b6bb15e1bc29b5ca9971e1d9bf831c5ccb4c1f6a348fc4f3a879285aa02bded2c40fa09c68137620e72db5b72ca4faeeffe7df178dcefa42d5341bc6691e7675899e713b5c11febace23461a5224cbb98aa599f7136f10277d0c2f9c8b124dca8f851a048989f4d404787696f839fe799738a360375c2952f9a5e6c75ca930183df28e2859d1d0d428877db049d0b976102a8933829c068bf00431e1a1423c24f42bc8fa3de132ab0dde5b84ad9cf6029abedeec7d1d774f11a2e20c857f5e9da9befa3ad177d5dea63aa9ca3427e69ac65fa78707e63529a47ac4a4539b88e2d6559f217861258781b0a89c32b65153a45a1d86ba6a2df9327e8d4ed189e70cd0cec2129f6286a1a8eb8be490f03f6a9f3b0d908418beac38e47feea808798418b9ff5f9d73133a25fe7aafbbd2159916c50d036559f03cb775d77fefa7893bb29f4814a5a18f5606e096d490db05e3a0063a2fc2795c6bb28f582c756e5d5feccf5ee0981e12e04b2bbe4d1ec16daf6fdfd892cdad95e2092bf52f9f138e498650314f7b4ccc3684441af78fe68a1ce0d01c23c8b9474428aaf716b9d6c39edfe46bf0d342e559cdea2e11fffee045bdcb611b646e014df5ef970da2a1d6dd7d76a56d1fc0fbf49fd53c1bbca3d14e8c04163b49d0fb619718e44abff765442cdde0b4fcc7851ab0989de11903e57afe26af1315e851139ceba", 0x1000}}, 0x1006) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 'id0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x302]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x40b) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 13.66739609s ago: executing program 3 (id=1908): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.559114602s ago: executing program 5 (id=1910): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r4, 0x541b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x0, 0x2, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x69ba, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r7) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000900000028000380140002006c6f000000000000000000000000000008000300010000000800"], 0x3c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmmsg(r6, &(0x7f0000003900), 0x0, 0x200088d1) 10.127797536s ago: executing program 5 (id=1913): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x840000000002, 0x3, 0x100) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000580), 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r3, r0, 0x68, 0x1) syz_ublk_setup_queues(0xffffffffffffffff, r1, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x16e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 9.293146444s ago: executing program 5 (id=1915): syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000400)=ANY=[@ANYBLOB="120110010000002082057d004000010203010902600003010048f30904000000010100000a240106000a0002010209040080000002000009040101010102000009050109080000037f0725010c000200090402"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300160022bf000001"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = io_uring_setup(0x6ed6, &(0x7f00000004c0)={0x0, 0xbf57, 0x40000, 0x2, 0x26e}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r1, 0x0, 0x0, 0x8, 0x3, 0x1}, 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x2049c0, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0x400000000000007c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x400e0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) r9 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000f80)='G', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r4, 0x47) close_range(r2, 0xffffffffffffffff, 0x0) 8.073520412s ago: executing program 0 (id=1918): clock_gettime(0x0, &(0x7f0000000180)) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) 7.921205329s ago: executing program 3 (id=1919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(r1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8fc, &(0x7f0000000480)={0xa, 0x4e23, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r3, &(0x7f0000000000)="320d9f925ab0787ed97f2ac837bd4303c0e8f1e341b60b04a50e15d89f41a26edf0cb4a8663144a6303704b23b4c5c256d1407498edb1322eab5bebf36abbd7310095969b2d02bee1a96f00363317743602ad854c4298e6aec01edb1ce498c4c27d396eb49a7251cbbab9e02975ceeede0b8824bdd8a53ef4291", 0x7a) 7.821816024s ago: executing program 9 (id=1920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r1, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}}, 0x14}, 0x1, 0x620b}, 0x0) 7.555335756s ago: executing program 9 (id=1921): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r4, 0x541b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x0, 0x2, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x69ba, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r7) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000900000028000380140002006c6f000000000000000000000000000008000300010000000800"], 0x3c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmmsg(r6, &(0x7f0000003900), 0x0, 0x200088d1) 7.232437731s ago: executing program 9 (id=1922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x100, 0xeb0b, 0x6, 0x1, 0xdf, 0x9, 0x5, 0x7ff, 0x5, 0x7fff, 0x6, 0x5, 0x9, 0x0, 0x5, 0x3, 0x3, 0x0, 0x929, 0x7, 0x4, 0x4, 0x1, 0x7ff, 0x6, 0x3, 0xf8cd, 0x7, 0x3, 0x6a8, 0xfffffff9, 0x5, 0x9, 0x1000, 0x3, 0x4, 0x401, 0x1, 0x5, 0x5f1d, 0x0, 0x80000000, 0x7, 0x0, 0x5, 0xbbb90ba, 0x100, 0x6, 0x1, 0x5, 0x80000000, 0x4, 0x387c, 0x8, 0x4, 0x3, 0x3, 0x5, 0x332b, 0xffffffff, 0x8, 0x1800, 0x2, 0x8001, 0x8001, 0x9, 0xe785, 0xfffffffa, 0x7b9, 0x1, 0x9, 0xf3, 0x101, 0x9, 0x8, 0x6, 0x10001, 0x4, 0x7, 0x0, 0x7fff, 0x7, 0xc, 0x5, 0xffffaf59, 0x4, 0xffff, 0xffffffff, 0x6, 0x5c, 0x2, 0x6, 0xdb, 0xba, 0x8e1, 0x0, 0xa6, 0xaf45, 0x1, 0x88, 0xec20, 0x40, 0x7, 0x6, 0x3, 0x4, 0x2, 0x4, 0xd, 0xfffffffa, 0x52, 0x7, 0xffffffc5, 0xff, 0x4, 0x78b6, 0x4, 0x0, 0x7ff, 0x1, 0x7, 0x7fffffff, 0x9, 0x2, 0x7, 0xe, 0xfff, 0x4, 0x5, 0xffff8000, 0x7fffffff, 0xc0, 0x6, 0xc9, 0x5, 0xa, 0x4bb3, 0x89c3, 0x6, 0x10001, 0xe7, 0x1e5, 0x4, 0x4, 0x0, 0x2, 0xd8, 0x63f1, 0x1, 0x6, 0xfffffffd, 0x4, 0x4, 0x1, 0x0, 0x81, 0x10000, 0x8000, 0xa, 0x6, 0x4, 0x6, 0xc, 0x6, 0x9, 0x5, 0x8, 0x1, 0x4, 0x4, 0xd, 0x6, 0x60, 0x3, 0x6, 0x9, 0x5, 0x7, 0x84, 0x7, 0x80000000, 0x0, 0x0, 0x9, 0x1, 0xa34, 0x6f0, 0xd05, 0x2, 0x9, 0x8, 0x1, 0x3, 0x2, 0x8001, 0xa21, 0x10, 0x1000, 0x9, 0x8, 0x7, 0x9, 0x4, 0x2, 0x3, 0x80000001, 0x4, 0x6, 0x3, 0xc, 0xe192, 0x7, 0x7, 0x1, 0x3, 0x8, 0x2, 0x2, 0x7, 0x4, 0xffff, 0x6, 0x1, 0x6, 0x5, 0x2, 0x0, 0x5d8c4028, 0x2, 0x9, 0x7, 0x9, 0x400, 0x8, 0x7, 0x1ff, 0x7, 0xfffffff9, 0x9, 0xd, 0xf30, 0x5cdc, 0xd67, 0xb96, 0xde4, 0x9, 0x1028b471, 0xffffffff, 0x101, 0x721c1d5e, 0x9, 0xffffffff, 0xfffffffd, 0x8, 0x101]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 7.04481246s ago: executing program 0 (id=1923): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="0006fb88ba249b03ba080000000000007b8af8ff0000f6ffbea300000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000000c0)) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000440)={0x0, 0x0, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) r4 = openat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xf, 0x8}, {0x8}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200400c0}, 0x1) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) 5.293419191s ago: executing program 0 (id=1924): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x840000000002, 0x3, 0x100) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000580), 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r4, r1, 0x68, 0x1) syz_ublk_setup_queues(r0, r2, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x16e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 5.176930467s ago: executing program 5 (id=1925): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/142, 0x8e, 0x5) 5.11880181s ago: executing program 3 (id=1926): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) 5.11796829s ago: executing program 9 (id=1927): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c000180060006008848"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d00)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x34}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x20004040) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r6}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x401, 0x9, 0xa, 0xf, 0x5}) mount(0x0, 0x0, 0x0, 0x0, 0x0) 5.1032958s ago: executing program 0 (id=1928): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) read(r0, &(0x7f00000000c0)=""/130, 0x82) 2.172769088s ago: executing program 0 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r1, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x620b}, 0x0) 2.11872775s ago: executing program 9 (id=1930): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r4, 0x541b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x0, 0x2, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x69ba, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r7) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000900000028000380140002006c6f000000000000000000000000000008000300010000000800"], 0x3c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmmsg(r6, &(0x7f0000003900), 0x0, 0x200088d1) 1.91731461s ago: executing program 3 (id=1931): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x20, 0x70bda8, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0x4, 0x10}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0xc8a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.740247888s ago: executing program 0 (id=1932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="0006fb88ba249b03ba080000000000007b8af8ff0000f6ffbea300000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000000c0)) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000440)={0x0, 0x0, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) r4 = openat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xf, 0x8}, {0x8}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200400c0}, 0x1) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) 1.70647975s ago: executing program 9 (id=1933): syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000400)=ANY=[@ANYBLOB="120110010000002082057d004000010203010902600003010048f30904000000010100000a240106000a0002010209040080000002000009040101010102000009050109080000037f0725010c000200090402"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300160022bf000001"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = io_uring_setup(0x6ed6, &(0x7f00000004c0)={0x0, 0xbf57, 0x40000, 0x2, 0x26e}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r1, 0x0, 0x0, 0x8, 0x3, 0x1}, 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x2049c0, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0x400000000000007c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x400e0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) r9 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000f80)='G', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r4, 0x47) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1934): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(r1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8fc, &(0x7f0000000480)={0xa, 0x4e23, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r3, &(0x7f0000000000)="320d9f925ab0787ed97f2ac837bd4303c0e8f1e341b60b04a50e15d89f41a26edf0cb4a8663144a6303704b23b4c5c256d1407498edb1322eab5bebf36abbd7310095969b2d02bee1a96f00363317743602ad854c4298e6aec01edb1ce498c4c27d396eb49a7251cbbab9e02975ceeede0b8824bdd8a53ef4291", 0x7a) kernel console output (not intermixed with test programs): 4.642759][T13325] ? prot_none_test+0x10/0x10 [ 1044.647436][T13325] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1044.653422][T13325] __x64_sys_mprotect+0x80/0x90 [ 1044.658274][T13325] do_syscall_64+0x55/0xb0 [ 1044.662686][T13325] ? clear_bhb_loop+0x40/0x90 [ 1044.667478][T13325] ? clear_bhb_loop+0x40/0x90 [ 1044.672153][T13325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1044.678071][T13325] RIP: 0033:0x7fa50299df57 [ 1044.682501][T13325] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.702100][T13325] RSP: 002b:00007ffcd7ae0428 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1044.710510][T13325] RAX: ffffffffffffffda RBX: 00007fa5037986c0 RCX: 00007fa50299df57 [ 1044.718473][T13325] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fa503779000 [ 1044.726444][T13325] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1044.734409][T13325] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffcd7ae0580 [ 1044.742371][T13325] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1044.750349][T13325] [ 1045.388336][T13325] memory: usage 307192kB, limit 307200kB, failcnt 14125 [ 1045.448855][T13325] memory+swap: usage 382456kB, limit 9007199254740988kB, failcnt 0 [ 1045.459051][T13325] kmem: usage 2244kB, limit 9007199254740988kB, failcnt 0 [ 1045.503060][T13325] Memory cgroup stats for /syz8: [ 1045.503272][T13325] cache 311443456 [ 1045.534896][T13325] rss 823296 [ 1045.538116][T13325] rss_huge 0 [ 1045.588785][T13325] shmem 311443456 [ 1045.634595][T13325] mapped_file 200126464 [ 1045.638883][T13325] dirty 0 [ 1045.642238][T13325] writeback 0 [ 1045.645508][T13325] workingset_refault_anon 3 [ 1045.691162][T13325] workingset_refault_file 0 [ 1045.701809][T13325] swap 77070336 [ 1045.726708][T13325] pgpgin 335092 [ 1045.748447][T13325] pgpgout 258855 [ 1045.752258][T13325] pgfault 136603 [ 1045.755804][T13325] pgmajfault 4 [ 1045.759205][T13325] inactive_anon 233439232 [ 1045.763508][T13325] active_anon 78827520 [ 1045.767553][T13325] inactive_file 0 [ 1045.888736][T13325] active_file 0 [ 1045.910805][T13325] unevictable 0 [ 1045.941131][T13325] hierarchical_memory_limit 314572800 [ 1045.946525][T13325] hierarchical_memsw_limit 9223372036854771712 [ 1046.001016][T13325] total_cache 311443456 [ 1046.005199][T13325] total_rss 823296 [ 1046.012363][T13325] total_rss_huge 0 [ 1046.030538][T13325] total_shmem 311443456 [ 1046.038751][T13325] total_mapped_file 200126464 [ 1046.048895][T13325] total_dirty 0 [ 1046.052701][T13325] total_writeback 0 [ 1046.056584][T13325] total_workingset_refault_anon 3 [ 1046.061721][T13325] total_workingset_refault_file 0 [ 1046.067453][T13325] total_swap 77070336 [ 1046.071726][T13325] total_pgpgin 335092 [ 1046.078715][T13325] total_pgpgout 258855 [ 1046.084198][T13325] total_pgfault 136603 [ 1046.088273][T13325] total_pgmajfault 4 [ 1046.093011][T13325] total_inactive_anon 233439232 [ 1046.099797][T13325] total_active_anon 78827520 [ 1046.108935][T13325] total_inactive_file 0 [ 1046.113089][T13325] total_active_file 0 [ 1046.122398][T13325] total_unevictable 0 [ 1046.126454][T13325] anon_cost 0 [ 1046.158706][T13325] file_cost 0 [ 1046.162093][T13325] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1532,pid=12907,uid=0 [ 1046.191200][T13325] Memory cgroup out of memory: Killed process 12907 (syz.8.1532) total-vm:200552kB, anon-rss:1540kB, file-rss:20608kB, shmem-rss:123904kB, UID:0 pgtables:352kB oom_score_adj:1000 [ 1046.359279][T13196] syz.6.1610 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1046.400880][T13196] CPU: 1 PID: 13196 Comm: syz.6.1610 Not tainted syzkaller #0 [ 1046.408380][T13196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1046.418442][T13196] Call Trace: [ 1046.421722][T13196] [ 1046.424662][T13196] dump_stack_lvl+0x18c/0x250 [ 1046.429362][T13196] ? show_regs_print_info+0x20/0x20 [ 1046.434586][T13196] ? load_image+0x420/0x420 [ 1046.439107][T13196] ? ___ratelimit+0x478/0x610 [ 1046.443808][T13196] ? radix_tree_cpu_dead+0x160/0x160 [ 1046.449120][T13196] dump_header+0xd8/0x820 [ 1046.453465][T13196] oom_kill_process+0x390/0x580 [ 1046.458334][T13196] out_of_memory+0xe0e/0x1200 [ 1046.463036][T13196] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1046.468688][T13196] ? mutex_lock_nested+0x20/0x20 [ 1046.473641][T13196] ? unregister_oom_notifier+0x20/0x20 [ 1046.479135][T13196] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1046.484696][T13196] ? try_charge_memcg+0xc91/0x17c0 [ 1046.489819][T13196] ? drain_local_stock+0x630/0x630 [ 1046.494953][T13196] ? do_raw_spin_unlock+0x121/0x230 [ 1046.500178][T13196] try_charge_memcg+0xca1/0x17c0 [ 1046.505139][T13196] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1046.510970][T13196] ? folio_flags+0x120/0x120 [ 1046.515584][T13196] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1046.520725][T13196] ? percpu_ref_tryget+0x15/0x180 [ 1046.525769][T13196] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1046.531249][T13196] charge_memcg+0x11b/0x3b0 [ 1046.535767][T13196] ? __mem_cgroup_charge+0x80/0x80 [ 1046.540887][T13196] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1046.546361][T13196] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1046.551837][T13196] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1046.557400][T13196] __mem_cgroup_charge+0x25/0x80 [ 1046.562353][T13196] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1046.567914][T13196] ? xas_load+0x12b/0x140 [ 1046.572272][T13196] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1046.577394][T13196] ? mark_lock+0x94/0x320 [ 1046.581742][T13196] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1046.587743][T13196] ? __lock_acquire+0x7d80/0x7d80 [ 1046.592788][T13196] ? lock_chain_count+0x20/0x20 [ 1046.597663][T13196] shmem_get_folio_gfp+0x1037/0x2b40 [ 1046.603005][T13196] shmem_write_begin+0xf2/0x430 [ 1046.607887][T13196] generic_perform_write+0x2fe/0x5c0 [ 1046.613206][T13196] ? generic_file_direct_write+0x3e0/0x3e0 [ 1046.619045][T13196] ? file_update_time+0x192/0x1a0 [ 1046.624113][T13196] shmem_file_write_iter+0xfb/0x120 [ 1046.629330][T13196] __kernel_write_iter+0x29f/0x6d0 [ 1046.634471][T13196] ? vfs_read+0x990/0x990 [ 1046.638816][T13196] ? get_dump_page+0x156/0x200 [ 1046.643618][T13196] ? __asan_memset+0x22/0x40 [ 1046.648232][T13196] ? iov_iter_bvec+0xd4/0x1b0 [ 1046.652973][T13196] dump_user_range+0x418/0x840 [ 1046.657778][T13196] ? dump_skip+0x40/0x40 [ 1046.662037][T13196] ? dump_emit+0x78/0xe0 [ 1046.666327][T13196] ? dump_emit+0xa6/0xe0 [ 1046.670590][T13196] ? elf_core_dump+0x2dbb/0x37c0 [ 1046.675557][T13196] elf_core_dump+0x320e/0x37c0 [ 1046.680361][T13196] ? load_elf_binary+0x2850/0x2850 [ 1046.685506][T13196] ? verify_lock_unused+0x140/0x140 [ 1046.690727][T13196] ? __lock_acquire+0x7d80/0x7d80 [ 1046.695763][T13196] ? mas_next_slot+0x94c/0x980 [ 1046.700576][T13196] ? rcu_read_lock_any_held+0xb4/0x140 [ 1046.706050][T13196] ? 0xffffffffff600000 [ 1046.710232][T13196] do_coredump+0x1791/0x24a0 [ 1046.714860][T13196] ? nfs_stat_to_errno+0x170/0x170 [ 1046.720019][T13196] ? lock_chain_count+0x20/0x20 [ 1046.724890][T13196] ? _raw_spin_unlock_irq+0x23/0x50 [ 1046.730101][T13196] ? lockdep_hardirqs_on+0x98/0x150 [ 1046.735382][T13196] get_signal+0x10da/0x1390 [ 1046.739924][T13196] arch_do_signal_or_restart+0xc2/0x7b0 [ 1046.745535][T13196] ? get_sigframe_size+0x20/0x20 [ 1046.750503][T13196] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1046.756513][T13196] ? exit_to_user_mode_loop+0x3b/0x110 [ 1046.761999][T13196] exit_to_user_mode_loop+0x70/0x110 [ 1046.767303][T13196] exit_to_user_mode_prepare+0xee/0x180 [ 1046.772870][T13196] irqentry_exit_to_user_mode+0x9/0x30 [ 1046.778342][T13196] exc_page_fault+0x8c/0x100 [ 1046.782951][T13196] asm_exc_page_fault+0x26/0x30 [ 1046.787823][T13196] RIP: 0033:0x7f7d44b9e161 [ 1046.792255][T13196] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1046.811890][T13196] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1046.817985][T13196] RAX: 0000000000000000 RBX: 00007f7d44e26090 RCX: 00007f7d44b9e159 [ 1046.825986][T13196] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1046.833988][T13196] RBP: 00007f7d44c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1046.841985][T13196] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1046.849991][T13196] R13: 00007f7d44e26128 R14: 00007f7d44e26090 R15: 00007fffec6c7498 [ 1046.858011][T13196] [ 1046.937600][T13196] memory: usage 307200kB, limit 307200kB, failcnt 15777 [ 1047.002683][T13196] memory+swap: usage 356296kB, limit 9007199254740988kB, failcnt 0 [ 1047.051340][T13196] kmem: usage 7336kB, limit 9007199254740988kB, failcnt 0 [ 1047.058485][T13196] Memory cgroup stats for /syz6: [ 1047.058562][T13196] cache 306319360 [ 1047.159810][T13196] rss 741376 [ 1047.163033][T13196] rss_huge 0 [ 1047.166210][T13196] shmem 306204672 [ 1047.188957][T13196] mapped_file 145457152 [ 1047.193142][T13196] dirty 114688 [ 1047.196492][T13196] writeback 0 [ 1047.214880][T13196] workingset_refault_anon 612 [ 1047.243648][T13196] workingset_refault_file 2139 [ 1047.248429][T13196] swap 50274304 [ 1047.288828][T13196] pgpgin 937075 [ 1047.303596][T13196] pgpgout 862620 [ 1047.306577][T13344] loop8: detected capacity change from 0 to 8 [ 1047.315535][T13196] pgfault 324851 [ 1047.336334][T13196] pgmajfault 86 [ 1047.346351][T13196] inactive_anon 292335616 [ 1047.354121][T13196] active_anon 14610432 [ 1047.358244][T13196] inactive_file 0 [ 1047.362292][T13196] active_file 114688 [ 1047.366185][T13196] unevictable 0 [ 1047.380260][T13344] Dev loop8: unable to read RDB block 8 [ 1047.411279][T13196] hierarchical_memory_limit 314572800 [ 1047.416669][T13196] hierarchical_memsw_limit 9223372036854771712 [ 1047.426319][T13344] loop8: unable to read partition table [ 1047.437991][T13196] total_cache 306319360 [ 1047.448232][T13196] total_rss 741376 [ 1047.461073][T13196] total_rss_huge 0 [ 1047.465999][T13196] total_shmem 306204672 [ 1047.476776][T13196] total_mapped_file 145457152 [ 1047.481883][T13344] loop8: partition table beyond EOD, truncated [ 1047.487386][T13196] total_dirty 114688 [ 1047.499879][T13196] total_writeback 0 [ 1047.505955][T13196] total_workingset_refault_anon 612 [ 1047.520409][T13196] total_workingset_refault_file 2139 [ 1047.526946][T13344] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1047.558803][T13196] total_swap 50274304 [ 1047.565070][T13196] total_pgpgin 937075 [ 1047.578771][T13196] total_pgpgout 862620 [ 1047.595524][T13196] total_pgfault 324859 [ 1047.608142][T13196] total_pgmajfault 86 [ 1047.648767][T13196] total_inactive_anon 292335616 [ 1047.653698][T13196] total_active_anon 14610432 [ 1047.658269][T13196] total_inactive_file 0 [ 1047.677334][T13196] total_active_file 114688 [ 1047.696804][T13196] total_unevictable 0 [ 1047.703241][T13196] anon_cost 0 [ 1047.706540][T13196] file_cost 0 [ 1047.720168][T13196] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1519,pid=12859,uid=0 [ 1048.132394][T13196] Memory cgroup out of memory: Killed process 12859 (syz.6.1519) total-vm:200684kB, anon-rss:1540kB, file-rss:20608kB, shmem-rss:130304kB, UID:0 pgtables:368kB oom_score_adj:1000 [ 1050.740059][ T30] oom_reaper: reaped process 12859 (syz.6.1519), now anon-rss:0kB, file-rss:10692kB, shmem-rss:0kB [ 1050.833418][ T7172] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1050.883067][ T7172] CPU: 0 PID: 7172 Comm: syz-executor Not tainted syzkaller #0 [ 1050.890664][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1050.900715][ T7172] Call Trace: [ 1050.904009][ T7172] [ 1050.906929][ T7172] dump_stack_lvl+0x18c/0x250 [ 1050.911604][ T7172] ? show_regs_print_info+0x20/0x20 [ 1050.916791][ T7172] ? load_image+0x420/0x420 [ 1050.921296][ T7172] ? ___ratelimit+0x478/0x610 [ 1050.925982][ T7172] ? radix_tree_cpu_dead+0x160/0x160 [ 1050.931271][ T7172] dump_header+0xd8/0x820 [ 1050.935599][ T7172] oom_kill_process+0x390/0x580 [ 1050.940458][ T7172] out_of_memory+0xe0e/0x1200 [ 1050.945131][ T7172] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1050.950755][ T7172] ? mutex_lock_nested+0x20/0x20 [ 1050.955727][ T7172] ? unregister_oom_notifier+0x20/0x20 [ 1050.961187][ T7172] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1050.966736][ T7172] ? try_charge_memcg+0xc91/0x17c0 [ 1050.971865][ T7172] ? drain_local_stock+0x630/0x630 [ 1050.976989][ T7172] ? do_raw_spin_unlock+0x121/0x230 [ 1050.982184][ T7172] try_charge_memcg+0xca1/0x17c0 [ 1050.987146][ T7172] ? folio_flags+0x120/0x120 [ 1050.991735][ T7172] ? percpu_ref_tryget+0x15/0x180 [ 1050.996750][ T7172] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1051.002458][ T7172] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1051.008448][ T7172] ? percpu_ref_tryget+0x15/0x180 [ 1051.013479][ T7172] ? percpu_ref_tryget+0x15/0x180 [ 1051.018499][ T7172] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1051.024215][ T7172] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1051.029927][ T7172] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1051.035738][ T7172] obj_cgroup_charge+0x36e/0x630 [ 1051.040675][ T7172] ? get_obj_cgroup_from_current+0xd4/0x280 [ 1051.046563][ T7172] ? obj_cgroup_charge+0xed/0x630 [ 1051.051581][ T7172] ? mod_objcg_mlstate+0x320/0x320 [ 1051.056681][ T7172] ? percpu_ref_tryget+0x15/0x180 [ 1051.061697][ T7172] ? get_obj_cgroup_from_current+0xd4/0x280 [ 1051.067593][ T7172] ? get_obj_cgroup_from_current+0xd4/0x280 [ 1051.073479][ T7172] slab_pre_alloc_hook+0x2e2/0x300 [ 1051.078588][ T7172] kmem_cache_alloc+0x5a/0x2c0 [ 1051.083350][ T7172] ? anon_vma_fork+0xe5/0x520 [ 1051.088016][ T7172] anon_vma_fork+0xe5/0x520 [ 1051.092513][ T7172] ? dup_userfaultfd+0x2c1/0x800 [ 1051.097440][ T7172] copy_mm+0x12c7/0x1e30 [ 1051.101722][ T7172] ? copy_signal+0x640/0x640 [ 1051.106296][ T7172] ? lockdep_init_map_type+0x9c/0x8e0 [ 1051.111666][ T7172] ? __init_rwsem+0x122/0x160 [ 1051.116324][ T7172] ? copy_signal+0x51f/0x640 [ 1051.120902][ T7172] copy_process+0x16c9/0x3da0 [ 1051.125575][ T7172] ? copy_process+0x98e/0x3da0 [ 1051.130329][ T7172] ? __pidfd_prepare+0x140/0x140 [ 1051.135257][ T7172] kernel_clone+0x24b/0x8a0 [ 1051.139754][ T7172] ? create_io_thread+0x190/0x190 [ 1051.144770][ T7172] ? __might_fault+0xaa/0x120 [ 1051.149436][ T7172] __x64_sys_clone+0x1b7/0x230 [ 1051.154184][ T7172] ? __ia32_sys_vfork+0x140/0x140 [ 1051.159198][ T7172] ? lock_chain_count+0x20/0x20 [ 1051.164037][ T7172] ? lockdep_hardirqs_on+0x98/0x150 [ 1051.169245][ T7172] do_syscall_64+0x55/0xb0 [ 1051.173650][ T7172] ? clear_bhb_loop+0x40/0x90 [ 1051.178315][ T7172] ? clear_bhb_loop+0x40/0x90 [ 1051.182982][ T7172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1051.188868][ T7172] RIP: 0033:0x7f7d44bc6bd2 [ 1051.193277][ T7172] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1051.212872][ T7172] RSP: 002b:00007fffec6c76b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1051.221274][ T7172] RAX: ffffffffffffffda RBX: 00007fffec6c76b0 RCX: 00007f7d44bc6bd2 [ 1051.229246][ T7172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1051.237223][ T7172] RBP: 00007fffec6c783c R08: 0000000000000000 R09: 0000000000000001 [ 1051.245185][ T7172] R10: 00005555590907d0 R11: 0000000000000246 R12: 0000000000000001 [ 1051.253145][ T7172] R13: 00000000000927c0 R14: 00000000000ff400 R15: 00007fffec6c7890 [ 1051.261161][ T7172] [ 1051.318809][ T7172] memory: usage 305684kB, limit 307200kB, failcnt 16931 [ 1051.325805][ T7172] memory+swap: usage 354780kB, limit 9007199254740988kB, failcnt 0 [ 1051.423236][ T7172] kmem: usage 7032kB, limit 9007199254740988kB, failcnt 0 [ 1051.486809][ T7172] Memory cgroup stats for /syz6: [ 1051.487129][ T7172] cache 301903872 [ 1051.518665][ T7172] rss 421888 [ 1051.522003][ T7172] rss_huge 0 [ 1051.525219][ T7172] shmem 301903872 [ 1051.558662][ T7172] mapped_file 11755520 [ 1051.573276][ T7172] dirty 0 [ 1051.576256][ T7172] writeback 0 [ 1051.598700][ T7172] workingset_refault_anon 612 [ 1051.603517][ T7172] workingset_refault_file 2139 [ 1051.648906][ T7172] swap 50274304 [ 1051.662901][ T7172] pgpgin 937147 [ 1051.666401][ T7172] pgpgout 863836 [ 1051.698954][ T7172] pgfault 324857 [ 1051.702552][ T7172] pgmajfault 86 [ 1051.736582][ T7172] inactive_anon 14610432 [ 1051.746625][ T7172] active_anon 287764480 [ 1051.766864][ T7172] inactive_file 0 [ 1051.787062][ T7172] active_file 0 [ 1051.818710][ T7172] unevictable 0 [ 1051.822347][ T7172] hierarchical_memory_limit 314572800 [ 1051.827730][ T7172] hierarchical_memsw_limit 9223372036854771712 [ 1051.898783][ T7172] total_cache 301903872 [ 1051.902993][ T7172] total_rss 421888 [ 1051.906764][ T7172] total_rss_huge 0 [ 1051.938682][ T7172] total_shmem 301903872 [ 1051.948677][ T7172] total_mapped_file 11755520 [ 1051.963569][ T7172] total_dirty 0 [ 1051.967071][ T7172] total_writeback 0 [ 1052.018763][ T7172] total_workingset_refault_anon 612 [ 1052.024015][ T7172] total_workingset_refault_file 2139 [ 1052.066317][ T7172] total_swap 50274304 [ 1052.083804][ T7172] total_pgpgin 937147 [ 1052.186770][ T7172] total_pgpgout 863836 [ 1052.208667][ T7172] total_pgfault 324865 [ 1052.217543][ T7172] total_pgmajfault 86 [ 1052.223014][ T7172] total_inactive_anon 14610432 [ 1052.227786][ T7172] total_active_anon 287764480 [ 1052.238141][ T7172] total_inactive_file 0 [ 1052.261352][ T7172] total_active_file 0 [ 1052.265375][ T7172] total_unevictable 0 [ 1052.328659][ T7172] anon_cost 0 [ 1052.358879][ T7172] file_cost 0 [ 1052.362214][ T7172] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1610,pid=13196,uid=0 [ 1052.486076][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1672'. [ 1052.502617][T13372] comedi comedi1: dt2811-pgh: a I/O base address must be specified [ 1052.759548][ T7172] Memory cgroup out of memory: Killed process 13196 (syz.6.1610) total-vm:102376kB, anon-rss:1400kB, file-rss:56064kB, shmem-rss:11392kB, UID:0 pgtables:228kB oom_score_adj:1000 [ 1054.662258][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.668917][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.630073][T13437] syz.4.1692 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1059.639930][T13437] CPU: 0 PID: 13437 Comm: syz.4.1692 Not tainted syzkaller #0 [ 1059.647370][T13437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1059.657407][T13437] Call Trace: [ 1059.660673][T13437] [ 1059.663589][T13437] dump_stack_lvl+0x18c/0x250 [ 1059.668258][T13437] ? show_regs_print_info+0x20/0x20 [ 1059.673468][T13437] ? load_image+0x420/0x420 [ 1059.677958][T13437] ? ___ratelimit+0x478/0x610 [ 1059.682627][T13437] ? radix_tree_cpu_dead+0x160/0x160 [ 1059.687900][T13437] dump_header+0xd8/0x820 [ 1059.692220][T13437] oom_kill_process+0x390/0x580 [ 1059.697056][T13437] out_of_memory+0xe0e/0x1200 [ 1059.701721][T13437] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1059.707358][T13437] ? print_unlock_imbalance_bug+0x160/0x160 [ 1059.713236][T13437] ? mutex_lock_nested+0x20/0x20 [ 1059.718167][T13437] ? unregister_oom_notifier+0x20/0x20 [ 1059.723616][T13437] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1059.729149][T13437] ? try_charge_memcg+0xc91/0x17c0 [ 1059.734245][T13437] ? drain_local_stock+0x630/0x630 [ 1059.739345][T13437] ? do_raw_spin_unlock+0x121/0x230 [ 1059.744533][T13437] try_charge_memcg+0xca1/0x17c0 [ 1059.749464][T13437] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1059.755256][T13437] ? folio_flags+0x120/0x120 [ 1059.759845][T13437] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1059.764965][T13437] ? percpu_ref_tryget+0x15/0x180 [ 1059.769975][T13437] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1059.775422][T13437] charge_memcg+0x11b/0x3b0 [ 1059.779914][T13437] ? __mem_cgroup_charge+0x80/0x80 [ 1059.785010][T13437] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1059.790451][T13437] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1059.795891][T13437] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1059.801426][T13437] __mem_cgroup_charge+0x25/0x80 [ 1059.806352][T13437] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1059.811913][T13437] ? xas_load+0x12b/0x140 [ 1059.816235][T13437] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1059.821342][T13437] shmem_get_folio_gfp+0x1037/0x2b40 [ 1059.826648][T13437] shmem_write_begin+0xf2/0x430 [ 1059.831488][T13437] generic_perform_write+0x2fe/0x5c0 [ 1059.836769][T13437] ? generic_file_direct_write+0x3e0/0x3e0 [ 1059.842558][T13437] ? down_write+0x16e/0x200 [ 1059.847049][T13437] ? file_update_time+0x98/0x1a0 [ 1059.851978][T13437] shmem_file_write_iter+0xfb/0x120 [ 1059.857161][T13437] __kernel_write_iter+0x29f/0x6d0 [ 1059.862259][T13437] ? vfs_read+0x990/0x990 [ 1059.866570][T13437] ? get_dump_page+0x156/0x200 [ 1059.871321][T13437] ? __asan_memset+0x22/0x40 [ 1059.875901][T13437] ? iov_iter_bvec+0xd4/0x1b0 [ 1059.880571][T13437] dump_user_range+0x418/0x840 [ 1059.885324][T13437] ? dump_skip+0x40/0x40 [ 1059.889546][T13437] ? dump_emit+0x78/0xe0 [ 1059.893781][T13437] ? dump_emit+0xa6/0xe0 [ 1059.898006][T13437] ? elf_core_dump+0x2dbb/0x37c0 [ 1059.902932][T13437] elf_core_dump+0x320e/0x37c0 [ 1059.907692][T13437] ? load_elf_binary+0x2850/0x2850 [ 1059.912792][T13437] ? verify_lock_unused+0x140/0x140 [ 1059.917970][T13437] ? __lock_acquire+0x7d80/0x7d80 [ 1059.922979][T13437] ? mas_next_slot+0x94c/0x980 [ 1059.927749][T13437] ? rcu_read_lock_any_held+0xb4/0x140 [ 1059.933193][T13437] ? 0xffffffffff600000 [ 1059.937334][T13437] do_coredump+0x1791/0x24a0 [ 1059.941918][T13437] ? nfs_stat_to_errno+0x170/0x170 [ 1059.947025][T13437] ? lock_chain_count+0x20/0x20 [ 1059.951887][T13437] ? _raw_spin_unlock_irq+0x23/0x50 [ 1059.957069][T13437] ? lockdep_hardirqs_on+0x98/0x150 [ 1059.962251][T13437] get_signal+0x10da/0x1390 [ 1059.966747][T13437] arch_do_signal_or_restart+0xc2/0x7b0 [ 1059.972289][T13437] ? get_sigframe_size+0x20/0x20 [ 1059.977226][T13437] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1059.983215][T13437] ? exit_to_user_mode_loop+0x3b/0x110 [ 1059.988665][T13437] exit_to_user_mode_loop+0x70/0x110 [ 1059.993935][T13437] exit_to_user_mode_prepare+0xee/0x180 [ 1059.999470][T13437] irqentry_exit_to_user_mode+0x9/0x30 [ 1060.004911][T13437] exc_page_fault+0x8c/0x100 [ 1060.009482][T13437] asm_exc_page_fault+0x26/0x30 [ 1060.014320][T13437] RIP: 0033:0x7f967cf9e161 [ 1060.018740][T13437] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1060.038340][T13437] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1060.044390][T13437] RAX: 0000000000000000 RBX: 00007f967d226090 RCX: 00007f967cf9e159 [ 1060.052367][T13437] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1060.060321][T13437] RBP: 00007f967d03506b R08: 0000000000000000 R09: 0000000000000000 [ 1060.068287][T13437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1060.076240][T13437] R13: 00007f967d226128 R14: 00007f967d226090 R15: 00007ffc8ce08708 [ 1060.084208][T13437] [ 1060.087840][T13437] memory: usage 307200kB, limit 307200kB, failcnt 8324 [ 1060.094707][T13437] memory+swap: usage 341048kB, limit 9007199254740988kB, failcnt 0 [ 1060.102636][T13437] kmem: usage 8748kB, limit 9007199254740988kB, failcnt 0 [ 1060.109753][T13437] Memory cgroup stats for /syz4: [ 1060.109840][T13437] cache 303157248 [ 1060.118360][T13437] rss 2334720 [ 1060.121651][T13437] rss_huge 0 [ 1060.124828][T13437] shmem 303157248 [ 1060.128437][T13437] mapped_file 123088896 [ 1060.132596][T13437] dirty 0 [ 1060.135530][T13437] writeback 0 [ 1060.138830][T13437] workingset_refault_anon 235 [ 1060.143490][T13437] workingset_refault_file 0 [ 1060.147978][T13437] swap 34660352 [ 1060.151479][T13437] pgpgin 1068338 [ 1060.155028][T13437] pgpgout 993755 [ 1060.158554][T13437] pgfault 372989 [ 1060.162150][T13437] pgmajfault 155 [ 1060.165681][T13437] inactive_anon 130699264 [ 1060.170031][T13437] active_anon 174788608 [ 1060.174165][T13437] inactive_file 0 [ 1060.177777][T13437] active_file 0 [ 1060.181469][T13437] unevictable 0 [ 1060.185304][T13437] hierarchical_memory_limit 314572800 [ 1060.190701][T13437] hierarchical_memsw_limit 9223372036854771712 [ 1060.196831][T13437] total_cache 303157248 [ 1060.200988][T13437] total_rss 2334720 [ 1060.204775][T13437] total_rss_huge 0 [ 1060.208474][T13437] total_shmem 303157248 [ 1060.212634][T13437] total_mapped_file 123088896 [ 1060.217288][T13437] total_dirty 0 [ 1060.220742][T13437] total_writeback 0 [ 1060.224530][T13437] total_workingset_refault_anon 235 [ 1060.229740][T13437] total_workingset_refault_file 0 [ 1060.234740][T13437] total_swap 34660352 [ 1060.238729][T13437] total_pgpgin 1068338 [ 1060.242776][T13437] total_pgpgout 993755 [ 1060.246834][T13437] total_pgfault 372989 [ 1060.250903][T13437] total_pgmajfault 155 [ 1060.254947][T13437] total_inactive_anon 130699264 [ 1060.259865][T13437] total_active_anon 174788608 [ 1060.264524][T13437] total_inactive_file 0 [ 1060.268688][T13437] total_active_file 0 [ 1060.272647][T13437] total_unevictable 0 [ 1060.276606][T13437] anon_cost 0 [ 1060.279903][T13437] file_cost 0 [ 1060.283169][T13437] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1574,pid=13075,uid=0 [ 1060.298701][T13437] Memory cgroup out of memory: Killed process 13075 (syz.4.1574) total-vm:200684kB, anon-rss:1496kB, file-rss:20608kB, shmem-rss:120064kB, UID:0 pgtables:348kB oom_score_adj:1000 [ 1060.973720][T13433] comedi comedi1: dt2811-pgh: a I/O base address must be specified [ 1070.061097][ T30] oom_reaper: reaped process 13075 (syz.4.1574), now anon-rss:0kB, file-rss:20480kB, shmem-rss:58640kB [ 1073.079296][T13437] syz.4.1692 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1073.089539][T13437] CPU: 0 PID: 13437 Comm: syz.4.1692 Not tainted syzkaller #0 [ 1073.096987][T13437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1073.107031][T13437] Call Trace: [ 1073.110301][T13437] [ 1073.113217][T13437] dump_stack_lvl+0x18c/0x250 [ 1073.117889][T13437] ? show_regs_print_info+0x20/0x20 [ 1073.123075][T13437] ? load_image+0x420/0x420 [ 1073.127596][T13437] ? ___ratelimit+0x478/0x610 [ 1073.132314][T13437] ? radix_tree_cpu_dead+0x160/0x160 [ 1073.137597][T13437] dump_header+0xd8/0x820 [ 1073.141917][T13437] oom_kill_process+0x390/0x580 [ 1073.146762][T13437] out_of_memory+0xe0e/0x1200 [ 1073.151435][T13437] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1073.157090][T13437] ? print_unlock_imbalance_bug+0x160/0x160 [ 1073.162972][T13437] ? mutex_lock_nested+0x20/0x20 [ 1073.167899][T13437] ? unregister_oom_notifier+0x20/0x20 [ 1073.173371][T13437] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1073.178906][T13437] ? try_charge_memcg+0xc91/0x17c0 [ 1073.184020][T13437] ? drain_local_stock+0x630/0x630 [ 1073.189128][T13437] ? do_raw_spin_unlock+0x121/0x230 [ 1073.194316][T13437] try_charge_memcg+0xca1/0x17c0 [ 1073.199247][T13437] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1073.205063][T13437] ? folio_flags+0x120/0x120 [ 1073.209640][T13437] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1073.214741][T13437] ? percpu_ref_tryget+0x15/0x180 [ 1073.219747][T13437] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1073.225192][T13437] charge_memcg+0x11b/0x3b0 [ 1073.229682][T13437] ? __mem_cgroup_charge+0x80/0x80 [ 1073.234775][T13437] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1073.240215][T13437] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1073.245658][T13437] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1073.251188][T13437] __mem_cgroup_charge+0x25/0x80 [ 1073.256116][T13437] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1073.261645][T13437] ? xas_load+0x12b/0x140 [ 1073.265967][T13437] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1073.271083][T13437] shmem_get_folio_gfp+0x1037/0x2b40 [ 1073.276365][T13437] shmem_write_begin+0xf2/0x430 [ 1073.281201][T13437] generic_perform_write+0x2fe/0x5c0 [ 1073.286476][T13437] ? generic_file_direct_write+0x3e0/0x3e0 [ 1073.292273][T13437] ? down_write+0x16e/0x200 [ 1073.296768][T13437] ? file_update_time+0x98/0x1a0 [ 1073.301692][T13437] shmem_file_write_iter+0xfb/0x120 [ 1073.306877][T13437] __kernel_write_iter+0x29f/0x6d0 [ 1073.311979][T13437] ? vfs_read+0x990/0x990 [ 1073.316289][T13437] ? get_dump_page+0x156/0x200 [ 1073.321040][T13437] ? __asan_memset+0x22/0x40 [ 1073.325614][T13437] ? iov_iter_bvec+0xd4/0x1b0 [ 1073.330279][T13437] dump_user_range+0x418/0x840 [ 1073.335054][T13437] ? dump_skip+0x40/0x40 [ 1073.339289][T13437] ? dump_emit+0x78/0xe0 [ 1073.343520][T13437] ? dump_emit+0xa6/0xe0 [ 1073.347741][T13437] ? elf_core_dump+0x2dbb/0x37c0 [ 1073.352669][T13437] elf_core_dump+0x320e/0x37c0 [ 1073.357428][T13437] ? load_elf_binary+0x2850/0x2850 [ 1073.362534][T13437] ? verify_lock_unused+0x140/0x140 [ 1073.367716][T13437] ? __lock_acquire+0x7d80/0x7d80 [ 1073.372724][T13437] ? mas_next_slot+0x94c/0x980 [ 1073.377492][T13437] ? rcu_read_lock_any_held+0xb4/0x140 [ 1073.382935][T13437] ? 0xffffffffff600000 [ 1073.387080][T13437] do_coredump+0x1791/0x24a0 [ 1073.391686][T13437] ? nfs_stat_to_errno+0x170/0x170 [ 1073.396814][T13437] ? lock_chain_count+0x20/0x20 [ 1073.401655][T13437] ? _raw_spin_unlock_irq+0x23/0x50 [ 1073.406836][T13437] ? lockdep_hardirqs_on+0x98/0x150 [ 1073.412022][T13437] get_signal+0x10da/0x1390 [ 1073.416519][T13437] arch_do_signal_or_restart+0xc2/0x7b0 [ 1073.422054][T13437] ? get_sigframe_size+0x20/0x20 [ 1073.426997][T13437] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1073.432968][T13437] ? exit_to_user_mode_loop+0x3b/0x110 [ 1073.438413][T13437] exit_to_user_mode_loop+0x70/0x110 [ 1073.443684][T13437] exit_to_user_mode_prepare+0xee/0x180 [ 1073.449214][T13437] irqentry_exit_to_user_mode+0x9/0x30 [ 1073.454654][T13437] exc_page_fault+0x8c/0x100 [ 1073.459229][T13437] asm_exc_page_fault+0x26/0x30 [ 1073.464095][T13437] RIP: 0033:0x7f967cf9e161 [ 1073.468492][T13437] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1073.488083][T13437] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1073.494147][T13437] RAX: 0000000000000000 RBX: 00007f967d226090 RCX: 00007f967cf9e159 [ 1073.502116][T13437] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1073.510074][T13437] RBP: 00007f967d03506b R08: 0000000000000000 R09: 0000000000000000 [ 1073.518044][T13437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1073.526010][T13437] R13: 00007f967d226128 R14: 00007f967d226090 R15: 00007ffc8ce08708 [ 1073.533978][T13437] [ 1073.537623][T13437] memory: usage 307200kB, limit 307200kB, failcnt 74178 [ 1073.544572][T13437] memory+swap: usage 342280kB, limit 9007199254740988kB, failcnt 0 [ 1073.552462][T13437] kmem: usage 8652kB, limit 9007199254740988kB, failcnt 0 [ 1073.559582][T13437] Memory cgroup stats for /syz4: [ 1073.559657][T13437] cache 303693824 [ 1073.568183][T13437] rss 2019328 [ 1073.571472][T13437] rss_huge 0 [ 1073.574649][T13437] shmem 303693824 [ 1073.578261][T13437] mapped_file 51142656 [ 1073.582338][T13437] dirty 0 [ 1073.585257][T13437] writeback 0 [ 1073.588519][T13437] workingset_refault_anon 235 [ 1073.593219][T13437] workingset_refault_file 0 [ 1073.598069][T13437] swap 35921920 [ 1073.601763][T13437] pgpgin 1068778 [ 1073.605325][T13437] pgpgout 994141 [ 1073.608881][T13437] pgfault 373022 [ 1073.612406][T13437] pgmajfault 155 [ 1073.615927][T13437] inactive_anon 129388544 [ 1073.620261][T13437] active_anon 176324608 [ 1073.624392][T13437] inactive_file 0 [ 1073.628005][T13437] active_file 0 [ 1073.631464][T13437] unevictable 0 [ 1073.634901][T13437] hierarchical_memory_limit 314572800 [ 1073.640281][T13437] hierarchical_memsw_limit 9223372036854771712 [ 1073.646411][T13437] total_cache 303693824 [ 1073.650575][T13437] total_rss 2019328 [ 1073.654360][T13437] total_rss_huge 0 [ 1073.658087][T13437] total_shmem 303693824 [ 1073.662248][T13437] total_mapped_file 51142656 [ 1073.666816][T13437] total_dirty 0 [ 1073.670278][T13437] total_writeback 0 [ 1073.674086][T13437] total_workingset_refault_anon 235 [ 1073.679282][T13437] total_workingset_refault_file 0 [ 1073.684282][T13437] total_swap 35921920 [ 1073.688241][T13437] total_pgpgin 1068778 [ 1073.692318][T13437] total_pgpgout 994141 [ 1073.696364][T13437] total_pgfault 373022 [ 1073.700805][T13437] total_pgmajfault 155 [ 1073.704854][T13437] total_inactive_anon 129388544 [ 1073.709726][T13437] total_active_anon 176324608 [ 1073.714379][T13437] total_inactive_file 0 [ 1073.718507][T13437] total_active_file 0 [ 1073.722511][T13437] total_unevictable 0 [ 1073.726471][T13437] anon_cost 0 [ 1073.729769][T13437] file_cost 0 [ 1073.733031][T13437] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1671,pid=13375,uid=0 [ 1073.748145][T13437] Memory cgroup out of memory: Killed process 13375 (syz.4.1671) total-vm:102376kB, anon-rss:1400kB, file-rss:61312kB, shmem-rss:768kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 1076.040491][ T30] oom_reaper: reaped process 13375 (syz.4.1671), now anon-rss:0kB, file-rss:61312kB, shmem-rss:768kB [ 1076.179958][T13437] syz.4.1692 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1076.189813][T13437] CPU: 0 PID: 13437 Comm: syz.4.1692 Not tainted syzkaller #0 [ 1076.197253][T13437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1076.207291][T13437] Call Trace: [ 1076.210555][T13437] [ 1076.213471][T13437] dump_stack_lvl+0x18c/0x250 [ 1076.218146][T13437] ? show_regs_print_info+0x20/0x20 [ 1076.223330][T13437] ? load_image+0x420/0x420 [ 1076.227817][T13437] ? ___ratelimit+0x478/0x610 [ 1076.232484][T13437] ? radix_tree_cpu_dead+0x160/0x160 [ 1076.237755][T13437] dump_header+0xd8/0x820 [ 1076.242076][T13437] oom_kill_process+0x390/0x580 [ 1076.246916][T13437] out_of_memory+0xe0e/0x1200 [ 1076.251586][T13437] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1076.257205][T13437] ? print_unlock_imbalance_bug+0x160/0x160 [ 1076.263090][T13437] ? mutex_lock_nested+0x20/0x20 [ 1076.268034][T13437] ? unregister_oom_notifier+0x20/0x20 [ 1076.273503][T13437] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1076.279038][T13437] ? try_charge_memcg+0xc91/0x17c0 [ 1076.284135][T13437] ? drain_local_stock+0x630/0x630 [ 1076.289236][T13437] ? do_raw_spin_unlock+0x121/0x230 [ 1076.294423][T13437] try_charge_memcg+0xca1/0x17c0 [ 1076.299354][T13437] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1076.305150][T13437] ? folio_flags+0x120/0x120 [ 1076.309726][T13437] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1076.314830][T13437] ? percpu_ref_tryget+0x15/0x180 [ 1076.319842][T13437] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1076.325296][T13437] charge_memcg+0x11b/0x3b0 [ 1076.329805][T13437] ? __mem_cgroup_charge+0x80/0x80 [ 1076.334902][T13437] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1076.340364][T13437] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1076.345816][T13437] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1076.351346][T13437] __mem_cgroup_charge+0x25/0x80 [ 1076.356269][T13437] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1076.361814][T13437] ? xas_load+0x12b/0x140 [ 1076.366153][T13437] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1076.371260][T13437] shmem_get_folio_gfp+0x1037/0x2b40 [ 1076.376543][T13437] shmem_write_begin+0xf2/0x430 [ 1076.381383][T13437] generic_perform_write+0x2fe/0x5c0 [ 1076.386663][T13437] ? generic_file_direct_write+0x3e0/0x3e0 [ 1076.392450][T13437] ? down_write+0x16e/0x200 [ 1076.396956][T13437] ? file_update_time+0x98/0x1a0 [ 1076.401884][T13437] shmem_file_write_iter+0xfb/0x120 [ 1076.407083][T13437] __kernel_write_iter+0x29f/0x6d0 [ 1076.412186][T13437] ? vfs_read+0x990/0x990 [ 1076.416498][T13437] ? get_dump_page+0x156/0x200 [ 1076.421269][T13437] ? __asan_memset+0x22/0x40 [ 1076.425844][T13437] ? iov_iter_bvec+0xd4/0x1b0 [ 1076.430509][T13437] dump_user_range+0x418/0x840 [ 1076.435261][T13437] ? dump_skip+0x40/0x40 [ 1076.439484][T13437] ? dump_emit+0x78/0xe0 [ 1076.443739][T13437] ? dump_emit+0xa6/0xe0 [ 1076.447960][T13437] ? elf_core_dump+0x2dbb/0x37c0 [ 1076.452886][T13437] elf_core_dump+0x320e/0x37c0 [ 1076.457645][T13437] ? load_elf_binary+0x2850/0x2850 [ 1076.462744][T13437] ? verify_lock_unused+0x140/0x140 [ 1076.467933][T13437] ? __lock_acquire+0x7d80/0x7d80 [ 1076.472944][T13437] ? mas_next_slot+0x94c/0x980 [ 1076.477710][T13437] ? rcu_read_lock_any_held+0xb4/0x140 [ 1076.483154][T13437] ? 0xffffffffff600000 [ 1076.487297][T13437] do_coredump+0x1791/0x24a0 [ 1076.491884][T13437] ? nfs_stat_to_errno+0x170/0x170 [ 1076.496988][T13437] ? lock_chain_count+0x20/0x20 [ 1076.501841][T13437] ? _raw_spin_unlock_irq+0x23/0x50 [ 1076.507025][T13437] ? lockdep_hardirqs_on+0x98/0x150 [ 1076.512209][T13437] get_signal+0x10da/0x1390 [ 1076.516704][T13437] arch_do_signal_or_restart+0xc2/0x7b0 [ 1076.522241][T13437] ? get_sigframe_size+0x20/0x20 [ 1076.527165][T13437] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1076.533140][T13437] ? exit_to_user_mode_loop+0x3b/0x110 [ 1076.538612][T13437] exit_to_user_mode_loop+0x70/0x110 [ 1076.543909][T13437] exit_to_user_mode_prepare+0xee/0x180 [ 1076.549441][T13437] irqentry_exit_to_user_mode+0x9/0x30 [ 1076.554884][T13437] exc_page_fault+0x8c/0x100 [ 1076.559457][T13437] asm_exc_page_fault+0x26/0x30 [ 1076.564291][T13437] RIP: 0033:0x7f967cf9e161 [ 1076.568694][T13437] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1076.588285][T13437] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1076.594339][T13437] RAX: 0000000000000000 RBX: 00007f967d226090 RCX: 00007f967cf9e159 [ 1076.602319][T13437] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1076.610279][T13437] RBP: 00007f967d03506b R08: 0000000000000000 R09: 0000000000000000 [ 1076.618232][T13437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1076.626205][T13437] R13: 00007f967d226128 R14: 00007f967d226090 R15: 00007ffc8ce08708 [ 1076.634173][T13437] [ 1076.638023][T13437] memory: usage 307200kB, limit 307200kB, failcnt 86657 [ 1076.644996][T13437] memory+swap: usage 343048kB, limit 9007199254740988kB, failcnt 0 [ 1076.652888][T13437] kmem: usage 8660kB, limit 9007199254740988kB, failcnt 0 [ 1076.660008][T13437] Memory cgroup stats for /syz4: [ 1076.660100][T13437] cache 303861760 [ 1076.669259][T13437] rss 1843200 [ 1076.672531][T13437] rss_huge 0 [ 1076.675708][T13437] shmem 303861760 [ 1076.679345][T13437] mapped_file 4710400 [ 1076.683308][T13437] dirty 0 [ 1076.686221][T13437] writeback 0 [ 1076.689518][T13437] workingset_refault_anon 235 [ 1076.694173][T13437] workingset_refault_file 0 [ 1076.698688][T13437] swap 36708352 [ 1076.702132][T13437] pgpgin 1069011 [ 1076.705654][T13437] pgpgout 994376 [ 1076.709199][T13437] pgfault 373037 [ 1076.712723][T13437] pgmajfault 155 [ 1076.716244][T13437] inactive_anon 128602112 [ 1076.720567][T13437] active_anon 177102848 [ 1076.724697][T13437] inactive_file 0 [ 1076.728308][T13437] active_file 0 [ 1076.731765][T13437] unevictable 0 [ 1076.735203][T13437] hierarchical_memory_limit 314572800 [ 1076.740583][T13437] hierarchical_memsw_limit 9223372036854771712 [ 1076.746712][T13437] total_cache 303861760 [ 1076.750877][T13437] total_rss 1843200 [ 1076.754661][T13437] total_rss_huge 0 [ 1076.758355][T13437] total_shmem 303861760 [ 1076.762504][T13437] total_mapped_file 4710400 [ 1076.766986][T13437] total_dirty 0 [ 1076.771072][T13437] total_writeback 0 [ 1076.774864][T13437] total_workingset_refault_anon 235 [ 1076.780068][T13437] total_workingset_refault_file 0 [ 1076.785072][T13437] total_swap 36708352 [ 1076.789057][T13437] total_pgpgin 1069011 [ 1076.793103][T13437] total_pgpgout 994376 [ 1076.797147][T13437] total_pgfault 373037 [ 1076.801211][T13437] total_pgmajfault 155 [ 1076.805266][T13437] total_inactive_anon 128602112 [ 1076.810118][T13437] total_active_anon 177102848 [ 1076.814769][T13437] total_inactive_file 0 [ 1076.819134][T13437] total_active_file 0 [ 1076.823097][T13437] total_unevictable 0 [ 1076.827054][T13437] anon_cost 0 [ 1076.830359][T13437] file_cost 0 [ 1076.833638][T13437] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1692,pid=13437,uid=0 [ 1076.848750][T13437] Memory cgroup out of memory: Killed process 13437 (syz.4.1692) total-vm:102376kB, anon-rss:1400kB, file-rss:47488kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 1078.734534][T10845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1078.750505][T10845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1078.803518][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1078.820105][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1078.849466][T13459] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1078.856934][T13459] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1078.864415][T13459] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1078.872415][T13461] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1078.884404][T13461] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1078.893078][T13463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1078.895288][T13461] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1078.908388][T13463] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1078.916055][T13463] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1078.916442][T13461] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1078.932002][T13463] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1078.944520][T13461] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1078.952595][T13461] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1078.961712][T13461] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1079.141803][ T5790] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1079.152613][ T5790] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1079.168946][ T5790] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1079.180473][ T5790] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1079.192521][ T5790] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1079.207217][ T5790] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1080.063574][ T59] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.956402][ T59] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.978938][ T5790] Bluetooth: hci1: command tx timeout [ 1081.058766][ T5790] Bluetooth: hci5: command tx timeout [ 1081.058787][T13461] Bluetooth: hci3: command tx timeout [ 1081.298852][ T5790] Bluetooth: hci6: command tx timeout [ 1081.588341][ T59] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.776438][ T59] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.638931][T13457] chnl_net:caif_netlink_parms(): no params data found [ 1082.844492][T13455] chnl_net:caif_netlink_parms(): no params data found [ 1083.016302][T13460] chnl_net:caif_netlink_parms(): no params data found [ 1083.060361][ T5790] Bluetooth: hci1: command tx timeout [ 1083.138784][ T5790] Bluetooth: hci5: command tx timeout [ 1083.138912][T13461] Bluetooth: hci3: command tx timeout [ 1083.308985][T13464] chnl_net:caif_netlink_parms(): no params data found [ 1083.389407][T13461] Bluetooth: hci6: command tx timeout [ 1083.711892][T13457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.758730][T13457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.765969][T13457] bridge_slave_0: entered allmulticast mode [ 1083.820228][T13457] bridge_slave_0: entered promiscuous mode [ 1083.995518][T13457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.038955][T13457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.078862][T13457] bridge_slave_1: entered allmulticast mode [ 1084.086150][T13457] bridge_slave_1: entered promiscuous mode [ 1084.407705][T13455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.437904][T13455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.448355][T13455] bridge_slave_0: entered allmulticast mode [ 1084.467352][T13455] bridge_slave_0: entered promiscuous mode [ 1084.498086][T13460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.527484][T13460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.539283][T13460] bridge_slave_0: entered allmulticast mode [ 1084.546561][T13460] bridge_slave_0: entered promiscuous mode [ 1084.610101][T13460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.617244][T13460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.668984][T13460] bridge_slave_1: entered allmulticast mode [ 1084.697485][T13460] bridge_slave_1: entered promiscuous mode [ 1084.799021][T13455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.807139][T13455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.838949][T13455] bridge_slave_1: entered allmulticast mode [ 1084.846193][T13455] bridge_slave_1: entered promiscuous mode [ 1084.945990][T13457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.060020][T13457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.106313][T13455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.138701][T13461] Bluetooth: hci1: command tx timeout [ 1085.140006][T13455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.207089][T13460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.218830][T13461] Bluetooth: hci5: command tx timeout [ 1085.218981][ T5790] Bluetooth: hci3: command tx timeout [ 1085.253240][T13464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.268732][T13464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.277000][T13464] bridge_slave_0: entered allmulticast mode [ 1085.294959][T13464] bridge_slave_0: entered promiscuous mode [ 1085.313292][T13464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.325754][T13464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.336727][T13464] bridge_slave_1: entered allmulticast mode [ 1085.353923][T13464] bridge_slave_1: entered promiscuous mode [ 1085.426575][T13460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.457410][T13457] team0: Port device team_slave_0 added [ 1085.470330][ T5790] Bluetooth: hci6: command tx timeout [ 1085.590071][T13457] team0: Port device team_slave_1 added [ 1085.607789][T13455] team0: Port device team_slave_0 added [ 1085.720952][T13455] team0: Port device team_slave_1 added [ 1085.740495][ T59] IPVS: stopping master sync thread 11666 ... [ 1085.761668][T13464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.786998][T13464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.817434][T13460] team0: Port device team_slave_0 added [ 1085.848664][T13457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.855629][T13457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.882415][T13457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.986136][T13460] team0: Port device team_slave_1 added [ 1086.009310][T13455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.016285][T13455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.058621][T13455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.090835][T13457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.097801][T13457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.158650][T13457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.217525][T13464] team0: Port device team_slave_0 added [ 1086.227288][T13464] team0: Port device team_slave_1 added [ 1086.298331][T13455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.318069][T13455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.358677][T13455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.589625][T13457] hsr_slave_0: entered promiscuous mode [ 1086.598329][T13457] hsr_slave_1: entered promiscuous mode [ 1086.620486][T13457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1086.628087][T13457] Cannot create hsr debugfs directory [ 1086.720295][T13460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.727274][T13460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.755124][T13460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.779696][T13464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.786654][T13464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.817919][T13464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.847736][T13464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.857043][T13464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.893021][T13464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.926483][T13460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.948235][T13460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.984977][T13460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.027682][T13455] hsr_slave_0: entered promiscuous mode [ 1087.043409][T13455] hsr_slave_1: entered promiscuous mode [ 1087.066087][T13455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1087.075860][T13455] Cannot create hsr debugfs directory [ 1087.108217][ T59] hsr_slave_0: left promiscuous mode [ 1087.117224][ T59] hsr_slave_1: left promiscuous mode [ 1087.131929][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.146075][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.154246][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.172902][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.180823][ T59] bridge_slave_1: left allmulticast mode [ 1087.186482][ T59] bridge_slave_1: left promiscuous mode [ 1087.200820][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.216113][ T59] bridge_slave_0: left allmulticast mode [ 1087.225245][ T5790] Bluetooth: hci1: command tx timeout [ 1087.238624][ T59] bridge_slave_0: left promiscuous mode [ 1087.246419][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.295877][ T59] veth1_macvtap: left promiscuous mode [ 1087.301444][ T5790] Bluetooth: hci3: command tx timeout [ 1087.308867][ T5790] Bluetooth: hci5: command tx timeout [ 1087.314797][ T59] veth0_macvtap: left promiscuous mode [ 1087.329045][ T59] veth1_vlan: left promiscuous mode [ 1087.334299][ T59] veth0_vlan: left promiscuous mode [ 1087.539002][ T5790] Bluetooth: hci6: command tx timeout [ 1088.306994][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1088.369675][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1088.425237][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.490646][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.964489][ T59] bond0 (unregistering): Released all slaves [ 1089.232309][T13464] hsr_slave_0: entered promiscuous mode [ 1089.239268][T13464] hsr_slave_1: entered promiscuous mode [ 1089.278171][T13460] hsr_slave_0: entered promiscuous mode [ 1089.287514][T13460] hsr_slave_1: entered promiscuous mode [ 1089.294317][T13460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1089.302392][T13460] Cannot create hsr debugfs directory [ 1090.095953][ T59] IPVS: stop unused estimator thread 0... [ 1090.673397][ T59] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.791903][ T59] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.911254][ T59] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.930141][T13457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1090.961325][T13457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1091.034824][ T59] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.053302][T13457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1091.074181][T13457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1091.257028][T13455] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1091.529340][T13455] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1091.659535][T13455] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1091.690134][T13455] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1091.760640][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.869989][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.945082][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.015340][T13457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.060915][T13457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.083921][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.133026][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.140199][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.183236][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.190427][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.285433][T13457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1092.296016][T13457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1092.417106][T13455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.570806][T13455] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.640626][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.647778][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.691783][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.698978][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.750684][ T59] tipc: Left network mode [ 1092.810542][ T59] tipc: Left network mode [ 1092.824273][T13455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1093.229119][T13457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.506326][T13455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.672806][T13457] veth0_vlan: entered promiscuous mode [ 1093.803230][T13457] veth1_vlan: entered promiscuous mode [ 1094.265145][T13457] veth0_macvtap: entered promiscuous mode [ 1094.419248][T13457] veth1_macvtap: entered promiscuous mode [ 1094.429100][T13455] veth0_vlan: entered promiscuous mode [ 1094.456485][T13455] veth1_vlan: entered promiscuous mode [ 1094.585013][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.618638][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.628490][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.659030][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.678914][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.699016][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.720444][T13457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.731281][ T59] IPVS: stopping master sync thread 11544 ... [ 1094.755428][ T59] IPVS: stopping master sync thread 10479 ... [ 1094.940957][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.963315][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.973721][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.991911][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.003249][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.014636][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.035053][T13457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.210458][T13455] veth0_macvtap: entered promiscuous mode [ 1095.239492][T13457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.248218][T13457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.266789][T13457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.275962][T13457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.296792][T13455] veth1_macvtap: entered promiscuous mode [ 1095.551304][T13455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.580669][T13455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.592388][T13455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.603298][T13455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.613796][T13455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.626889][T13455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.640798][T13455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.652794][T13455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.673596][T13455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.848368][T13455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.885701][T13455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.904551][T13455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.924773][T13455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.934996][T13455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.961047][T13455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.979246][T13455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.002060][T13455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.028154][T13455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.080135][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.094283][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.124734][ T59] hsr_slave_0: left promiscuous mode [ 1096.139247][ T59] hsr_slave_1: left promiscuous mode [ 1096.149268][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.156697][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.167836][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.191971][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.207368][ T59] bridge_slave_1: left allmulticast mode [ 1096.217451][ T59] bridge_slave_1: left promiscuous mode [ 1096.233527][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.246606][ T59] bridge_slave_0: left allmulticast mode [ 1096.256555][ T59] bridge_slave_0: left promiscuous mode [ 1096.267523][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.333267][ T59] hsr_slave_0: left promiscuous mode [ 1096.348405][ T59] hsr_slave_1: left promiscuous mode [ 1096.371092][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.378534][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.394858][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.403740][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.418144][ T59] bridge_slave_1: left allmulticast mode [ 1096.425992][ T59] bridge_slave_1: left promiscuous mode [ 1096.439741][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.456644][ T59] bridge_slave_0: left allmulticast mode [ 1096.468684][ T59] bridge_slave_0: left promiscuous mode [ 1096.474455][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.587036][ T59] veth1_macvtap: left promiscuous mode [ 1096.592712][ T59] veth0_macvtap: left promiscuous mode [ 1096.598348][ T59] veth1_vlan: left promiscuous mode [ 1096.616369][ T59] veth0_vlan: left promiscuous mode [ 1096.638444][ T59] veth1_macvtap: left promiscuous mode [ 1096.644858][ T59] veth0_macvtap: left promiscuous mode [ 1096.650787][ T59] veth1_vlan: left promiscuous mode [ 1096.656141][ T59] veth0_vlan: left promiscuous mode [ 1098.212354][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1098.293028][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1098.375474][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.435753][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.877442][ T59] bond0 (unregistering): Released all slaves [ 1100.327865][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1100.403271][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1100.454412][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1100.515372][ T59] bond0 (unregistering): (slave 30): Releasing backup interface [ 1100.995282][ T59] bond0 (unregistering): Released all slaves [ 1101.331392][T13455] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.341959][T13455] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.358628][T13455] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.367344][T13455] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.403577][T13464] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1101.432176][T13464] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1101.445052][T13464] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1101.628425][T13464] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1101.664683][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.691734][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.380121][T10989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.387978][T10989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.520554][T10989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.539919][T10989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.721147][T13464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.831124][T13460] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1102.833365][ T59] IPVS: stop unused estimator thread 0... [ 1102.871675][T13460] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1102.898356][ T59] IPVS: stop unused estimator thread 0... [ 1102.915417][T13464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.951583][T13460] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1102.986605][T13460] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1103.076560][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.083737][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.150886][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.158046][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.314434][T13464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1104.076865][T13684] xt_connbytes: Forcing CT accounting to be enabled [ 1104.083920][T13684] Cannot find set identified by id 0 to match [ 1104.811794][T13460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.838484][T13460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.886976][T10989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.894167][T10989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.483019][T13048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.490210][T13048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.032974][T13464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.010723][T13464] veth0_vlan: entered promiscuous mode [ 1107.031736][T13715] netlink: 'syz.9.1707': attribute type 32 has an invalid length. [ 1107.073213][T13464] veth1_vlan: entered promiscuous mode [ 1107.200954][T13464] veth0_macvtap: entered promiscuous mode [ 1107.249486][T13464] veth1_macvtap: entered promiscuous mode [ 1107.270910][T13715] binder: BINDER_SET_CONTEXT_MGR already set [ 1107.277450][T13715] binder: 13714:13715 ioctl 4018620d 200000000040 returned -16 [ 1107.305105][T13464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.338670][T13464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.356314][T13464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.381865][T13464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.418633][T13464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.447105][T13464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.461669][T13728] loop8: detected capacity change from 0 to 8 [ 1107.470987][T13464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.486721][T13728] Dev loop8: unable to read RDB block 8 [ 1107.496659][T13728] loop8: unable to read partition table [ 1107.506974][T13464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.523025][T13728] loop8: partition table beyond EOD, truncated [ 1107.529665][T13464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.539908][T13728] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1107.575596][T13464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.599614][T13464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.619815][T13464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.647822][T13464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.670641][T13464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1107.733649][T13464] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.752961][T13464] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.772094][T13464] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.781826][T13732] Cannot find set identified by id 0 to match [ 1107.811217][T13464] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.847797][T13460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.880879][T13460] veth0_vlan: entered promiscuous mode [ 1108.917006][T13460] veth1_vlan: entered promiscuous mode [ 1109.019898][T13048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.027958][T13048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.120877][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.148239][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.206955][T13460] veth0_macvtap: entered promiscuous mode [ 1109.247061][T13460] veth1_macvtap: entered promiscuous mode [ 1109.358712][ T5817] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1109.432423][T13460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.470608][T13460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.483744][T13460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.494530][T13460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.505897][T13460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.517628][T13460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.527783][T13460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.550606][ T5817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.560698][T13460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.570465][T13460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.699165][T13756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1696'. [ 1109.850276][T13460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.979089][T13460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.134527][T13460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.316268][T13460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.451893][T13460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.506520][ T5817] usb 2-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 1110.515810][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.529887][ T5817] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 1110.538384][T13460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.551370][ T5817] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1110.561780][T13460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.573963][ T5817] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 1110.581713][T13460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.591877][ T5817] usb 2-1: media controller created [ 1110.600133][T13460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.625250][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1110.654246][ T5817] usb 2-1: selecting invalid altsetting 1 [ 1110.661575][ T5817] set interface failed [ 1110.661605][ T5817] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1110.673756][ T5817] error writing reg: 0xff, val: 0x00 [ 1110.682172][T13460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.495975][T13744] overlayfs: missing 'lowerdir' [ 1111.531011][ T5817] dvb_usb_mxl111sf: probe of 2-1:1.0 failed with error -22 [ 1111.556874][T13768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.579743][T13460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.614531][T13768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.628631][T13460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.637470][T13460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.760847][T13744] xt_HMARK: spi-set and port-set can't be combined [ 1111.784120][T11252] usb 2-1: USB disconnect, device number 8 [ 1111.800111][ T5817] IPVS: starting estimator thread 0... [ 1111.899241][T13772] IPVS: using max 21 ests per chain, 50400 per kthread [ 1112.031049][T10989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.053159][T13779] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1112.080690][T10989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.174613][ T6466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.208731][ T6466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.318767][T11252] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1112.542425][T11252] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.569430][T11252] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1112.598911][T11252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.753312][T11252] usb 1-1: config 0 descriptor?? [ 1112.917492][T11252] usb 1-1: bad CDC descriptors [ 1113.767094][ T5816] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 1113.801077][ T5816] wiimote 0005:057E:0306.0003: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 1113.852180][ T5816] wiimote 0005:057E:0306.0003: New device registered [ 1114.071917][T10459] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1114.279041][T10459] usb 4-1: Using ep0 maxpacket: 8 [ 1114.368003][T10459] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1114.397827][T10459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.430267][T10459] usb 4-1: Product: syz [ 1114.477374][T10459] usb 4-1: Manufacturer: syz [ 1114.486248][T10459] usb 4-1: SerialNumber: syz [ 1114.806454][T13806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1724'. [ 1114.983296][T13796] wiimote 0005:057E:0306.0003: Device removed [ 1115.010955][ T9] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 1115.756081][T10459] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1115.764791][ T5817] usb 1-1: USB disconnect, device number 4 [ 1115.829765][T10459] usb 4-1: MIDIStreaming interface descriptor not found [ 1115.973639][ T9] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input25 [ 1116.049455][T10459] usb 4-1: USB disconnect, device number 4 [ 1116.054140][T13810] device-mapper: ioctl: Unable to interpret geometry settings. [ 1116.107773][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.117436][ T9] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input26 [ 1116.117718][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.229209][ T9] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input24 [ 1116.377873][T13815] udevd[13815]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1116.643460][T11252] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1117.072826][T11252] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.370881][T11252] usb 2-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 1117.408645][T11252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.520863][T11252] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 1117.573989][T11252] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1117.633351][T11252] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 1117.660392][T11252] usb 2-1: media controller created [ 1117.707802][T13814] overlayfs: missing 'lowerdir' [ 1117.726154][T11252] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1117.738540][T13814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.747165][T13814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.756671][T13814] xt_HMARK: spi-set and port-set can't be combined [ 1117.868409][T11252] usb 2-1: selecting invalid altsetting 1 [ 1117.883822][T11252] set interface failed [ 1117.883850][T11252] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1117.948259][T11252] error writing reg: 0xff, val: 0x00 [ 1118.079385][T11252] dvb_usb_mxl111sf: probe of 2-1:1.0 failed with error -22 [ 1118.131432][T11252] usb 2-1: USB disconnect, device number 9 [ 1121.248718][T11252] IPVS: starting estimator thread 0... [ 1121.374405][T13863] IPVS: using max 24 ests per chain, 57600 per kthread [ 1121.398800][T13868] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1121.526756][T13869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1734'. [ 1121.678141][T11252] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1122.749208][T11252] usb 2-1: device not accepting address 10, error -71 [ 1123.077070][T13881] xt_connbytes: Forcing CT accounting to be enabled [ 1123.084306][T13881] set match dimension is over the limit! [ 1124.855980][T13906] syzkaller0: entered promiscuous mode [ 1124.864020][T13906] syzkaller0: entered allmulticast mode [ 1125.824912][T12196] IPVS: starting estimator thread 0... [ 1125.948629][T13924] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1125.963194][T13921] IPVS: using max 36 ests per chain, 86400 per kthread [ 1126.228843][T12196] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1128.259380][T12196] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.323819][T12196] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1128.399106][T12196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.447073][T12196] usb 4-1: config 0 descriptor?? [ 1128.481798][T12196] usb 4-1: bad CDC descriptors [ 1128.598756][ T8186] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1128.686270][ T9] usb 4-1: USB disconnect, device number 5 [ 1128.780480][ T8186] usb 2-1: Using ep0 maxpacket: 32 [ 1128.889854][ T8186] usb 2-1: config 3 has an invalid interface number: 249 but max is 0 [ 1128.908769][ T8186] usb 2-1: config 3 has no interface number 0 [ 1128.914899][ T8186] usb 2-1: config 3 interface 249 has no altsetting 0 [ 1128.971918][ T8186] usb 2-1: New USB device found, idVendor=0cf3, idProduct=b003, bcdDevice=bf.24 [ 1128.998696][ T8186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.067898][ T8186] usb 2-1: Product: syz [ 1129.091991][ T8186] usb 2-1: Manufacturer: syz [ 1129.096634][ T8186] usb 2-1: SerialNumber: syz [ 1129.473605][ T8186] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1129.521710][ T8186] usb 2-1: USB disconnect, device number 12 [ 1129.912055][T13950] netlink: 'syz.3.1750': attribute type 1 has an invalid length. [ 1129.931861][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1750'. [ 1131.228690][ T5816] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1131.343985][T13976] fuse: Bad value for 'fd' [ 1131.430770][ T5816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.472662][ T5816] usb 2-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 1131.514483][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.559004][T12196] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1131.619442][ T5816] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 1131.661040][ T5816] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1131.713672][ T5816] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 1131.748886][ T5816] usb 2-1: media controller created [ 1131.785166][T13961] overlayfs: missing 'lowerdir' [ 1131.796016][T12196] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1131.821779][T13961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.830363][T13961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.840039][T13961] xt_HMARK: spi-set and port-set can't be combined [ 1131.857808][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1131.869619][T12196] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1131.887160][T12196] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1131.906561][T12196] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.279961][ T5816] usb 2-1: selecting invalid altsetting 1 [ 1132.394986][ T5816] set interface failed [ 1132.395043][ T5816] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1132.438660][ T5816] error writing reg: 0xff, val: 0x00 [ 1132.439166][T13972] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1132.502103][T12196] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1132.596065][ T5816] dvb_usb_mxl111sf: probe of 2-1:1.0 failed with error -22 [ 1132.677391][ T5816] usb 2-1: USB disconnect, device number 13 [ 1132.886767][ T5779] usb 10-1: USB disconnect, device number 2 [ 1133.079371][T14001] xt_hashlimit: size too large, truncated to 1048576 [ 1133.157253][T14002] xt_hashlimit: size too large, truncated to 1048576 [ 1134.432695][T14024] netlink: 'syz.3.1763': attribute type 1 has an invalid length. [ 1134.499674][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1763'. [ 1135.589369][T14035] fuse: Bad value for 'fd' [ 1136.468650][T12196] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1136.715656][T12196] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.794216][T12196] usb 10-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 1136.820833][T12196] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.868376][T12196] usb 10-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 1136.940507][T12196] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1137.012128][T12196] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 1137.057150][T12196] usb 10-1: media controller created [ 1137.132219][T12196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1137.173575][T14042] overlayfs: missing 'lowerdir' [ 1137.188046][T12196] usb 10-1: selecting invalid altsetting 1 [ 1137.211728][T12196] set interface failed [ 1137.211758][T12196] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1137.235746][T12196] error writing reg: 0xff, val: 0x00 [ 1137.280111][T14042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.294841][T14042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.313475][T14042] xt_HMARK: spi-set and port-set can't be combined [ 1137.379901][T12196] dvb_usb_mxl111sf: probe of 10-1:1.0 failed with error -22 [ 1137.428959][T12196] usb 10-1: USB disconnect, device number 3 [ 1140.259317][T14079] netlink: 'syz.0.1773': attribute type 1 has an invalid length. [ 1140.290731][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1773'. [ 1142.118993][T14088] fuse: Invalid rootmode [ 1143.998792][T10459] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1144.190523][T10459] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.215639][T10459] usb 1-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 1144.287502][T10459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.319877][T10459] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 1144.356627][T10459] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1144.398986][T10459] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 1144.406625][T10459] usb 1-1: media controller created [ 1144.505124][T10459] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1144.524481][T14111] overlayfs: missing 'lowerdir' [ 1144.535934][T14111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.545613][T14111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.555633][T14111] xt_HMARK: spi-set and port-set can't be combined [ 1144.619102][T10459] usb 1-1: selecting invalid altsetting 1 [ 1144.624895][T10459] set interface failed [ 1144.624918][T10459] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1144.648325][T10459] error writing reg: 0xff, val: 0x00 [ 1144.795656][T10459] dvb_usb_mxl111sf: probe of 1-1:1.0 failed with error -22 [ 1144.872361][T10459] usb 1-1: USB disconnect, device number 5 [ 1147.275433][T14150] fuse: Invalid rootmode [ 1147.838868][T11252] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1148.038690][T11252] usb 4-1: Using ep0 maxpacket: 32 [ 1148.076659][T11252] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.128778][T11252] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1148.196331][T11252] usb 4-1: config 1 interface 0 has no altsetting 1 [ 1148.236939][T11252] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1148.252057][T11252] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1148.291655][T11252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.329207][T11252] usb 4-1: Product: syz [ 1148.339060][T11252] usb 4-1: Manufacturer: syz [ 1148.376237][T11252] usb 4-1: SerialNumber: syz [ 1148.429343][T11252] snd-ua101 4-1:1.1: invalid num_altsetting [ 1148.465277][T11252] snd-ua101 4-1:1.0: invalid bNumEndpoints [ 1148.484387][T11252] usb 4-1: selecting invalid altsetting 0 [ 1148.521188][T11252] usb 4-1: selecting invalid altsetting 0 [ 1148.526970][T11252] usbtest: probe of 4-1:1.1 failed with error -22 [ 1148.579576][T11252] usb 4-1: selecting invalid altsetting 0 [ 1148.585359][T11252] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 1148.650751][T11252] usb 4-1: selecting invalid altsetting 0 [ 1148.657261][T11252] snd-ua101: probe of 4-1:1.1 failed with error -22 [ 1148.819173][T11252] usb 4-1: USB disconnect, device number 6 [ 1149.230397][T13461] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1149.327088][T13461] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1149.366985][T13461] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1149.380671][T13461] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1149.398671][T13461] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1149.408356][T13461] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1149.818760][T12196] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1150.032774][T12196] usb 1-1: Using ep0 maxpacket: 16 [ 1150.041514][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.079320][T12196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.108678][T12196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.966970][T12196] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1150.983924][T12196] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1150.993234][T12196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.026655][T14180] chnl_net:caif_netlink_parms(): no params data found [ 1151.063572][T12196] usb 1-1: config 0 descriptor?? [ 1151.272461][T14202] loop8: detected capacity change from 0 to 8 [ 1151.471464][ T5790] Bluetooth: hci0: command tx timeout [ 1151.551036][T14202] Dev loop8: unable to read RDB block 8 [ 1151.556645][T14202] loop8: unable to read partition table [ 1151.563406][T14202] loop8: partition table beyond EOD, truncated [ 1151.570026][T14202] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1151.585260][T12196] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 1151.603496][T12196] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 1151.918057][T12196] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 1151.948320][T12196] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1151.963870][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.978658][T12196] microsoft 0003:045E:07DA.0004: no inputs found [ 1151.994940][T12196] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 1152.025363][T12196] usb 1-1: USB disconnect, device number 6 [ 1152.433646][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.480002][T14207] fido_id[14207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1152.647760][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.739006][T14214] fuse: Invalid rootmode [ 1152.777174][T14180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.818815][T14180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.826058][T14180] bridge_slave_0: entered allmulticast mode [ 1152.860069][T14180] bridge_slave_0: entered promiscuous mode [ 1152.891692][T14180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.918834][T14180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.949002][T14180] bridge_slave_1: entered allmulticast mode [ 1152.956687][T14180] bridge_slave_1: entered promiscuous mode [ 1153.084537][T14180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.131966][T14180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1153.248810][T10459] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1153.284078][T14180] team0: Port device team_slave_0 added [ 1153.324579][T14180] team0: Port device team_slave_1 added [ 1153.362308][T14229] netlink: 'syz.3.1797': attribute type 32 has an invalid length. [ 1153.448917][T10459] usb 1-1: Using ep0 maxpacket: 32 [ 1153.473950][T10459] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.499317][T10459] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1153.531398][T14229] binder_alloc: 14225: pid 14225 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1153.538644][T10459] usb 1-1: config 1 interface 0 has no altsetting 1 [ 1153.548780][ T5790] Bluetooth: hci0: command tx timeout [ 1153.559234][T10459] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1153.568231][T10459] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1153.588668][T10459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.596763][T10459] usb 1-1: Product: syz [ 1153.601564][T10459] usb 1-1: Manufacturer: syz [ 1153.606189][T10459] usb 1-1: SerialNumber: syz [ 1153.635439][T10459] snd-ua101 1-1:1.1: invalid num_altsetting [ 1153.639057][T14180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.648694][T10459] snd-ua101 1-1:1.0: invalid bNumEndpoints [ 1153.654552][T10459] usb 1-1: selecting invalid altsetting 0 [ 1153.676060][T10459] usb 1-1: selecting invalid altsetting 0 [ 1153.689596][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.692562][T10459] usbtest: probe of 1-1:1.1 failed with error -22 [ 1153.761687][T14180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.795270][T10459] usb 1-1: selecting invalid altsetting 0 [ 1153.801452][T10459] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 1153.805289][T14180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.809213][T10459] usb 1-1: selecting invalid altsetting 0 [ 1153.837841][T10459] snd-ua101: probe of 1-1:1.1 failed with error -22 [ 1153.846178][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.006705][T14180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.050310][T10459] usb 1-1: USB disconnect, device number 7 [ 1155.150880][T14180] hsr_slave_0: entered promiscuous mode [ 1155.212342][T14180] hsr_slave_1: entered promiscuous mode [ 1155.248429][T14180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1155.464672][T14180] Cannot create hsr debugfs directory [ 1155.650336][ T5790] Bluetooth: hci0: command tx timeout [ 1157.699835][ T5790] Bluetooth: hci0: command tx timeout [ 1158.618658][T10459] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1158.734905][T14305] set match dimension is over the limit! [ 1158.828633][T10459] usb 4-1: Using ep0 maxpacket: 32 [ 1160.125993][T10459] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.157503][T10459] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1160.183983][T10459] usb 4-1: config 1 interface 0 has no altsetting 1 [ 1160.194088][T10459] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1160.218273][T10459] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1160.258339][T10459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.302562][T10459] usb 4-1: Product: syz [ 1160.674541][T10459] usb 4-1: Manufacturer: syz [ 1161.178607][T10459] usb 4-1: SerialNumber: syz [ 1161.209468][T10459] snd-ua101 4-1:1.1: invalid num_altsetting [ 1161.215380][T10459] snd-ua101 4-1:1.0: invalid bNumEndpoints [ 1161.301191][T10459] usb 4-1: selecting invalid altsetting 0 [ 1161.420731][T10459] usb 4-1: selecting invalid altsetting 0 [ 1161.426523][T10459] usbtest: probe of 4-1:1.1 failed with error -22 [ 1161.469482][T10459] usb 4-1: selecting invalid altsetting 0 [ 1161.475268][T10459] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 1161.519108][T10459] usb 4-1: selecting invalid altsetting 0 [ 1161.552430][T10459] snd-ua101: probe of 4-1:1.1 failed with error -22 [ 1161.681616][ T42] IPVS: stopping master sync thread 13868 ... [ 1161.786011][T10459] usb 4-1: USB disconnect, device number 7 [ 1163.689771][T14323] syzkaller0: entered promiscuous mode [ 1164.563876][T14323] syzkaller0: entered allmulticast mode [ 1166.032629][T14351] Bluetooth: MGMT ver 1.22 [ 1166.306231][ T42] hsr_slave_0: left promiscuous mode [ 1166.358696][ T8186] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1166.512976][ T42] hsr_slave_1: left promiscuous mode [ 1166.651178][ T8186] usb 10-1: Using ep0 maxpacket: 32 [ 1166.676490][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.819580][ T8186] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.830556][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.946062][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.982197][ T8186] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1167.102929][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.159567][ T42] bridge_slave_1: left allmulticast mode [ 1167.165258][ T42] bridge_slave_1: left promiscuous mode [ 1167.171135][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.198214][ T8186] usb 10-1: config 1 interface 0 has no altsetting 1 [ 1167.218646][ T8186] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1167.259485][ T42] bridge_slave_0: left allmulticast mode [ 1167.278798][ T42] bridge_slave_0: left promiscuous mode [ 1167.297090][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.356102][ T8186] usb 10-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1167.406236][ T8186] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.422035][ T42] veth1_macvtap: left promiscuous mode [ 1167.432406][ T8186] usb 10-1: Product: syz [ 1167.436683][ T8186] usb 10-1: Manufacturer: syz [ 1167.449745][ T42] veth0_macvtap: left promiscuous mode [ 1167.463343][ T42] veth1_vlan: left promiscuous mode [ 1167.468782][ T8186] usb 10-1: SerialNumber: syz [ 1167.495507][ T42] veth0_vlan: left promiscuous mode [ 1167.531892][ T8186] snd-ua101 10-1:1.1: invalid num_altsetting [ 1167.558509][ T8186] snd-ua101 10-1:1.0: invalid bNumEndpoints [ 1167.587851][ T8186] usb 10-1: selecting invalid altsetting 0 [ 1167.734145][ T8186] usb 10-1: selecting invalid altsetting 0 [ 1167.748726][ T8186] usbtest: probe of 10-1:1.1 failed with error -22 [ 1167.756122][ T8186] usb 10-1: selecting invalid altsetting 0 [ 1167.765019][ T8186] snd-usb-audio: probe of 10-1:1.1 failed with error -22 [ 1167.773255][ T8186] usb 10-1: selecting invalid altsetting 0 [ 1167.783432][ T8186] snd-ua101: probe of 10-1:1.1 failed with error -22 [ 1168.027164][ T8186] usb 10-1: USB disconnect, device number 4 [ 1172.424248][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1172.539412][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1172.792410][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.428216][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1174.963375][ T42] bond0 (unregistering): Released all slaves [ 1174.997844][T14425] netlink: 'syz.0.1829': attribute type 1 has an invalid length. [ 1175.023110][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'. [ 1175.752815][T14360] netlink: 'syz.3.1821': attribute type 32 has an invalid length. [ 1176.216058][T14180] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1176.278211][T14180] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1176.413065][T11252] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1176.450946][T14180] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1176.510231][T14180] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1176.598697][T11252] usb 4-1: Using ep0 maxpacket: 32 [ 1176.627992][T11252] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.718980][T11252] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1176.739417][T11252] usb 4-1: config 1 interface 0 has no altsetting 1 [ 1176.746121][T11252] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1176.926493][T11252] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1176.946713][T11252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.972051][T11252] usb 4-1: Product: syz [ 1176.976248][T11252] usb 4-1: Manufacturer: syz [ 1176.981849][T11252] usb 4-1: SerialNumber: syz [ 1177.040383][T11252] snd-ua101 4-1:1.1: invalid num_altsetting [ 1177.046424][T11252] snd-ua101 4-1:1.0: invalid bNumEndpoints [ 1177.052900][T11252] usb 4-1: selecting invalid altsetting 0 [ 1177.080250][T11252] usb 4-1: selecting invalid altsetting 0 [ 1177.116127][T11252] usbtest: probe of 4-1:1.1 failed with error -22 [ 1177.145969][T14180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.158504][T11252] usb 4-1: selecting invalid altsetting 0 [ 1177.209513][T11252] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 1177.262440][T14180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.272562][T11252] usb 4-1: selecting invalid altsetting 0 [ 1177.299755][T11252] snd-ua101: probe of 4-1:1.1 failed with error -22 [ 1177.484138][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.491310][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.529108][ T8186] usb 4-1: USB disconnect, device number 8 [ 1177.545351][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.551684][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.599650][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.606812][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.682018][ T42] IPVS: stop unused estimator thread 0... [ 1177.744843][T14180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1177.790977][T14180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1179.489550][T14472] netlink: 'syz.3.1837': attribute type 32 has an invalid length. [ 1179.549671][T14472] binder_alloc: 14471: pid 14471 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1179.709264][T14180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.735696][T14481] netlink: 'syz.9.1838': attribute type 1 has an invalid length. [ 1179.999330][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1838'. [ 1180.856510][T14497] xt_connbytes: Forcing CT accounting to be enabled [ 1180.863309][T14497] Cannot find set identified by id 0 to match [ 1181.598281][T14505] syzkaller0: entered promiscuous mode [ 1181.603979][T14505] syzkaller0: entered allmulticast mode [ 1182.018942][T13558] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1182.080158][T14180] veth0_vlan: entered promiscuous mode [ 1182.094583][T14180] veth1_vlan: entered promiscuous mode [ 1182.172704][T14180] veth0_macvtap: entered promiscuous mode [ 1182.195815][T14180] veth1_macvtap: entered promiscuous mode [ 1182.220470][T13558] usb 4-1: Using ep0 maxpacket: 32 [ 1182.237298][T13558] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.260887][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.279858][T13558] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1182.296449][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.306600][T13558] usb 4-1: config 1 interface 0 has no altsetting 1 [ 1182.315069][T13558] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1182.322983][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.334328][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.349071][T13558] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1182.369976][T13558] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.378080][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.398675][T13558] usb 4-1: Product: syz [ 1182.403008][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.412962][T13558] usb 4-1: Manufacturer: syz [ 1182.427865][T13558] usb 4-1: SerialNumber: syz [ 1182.433066][ T8186] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1182.452325][T13558] snd-ua101 4-1:1.1: invalid num_altsetting [ 1182.467353][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1182.467469][T13558] snd-ua101 4-1:1.0: invalid bNumEndpoints [ 1182.486356][T13558] usb 4-1: selecting invalid altsetting 0 [ 1182.505235][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.510181][T13558] usb 4-1: selecting invalid altsetting 0 [ 1182.540291][T14180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.541594][T13558] usbtest: probe of 4-1:1.1 failed with error -22 [ 1182.563793][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1182.596972][T13558] usb 4-1: selecting invalid altsetting 0 [ 1182.616278][T13558] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 1182.618836][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.625155][ T8186] usb 1-1: not running at top speed; connect to a high speed hub [ 1182.641644][T13558] usb 4-1: selecting invalid altsetting 0 [ 1182.647399][T13558] snd-ua101: probe of 4-1:1.1 failed with error -22 [ 1182.669960][ T8186] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1182.680987][ T8186] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.704652][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1182.717803][ T8186] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1182.730277][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.763326][ T8186] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1182.778796][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1182.793240][ T8186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.808595][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.818426][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1182.822598][ T8186] usb 1-1: config 0 descriptor?? [ 1182.862838][ T8186] usb 1-1: Found UVC 9.00 device (046d:0825) [ 1182.882551][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.970019][T14180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1182.993594][T14180] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.002384][T14180] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.018046][T14180] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.038046][T14180] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.074708][ T9] usb 4-1: USB disconnect, device number 9 [ 1183.303520][T13048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.331025][T13048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.425251][T13048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.464705][ T8186] uvcvideo 1-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 1183.490441][T13048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.496052][ T8186] uvcvideo 1-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 1183.518061][ T8186] uvcvideo 1-1:0.1: Failed to initialize the device (-71). [ 1183.603988][ T8186] usb 1-1: USB disconnect, device number 8 [ 1184.825294][T10459] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1184.852411][T14549] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1184.874591][T14557] netlink: 'syz.9.1848': attribute type 32 has an invalid length. [ 1184.997211][T14557] binder_alloc: 14554: pid 14554 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1185.280469][T14568] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1185.550887][ T8186] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1185.768808][ T8186] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.801817][ T8186] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1185.825975][ T8186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.876353][ T8186] usb 6-1: config 0 descriptor?? [ 1185.893836][ T8186] usb 6-1: bad CDC descriptors [ 1186.028762][T13603] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1186.110612][ T5779] usb 6-1: USB disconnect, device number 16 [ 1186.251805][T13603] usb 10-1: Using ep0 maxpacket: 32 [ 1186.272056][T13603] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.298795][T13603] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1186.334543][T13603] usb 10-1: config 1 interface 0 has no altsetting 1 [ 1186.365539][T13603] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1186.380048][T13603] usb 10-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1186.398591][T13603] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.413987][T13603] usb 10-1: Product: syz [ 1186.418415][T13603] usb 10-1: Manufacturer: syz [ 1186.428708][T13603] usb 10-1: SerialNumber: syz [ 1187.298746][T13603] snd-ua101 10-1:1.1: invalid num_altsetting [ 1187.314983][T13603] snd-ua101 10-1:1.0: invalid bNumEndpoints [ 1187.328630][T13603] usb 10-1: selecting invalid altsetting 0 [ 1187.337085][T13603] usb 10-1: selecting invalid altsetting 0 [ 1187.363686][T13603] usbtest: probe of 10-1:1.1 failed with error -22 [ 1187.378256][T13603] usb 10-1: selecting invalid altsetting 0 [ 1187.389150][T13603] snd-usb-audio: probe of 10-1:1.1 failed with error -22 [ 1187.396444][T13603] usb 10-1: selecting invalid altsetting 0 [ 1187.402326][T13603] snd-ua101: probe of 10-1:1.1 failed with error -22 [ 1187.593932][T10459] usb 10-1: USB disconnect, device number 5 [ 1187.729357][T13603] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1187.959509][T13603] usb 6-1: not running at top speed; connect to a high speed hub [ 1188.008751][T13603] usb 6-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1188.028679][T13603] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.078603][T13603] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1188.128991][T13603] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1188.148625][T13603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.212923][T13603] usb 6-1: config 0 descriptor?? [ 1188.253538][T13603] usb 6-1: Found UVC 9.00 device (046d:0825) [ 1188.558754][ T8186] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1188.784129][ T8186] usb 10-1: too many configurations: 200, using maximum allowed: 8 [ 1188.805325][ T8186] usb 10-1: config index 0 descriptor too short (expected 58152, got 40) [ 1188.829217][ T8186] usb 10-1: config 255 has an invalid interface number: 97 but max is -1 [ 1188.847634][T13603] uvcvideo 6-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 1188.860166][ T8186] usb 10-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.876788][T13603] uvcvideo 6-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 1188.906080][T13603] uvcvideo 6-1:0.1: Failed to initialize the device (-71). [ 1188.908762][ T8186] usb 10-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 1188.961307][T13603] usb 6-1: USB disconnect, device number 17 [ 1188.967420][ T8186] usb 10-1: config 255 has no interface number 0 [ 1188.992217][ T8186] usb 10-1: config 255 interface 97 has no altsetting 0 [ 1189.021769][ T8186] usb 10-1: config index 1 descriptor too short (expected 58152, got 40) [ 1189.048822][ T8186] usb 10-1: config 255 has an invalid interface number: 97 but max is -1 [ 1189.077596][ T8186] usb 10-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.109170][ T8186] usb 10-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 1189.122114][ T8186] usb 10-1: config 255 has no interface number 0 [ 1189.128498][ T8186] usb 10-1: config 255 interface 97 has no altsetting 0 [ 1189.166456][ T8186] usb 10-1: config index 2 descriptor too short (expected 58152, got 40) [ 1189.188698][ T8186] usb 10-1: config 255 has an invalid interface number: 97 but max is -1 [ 1189.217484][ T8186] usb 10-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.249686][ T8186] usb 10-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 1189.278608][ T8186] usb 10-1: config 255 has no interface number 0 [ 1189.305283][ T8186] usb 10-1: config 255 interface 97 has no altsetting 0 [ 1189.378826][ T8186] usb 10-1: config index 3 descriptor too short (expected 58152, got 40) [ 1189.395285][ T8186] usb 10-1: config 255 has an invalid interface number: 97 but max is -1 [ 1189.428681][ T8186] usb 10-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.462492][ T8186] usb 10-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 1189.514959][ T8186] usb 10-1: config 255 has no interface number 0 [ 1189.556312][ T8186] usb 10-1: config 255 interface 97 has no altsetting 0 [ 1189.662161][ T8186] usb 10-1: config index 4 descriptor too short (expected 58152, got 40) [ 1189.807229][ T8186] usb 10-1: config 255 has an invalid interface number: 97 but max is -1 [ 1190.385068][ T8186] usb 10-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.514468][ T8186] usb 10-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 1190.527518][ T8186] usb 10-1: config 255 has no interface number 0 [ 1190.534187][ T8186] usb 10-1: config 255 interface 97 has no altsetting 0 [ 1190.543793][ T8186] usb 10-1: config index 5 descriptor too short (expected 58152, got 40) [ 1190.552629][ T8186] usb 10-1: config 255 has an invalid interface number: 97 but max is -1 [ 1190.561602][ T8186] usb 10-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.575828][ T8186] usb 10-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 1190.585709][ T8186] usb 10-1: config 255 has no interface number 0 [ 1190.592488][ T8186] usb 10-1: config 255 interface 97 has no altsetting 0 [ 1190.602638][ T8186] usb 10-1: config index 6 descriptor too short (expected 58152, got 40) [ 1190.620165][ T8186] usb 10-1: config 255 has an invalid interface number: 97 but max is -1 [ 1190.632675][ T8186] usb 10-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.644108][ T8186] usb 10-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 1190.662772][ T8186] usb 10-1: config 255 has no interface number 0 [ 1190.676749][ T8186] usb 10-1: config 255 interface 97 has no altsetting 0 [ 1190.685545][ T8186] usb 10-1: config index 7 descriptor too short (expected 58152, got 40) [ 1190.710526][ T8186] usb 10-1: config 255 has an invalid interface number: 97 but max is -1 [ 1190.762969][ T8186] usb 10-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.784713][ T8186] usb 10-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 1190.808382][ T8186] usb 10-1: config 255 has no interface number 0 [ 1190.838476][ T8186] usb 10-1: config 255 interface 97 has no altsetting 0 [ 1190.870603][ T8186] usb 10-1: New USB device found, idVendor=0424, idProduct=8b58, bcdDevice=8c.ff [ 1190.889254][ T8186] usb 10-1: New USB device strings: Mfr=166, Product=238, SerialNumber=176 [ 1190.905997][ T8186] usb 10-1: Product: syz [ 1190.916158][ T8186] usb 10-1: Manufacturer: syz [ 1190.932546][ T8186] usb 10-1: SerialNumber: syz [ 1191.130364][T13558] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1191.197959][ T8186] usb 10-1: bad CDC descriptors [ 1191.256041][ T8186] usb 10-1: bad CDC descriptors [ 1191.308941][ T8186] usb 10-1: USB disconnect, device number 6 [ 1191.358848][T13558] usb 6-1: Using ep0 maxpacket: 32 [ 1191.375888][T13558] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.417223][T13558] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1191.446291][T13558] usb 6-1: config 1 interface 0 has no altsetting 1 [ 1191.453347][T13558] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1191.476224][T13558] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1191.518615][T13558] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.568626][T13558] usb 6-1: Product: syz [ 1191.572867][T13558] usb 6-1: Manufacturer: syz [ 1191.593322][T13558] usb 6-1: SerialNumber: syz [ 1191.647465][T13558] snd-ua101 6-1:1.1: invalid num_altsetting [ 1191.653518][T13558] snd-ua101 6-1:1.0: invalid bNumEndpoints [ 1191.673823][T13558] usb 6-1: selecting invalid altsetting 0 [ 1191.707805][T13558] usb 6-1: selecting invalid altsetting 0 [ 1191.747622][T13558] usbtest: probe of 6-1:1.1 failed with error -22 [ 1191.866044][T13558] usb 6-1: selecting invalid altsetting 0 [ 1191.904182][T14674] loop8: detected capacity change from 0 to 8 [ 1191.987440][T13558] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 1192.067563][T14674] Dev loop8: unable to read RDB block 8 [ 1192.133023][T13558] usb 6-1: selecting invalid altsetting 0 [ 1192.172942][T14674] loop8: unable to read partition table [ 1192.233088][T13558] snd-ua101: probe of 6-1:1.1 failed with error -22 [ 1192.316642][T14674] loop8: partition table beyond EOD, truncated [ 1192.446660][T14674] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1192.868860][ T3062] usb 6-1: USB disconnect, device number 18 [ 1194.949598][ T8186] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1194.992578][ T8186] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1195.916222][T14722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1883'. [ 1196.111875][T14728] loop8: detected capacity change from 0 to 8 [ 1196.138119][T14728] Dev loop8: unable to read RDB block 8 [ 1196.158459][T14728] loop8: unable to read partition table [ 1196.176743][T14728] loop8: partition table beyond EOD, truncated [ 1196.207306][T14728] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1199.748956][ T8186] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1199.971005][ T8186] usb 6-1: config 8 has an invalid interface number: 33 but max is 0 [ 1200.617093][ T8186] usb 6-1: config 8 has no interface number 0 [ 1200.624800][ T8186] usb 6-1: config 8 interface 33 has no altsetting 0 [ 1200.634193][ T8186] usb 6-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9f.db [ 1200.644333][ T8186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.652665][ T8186] usb 6-1: Product: syz [ 1200.656973][ T8186] usb 6-1: Manufacturer: syz [ 1200.662024][ T8186] usb 6-1: SerialNumber: syz [ 1200.823389][T14798] set match dimension is over the limit! [ 1200.999121][ T5779] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1201.250033][ T5779] usb 1-1: Using ep0 maxpacket: 32 [ 1201.297343][ T8186] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state. [ 1201.320618][ T5779] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.347777][ T8186] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1201.358952][ T5779] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1201.405122][ T8186] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design) [ 1201.414699][ T5779] usb 1-1: config 1 interface 0 has no altsetting 1 [ 1201.431812][ T8186] usb 6-1: media controller created [ 1201.439046][ T5779] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1201.468233][ T8186] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1201.487426][ T5779] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1201.531561][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.554836][ T5779] usb 1-1: Product: syz [ 1201.570437][ T5779] usb 1-1: Manufacturer: syz [ 1201.598629][ T5779] usb 1-1: SerialNumber: syz [ 1201.655922][ T5779] snd-ua101 1-1:1.1: invalid num_altsetting [ 1201.700778][ T5779] snd-ua101 1-1:1.0: invalid bNumEndpoints [ 1201.725443][ T5779] usb 1-1: selecting invalid altsetting 0 [ 1201.753486][ T5779] usb 1-1: selecting invalid altsetting 0 [ 1201.768513][ T8186] DVB: Unable to find symbol dib7000p_attach() [ 1201.795737][ T8186] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design' [ 1201.808637][ T5779] usbtest: probe of 1-1:1.1 failed with error -22 [ 1201.846000][ T5779] usb 1-1: selecting invalid altsetting 0 [ 1201.878384][ T5779] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 1201.897366][ T5779] usb 1-1: selecting invalid altsetting 0 [ 1201.954042][ T5779] snd-ua101: probe of 1-1:1.1 failed with error -22 [ 1202.034146][ T3062] usb 1-1: USB disconnect, device number 9 [ 1202.110350][ T8186] rc_core: IR keymap rc-dib0700-rc5 not found [ 1202.130531][ T8186] Registered IR keymap rc-empty [ 1202.147363][ T8186] dvb-usb: could not initialize remote control. [ 1202.170869][ T8186] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected. [ 1202.263182][ T8186] usb 6-1: USB disconnect, device number 19 [ 1202.763590][ T8186] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected. [ 1203.350970][T14882] xt_connbytes: Forcing CT accounting to be enabled [ 1203.357757][T14882] set match dimension is over the limit! [ 1203.488940][ T3062] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1203.825517][ T3062] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.034039][ T3062] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1204.137573][ T3062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.173586][ T3062] usb 4-1: config 0 descriptor?? [ 1204.231329][ T3062] pwc: Askey VC010 type 2 USB webcam detected. [ 1205.218962][T13463] Bluetooth: hci6: command 0x0406 tx timeout [ 1205.225093][T13463] Bluetooth: hci1: command 0x0406 tx timeout [ 1205.231203][T13459] Bluetooth: hci5: command 0x0406 tx timeout [ 1206.498661][ T3062] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1206.588797][ T3062] pwc: recv_control_msg error -32 req 02 val 2700 [ 1206.596557][ T3062] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1206.606075][ T3062] pwc: recv_control_msg error -32 req 04 val 1000 [ 1206.615204][ T3062] pwc: recv_control_msg error -32 req 04 val 1300 [ 1206.622984][ T3062] pwc: recv_control_msg error -32 req 04 val 1400 [ 1206.640753][ T3062] pwc: recv_control_msg error -32 req 02 val 2000 [ 1206.675962][ T3062] pwc: recv_control_msg error -32 req 02 val 2100 [ 1206.684395][ T3062] pwc: recv_control_msg error -32 req 04 val 1500 [ 1206.692217][ T3062] pwc: recv_control_msg error -32 req 02 val 2500 [ 1206.709930][ T3062] pwc: recv_control_msg error -32 req 02 val 2400 [ 1206.724535][ T3062] pwc: recv_control_msg error -32 req 02 val 2600 [ 1206.749527][ T3062] pwc: recv_control_msg error -32 req 02 val 2900 [ 1206.775251][ T3062] pwc: recv_control_msg error -32 req 02 val 2800 [ 1207.671824][ T3062] pwc: recv_control_msg error -71 req 04 val 1200 [ 1207.750858][ T3062] pwc: Registered as video103. [ 1207.757767][ T3062] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 1207.792914][ T3062] usb 4-1: USB disconnect, device number 10 [ 1208.197937][T13603] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1208.874735][T13603] usb 6-1: Using ep0 maxpacket: 32 [ 1208.926062][T13603] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.983951][T13603] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1209.029271][T13603] usb 6-1: config 1 interface 0 has no altsetting 1 [ 1209.045202][T13603] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1209.088075][T13603] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1209.113987][T13603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.127452][T13603] usb 6-1: Product: syz [ 1209.154232][T13603] usb 6-1: Manufacturer: syz [ 1209.176186][T13603] usb 6-1: SerialNumber: syz [ 1209.246565][T13603] snd-ua101 6-1:1.1: invalid num_altsetting [ 1209.279862][T13603] snd-ua101 6-1:1.0: invalid bNumEndpoints [ 1209.308901][T13603] usb 6-1: selecting invalid altsetting 0 [ 1209.353470][T13603] usb 6-1: selecting invalid altsetting 0 [ 1209.384845][T13603] usbtest: probe of 6-1:1.1 failed with error -22 [ 1209.426778][T13603] usb 6-1: selecting invalid altsetting 0 [ 1209.454596][T13603] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 1209.523632][T13603] usb 6-1: selecting invalid altsetting 0 [ 1209.548741][T13603] snd-ua101: probe of 6-1:1.1 failed with error -22 [ 1209.650740][T13603] usb 6-1: USB disconnect, device number 20 [ 1212.333473][T14988] netlink: 'syz.9.1927': attribute type 1 has an invalid length. [ 1212.541766][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1927'. [ 1216.789113][T15012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1931'. [ 1216.838716][T15012] ------------[ cut here ]------------ [ 1216.844260][T15012] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 1216.897025][T15012] WARNING: CPU: 0 PID: 15012 at net/sched/cls_u32.c:855 u32_change+0x1df2/0x2860 [ 1216.906818][T15012] Modules linked in: [ 1216.911278][T15012] CPU: 0 PID: 15012 Comm: syz.3.1931 Not tainted syzkaller #0 [ 1216.918916][T15012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1216.929054][T15012] RIP: 0010:u32_change+0x1df2/0x2860 [ 1216.934388][T15012] Code: f8 eb 59 e8 10 40 ce f8 c6 05 d6 6b bd 05 01 b9 10 00 00 00 48 c7 c7 60 8d c8 8b 4c 89 f6 48 c7 c2 e0 8d c8 8b e8 ee 03 98 f8 <0f> 0b e9 10 ef ff ff e8 e2 3f ce f8 eb 24 e8 db 3f ce f8 c6 05 36 [ 1216.954160][T15012] RSP: 0018:ffffc9000b7a6d60 EFLAGS: 00010246 [ 1216.960448][T15012] RAX: 64c3340f025d2f00 RBX: ffff88805fb0a000 RCX: 0000000000080000 [ 1216.969587][T15012] RDX: ffffc90015092000 RSI: 0000000000008e2c RDI: 0000000000008e2d [ 1216.977803][T15012] RBP: ffffc9000b7a6ef8 R08: ffffc9000b7a6967 R09: 1ffff920016f4d2c [ 1216.985975][T15012] R10: dffffc0000000000 R11: fffff520016f4d2d R12: 1ffff920016f4dbc [ 1216.994225][T15012] R13: ffff88806b7328e8 R14: 0000000000000020 R15: 0000000000000001 [ 1217.002561][T15012] FS: 00007f03786446c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1217.011783][T15012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1217.018453][T15012] CR2: 00007f03777eb840 CR3: 00000000608b8000 CR4: 00000000003526f0 [ 1217.026540][T15012] Call Trace: [ 1217.029907][T15012] [ 1217.032873][T15012] ? u32_get+0x370/0x370 [ 1217.037161][T15012] ? u32_get+0x370/0x370 [ 1217.041551][T15012] tc_new_tfilter+0x1253/0x1840 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1217.046564][T15012] ? tcf_proto_signal_destroying+0x240/0x240 [ 1217.052649][T15012] ? rcu_read_unlock+0x8c/0xa0 [ 1217.057542][T15012] ? tcf_proto_signal_destroying+0x240/0x240 [ 1217.064699][T15012] ? tcf_proto_signal_destroying+0x240/0x240 [ 1217.071046][T15012] rtnetlink_rcv_msg+0x892/0xf90 [ 1217.076029][T15012] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1217.081629][T15012] ? rtnetlink_bind+0x80/0x80 [ 1217.086361][T15012] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1217.092425][T15012] ? lock_chain_count+0x20/0x20 [ 1217.097312][T15012] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1217.102823][T15012] ? lockdep_hardirqs_on+0x98/0x150 [ 1217.108050][T15012] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1217.113522][T15012] ? _local_bh_enable+0xa0/0xa0 [ 1217.118414][T15012] ? __dev_queue_xmit+0x272/0x37e0 [ 1217.123658][T15012] ? __dev_queue_xmit+0x1329/0x37e0 [ 1217.128958][T15012] ? __dev_queue_xmit+0x272/0x37e0 [ 1217.134117][T15012] ? ref_tracker_free+0x686/0x830 [ 1217.139347][T15012] netlink_rcv_skb+0x235/0x4c0 [ 1217.144213][T15012] ? rtnetlink_bind+0x80/0x80 [ 1217.148975][T15012] ? netlink_ack+0x1160/0x1160 [ 1217.153787][T15012] ? __lock_acquire+0x7d80/0x7d80 [ 1217.158906][T15012] ? netlink_deliver_tap+0x2e/0x1b0 [ 1217.165199][T15012] netlink_unicast+0x7b1/0x930 [ 1217.170260][T15012] netlink_sendmsg+0x8d0/0xbf0 [ 1217.175064][T15012] ? netlink_getsockopt+0x590/0x590 [ 1217.180396][T15012] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1217.185971][T15012] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1217.191329][T15012] ? security_socket_sendmsg+0x80/0xa0 [ 1217.196835][T15012] ? netlink_getsockopt+0x590/0x590 [ 1217.202131][T15012] ____sys_sendmsg+0x61b/0x980 [ 1217.206998][T15012] ? __asan_memset+0x22/0x40 [ 1217.211680][T15012] ? __sys_sendmsg_sock+0x30/0x30 [ 1217.216726][T15012] ? __import_iovec+0x5f2/0x850 [ 1217.222038][T15012] ? import_iovec+0x73/0xa0 [ 1217.226586][T15012] ___sys_sendmsg+0x2a6/0x360 [ 1217.231542][T15012] ? preempt_schedule+0xc0/0xd0 [ 1217.236428][T15012] ? __sys_sendmsg+0x2b0/0x2b0 [ 1217.241479][T15012] __sys_sendmmsg+0x2ca/0x510 [ 1217.246288][T15012] ? __ia32_sys_sendmsg+0x90/0x90 [ 1217.251411][T15012] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1217.257362][T15012] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1217.264465][T15012] ? lock_chain_count+0x20/0x20 [ 1217.269577][T15012] __x64_sys_sendmmsg+0xa0/0xb0 [ 1217.274463][T15012] do_syscall_64+0x55/0xb0 [ 1217.278966][T15012] ? clear_bhb_loop+0x40/0x90 [ 1217.283676][T15012] ? clear_bhb_loop+0x40/0x90 [ 1217.288386][T15012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1217.294367][T15012] RIP: 0033:0x7f037779e159 [ 1217.298986][T15012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.318675][T15012] RSP: 002b:00007f0378644028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1217.327114][T15012] RAX: ffffffffffffffda RBX: 00007f0377a25fa0 RCX: 00007f037779e159 [ 1217.335163][T15012] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1217.343273][T15012] RBP: 00007f037783506b R08: 0000000000000000 R09: 0000000000000000 [ 1217.351325][T15012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1217.359389][T15012] R13: 00007f0377a26038 R14: 00007f0377a25fa0 R15: 00007fffc315f378 [ 1217.368784][T15012] [ 1217.371835][T15012] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1217.379127][T15012] CPU: 0 PID: 15012 Comm: syz.3.1931 Not tainted syzkaller #0 [ 1217.386595][T15012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1217.396658][T15012] Call Trace: [ 1217.399947][T15012] [ 1217.402884][T15012] dump_stack_lvl+0x18c/0x250 [ 1217.407588][T15012] ? show_regs_print_info+0x20/0x20 [ 1217.412805][T15012] ? load_image+0x420/0x420 [ 1217.417335][T15012] panic+0x2ca/0x720 [ 1217.421248][T15012] ? bpf_jit_dump+0xd0/0xd0 [ 1217.425776][T15012] __warn+0x2e0/0x470 [ 1217.429772][T15012] ? u32_change+0x1df2/0x2860 [ 1217.434473][T15012] ? u32_change+0x1df2/0x2860 [ 1217.439165][T15012] report_bug+0x2be/0x4f0 [ 1217.443561][T15012] ? u32_change+0x1df2/0x2860 [ 1217.448230][T15012] ? u32_change+0x1df2/0x2860 [ 1217.452897][T15012] ? u32_change+0x1df4/0x2860 [ 1217.457562][T15012] handle_bug+0xcf/0x120 [ 1217.461804][T15012] exc_invalid_op+0x1a/0x50 [ 1217.466301][T15012] asm_exc_invalid_op+0x1a/0x20 [ 1217.471152][T15012] RIP: 0010:u32_change+0x1df2/0x2860 [ 1217.476435][T15012] Code: f8 eb 59 e8 10 40 ce f8 c6 05 d6 6b bd 05 01 b9 10 00 00 00 48 c7 c7 60 8d c8 8b 4c 89 f6 48 c7 c2 e0 8d c8 8b e8 ee 03 98 f8 <0f> 0b e9 10 ef ff ff e8 e2 3f ce f8 eb 24 e8 db 3f ce f8 c6 05 36 [ 1217.496044][T15012] RSP: 0018:ffffc9000b7a6d60 EFLAGS: 00010246 [ 1217.502116][T15012] RAX: 64c3340f025d2f00 RBX: ffff88805fb0a000 RCX: 0000000000080000 [ 1217.510080][T15012] RDX: ffffc90015092000 RSI: 0000000000008e2c RDI: 0000000000008e2d [ 1217.518043][T15012] RBP: ffffc9000b7a6ef8 R08: ffffc9000b7a6967 R09: 1ffff920016f4d2c [ 1217.526026][T15012] R10: dffffc0000000000 R11: fffff520016f4d2d R12: 1ffff920016f4dbc [ 1217.533990][T15012] R13: ffff88806b7328e8 R14: 0000000000000020 R15: 0000000000000001 [ 1217.541981][T15012] ? u32_get+0x370/0x370 [ 1217.546230][T15012] ? u32_get+0x370/0x370 [ 1217.550465][T15012] tc_new_tfilter+0x1253/0x1840 [ 1217.555334][T15012] ? tcf_proto_signal_destroying+0x240/0x240 [ 1217.561319][T15012] ? rcu_read_unlock+0x8c/0xa0 [ 1217.566089][T15012] ? tcf_proto_signal_destroying+0x240/0x240 [ 1217.572068][T15012] ? tcf_proto_signal_destroying+0x240/0x240 [ 1217.578068][T15012] rtnetlink_rcv_msg+0x892/0xf90 [ 1217.583016][T15012] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1217.588134][T15012] ? rtnetlink_bind+0x80/0x80 [ 1217.592824][T15012] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1217.598803][T15012] ? lock_chain_count+0x20/0x20 [ 1217.603650][T15012] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1217.609013][T15012] ? lockdep_hardirqs_on+0x98/0x150 [ 1217.614210][T15012] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1217.619576][T15012] ? _local_bh_enable+0xa0/0xa0 [ 1217.624431][T15012] ? __dev_queue_xmit+0x272/0x37e0 [ 1217.629546][T15012] ? __dev_queue_xmit+0x1329/0x37e0 [ 1217.634741][T15012] ? __dev_queue_xmit+0x272/0x37e0 [ 1217.639857][T15012] ? ref_tracker_free+0x686/0x830 [ 1217.644879][T15012] netlink_rcv_skb+0x235/0x4c0 [ 1217.649665][T15012] ? rtnetlink_bind+0x80/0x80 [ 1217.654339][T15012] ? netlink_ack+0x1160/0x1160 [ 1217.659115][T15012] ? __lock_acquire+0x7d80/0x7d80 [ 1217.664136][T15012] ? netlink_deliver_tap+0x2e/0x1b0 [ 1217.669335][T15012] netlink_unicast+0x7b1/0x930 [ 1217.674107][T15012] netlink_sendmsg+0x8d0/0xbf0 [ 1217.678875][T15012] ? netlink_getsockopt+0x590/0x590 [ 1217.684074][T15012] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1217.689616][T15012] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1217.694914][T15012] ? security_socket_sendmsg+0x80/0xa0 [ 1217.700386][T15012] ? netlink_getsockopt+0x590/0x590 [ 1217.705592][T15012] ____sys_sendmsg+0x61b/0x980 [ 1217.710374][T15012] ? __asan_memset+0x22/0x40 [ 1217.714968][T15012] ? __sys_sendmsg_sock+0x30/0x30 [ 1217.719993][T15012] ? __import_iovec+0x5f2/0x850 [ 1217.724853][T15012] ? import_iovec+0x73/0xa0 [ 1217.729355][T15012] ___sys_sendmsg+0x2a6/0x360 [ 1217.734032][T15012] ? preempt_schedule+0xc0/0xd0 [ 1217.738890][T15012] ? __sys_sendmsg+0x2b0/0x2b0 [ 1217.743683][T15012] __sys_sendmmsg+0x2ca/0x510 [ 1217.748377][T15012] ? __ia32_sys_sendmsg+0x90/0x90 [ 1217.753403][T15012] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1217.759298][T15012] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1217.765275][T15012] ? lock_chain_count+0x20/0x20 [ 1217.770150][T15012] __x64_sys_sendmmsg+0xa0/0xb0 [ 1217.775000][T15012] do_syscall_64+0x55/0xb0 [ 1217.779423][T15012] ? clear_bhb_loop+0x40/0x90 [ 1217.784110][T15012] ? clear_bhb_loop+0x40/0x90 [ 1217.788788][T15012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1217.794677][T15012] RIP: 0033:0x7f037779e159 [ 1217.799084][T15012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.818687][T15012] RSP: 002b:00007f0378644028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1217.827096][T15012] RAX: ffffffffffffffda RBX: 00007f0377a25fa0 RCX: 00007f037779e159 [ 1217.835060][T15012] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1217.843050][T15012] RBP: 00007f037783506b R08: 0000000000000000 R09: 0000000000000000 [ 1217.851031][T15012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1217.858992][T15012] R13: 00007f0377a26038 R14: 00007f0377a25fa0 R15: 00007fffc315f378 [ 1217.866972][T15012] [ 1217.870262][T15012] Kernel Offset: disabled [ 1217.874612][T15012] Rebooting in 86400 seconds..