last executing test programs: 24m47.954384961s ago: executing program 32 (id=642): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) socket$inet(0x2, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x2211000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="d8b07da8a079e98f7663074742d57c4d12f7ca8dabf267b0617ef36c3f") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x5c}}, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x2, 0x16a}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x1a, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 21m25.765014507s ago: executing program 33 (id=1206): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000914bf20c80a01c3d5820102031d090212"], 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x4) bind$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) write(r3, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 21m17.998314132s ago: executing program 34 (id=1232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r5 = socket$kcm(0x10, 0x4, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x1, 0xfff1}, {}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @filter_kind_options=@f_cgroup={{0xb}, {0x448, 0x2, [@TCA_CGROUP_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xe1, 0x2, 0x1, 0x4, 0x4, 0x5, 0x769, 0x1, 0x3, 0xa930, 0x3, 0x1, 0xffffffff, 0x7, 0x4, 0x1a9, 0xacd, 0xd51b, 0x80000001, 0xffff, 0x8, 0x4, 0x8, 0xb4, 0x0, 0x3, 0x3, 0x9, 0x1, 0x5, 0x8000, 0xa, 0x8001, 0x9, 0xf5, 0xd5aa, 0xa, 0x9, 0x1fe0, 0x7, 0x8001, 0x80000000, 0x0, 0x7ff, 0x4, 0x7f, 0x2, 0xfffffffa, 0x2787, 0x9, 0x3, 0x4, 0x9, 0x2, 0xf, 0x7ff, 0x80000000, 0x6, 0x3ff, 0x0, 0x800, 0xfffffff8, 0x7ff, 0x8, 0xfce8, 0x8, 0x1000, 0x5, 0x6, 0x80000000, 0x7, 0x3, 0x300000, 0x93c6, 0x8, 0x8000, 0x3, 0x4, 0x7ff, 0x8, 0x3, 0x9, 0x4, 0x1, 0x3, 0x8, 0x3, 0x1, 0x401, 0xd9, 0x5, 0x5, 0x5, 0x9, 0xfffffffb, 0x8, 0x7, 0x23, 0xcf2c3adc, 0xa, 0x1, 0x40, 0xf94, 0x4, 0x7fff, 0x2, 0xb0, 0x2, 0x1, 0x12e, 0x6, 0x6, 0x3, 0x9, 0x8, 0x908, 0x0, 0x4, 0x17, 0x0, 0xf079, 0x7ff, 0x5, 0x1, 0x6, 0x7f, 0x7558, 0xfffffff0, 0x6, 0x5, 0x583, 0x2, 0x6, 0x80, 0xacd838f8, 0x7, 0x6, 0x44, 0xb3c6, 0xff, 0x5, 0x7, 0x9, 0xca, 0x5, 0x7, 0x6, 0x2, 0x4, 0x800, 0x8, 0x0, 0x9, 0x895, 0x81, 0xfffff515, 0x4, 0x9ae8, 0x4, 0x821, 0x8, 0x80000001, 0x800000, 0x8c1, 0x1fd8, 0x84, 0x8, 0x5, 0x7f, 0x8, 0x0, 0x2, 0x2, 0x5, 0x3, 0x8000, 0x8, 0x8, 0xff, 0x4, 0x5, 0x80, 0x620, 0x8b, 0x9, 0x5, 0x6, 0x8, 0x7, 0x268a, 0xffff, 0xfffffffc, 0x1, 0x8da3, 0x4, 0x0, 0x8, 0x10000, 0x3, 0x4, 0xfffffffb, 0x2, 0x2, 0x1ff, 0x0, 0x9, 0x0, 0x401, 0x80, 0x625d636f, 0x80, 0x32a6, 0x10000, 0x3, 0x10, 0xd8a1, 0x4e4, 0x7, 0x8, 0x4, 0x9, 0x7, 0xaf8, 0x220f, 0x41, 0xc, 0x7, 0x8001, 0x8d50, 0xbd3, 0x11ed, 0x2, 0xdf, 0x7f, 0xfffffffc, 0xff, 0xe, 0x5, 0x8, 0xfffff52d, 0x10, 0x4659, 0x200, 0x61f, 0xfffffffa, 0x7f, 0x1, 0x60a, 0xffff2d02, 0x7, 0xb8d, 0xb, 0x5, 0xa, 0x8, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x6, 0x0, 0x0, 0x7, {0x8, 0x0, 0x5, 0xc, 0x4, 0x8}, {0x1, 0x2, 0x7, 0x1, 0xb6}, 0x9, 0x0, 0x2}}]}]}}]}, 0x480}}, 0x20040000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, 0x0, 0xc000) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 20m50.795823385s ago: executing program 35 (id=1291): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120019007f00000001"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x80) flock(r5, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x8, 0x8}, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x17, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRESDEC=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYRESDEC=r7, @ANYRES32=r7, @ANYBLOB="000000000c000000bf91000000000000b702cdc320220039a358531261008500000085000000b7c74d175723b8d4a314f66eb9180000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa20f8c200000086dd62561699001000fffc000000000000000000000000000001200100000000000000023b00000000000000c2040001"], 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r9 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x6, 0xc, 0x8, 0x5}}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 20m44.847875253s ago: executing program 36 (id=1301): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0xfffffffffffffffd, &(0x7f0000000040)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0xc0, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0x7, 0x9}, {0xfff3, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x4}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r4, &(0x7f0000003940)=[{{&(0x7f0000000540)=@tipc, 0x80, &(0x7f0000000a80)=[{&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000680)=""/192, 0xc0}, {&(0x7f0000000740)=""/113, 0x71}, {&(0x7f00000007c0)=""/173, 0xad}, {&(0x7f0000000880)=""/178, 0xb2}, {&(0x7f0000000940)=""/100, 0x64}, {&(0x7f00000009c0)=""/144, 0x90}], 0x7}, 0x10000}, {{&(0x7f0000000b00), 0x80, &(0x7f0000000080)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/139, 0x8b}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x3, &(0x7f0000002c40)=""/71, 0x47}, 0x6}, {{&(0x7f0000002cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d40)=""/184, 0xb8}, {&(0x7f0000002e00)=""/128, 0x80}, {&(0x7f0000002e80)=""/98, 0x62}, {&(0x7f0000000100)=""/24, 0x18}], 0x4, &(0x7f0000002f40)=""/133, 0x85}, 0x400000}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003000)=""/34, 0x22}, {&(0x7f0000003040)=""/40, 0x28}, {&(0x7f0000003080)=""/167, 0xa7}, {&(0x7f0000003140)=""/243, 0xf3}, {&(0x7f0000003240)=""/190, 0xbe}, {&(0x7f0000003300)=""/48, 0x30}, {&(0x7f0000003340)=""/209, 0xd1}, {&(0x7f0000003440)=""/239, 0xef}, {&(0x7f0000003540)=""/248, 0xf8}], 0x9, &(0x7f0000003700)=""/177, 0xb1}, 0x10}, {{&(0x7f00000037c0)=@sco, 0x80, &(0x7f0000003900)=[{&(0x7f0000003840)=""/133, 0x85}], 0x1}, 0x1000}], 0x5, 0x2000, &(0x7f0000003a80)={0x77359400}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008000) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}], 0x1}, 0x101}], 0x1, 0x60, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 20m37.324131605s ago: executing program 37 (id=1310): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, 0x0, 0x4) r2 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000100)='reno\x00', 0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ee4000/0x1000)=nil, 0x1000) munmap(&(0x7f0000f62000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000eb0000/0x3000)=nil, 0x3000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 19m38.170874729s ago: executing program 38 (id=1456): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x100000, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000006000000feffffff0000000000000000000000000000d9e4aa2f0000000000000000000000000000000000000000000000000000feffffff0020000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x2, 0x90) open_tree(r1, &(0x7f0000000380)='./cgroup\x00', 0x80001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/249, 0x46, 0xf9, 0xa}, 0x28) syz_open_dev$sg(0x0, 0x0, 0x0) setreuid(0x0, 0xee00) r2 = syz_io_uring_setup(0xec4, 0x0, 0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) io_uring_enter(r2, 0x5125, 0xf6d7, 0x3, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000180)='qnx4\x00', 0x1a088c8, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80, &(0x7f0000000280)=[{&(0x7f0000002680)="ea485e8fd28bcb90f423cac730513d968dc25cd2cd53ee3f8101667813abc681210b5282dda99f47151652d9c1143d735f2cbad4c79ce239abd86f4f0ad68426f5bd893b8dfeec685ac6facd9f0989cd82b165094d87762e319d14df86b54b613b65d368dfc256434025c93a557626095a02349974cb0496a2f612b6dda1e205312e398a24218eaccbee6462677b601a183ff22f9849a3a29845987edb62b5096b5f85779ab37ca28368cb7f2506f03ec55fc79acb1eba65c94b844249dff0999524d5655f5fd9f9e6e2176c86e1c55b45", 0xd1}, {&(0x7f0000000080)="5e842f899d31da1d1500eb7feaa6838721b0eb2fb46948d64d369441c6ca444bfe2383bc1e1db5b413c41031aa9f704e4f9c0e25e8999bbbbcf7b0faaff6b26d", 0x40}], 0x2}, 0x4) 19m33.641461412s ago: executing program 39 (id=1470): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xb) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) fcntl$notify(r5, 0x402, 0x11) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000240902590001000000000904000000ef040100052406000105240000000d240f01"], 0x0) 19m28.556283732s ago: executing program 40 (id=1484): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000035c0)="2000000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 19m24.552326678s ago: executing program 41 (id=1496): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) read$dsp(r2, &(0x7f00000001c0)=""/95, 0x2) (fail_nth: 7) 19m18.143661904s ago: executing program 42 (id=1507): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="040000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r2, &(0x7f00000002c0), &(0x7f0000000300)=@tcp=r0}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x9}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffffffffffff2d, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) r8 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r9, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r8, &(0x7f0000002240)=""/237, 0xed, 0x4eb) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x9, 0x400000000, 0xfffffffffffffffc], 0xf000, 0x60}) 19m7.564406357s ago: executing program 43 (id=1517): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000780)={0xfff, {{0x2, 0x4e22, @local}}, 0x1}, 0x90) socket$netlink(0x10, 0x3, 0x10) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)='s', 0x1}], 0x1) read(r1, &(0x7f0000000f40)=""/4096, 0x1000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80e01, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000040)={0x1, 0xff}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000003640)) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 18m59.106136956s ago: executing program 44 (id=1537): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0x30, 0xfffffffffffffffe}) 18m47.566664023s ago: executing program 45 (id=1559): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000007c0)={0x8, @raw_data="1cc406eb698d0d0dfaa701552d76942a60ebb3adb9bf67f483a90adc0580d37482df0985e272ff7087bfa3c0088ce7ed78b40431e924e85393804c4ea28618905e07f0aae8049a37696f940c27925e1d0fe1e7e75a07aa649f04eeab9ac265e8fe4f20feb7ad90190421e086bbbf15b8fde550046bfd8dea43a2262e1883940eb0264091889edc696e10b21f981733ce8584a9ef57a4677942e92dd8eda4dfeee964d96d476aa8691a6e5771ee30318542828589abb2f342276572371efdd4f71e9672069b4b3f64"}) r1 = gettid() socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x188, 0x230, 0xfeffffff, 0x188, 0x188, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @multicast1, @local, @icmp_id=0x66, @icmp_id=0x67}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'pimreg0\x00', 'ip_vti0\x00', {}, {}, 0x0, 0x3}, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x7}, [@common=@ttl={{0x28}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0xd}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast1, @icmp_id=0x64, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1f, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @icmp_id=0x65, @gre_key=0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) syz_clone3(&(0x7f00000003c0)={0x563a8ef7c430a03, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0xb}, &(0x7f00000001c0)=""/24, 0x18, &(0x7f0000000200)=""/248, &(0x7f0000000300)=[r1, r1, r1], 0x3}, 0x58) r7 = syz_open_procfs(r6, &(0x7f00000000c0)='net/protocols\x00') mount(&(0x7f0000000300), &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x321089c, 0x0) pread64(r7, &(0x7f0000002640)=""/237, 0xed, 0x4e6) 18m10.989519074s ago: executing program 46 (id=1637): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r1, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r4, 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000000)={0x40, 0xb, 0x1, 'N'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m38.060841731s ago: executing program 47 (id=1749): socket$nl_xfrm(0x10, 0x3, 0x6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x1000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c00), 0x0, 0x0) 17m34.75132531s ago: executing program 48 (id=1761): syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000180)={&(0x7f00000002c0)=""/48, 0x30}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)={0x2, 0x0, @d}, 0x18, 0x0) 17m20.986324055s ago: executing program 49 (id=1806): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x7, 0x0, 0x400, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 17m17.187342827s ago: executing program 50 (id=1816): r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(0xffffffffffffffff, 0x2, 0x48000008, r1, 0x0) 16m43.09369274s ago: executing program 51 (id=1901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$dri(0x0, 0x3, 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x20, 0x0, 0x5, 0x0, &(0x7f0000000400)=[0xfffffffb, 0x6, 0x7fffffff]}) r3 = socket$inet(0x2, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/fscreate\x00') write$smackfs_labels_list(r6, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x54, r1, 0x1, 0x14, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 15m58.190784503s ago: executing program 52 (id=2034): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x42, 0x9, 0xfffffffc, 0x25dfdbfd, {0x3}}, 0x14}}, 0x0) (async) openat$zero(0xffffffffffffff9c, 0x0, 0x204400, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0xfffffff9, 0x6, 0x7, 0x7f, 0xb2, 0x7, 0xf9, 0x68, 0x6, [0x3, 0x9, 0xffff7fff, 0x4, 0x8, 0x80, 0x8000]}}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) getpid() (async) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) getuid() (async) getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000006c0)) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) (async) r8 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r8, r7, 0x0, 0x0, 0x0}, 0x30) (async) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000900)) (async) sendmsg$netlink(r2, 0x0, 0x40) (async) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 15m55.072586476s ago: executing program 53 (id=2046): r0 = socket(0x10, 0x6, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0xfffffffe}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16=r3, @ANYBLOB="010003000000000000000a00000008000300", @ANYRES32=r4, @ANYRESDEC=r3], 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40) set_tid_address(&(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000380)={0x3, 0x6, 0x4, {0x7, 0x3}, 0x1, 0xa}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) read$FUSE(0xffffffffffffffff, &(0x7f000000a140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f000000a000)=[{{&(0x7f0000007b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000300)="4336c1180e6dce5c52998044a8f6c3259c70ea5b34700edb89eaefca6818651bee6e2b3842ba759448116554cbc04a1db9b50092054ff6937e", 0x39}, {&(0x7f00000028c0)="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", 0x1000}, {&(0x7f0000000600)="25dfcd31ca0a5d2d67a9611697796a8299d097104c5ea6c5677d3ec6ae9e82477aa75c091ebdb992e26068d9e7dda3b9c878b02d7ee53967eb1fd935063999a6e713d57c13b0b6a02da6f388d914d1caf6ff780669fd0c2a6ab6bc08701c6c1821297334d55ecf4f8e9f58a8bf66ece1cf49042e74556f7f03454f009910ae9719332a2a203c3d051e1a303ee6a01c35", 0x90}], 0x3}}, {{&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000007ac0)=[{&(0x7f0000000780)="f1191d323432df3b429288b9418a83a49128b604b7e7fe066dff6238efe7045a3b3a1dd7007af57649110cef39a27f60ff0a0bfc9e2a345aad1e05e2dba8f9db4ef7782cdfd7244f3dbf9139965e01ff0fa601fe9e89d8b22b90fb3c6d6a93ad37ca4379c9fe9e28b5ebda820a7f57bbd629b539f2ff808d942c196290ef733909730f03732c50bf0b8fd27f2c19abd1c68bae6f42bfbd9f66f5ea6fc9a2f2c316f6f15fc793f74d74", 0xa9}, {&(0x7f00000038c0)="cf06cc659c8e8657fa57671e5464d182d0281b612341df93dcb78114115875c5b5eb996d1a74cf419dcc487f4883fada41223e0f14baee149fa3497e74fffb50c593cc6c0163b4a3b07c383ca865d73a9f9b8d4e786a00c3350c4f299acba3b2f25ffc333904bba19f62e10f32be07c28bca9a80c2e390c0569f47fb6e7894e4398c450f1d04be6012759139dea09b66ae1b9044fdb8ee4f5cec767d503f7108b174c31939780077dc9ac9ab1fad76da66a9ee9e6fbf36dd36edeac4f4f8c616a52e46dc0ce83360173126b54c61fe65c8ac702ca43c397d3146edb51b39193accda70ae1702a84e606fca4de9b18fc5b204ffa1bb15f29b24e6272c28bf2d8b35d706ae13793e6e20472795de9a9ed9a59a112a930338e76d92d0d1a0ee3568921c86c1268abe1d598b56035c8c00d2cfd4a952fffdd4381b85a9eb3811fbaa08c007777700dac74aa5dce2255c12d1cdd843830d2f09a72c8a9109069f64504108989979e220bdcba529bc42bbf516e7c7bdcb83c8a4134a5fc9cdf001080bf0ff200affc628dfc0f0aff69288abbe0f59c882143c1fef9ff815ae6ec925e88282e24c358efecb036d34fe7381691d5d361db43257ab35aabbd50c3da766b765ea4e7fc725c4eec534f458c35730b6fdaa8882162abf33db0ca86fc759513707480c6f36af38d7a766a19ad3201bf5e3c6b5bea5902e872584bf070c7beb2623b4030f48bd149125fc9853bd23fb9af5c9843d7856f3086dbe6fdd81b81ca958fd55e753483d2ae6ed1f64feba50c55806559034368e3149aa4a61932e0c2ceb7aa66fdead6c17f7d92510e12381c54dfa831e6d685fa15b42f351a231d0e2d89a3edf12938704ff94a8e66ed72134785c69bcda5875fc744cb93a15b781aa028034d83f520942e092de1251eadc4a2d2e0f34c4eddbc882096e23f58ed97152dcc6cae6c9dfcf6cd735be134603c4830fd05bb7355133d85397cfca16345c7d596a57b9eef84a988bca07ca4469f182ff6a106357e51b8d0d3063d0573b6a4243b9a686d58bd2a96d46861062bfff53988d0a2824ff94c41ee3f2d94528cd69a6dfee37a6070a22ef30deb5825651cf115273cf7f9a4b7e0fc08d4b843aa1c93ca59125acb70b399474bc3f7f1de556c829f9248cc56e71d4a33b9d18f41c9fc8b46d92dd84efa114f7331322f3be30eb1c6185d04990fd1f064dcf0eaeb69c53a99798acd77fe982d7d1eb400a757ce9c4d1e34a7bf596cf6549d4a340b451ff1d90479976cf88cb5015c7158a507fabd234d5138a25c78a7e17234d94e40b35a686359eb5256d5fec937f085fa64a955fd3faf0700c5afde13b5e789644cc1ca94a3dd7f31dd8010fda8abf2d1b233a24ed1f5e0242aa6159ba09d3505af1a20969d78b37a60b3c03c3eb7c164bc30bc6cee2a5c52acabf1bb550354a428135e5c29826f00202f91d577443638604875b1246e2dcb1c6f7fb6e851b3abb3c1d911a98936d6080736883e47c3a374c51bebcbbe5e09318e2033b1590b7252e623860a95d636dd5126e775bb90dd7e354875afdc065aa74601c04affe49177234fa641e9a616e8d9573c371caa8a480209021ee8bb4443d5960598a08ea6373d2d1171a207562e2b6346403246899baa68f52c6d6cac079d22ce344d34175ca251ab1e2422a82feec9a5f3aa412e1df8e5414ee9540106761b08ec550ea37408875716681f46fa002e44f137fad0fa136d884a3b3d4686a923b24910c69309c5813643f29a0e2d58873aaa5e51d7e8801d7ce57b253b9af7a60f951c4ed692789d5ac97c2753101007e2ffb53facd5252919cf8ea59c8559ac8e76da89fe0df6ede15003e2d743d91fec6b3ef0dbcbaa62ef4717eaefa6eb0d639db20e67c7b05f8459146b88a005f68139dd58f0abdbb6d6085a9f1288cb90448bc8486777ec243be0104cb8799a43fd18705501829c5a7c9e4b9e5e07e4d23bf47ab6c72e026b1b6cea597eed8b2169fd8a7ee402c9cccf5a3e08fe63686f1d27df84108616f13222f4bc56cd47106400638917260e686a0812bd228a1043a6a6de95bae348826ecc0c5142a933f329ccfcfc66721055959bce2768b3f064cb8f35333fe0ebfc6201d19825c33bba8023a1b5ce9db6f8de877ca4e686d53a096f73ac928b42f870c6c0dd7c1199b0ee001b06b37fe875dcf9d08cfcf2fe33bdca79298c7eafb9cce74eb0832c9657453a69bc4c31b045bfd730281d7d5964c089a0349ff5fc4100580a924ba377173c2b5f26baa8841d4daeb5670834a1c14b949e8181040a27d058775abf421a910788b1f0a8afedad489a0ddb6927e9513c5ecc1c08c36badf3f5d511a6553e7d1073b82e3b8c39fe26d9cae39b0d0dced2c2f8fcd1ca365fc7652074d64f9a4fe4d8c8bd0245ce8ca11e394f53accf176b53e4f4f04a75b4ba53ae29a5fbe14c8ac35168ddbcfc5aa1478750a5283f398bda4b9323939f21c737931445942746b4fdd5ceceea59e118cf6e8d9fc2f609eedd57c91270ef6206f2aa24c4d5508b2db3b0a1ba9b7084376a1ad1e3e22ca29d330ebe8acc074f8c35192786fd213334f5c55a139fdc3803f82485472c4058a055f10cb601c2e699b2713e557604941f1edb881d200369267b7d463d434976ac486a35b93335eed6c9c60887283c84b100c44b66a63d13f76f0e03e018eea907e212b00eaf8dcf0d5c8cd51f3237c5cc6b4fa7e7b3364af51be0b4c88162a20ad2721ff5ebebbe574b354393a0f39f08b02be9a8bd710c6821f4430da1efdedbad212024ee79fa7cb15ae1b8fdf0cc2fdba8f6879ca4e242f5f1fc219ade1d41057a1886e01817c78ba0f63e3049a93706492f95fd605e8c05308177adf3447e8471e644e5db8c141d7bc54ae6e35a0a52567eff20e9596a19bfdcbed528f7220c496b95031ddf4033cb6d7b17e5566f9a2f7520ab119cdb4a6c71db7761ecc26a28f53b0f8c3e39d5905a5872d6c08c421bcf9a6cfaa17e065767b52aa00df392bb7e136018843ff748f967c7043786c75f2db5a1a912e8a746b30b755bea5f3a2a40ba066ffa0b362f8120867023d3719e5ef1bef54da63d74aa527896f85f6c9fef9dd40436a30fae2c684fa8aecd59f93cb87a09296d0cb23d7835624f23a731acfdb2e55164df8cb3951842e7678dadd9d0129bc2947a8cb419925f2d1afbf7b1c9e34aa8e82817a8516007ee80f923b594c0ee3ef1827f3c034bff2c6c20032af9cc4d37b3bc8a16d101fde81d3741743c03727caa4d6cdf7219fe4eadff5756c964d593bd184365d89021b3ca73652718816dbf26d7947095ba516120ab2d5308cfcce8d47e6ea20602ce16ea9828f7df84f0a4fda863301d5e8cc59de41b3e3079def194283b2c3d05b5ddb1a434760983e44fee5ac92ceb8469a16a8585e9e9bce13557f1cecdb02cb880d014844de0963e63f22fcb66bd70ef1089d47e4460c4a58ef0177bda10570cb6172ae4bd0fa14d2ab22045db7fb1c654e7379fb26ffe58dfe323153965b4ca234ff7e2a8432ac6dcc062d36ccc83b14ac97a4dbc796de1991f215fabf641681b886a93df64f03e3fb4c8dce039c40202b103192991708f358a26d602dcf6eb07dc8819bbd87ac8a559a80f87c8b0e0c9953e676662a60def3e052f15dd62d62e1a46e5dee36e472899bf146500a6ad62b9348bfc1730a9354ac7ddc2a0ef53886779dab340791e58ee14ffd65009473cab5c7e7dedbb1104b2797dae1700a89727f4630a5f19d3491b53f4ea01660cd7ea0b1fc98927633483b9b84444c0eac93b99faa684fb59cc8fb463aa4512197aeb0919cf4d7cc47849828a13e994416b62a59418a16b661395578f3104c054f048c2a8f81d28258d220b19ada273e94d1c465545641901318739e610beb1af196d7a48acaeb324d202eff403f34ca794cc67d94f6b7eab87c693cba2149d49b778284a31b36936e14f62f5452fd262cf6cba3fd1939aa9ec323c645e384f360eaf0e35076ebdcc3d74d66b94a00ba8585733083788fe68a269cab948b82c9ff11a11f8afc23e072f40b15765c508953e6becea20bcf57f9ac7b9f3d11ea00bcfb87a94c48f8da0d215782bd0e85de15473ecd0aa716037bb421f48efb8154f46867f4b2c6f34bd80515ec9dd8a3319c74b5f32385af6e68a0c182a5dfea6221b7458ed037651d42e3aee5679ad0338f4031400f9443e11c210acb2a7626669ef5f7de3c492805d0a3bd083bc46baae16a47d48a27c017813d7fb3805320c1543c292204f02454e592355f7a64d77428f3df1b82932ed171701ce56a174e26d31694aac3a1400fdabaf426dec09114350e25ce559d30093f901854e64f6e6375a06fc7cafdffc7a9d1f4765ca02f27285f681a67832358a9c9058432818615671c2a4ef81a56a9777c3c966bf8a2038185bbdf16da0007dcbf82d918139d71b563185068ba14c3af9c19dccd0c7f9a7d857c2267d3f58330a8a14ffe491d9277692db5343508f5f65b0713516429e43699d7c5e3e9aa66d573f65c3ca742795c30bd74b5969042c2141e9eadb3d523e99855f0c3d7c94aac2333ac4b682e44fe4508181fea46542d44b8e5ad9a81afd81d3b27832ee65c9786e30ca852253828821c436d1d9ef35fbcd903f8cc61cd540ddcd48b53a5c11ce1d97004cc866e22d8847b10596075550a98be23035b64dcfd6fd535d957a2493032e7362bc5e118c238b550282088dc6042b32e0d8d03353a06c41d0b8e13e01c70568247ba21bdff04f3e553b67079d7c845c4674cff612d9abf45b0050f26e0b9f7b8b4cc3e7b040a5ffa4d6e6e1bd3eed62c1639ca688106156aa264b286d2625fbf5100e0856e68cd9852b0b85a7e0e5b9afe03a217eb9ab12dc41b931b93079b9fd42d28f6d7b962c106ca1c5be0896db98d3195601bff5f8085ee8aee3eb45baf98b3921f7042a139bcb2d66c03a6f0bbd047448b3d1312c035edc2084f3946e02fee75184012eded777abf61ad7280e44b83c1adde763fc91c8b0694213f7ee3e32e8285999cad0bf071e8a4cbc6410bd5ff15af54199310543b7d9760d5c2344a6af959d4dbac1e5ddf284506386eaba1d5a74c6096c3dd103fa1c65b13c2064fcee1405e5d0ab5425f74a6167ceaba59bbe2149c1b8686142527e095bd335d128d1f15f5d75e6086bfe0ca1a0797b74ac8014da1d25ffd2b56adff3327d4269b79af6ad848d113696a0d847b49beffef792840ed89d051bcab59815f0241dc20146bbf423a93cc846d9310582a729342d8afadb1b6cf3cc20da7dcdebaa18056fee6f8786b671994489d26081a82682f3331179b93a9752e3fe37e0d53a53ad862beaeb9f24747c92ae41e0f628bab0a13250eef05f6d798de4f325809ae2826c5e0f26a522bd6595e4e1bb2c0ed31b806181bda8a6085d43b1d0cd77712a93a19fe5bb76d397e57a868c15045835db5fa421794fb5fdb05ba77ae2912e0c0d0dafe2969a403e07b049f5e9f5e0c8e681d23ef1c33e85d5b047c557f8681b640c8debb99182be0e78a7a327953e036b8766a1d85ca0c38b7280911fd013dc27d2be1c3855622871db4320d41e756e2b39eafe9719c66dca17d4a2af4d1cb06ba10362844e16f23072c24314aa5c6a8291f759859017f43d1939373c950e227608053b3b711b11caa30297acab5e7b8ba206667ff8ed60a7e47cf708867dad4680fb8a07f692cfc25e699618d68eda33d7b7aaa496b200c635d467725ab025fd93209fcc851c7fda1b5", 0x1000}, {&(0x7f00000048c0)="c5c23b59bc25fbf1cad3b0c4e34d8dd00e6f86e54b25885e7cc31c37aba721b2c832e3f07ea53b6eca2d6e6b19b1b7fb9726b24c2b12832982e9d755c41c2420a9f62c449287dc9fa86d1f6c8298c09e1d42efbdeba2bc8cca3fd9cf43a8471cc19156b6567733d52d29801c6521db073c882ba0b2d03ef931e96a18df6d0f496caddf982478415a493433c7bf7a8e2103eea6b195de0e467b51a93c152360a7de8c24c29d24d343cb6883482f0dbaee7d02d83548356b70b7620503b15dad7b60072cef62cdf586170edd73582f5ca29fdb8332698b3eb0d0a140748ccb4ab94766c94d914fa62950bbe8a77f68f964ce450eb8a83abde4dc37a479f66d9ea1983f443888e0bbb3978e890a489117ea5d46193a40b59e6759e468f9610955a852769eb91762c11b07f1f25c1b2ab57557020b46af2d5f2eb612f7995037c11a864230c6713a02891f5981b5a4f7742dcfd21df12484f22fca7fc67eba9e4b808c4efbf6d5067d47ec4f1414ec5080bf2e6acb6fb4b12fa00eab8028842672208b993e25e3c9653a590def248f8e97222a2d7db9964ee1e55d29af37661d19ed2e9256c3d485fb412fd9adadb86ba2e72895cceca158beec6fac4f0ec361870dcfb4ba4f9f66bb367cef192d0cc35aafb8238558d026534ca99f2c91a6667144f9828e21e153fcdb17ad43bdbfb6bf1c854e21da83b993879973c214ccb1b29e2a776e2e2d4194bf642009380c6a36ef84bf9fc58b3c98cd64b439ba33c35bccd1150039a1a7b52d3d6362afc8d292bc8226dfae72b7e22b470417d8f67cb71d62fb4086c15976ca4fc27654dfc85d6c1ce61c63d06e0253501dfa37efd4b33af00b2cd9171f76bc037b43aacb486e59f01234461c5e64f90b0987bfbc0e0348f1125b4a15f020face7d1799da3c2209463de66a3766f3e8233162b440b3af41195671104173ed8a527d9632d027bb362f1d4f41669111c68108a8f156008763797e4b2364d52eeb15efc8b4309e69c396fa556c20de5fed1fe707f99b1c0cc75c98bbaad111809c80dd66eb0b348874329f332400ef99772dc0e958e0205e9ea8aa11beff57fc5eef1dbcf222869f2fa003adb76398b14b216a23ba96bae597f6b1af029281c3afdb412792ea9065fba754476ac4e05885ce7dd8ee7b138bda234c7371fd18e132e630ac9741efe0866371b3e9c17e3e5301f43b6cc17e6af5ac611ea5448c219ae2da2843c807be11800a466c8fb686cfa06b74a5b320f0c0d08fcc4ba8de7a6cebfd66a2ea71835b4afc580a77741ed60cc51667d19b57a84c770457a43af01342a5e607abb4e17e133648959533a3b80919fc51d01ba847852a142548e3d9fe15951d9541d6bfb6ce45eeffd493753c9696184ddba2bff45dd41f38368618b9fa0f0b9788333f37f4d95152f8b2f7dec63014cd082521b607886308aafc30c951da6ea1c4830787337596b216bd436c0a3f2b8054a9946ee45b534d1e1ece2e3b3b98307ef1699eba7c097f28e6cd6d4f08d2cdf85bd55f7d367628bdc1bc6f33113b97a53a2f10284426f72a90a07aa6a9457848f38e0bfdd29fe12a553da2730a2c48d7f76deeb54b26a9e1dc59854e1b955b0624d38f268143e71344e3c433031a3d7746dd73e7b03d3e028b09c27103d65c1ea28fe5568a831964ee3e6d988219f62f2e08748e68dbd4c5a78d40303dddd6db5fefd28a3f105fb50befa6344cc3c8993e75995ab9703083addde4089c55d9a3441eb0c8299004eff58d43baad2ff289fdab0632433e579f296f3cea5cc34b4b3774588e65ea92c6e63c495c5c62e5f4c45b50d456cac99abbc2b2d1f9cbc4a24be781067f98fb8845a8595bd2f45b1fbe6d2a6939c8742b7d0bee154335344d8ab8c5367626da91a8824e4ab5f3de0181d007feb15b77185738e9301c6a1bb704d9d8ba3a02254f27ef8f97639b67ffe7232f0eab89037adba05e0d96c5c303bc8e64a0644eb92ba58c35c775ad7fec6c1f7be46eec08c86bcab2420bf29550032000c05a213a57e3beeff21d9a174cff28f2570a744497a3414061d4efda759a24b4d5ac0d1f60e641701b5880a5dd9a706fdcd0ab9f153cdb9012a9f277e889ff46282604190efd1ac9e26e3f3f4b269f69ad213408780ecb9a08d015018ee1a6f77e379be3928f3cb1e2d1646f002cb5878fd6fb7fc5699f466258ad33019d0ce07ae87c13ad73bad847ee8e0d9a6102b5c6f47e6d8efd813fef7420cffddeb3cafe8971fefa443706fe20dabd678cc2ac9f88c81e8d8887497e5f83fb032237d79062b90573492189c49ebe2e9fbe8b0d4d51ed19e29293f9cec3e3f0119356078a62f8a722490adc99a5c743b46c5b49e1a9e4769ff912db3d9a43a6dbc2cb9cb25a97aac984dbfdc47da297d07f144944e6524ccbf75e65993796e20bdb0a26c5f6ec9e99d546b44b8e1dc6d2e389d900fb56effcb96c908bb0b487c9b12a97f120b8bfe3f8000e942de669bdc6fde6f6666506a518bf8bccb8cb5ee2db0cf6f4313a99f6b77b641d22c7452f96553460590b618a1fd06ceebfa740cff0ff40c7a035b08ab510d3922520467276366799eb18ffc08b57c3759dc83251b912cbdf56f96e621c413cec1f67aacda9e5e50e3de1112869802163c16c25f4dbe55012891b8e05cad2e3a5e14477c05f730b2e5b2c53c136fbf2838f63607a8640918ce64d755e8becefccc31e02ae7ebdc04053d624252e381f1fced914ce6c3292bf0784751f22475d9130784527abc9ca4d0ed1af02026d0b192e99599baa57cf84470ca173ba87f6c8359e95ca2e0a19d24ef9667a3a33534b105120836148293e4eb5819488ee33053930a0f3e92c0e06dd29802badaa431a86c3366cdec6bd4118a1bcea6308b1a866cf175d0ace63016875d23c37f7dd390cfc3cdf534a2ae16d796c47cc90ecc46e6585da3f60dc10723f4bec6546227c849c09d071bd5f8d9e0427fcdb543931b4dc1458f122c0ec145f717c2eb6490d0120f58b73a1631daa2173a1641a63f3c7316d52aa6275260d09e1f8a410343c52154514cc3feef4aa6ed9c77c0f42e1129dfdc17c3c07860b54dc72e0cadc63ec921ce16149bc49b251d1685d343640f98b40a19019d21a872612fea66bc6bc142c7c685f83592c071345f8238c31a9d85d391827b8a5207161ef3407b356b9ac25b0292036957bcaf61bb08416cdf81254068cdeaa29d322c5547ba7642bcd49e00b62bf85df699e88f30406ab6fc1bd1e94b680280aa493656cb449c8a1e83e48daf368319359ee070fa782ec426c56d2cf20682d4b26375c7526b45c1c9d78f62f3605d751fdc8322344ed74da5063ee5acfcd58b4c5f3a5aa3fbc6620f2fd12beef64e817f127ad5529f892d46cd447508ce0a801bd290bab9371d109239b07005d52ea29155cbd93960878a35a5d9987bc4b33d9d90da92f651e3f84dfaa44efb7d4481b5e7f79b7f8b31cb7fcca9660c5c74758fa2bc37a3ae97f97f8ad1f801b87e12b5c35162bdcd08a10a8008cecdbdb6ab2b5585bd57cf3160fc10c38d8bf59b8448c6ee6c07b20f68019d8afd32fe7e076e852ee1c4ae8a4359bd2272273bf7069305797e477c304f55c468e08b72c89d3ed3b4e8af67211c49e5b16b93e0e4fac52b034d8263b3f91d687d41209fd8103e153548149dbd63753bd76563068916b99dbb9f1fe15e76256cd19e9186314de2f27495dd1ee308f6113995b39968b99cc66b08f0d476d0f87c2156fc9bdc8ea7f67f9ea8d21d6cce0691126a4d60b896e36955378235e95788820e23fbd2efb9c55a8aaf9dd2bf528f76769f979aac178de34a60ab9587138bcbe9ce0da943430bdf1f6e5affd2ab91dc021d4672b64021b9e65de554c725f291a712b7efc083865160ecfec05c663be46a1b91bc95f5c233222518b36f7215f0afa55fc603e4fe04a59a045fc5a6dabf4913578a42a29392357797e1ee42f2712c9b38c918bf15669958be28ac00988c2f6673b86b6db018046ad82a4bb9dfb942fe0f6b3701db3a068e0da91f93efb38fd333f92fdced86f040660a9ce4aa8c40334db91658d5e3034986240b5ab36d97ca89e427e7cb71a4d637c5ef24c7fa750db61a12f2c32d365d9d6e8564ecf9c08d7fb5022d88677a16c79644222b338318fd12231c1cbacbb07d43ffb0e6eb756e8170f2cc4cf79ec986eb87b5816523737512d6fb51d88746271da4b6e4a7bad01c9f1865bdd121aee788369fe006d4c027c68e88d0dc732d7b05f6f0d662978c415a81264f6f9ad1647905f24fd4502ecedf5a36c06539741910f16a1654ec2ce9d17bebdc997430dbdfdf925030cba587cd19e55edb35e40f81616914ea82e5094b8edc00781466516f332c195749ed1d2ed3b0f36d7fc3ac49265c7d5d45388993b3fdf04731b89d65baad1edcf67e414b67a4fbcf4b9edab9545a172cb37c2a545c2bc2543a7f89c579cfb3a3e91a8327230b9ca4211bf7441fc4d6339e65e2b0df3e0600bf9a01868bfde22e2a60559ff32752d08c07d42b1b8009909699a213cbb0d7abcaad1ee3795c92857cfbafdf53f530d2c4bdbc9fd198ef2728bcdc3ebfad666ac96bcd080610d83ba456ac9b371ed55c7a03cc54464d3102611230e06d71f23603f553545d7f82e496936f21145680da1f28b413cb8578b663f7c96ae6d82a0ad5d519a0247d25f022f9c63d2477baebf7df30ae7b616e525e02183e1d3baf45292b48d6a753facc0d3ad4d9df052d71651336bdc57f107362db99b314a5e4159298871bbb3c4d2cf2950e9d78b20295d14618631c856c67e04df893fdfb473136d380b8fc56cb43b7ec35431361826bbcf8a825d6125bd30a5cc2fe84d323a11f093642fdff7e1921add129c2ba781c9ebd43112a6bb162015e69856cd0be5320f202611fc60c49c3e442b86ca1a3daf540c11a3e3cca2a4006dfc7b72f76e5a90c839bb499936424eed6ef3172ca9cb866ca527ce31aa8b9241bbeb8cf764f7341aa00767170b42b6e3453fc7a2cbdf681495305445af853280451fd514e1f9396143bd95cfaac29e90a906648a0b1510ce2be571924e0d04f88de92e258ec9aef67774e6b68331285d8a6c6ee18126294213fc78dc692484e9556001e74b852c99c3ca0154360a231bae3f9d50b2d99aba97875d1913949ec767a79554b86c6ad25e7f56cc6280d780b12794cc68d154664e22211315e28b137b41f13e9a6c21e57db51ef7995b0277b96af78409374cb425c9f7b4cc351bb319527b2f1b9c52c22fdce3948a7e052a9c12a68aff9f1fbab66bb26e2bfb5fe489ed43ef5ee5a7f164ae9f1d0b344d32e02d343c397f1a050a3508add21ca079fb62d37837a26b9ed56406f1135091eb40ee61b900257577cb5808002074dcd720014d425e76b0574b2bfa7c9d7f3f2f768472e2412cd4025e5d4b8741358f627ba4dcca37a1d1e14f8cf2f44c9378cdacfed684ec2e05733bdb47f7dd95553664618b9242c17b5e88eaf5a725d25a77fa9bc80f883e106ed57b228cbb7586b9ca1cc23efe0f2a34bcdf5abd1c42300199af224414366075ba14953bf143a25a6184e2891efb85e1d1c362cdd4e890d9b06c94c954ec9f8cc2d5a6262ec7159ea803c939dd32bfbe70d98eca84f585048aa472a58d2ffed8f3f732a9138e5d8e697cc7199e6dd72b4a7bd867a9a9bfb315c00669aa2d6f294fc6d45c4db0007c1b2d5f6e4e29137e35e92de940ecfab2162609544223779db07b1f1d11293629410df9", 0x1000}, {&(0x7f0000000840)="469c88c8b8cc9d5fb9085dea1c8bf1b3", 0x10}, {&(0x7f00000058c0)="2ef79d219ded3caae97be13dd1f50dbea8f682c98f22fe5593d18595bd0e76081dbd9c80ded434b938f63b7b2148a67ba2f2533993799b762b035671aad6118fdd30a52c5853a096cfafaa08c29f542c6b4bcd4f5a062fbf2ea6cd530ede55192e71a9cb203abeeac7d5b00dc22cd7e9a1cb186d1aa12cc7d06664af483d99de4a9fccf159d1e539b254df4e81856357c329dc3051e2c4dd46547b1277ec5645cdf3a25f23bdedac1ff82b12f7015c5749c3952aea0f0eb6fe492feaf2d3264e6b8fed4935bd3bf406fea1d6cb13ecdf6dbe6db84f28b9e712b169a59bde39482c9df91f5b9f1304915624f194e5a679940fa99b1653d23ce798f8", 0xfb}, {&(0x7f00000059c0)="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", 0x1000}, {&(0x7f00000069c0)="87922ba8f3c31429f211dfb589f19ccea71e1933900872335ab453bdc2e40f74dc906456ab60744775be0600f9654df46e888732be4a37753ef279a8effad53c9d3668c325b46068a8c6430b1afa490923ce3c561a22c061498344138598cae4cd885b28ccd8ceca36d3b6ff662e4f37c6f1bff4779cbffac7f67c959b6f40c2dd4dc6c26621872ab229354a34853470a216c2aa7acbf4c2ff3cb662e1e9de8768a2faad03fdcbec15e8db70ea0db9e328c80325567cab8ff191067c9caa01adf4fe0c99dd464e2fea8d54119960689b2a1cec58c0dbb3f58de23ed926cd8da0d6758d6d97d58575837b0afd5b7c02b926a9bddc804a6b58e0141c7041736f48fa2122d387be193dabb4583d99b1f0e228e9fca66eb57e519df270a41cff2a0b754c0390fa3eb68688dad41450e0944115871151ec6af48c000e7813cb589265a7b98cf75a009da141666876fed4964b526b7a4495a401a51a8c4a62e1c29744c6bca2dfea24e2b99de53750284e81f80fcf24452031f61b1c50fdd843e5960126a9ca1c7e252e9c2158539fc0cf355200ff1df14aa1a7b37162f74c1a0bf6c951c916d9c5839b79a78ffe48594369e7f37ea5fc25d75ef26b66a347fc1bc418be49fb8e7f0920688934f3a8b885fc5198097c36bd5c72c2fd1351cc35f2fcf296342b2f28c1d7946bd412f57ddaadc567d5ec14751ae43d1d8e192189119a45978b6861940bc75c91598d55d3e54e34988461c6b43ff5f2129eb832c1001ce6107b874a7a3f468a06be0fcf2aa0820eb82a682cce3cd5626224f6332cf5ef90b109bef6ea17a6ebdacc1560174c989ef4c19b413786c891ee9d23eb20c3e31dde7d146d07a9cdf4b7f941d4537e913f63e0f032e85d583c6ef1a3fa3538c35e897426cfa594796cd92350f73e90d90589aedb8966b59a6d8f9a014299950bd38868c343a5aa0a4f79b56e114764141a988e2031fb85e5e4fdeca384e12428376f4ea772d5f3a194c5226609764b528b0a7e3e732b3f03e75f06c98f18f848da9f5ecce358458624eb335d855269639e0859dfa5fb1c83d6d12137f3de5b6115676182f0114006fa26f9fe032f43f4c20e9ab1bedd409bb8ed97d52900d5924233a51e3e0c036edf7f67af52922a9b4603fcd447262e35d46c4598359db74058844697000253b258dd6c2152b02eae16396ee53e4155708700f73c57d4879493bf1695230051c4744547dabc9d10a50c06db24832386fb6ae6289e5dd47d8a068b6671eb709ee4e0174205f3dac979d9e59ac5123a9a217a7a52361c4fd0f681be16a536890457dcd3f71100172fe15e3f03ac58e7a75025dbc41750d4dea8dbd73a6e0b56de3f82ca353dcbd2621c38069493c7a3cb0fbee5c3faa9ef0d4c7934d59abc9859dc2440b2a58a5e4e4a48dabc501685fff8f887e38078904932b5681f32a42996962b66d06a9037484254940d5ea7c76f337260c941fb1ff35cb30c092930c7fda925ede1408eaffd262a4bb0dbdb9a7fc56cf3d034e4448f1c327b2e2cfd09fdc2a0a87f3a15104b7ca72d715b0d1ae691d0e7f78daa634a7445a1a1cf7a4a08b202e08d4d103c22bc2d1820dd4962f543d613fe7a9cbcb9f7b6878e259ec36a100229f5f7c9fd568c4231f4933f27460046050e7532e8ca5a2be2a491b029e085fc4690b34e68e86eea435a57dcbc52954679f7e332c3fa4dbfdb5470b402b49b071e1d986bce651d0cbcc76d5668ae1aad736d2f720496c1a6ac2d63395c1d38e8e135ba383ac812d6270f5e017233c66bbf41f53e206a22d3b19dfff6c08f4e71aef5f5c7dca563ca4488502e2a0e7b931809544bb45f7fb2a33b7f339b6904f894c7d3b746727e66324a7d5470cbe5082bb6715887f7d7c5891793342021a4b19f5056864ea82e258b5bd327198dd494c2e07218717160e408b0626d4e21e1b7c9e6fabdee580d82e05260adbae6c1a09ab6b74ee5ce64f0d2365fea4cd0d5c33ec2500dc75800fab25cd54bcdf83e7d47c12b95813eaf1089c9f59593da9fdeb22660266197e0949ac7e3d205996785f383e787d6fc7c2e01d87d582d80c6db8e54b380436906549a00d7943afd1f822fbd7b6de8586ca9722db3def54c8f32ef79610a3c7d6fa640723f9ed37e97b33b18520a09304ad1eccc45e806c9109a63d1420c6e01c861d65ef6e69d11b52a35c646c9a585803a05b293a70c699145c856d526aed1988546360322ffaa27e9bc8f70c2c493ebb33ccc0716ae4cef26bbd040d0a7d140b182da2d1933181a2c941fc9e6d0805d9644bd00fdbeb0b93a642c71aa60b3c6f5f1675729dc819441810ae21ab04a0b198c098328aa640bae82da44674b0cf9afa0ae11f969113cc89472a7959ce38a7c28df59de498f99e7fd82d73be0fee5dc82e4d6107c24aa87d540d1c470d6dd82366a412ddbb79c4813419323a9932a944fde21e04d7157dad908f1703a3a1f8ee2c09f9afe4b004978278779c4749b9d9e066ddb24f693954065ac4ad497a8514bd122697e587ade44ee66baf2771a8d2c44a9023a9b108a9146030507bbc1a4b54712f99b3918d348ce31142fc3913d027309fc56271604b3f7c8d9bc6f7844b2aa705f3f3792081f76c7aa8bd76a13c29ace794a75b7af67b10f613bc9a5f24f81d0eea88289c92189e6a58c334ba11f95eb2a0b3a43d144b878260ae0666a31709af292e17a280855c2298c2fb13d640a5ef4f3906c3664f333cb5e22d283c733e2321b0dc2dc19eaf9f53dca0915d8fc06736c1d235cc76f9b48ad41e2ee8ce45124315ddc746dd0fec01c7d58bdd59617fc139c5736fecb8f79f20d83fdcbaec86eb12335959d2a16b8c83b34d2eab70b6c933dc9480aa3bc08b773852466939c01b5c4d546bca08c0de1b52b43182ea42703e6de6e622b753db76fa61c66a99cd78301779ede45c7476f0e0f5ca48ddc4df7bbbb4891c33b1a6c9c6d046ab551ff49e659067e140105572c16b8b6f24843ddd7ebce217181d0dad6a957e00883d4435a0f1a80aabd7d62042b7c5046686eff5dacbf8f68538c2b0d6e5154b33cf8939d7f0c281adf26f8a265aca03493999cb9cb36b7791886bc78e2ed0a6b200c40e3b62807a5c4da9d9fd3545df44c164a363957fbe2d0c9769a614ed3d8f9c52325588888391afcfb7436d355e40e2ea6c59f5d7f50eaae0a2897e5c759bfc2601f4bd9104332da86ecbd23abdca83280edecc90844bfb39c52b85db2449654fc2c24c6cae1df9c069d5008093da31826604bab878d65fce4be3861ad5a5b80df9f2ff1aff54f1ed0e103f5fb8889ea49dbdb51a7d0b501818f9cf11c4427db99f704336f183d008e07390b0ad89076f5dc7b996c2a5fd69c007d618ad95bc79c58b62fbc872c7448f563d59b890abd7053e4a16184afc53924a8e0c4633f04a71831f48dc17c8350bc4a71c45eb0921fa9a13304f0f39c9570e618571193d3d12fc2ebac7f23a35d278ba588d9e56b81f8931ed9170600a4439122d62ee3f598d4ff5be0e1885dfdc23b80e3bf0205ff67f79d40015f24dc62de6744efd7a01020eea8b3417977debb66fbef254db352cd55b0cd440f90fc587084578e0fc34042ca06b3023afc7da6689059b8b702722089ec3666298cdde88bdced5b61d57602d4b97b854d827a3d7c0df8c4576f1d37d52ebd3e6f422c54decea3c3f63a0e7e71787bbd887d3db66287a928b0ba18633f0ed72b21f473142ca09ea6da463acb22373af838408bc843968f2f005eae7bc6185a32c5e3e3ef11c97e38618ebfe7f2c3e628cc1fd349804d6ea0b136bf6360c3b8c9dbe91fbdc1b527155df97878b0204806f64bc8ab289d0ba05571abbcfee35c2e50fe7a077e6bad0bae29c5911314c897956904cfc0e2683e9ce35344948fc3346eb36a6c13903420b795a27f731fb71f2757c6420f7f9bd789745adb56a621cbc836f0c1a8716710318e9608f55d56921fad30cfacce79a4a559fa7a9ac5e884ccb096dff43b68537edb28caa811255063250014bce1c1fb8a089b15605309663458aa11224467b786b88e6810e671ef19f52fe9778aab4bf67628fa4779bd3a7025d0f61314cb407dace73d2a0af0b6c72891c31d35dd41bf00a68676a9c5a0f41cffc329f0f1ebafe0fddd6c750eaa5196c5e6e40c510823aa699b399a949c2a4eae703b9c91957b4b2ec397d0dcf5c96af159c8cc8db88c53d6f4121c4aa7dc934b450cb3766767f1c961ebba6b88a299f3dddc1af5b8c81e7caa327498785cce8eacb08445a74344fc8539215040b7be70b4ddd7eee4b3d63f44b27810abbbbcc7ad5b66902fab5aa31dc60326456f255d7b66314a4d7cb3862a26cf745d92c3f0c1f283fc5c993d2ef9d67ba771e1c973d260d8fb6a597d421f68e81385753f87df7b00d1989c9a288abe149582dd1213100d1269b56bd885e418de2a8080154d9f6dcf19ba0f36b9f200fa7cf736eecb38866dcd8343efcc702a61701a43a5101da00a913f1735037b3ff12e13226e597bd122b4485bcc17d30b29b47ded7deaa3b588d048433128da14b4571d1a680411f7e5c4425094ae6dd26efbfeea3d7e1dfa667368fec61ef92b4d1482e8675b8edc9ce377c5166c8f7946ed316c858805a75b53564688066f6e199d65972f170efa1e25f7de02a75c49f2eb2b29d77b326904ed4bde2c4ff064fb7e06f68367f04a6606e5a05617a20123317643e92ddce7133cf87641449a3eee6609c69692b0a45ac29940ed82c2899aaf15254b35866294f9b200fbfcb63f1f083adc3b82965e17d85a0df7767e30dfdf5db8ced3bc8174239b4302e17b416e71492eb0e5fa6ee773be1409b053b8e97e48a8cdcdbf74efc14b5e6bba758250b1d33f44b9cdfe61051b47b24b64cf4858636bcc7f7cc039d93b00ea3527b97d19cd731d67622e60d4c7be6c2c6f54d1eec842ea5e1825c32542ee38d1d978c225c3267b009b53d7a83268a54c94a3f0ed099fe72b857ecd889257c3f3d90587f13ec7316b6c12f8637600b0233f0902b6c7b346a053ab8bb4a1420cc53f2c26e7b5951a3044fef7bc799eb420620cafa25a9a41c974a3c1cd6ed76ab7025c6dacd30f37c609f7ddcc0516f3ec770ed766c2d754434335e90205dd3c73bce4d9da67d496ff135e5079ac894040af2e4fcac3f6a3e8defdef4783b5b1153d8156244f8316493aedccc29f4fca2c074ab6cc030d1e72d77e6a430cfc420387ce5f5b60121ca02e986f5a1ac8a08b225d95d52713c72335cdcffaa2b5703c097864cb36757fdd8c8e29ee451486ce4d06e3fd99e3c0bdd531481be3fe785f2d6ad0c925b70e23e486f2466831bba8fb3ae8dc68693798a1a6e417c0686c208b86d2040f78f963fda73316e35f6e97fe03ba05debcb1d521f5e341a7a7298b37f4611fd02fb857973870ce0435f17a98ae2824d2f214382aaa725fbb40bdad4caf21318ac2f5cfa6118639938444fa31494a9e1858973d6e644a33138d1d625a91ac3cfef2ef633d615ae1e0078599bcaed005033e50c868184c9c57d9d830a4aaac56c0475e94334504d5e8dacc531760b2cd6838b0f2314d2ac438e194646af6b1bf929aa0cf1632400483fa7e058c217e7580ab48a202c291225a16c557ca4266cfb162965e824ca62907992bee6de958c18304493c5f01b1c53247f50210bc772d2c4ac8bb2bbca40730edafcc1717e91972f285cd98d3483da4d4ec312b4cecbc1cac22049702abff5f72b4d1efd4de356fdcf875233681", 0x1000}, {&(0x7f00000079c0)="9496507b1d8778fb23130382c9ab0013d498df08e32961ba8ed07d5a5db2bd3c07caf25ad3eb4a4df3b08b0253a5c7608d51513d9d2ad172ee7b4e7499199057781effb93a886649c4045067c8c034c3b05d6c5c4774ef4592430ec916fc24edcdc5c6e296859a1e6f94c75fd4c63a0cf93b3d544d07f00111d337f41372ad5292cfb0840c86dc9fffb9e90f1a2fdb2bcd0b73415d7397e7dde305003446e2c06d3ae965fbe64917aa5b01533c3dab9b5774851a0c2ac6554b745c71942adfb8af6870c30ea745994e832a2bc3", 0xcd}], 0x8, &(0x7f0000007c00)=[@cred={{0x1c}}], 0x20, 0x8080}}, {{&(0x7f00000083c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000087c0)=[{&(0x7f0000007c40)="1caf379b0261fb96fbcf61661072f9f2a46eae6f024bc9693b80883828ed71788ffd80da79e083e20708a1693b0f43af6b9b926ce5fc49f3d5f8268a34a5f49cced748103a50f72917c8653028f606a8ac0578c1614ddd14287bc11dc2a73675f386794c5cee22cf3392a2d286be2c574ebcb116ec82d376de04e7444925d41dc92e6fe6da33dc6cdd97fafd1bbe968d3603c743954548e43bcdab3d2743c40026175cda4908057aed950fbea9c17227479e8bf292479e6e8a12ff20174b838fb0176dcc3f878adb6afd770907690dbc312595e1f34146efea1385f15149531b19a957f6278ce8e6406926afa97c515d5d64d93f", 0xf4}, {&(0x7f0000008540)="56511f0dc4d83e202e43b7ee1fff44c5efde2049f60dd332edb7256ef1e3c34409b60f79a3df7e9ee3a5f8e1eae44212d9b5f23998d19fda7a941a32417395a71099982fc67941390eadcbf4f261d20375a0c85d8b78b4bd07af1ebfcd270073662e77aa66669297c3cffc98de7c66cb5262ff5fb56319fb260c10615f24c5bc185d190b4b29694d4068d7de27cba0deb5dd240494e4fd3e41628c498e841a0fcf1f28a4792a4503dbd2b0432a3335e4c855742b07146dfda93ccab4c232db07b37054716f3c9e6214aa0d07ab3902e5953a96d7d690f399fd2f9f2817bc2f9c34fa70af17d4375f0fc3", 0xea}, {&(0x7f0000008640)="dbb04ff0a057bdc643c0c7ddff93a37bde349f5ff1c5420d994946d708de538788653d376d619077c23fad17c90ad0ae645f180439b9bd5fafad283cd7ac84eb7373c04c1c207f4751186abf31a5b1bdc8b01ad34b800275e53825096094f967130775fddd0d69b94de7840d1cff8244387f67a8fb6974a8d9b7e7b9c12e23976f3690debbd960853c317e6b9a2a46cf06d3eb3788a3d4918b238cebdb3fa8a8c3", 0xa1}, {&(0x7f0000008700)="465b6c18b8dcfa44c4241494b4ae04af3939d8990d19aa9c84df7b4327988458cd7030edb0e04b71a57711490c441691eeae4ae2f02fb61610b155ab3a461226f72e68f5b0d15b23f32d0c78c49a21db21fc6411622c9f86034b999c79ccf56dcbd56ac496138bd799e924948abd4b95e50a08c1eef5a1ae8a08991d6974445e09b3", 0x82}], 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r10, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r11, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r8, @ANYRES32=r11, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYRES32=r8, @ANYBLOB="1c000600000010000000316c38001800c027363a9493526c257941108ad73492ba325d61ca1ce1563c23369959741399770a432df5b8eca61dfb888e9922969bdab537", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32=r11, @ANYRES32=r11, @ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="00000010100000000000000001000000010000001c00000000000000010000e101000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x42011}}, {{&(0x7f0000008a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008dc0), 0x0, 0x0, 0x0, 0x4090}}, {{&(0x7f0000008e40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000009f80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00', @ANYRES8=r0, @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0], 0x28, 0x8894}}], 0x5, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r12 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r12) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010200000020"], 0x0) ioctl$EVIOCRMFF(r12, 0x40085507, 0x0) 14m12.4160279s ago: executing program 54 (id=2313): recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)}], 0x7, &(0x7f0000000580)=""/88, 0x58}, 0x2003) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x80002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000680)={0x9c06f53deeb91a75, 0x0, 0x0, 0x3, 0x7}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000700), 0x2, 0x240002) connect$inet(r2, &(0x7f0000000740)={0x2, 0x4e20, @private=0xa010101}, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000780), &(0x7f00000007c0)=0x40) recvmmsg(r3, &(0x7f00000013c0)=[{{&(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000880)=""/119, 0x77}, {&(0x7f0000000900)=""/238, 0xee}, {0x0}, {&(0x7f0000000b00)=""/49, 0x31}, {&(0x7f0000000b40)=""/110, 0x6e}, {&(0x7f0000000bc0)=""/106, 0x6a}], 0x6, &(0x7f0000000dc0)=""/174, 0xae}, 0x80000001}, {{&(0x7f0000000e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000f00)=""/92, 0x5c}, {&(0x7f0000001040)=""/197, 0xc5}, {&(0x7f0000001140)=""/55, 0x37}, {&(0x7f0000001180)=""/111, 0x6f}, {&(0x7f0000001200)=""/167, 0xa7}], 0x5, &(0x7f0000001340)=""/72, 0x48}, 0xffffffee}], 0x2, 0x10002, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000001440)={0x6, 'hsr0\x00', {0x2}, 0xe}) ioctl$TIOCSCTTY(r2, 0x540e, 0x2) socket$key(0xf, 0x3, 0x2) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000015c0)={'tunl0\x00', &(0x7f0000001500)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x8, 0xa73, {{0x16, 0x4, 0x1, 0x9, 0x58, 0x67, 0x0, 0x8, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x41, 0xfffffffffffffffe, [{0x6, 0xa, "8a09e2a401b3dbad"}, {0x6, 0x8, "147313b0ecee"}, {0x4, 0xf, "672e16b119359c12b7ee75b8f3"}, {0x1, 0xe, "5dd04006c375dcb7ff7968da"}, {0x7, 0xc, "ec08339d7ee90c333f9e"}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f00000016c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x74, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4004) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002900)=[{{&(0x7f0000001740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000028c0)=[{&(0x7f00000017c0)="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", 0xfff}, {&(0x7f00000027c0)="825fae4f2b081cc67f4dc7a3b52b1f531aaf06e473cdb14ff12fb4303d59996f985c110de6a4bfec50a9c4fc4b58f49a8f8d05b383f1b0821aca84aafb9d598fc1ea3da54142fee56e076daa8a1e811b076153fa9fb40bf059be6086ae719d54efaf8c3e52cbc5d5b1c2a9164b2086c81dce916a7101438875e7d2c0e7c8714be88b29f62e214f77d630c79ca2f4ff7aeb5cb20b1fc4f0568c00b9732f9a9ffb5f0172e674454b026f1dd12b723127d0d8ffde8591d6d5716169a228ed39f4ba8edcfb", 0xc3}], 0x2, 0x0, 0x0, 0x20000000}}], 0x1, 0x4048040) r8 = syz_open_dev$vbi(&(0x7f0000002940), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000002980)={0x2, 0xfb39, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000029c0)={0x2, 0x1, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=@base={0x15, 0x8000, 0xfffffff7, 0xe, 0x100, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x3, 0x5}, 0x50) openat$sysctl(0xffffffffffffff9c, &(0x7f0000003cc0)='/proc/self/clear_refs\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000009, 0x4010, r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f00000043c0)={&(0x7f0000003f80)={{@host, 0x2}, {@hyper, 0xffff}, 0x400, "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"}, 0x418, 0x800}) 13m7.358644161s ago: executing program 55 (id=2499): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x10000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000000000000a000000fbffffff14"], 0x48) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) unshare(0x24060400) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 12m6.315624833s ago: executing program 56 (id=2663): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000300)={0xffffffffffffffff, r3}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) recvmsg$can_j1939(r5, &(0x7f0000000380)={&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000000300), 0x0, &(0x7f00000005c0)=""/211, 0xd3}, 0x2102) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x38, 0xe2, 0xaa, 0x8, 0x2b73, 0x17, 0xa20e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0xdb, 0x4, 0x80, 0xe6, [{{0x9, 0x4, 0x0, 0x4, 0x0, 0xff, 0x9e, 0x4d, 0x5}}, {{0x9, 0x4, 0x0, 0x2, 0x1, 0xe2, 0xa5, 0xc6, 0xa, [], [{{0x9, 0x5, 0x4, 0x4, 0x8, 0x9, 0x2, 0x9}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r8, &(0x7f0000000500)=""/129, 0x81, 0x12002, 0x0, 0x0) 12m3.619223211s ago: executing program 57 (id=2675): syz_open_dev$video4linux(&(0x7f0000000100), 0xfffffffffffffffc, 0xc2a00) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_setup(0x8, &(0x7f0000004200)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 12m0.710869645s ago: executing program 58 (id=2693): syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x0, &(0x7f0000000100)=0x8) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r6, 0x100847c0, 0xfffffffc, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0xf4, r8, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xd8c, 0xa664, 0xb, 0x5, 0xfffd, 0xffff, 0x3]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x24, 0x36, 0x60, 0x48, 0x36, 0x36, 0x16, 0x24, 0x2e, 0x60, 0x24, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x9}]}, 0xf4}, 0x1, 0x0, 0x0, 0x400ccc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000fb15603fe4222a15365e9399724de358987ed552e69df60df151068bdbf97136521e197c4ca5daa774540e7fda063f0afd119b5e6ebee2b7a67541af6f953a744b7eb582d152382cf3a8424cf25f39f678a5a11b1dbcb2b24ec81ebc7e4a6827975b9a97bb2c89d140d482ee37b54277d597bab9d0f1e9f87ca88b35ef2cedec260f83f881ca1c6d369d4fce4704885c30451ca3980f2fa1f228ee6ad13676b1b9feb810a7f30d8b8089eab5b890cfdcc961444de1741ec9ed8316b69901efc21fc0eae3902f1cced6c43eb5866c00"/230], &(0x7f0000000400)='GPL\x00', 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) 10m20.789166671s ago: executing program 0 (id=2988): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r4], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x40000000015, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0xc000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)={0x14, 0x16, 0xf15, 0x0, 0x25dfdbfb, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x80) 10m19.608519594s ago: executing program 0 (id=2989): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x20, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r3, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) 10m19.013869834s ago: executing program 0 (id=2992): rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0xa, 0x1, 0x81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000880)="1080", 0x2, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10010, 0xffffffffffffffff, 0x0) r4 = accept(r2, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 10m16.535593356s ago: executing program 0 (id=3002): syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x4, 0x1, 'queue0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001dbf6256fdc996c5ba8a01fb0001002dbd7000ffdbdf250c001a800800db8004000eac"], 0x1c}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000300)={0x140, 0x280, 0x320, 0x4b0, 0x0, 0x8, 0x0, 0x0, {0x0, 0xffffbff8, 0x3}, {0x20, 0x2}, {0xfffdfffd, 0x4}, {0x0, 0x8001}, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x14, 0x2, 0x2, 0x1}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001640)='./file1\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_vm_readv(0x0, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xea) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0xd3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) linkat(r4, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2bc, 0x65, 0x2, 0x70bd27, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x270, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x248, 0x1, [@m_simple={0x7c, 0x1e, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0xffffffffffffffff, 0x3, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x2, 0x10000000, 0x802, 0x1ff}}, @TCA_DEF_DATA={0x19, 0x3, '}-\\[.[^]($I\\$-\xde/+,^-\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x15c, 0x1e, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7c, 0x3, '\x00\xfc K\x99\xe7);\xf2#|\x936\xa7\xd6\\=\xfc\x8b\x89\xf8\x01^1\xbfK\n~\r4\xce7\xbap\xadW\xfee\x88\xb6 \x03\xb5\xec*P`PAq\xdfLN\xf0\xc8\x17\x18\fH\xcbXU\x82|%\xe4_\xcd\v3\xe2\x18\xc1A\xde\xdc\xd0\xe0\x92&\xf5\xf8\x9a\xd6\xd9\x1b[\xb9\xce`\xd9\xda\xa7\x9d\x13\x06\x87\xfc\'\xfbH\x88\xb9\xd5\xd6\x00\xd0\xe1\xcd\x89\r\xe8oz*Bg\xb9h*'}]}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x38, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x9, 0x6, "4ac6768e05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x3ff, {}, {}, @raw32={[0x0, 0x0, 0x9]}}], 0x1c) 10m16.126733528s ago: executing program 0 (id=3004): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="170000000000000000840000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 10m14.34058999s ago: executing program 0 (id=3009): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYBLOB], 0x40}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) io_setup(0x8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3, 0x0, 0x3}}, 0x20) preadv(r1, 0x0, 0x0, 0xd, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x3, r6, r5, 0x3, 0xfffffffffefffff8, 0x3fff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x7b) r8 = syz_pidfd_open(0x0, 0x0) process_madvise(r8, &(0x7f00000010c0)=[{0x0}, {&(0x7f0000001100)="7f", 0x1}], 0x2, 0x19, 0x0) 9m57.667810099s ago: executing program 59 (id=3009): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYBLOB], 0x40}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) io_setup(0x8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3, 0x0, 0x3}}, 0x20) preadv(r1, 0x0, 0x0, 0xd, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x3, r6, r5, 0x3, 0xfffffffffefffff8, 0x3fff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x7b) r8 = syz_pidfd_open(0x0, 0x0) process_madvise(r8, &(0x7f00000010c0)=[{0x0}, {&(0x7f0000001100)="7f", 0x1}], 0x2, 0x19, 0x0) 6m55.351310332s ago: executing program 5 (id=3562): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000004140)=[{{0x0, 0xfebf, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="10"], 0x10}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)="161bd28737", 0x5}], 0x1, &(0x7f00000007c0)=[{0x10, 0x1, 0x4}], 0x10}}], 0x2, 0x4004804) 6m55.197717673s ago: executing program 5 (id=3563): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000000), &(0x7f0000000100)) (async, rerun: 64) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) r5 = dup(r4) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000040)={0x1856, 0x0, 0x6, 0xfffffff9, 0x14, "0e80706e6c06a79874342a0e0d13343972d01f"}) (async, rerun: 32) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) (async, rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) (async) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) (async, rerun: 64) read$FUSE(r5, &(0x7f00000040c0)={0x2020}, 0xffffffffffffff7d) (rerun: 64) 6m54.715749906s ago: executing program 8 (id=3567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db9af8ff00000000bfa10000000000000701000000000000b702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224, 0x0, 0x8}, 0x94) 6m52.050361109s ago: executing program 5 (id=3572): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfe000/0x400000)=nil) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @multicast2}], 0x5d) sendto$inet(r2, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000140)={0x0, 0x10, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0]}) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x401, 0x0, 0xfd, "0062ba7d06000000000004000000f713000001"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x8) r5 = syz_open_pts(r3, 0x0) listen(0xffffffffffffffff, 0x101) unshare(0x22020400) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') fanotify_mark(r6, 0x409, 0x8000024, r6, 0x0) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0xd) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000000b976cd"], 0x0}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x6, 0x0}}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003560000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x12, @string={0x12, 0x3, "f16be7984c1965d5a70b5f02bb0e30ec"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 6m49.81554955s ago: executing program 5 (id=3577): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)=0x15) (fail_nth: 2) 6m49.697258633s ago: executing program 8 (id=3578): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x5c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fb7}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x48010) socket(0x10, 0x803, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x4, 0x0, 0x200000000e, 0xffff, 0x369, 0x7, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x775, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1e, {}, {}, @raw32}], 0xffc8) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000003c0)={0x200, 0x80000001, 0x439de03c, 0x9, 0x9, 0x10}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0x1}, {}, @result}], 0x1c) syz_usb_connect(0x0, 0x3f, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2], 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x9, 0x4, 0x0, 0xffffffff, 0x8}, 0x0, &(0x7f0000000080)={0x7fc, 0x2, 0x4000000000800000, 0xfffffffffffffffc, 0x0, 0xc3ad}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r6 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 6m49.265907244s ago: executing program 5 (id=3581): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 6m47.870995611s ago: executing program 5 (id=3583): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r4 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005"], 0x28}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000f7ff00002c0004802800018007000100637400001c0002800800024000000012080004400000000405000300000000000900010073797a30001000000900020073"], 0x80}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 6m46.557007892s ago: executing program 8 (id=3586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x20004080) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x80000) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000280)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) chdir(&(0x7f0000000900)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10", @ANYRES8=r0], 0x10}}, {{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000007c0)=[{0x10, 0x1, 0x4}], 0x10}}], 0x2, 0x4004804) 6m45.432720937s ago: executing program 8 (id=3587): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfe000/0x400000)=nil) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @multicast2}], 0x5d) sendto$inet(r2, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000140)={0x0, 0x10, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0]}) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x401, 0x0, 0xfd, "0062ba7d06000000000004000000f713000001"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x8) r5 = syz_open_pts(r3, 0x0) listen(0xffffffffffffffff, 0x101) unshare(0x22020400) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') fanotify_mark(r6, 0x409, 0x8000024, r6, 0x0) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0xd) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000000b976cd"], 0x0}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x6, 0x0}}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003560000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x12, @string={0x12, 0x3, "f16be7984c1965d5a70b5f02bb0e30ec"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 6m44.697244689s ago: executing program 3 (id=3590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = fanotify_init(0x0, 0x0) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x641, 0x48001018, r5, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000016c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x1660, 0x1a0, 0x1430, 0x1430, 0x12f8, 0x1590, 0x1590, 0x1590, 0x1590, 0x1590, 0x1590, 0x6, 0x0, {[{{@ipv6={@loopback, @local, [0x100fffe00, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'netpci0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x4, 0x8, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6f}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1130, 0x1158, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x7, {0x5}}}, @common=@inet=@hashlimit1={{0x58}, {'veth1_virt_wifi\x00', {0x61, 0x10000, 0x9, 0x2, 0x6, 0x5, 0x91, 0x20, 0x78}, {0x4}}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x10, @ipv4=@remote, 0x4e20}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x9, 0xb, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x16c0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r6, 0x80047456, 0x0) fanotify_mark(r4, 0x441, 0x4800001b, r5, 0x0) 6m43.70756438s ago: executing program 3 (id=3592): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) write$tun(r0, 0x0, 0x395) timer_create(0x3, 0x0, 0x0) tkill(0x0, 0x12) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 6m43.326474308s ago: executing program 8 (id=3593): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 6m43.140308491s ago: executing program 8 (id=3595): ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0191e6d595bab8c4b500006490321db49c531a00000f01d967460f35"], 0x54}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7f}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2c2700, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB="fe77", @ANYRES32=0x0, @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 6m40.269176031s ago: executing program 3 (id=3600): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @remote, 0x3}, 0x1c) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 6m40.21961446s ago: executing program 3 (id=3602): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x1b, 0x1}}) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x8001, 0x1) r4 = eventfd(0x5) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x1, 0x0, 0x0, r4}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x25a, 0x0, 0x0, r3, 0x5}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r5, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000200)=0x417c, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) r7 = socket(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r7, r6, 0x0, 0x8010002b) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r6, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) 6m39.320294281s ago: executing program 3 (id=3605): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 6m38.483370613s ago: executing program 3 (id=3607): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db9af8ff00000000bfa10000000000000701000000000000b702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224, 0x0, 0x8}, 0x94) 6m38.179956711s ago: executing program 9 (id=3608): r0 = socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='B', 0x1}], 0x100000000000003b, 0x0, 0x0, 0x11000000}, 0x20000001) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) close(0x3) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626", 0xa) accept4(r3, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r4, 0x407, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}, @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}}, 0x10) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) 6m34.902479429s ago: executing program 9 (id=3611): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfff}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0xc00, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x3, 0x0, 0x1c}}, 0x18}, 0x1, 0x0, 0x0, 0x2404c810}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8501, 0x0) 6m34.809905157s ago: executing program 9 (id=3612): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @remote, 0x3}, 0x1c) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 6m34.795614902s ago: executing program 9 (id=3613): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000280)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 6m31.853894361s ago: executing program 9 (id=3617): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 6m31.241674985s ago: executing program 60 (id=3583): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r4 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005"], 0x28}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000f7ff00002c0004802800018007000100637400001c0002800800024000000012080004400000000405000300000000000900010073797a30001000000900020073"], 0x80}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 6m31.229398757s ago: executing program 9 (id=3620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db9af8ff00000000bfa10000000000000701000000000000b702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224, 0x0, 0x8}, 0x94) 6m26.896399099s ago: executing program 61 (id=3595): ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0191e6d595bab8c4b500006490321db49c531a00000f01d967460f35"], 0x54}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7f}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2c2700, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB="fe77", @ANYRES32=0x0, @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 6m21.506729554s ago: executing program 62 (id=3607): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db9af8ff00000000bfa10000000000000701000000000000b702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224, 0x0, 0x8}, 0x94) 6m14.792839158s ago: executing program 63 (id=3620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db9af8ff00000000bfa10000000000000701000000000000b702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224, 0x0, 0x8}, 0x94) 12.558013551s ago: executing program 2 (id=4649): socket$nl_xfrm(0x10, 0x3, 0x6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000040)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x4, 0x0, 0x1c, {[@window={0xe, 0x3}, @md5sig={0x13, 0x12, "c35aa8dd794d9178964bf1fddfb84b33"}, @generic={0x0, 0x2}]}}, {"7302ae64596acd1b0c85f79e959ba407dfe2680a9f3a5624b94b05eb30a8db4c40666ac03a878052cd6f34b42454ed6a1125e62675b21d5a1fba5cf3bedbddc95b7e41e2f08bc48db0daee34e764ee3ee41a0c70477ab54c7b85"}}}}}, 0xa8) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) 11.617916795s ago: executing program 2 (id=4654): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db9af8ff00000000bfa10000000000000701000000000000b702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224, 0x0, 0x8}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$BLKRRPART(r5, 0x125f, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507020004814006090587fe11"], 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = fanotify_init(0x0, 0x0) r9 = open$dir(&(0x7f0000001000)='.\x00', 0x20000, 0x50) fanotify_mark(r8, 0x641, 0x48001018, r9, 0x0) fanotify_mark(r8, 0x1, 0x103b, r9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0xa006}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) 8.833537253s ago: executing program 6 (id=4662): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0), 0x80002, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000a00)={0x800, 0x258, 0x400, 0x1e0, 0x4da4, 0x7fffffff, 0x10, 0x2, {0x8000}, {0x7, 0xffff}, {0x7, 0xfffff737}, {0x7, 0x5, 0x1}, 0x3, 0x2, 0x6, 0x3ff, 0x1, 0xd, 0x2, 0x6, 0x8, 0x6, 0x8, 0x7f, 0x0, 0x200, 0x0, 0x6}) ioctl$TCFLSH(r1, 0x400455c8, 0x4) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201414000c59620d016f8108ede0102030109022400010000100009040002020083ec0009050602000202000a090582020002000110"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000040)={0x40, 0x9, 0xc, "01004700000040f400be0000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="401628000000ba0bf8ee53aed01238b3d6408614da7a8fdbd71d40ceed6906dce7f01ca1f04600e928eba586b411"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000440)={0x0, 0x3, 0x4, "951929b0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.893332944s ago: executing program 4 (id=4666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x1082010) sched_setscheduler(0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) 6.901689645s ago: executing program 4 (id=4667): rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10010, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 6.287142059s ago: executing program 1 (id=4668): ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x54}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2c2700, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB="fe77", @ANYRES32=0x0, @ANYRES32], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 6.139423808s ago: executing program 7 (id=4669): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1009}]}, &(0x7f00000002c0)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x10, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="fe2f1b0001"]) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="fe2f1b0001"]) r5 = fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r3, 0x4}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r3, 0x4}, 0x8) 6.119244826s ago: executing program 4 (id=4670): socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r5, &(0x7f0000000000)={0x2020}, 0x2020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0xf00) 5.745520493s ago: executing program 7 (id=4671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="020900582871775b0bfaf00000000000"], 0x10}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x7, 0x0, &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000100), 0x80) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) 5.687303655s ago: executing program 6 (id=4672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f00000000c0)=0xfffffffe, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000340)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=fscache']) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r5, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x41) 4.759704575s ago: executing program 4 (id=4673): mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @local}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r3, &(0x7f00000000c0), 0x0, 0x72, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000001300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000012c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x10ec}, 0x1, 0x0, 0x0, 0x20000854}, 0x8000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={r1, 0xe2, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x0, 0x9, 0x5, 0xa, 0x5, 0x6, 0x3, r5}, &(0x7f0000000180)=0x20) 4.585591015s ago: executing program 7 (id=4674): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001004000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x73, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 4.381610559s ago: executing program 4 (id=4675): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xf97}, 0x94) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4b8d}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x55) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (async) syz_usb_connect$uac1(0x5, 0xb5, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102000000406b1d01014000010203010902a30003010320100904000000010100000a24010100050201020c240206020201d70b0008070904010000010200000904010101010200000a24020106020706a45d072401040105000f241202ff03010000aa17f734a722082402016904050a0905010900040705f8072501010104000904020000010200000904020101010200000924020208000900ff07240181a002100905820900040910080325"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 4.363854565s ago: executing program 1 (id=4676): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="020900582871775b0bfaf00000000000"], 0x10}}, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x7, 0x0, &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000100), 0x80) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) 4.285148806s ago: executing program 7 (id=4677): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) timer_delete(r0) 4.169464337s ago: executing program 2 (id=4678): socket$nl_xfrm(0x10, 0x3, 0x6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000040)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x4, 0x0, 0x1c, {[@window={0xe, 0x3}, @md5sig={0x13, 0x12, "c35aa8dd794d9178964bf1fddfb84b33"}, @generic={0x0, 0x2}]}}, {"7302ae64596acd1b0c85f79e959ba407dfe2680a9f3a5624b94b05eb30a8db4c40666ac03a878052cd6f34b42454ed6a1125e62675b21d5a1fba5cf3bedbddc95b7e41e2f08bc48db0daee34e764ee3ee41a0c70477ab54c7b85"}}}}}, 0xa8) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) 4.085821428s ago: executing program 7 (id=4679): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x1c, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x1c}}, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) getdents64(r6, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10}, 0x0, 0x0, 0x0, 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) 3.511144427s ago: executing program 6 (id=4680): rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10010, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 3.155189371s ago: executing program 1 (id=4681): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="da25176aaf21ad9a862fa5ffdaefc015", 0x10) r1 = getpid() capset(&(0x7f0000000040)={0x19980330, r1}, &(0x7f0000000080)={0x6, 0x1, 0x8, 0x4, 0x4, 0x9}) gettid() r2 = socket$netlink(0x10, 0x3, 0x9) ptrace(0x4208, r1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x2, 0x0, &(0x7f00000000c0)=""/79, &(0x7f0000000140)=""/237, &(0x7f0000000240)=""/192, 0xdddd0000}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000340)={0x0, 0xc912}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff3}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x4184) syz_open_procfs$namespace(r1, &(0x7f0000000500)='ns/uts\x00') ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000540)={'veth0_to_bond\x00', {0x2, 0x4e23, @remote}}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/pm_wakeup_irq', 0x143002, 0x2) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r6, 0x8004af79, &(0x7f00000005c0)) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000600)={0x0, {}, 0x0, {}, 0x374, 0x5, 0xe, 0x10, "16bfb3a353b8d58c55dd122a6b917f3bc4b05511bc429d04bfd73f14fe53726e8556d17f466ba0e3bae3241c151480db372ecfd3fdb8dd26e8923326c204f68c", "32220a22de81e93fb1d66b39498d27077e3f3b2bb0f6ba88fb0891a3333049df", [0x1000000000]}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2f9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000740)={r9, 0xfa, "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"}, &(0x7f0000000880)=0x102) ioctl$int_out(r2, 0x5460, &(0x7f00000008c0)) pipe2$watch_queue(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r10, &(0x7f0000000940)=""/108, 0x6c) mkdirat(r10, &(0x7f00000009c0)='./file0\x00', 0x42) preadv2(r7, &(0x7f0000001b00)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/236, 0xec}], 0x2, 0x5, 0x3, 0x2) syz_open_dev$sg(&(0x7f0000001b40), 0x3ff, 0x143200) 2.410434504s ago: executing program 1 (id=4682): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f78617474722c756e616d653d5e2c6e6f657874656e642c64656275671d3078303030303030303030303030303030362c6163636573733d757365722c63616368653d6c6f6f7365"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)="fb03", 0x2}], 0x1}}], 0x1, 0x4400c800) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140), 0x4) sendto$inet6(r0, &(0x7f00000001c0)="3994", 0x2, 0x3b40, 0x0, 0x0) 2.383207401s ago: executing program 6 (id=4683): socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r5, &(0x7f0000000000)={0x2020}, 0x2020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0xf00) 2.32582723s ago: executing program 2 (id=4684): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x6c, &(0x7f0000000080)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x8, @empty, 0x2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, @in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @local}]}, &(0x7f0000000440)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$pptp(0x18, 0x1, 0x2) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r8, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r10, @ANYBLOB], 0x9) 1.267817706s ago: executing program 6 (id=4685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0xc0884113, 0x40944f9c780000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r6}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) r7 = fanotify_init(0x0, 0x0) r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r7, 0x641, 0x48001018, r8, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r9, 0x80047456, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r10, &(0x7f0000000180)=ANY=[], 0xb8) r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) dup3(r11, r10, 0x0) 1.177697476s ago: executing program 1 (id=4686): r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = getpid() syz_pidfd_open(r1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xd, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xffffffbffffffffd, 0x0, 0x80000002}, 0x0, 0x0) 1.048945389s ago: executing program 2 (id=4687): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x8, 0x20, 0x0, 0x4, 0x0, 0xfffffff7}]}, {0x0, [0x30, 0x0, 0x5f, 0x5f, 0x0, 0x2e, 0x30, 0x5f]}}, 0x0, 0x2e, 0x0, 0x1}, 0x28) 163.552205ms ago: executing program 4 (id=4688): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800060000000000000000000000000085000000a8000000850000001b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) 162.854811ms ago: executing program 7 (id=4689): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffe4, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="660fdd28b8bd008ed8ba4100b80040efbaf80c66b8ec1d7b8166efbafc0c66b8ec5cb59466ef2e0f200666b80500000066b9a274f0de0f01d93671003e0f01dfba2100b0f0eef0804da80c", 0x4b}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 89.302106ms ago: executing program 6 (id=4690): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x29, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r4, 0x0, 0x0, 0x50, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x49000, 0x0, 0xffffffffffffff69) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7], 0x28}}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000002a80)={0x7fff, 0x5, 0x9, 0x3, 0x5, 0x0, 0x8}, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) syz_emit_ethernet(0x9e, &(0x7f0000000f40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd60ff00f50060060020010000000000000000000000000002fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYBLOB="8010000090"], 0x0) 60.66394ms ago: executing program 1 (id=4691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="020900582871775b0bfaf00000000000"], 0x10}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x7, 0x0, &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000100), 0x80) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) 0s ago: executing program 2 (id=4692): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000500)="f00fec9f490f0f21ce0f01c436670f6622260fc77004640f3566b8010000000f01c9433e0f01cfcfc75d34b8a1008ee0", 0xffffffffffffffda}], 0x1, 0x2e, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0xd4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x31f}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bind$unix(r7, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x482, 0x0, 0xfffffffffffffd55}]}) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r10, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x38, 0x5b}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="aa4b4e38b464"}]}, 0x34}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r14 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r14, 0xc008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="081004000008"]) kernel console output (not intermixed with test programs): ting register 01: -110 [ 1658.889741][ T5912] sonixb 7-1:0.0: probe with driver sonixb failed with error -110 [ 1658.911845][ T5912] usb 7-1: USB disconnect, device number 39 [ 1659.278919][T30480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4144'. [ 1660.301590][T30493] ALSA: mixer_oss: invalid OSS volume '3' [ 1660.307573][T30493] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1660.314052][T30493] ALSA: mixer_oss: invalid OSS volume '4' [ 1660.319848][T30493] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1660.326341][T30493] ALSA: mixer_oss: invalid OSS volume '5' [ 1660.332157][T30493] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1660.338619][T30493] ALSA: mixer_oss: invalid OSS volume '6' [ 1660.371032][T30499] ALSA: mixer_oss: invalid OSS volume '3' [ 1660.376835][T30499] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1660.383383][T30499] ALSA: mixer_oss: invalid OSS volume '4' [ 1660.389334][T30499] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1660.395723][T30499] ALSA: mixer_oss: invalid OSS volume '5' [ 1660.401684][T30499] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1660.408075][T30499] ALSA: mixer_oss: invalid OSS volume '6' [ 1661.478942][T30506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4150'. [ 1661.761913][T30515] ALSA: mixer_oss: invalid OSS volume '4' [ 1661.768442][T30515] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1661.774808][T30515] ALSA: mixer_oss: invalid OSS volume '5' [ 1661.780611][T30515] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1661.786962][T30515] ALSA: mixer_oss: invalid OSS volume '6' [ 1661.792770][T30515] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1661.799211][T30515] ALSA: mixer_oss: invalid OSS volume '7' [ 1662.781538][T30518] tmpfs: Bad value for 'mpol' [ 1663.113945][T30519] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4149'. [ 1663.556652][T30530] xt_hashlimit: overflow, rate too high: 0 [ 1664.733291][T30564] ALSA: mixer_oss: invalid OSS volume '' [ 1665.659088][T30575] tmpfs: Bad value for 'mpol' [ 1666.219824][T30576] netlink: 'syz.7.4168': attribute type 12 has an invalid length. [ 1666.242127][T30576] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4168'. [ 1666.446679][T30579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4169'. [ 1666.622088][T30592] xt_hashlimit: overflow, rate too high: 0 [ 1666.739158][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1667.055843][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1667.086863][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.114897][ T9] usb 7-1: Product: syz [ 1667.136665][ T9] usb 7-1: Manufacturer: syz [ 1667.154741][ T9] usb 7-1: SerialNumber: syz [ 1667.292978][ T9] usb 7-1: config 0 descriptor?? [ 1667.397455][ T9] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1668.192839][ T9] sonixb 7-1:0.0: Error writing register 01: -110 [ 1668.200502][ T9] sonixb 7-1:0.0: probe with driver sonixb failed with error -110 [ 1668.674590][T30627] ALSA: mixer_oss: invalid OSS volume '4' [ 1668.680777][T30627] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1668.687531][T30627] ALSA: mixer_oss: invalid OSS volume '5' [ 1668.693678][T30627] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1668.700777][T30627] ALSA: mixer_oss: invalid OSS volume '6' [ 1668.706953][T30627] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1668.713707][T30627] ALSA: mixer_oss: invalid OSS volume '7' [ 1668.805132][ T9] usb 7-1: USB disconnect, device number 40 [ 1668.937105][T30639] FAULT_INJECTION: forcing a failure. [ 1668.937105][T30639] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.950843][T30639] CPU: 0 UID: 0 PID: 30639 Comm: syz.4.4183 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1668.950869][T30639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1668.950882][T30639] Call Trace: [ 1668.950891][T30639] [ 1668.950900][T30639] dump_stack_lvl+0x189/0x250 [ 1668.950928][T30639] ? __pfx____ratelimit+0x10/0x10 [ 1668.950949][T30639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1668.950971][T30639] ? __pfx__printk+0x10/0x10 [ 1668.951002][T30639] ? __pfx___might_resched+0x10/0x10 [ 1668.951022][T30639] ? fs_reclaim_acquire+0x7d/0x100 [ 1668.951051][T30639] should_fail_ex+0x414/0x560 [ 1668.951076][T30639] should_failslab+0xa8/0x100 [ 1668.951104][T30639] __kmalloc_cache_noprof+0x70/0x3d0 [ 1668.951124][T30639] ? snd_pcm_oss_change_params_locked+0xb09/0x3e40 [ 1668.951154][T30639] snd_pcm_oss_change_params_locked+0xb09/0x3e40 [ 1668.951185][T30639] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1668.951217][T30639] ? trace_contention_end+0x39/0x120 [ 1668.951242][T30639] ? __mutex_lock+0x330/0xe80 [ 1668.951272][T30639] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1668.951295][T30639] ? snd_pcm_oss_read+0x1f9/0x8d0 [ 1668.951344][T30639] snd_pcm_oss_read+0x26a/0x8d0 [ 1668.951376][T30639] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1668.951400][T30639] vfs_read+0x200/0x980 [ 1668.951439][T30639] ? __pfx_vfs_read+0x10/0x10 [ 1668.951477][T30639] ? __fget_files+0x2a/0x420 [ 1668.951502][T30639] ? __fget_files+0x2a/0x420 [ 1668.951522][T30639] ? __fget_files+0x3a0/0x420 [ 1668.951542][T30639] ? __fget_files+0x2a/0x420 [ 1668.951572][T30639] ksys_read+0x145/0x250 [ 1668.951593][T30639] ? __pfx_ksys_read+0x10/0x10 [ 1668.951609][T30639] ? rcu_is_watching+0x15/0xb0 [ 1668.951634][T30639] ? do_syscall_64+0xbe/0x3b0 [ 1668.951660][T30639] do_syscall_64+0xfa/0x3b0 [ 1668.951680][T30639] ? lockdep_hardirqs_on+0x9c/0x150 [ 1668.951700][T30639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.951719][T30639] ? clear_bhb_loop+0x60/0xb0 [ 1668.951743][T30639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.951761][T30639] RIP: 0033:0x7f9cb198e9a9 [ 1668.951778][T30639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1668.951795][T30639] RSP: 002b:00007f9cb276a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1668.951816][T30639] RAX: ffffffffffffffda RBX: 00007f9cb1bb5fa0 RCX: 00007f9cb198e9a9 [ 1668.951830][T30639] RDX: 0000000000001000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1668.951843][T30639] RBP: 00007f9cb276a090 R08: 0000000000000000 R09: 0000000000000000 [ 1668.951873][T30639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1668.951886][T30639] R13: 0000000000000000 R14: 00007f9cb1bb5fa0 R15: 00007ffcb7913d58 [ 1668.951918][T30639] [ 1669.222929][ C0] vkms_vblank_simulate: vblank timer overrun [ 1669.366173][T30643] tmpfs: Bad value for 'mpol' [ 1670.594140][T30655] xt_hashlimit: overflow, rate too high: 0 [ 1670.689691][T30663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4189'. [ 1672.345812][T30685] tmpfs: Bad value for 'mpol' [ 1672.351565][T30685] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1672.793403][T30690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1672.804858][T30690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1673.044525][ T30] audit: type=1326 audit(1753469712.984:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30695 comm="syz.7.4199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23fff8e9a9 code=0x0 [ 1673.080548][T30700] xt_hashlimit: overflow, rate too high: 0 [ 1673.334552][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1673.889073][T30714] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1674.455022][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1674.471964][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1674.481892][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1674.491719][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1674.502017][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1674.957532][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1674.966936][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.049544][T30723] overlayfs: failed to resolve './file0': -2 [ 1675.337556][T30735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4210'. [ 1675.389644][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 1675.395284][ T9] usbtmc 7-1:16.0: can't read capabilities [ 1676.499837][T30702] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4203'. [ 1676.578788][T30742] tmpfs: Bad value for 'mpol' [ 1676.584426][T30742] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1676.651956][T30745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.740661][T30745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1676.986445][ T978] usb 7-1: USB disconnect, device number 41 [ 1677.051137][T30759] fuse: Bad value for 'user_id' [ 1677.062439][T30759] fuse: Bad value for 'user_id' [ 1678.122001][T30771] FAULT_INJECTION: forcing a failure. [ 1678.122001][T30771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1678.135349][T30771] CPU: 0 UID: 0 PID: 30771 Comm: syz.4.4216 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1678.135379][T30771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1678.135391][T30771] Call Trace: [ 1678.135397][T30771] [ 1678.135404][T30771] dump_stack_lvl+0x189/0x250 [ 1678.135424][T30771] ? __pfx____ratelimit+0x10/0x10 [ 1678.135438][T30771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1678.135453][T30771] ? __pfx__printk+0x10/0x10 [ 1678.135470][T30771] ? __might_fault+0xb0/0x130 [ 1678.135491][T30771] should_fail_ex+0x414/0x560 [ 1678.135508][T30771] _copy_from_user+0x2d/0xb0 [ 1678.135527][T30771] ___sys_sendmsg+0x158/0x2a0 [ 1678.135551][T30771] ? __pfx____sys_sendmsg+0x10/0x10 [ 1678.135577][T30771] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 1678.135613][T30771] ? __fget_files+0x2a/0x420 [ 1678.135628][T30771] ? __fget_files+0x3a0/0x420 [ 1678.135649][T30771] __x64_sys_sendmsg+0x19b/0x260 [ 1678.135672][T30771] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1678.135699][T30771] ? __pfx_ksys_write+0x10/0x10 [ 1678.135715][T30771] ? do_syscall_64+0xbe/0x3b0 [ 1678.135733][T30771] do_syscall_64+0xfa/0x3b0 [ 1678.135753][T30771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.135767][T30771] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1678.135781][T30771] ? clear_bhb_loop+0x60/0xb0 [ 1678.135797][T30771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.135810][T30771] RIP: 0033:0x7f9cb198e9a9 [ 1678.135823][T30771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1678.135835][T30771] RSP: 002b:00007f9cb2749038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1678.135849][T30771] RAX: ffffffffffffffda RBX: 00007f9cb1bb6080 RCX: 00007f9cb198e9a9 [ 1678.135859][T30771] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 1678.135868][T30771] RBP: 00007f9cb2749090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.135877][T30771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1678.135885][T30771] R13: 0000000000000000 R14: 00007f9cb1bb6080 R15: 00007ffcb7913d58 [ 1678.135904][T30771] [ 1678.447742][T30768] xt_hashlimit: overflow, rate too high: 0 [ 1678.859733][T30775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4218'. [ 1680.734054][T30787] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1682.396913][T30823] tmpfs: Bad value for 'mpol' [ 1684.516846][T10939] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1684.719909][T10939] usb 8-1: device descriptor read/64, error -71 [ 1685.679661][T10939] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1686.040546][T10939] usb 8-1: device descriptor read/64, error -71 [ 1686.182145][T10939] usb usb8-port1: attempt power cycle [ 1686.270674][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1686.399577][T30870] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1686.964929][T10939] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1687.000122][T10939] usb 8-1: device descriptor read/8, error -71 [ 1687.371618][T30877] trusted_key: encrypted_key: insufficient parameters specified [ 1687.473747][T30881] tmpfs: Bad value for 'mpol' [ 1688.030071][T10939] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1688.173248][T10939] usb 8-1: device descriptor read/8, error -71 [ 1688.360479][T10939] usb usb8-port1: unable to enumerate USB device [ 1688.524795][T30877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4240'. [ 1688.600078][T30879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1688.662161][T30889] xt_hashlimit: overflow, rate too high: 0 [ 1689.842809][T30906] trusted_key: encrypted_key: insufficient parameters specified [ 1690.514271][T30912] FAULT_INJECTION: forcing a failure. [ 1690.514271][T30912] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.564091][T30912] CPU: 0 UID: 0 PID: 30912 Comm: syz.1.4248 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1690.564116][T30912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1690.564127][T30912] Call Trace: [ 1690.564134][T30912] [ 1690.564141][T30912] dump_stack_lvl+0x189/0x250 [ 1690.564164][T30912] ? __pfx____ratelimit+0x10/0x10 [ 1690.564181][T30912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1690.564199][T30912] ? __pfx__printk+0x10/0x10 [ 1690.564223][T30912] ? __pfx___might_resched+0x10/0x10 [ 1690.564249][T30912] should_fail_ex+0x414/0x560 [ 1690.564279][T30912] should_failslab+0xa8/0x100 [ 1690.564298][T30912] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1690.564322][T30912] ? __alloc_skb+0x112/0x2d0 [ 1690.564358][T30912] __alloc_skb+0x112/0x2d0 [ 1690.564394][T30912] netlink_sendmsg+0x5c6/0xb30 [ 1690.564428][T30912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1690.564456][T30912] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1690.564471][T30912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1690.564494][T30912] __sock_sendmsg+0x219/0x270 [ 1690.564515][T30912] ____sys_sendmsg+0x505/0x830 [ 1690.564543][T30912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1690.564574][T30912] ? import_iovec+0x74/0xa0 [ 1690.564598][T30912] ___sys_sendmsg+0x21f/0x2a0 [ 1690.564624][T30912] ? __pfx____sys_sendmsg+0x10/0x10 [ 1690.564675][T30912] ? __fget_files+0x2a/0x420 [ 1690.564691][T30912] ? __fget_files+0x3a0/0x420 [ 1690.564716][T30912] __x64_sys_sendmsg+0x19b/0x260 [ 1690.564742][T30912] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1690.564776][T30912] ? rcu_is_watching+0x15/0xb0 [ 1690.564793][T30912] ? trace_sys_enter+0x25/0x120 [ 1690.564812][T30912] do_syscall_64+0xfa/0x3b0 [ 1690.564828][T30912] ? lockdep_hardirqs_on+0x9c/0x150 [ 1690.564850][T30912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.564878][T30912] ? clear_bhb_loop+0x60/0xb0 [ 1690.564895][T30912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.564909][T30912] RIP: 0033:0x7f820a78e9a9 [ 1690.564923][T30912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1690.564935][T30912] RSP: 002b:00007f820b523038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1690.564951][T30912] RAX: ffffffffffffffda RBX: 00007f820a9b6080 RCX: 00007f820a78e9a9 [ 1690.564962][T30912] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000008 [ 1690.564971][T30912] RBP: 00007f820b523090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.564980][T30912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1690.564989][T30912] R13: 0000000000000000 R14: 00007f820a9b6080 R15: 00007ffd6c769958 [ 1690.565010][T30912] [ 1692.042733][T30934] tmpfs: Bad value for 'mpol' [ 1692.198307][T30936] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1693.026097][T10939] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1693.037576][T30940] xt_hashlimit: overflow, rate too high: 0 [ 1693.098454][T30942] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4256'. [ 1693.134499][T30942] trusted_key: encrypted_key: insufficient parameters specified [ 1693.214688][T10939] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 1693.230314][T10939] usb 2-1: config 0 has no interface number 0 [ 1693.249399][T10939] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1693.266711][T10939] usb 2-1: config 0 interface 11 has no altsetting 0 [ 1693.274224][T10939] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1693.284219][T10939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.299012][T10939] usb 2-1: config 0 descriptor?? [ 1693.309244][T30927] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1693.316745][T30927] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1693.326386][T10939] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 1693.335988][T10939] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 1693.344819][T10939] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 1693.352906][T10939] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 1693.360843][T10939] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 1693.369097][T10939] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 1693.376933][T10939] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 1693.388551][T10939] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1693.398675][T10939] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 1693.419121][T10939] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 1693.427144][T10939] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 1693.460153][T10939] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 1693.497269][T10939] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 1693.546074][T10939] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 1693.574641][T10939] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1693.610555][T10939] usb 2-1: USB disconnect, device number 57 [ 1693.851125][T30968] ubi0: attaching mtd0 [ 1693.869490][T30968] ubi0: scanning is finished [ 1694.263634][T10939] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1694.277347][T10939] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1694.295901][T10939] keyspan 2-1:0.11: device disconnected [ 1694.429344][T30968] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1694.436890][T30968] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1694.444158][T30968] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1694.451264][T30968] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1694.458641][T30968] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1694.465625][T30968] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1694.473729][T30968] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3585352892 [ 1694.483845][T30968] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1694.493984][T30983] ubi0: background thread "ubi_bgt0d" started, PID 30983 [ 1695.302220][T30991] ALSA: mixer_oss: invalid OSS volume '3' [ 1695.308289][T30991] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1695.314754][T30991] ALSA: mixer_oss: invalid OSS volume '4' [ 1695.320492][T30991] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1695.326983][T30991] ALSA: mixer_oss: invalid OSS volume '5' [ 1695.332707][T30991] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1695.339089][T30991] ALSA: mixer_oss: invalid OSS volume '6' [ 1695.359446][T28627] wlan1: Trigger new scan to find an IBSS to join [ 1695.403141][T30990] PKCS7: Unknown OID: [5] (bad) [ 1695.431387][T30990] PKCS7: Only support pkcs7_signedData type [ 1695.595827][T30990] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1695.779989][T30990] Error validating options; rc = [-22] [ 1695.891191][T31005] tmpfs: Bad value for 'mpol' [ 1697.283322][T31014] xt_hashlimit: overflow, rate too high: 0 [ 1697.709208][T10128] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1698.084982][T10128] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 1698.093236][T10128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.134427][T10128] usb 2-1: config 0 has no interface number 0 [ 1698.155504][T10128] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1698.188150][T10128] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1698.226964][T10128] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1698.260210][T10128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.290709][T10128] usb 2-1: config 0 descriptor?? [ 1698.397452][T31035] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4272'. [ 1699.082102][ T978] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 1699.167284][T10128] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1699.213942][T31047] overlayfs: failed to resolve './file0': -2 [ 1699.274140][T31048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4275'. [ 1699.424586][T28649] wlan1: Trigger new scan to find an IBSS to join [ 1699.434967][ T978] usb 7-1: config 0 has an invalid interface number: 11 but max is 0 [ 1699.443299][ T978] usb 7-1: config 0 has no interface number 0 [ 1699.449450][ T978] usb 7-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1699.468848][ T9] usb 2-1: USB disconnect, device number 58 [ 1699.481600][T28644] usb 2-1: Failed to submit usb control message: -71 [ 1700.521064][ T978] usb 7-1: config 0 interface 11 has no altsetting 0 [ 1700.528308][T28644] usb 2-1: unable to send the bmi data to the device: -71 [ 1700.540298][ T978] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1700.549743][T28644] usb 2-1: unable to get target info from device [ 1700.556352][T28644] usb 2-1: could not get target info (-71) [ 1700.562207][T28644] usb 2-1: could not probe fw (-71) [ 1700.567628][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.754101][ T978] usb 7-1: config 0 descriptor?? [ 1700.789010][T31027] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1700.796392][T31027] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1700.805653][ T978] keyspan 7-1:0.11: Keyspan 2 port adapter converter detected [ 1700.836418][ T978] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 81 [ 1701.066252][ T978] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 82 [ 1701.730650][ T978] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 1 [ 1701.739476][ T978] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 2 [ 1701.747208][ T978] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 85 [ 1701.755070][ T978] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 5 [ 1701.764464][ T978] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1701.789417][ T978] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 83 [ 1701.938886][ T978] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 84 [ 1701.991472][T31075] netlink: 'syz.2.4278': attribute type 1 has an invalid length. [ 1701.999955][ T978] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 3 [ 1702.035187][T31075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4278'. [ 1702.042864][ T978] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 4 [ 1702.080317][T31075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4278'. [ 1702.084542][ T978] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 86 [ 1702.097611][ T978] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 6 [ 1702.246477][ T978] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1702.260225][ T978] usb 7-1: USB disconnect, device number 42 [ 1702.265601][T28627] wlan1: Creating new IBSS network, BSSID be:ef:9b:5f:2a:db [ 1702.273469][ T978] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1702.276657][ T978] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1702.307553][ T978] keyspan 7-1:0.11: device disconnected [ 1702.965907][T31095] tmpfs: Bad value for 'mpol' [ 1703.375045][T12137] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1703.631700][T12137] usb 2-1: Using ep0 maxpacket: 8 [ 1703.921415][T12137] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1703.932993][T12137] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1703.943762][T12137] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1703.954224][T12137] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1704.059034][T12137] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1704.120469][T12137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.294544][ T978] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1704.490149][ T978] usb 7-1: too many configurations: 221, using maximum allowed: 8 [ 1704.545505][ T978] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1704.721806][T31115] xt_hashlimit: overflow, rate too high: 0 [ 1704.983782][ T978] usb 7-1: can't read configurations, error -61 [ 1705.139022][ T978] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1705.295120][T12137] usb 2-1: usb_control_msg returned -71 [ 1705.303795][T12137] usbtmc 2-1:16.0: can't read capabilities [ 1705.328924][ T978] usb 7-1: too many configurations: 221, using maximum allowed: 8 [ 1705.357607][T12137] usb 2-1: USB disconnect, device number 59 [ 1705.371590][ T978] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1705.412619][ T978] usb 7-1: can't read configurations, error -61 [ 1705.444771][ T978] usb usb7-port1: attempt power cycle [ 1705.844652][ T978] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1705.888751][ T978] usb 7-1: too many configurations: 221, using maximum allowed: 8 [ 1705.910963][ T978] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1705.926332][ T978] usb 7-1: can't read configurations, error -61 [ 1706.603603][ T978] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1706.724977][ T978] usb 7-1: too many configurations: 221, using maximum allowed: 8 [ 1706.738015][ T978] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1706.753240][ T978] usb 7-1: can't read configurations, error -61 [ 1706.793856][ T978] usb usb7-port1: unable to enumerate USB device [ 1709.511808][T31179] tmpfs: Bad value for 'mpol' [ 1709.618460][T31178] vivid-000: disconnect [ 1709.624969][T31178] vivid-000: reconnect [ 1710.178620][T31181] xt_hashlimit: overflow, rate too high: 0 [ 1713.406955][T31216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4305'. [ 1714.053931][T31232] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1716.311133][T31233] tmpfs: Bad value for 'mpol' [ 1716.749116][T31239] xt_hashlimit: overflow, rate too high: 0 [ 1717.136945][T31247] overlayfs: failed to resolve './file0': -2 [ 1717.174493][T31247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4314'. [ 1717.326314][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1717.456289][T31254] sp0: Synchronizing with TNC [ 1718.146488][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.156775][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1718.167631][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1718.176961][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1718.185580][ T9] usb 3-1: SerialNumber: syz [ 1718.518414][ T9] usb 3-1: 0:2 : does not exist [ 1718.524120][ T9] usb 3-1: unit 6 not found! [ 1718.538899][ T9] usb 3-1: USB disconnect, device number 85 [ 1719.290660][T31294] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1719.297238][T31294] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1719.336928][T31294] vhci_hcd vhci_hcd.0: Device attached [ 1719.413785][T31276] vhci_hcd vhci_hcd.0: port 0 already used [ 1719.677121][T31295] vhci_hcd: connection closed [ 1719.685159][T28627] vhci_hcd: stop threads [ 1719.713332][T28627] vhci_hcd: release socket [ 1719.725647][T28627] vhci_hcd: disconnect device [ 1719.733017][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1719.742373][ T5966] usb 42-1: SetAddress Request (2) to port 0 [ 1719.748460][ T5966] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1719.775641][ T5966] usb 42-1: enqueue for inactive port 0 [ 1719.838770][T31311] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1720.276325][ T5966] usb usb42-port1: attempt power cycle [ 1720.430988][T31313] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4323'. [ 1720.458954][ T9] usb 3-1: device descriptor read/64, error -71 [ 1720.766355][T31315] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1720.901305][T31321] tmpfs: Bad value for 'mpol' [ 1720.916464][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1721.078956][ T9] usb 3-1: device descriptor read/64, error -71 [ 1721.218854][ T9] usb usb3-port1: attempt power cycle [ 1721.423074][ T5966] usb usb42-port1: unable to enumerate USB device [ 1721.992095][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1722.031271][ T9] usb 3-1: device descriptor read/8, error -71 [ 1722.181137][T31327] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314752, 8, 0, 0, 0) [ 1722.864445][T31331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4330'. [ 1722.983434][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1723.216910][ T9] usb 3-1: device not accepting address 89, error -71 [ 1723.315864][ T9] usb usb3-port1: unable to enumerate USB device [ 1723.871211][T31361] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1726.547925][T31374] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4340'. [ 1726.944193][T31388] tmpfs: Bad value for 'mpol' [ 1727.623010][T31390] xt_hashlimit: overflow, rate too high: 0 [ 1727.683319][ T5932] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1727.761887][T31389] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1727.946409][ T5932] usb 2-1: device descriptor read/64, error -71 [ 1728.398456][ T5932] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1729.067482][T31396] 9pnet_fd: Insufficient options for proto=fd [ 1729.122976][ T5932] usb 2-1: device descriptor read/64, error -71 [ 1729.193455][T12137] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 1729.257914][ T5932] usb usb2-port1: attempt power cycle [ 1729.983982][ T5926] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1730.018021][T12137] usb 8-1: config 0 has an invalid interface number: 11 but max is 0 [ 1730.035073][T12137] usb 8-1: config 0 has no interface number 0 [ 1730.058491][T12137] usb 8-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1730.107087][T12137] usb 8-1: config 0 interface 11 has no altsetting 0 [ 1730.156226][T12137] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1730.165325][T12137] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.187401][ T5926] usb 7-1: Using ep0 maxpacket: 16 [ 1730.228387][ T5926] usb 7-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 1730.240479][ T5926] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1730.250645][T12137] usb 8-1: config 0 descriptor?? [ 1730.270294][T31400] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1730.277892][T31400] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1730.284600][T31429] tun0: tun_chr_ioctl cmd 1074025681 [ 1730.287875][T12137] keyspan 8-1:0.11: Keyspan 2 port adapter converter detected [ 1730.304013][ T5926] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1730.327530][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.336290][T12137] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 81 [ 1730.364887][ T5926] usb 7-1: Product: syz [ 1730.369790][T12137] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 82 [ 1730.383906][ T5926] usb 7-1: Manufacturer: syz [ 1730.388552][ T5926] usb 7-1: SerialNumber: syz [ 1730.398427][T12137] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 1 [ 1730.428047][T12137] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 2 [ 1730.460268][T12137] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 85 [ 1730.491787][T12137] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 5 [ 1730.568187][T12137] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1730.608360][T12137] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 83 [ 1730.623002][T12137] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 84 [ 1730.638042][T12137] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 3 [ 1731.521488][T31452] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4355'. [ 1731.565777][T12137] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 4 [ 1731.574392][T12137] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 86 [ 1731.586167][T12137] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 6 [ 1731.596049][T12137] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1731.676246][ T9] usb 8-1: USB disconnect, device number 53 [ 1731.899912][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1731.901115][ T5926] usb 7-1: 0:2 : does not exist [ 1732.011906][T31469] tmpfs: Bad value for 'mpol' [ 1732.180015][ T5926] usb 7-1: USB disconnect, device number 47 [ 1732.679432][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1732.700415][ T9] keyspan 8-1:0.11: device disconnected [ 1733.732221][T31505] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1733.916540][T31499] program syz.6.4359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1734.404766][T28644] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1734.410807][T31513] program syz.6.4359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1734.452635][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1734.535396][T31513] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1735.126432][ T9] usb 3-1: device descriptor read/64, error -71 [ 1735.393856][ T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1735.543104][ T9] usb 3-1: device descriptor read/64, error -71 [ 1736.292705][ T9] usb usb3-port1: attempt power cycle [ 1736.705764][ T9] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1736.738674][T31564] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4372'. [ 1736.792908][ T9] usb 3-1: device descriptor read/8, error -71 [ 1737.107829][T31576] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1738.281120][T31595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1740.433535][ T5912] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1741.198854][T31625] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1741.680371][ T5912] usb 8-1: device descriptor read/64, error -71 [ 1741.956043][T31631] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4389'. [ 1741.971911][ T5912] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1742.165542][ T5912] usb 8-1: device descriptor read/64, error -71 [ 1742.456531][ T5912] usb usb8-port1: attempt power cycle [ 1742.623491][T31642] xt_hashlimit: overflow, rate too high: 0 [ 1743.855632][ T5912] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1744.025346][ T5912] usb 8-1: device descriptor read/8, error -71 [ 1744.542698][T31662] xt_hashlimit: overflow, rate too high: 0 [ 1746.617945][ T30] audit: type=1326 audit(1753469781.792:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31671 comm="syz.2.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731658e9a9 code=0x7ffc0000 [ 1746.760295][ T30] audit: type=1326 audit(1753469781.792:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31671 comm="syz.2.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731658e9a9 code=0x7ffc0000 [ 1747.439456][ T30] audit: type=1326 audit(1753469781.792:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31671 comm="syz.2.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f731658e9a9 code=0x7ffc0000 [ 1747.466444][ T30] audit: type=1326 audit(1753469781.811:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31671 comm="syz.2.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731658e9a9 code=0x7ffc0000 [ 1747.497275][ T30] audit: type=1326 audit(1753469781.811:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31671 comm="syz.2.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731658e9a9 code=0x7ffc0000 [ 1748.093866][ T30] audit: type=1326 audit(1753469781.839:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31671 comm="syz.2.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f731658e9a9 code=0x7ffc0000 [ 1748.264099][T31696] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1748.908981][T31689] netlink: 'syz.6.4402': attribute type 1 has an invalid length. [ 1748.918816][T31698] netlink: 'syz.6.4402': attribute type 1 has an invalid length. [ 1749.031200][ T30] audit: type=1326 audit(1753469781.839:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31671 comm="syz.2.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731658e9a9 code=0x7ffc0000 [ 1749.148370][ T30] audit: type=1326 audit(1753469781.839:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31671 comm="syz.2.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731658e9a9 code=0x7ffc0000 [ 1749.207169][ T30] audit: type=1326 audit(1753469781.839:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31671 comm="syz.2.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f731658e9a9 code=0x7ffc0000 [ 1749.280027][ T30] audit: type=1326 audit(1753469781.839:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31671 comm="syz.2.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731658e9a9 code=0x7ffc0000 [ 1749.407223][T31719] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4407'. [ 1749.421983][T12137] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1750.587059][T12137] usb 5-1: device descriptor read/64, error -71 [ 1750.862751][T12137] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1751.215844][T12137] usb 5-1: device descriptor read/64, error -71 [ 1751.358074][T12137] usb usb5-port1: attempt power cycle [ 1751.985874][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1752.092356][T12137] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1752.596192][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1752.603609][T12137] usb 5-1: device descriptor read/8, error -32 [ 1753.290159][T31759] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1754.439996][T31770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4421'. [ 1754.904896][T12137] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1755.228646][T31792] xt_hashlimit: overflow, rate too high: 0 [ 1755.296006][T12137] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 1755.407547][T12137] usb 5-1: config 0 has no interface number 0 [ 1755.415518][T12137] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1755.511644][T12137] usb 5-1: config 0 interface 11 has no altsetting 0 [ 1755.542792][T12137] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1755.620769][T12137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.642068][ T5966] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1755.713294][T12137] usb 5-1: config 0 descriptor?? [ 1755.751128][T31749] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1755.758392][T31749] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1755.804780][T12137] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 1756.022554][ T5966] usb 8-1: device descriptor read/64, error -71 [ 1756.040731][T12137] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 1756.058359][T12137] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 1756.066197][T12137] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 1756.081220][T12137] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 1756.089894][T12137] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 1756.098863][T12137] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 1756.205941][T12137] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1756.289185][T12137] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 1756.315275][ T5966] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1757.220805][T12137] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 1757.238811][T12137] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 1757.250769][T12137] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 1757.258566][T12137] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 1757.266422][T12137] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 1757.565934][T12137] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1757.619799][ T5966] usb 8-1: device descriptor read/64, error -71 [ 1758.688630][ T5966] usb usb8-port1: attempt power cycle [ 1758.956472][T31826] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1759.317293][ T9] usb 5-1: USB disconnect, device number 89 [ 1759.337209][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1759.376510][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1759.403924][ T9] keyspan 5-1:0.11: device disconnected [ 1759.576917][T31839] x_tables: duplicate underflow at hook 4 [ 1761.204232][T31845] syz.6.4432 (31845): drop_caches: 2 [ 1761.516373][T31868] xt_hashlimit: overflow, rate too high: 0 [ 1761.779184][T31864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4436'. [ 1763.186152][T31881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4443'. [ 1763.392129][ T5966] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1763.606796][ T5966] usb 8-1: no configurations [ 1763.611460][ T5966] usb 8-1: can't read configurations, error -22 [ 1764.020202][T31907] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1764.033034][ T5966] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1764.219880][ T5966] usb 8-1: no configurations [ 1764.226289][ T5966] usb 8-1: can't read configurations, error -22 [ 1764.280470][ T5966] usb usb8-port1: attempt power cycle [ 1764.642896][ T5912] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1764.757208][ T5853] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1764.767462][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: kworker/u9:8 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1764.767490][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1764.767504][ T5853] Workqueue: hci3 hci_rx_work [ 1764.767530][ T5853] Call Trace: [ 1764.767540][ T5853] [ 1764.767549][ T5853] dump_stack_lvl+0x189/0x250 [ 1764.767575][ T5853] ? kernfs_path_from_node+0x2c/0x260 [ 1764.767603][ T5853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1764.767626][ T5853] ? __pfx__printk+0x10/0x10 [ 1764.767655][ T5853] ? kernfs_path_from_node+0x2c/0x260 [ 1764.767678][ T5853] ? kernfs_path_from_node+0x2c/0x260 [ 1764.767704][ T5853] ? kernfs_path_from_node+0x22c/0x260 [ 1764.767726][ T5853] ? kernfs_path_from_node+0x2c/0x260 [ 1764.767753][ T5853] sysfs_create_dir_ns+0x259/0x280 [ 1764.767780][ T5853] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1764.767807][ T5853] ? do_raw_spin_unlock+0x122/0x240 [ 1764.767839][ T5853] kobject_add_internal+0x59f/0xb40 [ 1764.767874][ T5853] kobject_add+0x155/0x220 [ 1764.767902][ T5853] ? __pfx_kobject_add+0x10/0x10 [ 1764.767927][ T5853] ? _raw_spin_unlock+0x28/0x50 [ 1764.767960][ T5853] ? get_device_parent+0x366/0x3a0 [ 1764.767995][ T5853] device_add+0x408/0xb50 [ 1764.768029][ T5853] hci_conn_add_sysfs+0xd5/0x1e0 [ 1764.768065][ T5853] le_conn_complete_evt+0xc3a/0x1220 [ 1764.768105][ T5853] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1764.768143][ T5853] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1764.768165][ T5853] ? __asan_memcpy+0x40/0x70 [ 1764.768196][ T5853] ? __pfx___mutex_lock+0x10/0x10 [ 1764.768220][ T5853] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1764.768241][ T5853] ? skb_pull_data+0xfb/0x200 [ 1764.768267][ T5853] hci_le_enh_conn_complete_evt+0x189/0x470 [ 1764.768296][ T5853] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1764.768326][ T5853] hci_event_packet+0x78f/0x1200 [ 1764.768351][ T5853] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1764.768379][ T5853] ? __pfx_hci_event_packet+0x10/0x10 [ 1764.768402][ T5853] ? kcov_remote_start+0x4d3/0x7f0 [ 1764.768430][ T5853] ? lockdep_hardirqs_on+0x90/0x150 [ 1764.768454][ T5853] ? hci_send_to_monitor+0xe2/0x570 [ 1764.768485][ T5853] hci_rx_work+0x46a/0xe80 [ 1764.768520][ T5853] ? process_scheduled_works+0x9ef/0x17b0 [ 1764.768545][ T5853] process_scheduled_works+0xade/0x17b0 [ 1764.768600][ T5853] ? __pfx_process_scheduled_works+0x10/0x10 [ 1764.768636][ T5853] worker_thread+0x8a0/0xda0 [ 1764.768682][ T5853] kthread+0x70e/0x8a0 [ 1764.768710][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 1764.768729][ T5853] ? __pfx_kthread+0x10/0x10 [ 1764.768755][ T5853] ? _raw_spin_unlock_irq+0x23/0x50 [ 1764.768772][ T5853] ? lockdep_hardirqs_on+0x9c/0x150 [ 1764.768789][ T5853] ? __pfx_kthread+0x10/0x10 [ 1764.768814][ T5853] ret_from_fork+0x3fc/0x770 [ 1764.768834][ T5853] ? __pfx_ret_from_fork+0x10/0x10 [ 1764.768859][ T5853] ? __switch_to_asm+0x39/0x70 [ 1764.768881][ T5853] ? __switch_to_asm+0x33/0x70 [ 1764.768902][ T5853] ? __pfx_kthread+0x10/0x10 [ 1764.768929][ T5853] ret_from_fork_asm+0x1a/0x30 [ 1764.768967][ T5853] [ 1764.768995][ T5853] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1764.782412][ T5966] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1764.793357][ T5853] Bluetooth: hci3: failed to register connection device [ 1764.831458][T31913] netlink: 'syz.4.4450': attribute type 6 has an invalid length. [ 1764.861264][ T5912] usb 7-1: Using ep0 maxpacket: 32 [ 1764.944669][ T5966] usb 8-1: no configurations [ 1765.006379][T31921] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1765.372713][ T5912] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.409845][ T5966] usb 8-1: can't read configurations, error -22 [ 1765.451117][ T5912] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1765.498158][T12137] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1765.578866][ T5912] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice=2f.00 [ 1765.633216][ T5912] usb 7-1: New USB device strings: Mfr=13, Product=0, SerialNumber=0 [ 1765.764334][T31931] xt_hashlimit: overflow, rate too high: 0 [ 1766.019616][T12137] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 1766.085526][T12137] usb 2-1: config 0 has no interface number 0 [ 1766.089870][ T5912] usb 7-1: Manufacturer: syz [ 1766.160945][T12137] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1766.179345][ T5912] usb 7-1: config 0 descriptor?? [ 1766.210546][ T5912] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1766.216555][T12137] usb 2-1: config 0 interface 11 has no altsetting 0 [ 1766.228913][T12137] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1766.259685][T12137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.323203][T12137] usb 2-1: config 0 descriptor?? [ 1766.356140][T31912] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1766.381799][T31912] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1766.549958][T12137] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 1766.800474][T12137] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 1766.946475][T12137] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 1766.996550][T12137] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 1766.998553][T11816] Bluetooth: hci3: command 0x0406 tx timeout [ 1767.072789][T12137] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 1767.220124][T12137] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 1767.282620][T31948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4456'. [ 1767.295160][T12137] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 1767.317546][T12137] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1767.344913][T12137] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 1767.375184][T12137] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 1767.441022][T12137] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 1767.505353][T12137] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 1767.522406][T12137] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 1767.560599][T12137] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 1767.616179][T12137] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1767.827320][T12137] usb 7-1: USB disconnect, device number 48 [ 1768.397584][ T6265] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1769.389156][T31986] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1770.208577][ T5912] usb 2-1: USB disconnect, device number 63 [ 1770.226533][ T5912] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1770.431463][T32001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4466'. [ 1770.481436][T32005] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1771.010540][ T5966] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1771.253126][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1771.253155][ T30] audit: type=1400 audit(1753469804.859:293): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=31987 comm="syz.7.4463" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1771.302331][ T5912] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1771.325337][ T5912] keyspan 2-1:0.11: device disconnected [ 1771.468452][ T5966] usb 8-1: no configurations [ 1771.469253][T26488] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1771.473250][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1771.473281][ C0] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1771.473301][ C0] audit: backlog limit exceeded [ 1771.473529][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1771.473553][ C0] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1771.473572][ C0] audit: backlog limit exceeded [ 1771.484367][ T5966] usb 8-1: can't read configurations, error -22 [ 1771.506273][T32017] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1771.517158][ T30] audit: type=1400 audit(1753469804.925:294): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 1771.823522][T32019] ALSA: mixer_oss: invalid OSS volume '' [ 1771.894831][ T5966] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1772.608532][T32032] sp0: Synchronizing with TNC [ 1773.245759][ T5966] usb 8-1: no configurations [ 1773.978052][ T5966] usb 8-1: can't read configurations, error -22 [ 1774.015635][ T5966] usb usb8-port1: attempt power cycle [ 1774.073944][T32026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4470'. [ 1777.189311][T26488] audit_log_start: 1461 callbacks suppressed [ 1777.189329][T26488] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1777.237116][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1777.237259][ T30] audit: type=1400 audit(1753469809.489:1071): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32046 comm="syz.7.4473" name="newroot" dev="tmpfs" ino=2 [ 1777.244053][ C0] audit: audit_lost=232 audit_rate_limit=0 audit_backlog_limit=64 [ 1777.270916][ C0] audit: backlog limit exceeded [ 1777.271278][T20133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1777.276326][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1777.288842][ C0] audit: audit_lost=233 audit_rate_limit=0 audit_backlog_limit=64 [ 1777.296680][ C0] audit: backlog limit exceeded [ 1777.301719][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1778.090159][T32066] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1779.823911][ T978] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1780.024842][ T978] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1780.058254][ T978] usb 3-1: config 0 has no interface number 0 [ 1780.099890][ T978] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1780.184722][ T978] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1780.240941][ T978] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1780.325231][T32096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4480'. [ 1780.913465][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.932675][ T978] usb 3-1: config 0 descriptor?? [ 1780.959781][T32073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1780.967213][T32073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1781.043525][ T5912] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1781.249936][ T5912] usb 5-1: no configurations [ 1781.256073][ T5912] usb 5-1: can't read configurations, error -22 [ 1781.423239][ T5912] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1781.460290][T32106] syz.1.4486: attempt to access beyond end of device [ 1781.460290][T32106] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1781.980388][T32108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4487'. [ 1782.539432][ T30] kauditd_printk_skb: 1837 callbacks suppressed [ 1782.539449][ T30] audit: type=1400 audit(1753469815.410:2705): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26488 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1782.583868][ T30] audit: type=1400 audit(1753469815.410:2706): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26488 comm="syz-executor" name="165" dev="tmpfs" ino=931 [ 1782.584629][T27214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1782.602935][ T30] audit: type=1400 audit(1753469815.410:2707): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=26488 comm="syz-executor" path="/165/binderfs" dev="tmpfs" ino=935 [ 1782.602984][ T30] audit: type=1400 audit(1753469815.410:2708): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26488 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1782.604836][ T30] audit: type=1400 audit(1753469815.410:2710): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26488 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1782.651201][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1782.651223][ C0] audit: audit_lost=303 audit_rate_limit=0 audit_backlog_limit=64 [ 1782.651241][ C0] audit: backlog limit exceeded [ 1782.667857][T27214] audit: audit_lost=304 audit_rate_limit=0 audit_backlog_limit=64 [ 1782.675031][ T978] usb 3-1: can't set config #0, error -71 [ 1782.710092][ T5912] usb 5-1: no configurations [ 1782.714724][ T5912] usb 5-1: can't read configurations, error -22 [ 1782.736239][ T978] usb 3-1: USB disconnect, device number 94 [ 1782.742615][ T5912] usb usb5-port1: attempt power cycle [ 1783.223227][ T5912] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1783.442210][T32132] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1784.182949][ T5912] usb 5-1: device descriptor read/8, error -71 [ 1785.538056][T32162] netlink: 'syz.1.4498': attribute type 27 has an invalid length. [ 1785.631514][T32166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4500'. [ 1786.377187][ T5912] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1786.575951][ T5912] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 1786.598317][ T5912] usb 2-1: config 0 has no interface number 0 [ 1786.629300][ T5912] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1786.694000][ T5912] usb 2-1: config 0 interface 11 has no altsetting 0 [ 1786.734867][ T5912] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1786.776094][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.842314][ T5912] usb 2-1: config 0 descriptor?? [ 1786.883235][T32171] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1786.936888][T32171] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1786.978498][ T5912] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 1787.016163][ T5912] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 1787.059842][ T5912] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 1787.091361][ T5912] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 1787.122893][ T5912] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 1787.131473][ T978] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1787.188719][ T5912] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 1787.857151][ T5912] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 1787.891280][ T5912] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1787.907003][ T30] kauditd_printk_skb: 3383 callbacks suppressed [ 1787.907021][ T30] audit: type=1400 audit(1753469820.434:4949): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=32181 comm="syz.6.4504" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1787.938480][ T978] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1787.964747][ T5912] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 1787.996694][ T30] audit: type=1400 audit(1753469820.452:4950): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=32181 comm="syz.6.4504" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1788.001463][T26071] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1788.016669][ T30] audit: type=1400 audit(1753469820.452:4951): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=32181 comm="syz.6.4504" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1788.034008][ T978] usb 7-1: config 0 has no interfaces? [ 1788.043364][ T30] audit: type=1400 audit(1753469820.471:4952): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=32181 comm="syz.6.4504" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1788.068789][ T30] audit: type=1400 audit(1753469820.471:4953): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=32181 comm="syz.6.4504" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1788.069065][ T5912] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 1788.119072][T27214] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1788.120649][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1788.132143][ C0] audit: audit_lost=686 audit_rate_limit=0 audit_backlog_limit=64 [ 1788.134321][ T30] audit: type=1400 audit(1753469820.480:4954): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=32181 comm="syz.6.4504" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1788.170381][ T978] usb 7-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1788.185539][T32196] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1788.201398][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.216014][ T5912] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 1788.242296][ T978] usb 7-1: Product: syz [ 1788.246587][ T978] usb 7-1: Manufacturer: syz [ 1788.251474][ T5912] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 1788.266977][ T978] usb 7-1: SerialNumber: syz [ 1788.277127][ T5912] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 1788.312850][ T978] usb 7-1: config 0 descriptor?? [ 1788.320173][ T5912] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 1788.346405][ T5912] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1788.615314][T12137] usb 7-1: USB disconnect, device number 49 [ 1790.291557][ T978] usb 2-1: USB disconnect, device number 64 [ 1790.303164][ T978] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1790.361199][ T978] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1790.385956][T32228] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1790.392494][T32228] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1790.410194][ T978] keyspan 2-1:0.11: device disconnected [ 1790.439399][T32228] vhci_hcd vhci_hcd.0: Device attached [ 1790.453173][T32229] vhci_hcd vhci_hcd.0: port 0 already used [ 1790.760520][ T5912] usb 38-1: SetAddress Request (2) to port 0 [ 1790.767190][ T5912] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1791.203451][T32238] vhci_hcd: connection reset by peer [ 1791.209907][T28616] vhci_hcd: stop threads [ 1791.216234][T28616] vhci_hcd: release socket [ 1791.240405][T28616] vhci_hcd: disconnect device [ 1791.334008][T32242] ALSA: mixer_oss: invalid OSS volume '3' [ 1791.335969][T32263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4514'. [ 1791.339964][T32242] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1791.355209][T32242] ALSA: mixer_oss: invalid OSS volume '4' [ 1791.361017][T32242] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1791.367369][T32242] ALSA: mixer_oss: invalid OSS volume '5' [ 1791.377016][T32242] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1791.384279][T32242] ALSA: mixer_oss: invalid OSS volume '6' [ 1791.759341][T32273] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1793.303420][ T30] kauditd_printk_skb: 2101 callbacks suppressed [ 1793.303440][ T30] audit: type=1400 audit(1753469825.475:6913): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20133 comm="syz-executor" name="390" dev="tmpfs" ino=2105 [ 1793.377090][ T30] audit: type=1400 audit(1753469825.475:6914): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=20133 comm="syz-executor" path="/390/cgroup" dev="tmpfs" ino=2106 [ 1793.397408][ T30] audit: type=1400 audit(1753469825.475:6915): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20133 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1793.420492][ T30] audit: type=1400 audit(1753469825.475:6916): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20133 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1793.440724][T26071] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1793.454952][T26779] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1793.462109][T26779] audit: audit_lost=735 audit_rate_limit=0 audit_backlog_limit=64 [ 1793.478359][T26071] audit: audit_lost=736 audit_rate_limit=0 audit_backlog_limit=64 [ 1793.489710][ T30] audit: type=1400 audit(1753469825.475:6917): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20133 comm="syz-executor" name="390" dev="tmpfs" ino=2105 [ 1793.512863][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1793.640384][T32280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4520'. [ 1793.892534][T12137] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1793.926962][T32280] nbd: socks must be embedded in a SOCK_ITEM attr [ 1794.068637][T32296] xt_hashlimit: overflow, rate too high: 0 [ 1794.258931][T12137] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1794.296531][T12137] usb 7-1: can't read configurations, error -61 [ 1794.556544][T12137] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1794.835535][ T978] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1794.871180][T12137] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1794.951006][T12137] usb 7-1: can't read configurations, error -61 [ 1795.069523][T32308] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1795.094176][T12137] usb usb7-port1: attempt power cycle [ 1795.219987][ T978] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1795.260905][ T978] usb 3-1: config 0 has no interface number 0 [ 1795.287174][ T978] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1795.304022][ T978] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1795.310919][ T978] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1795.325153][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.343997][ T978] usb 3-1: config 0 descriptor?? [ 1795.400216][T32297] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1795.505099][T32297] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1795.529271][ T978] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 1795.538533][ T978] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 1795.549855][T12137] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1795.595699][T12137] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1795.606013][ T978] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 1795.613576][T12137] usb 7-1: can't read configurations, error -61 [ 1795.630182][ T978] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 1795.655842][ T978] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 1795.681236][ T978] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 1795.705077][ T978] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 1795.797129][ T978] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1795.918921][ T978] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 1795.945977][ T978] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 1795.982953][ T978] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 1796.009454][ T978] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 1796.030744][T12137] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1796.036845][ T978] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 1796.068126][ T978] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 1796.092629][T12137] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1796.098582][ T978] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1796.113900][T12137] usb 7-1: can't read configurations, error -61 [ 1796.141675][T12137] usb usb7-port1: unable to enumerate USB device [ 1796.565199][ T5966] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1796.586553][ T5912] usb 38-1: device descriptor read/8, error -110 [ 1796.747542][ T5966] usb 5-1: Using ep0 maxpacket: 32 [ 1796.790408][ T5966] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1796.895676][ T5966] usb 5-1: config 0 has no interface number 0 [ 1796.942816][ T5966] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1796.987078][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.029853][ T5966] usb 5-1: Product: syz [ 1797.045057][ T5966] usb 5-1: Manufacturer: syz [ 1797.071015][ T5966] usb 5-1: SerialNumber: syz [ 1797.530594][ T5912] usb usb38-port1: attempt power cycle [ 1797.546767][ T5966] usb 5-1: config 0 descriptor?? [ 1797.573568][ T5966] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1797.859786][ T5966] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1797.900759][ T5966] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 1797.961235][T32349] FAULT_INJECTION: forcing a failure. [ 1797.961235][T32349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1797.991842][T32349] CPU: 1 UID: 0 PID: 32349 Comm: syz.7.4532 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1797.991869][T32349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1797.991885][T32349] Call Trace: [ 1797.991892][T32349] [ 1797.991900][T32349] dump_stack_lvl+0x189/0x250 [ 1797.991925][T32349] ? __pfx____ratelimit+0x10/0x10 [ 1797.991945][T32349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1797.991966][T32349] ? __pfx__printk+0x10/0x10 [ 1797.992003][T32349] should_fail_ex+0x414/0x560 [ 1797.992028][T32349] strncpy_from_user+0x36/0x290 [ 1797.992063][T32349] getname_flags+0xf3/0x540 [ 1797.992090][T32349] do_sys_openat2+0xbc/0x1c0 [ 1797.992119][T32349] ? __pfx_do_sys_openat2+0x10/0x10 [ 1797.992145][T32349] ? ksys_write+0x22a/0x250 [ 1797.992165][T32349] ? __pfx_ksys_write+0x10/0x10 [ 1797.992182][T32349] ? rcu_is_watching+0x15/0xb0 [ 1797.992207][T32349] __x64_sys_open+0x11e/0x150 [ 1797.992236][T32349] do_syscall_64+0xfa/0x3b0 [ 1797.992259][T32349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.992277][T32349] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1797.992297][T32349] ? clear_bhb_loop+0x60/0xb0 [ 1797.992320][T32349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.992339][T32349] RIP: 0033:0x7f23fff8e9a9 [ 1797.992356][T32349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1797.992372][T32349] RSP: 002b:00007f23ffdf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1797.992392][T32349] RAX: ffffffffffffffda RBX: 00007f24001b5fa0 RCX: 00007f23fff8e9a9 [ 1797.992407][T32349] RDX: 0000000000000000 RSI: 00000000001612c2 RDI: 0000200000000200 [ 1797.992420][T32349] RBP: 00007f23ffdf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.992432][T32349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.992443][T32349] R13: 0000000000000000 R14: 00007f24001b5fa0 R15: 00007fff37e27bd8 [ 1797.992473][T32349] [ 1798.241957][ T978] usb 3-1: USB disconnect, device number 95 [ 1798.259681][ T978] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1798.451405][ T5912] usb usb38-port1: unable to enumerate USB device [ 1798.557471][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1798.568946][ T5966] usb 5-1: USB disconnect, device number 94 [ 1798.571384][ T978] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1798.650726][ T30] kauditd_printk_skb: 2791 callbacks suppressed [ 1798.650774][ T30] audit: type=1400 audit(1753469830.470:9012): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32369 comm="kworker/u8:53" name="/" dev="sda1" ino=2 [ 1798.767846][ T978] keyspan 3-1:0.11: device disconnected [ 1798.842708][ T30] audit: type=1400 audit(1753469830.480:9013): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32372 comm="kworker/u8:53" name="/" dev="sda1" ino=2 [ 1798.842902][ T5966] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 1798.879185][ T5966] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 1798.896263][T32380] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1798.902849][T32380] audit: audit_lost=969 audit_rate_limit=0 audit_backlog_limit=64 [ 1798.910758][T32380] audit: backlog limit exceeded [ 1798.916162][T32380] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1798.923570][T32380] audit: audit_lost=970 audit_rate_limit=0 audit_backlog_limit=64 [ 1798.931418][T32380] audit: backlog limit exceeded [ 1798.937893][T32380] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1798.939859][T26779] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1798.956962][T32380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4534'. [ 1798.971070][ T5966] quatech2 5-1:0.51: device disconnected [ 1799.150149][T32394] xt_hashlimit: overflow, rate too high: 0 [ 1799.809829][T32398] FAULT_INJECTION: forcing a failure. [ 1799.809829][T32398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1800.157337][T32398] CPU: 1 UID: 0 PID: 32398 Comm: syz.6.4535 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1800.157370][T32398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1800.157382][T32398] Call Trace: [ 1800.157392][T32398] [ 1800.157401][T32398] dump_stack_lvl+0x189/0x250 [ 1800.157430][T32398] ? __pfx____ratelimit+0x10/0x10 [ 1800.157452][T32398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1800.157475][T32398] ? __pfx__printk+0x10/0x10 [ 1800.157501][T32398] ? __might_fault+0xb0/0x130 [ 1800.157533][T32398] should_fail_ex+0x414/0x560 [ 1800.157560][T32398] _copy_from_iter+0x1db/0x16f0 [ 1800.157589][T32398] ? rcu_is_watching+0x15/0xb0 [ 1800.157612][T32398] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1800.157635][T32398] ? __pfx__copy_from_iter+0x10/0x10 [ 1800.157667][T32398] ? __build_skb_around+0x257/0x3e0 [ 1800.157699][T32398] ? netlink_sendmsg+0x642/0xb30 [ 1800.157725][T32398] ? skb_put+0x11b/0x210 [ 1800.157755][T32398] netlink_sendmsg+0x6b2/0xb30 [ 1800.157793][T32398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1800.157830][T32398] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1800.157847][T32398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1800.157870][T32398] __sock_sendmsg+0x219/0x270 [ 1800.157891][T32398] ____sys_sendmsg+0x505/0x830 [ 1800.157924][T32398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1800.157955][T32398] ? import_iovec+0x74/0xa0 [ 1800.157980][T32398] ___sys_sendmsg+0x21f/0x2a0 [ 1800.158007][T32398] ? __pfx____sys_sendmsg+0x10/0x10 [ 1800.158059][T32398] ? __fget_files+0x2a/0x420 [ 1800.158076][T32398] ? __fget_files+0x3a0/0x420 [ 1800.158101][T32398] __x64_sys_sendmsg+0x19b/0x260 [ 1800.158128][T32398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1800.158160][T32398] ? __pfx_ksys_write+0x10/0x10 [ 1800.158179][T32398] ? do_syscall_64+0xbe/0x3b0 [ 1800.158200][T32398] do_syscall_64+0xfa/0x3b0 [ 1800.158218][T32398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.158234][T32398] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1800.158250][T32398] ? clear_bhb_loop+0x60/0xb0 [ 1800.158269][T32398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.158285][T32398] RIP: 0033:0x7fe53b78e9a9 [ 1800.158298][T32398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1800.158312][T32398] RSP: 002b:00007fe53c664038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1800.158329][T32398] RAX: ffffffffffffffda RBX: 00007fe53b9b5fa0 RCX: 00007fe53b78e9a9 [ 1800.158341][T32398] RDX: 0000000000000000 RSI: 0000200000006680 RDI: 0000000000000003 [ 1800.158351][T32398] RBP: 00007fe53c664090 R08: 0000000000000000 R09: 0000000000000000 [ 1800.158360][T32398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1800.158370][T32398] R13: 0000000000000000 R14: 00007fe53b9b5fa0 R15: 00007ffcad0aac88 [ 1800.158394][T32398] [ 1801.521011][T32406] ALSA: mixer_oss: invalid OSS volume '3' [ 1801.527114][T32406] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1801.533472][T32406] ALSA: mixer_oss: invalid OSS volume '4' [ 1801.539282][T32406] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1801.545668][T32406] ALSA: mixer_oss: invalid OSS volume '5' [ 1801.551445][T32406] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1801.557838][T32406] ALSA: mixer_oss: invalid OSS volume '6' [ 1801.947337][T32422] ALSA: mixer_oss: invalid OSS volume '' [ 1802.295408][ T5926] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1802.643384][T28616] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1803.043916][ T5926] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1803.052610][ T5926] usb 8-1: can't read configurations, error -61 [ 1803.204135][ T5926] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1803.293451][T32440] xt_hashlimit: overflow, rate too high: 0 [ 1803.643269][ T5926] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1803.670175][ T5926] usb 8-1: can't read configurations, error -61 [ 1803.711415][ T5926] usb usb8-port1: attempt power cycle [ 1804.063719][ T30] kauditd_printk_skb: 3256 callbacks suppressed [ 1804.063764][ T30] audit: type=1400 audit(1753469835.531:11036): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32446 comm="syz-executor" name="/" dev="proc" ino=1 [ 1804.178197][ T5926] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1804.245022][ T30] audit: type=1400 audit(1753469835.578:11037): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32446 comm="syz-executor" name="/" dev="proc" ino=1 [ 1804.254156][T26071] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1804.315745][T26071] audit: audit_lost=1383 audit_rate_limit=0 audit_backlog_limit=64 [ 1804.404268][T32415] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1804.412253][T32415] audit: audit_lost=1384 audit_rate_limit=0 audit_backlog_limit=64 [ 1804.420228][T32415] audit: backlog limit exceeded [ 1804.425272][ T30] audit: type=1400 audit(1753469835.578:11038): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32446 comm="syz-executor" name="587" dev="proc" ino=100882 [ 1804.445394][ T30] audit: type=1400 audit(1753469835.587:11039): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=32446 comm="syz-executor" name="oom_score_adj" dev="proc" ino=100883 [ 1804.466456][T32415] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1804.474280][ T5926] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1804.482289][ T5926] usb 8-1: can't read configurations, error -61 [ 1804.637572][T32449] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1804.797275][ T5926] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1805.190410][ T5926] usb 8-1: device descriptor read/8, error -71 [ 1805.329215][ T5926] usb usb8-port1: unable to enumerate USB device [ 1805.791078][T10939] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1806.956849][T10939] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1807.544337][T10939] usb 3-1: config 0 has no interface number 0 [ 1807.550596][T10939] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1807.564687][T10939] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1807.571873][T10939] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1807.581079][T10939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.042635][T10939] usb 3-1: config 0 descriptor?? [ 1808.712460][T32482] ALSA: mixer_oss: invalid OSS volume '3' [ 1808.718306][T32482] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1808.724782][T32482] ALSA: mixer_oss: invalid OSS volume '4' [ 1808.730547][T32482] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1808.737046][T32482] ALSA: mixer_oss: invalid OSS volume '5' [ 1808.742895][T32482] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1808.749260][T32482] ALSA: mixer_oss: invalid OSS volume '6' [ 1809.045786][T32476] ALSA: mixer_oss: invalid OSS volume '4' [ 1809.051874][T32476] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1809.058297][T32476] ALSA: mixer_oss: invalid OSS volume '5' [ 1809.064197][T32476] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1809.070549][T32476] ALSA: mixer_oss: invalid OSS volume '6' [ 1809.076441][T32476] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1809.082794][T32476] ALSA: mixer_oss: invalid OSS volume '7' [ 1810.424128][ T30] kauditd_printk_skb: 1207 callbacks suppressed [ 1810.424153][ T30] audit: type=1400 audit(1753469840.517:12196): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32495 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1810.650841][ T30] audit: type=1400 audit(1753469840.517:12197): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32495 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1810.670483][ T30] audit: type=1400 audit(1753469840.517:12198): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32495 comm="syz-executor" name="171" dev="tmpfs" ino=947 [ 1810.695337][ T30] audit: type=1400 audit(1753469840.517:12199): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=32495 comm="syz-executor" opid=32495 ocomm="syz-executor" [ 1810.715898][ T30] audit: type=1400 audit(1753469840.517:12200): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32495 comm="syz-executor" name="171" dev="tmpfs" ino=947 [ 1810.780649][ T30] audit: type=1400 audit(1753469840.517:12201): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32495 comm="syz-executor" name="171" dev="tmpfs" ino=947 [ 1810.800326][ T30] audit: type=1400 audit(1753469840.517:12202): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=32495 comm="syz-executor" name="171" dev="tmpfs" ino=947 [ 1810.822287][ T30] audit: type=1400 audit(1753469840.517:12203): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32495 comm="syz-executor" name="171" dev="tmpfs" ino=947 [ 1810.842814][ T30] audit: type=1400 audit(1753469840.517:12204): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32495 comm="syz-executor" name="171" dev="tmpfs" ino=947 [ 1810.862585][ T30] audit: type=1400 audit(1753469840.517:12205): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=32495 comm="syz-executor" name="171" dev="tmpfs" ino=947 [ 1810.948538][T10939] usb 3-1: can't set config #0, error -71 [ 1810.960068][T10939] usb 3-1: USB disconnect, device number 96 [ 1811.407523][T32519] xt_hashlimit: overflow, rate too high: 0 [ 1811.863859][T10939] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1812.079895][T10939] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1812.088359][T10939] usb 2-1: can't read configurations, error -61 [ 1812.141394][T21326] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1812.180176][T32530] tmpfs: Bad value for 'mpol' [ 1812.237737][T10939] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1812.398110][T32532] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1812.889660][T21326] usb 3-1: Using ep0 maxpacket: 16 [ 1812.897690][T21326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1812.918924][T21326] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1812.957427][T21326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.975485][T21326] usb 3-1: Product: syz [ 1812.989940][T21326] usb 3-1: Manufacturer: syz [ 1812.996686][T21326] usb 3-1: SerialNumber: syz [ 1813.029251][T21326] usb 3-1: config 0 descriptor?? [ 1813.074801][T10939] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1813.086965][T21326] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1813.104298][T10939] usb 2-1: can't read configurations, error -61 [ 1813.121462][T21326] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1813.128186][T10939] usb usb2-port1: attempt power cycle [ 1813.556828][T32548] ALSA: mixer_oss: invalid OSS volume '' [ 1813.809157][T10939] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1813.819911][ T5912] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1813.838921][T10939] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1813.849153][T10939] usb 2-1: can't read configurations, error -61 [ 1813.969804][T32521] xt_hashlimit: max too large, truncated to 1048576 [ 1813.991513][T10939] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1814.015286][T32521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.018261][ T5912] usb 7-1: config 0 has an invalid interface number: 156 but max is 1 [ 1814.027120][T32521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.046696][ T5912] usb 7-1: config 0 has no interface number 1 [ 1814.061821][T32521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.062913][ T5912] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1814.075665][T32521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.104954][T10939] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1814.105239][T32521] all: renamed from lo (while UP) [ 1814.132884][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.207816][T21326] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1814.226379][T10939] usb 2-1: can't read configurations, error -61 [ 1814.375664][T10939] usb usb2-port1: unable to enumerate USB device [ 1814.410086][ T5912] usb 7-1: config 0 descriptor?? [ 1814.594154][ T5912] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1814.647622][ T5912] usb 7-1: MIDIStreaming interface descriptor not found [ 1815.043786][ T5912] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1815.057728][ T5912] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 1815.099851][ T5912] usb 7-1: USB disconnect, device number 54 [ 1815.863341][ T30] kauditd_printk_skb: 2298 callbacks suppressed [ 1815.863362][ T30] audit: type=1400 audit(1753469846.578:14378): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26071 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1815.895740][T26071] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1815.908179][T27214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1815.915800][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1815.922380][ C0] audit: audit_lost=1444 audit_rate_limit=0 audit_backlog_limit=64 [ 1815.930411][ C0] audit: backlog limit exceeded [ 1815.936690][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1815.943244][ C0] audit: audit_lost=1445 audit_rate_limit=0 audit_backlog_limit=64 [ 1815.951217][ C0] audit: backlog limit exceeded [ 1815.956289][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1815.992863][T21326] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1816.021656][T21326] em28xx 3-1:0.0: board has no eeprom [ 1816.129161][T21326] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1816.146740][T21326] em28xx 3-1:0.0: dvb set to bulk mode. [ 1816.155969][ T5912] em28xx 3-1:0.0: Binding DVB extension [ 1816.204594][T21326] usb 3-1: USB disconnect, device number 97 [ 1816.218899][T21326] em28xx 3-1:0.0: Disconnecting em28xx [ 1816.255375][ T5912] em28xx 3-1:0.0: Registering input extension [ 1816.278609][T21326] em28xx 3-1:0.0: Closing input extension [ 1816.413139][T21326] em28xx 3-1:0.0: Freeing device [ 1816.544837][T32635] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1817.623012][T32648] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1818.171592][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1818.277646][T32651] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1818.764296][T32656] ALSA: mixer_oss: invalid OSS volume '' [ 1819.141992][T32621] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1819.930292][T10939] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1820.121727][T10939] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.159177][T10939] usb 8-1: config 0 has no interfaces? [ 1820.322393][T10939] usb 8-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1820.332216][T10939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.340301][T10939] usb 8-1: Product: syz [ 1820.344733][T10939] usb 8-1: Manufacturer: syz [ 1820.349356][T10939] usb 8-1: SerialNumber: syz [ 1820.357797][T10939] usb 8-1: config 0 descriptor?? [ 1820.433936][T32676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4587'. [ 1820.663003][ T5932] usb 8-1: USB disconnect, device number 72 [ 1821.228478][ T30] kauditd_printk_skb: 2366 callbacks suppressed [ 1821.228497][ T30] audit: type=1400 audit(1753469851.601:16106): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=26071 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.77 dest=47944 netif=eth0 [ 1821.264398][T10939] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1821.315848][ T30] audit: type=1400 audit(1753469851.610:16107): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=26071 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.77 dest=47944 netif=eth0 [ 1821.346187][ T30] audit: type=1400 audit(1753469851.610:16108): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.77 dest=47944 netif=eth0 [ 1821.382748][T20133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1821.394156][T32693] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1821.402009][T20133] audit: audit_lost=1660 audit_rate_limit=0 audit_backlog_limit=64 [ 1821.412726][ T30] audit: type=1400 audit(1753469851.667:16109): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=32677 comm="syz.6.4588" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1821.415802][T27214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1821.432572][ T30] audit: type=1400 audit(1753469851.667:16110): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=32677 comm="syz.6.4588" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1821.432619][ T30] audit: type=1400 audit(1753469851.667:16111): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=32677 comm="syz.6.4588" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1821.493725][T32689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4589'. [ 1821.514699][T10939] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1821.524255][T10939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.536347][T10939] usb 7-1: Product: syz [ 1821.547089][T10939] usb 7-1: Manufacturer: syz [ 1821.559322][T10939] usb 7-1: SerialNumber: syz [ 1821.578983][T10939] usb 7-1: config 0 descriptor?? [ 1821.608369][T10939] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1821.780601][T32706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4594'. [ 1821.936756][T10939] gspca_sunplus: reg_r err -71 [ 1821.953093][T32713] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1821.955787][T10939] usb 7-1: USB disconnect, device number 55 [ 1822.392699][T32724] ALSA: mixer_oss: invalid OSS volume '' [ 1823.280297][T32728] FAULT_INJECTION: forcing a failure. [ 1823.280297][T32728] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.298611][T32728] CPU: 0 UID: 0 PID: 32728 Comm: syz.2.4596 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1823.298645][T32728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1823.298657][T32728] Call Trace: [ 1823.298666][T32728] [ 1823.298675][T32728] dump_stack_lvl+0x189/0x250 [ 1823.298703][T32728] ? __pfx____ratelimit+0x10/0x10 [ 1823.298743][T32728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1823.298778][T32728] ? __pfx__printk+0x10/0x10 [ 1823.298809][T32728] ? __pfx___might_resched+0x10/0x10 [ 1823.298836][T32728] should_fail_ex+0x414/0x560 [ 1823.298861][T32728] should_failslab+0xa8/0x100 [ 1823.298885][T32728] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1823.298905][T32728] ? __alloc_skb+0x112/0x2d0 [ 1823.298937][T32728] __alloc_skb+0x112/0x2d0 [ 1823.298967][T32728] netlink_sendmsg+0x5c6/0xb30 [ 1823.299004][T32728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1823.299039][T32728] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1823.299058][T32728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1823.299086][T32728] __sock_sendmsg+0x219/0x270 [ 1823.299113][T32728] ____sys_sendmsg+0x505/0x830 [ 1823.299148][T32728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1823.299187][T32728] ? import_iovec+0x74/0xa0 [ 1823.299218][T32728] ___sys_sendmsg+0x21f/0x2a0 [ 1823.299250][T32728] ? __pfx____sys_sendmsg+0x10/0x10 [ 1823.299315][T32728] ? __fget_files+0x2a/0x420 [ 1823.299336][T32728] ? __fget_files+0x3a0/0x420 [ 1823.299367][T32728] __x64_sys_sendmsg+0x19b/0x260 [ 1823.299399][T32728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1823.299439][T32728] ? __pfx_ksys_write+0x10/0x10 [ 1823.299455][T32728] ? rcu_is_watching+0x15/0xb0 [ 1823.299481][T32728] ? do_syscall_64+0xbe/0x3b0 [ 1823.299507][T32728] do_syscall_64+0xfa/0x3b0 [ 1823.299527][T32728] ? lockdep_hardirqs_on+0x9c/0x150 [ 1823.299547][T32728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.299567][T32728] ? clear_bhb_loop+0x60/0xb0 [ 1823.299590][T32728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.299609][T32728] RIP: 0033:0x7f731658e9a9 [ 1823.299626][T32728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1823.299651][T32728] RSP: 002b:00007f73173cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1823.299671][T32728] RAX: ffffffffffffffda RBX: 00007f73167b5fa0 RCX: 00007f731658e9a9 [ 1823.299686][T32728] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1823.299698][T32728] RBP: 00007f73173cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1823.299711][T32728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1823.299723][T32728] R13: 0000000000000000 R14: 00007f73167b5fa0 R15: 00007ffe39487cf8 [ 1823.299753][T32728] [ 1825.158714][T32740] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1825.528444][T21326] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1825.555634][T10939] kernel write not supported for file /577/attr/sockcreate (pid: 10939 comm: kworker/0:6) [ 1826.018130][ T5932] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1826.469402][T21326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.617792][T21326] usb 5-1: config 0 has no interfaces? [ 1826.687436][ T30] kauditd_printk_skb: 2997 callbacks suppressed [ 1826.687517][ T30] audit: type=1400 audit(1753469856.708:18366): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32754 comm="syz.6.4605" name="newroot" dev="tmpfs" ino=2 [ 1826.878355][T21326] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1826.998367][T21326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.019835][ T30] audit: type=1400 audit(1753469856.736:18367): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32754 comm="syz.6.4605" name="/" dev="sysfs" ino=1 [ 1827.041719][T21326] usb 5-1: Product: syz [ 1827.046474][T32767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.053958][ T301] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1827.061664][T21326] usb 5-1: Manufacturer: syz [ 1827.063036][T32766] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1827.076798][T32767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.077040][ T30] audit: type=1400 audit(1753469856.736:18368): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32754 comm="syz.6.4605" name="kernel" dev="sysfs" ino=1388 [ 1827.084634][T32766] audit: audit_lost=1909 audit_rate_limit=0 audit_backlog_limit=64 [ 1827.108257][T21326] usb 5-1: SerialNumber: syz [ 1827.113024][T32766] audit: backlog limit exceeded [ 1827.125749][ T303] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1827.133598][ T302] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1827.133851][ T304] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1827.147698][ T5932] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1827.171424][T21326] usb 5-1: config 0 descriptor?? [ 1827.324774][ T5932] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1827.341252][ T5932] usb 7-1: can't read configurations, error -71 [ 1827.354176][T32766] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1827.455472][ T5926] usb 5-1: USB disconnect, device number 95 [ 1828.168397][ T326] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1828.185844][ T323] ALSA: mixer_oss: invalid OSS volume '3' [ 1828.191714][ T323] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1828.198126][ T323] ALSA: mixer_oss: invalid OSS volume '4' [ 1828.203948][ T323] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1828.210401][ T323] ALSA: mixer_oss: invalid OSS volume '5' [ 1828.216211][ T323] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1828.222622][ T323] ALSA: mixer_oss: invalid OSS volume '6' [ 1828.840243][ T329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4611'. [ 1828.896885][ T5932] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 1829.170108][ T5932] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 1829.204222][ T5932] usb 5-1: config 0 has no interface number 0 [ 1829.222599][ T5932] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1829.295436][ T5932] usb 5-1: config 0 interface 11 has no altsetting 0 [ 1829.342166][ T5932] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1830.347486][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.370790][ T5932] usb 5-1: config 0 descriptor?? [ 1830.387757][ T330] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1830.400086][ T330] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1831.416942][ T5932] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 1831.428117][ T5932] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 1831.444780][ T5932] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 1831.462059][ T5932] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 1832.496436][ T30] kauditd_printk_skb: 1135 callbacks suppressed [ 1832.496455][ T30] audit: type=1400 audit(1753469862.143:19310): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=349 comm="kworker/u8:38" name="/" dev="sda1" ino=2 [ 1832.507210][ T5932] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 1832.776615][ T5932] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 1832.797278][ T5932] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 1832.858809][T27214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1832.860718][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1832.866126][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1832.878530][ C0] audit: audit_lost=1976 audit_rate_limit=0 audit_backlog_limit=64 [ 1832.883790][ T26] audit: audit_lost=1977 audit_rate_limit=0 audit_backlog_limit=64 [ 1832.886459][ C0] audit: backlog limit exceeded [ 1832.899424][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1832.905964][ C0] audit: audit_lost=1978 audit_rate_limit=0 audit_backlog_limit=64 [ 1832.913922][ C0] audit: backlog limit exceeded [ 1832.934892][ T5932] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1832.984635][ T5932] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 1833.040762][ T5932] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 1833.081444][ T5932] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 1833.120735][ T5932] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 1833.151704][ T5932] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 1833.234393][ T5932] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 1833.264146][ T5932] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1833.306964][ T5932] usb 5-1: USB disconnect, device number 96 [ 1833.329647][ T5932] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1833.426727][ T5932] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1833.492457][ T5932] keyspan 5-1:0.11: device disconnected [ 1834.217960][ T5932] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1834.488126][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.547370][ T5932] usb 5-1: config 0 has no interfaces? [ 1834.669565][ T5932] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1834.682810][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.693758][ T5932] usb 5-1: Product: syz [ 1834.700848][ T5932] usb 5-1: Manufacturer: syz [ 1834.706382][ T5932] usb 5-1: SerialNumber: syz [ 1834.990199][ T5932] usb 5-1: config 0 descriptor?? [ 1835.220506][ T418] ALSA: mixer_oss: invalid OSS volume '' [ 1835.990320][T21326] usb 5-1: USB disconnect, device number 97 [ 1836.157918][ T6265] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1836.196868][ T432] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1837.766735][ T452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4630'. [ 1837.852212][ T453] audit_log_start: 2863 callbacks suppressed [ 1837.852231][ T453] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1837.867068][ T30] audit: type=1400 audit(1753469867.101:21691): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=448 comm="syz.4.4630" name="209" dev="tmpfs" ino=1137 [ 1838.035956][T20133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1838.056485][ T30] audit: type=1400 audit(1753469867.101:21692): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20133 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1838.057056][T20133] audit: audit_lost=2140 audit_rate_limit=0 audit_backlog_limit=64 [ 1838.075997][ T453] audit: audit_lost=2141 audit_rate_limit=0 audit_backlog_limit=64 [ 1838.091952][ T453] audit: backlog limit exceeded [ 1838.096925][ T30] audit: type=1400 audit(1753469867.101:21693): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20133 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1838.117362][ T453] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1838.124024][ T453] audit: audit_lost=2142 audit_rate_limit=0 audit_backlog_limit=64 [ 1838.619376][T10128] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 1839.058430][T10128] usb 7-1: config 0 has an invalid interface number: 11 but max is 0 [ 1839.101225][T10128] usb 7-1: config 0 has no interface number 0 [ 1839.135211][T10128] usb 7-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1839.217910][T10128] usb 7-1: config 0 interface 11 has no altsetting 0 [ 1839.255999][T10128] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1839.275789][T10128] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.310688][T10128] usb 7-1: config 0 descriptor?? [ 1839.317128][ T434] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1839.358725][ T434] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1839.966512][T10128] usb 7-1: can't set config #0, error -71 [ 1840.008141][T10128] usb 7-1: USB disconnect, device number 58 [ 1840.335289][ T499] ALSA: mixer_oss: invalid OSS volume '3' [ 1840.341910][ T499] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1840.348667][ T499] ALSA: mixer_oss: invalid OSS volume '4' [ 1840.354820][ T499] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1840.361923][ T499] ALSA: mixer_oss: invalid OSS volume '5' [ 1840.368449][ T499] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1840.377648][ T499] ALSA: mixer_oss: invalid OSS volume '6' [ 1840.625702][ T500] xt_hashlimit: overflow, rate too high: 0 [ 1842.556526][ T518] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1843.133566][T10128] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1843.145253][ T521] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1843.224149][ T30] kauditd_printk_skb: 1984 callbacks suppressed [ 1843.224168][ T30] audit: type=1400 audit(1753469872.180:23436): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26779 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1843.255184][T20133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1843.263043][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1843.263594][ T508] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1843.269610][ C0] audit: audit_lost=2223 audit_rate_limit=0 audit_backlog_limit=64 [ 1843.269635][ C0] audit: backlog limit exceeded [ 1843.270325][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1843.277643][T26779] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1843.284162][ C0] audit: audit_lost=2224 audit_rate_limit=0 audit_backlog_limit=64 [ 1843.284183][ C0] audit: backlog limit exceeded [ 1843.360419][T10128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.375637][T10128] usb 5-1: config 0 has no interfaces? [ 1843.619669][T10128] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1843.647230][T10128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.665444][T10128] usb 5-1: Product: syz [ 1843.669728][T10128] usb 5-1: Manufacturer: syz [ 1843.674357][T10128] usb 5-1: SerialNumber: syz [ 1843.793268][T10128] usb 5-1: config 0 descriptor?? [ 1844.405894][T21326] usb 5-1: USB disconnect, device number 98 [ 1847.500779][ T582] netlink: 'syz.1.4657': attribute type 21 has an invalid length. [ 1847.608186][ T582] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4657'. [ 1847.707751][ T582] netlink: 'syz.1.4657': attribute type 21 has an invalid length. [ 1847.716018][ T582] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4657'. [ 1848.310199][ T596] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4661'. [ 1848.596935][ T30] kauditd_printk_skb: 2549 callbacks suppressed [ 1848.596954][ T30] audit: type=1400 audit(1753469877.203:25503): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=593 comm="syz.7.4661" name="newroot" dev="tmpfs" ino=2 [ 1848.623240][ T30] audit: type=1400 audit(1753469877.203:25504): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=593 comm="syz.7.4661" name="/" dev="proc" ino=1 [ 1848.644884][ T30] audit: type=1400 audit(1753469877.231:25505): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=593 comm="syz.7.4661" name="/" dev="proc" ino=1 [ 1848.663942][ T30] audit: type=1400 audit(1753469877.231:25506): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=593 comm="syz.7.4661" name="688" dev="proc" ino=102679 [ 1848.683114][ T596] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4661'. [ 1848.692039][ T596] bond_slave_0: default FDB implementation only supports local addresses [ 1848.710840][ T30] audit: type=1400 audit(1753469877.231:25507): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=593 comm="syz.7.4661" name="ns" dev="proc" ino=101890 [ 1848.751944][T27214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1848.764557][T27214] audit: audit_lost=2387 audit_rate_limit=0 audit_backlog_limit=64 [ 1848.774587][T27214] audit: backlog limit exceeded [ 1848.780638][ T30] audit: type=1400 audit(1753469877.231:25508): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=593 comm="syz.7.4661" dev="nsfs" ino=4026533208 [ 1848.794616][T26488] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1849.202939][ T5932] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1849.628538][ T5932] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1849.861794][ T615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'. [ 1849.871046][ T615] netlink: 312 bytes leftover after parsing attributes in process `syz.4.4666'. [ 1849.880150][ T615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'. [ 1850.075241][ T5932] usb 3-1: config 0 has no interface number 0 [ 1850.296319][T11816] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1850.321651][ T5932] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1850.377433][ T5932] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1850.384661][ T5932] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1850.395561][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.657405][ T5932] usb 3-1: config 0 descriptor?? [ 1851.141139][ T637] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1852.572493][ T5932] usb 3-1: can't set config #0, error -71 [ 1852.588238][ T5932] usb 3-1: USB disconnect, device number 98 [ 1853.268445][T10128] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1853.810860][T10128] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1853.865036][T10128] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1853.888194][T10128] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1853.897507][T10128] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.937810][T10128] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1853.952736][ T30] kauditd_printk_skb: 2654 callbacks suppressed [ 1853.952753][ T30] audit: type=1400 audit(1753469882.217:27450): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=684 comm="syz.6.4680" name="newroot" dev="tmpfs" ino=2 [ 1853.962496][T10128] usb 5-1: config 1 has no interface number 1 [ 1854.387824][ T30] audit: type=1400 audit(1753469882.217:27451): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=684 comm="syz.6.4680" name="/" dev="devtmpfs" ino=1 [ 1854.407481][T10128] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1854.443417][T10128] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1854.485104][T10128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.520522][T26488] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1854.532153][T26779] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1854.539192][T10128] usb 5-1: Product: syz [ 1854.539565][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1854.549593][T26488] audit: audit_lost=2626 audit_rate_limit=0 audit_backlog_limit=64 [ 1854.549917][ C0] audit: audit_lost=2627 audit_rate_limit=0 audit_backlog_limit=64 [ 1854.560346][T26779] audit: audit_lost=2628 audit_rate_limit=0 audit_backlog_limit=64 [ 1854.565747][ C0] audit: backlog limit exceeded [ 1854.566227][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1854.604950][T10128] usb 5-1: Manufacturer: syz [ 1854.614323][T10128] usb 5-1: SerialNumber: syz [ 1854.699561][ T696] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1854.726169][ T696] CIFS mount error: No usable UNC path provided in device string! [ 1854.726169][ T696] [ 1854.909400][T10128] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1854.917896][T10128] usb 5-1: found format II with max.bitrate = 8, frame size=9 [ 1854.925753][T10128] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1854.949159][ T696] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1854.950539][T10128] usb 5-1: USB disconnect, device number 99 [ 1855.981482][ T730] ALSA: mixer_oss: invalid OSS volume '' [ 1859.225428][ T9] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 1859.290467][ T755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.312362][ T30] kauditd_printk_skb: 1974 callbacks suppressed [ 1859.312383][ T30] audit: type=1326 audit(1753469887.230:28900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=746 comm="syz.2.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f731658e9a9 code=0x7ffc0000 [ 1859.375943][ T755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.472072][ T30] audit: type=1326 audit(1753469887.230:28901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=746 comm="syz.2.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7316585967 code=0x7ffc0000 [ 1859.500929][ T735] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1859.510674][T27178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1859.517870][T27178] audit: audit_lost=2804 audit_rate_limit=0 audit_backlog_limit=64 [ 1859.525821][T27178] audit: backlog limit exceeded [ 1859.552436][ T30] audit: type=1326 audit(1753469887.230:28902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=746 comm="syz.2.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f731652ab89 code=0x7ffc0000 [ 1859.553732][ T735] audit: audit_lost=2805 audit_rate_limit=0 audit_backlog_limit=64 [ 1859.597041][ T1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1859.607801][ T759] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1860.453968][T28608] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.618473][T28608] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.688447][T28608] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.820312][T28608] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.940134][T28608] bridge_slave_1: left allmulticast mode [ 1860.945895][T28608] bridge_slave_1: left promiscuous mode [ 1860.951595][T28608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.961172][T28608] bridge_slave_0: left allmulticast mode [ 1860.966907][T28608] bridge_slave_0: left promiscuous mode [ 1860.972596][T28608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.384961][T28608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1861.397696][T28608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1861.414524][T28608] bond0 (unregistering): Released all slaves [ 1861.716245][T28608] hsr_slave_0: left promiscuous mode [ 1861.722265][T28608] hsr_slave_1: left promiscuous mode [ 1861.732824][T28608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1861.745989][T28608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1861.758803][T28608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1861.766243][T28608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1861.798317][T28608] veth1_macvtap: left promiscuous mode [ 1861.808139][T28608] veth0_macvtap: left promiscuous mode [ 1861.814662][T28608] veth1_vlan: left promiscuous mode [ 1861.820046][T28608] veth0_vlan: left promiscuous mode [ 1862.307056][T28608] team0 (unregistering): Port device team_slave_1 removed [ 1862.354576][T28608] team0 (unregistering): Port device team_slave_0 removed [ 1863.315964][T28608] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.383931][T28608] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.458202][T28608] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.537947][T28608] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.698840][T28608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.815972][T28608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.884653][T28608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.985065][T28608] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1864.020543][T28608] team0: Port device macvlan2 removed [ 1864.035859][T28608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.195728][T28608] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.292314][T28608] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.388713][T28608] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.492703][T28608] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.661589][T28608] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.760187][T28608] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.854758][T28608] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.932318][T28608] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.016805][ T30] kauditd_printk_skb: 592 callbacks suppressed [ 1865.016826][ T30] audit: type=1400 audit(1753469892.553:29235): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=846 comm="kworker/u8:9" name="/" dev="sda1" ino=2 [ 1865.044858][ T30] audit: type=1400 audit(1753469892.562:29236): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=847 comm="kworker/u8:53" name="/" dev="sda1" ino=2 [ 1865.066497][ T30] audit: type=1400 audit(1753469892.590:29237): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=850 comm="kworker/u8:10" name="/" dev="sda1" ino=2 [ 1865.086227][ T30] audit: type=1400 audit(1753469892.590:29238): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=851 comm="kworker/u8:10" name="/" dev="sda1" ino=2 [ 1865.089405][T28608] bridge_slave_1: left allmulticast mode [ 1865.111144][ T30] audit: type=1400 audit(1753469892.590:29239): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=848 comm="kworker/u8:53" name="/" dev="sda1" ino=2 [ 1865.112788][T28608] bridge_slave_1: left promiscuous mode [ 1865.130590][ T30] audit: type=1400 audit(1753469892.590:29240): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=849 comm="kworker/u8:10" name="/" dev="sda1" ino=2 [ 1865.136166][T28608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.162962][ T30] audit: type=1400 audit(1753469892.609:29241): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=853 comm="kworker/u8:10" name="/" dev="sda1" ino=2 [ 1865.183144][ T30] audit: type=1400 audit(1753469892.609:29242): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=852 comm="kworker/u8:53" name="/" dev="sda1" ino=2 [ 1865.183597][T28608] bridge_slave_0: left allmulticast mode [ 1865.207795][ T30] audit: type=1400 audit(1753469892.618:29243): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=854 comm="kworker/u8:53" name="/" dev="sda1" ino=2 [ 1865.212132][T28608] bridge_slave_0: left promiscuous mode [ 1865.226819][ T30] audit: type=1400 audit(1753469892.628:29244): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=856 comm="kworker/u8:9" name="/" dev="sda1" ino=2 [ 1865.237500][T28608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.265715][T28608] bridge0: port 3(batadv0) entered disabled state [ 1865.279063][T28608] bridge_slave_1: left allmulticast mode [ 1865.284952][T28608] bridge_slave_1: left promiscuous mode [ 1865.290679][T28608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.302103][T28608] bridge_slave_0: left allmulticast mode [ 1865.308149][T28608] bridge_slave_0: left promiscuous mode [ 1865.313866][T28608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.326900][T28608] bridge_slave_1: left allmulticast mode [ 1865.332901][T28608] bridge_slave_1: left promiscuous mode [ 1865.342359][T28608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.352463][T28608] bridge_slave_0: left allmulticast mode [ 1865.358137][T28608] bridge_slave_0: left promiscuous mode [ 1865.364151][T28608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.956825][T28608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1865.968120][T28608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1865.978618][T28608] bond0 (unregistering): Released all slaves [ 1866.291432][T28608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1866.303255][T28608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1866.314330][T28608] bond0 (unregistering): (slave team0): Releasing backup interface [ 1866.326108][T28608] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1866.336414][T28608] bond0 (unregistering): Released all slaves [ 1866.517130][T28608] bond1 (unregistering): (slave wlan0): Releasing active interface [ 1866.525369][T28608] vlan2: entered promiscuous mode [ 1866.535635][T28608] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1866.545589][T28608] bond1 (unregistering): Released all slaves [ 1866.935330][T28608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1866.946509][T28608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1866.957576][T28608] bond0 (unregistering): Released all slaves [ 1866.971878][T28608] bond1 (unregistering): Released all slaves [ 1867.360353][T28608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1867.373587][T28608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1867.383920][T28608] bond0 (unregistering): Released all slaves [ 1867.512984][T28608] bond1 (unregistering): (slave vlan3): Releasing active interface [ 1867.524796][T28608] bond1 (unregistering): Released all slaves [ 1867.651212][T28608] bond2 (unregistering): (slave batadv_slave_1): Releasing active interface [ 1867.661744][T28608] bond2 (unregistering): Released all slaves [ 1867.840187][T28608] tipc: Left network mode [ 1867.855716][T28608] tipc: Disabling bearer [ 1867.869333][T28608] tipc: Left network mode [ 1867.930092][T28608] tipc: Left network mode [ 1868.108784][T28608] ------------[ cut here ]------------ [ 1868.114484][T28608] WARNING: CPU: 1 PID: 28608 at net/ipv6/route.c:4856 rt6_multipath_rebalance+0x455/0x8b0 [ 1868.124419][T28608] Modules linked in: [ 1868.128561][T28608] CPU: 1 UID: 0 PID: 28608 Comm: kworker/u8:0 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1868.140824][T28608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1868.150911][T28608] Workqueue: netns cleanup_net [ 1868.155723][T28608] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 1868.162023][T28608] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 6d 6f 02 f8 e9 78 fe ff ff e8 b3 88 a2 f7 eb 05 e8 ac 88 a2 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 1868.181668][T28608] RSP: 0018:ffffc90002e36d80 EFLAGS: 00010293 [ 1868.187750][T28608] RAX: ffffffff8a1d9d0d RBX: ffff888055cee000 RCX: ffff88807d460000 [ 1868.195775][T28608] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1868.203777][T28608] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1868.211758][T28608] R10: dffffc0000000000 R11: fffff520005c6da8 R12: ffff888055cee0de [ 1868.219757][T28608] R13: ffff888055cee090 R14: 0000000000000000 R15: 1ffff1100ab9dc12 [ 1868.227760][T28608] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 1868.236721][T28608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1868.243316][T28608] CR2: 0000560c45811000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1868.251346][T28608] Call Trace: [ 1868.254650][T28608] [ 1868.257643][T28608] fib6_ifdown+0x401/0x4c0 [ 1868.262097][T28608] ? __pfx_fib6_ifdown+0x10/0x10 [ 1868.267156][T28608] fib6_clean_node+0x24a/0x590 [ 1868.271954][T28608] ? __pfx_fib6_clean_node+0x10/0x10 [ 1868.277259][T28608] ? __lock_acquire+0xab9/0xd20 [ 1868.282152][T28608] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1868.287651][T28608] fib6_walk_continue+0x678/0x910 [ 1868.292765][T28608] fib6_walk+0x149/0x290 [ 1868.297031][T28608] __fib6_clean_all+0x234/0x380 [ 1868.301916][T28608] ? __fib6_clean_all+0x9b/0x380 [ 1868.306867][T28608] ? __pfx_fib6_ifdown+0x10/0x10 [ 1868.311858][T28608] ? __pfx___fib6_clean_all+0x10/0x10 [ 1868.317243][T28608] ? __pfx_fib6_clean_node+0x10/0x10 [ 1868.322554][T28608] ? __pfx_fib6_ifdown+0x10/0x10 [ 1868.327519][T28608] rt6_disable_ip+0x120/0x720 [ 1868.332242][T28608] ? rcu_is_watching+0x15/0xb0 [ 1868.337039][T28608] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1868.342312][T28608] addrconf_ifdown+0x15d/0x1880 [ 1868.347212][T28608] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1868.352901][T28608] ? __pfx___mutex_lock+0x10/0x10 [ 1868.357958][T28608] ? tls_dev_event+0x717/0xec0 [ 1868.362735][T28608] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1868.368061][T28608] addrconf_notify+0x1bc/0x1010 [ 1868.373026][T28608] notifier_call_chain+0x1b3/0x3e0 [ 1868.378212][T28608] dev_close_many+0x29c/0x410 [ 1868.382963][T28608] ? __lock_acquire+0xab9/0xd20 [ 1868.387845][T28608] ? __pfx_dev_close_many+0x10/0x10 [ 1868.393059][T28608] ? __mutex_trylock_common+0x153/0x260 [ 1868.398638][T28608] netif_close+0x158/0x210 [ 1868.403070][T28608] ? __pfx_netif_close+0x10/0x10 [ 1868.408076][T28608] ? rcu_is_watching+0x15/0xb0 [ 1868.412858][T28608] ? trace_contention_end+0x39/0x120 [ 1868.418206][T28608] ? __mutex_lock+0x330/0xe80 [ 1868.422919][T28608] dev_close+0x10a/0x220 [ 1868.427264][T28608] cfg80211_shutdown_all_interfaces+0xbb/0x1d0 [ 1868.433460][T28608] ieee80211_remove_interfaces+0x109/0x6d0 [ 1868.439304][T28608] ? __pfx_synchronize_rcu+0x10/0x10 [ 1868.444636][T28608] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1868.450600][T28608] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1868.456973][T28608] ? rcu_is_watching+0x15/0xb0 [ 1868.461788][T28608] ieee80211_unregister_hw+0x5d/0x2c0 [ 1868.467188][T28608] mac80211_hwsim_del_radio+0x275/0x460 [ 1868.472775][T28608] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1868.478874][T28608] hwsim_exit_net+0x584/0x640 [ 1868.483612][T28608] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1868.488833][T28608] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1868.494679][T28608] ops_undo_list+0x49a/0x990 [ 1868.499289][T28608] ? __pfx_ops_undo_list+0x10/0x10 [ 1868.504437][T28608] cleanup_net+0x4c5/0x800 [ 1868.508868][T28608] ? __pfx_cleanup_net+0x10/0x10 [ 1868.513851][T28608] ? _raw_spin_unlock_irq+0x23/0x50 [ 1868.519058][T28608] ? process_scheduled_works+0x9ef/0x17b0 [ 1868.524801][T28608] ? process_scheduled_works+0x9ef/0x17b0 [ 1868.530530][T28608] process_scheduled_works+0xade/0x17b0 [ 1868.536122][T28608] ? __pfx_process_scheduled_works+0x10/0x10 [ 1868.542186][T28608] worker_thread+0x8a0/0xda0 [ 1868.546825][T28608] kthread+0x70e/0x8a0 [ 1868.550908][T28608] ? __pfx_worker_thread+0x10/0x10 [ 1868.556051][T28608] ? __pfx_kthread+0x10/0x10 [ 1868.560677][T28608] ? _raw_spin_unlock_irq+0x23/0x50 [ 1868.565936][T28608] ? lockdep_hardirqs_on+0x9c/0x150 [ 1868.571188][T28608] ? __pfx_kthread+0x10/0x10 [ 1868.575803][T28608] ret_from_fork+0x3fc/0x770 [ 1868.580444][T28608] ? __pfx_ret_from_fork+0x10/0x10 [ 1868.585577][T28608] ? __switch_to_asm+0x39/0x70 [ 1868.590411][T28608] ? __switch_to_asm+0x33/0x70 [ 1868.595193][T28608] ? __pfx_kthread+0x10/0x10 [ 1868.599830][T28608] ret_from_fork_asm+0x1a/0x30 [ 1868.604623][T28608] [ 1868.607683][T28608] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1868.614977][T28608] CPU: 1 UID: 0 PID: 28608 Comm: kworker/u8:0 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1868.627218][T28608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1868.637279][T28608] Workqueue: netns cleanup_net [ 1868.642072][T28608] Call Trace: [ 1868.645359][T28608] [ 1868.648299][T28608] dump_stack_lvl+0x99/0x250 [ 1868.652950][T28608] ? __asan_memcpy+0x40/0x70 [ 1868.657558][T28608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1868.662767][T28608] ? __pfx__printk+0x10/0x10 [ 1868.667375][T28608] panic+0x2db/0x790 [ 1868.671302][T28608] ? __pfx_panic+0x10/0x10 [ 1868.675727][T28608] ? show_trace_log_lvl+0x4fb/0x550 [ 1868.680942][T28608] ? ret_from_fork_asm+0x1a/0x30 [ 1868.685892][T28608] __warn+0x31b/0x4b0 [ 1868.689880][T28608] ? rt6_multipath_rebalance+0x455/0x8b0 [ 1868.695526][T28608] ? rt6_multipath_rebalance+0x455/0x8b0 [ 1868.701166][T28608] report_bug+0x2be/0x4f0 [ 1868.705499][T28608] ? rt6_multipath_rebalance+0x455/0x8b0 [ 1868.711140][T28608] ? rt6_multipath_rebalance+0x455/0x8b0 [ 1868.716803][T28608] ? rt6_multipath_rebalance+0x457/0x8b0 [ 1868.722439][T28608] handle_bug+0x84/0x160 [ 1868.726691][T28608] exc_invalid_op+0x1a/0x50 [ 1868.731252][T28608] asm_exc_invalid_op+0x1a/0x20 [ 1868.736117][T28608] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 1868.742384][T28608] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 6d 6f 02 f8 e9 78 fe ff ff e8 b3 88 a2 f7 eb 05 e8 ac 88 a2 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 1868.762005][T28608] RSP: 0018:ffffc90002e36d80 EFLAGS: 00010293 [ 1868.768076][T28608] RAX: ffffffff8a1d9d0d RBX: ffff888055cee000 RCX: ffff88807d460000 [ 1868.776077][T28608] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1868.784070][T28608] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1868.792051][T28608] R10: dffffc0000000000 R11: fffff520005c6da8 R12: ffff888055cee0de [ 1868.800030][T28608] R13: ffff888055cee090 R14: 0000000000000000 R15: 1ffff1100ab9dc12 [ 1868.808032][T28608] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 1868.813698][T28608] fib6_ifdown+0x401/0x4c0 [ 1868.818130][T28608] ? __pfx_fib6_ifdown+0x10/0x10 [ 1868.823084][T28608] fib6_clean_node+0x24a/0x590 [ 1868.827865][T28608] ? __pfx_fib6_clean_node+0x10/0x10 [ 1868.833192][T28608] ? __lock_acquire+0xab9/0xd20 [ 1868.838058][T28608] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1868.843448][T28608] fib6_walk_continue+0x678/0x910 [ 1868.848509][T28608] fib6_walk+0x149/0x290 [ 1868.852763][T28608] __fib6_clean_all+0x234/0x380 [ 1868.857627][T28608] ? __fib6_clean_all+0x9b/0x380 [ 1868.862605][T28608] ? __pfx_fib6_ifdown+0x10/0x10 [ 1868.867557][T28608] ? __pfx___fib6_clean_all+0x10/0x10 [ 1868.872971][T28608] ? __pfx_fib6_clean_node+0x10/0x10 [ 1868.878301][T28608] ? __pfx_fib6_ifdown+0x10/0x10 [ 1868.883276][T28608] rt6_disable_ip+0x120/0x720 [ 1868.887991][T28608] ? rcu_is_watching+0x15/0xb0 [ 1868.892788][T28608] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1868.898014][T28608] addrconf_ifdown+0x15d/0x1880 [ 1868.902960][T28608] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1868.908608][T28608] ? __pfx___mutex_lock+0x10/0x10 [ 1868.913641][T28608] ? tls_dev_event+0x717/0xec0 [ 1868.918409][T28608] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1868.923717][T28608] addrconf_notify+0x1bc/0x1010 [ 1868.928583][T28608] notifier_call_chain+0x1b3/0x3e0 [ 1868.933712][T28608] dev_close_many+0x29c/0x410 [ 1868.938485][T28608] ? __lock_acquire+0xab9/0xd20 [ 1868.943433][T28608] ? __pfx_dev_close_many+0x10/0x10 [ 1868.948643][T28608] ? __mutex_trylock_common+0x153/0x260 [ 1868.954195][T28608] netif_close+0x158/0x210 [ 1868.958613][T28608] ? __pfx_netif_close+0x10/0x10 [ 1868.963609][T28608] ? rcu_is_watching+0x15/0xb0 [ 1868.968380][T28608] ? trace_contention_end+0x39/0x120 [ 1868.973691][T28608] ? __mutex_lock+0x330/0xe80 [ 1868.978401][T28608] dev_close+0x10a/0x220 [ 1868.982676][T28608] cfg80211_shutdown_all_interfaces+0xbb/0x1d0 [ 1868.988846][T28608] ieee80211_remove_interfaces+0x109/0x6d0 [ 1868.994661][T28608] ? __pfx_synchronize_rcu+0x10/0x10 [ 1868.999955][T28608] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1869.005864][T28608] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1869.012190][T28608] ? rcu_is_watching+0x15/0xb0 [ 1869.016965][T28608] ieee80211_unregister_hw+0x5d/0x2c0 [ 1869.022351][T28608] mac80211_hwsim_del_radio+0x275/0x460 [ 1869.027903][T28608] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1869.033986][T28608] hwsim_exit_net+0x584/0x640 [ 1869.038676][T28608] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1869.043885][T28608] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1869.049702][T28608] ops_undo_list+0x49a/0x990 [ 1869.054303][T28608] ? __pfx_ops_undo_list+0x10/0x10 [ 1869.059449][T28608] cleanup_net+0x4c5/0x800 [ 1869.063873][T28608] ? __pfx_cleanup_net+0x10/0x10 [ 1869.068826][T28608] ? _raw_spin_unlock_irq+0x23/0x50 [ 1869.074038][T28608] ? process_scheduled_works+0x9ef/0x17b0 [ 1869.079790][T28608] ? process_scheduled_works+0x9ef/0x17b0 [ 1869.085527][T28608] process_scheduled_works+0xade/0x17b0 [ 1869.091106][T28608] ? __pfx_process_scheduled_works+0x10/0x10 [ 1869.097124][T28608] worker_thread+0x8a0/0xda0 [ 1869.101751][T28608] kthread+0x70e/0x8a0 [ 1869.105830][T28608] ? __pfx_worker_thread+0x10/0x10 [ 1869.110957][T28608] ? __pfx_kthread+0x10/0x10 [ 1869.115567][T28608] ? _raw_spin_unlock_irq+0x23/0x50 [ 1869.120763][T28608] ? lockdep_hardirqs_on+0x9c/0x150 [ 1869.125959][T28608] ? __pfx_kthread+0x10/0x10 [ 1869.130558][T28608] ret_from_fork+0x3fc/0x770 [ 1869.135242][T28608] ? __pfx_ret_from_fork+0x10/0x10 [ 1869.140361][T28608] ? __switch_to_asm+0x39/0x70 [ 1869.145139][T28608] ? __switch_to_asm+0x33/0x70 [ 1869.149905][T28608] ? __pfx_kthread+0x10/0x10 [ 1869.154509][T28608] ret_from_fork_asm+0x1a/0x30 [ 1869.159301][T28608] [ 1869.162707][T28608] Kernel Offset: disabled [ 1869.167043][T28608] Rebooting in 86400 seconds..