last executing test programs: 3m28.193014232s ago: executing program 2 (id=4664): r0 = open(&(0x7f00000002c0)='./file1\x00', 0x91000, 0xa6) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e3, &(0x7f0000000000)) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f00001ab000/0x1000)=nil, &(0x7f0000a8c000/0xc000)=nil, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0xe4, 0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88440, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x3, 0x4002004c4, 0x4000001004, 0x0, 0x7, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x3003d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x7f, 0x10, 0x2, 0xea, 0x65, "96c3a8bba55608120f82d51948db496958f106", 0xa8, 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a040, 0x43c33}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}}, 0x14) sendto$inet(r7, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) exit(0x8000) openat(r6, &(0x7f00000003c0)='./file0/file0\x00', 0x48080, 0x0) 3m25.661650715s ago: executing program 2 (id=4683): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000840)={0x0, 0xf, 0x6, "428a7482a325"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\a\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_settime(0xa, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x94, &(0x7f0000000040)={0x20, 0x7, 0x1, "aea4b23f4cb6410d7f63"}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, &(0x7f0000002440)={0x0, 0x0, 0x0, @raw}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000240)={0x13, 0x10, 0x7, {0x0, r3, 0x3}}, 0x18) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x94, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) syz_usb_connect$cdc_ecm(0x0, 0x162, &(0x7f0000000880)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x150, 0x1, 0x1, 0x0, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x6, {{0xa, 0x24, 0x6, 0x0, 0x0, "b17aecba6e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x300, 0x7, 0x2d20, 0xb}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x5b37}, @mdlm_detail={0xfc, 0x24, 0x13, 0x8, "464d956601b923a23183e6f2f551b5c932dff6aa128a2e17bd48b39dd1a0cb55d3836fa6c329b8d14c140fb89d98e9a08e67c4000deec56952902a69c11981db1375a7323e0cf4b90550aa0e4704b867ef8424cffada6b648f10f00c13be2a3213777cf42216851a29f1e0f05f9fa23a0c7d4cc0c78de4ba86ddf162f311e67abdd910fa7c95dc5349fb31f0507667bb4764b1a3e0695f001e655795b0375aef8cb162c5569a32a11c04ac5b253fa748edc997e5067d00e6fc4d7dff97e93709d197bf8f8e6510292c9e681b2ea237c5cb0e8e016e1395bec029d714d4132e5cfeb6d38d93f26942d5334f8ab89995c1deebededbaca99e3"}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xe0, 0x2, 0x10}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3d, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x20, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x4, 0xf2, 0x40, 0x10, 0x5d}, 0x19, &(0x7f0000000a40)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xc9, "cd7d69eab9e026a4f37c353c78e8d89d"}]}, 0x8, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x440a}}, {0x2c, &(0x7f0000000b00)=@string={0x2c, 0x3, "3ed8f8a38852ae4c073a38191d858400cb435d5f663f0c02e15215f1ac76c395752ac55ddfa496854236"}}, {0x76, &(0x7f0000000b40)=@string={0x76, 0x3, "72ed8cc95f2452190ce4f8e164cd81c0400c38ee99ea5ccc6048f01a887b8137c37fef15dcef3db8fd439890ecb98e65a6cea0471fed129f17b3a54455bcdbf10e3d573d2b0b9a58a169f4c81bc9e9673a92b31da26e1c44d99a607966691fdb40fd9f353b59b71541d734e856dd9172ca68f701"}}, {0xfe, &(0x7f0000000bc0)=@string={0xfe, 0x3, "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"}}, {0xe3, &(0x7f0000000cc0)=@string={0xe3, 0x3, "a34345477d159dba49df3d0b303e296370ac567e42957357b57a5ac88016dd16ee0bf3e14688e89cba3e385d2c7bcdde9629261263ac3fce9b9659d01375794ae72eee3b0a0b3cd8bbf26038476442dd35790cacfdaad6ab81e5431faca8455b3e58a516517e17f52c8e52b59ca408ee8b8357e1c20bf9169f64f716fa10d39ae06307d43e2b6a34e1f690c2dc836612cf46179660a8b4d9c0812763fe48a03ed38a756139e35040094ca0c4144437f1f4174df5aa3510d1d2ef7bf8ed5d665582e495fd9f1360497d33f82dc6e2d743a44bf339f39b639b8a3267453481b21148"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0xfcff}}, {0x6e, &(0x7f0000000e40)=@string={0x6e, 0x3, "0548e868d53e4ac206431d28c387b2779ffdf582b0410bc7593d34710832aab922093cd332010c7a4489e9275cf942dd401716f0ac3a1d8781940cb885d41b6e7e7fe2d30eaa30f0232f6d5cdbcb49c0a678f6a28d7c83887fcc3bcc942aca8bbb211b1644189b7d0641b3f3"}}]}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000140)=0x80000000, 0x4) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m21.052286832s ago: executing program 2 (id=4706): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000ffffffffffffab5600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 3m20.913460046s ago: executing program 2 (id=4707): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x803c, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x1000000, 0x80c, 0x3, 0x1c, 0x7, 0x0, 0x10, 0x7, 0xe9, 0x9, 0x9, 0x4, 0x6}, {0x8, 0xcd5a, 0xa, 0x97, 0xd, 0xf2, 0x13, 0x8, 0x7, 0x2, 0x44, 0x79, 0x100003fffffffffa}, {0x7fffffff, 0x18, 0x5, 0xff, 0x2, 0x9, 0x8, 0xf8, 0x5, 0x8, 0x6, 0x3}], 0x800000}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@delqdisc={0xf0, 0x25, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0x0, 0x8}, {0x4, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_gred={{0x9}, {0x64, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x6, 0x2, 0x3, 0x9, 0xbce, 0x5, 0x9, 0x10, 0x1, 0x18, 0xb, 0x11, 0x7, 0x3ff, 0x6}}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0xd, 0x0, 0x7}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x3}, @TCA_GRED_DPS={0x10, 0x3, {0x5, 0x1, 0x0, 0x6}}]}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8, 0xcc, 0x80000001, 0xf4, 0x5}, 0x7f, 0x1, 0x6, 0x9, 0xbba, 0xa, 0x1b, 0x1d, 0x1, 0x401, {0x9, 0x6, 0x9, 0x5, 0x3570, 0x4}}}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000880}, 0x20008004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x50}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x24}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xfffffffffffffea3}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}, 0x600}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="040404000000000000"], 0xd) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0x1, @sliced={0x1, [0xfc00, 0x1, 0x7f, 0xef, 0x3, 0xde, 0x4c59, 0x5, 0x3, 0x8, 0x0, 0x1, 0x8, 0xd92, 0x4c1, 0xb0, 0x8000, 0x6, 0x57e, 0xd83, 0x4, 0xfff, 0x8, 0x42, 0x8, 0x7, 0xf6, 0xf801, 0x2, 0x6, 0x6, 0x1, 0x2, 0x9, 0x7, 0x4, 0x1b, 0x2, 0x9, 0x7f, 0x2, 0x0, 0x2, 0xff, 0xa162, 0x6, 0x2, 0x8], 0x6}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg(r6, &(0x7f0000002b00)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @rand_addr=0x64010102}, 0xfffffffe, 0x0, 0x2, 0x1}}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000003c0)="4f86ff3445c5ce7519b163065db8600b24be60eaa2405fa8c26d2b77784f2880143598a66e7c5249b872b2cc427d7965b289d9543741122e4950bc784dfd482cb142ea25ea746073f5ccbca85d67747843c6f808fb059dab9ec0a5ff371943aba247ee36a9f01fae3e08e957f60474823b3c52dcbc568c8f387f8060e14be558ea21e1dd995d26f804102eff9e08b13973f3ba", 0x93}, {&(0x7f00000005c0)="b109e281f9ddae2bf533dc0ef51902b9a1028d27252e6290480876a787b42c2136feddb1fcbc0ba0ce40b94032b6addb2cdd75df32c20b3d2cd79ff3b62983a4bc0acbfd10c3b39e18bd7d7790127e8fbb2609faf2d91d5ceb6600e3f009d817acffd0d9839993e327c198f541e4c4017cff0df09f63a5a978a963e082702f0c091b997c2821fa8f284eef4ae6e5a18119bcfb3760ab9deeceb44bf4c60bbb6032400c8ee080440f5ec8db4a73fd976d3d9ae327d4c0263161295ed3a14ad390713b34f667b3c63d", 0xc8}, {0x0}, {&(0x7f00000018c0)="e0a71d8d91250e4d4e54bf2e5e7cf82700c6f760a218f1472dc5429f0be732755154aef65ec1c2ce3802d309bb2c9d8486683369e99f8da0d722c9cbe8c609e1a373bafc7eaf3d4b0795165d6195bde2f8f8e2d12c392c6ecd4acc560ed1b1391c4c593c94a65a33f46e89058686bb11ece1038a815f44cee6676893337a69a628530099", 0x84}, {&(0x7f0000000a00)="7337b9db79af8c16c852adfcca48d46624532e9339001fe7d10960b38436bc86cde92004742d142c2f1b0db24ce7dec9dba066598e5faabd7bf2569fd3d5e6cfda29d14b532b8b9b832dff000000009060acbe30cf7ec736c25032508668a6d78cddd84f7a5b99e14e27451b8988ff7e162ea079a9935c0971f3977560f31c4d06c27ea9532c811a4a95a45bbba54ea285de65dce0f2e193be1f876d67360e", 0x9f}, {&(0x7f0000001a40)="ea8585f31ad9e3544c0819d537369e594c0ab70cf8ebe8921e205ab8101dc7d485bb398d23e90ddde292036d224852d5d4035f850ac46d4a25cd9e8732ed3698761d91f442a396d0a0e1852035d9062d894edd40199d91699b5d82a4a7f205f743216ae2e5ad0835ecaabe176f313af8046fae600edb193e242ef2aa102f68e85d3d4cce97f48fe5393e54b3a87d8b21011452bfcad2ff8e23c2538de27764c43735060895faf051ebb68e170088f88c09d02a205dddc7c47cf027844221459b171622f1f4680fdffd2d5f72eb8ed42fd672363a50dd64fcde36f1efdf189270ec320fd7898f5af3ce3f83efea8b2578d98af16b74801973ccfc64173d4df82b0cafb53c258217146ed50547b4f43d98f885b089e00ff981b4315f3df7905b395ee935411be1a5a756f31c4483dd854669177c0df746b0528bf59e5892d138c92421883f2d2752fe6f331aecdbf11c94156f4591bb390338e99128b2e677781114bbc42f95c893ef2a5e2cbaa77afbc123e0a5f04a1917f1d4794b953938fc23be0e5152d3c9d897ed6179f93f278cc97e1b1f44c779c5bc1e66ad22fe74d49af2b34d6e0b230e94347df547fc6c7deb4af247f2ea988571b12f84757f681b2c06737653745e7677f00e645f3d1f9bf5272edf749ef13257b36451b2a17ec8d54fbe44409a04629bb86504db10e38cbf8418622ae53bdc42d1981a2456431a84239706e4c11454ee5a9bd68ee888a123b7a733e33caf9a8101fe13b206e5c3bb5f2e4701bb319561288bbd3d16470ab6d23f375c87366b2ea6d50a4ae5fd8618a2728970a46ca7a36ed8fc61d73b25e54b3f6b1ee488e3f84d11b9f84dae40061a9b625f6b9e8d5041036660e884d1c51bcbc7bc1a7d5ab10f84163cd86e4e817c5c6ec9da58f7f984d7e76dde8b0ed1261e945c174113fd648ce9abe775c003e70f1061e75e4a659da387e2fb04a15de9cff3670b9c8daaf1b7229c3a0163c00cb5d52ca0f2cd721b6f47f3a6ba61209bb5d3852f8d9c9ba5e3b9748ea608f93273fd77692ed66c950818fa2f2da0c9e9a17d0e129a92855d0bf2e75374a7c4f58a20f724d58dc7f860b01bad4ed024544db863c189d8d0df822019af2e24b83ad998274b4b8e98ae6071ff40db14992e966997de202d73981a7b9d56a8b7f6e8e217c0ebe129396e2ac4f5d50a7660a394ddfdf0bee073a0d3f03aafd0673194007c91a0fc9d51ce52596ded8a46398bcb25436e64204281a0405ef043bd2fae510de39dc024b1a52bc99a1a5db5b798f96a650f8baa82ef222f793f165533f2ae5ec184694083317f79c49d030ad5732ca1cb9beb9634f7c5566d5a7416b519adff882f9f8bb7081d72c91736c386a1b1a52046b7e4a2eb6705802ca2dd202eec07a74f07258afd1fdcf89c1b6f861451b8c4f12feaf4d2432b166f04c7927c370f8932202ec6025353ef53d05ff2b73c7d0a90aa473ef77cd53083c97ad797cba02cc23801c9df43e15d394a244be7194d37197da341fc0013137e09b1635772d6039c40bce5d89cf58b80e2683c0f4b0cfcfcc723fbd2894e1b39ef8f99f8a9789f1145ad3b0e7661d9c350f31ed9c8e3b8403b7d9f50e1046053b146a568d3cce07403c649cd3fde56a6fbfa906fe6ae941909efcb86b075ae97a176572a22690ed2b72e195bec8407b565fca0725ecc424a67628d95ea78c673dd092470d58b0c6a293cd7375e263ef12b393281e16919068a509b3c1e594a3866b73fe30f7a80783eb06879d2d4e30c3a74033ec2481fe862048a16e6cac36d5c1f579624b3a0223b9588985925261b1061b162709e1b25bfca207e24f08df1b7906ba78c691dfd5e1c63ad3e707beae5e9168c6b51cfba5fd3a7ac98b87003414357bfe491b766efe9394a14fa43401ed29b04d581e89e2ec519f1cb8448ff28a75ec62f4231d2898f1c5b83a4fc690913e3e6b10d3929ea158cbd2e901007e7092ef772f02f04ced32bffc1e1453c674b743cd16baa01a1775e6348dc34ff5df2e37286a6997643435df54ba54bb90d0119eb081f5acdb32aceec4b2633d71d9791a1eff06d3ee7b930dfef586550b91695ef9519fa718a6bbe7878bd1682ae5be8838ec407da2a3bf6c605b873a7ed1e50394d758a0b23c0a08ba94c14fa616d67b29c84cc8829e5350a90aa67c77831928338f04e8cb9708c4eeec67f9a32c67b5e62f9cebab177d33df0ee08c3b43e321c4dadb0d4e10008cab2bf9c1ec70518029412a0d6e0e9d0c68990558c73c858a978a982e651e4bb7c752b694708b14fd2145eb409ccf5c86d44bad7195e1b5e9a4439d2db1ac7869831b328c5e4e0abaf87ddcf712bb3f5d09f8cc95b2c33f04845a909aca710cf2b13d55f4eedcba2e712d507eabd8750fb59d45d176899012e7e83a3619a3e15e74466de3b48a6fac363a8319f7aee38454d24e984cb3b705985a730a8bb860912e44fab16975f7f69bb768efd37d339fd56ce63117d3fcace3122de11c9f6c2a73cb44f141e454972a25c48413a3c1c8c0fb1027af602e0c57fdfce34eab67b2082561d45d09da2680f445a77c891a7eb742db8abd364485cc87bff580b4cb3f1973a276e7bf4214297cd25ee85497ada9f95cbd792cb44db4bb3fb03db6b00b6914dfeb1abcb5f7d5c18cbbd7bd97c15a19c467aa8b914c0702f8474d4ed73ed5dd2ac8faacac2eb04623730f77d74c409ac9d0eaefa6d160057982f45d2608d8910900b9f84f3d4d9fc0ff895e05be42656157e2188d07869fb7335b0d7781b7fa2d386bec6603070af562cf1b69a988c40d0e84e2c8dabd09dd21bb507ac67d65e2cd18df932e249b4acff7be686cbf32a8c13610c9b50d466783075963782da8bcec00360b15175cb99215427eb0d4c876d5c1638315192fc29fc6b092867b243881f1187a3cfb6ec1db6ed1b966a78e8a7d75c668d388109b6e4e3860a1fa88ab06706bbe8d721d0562a930113b9aa0be2148ccb2d6eb721d849af25d52327b4902d44f97de05f183c24e811759061f91476e33d4e976daba4852e08276bdc21367941241876ba3fea36eba72a63db659560cddce71098b437183100482783a5cb6513c7fd0229a02e79181698e91ede9c04d4f72d6b7e5be260dc515cd1108f9d1e2f715ae5d61d04402a7844bcd657bb32a11c61a56a438b71f3774ecb4cb405b5c9fadb1589a00ffdcfaad84cf4a0b959047d42778c526053104b129aa0537979df04f3ae25dc5035b7c592905638a2375a048e30d4182d33606a0e30742bc2b60311fb95fac49ca4eba44f758c9cc7535a81e02877e694d83df62d7bb924ff3e36dbcf49af1007eeb81c8461ee0b9c2da6d0891afaffe11f2055a94f6df920005ad53ed0ca00631285cbb2e5d42a2e863025bffcbf2e4c27db6431f8e67f3ee41486a55edcc7226d16d5f39b9894cc0add8980e1f2b997f5839f98c29d02d41155ee1e7eddbea3bc62abdbe7bd4f7c5e3057a249b625a309e418cd2a361c9048cf33748a834a195d3a5967fe6d570a46d84332cb155b91d82d9e65a28f82e665fd64076607a17483ee683c5778e9c2b4af3710dc6c22cf54cf2f38615c85ac58ddf7521b739b4bf6336b3038f0b6d19b02af7d5ca99811000c30e111322abe60fdbb35ffe02b441ee9fb029a71441311e291bccc32cde051ab970c25d4b86e544d8d632adc23e610bfc3c221a54538604ad22ba3af27417c84ef9e5fecbdcca08d5821fee5932135470c63f5d7db5637398b27d0cdf4fccf1bad3365285d493f0dd3f475e9dde43a4272ceaae08e579b4aa1be276792ac05f320f59b2648fbd3c5c560a2b148e42bf7965843cd801761dc825dd6a0b60753e238ce029b4d7dc158ae380261f2498c1b5aa82f234a9373861ecae13528cf476561c44320a3d04b6af0b9ec0aff917d7f5801410825e3b342e474a01a3ebaa5833790c0fd444fd67cad393a7d9a9be86b68185640f98980500a63d17756fc2848903d40c88ed5000c5d94537aadd93c7951edb768ee5d5f7c5f609f436b9c389637c64f4f77f9dc0bbea6456d42caaffc83e300c68d1173d28f04ef7d3d77f65cd15d62741fbf17653e80517f005df9421780f5978ef427a51c88f61613c6819f563dd7209a915a48342022956998e7736b23bf01f0b1a4c0eefc6c5c7db6213070ed88cfe0cc8d771aea6d376f8064227882e4a7c376a2a34fe05aa193680580a0e6c63dee8171361b5327d703c98c1e941da32cc9d3ade618aaf830ae1a25f14d528faf622fa7fa2b7ca7a85895e61d59fd5dd8edaeadd4ebd1aca6a2f5141d181a9f44dc3638a16162525ebefb1d515e1e4d107aa27f2e1ef6ef5f21a4800038924f73d14158b3c595e61b91b33782af8eaa98d2d4ad443f28a9af0b8606dbdff37c3a4f545ac384c56741b8ee8ba0d38f3f38122ba9141c9b12673d979adf34e5408572e6ef6b25ab788bc833aa628d0a4e1945bac1c6e29b29ea910069292328b31f55eef2e2da1b69225b32af7da2f0ae1b34ab73eb040053ef75bb447f7f90f7777045fe312419d990438e75e5f29193ce07401760a3bd999578ec0554c0d76ea1746303fac54ec6edc3c9af11e496bda19325bafd5eec201cd4d2e53a51fa46017609e181db8e94d514e85d97bff8331d06fe7a49b853e439545e890712f524a6d4c07373348d83f48acdecaa755be8205c3d13bbfe3703096611dd552060ba9a8d3cfb2d662058e2a9aebfdaa967b69a0745c7777ea6cb0fead8199846f3af4e681e3f9efe2b33a94089065fdc21fca11e02963e3724e0a6fb5e72c230948d8487e8a7564d5618ac03250202f88a263a0ff237facef623ce88f17c3ba0cdd2dcee46c71e5b3615d6c3ce7abb16db91a27cb46b5142795fd5be93c8e743f240251511b732924a6e95b925b7c86380578589e3188e36139616073aeb47435505b28d1ea655e0f43d99f2722e1cd5b56efd959b081f83bb65d9b34569054fbbb75732ee6eee1d818189b5bc46505e10fc36b21ac9d07d48ea118b3619ce8447c713ea94759433268b54bab9800189f69ce71c7664c3548f2f165c904e8d913c98d7a1ce742e0e260f07d2f3307272c38d846e3b2313d85f5107fdce9f0d2d391618c9ae3ff3f3254f24a4d0f67396a4cb9cfc16f22a70aad2d59e54a61e7a7c65d9d856a4f8a18a839ea118afd0e17da507270717c64c3db53a5183263a9547fdf77b68a6fc8fb411b482bf732cc94a65a5b19b8a064704e5215ccaa959af9316e0f6d778f016aabb17c34a349c77832a5251be25d3cda4b2ab2c5404ebaea406ca6c784e3d3aaf9f5f4ab29c7851916e4a6c4fe489f109decf9a5c9b524588d5c3eb887de23beddec00b62c20cf6fdd7eb03a6da73ef7170f645fa3bc6e156886c7cb14cede956d82ea0011b0c5f1715ce5401f41952ccbb0440c00e41d8f798114a207129121a7cf2e00ca232244fdd2cfd5bcbd31a2e43e3dab82d816cb9c5048d50bcffa16d3565ef5b655e0561561d1744f7f746d85fa4822ed80868bb4aa05c708a27b7f39f5da38bff1c7a639cc217eb11a330a593e9b07f6ecf319b18324422357ee7a5205ee8105ecfa24ce1053c43df25a35ac3fc8d9c58ba1f7999cec3f03a89327bae26aa6329867bab3534e38d16b015f750b675350c64310407b23bf915732ae651b5d02e57fc76d4de15bca3721c345d7e2850c7ed3d45246e5c90346e3fbf06e0a29d1417b22dd72a527857d9c05c9ac29d54d44a06fe3722edfdba", 0xffc}, {&(0x7f0000002a40)="fcc29f4638dc124f943f82017f6ddf688b485e6165caa3ecfb57d40d", 0x1c}], 0x7}, 0x4000004) write$rfkill(r5, &(0x7f0000000080)={0x4, 0x0, 0x3, 0xff}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) 3m17.070141998s ago: executing program 2 (id=4728): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000ffffffffffffbeda00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 3m16.441315035s ago: executing program 2 (id=4733): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000170a01040000000000000000020000000900020073797a81000000000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 3m15.936087501s ago: executing program 32 (id=4733): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000170a01040000000000000000020000000900020073797a81000000000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m49.859992851s ago: executing program 4 (id=4853): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000180)={r1}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23004a) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230007) close(r3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x7, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x145cc2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000010900010073797a31000000002c00048028000180080001006e6174001c0002800800034026000010080002400000000a08000140000000010900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000) socket$kcm(0xa, 0x5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="81fdffff1000010000000000000000000000070a140000001100010000000000000000000100000a"], 0x28}}, 0x10000) write$vga_arbiter(r6, &(0x7f0000000000)=@unlock_all, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x51f, 0x80, 0x7, 0x3ff}]}) r8 = semget$private(0x0, 0x4, 0x5dd) semtimedop(r8, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000000)) 2m44.760905014s ago: executing program 4 (id=4865): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180004ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mmap(&(0x7f0000097000/0x1000)=nil, 0x1000, 0x4, 0x28011, r1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfeeb"], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r7, &(0x7f0000000480)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}], 0xa, "2997548dd86cb04121089053c6a65fb5ca7c401f930300adc350c3999b27d7ad314c643b1cbe50c58b4a8fc0ef90bbbff85d2930d2f50c02f79f53d443c342ed61ed6e250064c8a8a27e307d20d61fab81ab41a38713b44a7e86f48c3718730511b9169845760ea7d94471be"}, 0xfe74) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r10, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r10, 0x5b) read$watch_queue(r9, &(0x7f0000000000)=""/1, 0x1) 2m43.623789025s ago: executing program 4 (id=4869): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'veth0\x00'}) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0xfffffffffffffd6d}], 0x30a}, 0x24000044) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb902", 0x10}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b02, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x62) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r1) recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f0000000340)=""/53, 0x35}], 0x3, &(0x7f00000003c0)=""/24, 0x18}, 0x4}, {{&(0x7f0000000400)=@nfc, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/234, 0xea}, {&(0x7f0000000640)=""/116, 0x74}], 0x2, &(0x7f0000000700)=""/104, 0x68}, 0x800}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000780)=""/223, 0xdf}, {&(0x7f0000000880)=""/236, 0xec}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/126, 0x7e}, {&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/71, 0x47}], 0x7, &(0x7f0000002b80)=""/154, 0x9a}, 0x7fffffff}, {{&(0x7f0000002c40)=@x25, 0x80, &(0x7f0000002f80), 0x0, &(0x7f0000002fc0)=""/241, 0xf1}, 0x4}, {{&(0x7f00000030c0)=@caif=@util, 0x80, &(0x7f0000003340)=[{&(0x7f0000003140)=""/117, 0x75}, {&(0x7f00000031c0)=""/123, 0x7b}, {&(0x7f0000003240)=""/88, 0x58}, {&(0x7f00000032c0)=""/86, 0x56}], 0x4, &(0x7f0000003380)=""/121, 0x79}, 0x2}, {{&(0x7f0000003400)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004800)=[{&(0x7f0000003480)=""/93, 0x5d}, {&(0x7f0000003500)=""/121, 0x79}, {&(0x7f0000003580)=""/127, 0x7f}, {&(0x7f0000003600)=""/86, 0x56}, {&(0x7f0000003680)=""/74, 0x4a}, {&(0x7f0000003700)=""/126, 0x7e}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/110, 0x6e}], 0x8}, 0xafc}], 0x6, 0x5, &(0x7f0000004a40)={0x77359400}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000006ac0)={r6, 0x20, &(0x7f0000006a80)={&(0x7f0000001b40)=""/177, 0xb1, 0x0, &(0x7f0000005a80)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000006b80)={0x6, 0x2, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000140)='GPL\x00', 0x6, 0x6e, &(0x7f0000001a80)=""/110, 0x41000, 0x15, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x3, 0x1800000}, 0x8, 0x10, 0x0, 0x0, r7, r6, 0x0, &(0x7f0000006b00), &(0x7f0000006b40), 0x10, 0x80}, 0x94) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x5, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x7c, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}]}}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x2, 0x1, 0x0, [{@remote, 0x5}]}, @cipso={0x86, 0x2e, 0x3, [{0x6, 0x2}, {0x0, 0x2}, {0x2, 0xf, "d109567cb50ec760777fb80755"}, {0x5, 0xb, "c92d3002d91d907b79"}, {0x0, 0x2}, {0x2, 0x6, "84924d89"}, {0x5, 0x2}]}, @cipso={0x86, 0xb, 0x0, [{0x0, 0x5, "ade34b"}]}]}}}}}}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m40.534458841s ago: executing program 4 (id=4880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)="e4836d513bcab6b90efd3ebcdfc597b9a7e727a3ece8daadf4b04a69b21dfd745934e8870086d4dcd91c1c9a69f5d303d175b4bcc0da016fb4be47336b3557b59b09b0c8baf8f20101000009000000a7bd9bad12f2ae80c3f5a6a08634b6f70ef4d694f97312f472beb24c47fbd19e9e7b2b", 0x72}], 0x1, 0x0, 0x0, 0x40054}, 0x24040880) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000200)={0x7, 0x6, 0x1, 'queue1\x00', 0x5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/40, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000580)={0x2, 0x0, [{0xeeee8000, 0xb3, &(0x7f00000003c0)=""/179}, {0xeeee0000, 0xc4, &(0x7f0000000480)=""/196}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x10000001) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000040)={0x2}) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x80800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000302, 0x0, 0x0) connect$unix(r7, 0x0, 0x0) sendmmsg$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x18, 0x4, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) 2m39.37031722s ago: executing program 4 (id=4889): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30, 0x18, 0x0, &(0x7f0000000380)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x5b0f, &(0x7f0000000380)={0x0, 0x0, 0x1000, 0x0, 0x8000359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close(0x3) 2m38.891479496s ago: executing program 4 (id=4891): r0 = io_uring_setup(0x4b22, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES64=r0], 0xfc}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480), 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r4, 0x0, 0xf8, 0x8, 0x7ff, 0x5, {0x7, 0x8, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0x9, 0x8, 0x7c0, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000480)={0x0, 0x2, 0x3, 0x7, &(0x7f0000000400)=[{0xfff8, 0xb, 0x2, 0x7}, {0xc76, 0x9, 0x6ae0, 0x2}, {0xadd1, 0x4c6a, 0x20, 0x8}, {0x7, 0x8, 0x1000, 0x9}, {0x81, 0x62b, 0x1, 0x1}, {0x78, 0x5, 0x6, 0x8}, {0x4, 0x7fff, 0x8, 0x4}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x9, 0x4) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sigaltstack(&(0x7f0000000180)={&(0x7f0000001200)=""/4122, 0xc0000002, 0xa54}, 0x0) r9 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r11 = dup3(r9, r10, 0x0) ioctl$MON_IOCG_STATS(r11, 0xc0109207, &(0x7f0000000180)) recvfrom$inet(r8, &(0x7f0000000140)=""/4, 0xfffffffffffffe80, 0x720, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) read$watch_queue(r11, &(0x7f00000002c0)=""/74, 0x4a) sendmsg$NFT_MSG_GETFLOWTABLE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) 2m32.918875204s ago: executing program 0 (id=4918): write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f080002", 0x1f) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="87", 0x1, 0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) (async, rerun: 32) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) (async, rerun: 32) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000c40000/0x4000)=nil) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2m32.631384158s ago: executing program 0 (id=4919): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50) flock(r1, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000fcffffff000000009f09000018110000c359164ea81168667d7f74054053266be1d04984aeb766d35a75129f03f1592eca75783afc15c8dd3772a10d38aa2b0094686d950cc061022d2b891b364cbd0f93191bd6610d0c5005f73587173e1093d70a63f4839eb9c36c0f2c5e9c775e00c848c8dc0794965352e0a9588f10a7d554448a5564fcc00b1a3760652430d372a485dbdfc07563ee1f82f626c8b9f9c55add6c892fb953871c961a314c2cf54080ff1d76dcb2b223ab18f285ad0839d852", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000082000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000d4000000b7000000006400009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x106, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xc1681e9086079278}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x10, 0x1, 0x6, 0x1, {{0x15, 0x4, 0x1, 0x2b, 0x54, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe6, [@multicast1, @multicast2, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x24, 0x5a, 0x1, 0x5, [{@broadcast, 0x1}, {@private=0xa010101, 0x2}, {@private=0xa010101, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x1, 0x80, 0x200, 0x40, {{0x28, 0x4, 0x0, 0x8, 0xa0, 0x64, 0x0, 0x8, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@noop, @timestamp_prespec={0x44, 0x14, 0x74, 0x3, 0x2, [{@local, 0x4}, {@rand_addr=0x64010102, 0x8}]}, @end, @end, @timestamp_prespec={0x44, 0x3c, 0x98, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x7f}, {@multicast1, 0xc0000}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x1a35}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1}, {@multicast1, 0x8}]}, @cipso={0x86, 0x2d, 0xffffffffffffffff, [{0x5, 0xa, "8b422e50e1374e2c"}, {0x1, 0xe, "b2936cebf11cbb3235c4b7e3"}, {0x0, 0x2}, {0x1, 0xd, "e9ad3e76e0ae2d16b4a892"}]}, @rr={0x7, 0xb, 0xe5, [@multicast1, @empty]}]}}}}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd70000000007b280000000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000008c0)={0x0, @initdev, @multicast2}, &(0x7f0000000900)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r0, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0x40, &(0x7f0000000a00)=[{}, {}], 0x10, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r15 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r15, &(0x7f00000000c0)={0x1d, r16}, 0x18) connect$can_j1939(r15, &(0x7f0000000280)={0x1d, r14, 0x0, {0x0, 0x0, 0x1}}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'ip6_vti0\x00', 0x0, 0x2d, 0xf8, 0x8, 0x5, 0x40, @private0, @remote, 0x10, 0x8000, 0x8001, 0xffffffff}}) r18 = socket$unix(0x1, 0x2, 0x0) r19 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r19, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r20, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r19, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r20, {0xffff, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0xff97, 0x1, {{0x8, 0x8, 0x8, 0xc, 0x3}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="66a14593b9a1"}, @TCA_IFE_SMAC={0xa, 0x4, @random="422bd0e8e835"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x9c}}, 0x4800) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d00)={0x230, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe164dc2f5b18cf9a}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 2m32.301326866s ago: executing program 0 (id=4921): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000002940)={{0x12, 0x1, 0x200, 0xfe, 0x3d, 0x3c, 0x10, 0x458, 0x7045, 0xab3e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x80, 0x10, 0x18, "", [{{0x9, 0x4, 0x3e, 0x4, 0x0, 0x76, 0x19, 0xe, 0xb}}]}}]}}, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x2, @thr={0x0, 0x0}}, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r1 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4a, 0xa4023) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000007665e4cbbc2ec7e1a908b247954316a14fc1ba5c7b7d25ec5d1a7858dfd815e1482a799b2994d84d52c429d0406f18d72d448583a09e", @ANYRES16=r5, @ANYBLOB="02002abd7000fedbdf250b00000008000300", @ANYRES32=r7, @ANYBLOB="0800090001ac0f0005000800030000000c006e8004000200040001000a000600080211000000000014006e8004000200040002000400020004000100"], 0x58}, 0x1, 0x0, 0x0, 0x4008801}, 0x4006001) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe0, r4, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x19d4, 0x43}}}}, [@NL80211_ATTR_KEYS={0xac, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "44fd898621"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xb, 0x4, "765e246c183325"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e5145cac6"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1f5e41f42e9b3b6d3df4f5750c"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000090) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x400, 0x2, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000045}, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0xb, 0x3, 0x8, 0xfff, 'syz1\x00', 0x53}) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000040)) (async) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000010ac057d02000000000001090224000100008000090400000a030000000921000000012229000905810300000000e9cdf183b3ffde754788423277d050d864c2b8cbe8f423797cdac12776a292e4a353130cbc7121a04fd70609065ce29bef391c1445910a10755364588bc4feaf4763934b5d623361c0181a83045697ff234c82f763ee221d1cd8aeac766b6156ebcc243cf8e9d1b995e53f48b93417f8c2d8ee634e9eff38d959749a2a1ec793ea89359c84f7bc947c81b639cc"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) (async) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000300)=ANY=[@ANYBLOB="120100020000000835121480400001020301090269000301658802080bf90f010420020904000000010120000924010b000809ff0009040100000102200009040101010102200009050109100003ff08082501820003020009040200000102200009040201010102200009058209ff0306020108250102000d0000bf7b81a2c4922256c65db581e20e0e8595cd8d74544119272d7479e2594c3d280ff418c39b43b5bb9c13f094033c3dadcfae2757f6956fdb681310c7edc534445d0348d57b1683a4ff4173718a9973aa572ce9951077c8b1dfd7508cbec7e3f5ec879eb1754f6036d7d8925c2d8497cd117b6b772858a516263f9918ae1d5e5a34e82c2a53a3b44b3c2633df618143f293f39449044f98923590b53485ad50806af44ca0b591916d39268044f9fa906c5d2e5aea5656fd81cdb14af728ddb15734b0f7a7fc6a4cfbe8f52a064e121692eb"], 0x0) (async) syz_usb_control_io$hid(r10, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m32.020158488s ago: executing program 0 (id=4922): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x0, 0x11, 0x4, "65ef1b62"}, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4000880) r4 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x3000, 0x0, r4}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x1000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000}) 2m30.8263524s ago: executing program 0 (id=4924): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x8) mount$fuse(0x0, 0x0, 0x0, 0x1100818, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x1, &(0x7f00000021c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00', 0x6, 0x3ff, 0x0, 0x3}]) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) open_tree(r4, &(0x7f0000000140)='./file0\x00', 0x8001) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000080)=0x90) 2m30.480079422s ago: executing program 0 (id=4925): r0 = socket(0x2, 0x5, 0x9c5) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x5f8d, 0x7, 0x5, 0x6, 0x5, 0xa}, {0x15, 0x6, 0x7f, 0x0, 0x1, 0x3}], ['\x00']}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='pagemap\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='pagemap\x00') socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x7ff, 0x2) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x6, 0x5, 0x2, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000004, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x8000, 0x0, 0x5, 0x7, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0xc, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1002, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x6, 0x5, 0x2, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000004, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x8000, 0x0, 0x5, 0x7, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0xc, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1002, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, 0x0) (async) fcntl$getownex(r1, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20040000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 2m23.492709761s ago: executing program 33 (id=4891): r0 = io_uring_setup(0x4b22, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES64=r0], 0xfc}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480), 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r4, 0x0, 0xf8, 0x8, 0x7ff, 0x5, {0x7, 0x8, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0x9, 0x8, 0x7c0, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000480)={0x0, 0x2, 0x3, 0x7, &(0x7f0000000400)=[{0xfff8, 0xb, 0x2, 0x7}, {0xc76, 0x9, 0x6ae0, 0x2}, {0xadd1, 0x4c6a, 0x20, 0x8}, {0x7, 0x8, 0x1000, 0x9}, {0x81, 0x62b, 0x1, 0x1}, {0x78, 0x5, 0x6, 0x8}, {0x4, 0x7fff, 0x8, 0x4}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x9, 0x4) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sigaltstack(&(0x7f0000000180)={&(0x7f0000001200)=""/4122, 0xc0000002, 0xa54}, 0x0) r9 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r11 = dup3(r9, r10, 0x0) ioctl$MON_IOCG_STATS(r11, 0xc0109207, &(0x7f0000000180)) recvfrom$inet(r8, &(0x7f0000000140)=""/4, 0xfffffffffffffe80, 0x720, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) read$watch_queue(r11, &(0x7f00000002c0)=""/74, 0x4a) sendmsg$NFT_MSG_GETFLOWTABLE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) 2m15.013811531s ago: executing program 34 (id=4925): r0 = socket(0x2, 0x5, 0x9c5) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x5f8d, 0x7, 0x5, 0x6, 0x5, 0xa}, {0x15, 0x6, 0x7f, 0x0, 0x1, 0x3}], ['\x00']}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='pagemap\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='pagemap\x00') socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x7ff, 0x2) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x6, 0x5, 0x2, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000004, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x8000, 0x0, 0x5, 0x7, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0xc, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1002, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x6, 0x5, 0x2, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000004, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x8000, 0x0, 0x5, 0x7, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0xc, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1002, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, 0x0) (async) fcntl$getownex(r1, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20040000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 2m0.168556611s ago: executing program 1 (id=4976): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x94}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x4, {[@main=@item_012={0x1, 0x0, 0xb, 'K'}, @local=@item_012={0x1, 0x2, 0x4, "d0"}]}}, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000000c0), 0x0, 0x2801c810) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0), &(0x7f0000000140)=0x8) 1m59.437216727s ago: executing program 1 (id=4979): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'bond0\x00', {0x3ff}, 0xf7d7}) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x0}, 0x0) (async) ioctl$XFS_IOC_GETBMAP(0xffffffffffffffff, 0xc0205826, &(0x7f0000000080)={0xe, 0xfffffffffffffc01, 0x5, 0x5, 0x4}) (async) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f00000020c0)={0x2, 0x3, 0x8}) 1m56.215933271s ago: executing program 1 (id=4986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x29, 0x5, 0xffffffff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x119, 0x9, 0x0, 0x33) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8004, 0x0, 0x9, 0xbc3d, 0x10001, 0xfa11, 0x1}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6], 0x5c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049bc) close(r7) r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r8, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000680)={[&(0x7f00000006c0)='/!$!:*+^{:/!\xbf.]-$\\.\x00\xa5\x1c\xef\x85\xd7\x96\xbd\xf5N(V[\x99\xb8\xc9\xffU\'\v\xc1U\x953j\x94\xb3\xd1\xf9\xadO\xae5\xcbX6gWF\x1c\xd8\x06\x0fQ\x14I8v\x98\xbf\xe3\x15\xc4N\x9ca\x7fe\x96\x88\x91A\xf8\xb8\x14\xc1\xe9\xa0\x88\xcb\xce\xd91M\xce\'\x95\x7fx\xf1CR\xd7\xcc\xe3& \xd7\xc9\'M\x88\x13~Ndb\x92\x10\xbev\xb2?\x16\xe5E\x9e\x13\x97<\x1e\xebm\x0ez5O6\xaf\xa7\xa4\"Ih\xef\xf5\xd6\xd4\xeb\xa2\xb0}P\t\x00\x00\x00\x00\x00\x00\x0e\xe8\x03\xd5\xec\xa0R\x16W\xaa8V\xe1p\xf7\x05\x9b6\xc2\xcd\xeb\n\xbf\x03$\x924\x85\xc6j\xae\xfb\x87\xc3\xdc!\"vH\xac(\xb3', &(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)='user\x00']}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) 1m55.129710105s ago: executing program 1 (id=4990): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0xf, 0x0, 0x0, @void, @value=0x0}, 0x20) 1m54.760129799s ago: executing program 1 (id=4991): socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000040)={[0x1, 0x26000, 0xeeef0000, 0xe6e60000], 0xffffffff90da3531, 0x8, 0x101}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x5e) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000000)=0xfffffe57) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4010) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4010) 1m54.598517638s ago: executing program 1 (id=4993): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000006680)) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.bfq.io_merged\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x8, 0x489, 0x2c, 0x8, 0x8, 0xfffe, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x7e, 0x40) mmap$usbfs(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r2, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000030529bd7000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="15830600000000001800128008000000767469000c00028008000400ffffffff"], 0x38}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x268f1505540f66de) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000040)={{0xf9, 0x1d}, 'port1\x00', 0xc0, 0x21800, 0x1, 0xfffffffb, 0x8, 0xfffffffd, 0xfffffffa, 0x0, 0x0, 0x12}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0xfffffffffffffff8, &(0x7f0000000140)=0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) 1m39.380305983s ago: executing program 35 (id=4993): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000006680)) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.bfq.io_merged\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x8, 0x489, 0x2c, 0x8, 0x8, 0xfffe, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x7e, 0x40) mmap$usbfs(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r2, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000030529bd7000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="15830600000000001800128008000000767469000c00028008000400ffffffff"], 0x38}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x268f1505540f66de) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000040)={{0xf9, 0x1d}, 'port1\x00', 0xc0, 0x21800, 0x1, 0xfffffffb, 0x8, 0xfffffffd, 0xfffffffa, 0x0, 0x0, 0x12}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0xfffffffffffffff8, &(0x7f0000000140)=0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) 48.171379741s ago: executing program 3 (id=5251): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x31, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x480) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x81d68be0d3d18527, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x1e3a00) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000340)={0x2, "c5c2a91e002b1b80000006e8ff0010ffffffe70000ffe700", 0x2, 0x5, 0x2, 0x10003, 0x88d04, 0x8}) msgsnd(r0, 0x0, 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r3, &(0x7f0000000dc0)=""/4106, 0x100a) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) pwritev(r4, 0x0, 0x0, 0x20000000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001736e7202d15390500000000030109021b0002000000000904000545080000000904"], 0x0) 44.767827942s ago: executing program 3 (id=5259): setitimer(0x2, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) r1 = open(&(0x7f0000000180)='.\x00', 0x2300, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000021c0)=[{0xf, 0x9, 0x7, 0x7fff0000}]}) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x1000, 0x0, 0x28b}) flock(r1, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) semtimedop(0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000240)=[{0x1, 0x0, 0x800}, {0x2, 0x0, 0x2000}], 0x2) semop(0x0, &(0x7f0000000140)=[{0x1, 0xfff, 0x1800}, {0x4, 0x0, 0x800}], 0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000040)) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000000)={{0x4000000000000, 0x8}, {0x4000000000000, 0xa}, 0xf, 0x5}) 41.453199564s ago: executing program 3 (id=5269): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0xffff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c080}, 0x40000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0xa, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008110000b7030000020000008500000017"], 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) 41.278018366s ago: executing program 3 (id=5270): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000040)={0xc2d, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000124c0)={0x5, 0x0, [{0x19, 0x8, 0x0, 0x58, 0x9, 0x4, 0xeb5}, {0xc0000000, 0xffffffff, 0x2, 0x3, 0x0, 0x36, 0x80}, {0x1, 0xfffffffb, 0x3, 0x1, 0x100, 0x9, 0x1}, {0xc0000001, 0x3, 0xdb829fbd2d990fd8, 0x10000, 0x8, 0x9, 0x8}, {0x80000019, 0x7921, 0x2, 0x6e7, 0x4, 0x6, 0x800}]}) r1 = openat$cgroup_ro(r0, &(0x7f00000125c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000012600)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000012680), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000012a80)={&(0x7f0000012640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000012a40)={&(0x7f00000126c0)={0x378, r3, 0x8, 0x70bd27, 0x1, {}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x71c5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a0}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x164, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4be9}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x194}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x682}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf06}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3d1dc071}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x526}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xac}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8ee7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6e}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}]}, 0x378}, 0x1, 0x0, 0x0, 0x8c5}, 0x20000805) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000012b80)={&(0x7f0000012ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000012b40)={&(0x7f0000012b00)={0x3c, 0x0, 0x900, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x6]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe91}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x783}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000012d40)={0x0, &(0x7f0000012bc0)=[@rdmsr={0x66, 0x18, {0x8b2}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x2}, @uexit={0x0, 0x18, 0x6}, @wr_drn={0x68, 0x20, {0x4, 0x7}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0xfd69, 0x1, 0x4ab1}}, @in_dx={0x69, 0x20, {0x88d0, 0x4}}, @rdmsr={0x66, 0x18, {0xa7a}}, @nested_amd_invlpga={0x17d, 0x20, {0x4000, 0xc513}}, @wr_drn={0x68, 0x20, {0x5, 0x3}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x5, 0x7ff}}], 0x170}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000012d80)={0x3, 0x0, [{0xb, 0x9, 0x5, 0x10001, 0xf4, 0x8, 0x2}, {0xd, 0x5, 0x2, 0x100, 0xffffffff, 0x5, 0x4}, {0x1, 0x9, 0x5, 0x6, 0x3, 0x3, 0x7}]}) r5 = fcntl$getown(r2, 0x9) getresuid(&(0x7f0000015100)=0x0, &(0x7f0000015140), &(0x7f0000015180)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000151c0)={0x0, 0x0, 0x0}, &(0x7f0000015200)=0xc) r8 = getuid() getgroups(0x2, &(0x7f00000152c0)=[0xee00, 0xffffffffffffffff]) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000015480)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000015580)=0xe8) getresgid(&(0x7f00000155c0), &(0x7f0000015600), &(0x7f0000015640)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000015680)='./file0\x00', &(0x7f00000156c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r15 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000015740)={0x0, 0x0}, &(0x7f0000015780)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000159c0)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000015ac0)=0xe8) read$FUSE(r2, &(0x7f0000015b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r19 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000017c40)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) syz_fuse_handle_req(r0, &(0x7f0000012e00)="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", 0x2000, &(0x7f0000017dc0)={&(0x7f0000014e00)={0x50, 0x0, 0xd3, {0x7, 0x2d, 0x5, 0x10004002, 0x401, 0x4, 0xd, 0x8000, 0x0, 0x0, 0x4, 0x2}}, &(0x7f0000014e80)={0x18, 0x0, 0x10000, {0x5}}, &(0x7f0000014ec0)={0x18, 0xfffffffffffffffe, 0x0, {0x5}}, &(0x7f0000014f00)={0x18, 0x0, 0x1, {0xa9bc}}, &(0x7f0000014f40)={0x18, 0x0, 0x0, {0x2}}, &(0x7f0000014f80)={0x28, 0xfffffffffffffff5, 0xfffffffffffffffe, {{0x3, 0xe3f, 0x1, r5}}}, &(0x7f0000014fc0)={0x60, 0x0, 0x1ff, {{0xba, 0x1, 0x2, 0x5a, 0x8e, 0x80000001, 0x8000, 0x9}}}, &(0x7f0000015040)={0x18, 0x0, 0x7, {0x4}}, &(0x7f0000015080)={0x12, 0x1ae3b83403a2563b, 0x7, {'!\x00'}}, &(0x7f00000150c0)={0x20, 0x0, 0x8, {0x0, 0x1a}}, &(0x7f0000015240)={0x78, 0x0, 0x7f0d6302, {0x7fff, 0x4, 0x0, {0x4, 0xb092, 0xd12e, 0x6, 0x9, 0x6, 0x5, 0x8, 0x1ff, 0xa000, 0x0, r6, r7, 0x81, 0xb001}}}, &(0x7f0000015300)={0x90, 0x0, 0x0, {0x0, 0x3, 0x5, 0x1ff, 0x606, 0x81, {0x0, 0x2, 0xff, 0x47f1, 0x8000000000000001, 0x4, 0x0, 0x8, 0x2, 0x6000, 0x5, r8, r9, 0x3, 0x10001}}}, &(0x7f00000153c0)={0xb0, 0x0, 0xfffffffffffff800, [{0x3, 0x1, 0xb, 0x400, '-^#!]},-+)@'}, {0x6, 0x9, 0x9, 0xffff, '\xa1+\x8b]-)]!{'}, {0x3, 0x2, 0x15, 0x1, 'blkio.bfq.empty_time\x00'}, {0x6, 0x1fd, 0x2, 0x40, '\'/'}]}, &(0x7f00000157c0)={0x1f0, 0xe6ee5b6326a21a38, 0xfffffffffffffffb, [{{0x2, 0x3, 0x10000, 0x5, 0xd, 0x0, {0x1, 0x8, 0x6fe, 0x77f, 0x3000000000000, 0xb66, 0x5, 0x3, 0x3ff, 0x2000, 0x40000, r11, r12, 0xa2, 0x401}}, {0x2, 0x9, 0x6, 0x4, '.\x96\\}\'-'}}, {{0x6, 0x0, 0x7, 0x8000, 0x1, 0x8, {0x3, 0x3, 0x7fffffff, 0x7ff, 0xff, 0x3, 0x7, 0x1, 0xfa, 0xa000, 0x8, r13, r15, 0x9}}, {0x3, 0x2, 0x1, 0xfe29, '\x00'}}, {{0x1, 0x3, 0x3, 0xb, 0xff, 0x101, {0x0, 0x1, 0x5, 0xfffffffffffffff9, 0x2, 0x5, 0x26, 0x2, 0x1, 0xa000, 0x2, r16, 0xffffffffffffffff, 0xfffffe01, 0x2}}, {0x3, 0x2, 0x2, 0x7, '{*'}}]}, &(0x7f0000017b40)={0xa0, 0x0, 0x147e, {{0x5, 0x2, 0x5, 0x0, 0x401, 0x80, {0x6, 0x7, 0xfffffffffffffffb, 0x9, 0x8df, 0x80000001, 0x1, 0x6, 0x8, 0x2000, 0x7, r17, r18, 0x5, 0x101}}}}, &(0x7f0000017c00)={0x20, 0x0, 0x2, {0x28e26a46, 0x4, 0x3, 0xa9}}, &(0x7f0000017c80)={0x130, 0x0, 0x80, {0x5ad3, 0x2, 0x0, '\x00', {0x2, 0x8, 0x6, 0x8000, r19, r21, 0x2000, '\x00', 0x5, 0x6, 0x4, 0x41, {0xc, 0xf}, {0x5, 0x3}, {0x0, 0x8}, {0x2, 0x7fffffff}, 0x200, 0x31a500, 0x1, 0x3f1}}}}) r22 = open$dir(&(0x7f0000017e80)='./file0\x00', 0x400200, 0x35) close_range(r4, r22, 0x0) recvmsg$unix(r20, &(0x7f0000018600)={&(0x7f0000017ec0), 0x6e, &(0x7f0000018500)=[{&(0x7f0000017f40)=""/104, 0x68}, {&(0x7f0000017fc0)=""/213, 0xd5}, {&(0x7f00000180c0)=""/132, 0x84}, {&(0x7f0000018180)=""/227, 0xe3}, {&(0x7f0000018280)=""/36, 0x24}, {&(0x7f00000182c0)=""/255, 0xff}, {&(0x7f00000183c0)=""/229, 0xe5}, {&(0x7f00000184c0)=""/49, 0x31}], 0x8, &(0x7f0000018580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40000000) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000186c0)=[@text16={0x10, &(0x7f0000018640)="36670f183508d5000067660f38808a7f00000066b9800000c00f326635008000000f30dde5ba400066b80000010066ef0f07baf80c66b86620008866efbafc0cb019ee36650f01c366b80500000066b92114ceb00f01c1baf80c66b8f850dc8a66efbafc0c66ed", 0x67}], 0x1, 0x1, &(0x7f0000018700), 0x0) getgroups(0x4, &(0x7f0000018740)=[r14, r10, r9, r15]) 41.21206059s ago: executing program 3 (id=5271): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2720, 0x0, &(0x7f0000000080)) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=@allocspi={0x10c, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x4e21, 0xfd1, 0x4, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in6=@private2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x104, 0x0, 0x0, 0x800}, {0x0, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@XFRMA_IF_ID={0x8}, @offload={0xc}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="20010000120001000000000000000000100000000c0000000000000000000000fe002e"], 0x120}], 0x1}, 0x4000800) 41.107117911s ago: executing program 3 (id=5272): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x8c042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x2, 0x8001, 0x0, 0xffffffff, 0x7ff, 0xfffffe0000001001, 0xfa11, 0xdfffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x608a00, 0x0) r3 = socket(0x9, 0x2, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000001c0)=0x20000, 0x4) write(r1, &(0x7f0000000400)="240000001a005f0214f9f4070009a0251c3900000000000000000000080004000100000033aa435f89f20f633fc27c67eb26a13c26f7e1617b9987ec5c89c13a7e4813118d4fb267d6aa55014be35c00714de4b5afb404762484841fb884128e91e240cccad1bc72a7adf2ffb2afa468f8fd484dc423fc56d17c143adb9496bdb9db862dd8c831e004349f5fbe502da8c4c78cd791eb969b18a5d54beedefa3c050d3e023b", 0xa5) getsockopt$packet_buf(r3, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x263c, "56bc8e3274459cd42317afad7d48d207000000000193b9131300000000f3ff00"}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x3ff, &(0x7f0000000500)=0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x2, r4, 0x0, 0x0, 0x2}]) 28.127964579s ago: executing program 7 (id=5310): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffeff, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) 27.803889832s ago: executing program 7 (id=5311): syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f00030100000009040000000101"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 25.593956924s ago: executing program 36 (id=5272): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x8c042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x2, 0x8001, 0x0, 0xffffffff, 0x7ff, 0xfffffe0000001001, 0xfa11, 0xdfffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x608a00, 0x0) r3 = socket(0x9, 0x2, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000001c0)=0x20000, 0x4) write(r1, &(0x7f0000000400)="240000001a005f0214f9f4070009a0251c3900000000000000000000080004000100000033aa435f89f20f633fc27c67eb26a13c26f7e1617b9987ec5c89c13a7e4813118d4fb267d6aa55014be35c00714de4b5afb404762484841fb884128e91e240cccad1bc72a7adf2ffb2afa468f8fd484dc423fc56d17c143adb9496bdb9db862dd8c831e004349f5fbe502da8c4c78cd791eb969b18a5d54beedefa3c050d3e023b", 0xa5) getsockopt$packet_buf(r3, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x263c, "56bc8e3274459cd42317afad7d48d207000000000193b9131300000000f3ff00"}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x3ff, &(0x7f0000000500)=0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x2, r4, 0x0, 0x0, 0x2}]) 24.692148949s ago: executing program 7 (id=5316): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000540)={0x6, 0x100003, 0x2, {0xb, @win={{0x0, 0x5, 0x20000005, 0x3a96}, 0x7, 0x7, 0x0, 0x8001, 0x0, 0xb}}, 0x9}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r2, 0x0) r3 = dup(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000080)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_clone(0x4039080, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 22.387451627s ago: executing program 7 (id=5323): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0xc41c0000) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000280)) r1 = io_uring_setup(0x1b7b, 0x0) socket$inet(0x2, 0x80001, 0x84) r2 = fsopen(&(0x7f0000000140)='esdfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xe, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, r1, 0x8000000) r5 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000003c0)={0x0, 0x1, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x24044810}, 0x8880) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0xfffffc01, 0x3, 0x4, 0x800, 0x1, {0x0, 0xea60}, {0x4, 0x1, 0x7, 0x2, 0x81, 0x21, "02cb7edb"}, 0x8, 0x1, {&(0x7f0000000200)=[{0x7, 0x800, {}, 0x6}, {0xa6d10, 0x9, {0xffffffffffffa024}, 0x9}]}, 0x9}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x195802, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendfile(r7, r7, 0x0, 0x200000) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r8, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r9, &(0x7f0000002d00), 0x0, 0x0, &(0x7f0000002e00)={0x77359400}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) tkill(0xffffffffffffffff, 0x37) 21.823302583s ago: executing program 6 (id=5324): bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f023}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x10) (rerun: 32) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) (async) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f018, 0x1}) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) syz_usb_connect(0x2, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16], 0x0) 21.672810494s ago: executing program 6 (id=5325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x28, 0x7f, 0x6, 0xfffff010}, {0x6, 0x4, 0x3, 0x1000}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000c000000ffdbdf255300000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24044810}, 0x4000000) fcntl$getown(r0, 0x9) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f3c7c820da059a009562010203010902340001000000000904", @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRES8=r4, @ANYRES8=r0], 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x28, 0x7f, 0x6, 0xfffff010}, {0x6, 0x4, 0x3, 0x1000}]}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000c000000ffdbdf255300000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24044810}, 0x4000000) (async) fcntl$getown(r0, 0x9) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) syz_usb_connect(0x0, 0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f3c7c820da059a009562010203010902340001000000000904", @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRES8=r4, @ANYRES8=r0], 0x0) (async) 21.062298929s ago: executing program 5 (id=5327): mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x120000}, 0x20) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) (async) syz_usbip_server_init(0x1) r0 = socket$inet6(0x2d, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2d, 0x4e20, 0xfd9, @local, 0xb4d0}, 0x1c) (async) syz_usbip_server_init(0x1) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x1) (async) unshare(0x2c020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f00000002c0)={'dummy0\x00', @random}) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x33f, 0x183101) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000040)=""/4096) r3 = socket(0x1e, 0x4, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acb"], 0x0) 20.955318906s ago: executing program 8 (id=5328): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000780)={0x30, 0x0, 0x0, 0x0, 0x1, 0x80, 0xa9, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4}) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/igmp\x00') preadv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/184, 0xb8}], 0x1, 0xffffffd7, 0x60e5bcc3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0xf, 0x0, 0x0, @void, @value=0x0}, 0x20) 20.647457571s ago: executing program 5 (id=5329): r0 = socket(0x1d, 0x2, 0x6) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x1d, 0x4e20, @remote}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_test', 0x8003, 0x3) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)={r2}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x38, 0x0, "bd1312850810fcd18c0448734d20d5ac652daf97d33061762eb45358cb73940a8ee9605f4291416a50b05b3ffe4b328714a6a02e7035b5bf964cf56e441481ffffffffffffffffc200"}, 0xd8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000100), 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x82200, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) pread64(r0, &(0x7f00000003c0)=""/139, 0x8b, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r9, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) ioctl$IOCTL_VMCI_SET_NOTIFY(r6, 0x7cb, 0x0) close(0x3) 20.56216582s ago: executing program 8 (id=5330): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x20008000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x24800) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x1, 0xffff, 0x40, 0x7f, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x5}) ioctl$TIOCSTI(r1, 0x5412, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}, @const={0x0, {0x0, 0x400}}}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r5, @ANYBLOB="100001"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.446942935s ago: executing program 5 (id=5331): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x2, 0x40000333}, 0x0, &(0x7f0000000000), &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19.783743077s ago: executing program 8 (id=5332): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x9, 0x0, 0x1, 0x200, 0x0, 0x4, 0x7, 0x10001, 0x81, 0x1, 0x80000001, 0x8, 0x2, 0x1ff, 0x7, 0x7, 0xfffffffb, 0x3ff, 0x4, 0x3, 0x7, 0xffffffff, 0x434, 0x6, 0x1, 0x9, 0x9, 0x3, 0xffff, 0xfffffffb, 0x8000, 0x7, 0x7fff, 0x3, 0x101, 0x6, 0x7fffffff, 0xe, 0x4, 0x4, 0x8, 0x40, 0x9, 0x6, 0xa, 0x215, 0x8001, 0x7, 0x1, 0xfffffffc, 0x2e6, 0x4, 0x7, 0x2, 0x1, 0x28000, 0x5, 0x0, 0x9, 0x10, 0x6, 0x200, 0x32, 0x7, 0x7f80000, 0x6, 0x8b, 0x8, 0x3, 0x0, 0x4c, 0x7, 0x7, 0x4641ebda, 0x9, 0x2, 0x0, 0xff, 0x0, 0x8319, 0x29e4, 0x200, 0x6, 0x10001, 0xc, 0xa, 0x3, 0x0, 0x2, 0x80000001, 0x7, 0x1, 0x1fe, 0x0, 0xd, 0x5, 0xf, 0x10, 0x0, 0x0, 0x1, 0x80000000, 0xa, 0x8, 0xffff, 0x6, 0x7, 0x9, 0x100, 0x7, 0x2, 0x6, 0x10, 0x0, 0x6, 0x7, 0x240, 0x8, 0x5, 0x81, 0xaeb, 0xff, 0x0, 0x80000001, 0x8, 0xc17, 0x80, 0xffffff03, 0xef3, 0x1, 0x3, 0x400, 0x7ff, 0xffff, 0x1, 0x4, 0x7, 0x7, 0x4, 0x1, 0x40, 0x0, 0xfffffff7, 0x0, 0x8, 0x5588, 0x40, 0x4, 0x3ff, 0x89e48883, 0x8, 0x281, 0x8, 0x8, 0x40, 0xffffffff, 0x4, 0x293d8b13, 0x45, 0xfe, 0x3ff, 0xfb1, 0xfffffffe, 0xc5, 0x8, 0x11d, 0x3, 0x9, 0x81, 0x73c2, 0x5, 0x1, 0x3, 0x4, 0x5, 0x81, 0x2, 0x40, 0x400, 0x7, 0x56e2, 0x31, 0xfffffffc, 0x5, 0x3, 0xd, 0xdb51, 0x2, 0x1, 0x8, 0x2, 0x1, 0x8a, 0x9, 0x8cb6, 0xb637, 0x4, 0x9, 0x7, 0x5b03, 0xfff, 0x8, 0x5, 0x81, 0x0, 0x4, 0x5d, 0x80000000, 0x0, 0x2, 0x4, 0x10001, 0xc7, 0x5, 0x3, 0x6, 0x8, 0x80000001, 0x3, 0x6, 0x6, 0x800, 0x5, 0x7, 0x1, 0x1fd8, 0x0, 0x7, 0xa, 0x7, 0x1, 0x82c, 0x84, 0x0, 0x95, 0x8, 0x6, 0x3, 0xd99, 0x40, 0x0, 0x4, 0x9, 0x6, 0x1, 0x7, 0x4, 0x7000000, 0x7, 0x9, 0x3, 0xffffff5a, 0x20000000, 0x3, 0x8]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) socket$unix(0x1, 0x1, 0x0) clock_getres(0x3, &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) 19.188207615s ago: executing program 5 (id=5333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003b40)={{0x2f, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003b40)={{0x2f, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) 19.032471014s ago: executing program 7 (id=5334): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000010000edc"], 0x0, 0x0, 0x0, 0x0, 0x0}) 18.934239482s ago: executing program 8 (id=5335): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r2 = syz_open_pts(r1, 0xa0200) r3 = dup3(r2, r1, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x2277fc76, 0xd, 0x9, 0x6, 0x5, "c71b90d060c71a75efb7509113ab5a68748bbf"}) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x650ce4b086bd444b) 18.910187433s ago: executing program 5 (id=5336): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000240)=0x1001, 0xffffffffffffff48) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', "374051c4", "a44a889722b66244"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4f20, 0x1, @loopback, 0x5}, 0x1c) write(r8, 0x0, 0x0) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000300)={{{0xc, 0x1}}, 0x91, 0xc, &(0x7f00000003c0)="b648489ede2a3a891565dacc795bd2036709d23170c475cd602af46621461810925f89ead9f8a6ec485d603be96fb3d76121328733d27a5becc6eac413bc526cb8604e7b0c4d3d0ec5bce8a4a8e9abb73c6b70338cb675776514883113dc1ece4f21d6178860b95f87c79cffa5fea4aeb1f80ab20b1b3313709022a4fbd3aea41ca47d717ba96bf85e88fd755eb12eecca"}) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 18.491584528s ago: executing program 6 (id=5337): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000001c0)={0x10}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate(0xc, 0x0, 0x0, 0x19, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r3, 0x5452, &(0x7f0000000240)=0x7) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 18.235549218s ago: executing program 8 (id=5338): close(0x3) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) 16.983501799s ago: executing program 5 (id=5339): setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x6, 0x4) socket(0x10, 0x803, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fsopen(&(0x7f0000000000)='9p\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f00000000c0)={0x1}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa232000000000000f8ffffffb703000008000000b70400000000000c8508000082000000bf81000000000000b7020000000000a9773a4ff901a66b00b7000000000001009500000000800000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000200)=0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x7577e0b0a29503e5) syz_open_dev$sg(&(0x7f0000000180), 0x2, 0x80001) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r6}, 0x8) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCRMFF(r8, 0x40044581, 0x0) 15.647497623s ago: executing program 7 (id=5340): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000380)=0x3, 0x4) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0xff00) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15.604178403s ago: executing program 6 (id=5341): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) io_setup(0x443, &(0x7f0000001100)=0x0) eventfd2(0x0, 0x1) (async) r2 = eventfd2(0x98, 0x80800) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x8, 0x0, r0, 0x0, 0x0, 0x4, 0x0, 0x7, r2}]) 15.342906434s ago: executing program 8 (id=5342): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r3, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) write$char_usb(r0, &(0x7f0000000180)="e0d2503d60597e7474243c4df3dacc9eb5387c944502a74f9fe4455c43250cec7db95180bfc1c124d2e25c4046825ed88d8518a209aa4f094fcd5addc52be9dd6b93d040eb94125c74debbf7e8c9b921823a9daa", 0x54) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r3}) 14.85976225s ago: executing program 6 (id=5343): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x20, &(0x7f0000002d00)={0x32, 0xffffffff, 0x58}) socket(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040010) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x1a, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 14.483594198s ago: executing program 6 (id=5344): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0xe0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000640)) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48d, 0x0, 0xffffffffffffffff}]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000003c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r5, r6, 0x3, 0x2001, 0x40000004, 0x5, {0x200004, 0x1, 0x5, 0xa, 0x8000, 0x9, 0x4, 0xfff9, 0x9, 0x800, 0x7, 0x60b, 0x71, 0xfffb, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 1.546643279s ago: executing program 37 (id=5339): setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x6, 0x4) socket(0x10, 0x803, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fsopen(&(0x7f0000000000)='9p\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f00000000c0)={0x1}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa232000000000000f8ffffffb703000008000000b70400000000000c8508000082000000bf81000000000000b7020000000000a9773a4ff901a66b00b7000000000001009500000000800000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000200)=0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x7577e0b0a29503e5) syz_open_dev$sg(&(0x7f0000000180), 0x2, 0x80001) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r6}, 0x8) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCRMFF(r8, 0x40044581, 0x0) 84.481194ms ago: executing program 38 (id=5340): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000380)=0x3, 0x4) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0xff00) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 39 (id=5342): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r3, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) write$char_usb(r0, &(0x7f0000000180)="e0d2503d60597e7474243c4df3dacc9eb5387c944502a74f9fe4455c43250cec7db95180bfc1c124d2e25c4046825ed88d8518a209aa4f094fcd5addc52be9dd6b93d040eb94125c74debbf7e8c9b921823a9daa", 0x54) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r3}) kernel console output (not intermixed with test programs): syzkaller #0 PREEMPT(full) [ 1048.042275][T22876] Tainted: [L]=SOFTLOCKUP [ 1048.042279][T22876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1048.042286][T22876] Call Trace: [ 1048.042291][T22876] [ 1048.042296][T22876] dump_stack_lvl+0xe8/0x150 [ 1048.042313][T22876] should_fail_ex+0x412/0x560 [ 1048.042329][T22876] _copy_from_iter+0x1d3/0x1670 [ 1048.042344][T22876] ? rcu_is_watching+0x15/0xb0 [ 1048.042360][T22876] ? __pfx__copy_from_iter+0x10/0x10 [ 1048.042376][T22876] ? netlink_sendmsg+0x650/0xb40 [ 1048.042390][T22876] ? skb_put+0x11b/0x210 [ 1048.042405][T22876] netlink_sendmsg+0x6c0/0xb40 [ 1048.042423][T22876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.042438][T22876] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1048.042452][T22876] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1048.042468][T22876] ____sys_sendmsg+0x972/0x9f0 [ 1048.042482][T22876] ? __might_fault+0xaf/0x130 [ 1048.042504][T22876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1048.042537][T22876] ? import_iovec+0x73/0xa0 [ 1048.042564][T22876] ___sys_sendmsg+0x2a5/0x360 [ 1048.042586][T22876] ? __lock_acquire+0x6b5/0x2cf0 [ 1048.042610][T22876] ? __pfx____sys_sendmsg+0x10/0x10 [ 1048.042640][T22876] ? kstrtouint+0x6e/0xe0 [ 1048.042680][T22876] ? __fget_files+0x2a/0x420 [ 1048.042701][T22876] ? __fget_files+0x3a0/0x420 [ 1048.042733][T22876] __sys_sendmmsg+0x27c/0x4e0 [ 1048.042763][T22876] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1048.042786][T22876] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1048.042835][T22876] ? ksys_write+0x242/0x270 [ 1048.042862][T22876] ? __pfx_ksys_write+0x10/0x10 [ 1048.042895][T22876] __x64_sys_sendmmsg+0xa0/0xc0 [ 1048.042920][T22876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.042940][T22876] do_syscall_64+0x15f/0xf80 [ 1048.042961][T22876] ? trace_irq_disable+0x3b/0x140 [ 1048.042987][T22876] ? clear_bhb_loop+0x40/0x90 [ 1048.043009][T22876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.043028][T22876] RIP: 0033:0x7f795299cdd9 [ 1048.043046][T22876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.043062][T22876] RSP: 002b:00007f795386f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1048.043083][T22876] RAX: ffffffffffffffda RBX: 00007f7952c15fa0 RCX: 00007f795299cdd9 [ 1048.043097][T22876] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1048.043111][T22876] RBP: 00007f795386f090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.043123][T22876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.043135][T22876] R13: 00007f7952c16038 R14: 00007f7952c15fa0 R15: 00007f7952d3fa48 [ 1048.043165][T22876] [ 1048.463653][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1048.484451][ T24] usb 4-1: device descriptor read/8, error -71 [ 1048.594165][ T24] usb usb4-port1: unable to enumerate USB device [ 1050.945798][T22826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1051.058474][T22826] vlan2: left allmulticast mode [ 1051.069893][T22826] bond0: left allmulticast mode [ 1051.084731][T22826] macvtap1: left promiscuous mode [ 1051.100285][T22826] macvtap1: left allmulticast mode [ 1051.109249][T22826] veth1_vlan: left allmulticast mode [ 1051.158352][T13722] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.433684][T13722] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.487632][T13722] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.527780][T13722] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.574871][T22901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1051.601802][ T1102] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1051.724087][T22905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4796'. [ 1052.314837][T22914] FAULT_INJECTION: forcing a failure. [ 1052.314837][T22914] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.339653][T22915] FAULT_INJECTION: forcing a failure. [ 1052.339653][T22915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.363123][T22917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4792'. [ 1052.380112][T22916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4792'. [ 1052.383807][T22914] CPU: 1 UID: 0 PID: 22914 Comm: syz.3.4799 Tainted: G L syzkaller #0 PREEMPT(full) [ 1052.383835][T22914] Tainted: [L]=SOFTLOCKUP [ 1052.383842][T22914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1052.383853][T22914] Call Trace: [ 1052.383862][T22914] [ 1052.383869][T22914] dump_stack_lvl+0xe8/0x150 [ 1052.383895][T22914] should_fail_ex+0x412/0x560 [ 1052.383923][T22914] should_failslab+0xa8/0x100 [ 1052.383950][T22914] ? skb_clone+0x212/0x3a0 [ 1052.383974][T22914] kmem_cache_alloc_noprof+0x87/0x650 [ 1052.383998][T22914] ? __netlink_lookup+0xc6/0x8b0 [ 1052.384028][T22914] skb_clone+0x212/0x3a0 [ 1052.384056][T22914] __netlink_deliver_tap+0x404/0x850 [ 1052.384089][T22914] ? netlink_deliver_tap+0x2e/0x1b0 [ 1052.384114][T22914] netlink_deliver_tap+0x19c/0x1b0 [ 1052.384138][T22914] netlink_unicast+0x730/0x8e0 [ 1052.384170][T22914] netlink_sendmsg+0x813/0xb40 [ 1052.384202][T22914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.384229][T22914] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1052.384254][T22914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1052.384281][T22914] ____sys_sendmsg+0x972/0x9f0 [ 1052.384304][T22914] ? __might_fault+0xaf/0x130 [ 1052.384332][T22914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1052.384364][T22914] ? import_iovec+0x73/0xa0 [ 1052.384392][T22914] ___sys_sendmsg+0x2a5/0x360 [ 1052.384415][T22914] ? __lock_acquire+0x6b5/0x2cf0 [ 1052.384439][T22914] ? __pfx____sys_sendmsg+0x10/0x10 [ 1052.384468][T22914] ? kstrtouint+0x6e/0xe0 [ 1052.384511][T22914] ? __fget_files+0x2a/0x420 [ 1052.384537][T22914] ? __fget_files+0x3a0/0x420 [ 1052.384567][T22914] __sys_sendmmsg+0x27c/0x4e0 [ 1052.384596][T22914] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1052.384618][T22914] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1052.384667][T22914] ? ksys_write+0x242/0x270 [ 1052.384694][T22914] ? __pfx_ksys_write+0x10/0x10 [ 1052.384725][T22914] __x64_sys_sendmmsg+0xa0/0xc0 [ 1052.384749][T22914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.384768][T22914] do_syscall_64+0x15f/0xf80 [ 1052.384791][T22914] ? trace_irq_disable+0x3b/0x140 [ 1052.384815][T22914] ? clear_bhb_loop+0x40/0x90 [ 1052.384838][T22914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.384856][T22914] RIP: 0033:0x7f30f519cdd9 [ 1052.384874][T22914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.384890][T22914] RSP: 002b:00007f30f604d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1052.384909][T22914] RAX: ffffffffffffffda RBX: 00007f30f5415fa0 RCX: 00007f30f519cdd9 [ 1052.384922][T22914] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1052.384935][T22914] RBP: 00007f30f604d090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.384947][T22914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.384958][T22914] R13: 00007f30f5416038 R14: 00007f30f5415fa0 R15: 00007f30f553fa48 [ 1052.384987][T22914] [ 1052.385926][T22914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4799'. [ 1052.404729][T22915] CPU: 0 UID: 0 PID: 22915 Comm: syz.0.4800 Tainted: G L syzkaller #0 PREEMPT(full) [ 1052.404757][T22915] Tainted: [L]=SOFTLOCKUP [ 1052.404764][T22915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1052.404782][T22915] Call Trace: [ 1052.404791][T22915] [ 1052.404799][T22915] dump_stack_lvl+0xe8/0x150 [ 1052.404826][T22915] should_fail_ex+0x412/0x560 [ 1052.404853][T22915] _copy_from_iter+0x1d3/0x1670 [ 1052.404882][T22915] ? rcu_is_watching+0x15/0xb0 [ 1052.404904][T22915] ? __pfx__copy_from_iter+0x10/0x10 [ 1052.404929][T22915] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 1052.404956][T22915] ? proc_sys_call_handler+0x3d1/0x830 [ 1052.404985][T22915] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1052.405015][T22915] proc_sys_call_handler+0x425/0x830 [ 1052.405047][T22915] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1052.405074][T22915] ? aio_write+0x547/0x870 [ 1052.405096][T22915] aio_write+0x5cd/0x870 [ 1052.405118][T22915] ? __pfx_aio_write+0x10/0x10 [ 1052.405147][T22915] ? __might_fault+0xaf/0x130 [ 1052.405184][T22915] io_submit_one+0x7bb/0x14c0 [ 1052.405205][T22915] ? irqentry_exit+0x218/0x730 [ 1052.405236][T22915] ? __pfx_io_submit_one+0x10/0x10 [ 1052.405255][T22915] ? __might_fault+0xaf/0x130 [ 1052.405286][T22915] ? __might_fault+0xaf/0x130 [ 1052.405311][T22915] __se_sys_io_submit+0x195/0x340 [ 1052.405339][T22915] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1052.405362][T22915] ? ksys_write+0x242/0x270 [ 1052.405398][T22915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.405417][T22915] do_syscall_64+0x15f/0xf80 [ 1052.405438][T22915] ? trace_irq_disable+0x3b/0x140 [ 1052.405464][T22915] ? clear_bhb_loop+0x40/0x90 [ 1052.405486][T22915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.405503][T22915] RIP: 0033:0x7f40bf19cdd9 [ 1052.405520][T22915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.405536][T22915] RSP: 002b:00007f40c00e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1052.405555][T22915] RAX: ffffffffffffffda RBX: 00007f40bf415fa0 RCX: 00007f40bf19cdd9 [ 1052.405569][T22915] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f40c00c5000 [ 1052.405581][T22915] RBP: 00007f40c00e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.405593][T22915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.405603][T22915] R13: 00007f40bf416038 R14: 00007f40bf415fa0 R15: 00007f40bf53fa48 [ 1052.405631][T22915] [ 1052.422116][T22917] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1052.534953][T22916] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1052.751941][T22920] netlink: 'syz.5.4801': attribute type 1 has an invalid length. [ 1053.245908][T22928] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1053.278656][T22928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4803'. [ 1053.322387][T22931] tunl0: Caught tx_queue_len zero misconfig [ 1053.348087][T22931] netlink: 'syz.0.4803': attribute type 1 has an invalid length. [ 1053.373903][T22928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4803'. [ 1053.425777][T22931] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4803'. [ 1053.452058][T22938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.479374][T22928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.490962][T22938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.516500][T22928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.535297][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4807'. [ 1053.563646][ T46] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1053.597928][T22941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4808'. [ 1053.713552][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 1053.723591][ T46] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1053.753980][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1053.783788][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1053.816320][ T46] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1053.858206][ T46] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1053.885414][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.885943][T22942] syzkaller1: entered promiscuous mode [ 1053.912067][T22942] syzkaller1: entered allmulticast mode [ 1054.136940][ T46] usb 4-1: GET_CAPABILITIES returned 0 [ 1054.154382][ T46] usbtmc 4-1:16.0: can't read capabilities [ 1054.269974][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.276357][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.455818][T22949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1054.545398][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1054.554920][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1054.591640][T22956] FAULT_INJECTION: forcing a failure. [ 1054.591640][T22956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.598005][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1054.613922][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1054.621334][T22956] CPU: 0 UID: 0 PID: 22956 Comm: syz.1.4813 Tainted: G L syzkaller #0 PREEMPT(full) [ 1054.621360][T22956] Tainted: [L]=SOFTLOCKUP [ 1054.621367][T22956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1054.621378][T22956] Call Trace: [ 1054.621386][T22956] [ 1054.621394][T22956] dump_stack_lvl+0xe8/0x150 [ 1054.621420][T22956] should_fail_ex+0x412/0x560 [ 1054.621448][T22956] _copy_to_user+0x31/0xb0 [ 1054.621476][T22956] simple_read_from_buffer+0xe1/0x170 [ 1054.621502][T22956] proc_fail_nth_read+0x1bb/0x230 [ 1054.621528][T22956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1054.621554][T22956] ? rw_verify_area+0x2a6/0x4d0 [ 1054.621577][T22956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1054.621601][T22956] vfs_read+0x20c/0xa70 [ 1054.621629][T22956] ? __pfx___mutex_lock+0x10/0x10 [ 1054.621655][T22956] ? __pfx_vfs_read+0x10/0x10 [ 1054.621679][T22956] ? __fget_files+0x2a/0x420 [ 1054.621705][T22956] ? __fget_files+0x3a0/0x420 [ 1054.621724][T22956] ? __fget_files+0x2a/0x420 [ 1054.621754][T22956] ksys_read+0x150/0x270 [ 1054.621779][T22956] ? __pfx_ksys_read+0x10/0x10 [ 1054.621809][T22956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.621830][T22956] do_syscall_64+0x15f/0xf80 [ 1054.621851][T22956] ? trace_irq_disable+0x3b/0x140 [ 1054.621877][T22956] ? clear_bhb_loop+0x40/0x90 [ 1054.621897][T22956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.621915][T22956] RIP: 0033:0x7f795295d60e [ 1054.621932][T22956] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1054.621947][T22956] RSP: 002b:00007f795386efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1054.621967][T22956] RAX: ffffffffffffffda RBX: 00007f795386f6c0 RCX: 00007f795295d60e [ 1054.621980][T22956] RDX: 000000000000000f RSI: 00007f795386f0a0 RDI: 0000000000000004 [ 1054.621992][T22956] RBP: 00007f795386f090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.622003][T22956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.622014][T22956] R13: 00007f7952c16038 R14: 00007f7952c15fa0 R15: 00007f7952d3fa48 [ 1054.622043][T22956] [ 1054.832990][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1054.842094][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1054.986872][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1054.995992][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1055.005067][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1055.014136][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1055.027013][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1055.036102][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1055.045168][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1055.054243][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1055.499431][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1055.556833][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1055.573838][ T5738] usb 4-1: USB disconnect, device number 17 [ 1055.945816][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1056.302446][T22974] SET target dimension over the limit! [ 1056.451499][T22976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4815'. [ 1057.060600][T22990] loop8: detected capacity change from 0 to 7 [ 1057.073046][T22990] Dev loop8: unable to read RDB block 7 [ 1057.080949][T22990] loop8: unable to read partition table [ 1057.088399][T22990] loop8: partition table beyond EOD, truncated [ 1057.096369][T22990] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1057.342755][T22995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1057.966852][T23009] binder_alloc: 23002: pid 23002 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1057.978422][T23009] binder_alloc: 23002: binder_alloc_buf size 64768 failed, no address space [ 1057.988069][T23009] binder_alloc: allocated: 5120 (num: 2 largest: 4096), free: 7168 (num: 1 largest: 7168) [ 1058.174070][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1058.258260][T23014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4830'. [ 1058.344117][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1058.353247][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1058.368182][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1058.387435][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.406820][ T10] usb 4-1: Product: syz [ 1058.415567][ T10] usb 4-1: Manufacturer: syz [ 1058.430051][ T10] usb 4-1: SerialNumber: syz [ 1058.451295][ T10] usb 4-1: config 0 descriptor?? [ 1058.491851][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1059.094109][T23030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4835'. [ 1059.094132][T23030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4835'. [ 1059.338452][ T10] gspca_zc3xx: reg_w_i err -71 [ 1059.433035][T23036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.476805][T23036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.476866][T23038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.535858][T23038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.555283][T23007] netlink: 'syz.3.4828': attribute type 11 has an invalid length. [ 1059.576742][T23035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.618218][T23035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.965556][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1059.989413][ T10] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1060.028500][ T10] usb 4-1: USB disconnect, device number 18 [ 1060.040183][T23056] FAULT_INJECTION: forcing a failure. [ 1060.040183][T23056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1060.088084][T23056] CPU: 1 UID: 0 PID: 23056 Comm: syz.4.4842 Tainted: G L syzkaller #0 PREEMPT(full) [ 1060.088112][T23056] Tainted: [L]=SOFTLOCKUP [ 1060.088120][T23056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1060.088132][T23056] Call Trace: [ 1060.088139][T23056] [ 1060.088148][T23056] dump_stack_lvl+0xe8/0x150 [ 1060.088173][T23056] should_fail_ex+0x412/0x560 [ 1060.088198][T23056] _copy_from_iter+0x1d3/0x1670 [ 1060.088221][T23056] ? rcu_is_watching+0x15/0xb0 [ 1060.088244][T23056] ? __pfx__copy_from_iter+0x10/0x10 [ 1060.088274][T23056] ? netlink_sendmsg+0x650/0xb40 [ 1060.088296][T23056] ? skb_put+0x11b/0x210 [ 1060.088321][T23056] netlink_sendmsg+0x6c0/0xb40 [ 1060.088351][T23056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1060.088378][T23056] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1060.088403][T23056] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1060.088430][T23056] ____sys_sendmsg+0x972/0x9f0 [ 1060.088455][T23056] ? __might_fault+0xaf/0x130 [ 1060.088484][T23056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1060.088516][T23056] ? import_iovec+0x73/0xa0 [ 1060.088543][T23056] ___sys_sendmsg+0x2a5/0x360 [ 1060.088567][T23056] ? __lock_acquire+0x6b5/0x2cf0 [ 1060.088591][T23056] ? __pfx____sys_sendmsg+0x10/0x10 [ 1060.088646][T23056] ? __fget_files+0x2a/0x420 [ 1060.088668][T23056] ? __fget_files+0x3a0/0x420 [ 1060.088699][T23056] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1060.088726][T23056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1060.088759][T23056] ? __pfx_ksys_write+0x10/0x10 [ 1060.088791][T23056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.088810][T23056] do_syscall_64+0x15f/0xf80 [ 1060.088831][T23056] ? trace_irq_disable+0x3b/0x140 [ 1060.088858][T23056] ? clear_bhb_loop+0x40/0x90 [ 1060.088881][T23056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.088900][T23056] RIP: 0033:0x7fb84d19cdd9 [ 1060.088918][T23056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.088934][T23056] RSP: 002b:00007fb84e11a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1060.088954][T23056] RAX: ffffffffffffffda RBX: 00007fb84d415fa0 RCX: 00007fb84d19cdd9 [ 1060.088968][T23056] RDX: 0000000020004000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1060.088981][T23056] RBP: 00007fb84e11a090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.088999][T23056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.089011][T23056] R13: 00007fb84d416038 R14: 00007fb84d415fa0 R15: 00007fb84d53fa48 [ 1060.089039][T23056] [ 1060.789276][T23067] bond6: option all_slaves_active: invalid value (9) [ 1060.801396][T23067] bond6 (unregistering): Released all slaves [ 1063.259768][T23113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4857'. [ 1063.283920][T23113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4857'. [ 1063.303976][T22604] Bluetooth: hci3: command 0x2016 tx timeout [ 1063.942670][T23098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.950101][T23098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.283739][ T5693] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1064.515778][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1064.554414][ T5693] usb 4-1: Using ep0 maxpacket: 16 [ 1064.563738][ T5693] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1064.587567][ T5693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1064.618224][ T5693] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1064.633029][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.655314][ T5693] usb 4-1: Product: syz [ 1064.666986][ T5693] usb 4-1: Manufacturer: syz [ 1064.678299][ T5693] usb 4-1: SerialNumber: syz [ 1064.690958][ T5693] usb 4-1: config 0 descriptor?? [ 1064.714411][ T5693] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1064.732656][ T5693] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1064.758523][T23098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1064.784962][T23098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1065.276626][ T5693] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1065.292656][ T5693] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1065.330370][ T5693] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1065.355849][ T5693] em28xx 4-1:0.0: No AC97 audio processor [ 1065.384185][T22604] Bluetooth: hci3: command 0x2016 tx timeout [ 1065.473215][ T5693] usb 4-1: USB disconnect, device number 19 [ 1065.602946][ T5693] em28xx 4-1:0.0: Disconnecting em28xx [ 1065.664263][ T1102] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.677146][ T5693] em28xx 4-1:0.0: Freeing device [ 1065.779277][ T1102] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.848312][ T1102] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.135832][ T1102] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.161175][ T1102] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1067.190606][ T1102] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1067.225275][ T1102] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1067.253355][ T1102] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1068.017945][T23165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.064842][T23164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.074470][T23165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.097636][T23164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.240790][T23159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4862'. [ 1068.659118][T23173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.691242][T23173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.846592][ T5693] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1070.038498][ T5693] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.102044][ T5693] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1070.153074][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.216191][ T5693] usb 4-1: config 0 descriptor?? [ 1070.760756][T23191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.820425][T23191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.882939][ T5693] ath6kl: Failed to read usb control message: -32 [ 1070.908244][ T5693] ath6kl: Unable to read the bmi data from the device: -32 [ 1070.935974][ T5693] ath6kl: Unable to recv target info: -32 [ 1070.978362][ T5693] ath6kl: Failed to init ath6kl core: -32 [ 1070.989411][ T5693] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 1071.068445][T23199] netlink: 'syz.0.4876': attribute type 10 has an invalid length. [ 1072.318541][T23237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4886'. [ 1072.342529][T23237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4886'. [ 1072.359206][ T29] audit: type=1326 audit(1777864368.195:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23227 comm="syz.5.4884" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0ccb9cdd9 code=0x0 [ 1072.421544][T23237] batadv1: entered promiscuous mode [ 1072.428732][T23237] batadv1: entered allmulticast mode [ 1072.480953][T23241] kvm: emulating exchange as write [ 1072.593185][ T9] usb 4-1: USB disconnect, device number 20 [ 1073.558520][T23262] netlink: 372 bytes leftover after parsing attributes in process `syz.4.4891'. [ 1074.027205][T23268] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4894'. [ 1074.403357][T23273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4896'. [ 1074.522570][T23276] netlink: 'syz.0.4897': attribute type 3 has an invalid length. [ 1074.589461][T23276] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4897'. [ 1074.747284][T23284] fuse: Unknown parameter 'gƒoSpgû‹q' [ 1075.327106][T23294] fuse: Unknown parameter 'fh5–Ûò‹µq&ï¯dŸ8ö7°½ lŒGx8üñÀ©Ie‘ûÈÊ` ¢ºè}Pb@-Šg¬gg HID v0.00 Device [syz1] on syz0 [ 1077.308128][T23318] trusted_key: encrypted_key: insufficient parameters specified [ 1077.325280][ T9] IPVS: starting estimator thread 0... [ 1077.415011][T23319] IPVS: using max 54 ests per chain, 129600 per kthread [ 1077.625874][T23324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.668590][T23324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.734744][T17031] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1077.985197][T23328] fuse: Unknown parameter 'fd0x0000000000000004' [ 1078.465747][T23334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.503965][T23334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.702985][T23336] loop8: detected capacity change from 0 to 7 [ 1078.745119][T23336] Dev loop8: unable to read RDB block 7 [ 1078.757334][T23336] loop8: unable to read partition table [ 1078.786650][T23336] loop8: partition table beyond EOD, truncated [ 1078.793821][T23336] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1079.056114][T23340] loop9: detected capacity change from 0 to 7 [ 1079.076321][T23340] Dev loop9: unable to read RDB block 7 [ 1079.092177][T23340] loop9: unable to read partition table [ 1079.103969][T23340] loop9: partition table beyond EOD, truncated [ 1079.124903][T23340] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1079.365038][T23349] netlink: 99 bytes leftover after parsing attributes in process `syz.0.4918'. [ 1079.368134][T23347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4917'. [ 1079.649552][T23356] lo: Caught tx_queue_len zero misconfig [ 1079.968371][T23362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.009083][T23362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.266020][T23366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.297086][T23366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.784540][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1082.078476][T23389] loop9: detected capacity change from 0 to 7 [ 1082.100321][T23389] Dev loop9: unable to read RDB block 7 [ 1082.123756][T23389] loop9: unable to read partition table [ 1082.147569][T23389] loop9: partition table beyond EOD, truncated [ 1082.172274][T23389] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1083.553582][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1083.733833][ T9] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1083.752386][ T9] usb 4-1: config 0 has no interface number 0 [ 1083.782021][ T9] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1083.818797][ T9] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1083.871245][ T9] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1083.897820][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1083.935216][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.964527][ T9] usb 4-1: config 0 descriptor?? [ 1083.989079][ T9] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 1084.192418][T23406] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4933'. [ 1084.213169][ T5738] usb 4-1: USB disconnect, device number 22 [ 1084.902242][T23409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4934'. [ 1085.102099][T23411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4935'. [ 1085.112022][T23412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4935'. [ 1085.312703][T23411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1085.601079][T23416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1086.433675][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1086.666337][ T24] usb 4-1: too many configurations: 25, using maximum allowed: 8 [ 1086.710607][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1086.735673][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.787498][ T24] usb 4-1: config 0 descriptor?? [ 1086.811497][ T24] pwc: Creative Labs Webcam Pro Ex detected. [ 1086.825354][ T24] pwc: Warning: more than 1 configuration available. [ 1087.020060][ T24] pwc: Failed to set LED on/off time (-71) [ 1087.132422][ T24] pwc: send_video_command error -71 [ 1087.153816][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1087.190392][ T24] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1087.555882][ T24] usb 4-1: USB disconnect, device number 23 [ 1088.968116][ T5693] usb 5-1: USB disconnect, device number 41 [ 1089.096095][T23458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4949'. [ 1089.673104][T23465] futex_wake_op: syz.1.4951 tries to shift op by 144; fix this program [ 1089.725810][T22604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1089.740645][T22604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1089.750532][T22604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1089.760710][T22604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1089.770614][T22604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1089.901050][T23465] syzkaller0: entered promiscuous mode [ 1089.942433][T23465] syzkaller0: entered allmulticast mode [ 1090.103048][T23472] netlink: 'syz.3.4952': attribute type 1 has an invalid length. [ 1091.053577][T22872] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1091.247056][T22872] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1091.293649][T22872] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1091.349803][T22872] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1091.391575][T22872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.644896][T22872] usb 4-1: usb_control_msg returned -32 [ 1091.677943][T22872] usbtmc 4-1:16.0: can't read capabilities [ 1091.863554][T22604] Bluetooth: hci4: command tx timeout [ 1091.970328][T22872] usb 4-1: USB disconnect, device number 24 [ 1093.125406][T23493] xt_hashlimit: size too large, truncated to 1048576 [ 1093.906986][T23501] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4957'. [ 1093.943767][T22604] Bluetooth: hci4: command tx timeout [ 1093.977940][T23500] syzkaller0: entered promiscuous mode [ 1093.999991][T23500] syzkaller0: entered allmulticast mode [ 1094.031554][T23470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.051241][T23470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.073785][T23470] bridge_slave_0: entered allmulticast mode [ 1094.102736][T23470] bridge_slave_0: entered promiscuous mode [ 1094.134893][T23470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.159002][T23470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.183873][T23470] bridge_slave_1: entered allmulticast mode [ 1094.220453][T23470] bridge_slave_1: entered promiscuous mode [ 1096.025785][T22604] Bluetooth: hci4: command tx timeout [ 1096.212168][T23519] loop5: detected capacity change from 0 to 14 [ 1096.246801][T23519] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1096.263323][T23519] loop5: p1 size 487441168 extends beyond EOD, truncated [ 1097.014731][T18243] udevd[18243]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1097.285128][ T24] usb 1-1: USB disconnect, device number 72 [ 1097.618573][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1097.679855][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1097.687823][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1097.696822][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1097.704772][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1098.105705][ T5637] Bluetooth: hci4: command tx timeout [ 1099.863691][ T5637] Bluetooth: hci6: command tx timeout [ 1101.946654][ T5637] Bluetooth: hci6: command tx timeout [ 1104.043585][ T5637] Bluetooth: hci6: command tx timeout [ 1106.101719][T23470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.114430][ T5637] Bluetooth: hci6: command tx timeout [ 1106.147508][T23470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.187746][T23525] batadv0: entered promiscuous mode [ 1106.212832][T23525] veth0_to_bridge: entered promiscuous mode [ 1106.248723][T23525] hsr1: entered allmulticast mode [ 1106.261817][T23525] batadv0: entered allmulticast mode [ 1106.277037][T23525] veth0_to_bridge: entered allmulticast mode [ 1106.586466][T23470] team0: Port device team_slave_0 added [ 1106.645307][T23470] team0: Port device team_slave_1 added [ 1106.717997][T23470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.731931][T23470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.774269][T23470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.803437][T23470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.810840][T23470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.839948][T23470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.156714][T23470] hsr_slave_0: entered promiscuous mode [ 1107.167442][T23470] hsr_slave_1: entered promiscuous mode [ 1107.174125][T23470] debugfs: 'hsr0' already exists in 'hsr' [ 1107.181843][T23470] Cannot create hsr debugfs directory [ 1107.361638][T23559] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772163 (5368709216 ns) > initial count (10752 ns). Using initial count to start timer. [ 1108.089775][T23527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.098032][T23527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.105808][T23527] bridge_slave_0: entered allmulticast mode [ 1108.113332][T23527] bridge_slave_0: entered promiscuous mode [ 1108.158851][T23527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.170853][T23527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.180280][T23527] bridge_slave_1: entered allmulticast mode [ 1108.206591][T23527] bridge_slave_1: entered promiscuous mode [ 1108.295495][T23470] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1108.307055][T23470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1108.317462][T23527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.328630][T23470] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1108.349045][T23470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1108.360199][T23527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.398940][T23470] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1108.419373][T23470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1108.440298][T23470] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1108.459068][T23470] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1108.469317][T23527] team0: Port device team_slave_0 added [ 1108.540252][T23527] team0: Port device team_slave_1 added [ 1108.716955][T23527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.733574][T23527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.788605][T23527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.818706][T23527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.846182][T23527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.905232][T23527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.059722][T23527] hsr_slave_0: entered promiscuous mode [ 1109.092887][T23527] hsr_slave_1: entered promiscuous mode [ 1109.106161][T23527] debugfs: 'hsr0' already exists in 'hsr' [ 1109.120887][T23527] Cannot create hsr debugfs directory [ 1109.398479][T23470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.452311][T23470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.496413][T13722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.503569][T13722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.544695][T13722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.551780][T13722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.778947][T23527] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1109.794198][T23527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1109.816660][T23527] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1109.838582][T23527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1109.887499][T23578] netlink: 'syz.5.4971': attribute type 4 has an invalid length. [ 1109.945870][T23527] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1110.064542][T23527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1110.146347][T23579] usb usb1: usbfs: process 23579 (syz.5.4971) did not claim interface 63 before use [ 1110.247395][T23582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4972'. [ 1110.613582][ T5738] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1110.663393][T23470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.674925][T23527] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1110.685897][T23527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1110.793682][ T5738] usb 4-1: Using ep0 maxpacket: 32 [ 1110.809048][T23470] veth0_vlan: entered promiscuous mode [ 1110.824119][ T5738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.869674][ T5738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.873018][T23470] veth1_vlan: entered promiscuous mode [ 1110.916055][ T5738] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1110.951435][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.989576][ T5738] usb 4-1: config 0 descriptor?? [ 1111.089906][T23470] veth0_macvtap: entered promiscuous mode [ 1111.122069][T23527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.148309][T23470] veth1_macvtap: entered promiscuous mode [ 1111.226898][T23470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.256483][T23527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.307351][T23470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.348322][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.355498][ T6984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.407625][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.414814][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.443883][ T5738] ft260 0003:0403:6030.0050: unknown main item tag 0x0 [ 1111.474002][ T5738] ft260 0003:0403:6030.0050: unknown main item tag 0x0 [ 1111.497731][ T133] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.516856][ T133] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.547203][ T5738] ft260 0003:0403:6030.0050: chip code: 0000 0000 [ 1111.575171][ T133] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.604934][ T133] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.006236][ T6984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.032190][ T6984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.089557][T23600] binder: 23599:23600 unknown command 0 [ 1112.101097][T13722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.112617][T23600] binder: 23599:23600 ioctl c0306201 200000000000 returned -14 [ 1112.130380][T13722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.138775][T23527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.255449][T23527] veth0_vlan: entered promiscuous mode [ 1112.282744][T23527] veth1_vlan: entered promiscuous mode [ 1112.385531][T23527] veth0_macvtap: entered promiscuous mode [ 1112.436566][T23527] veth1_macvtap: entered promiscuous mode [ 1112.536919][T23527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.581134][T23527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.621194][T23609] netlink: 'syz.6.4978': attribute type 3 has an invalid length. [ 1112.703111][ T133] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.750725][T23616] openvswitch: netlink: nsh attr 330 is out of range max 3 [ 1112.754550][ T133] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.847146][ T133] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.872057][ T133] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.154842][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.171846][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.217288][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.229984][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.580825][T23628] netlink: 'syz.7.4962': attribute type 1 has an invalid length. [ 1113.677212][T23632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.688020][T23632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.423822][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1114.436615][T23637] netlink: 'syz.7.4982': attribute type 13 has an invalid length. [ 1115.525276][T23644] x_tables: duplicate underflow at hook 1 [ 1115.710327][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.716849][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.230448][T23653] trusted_key: encrypted_key: insufficient parameters specified [ 1116.583927][ T5738] ft260 0003:0403:6030.0050: failed to retrieve system status [ 1116.638150][ T5738] ft260 0003:0403:6030.0050: probe with driver ft260 failed with error -110 [ 1116.790137][T23659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.851704][T23659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.199513][T23665] netlink: 'syz.1.4990': attribute type 1 has an invalid length. [ 1117.677854][ T29] audit: type=1800 audit(1777864413.515:4700): pid=23672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4993" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1120.005991][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5004'. [ 1120.032593][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5004'. [ 1120.075825][T23718] kvm: pic: non byte write [ 1121.149503][T23723] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5006'. [ 1121.848355][T23734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1122.012014][T23738] sctp: [Deprecated]: syz.5.5010 (pid 23738) Use of int in max_burst socket option. [ 1122.012014][T23738] Use struct sctp_assoc_value instead [ 1122.067134][T23737] tipc: MTU too low for tipc bearer [ 1122.439460][T23750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5015'. [ 1122.450224][T23750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5015'. [ 1122.461789][T23750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5015'. [ 1122.473226][T23750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5015'. [ 1122.484228][T23750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5015'. [ 1122.493423][T23750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5015'. [ 1126.176489][T23773] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5021'. [ 1126.216842][T23771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5019'. [ 1128.113411][T23792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5026'. [ 1131.007166][ T29] audit: type=1326 audit(1777864426.845:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23833 comm="syz.3.5033" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f519cdd9 code=0x7ffc0000 [ 1131.092217][ T29] audit: type=1326 audit(1777864426.845:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23833 comm="syz.3.5033" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f519cdd9 code=0x7ffc0000 [ 1131.147205][ T29] audit: type=1326 audit(1777864426.875:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23833 comm="syz.3.5033" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f519cdd9 code=0x7ffc0000 [ 1131.193553][ T29] audit: type=1326 audit(1777864426.875:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23833 comm="syz.3.5033" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f519cdd9 code=0x7ffc0000 [ 1131.243540][ T29] audit: type=1326 audit(1777864426.875:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23833 comm="syz.3.5033" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f30f519cdd9 code=0x7ffc0000 [ 1131.328397][ T29] audit: type=1326 audit(1777864426.875:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23833 comm="syz.3.5033" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f519cdd9 code=0x7ffc0000 [ 1131.411548][ T29] audit: type=1326 audit(1777864426.875:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23833 comm="syz.3.5033" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f519cdd9 code=0x7ffc0000 [ 1131.437572][T23838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.461132][T13722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.474349][T23838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.497588][ T29] audit: type=1326 audit(1777864426.895:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23833 comm="syz.3.5033" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f519cdd9 code=0x7ffc0000 [ 1131.522274][T13722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.561634][T23838] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5034'. [ 1131.580582][ T29] audit: type=1326 audit(1777864426.895:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23833 comm="syz.3.5033" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f519cdd9 code=0x7ffc0000 [ 1131.669400][ T29] audit: type=1326 audit(1777864426.895:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23833 comm="syz.3.5033" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f30f519cdd9 code=0x7ffc0000 [ 1131.807601][T13722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.838531][T13722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.081489][T13722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.133404][T13722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.172486][T23852] binder: 23845:23852 ioctl 4018620d 0 returned -22 [ 1132.414601][T23855] netlink: 'syz.3.5039': attribute type 4 has an invalid length. [ 1132.432681][T23855] netlink: 'syz.3.5039': attribute type 4 has an invalid length. [ 1132.503067][T13722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.516772][T13722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.032385][T23864] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5041'. [ 1133.358927][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1133.386780][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1133.395300][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1133.413492][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1133.425582][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1133.790071][T23880] loop9: detected capacity change from 0 to 7 [ 1133.823589][T23880] Dev loop9: unable to read RDB block 7 [ 1133.836182][T23880] loop9: unable to read partition table [ 1133.858956][T23880] loop9: partition table beyond EOD, truncated [ 1133.893411][T23880] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1134.124255][T23884] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 1134.159178][T23884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.181407][T23884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.211717][T23884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.239472][T23884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.641907][T13722] bond0 (unregistering): Released all slaves [ 1134.655961][T13722] bond1 (unregistering): Released all slaves [ 1134.681359][T13722] bond2 (unregistering): Released all slaves [ 1134.705054][T13722] bond3 (unregistering): Released all slaves [ 1134.731267][T13722] bond4 (unregistering): (slave veth0_virt_wifi): Releasing active interface [ 1134.755430][T13722] bond4 (unregistering): Released all slaves [ 1134.780961][T13722] bond5 (unregistering): Released all slaves [ 1134.806585][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1134.959183][T23893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.986863][T23893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.061863][T13722] tipc: Left network mode [ 1135.550171][ T5637] Bluetooth: hci0: command tx timeout [ 1136.013626][T23916] netlink: 'syz.3.5049': attribute type 1 has an invalid length. [ 1136.137066][T23920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.168781][T23920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.185807][T23918] bond3: (slave gretap1): making interface the new active one [ 1137.233687][T23918] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1137.286682][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1137.327355][T23939] tipc: Enabling of bearer rejected, failed to enable media [ 1137.491098][T23875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.524338][T23875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.536731][T23875] bridge_slave_0: entered allmulticast mode [ 1137.569243][T23875] bridge_slave_0: entered promiscuous mode [ 1137.625421][ T50] Bluetooth: hci0: command tx timeout [ 1137.639987][T23875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.668822][T23875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.693272][T23875] bridge_slave_1: entered allmulticast mode [ 1137.726800][T23875] bridge_slave_1: entered promiscuous mode [ 1138.043404][T13722] hsr_slave_0: left promiscuous mode [ 1138.065458][T13722] hsr_slave_1: left promiscuous mode [ 1138.112032][T13722] veth1_vlan: left promiscuous mode [ 1138.136224][T13722] veth0_vlan: left promiscuous mode [ 1138.854799][T23918] syz.3.5049 (23918) used greatest stack depth: 18784 bytes left [ 1139.557232][T23875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.588405][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1139.625995][T23875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.703705][ T50] Bluetooth: hci0: command tx timeout [ 1139.958344][T23875] team0: Port device team_slave_0 added [ 1139.970021][T23875] team0: Port device team_slave_1 added [ 1139.989230][T23983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5061'. [ 1140.004053][T23981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.063381][T23981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.129788][T23875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.146416][T23875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.212191][T23875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.279075][T23875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.312369][T23875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.354664][T23875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.369731][T23996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.399954][T23996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.627274][T13722] IPVS: stop unused estimator thread 0... [ 1140.655156][T23875] hsr_slave_0: entered promiscuous mode [ 1140.676500][T23875] hsr_slave_1: entered promiscuous mode [ 1140.686197][T23875] debugfs: 'hsr0' already exists in 'hsr' [ 1140.692029][T23875] Cannot create hsr debugfs directory [ 1141.173373][T23875] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1141.190161][T23875] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1141.200837][T23875] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1141.212061][T23875] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1141.220843][T23875] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1141.241002][T23875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1141.250697][T23875] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1141.264802][T23875] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1141.392337][T23875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.479433][T23875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.509940][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1141.533620][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.540771][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.578998][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.586125][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.739540][T23875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1141.783840][ T50] Bluetooth: hci0: command tx timeout [ 1141.868529][T23875] veth0_vlan: entered promiscuous mode [ 1141.902241][T23875] veth1_vlan: entered promiscuous mode [ 1141.999515][T23875] veth0_macvtap: entered promiscuous mode [ 1142.035256][T23875] veth1_macvtap: entered promiscuous mode [ 1142.092357][T23875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.145548][T23875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1142.165110][ T133] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.180217][ T133] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.205235][ T133] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.222126][ T133] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.475837][ T6983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.515634][ T6983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.629629][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.687722][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.203613][T23624] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1143.320216][T24042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.349708][T24042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.365675][T23624] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1143.396991][T23624] usb 9-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1143.416391][T23624] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.458289][T23624] usb 9-1: config 0 descriptor?? [ 1143.476912][T24040] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1143.734119][T23624] asus 0003:0B05:1ABE.0051: unknown main item tag 0x0 [ 1143.749182][T23624] asus 0003:0B05:1ABE.0051: unknown main item tag 0x0 [ 1143.782050][T23624] asus 0003:0B05:1ABE.0051: unknown main item tag 0x0 [ 1143.811165][T23624] asus 0003:0B05:1ABE.0051: unknown main item tag 0x0 [ 1143.852528][T23624] asus 0003:0B05:1ABE.0051: unknown main item tag 0x0 [ 1143.900287][T23624] asus 0003:0B05:1ABE.0051: unknown main item tag 0x0 [ 1143.943054][T23624] asus 0003:0B05:1ABE.0051: unknown main item tag 0x0 [ 1143.979373][T23624] asus 0003:0B05:1ABE.0051: unknown main item tag 0x0 [ 1144.020773][T23624] asus 0003:0B05:1ABE.0051: unknown main item tag 0x0 [ 1144.052347][T23624] asus 0003:0B05:1ABE.0051: unknown main item tag 0x0 [ 1144.131015][T23624] asus 0003:0B05:1ABE.0051: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.8-1/input0 [ 1144.217611][T23624] usb 9-1: USB disconnect, device number 2 [ 1144.524860][T24070] fido_id[24070]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1144.583788][T23624] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1144.698872][T24074] loop9: detected capacity change from 0 to 7 [ 1144.736994][T24074] Dev loop9: unable to read RDB block 7 [ 1144.767847][T24074] loop9: unable to read partition table [ 1144.786944][T24074] loop9: partition table beyond EOD, truncated [ 1144.802641][T24074] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1147.033135][T24102] kvm: pic: non byte read [ 1147.040165][T24102] kvm: pic: non byte read [ 1147.047844][T24102] kvm: pic: non byte read [ 1147.052602][T24102] kvm: pic: non byte read [ 1147.059633][T24102] kvm: pic: non byte read [ 1147.066589][T24102] kvm: pic: non byte read [ 1147.073169][T24102] kvm: pic: single mode not supported [ 1147.073187][T24102] kvm: pic: level sensitive irq not supported [ 1147.078886][T24102] kvm: pic: non byte read [ 1147.092014][T24102] kvm: pic: non byte read [ 1147.981749][T24125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.999231][T24125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.299870][T23622] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1148.664198][ T6983] wlan0: Trigger new scan to find an IBSS to join [ 1149.725148][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1149.725165][ T29] audit: type=1326 audit(1777864445.565:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24144 comm="syz.5.5097" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1149.765834][T23624] usb 9-1: device descriptor read/64, error -110 [ 1149.800788][ T29] audit: type=1326 audit(1777864445.565:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24144 comm="syz.5.5097" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1149.841986][ T29] audit: type=1326 audit(1777864445.605:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24144 comm="syz.5.5097" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1149.870848][ T29] audit: type=1326 audit(1777864445.605:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24144 comm="syz.5.5097" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1149.904773][ T29] audit: type=1326 audit(1777864445.605:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24144 comm="syz.5.5097" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1149.931697][ T29] audit: type=1326 audit(1777864445.605:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24144 comm="syz.5.5097" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0ccb5d60e code=0x7ffc0000 [ 1149.961171][ T29] audit: type=1326 audit(1777864445.605:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24144 comm="syz.5.5097" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1149.988437][ T29] audit: type=1326 audit(1777864445.605:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24144 comm="syz.5.5097" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1150.022579][ T29] audit: type=1326 audit(1777864445.605:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24144 comm="syz.5.5097" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1150.047605][T23624] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1150.082125][ T29] audit: type=1326 audit(1777864445.605:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24144 comm="syz.5.5097" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1150.121141][T24152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1150.184313][T24152] sctp: [Deprecated]: syz.3.5099 (pid 24152) Use of int in max_burst socket option. [ 1150.184313][T24152] Use struct sctp_assoc_value instead [ 1150.203572][T23624] usb 9-1: device descriptor read/64, error -32 [ 1150.314894][T23624] usb usb9-port1: attempt power cycle [ 1150.603932][T23624] raw-gadget.2 gadget.8: failed to queue resume event [ 1150.784133][T23624] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1150.856388][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 1150.878889][T23624] usb 9-1: device descriptor read/8, error -32 [ 1151.003957][T23624] raw-gadget.2 gadget.8: failed to queue suspend event [ 1151.043257][T23624] raw-gadget.2 gadget.8: failed to queue reset event [ 1151.155700][T23624] raw-gadget.2 gadget.8: failed to queue resume event [ 1151.244037][T23624] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1151.287437][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 1151.316073][T23624] usb 9-1: device descriptor read/8, error -32 [ 1151.444971][T23624] raw-gadget.2 gadget.8: failed to queue suspend event [ 1151.474494][T23624] usb usb9-port1: unable to enumerate USB device [ 1151.563645][T24069] raw-gadget.2 gadget.8: failed to queue disconnect event [ 1151.703746][ T1102] wlan0: Trigger new scan to find an IBSS to join [ 1152.063723][ T46] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1152.248408][ T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1152.299491][ T46] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1152.329567][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.371449][ T46] usb 9-1: config 0 descriptor?? [ 1152.394545][T24168] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1152.540943][T24181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.589680][T24181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.611091][T24168] netlink: 'syz.8.5103': attribute type 5 has an invalid length. [ 1152.632502][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5106'. [ 1152.871184][ T46] hid_parser_main: 427 callbacks suppressed [ 1152.871205][ T46] koneplus 0003:1E7D:2E22.0053: unknown main item tag 0x0 [ 1152.893755][T24189] tipc: Failed to remove unknown binding: 66,0,0/0:2937132547/2937132548 [ 1152.913645][ T46] koneplus 0003:1E7D:2E22.0053: unknown main item tag 0x0 [ 1152.936450][ T46] koneplus 0003:1E7D:2E22.0053: unknown main item tag 0x0 [ 1152.945798][T24189] tipc: Failed to remove unknown binding: 66,0,0/0:2937132547/2937132548 [ 1152.973810][ T46] koneplus 0003:1E7D:2E22.0053: unknown main item tag 0x0 [ 1153.004640][ T46] koneplus 0003:1E7D:2E22.0053: unknown main item tag 0x0 [ 1153.026710][ T46] koneplus 0003:1E7D:2E22.0053: unknown main item tag 0x0 [ 1153.053525][ T46] koneplus 0003:1E7D:2E22.0053: unknown main item tag 0x0 [ 1153.077111][T24168] binder: 24166:24168 ioctl c00c620f 0 returned -14 [ 1153.084033][T24195] binder: 24166:24195 ioctl c00c620f 0 returned -14 [ 1153.092727][ T46] koneplus 0003:1E7D:2E22.0053: unknown main item tag 0x0 [ 1153.127093][ T46] koneplus 0003:1E7D:2E22.0053: unknown main item tag 0x0 [ 1153.184848][ T46] koneplus 0003:1E7D:2E22.0053: unknown main item tag 0x0 [ 1153.285357][ T46] koneplus 0003:1E7D:2E22.0053: collection stack underflow [ 1153.348158][ T46] koneplus 0003:1E7D:2E22.0053: item 0 0 0 12 parsing failed [ 1153.395891][ T46] koneplus 0003:1E7D:2E22.0053: parse failed [ 1153.426770][ T46] koneplus 0003:1E7D:2E22.0053: probe with driver koneplus failed with error -22 [ 1153.526575][ T46] usb 9-1: USB disconnect, device number 7 [ 1154.093884][T23624] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1154.151729][T24229] netlink: 'syz.3.5115': attribute type 4 has an invalid length. [ 1154.213830][T24229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1154.285173][T23624] usb 9-1: Using ep0 maxpacket: 16 [ 1154.310397][T23624] usb 9-1: config index 0 descriptor too short (expected 51443, got 18) [ 1154.345861][T23624] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1154.386423][T23624] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.421226][T23624] usb 9-1: Product: syz [ 1154.442635][T23624] usb 9-1: Manufacturer: syz [ 1154.474323][T23624] usb 9-1: SerialNumber: syz [ 1154.530171][T23624] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1154.567147][T23624] r8152-cfgselector 9-1: config 0 descriptor?? [ 1154.755973][ T48] wlan0: Trigger new scan to find an IBSS to join [ 1155.055680][T22872] r8152-cfgselector 9-1: USB disconnect, device number 8 [ 1155.090766][T24255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5124'. [ 1155.136846][T24254] binder: 24252:24254 ioctl c00c6211 9999999999999999 returned -14 [ 1155.688974][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.800695][T24275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1155.868960][T24275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.937016][T24275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1155.972663][T24275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.004563][T24275] netlink: 'syz.3.5130': attribute type 1 has an invalid length. [ 1157.806618][T24324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5135'. [ 1158.194050][T24339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.210054][T24339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.303560][T23624] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1158.488973][T23624] usb 9-1: config 0 has an invalid interface number: 65 but max is 3 [ 1158.530097][T23624] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.564539][T23624] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 1158.588778][T23624] usb 9-1: config 0 has no interface number 0 [ 1158.600654][T23624] usb 9-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 1158.621940][T23624] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.640287][T23624] usb 9-1: Product: syz [ 1158.656643][T23624] usb 9-1: Manufacturer: syz [ 1158.681847][T23624] usb 9-1: SerialNumber: syz [ 1158.725006][T23624] usb 9-1: config 0 descriptor?? [ 1158.790935][T24353] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1158.797491][T24353] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1158.813077][T24353] vhci_hcd vhci_hcd.0: Device attached [ 1158.829978][T24353] binder: BINDER_SET_CONTEXT_MGR already set [ 1158.837568][T24353] binder: 24352:24353 ioctl 4018620d 200000004a80 returned -16 [ 1158.889056][T24355] vhci_hcd: connection closed [ 1158.890844][ T6984] vhci_hcd vhci_hcd.6: stop threads [ 1158.940259][ T6984] vhci_hcd vhci_hcd.6: release socket [ 1158.955540][ T6984] vhci_hcd vhci_hcd.6: disconnect device [ 1158.984015][T22740] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1159.007513][T23624] flexcop_usb: set interface failed. [ 1159.029326][T23624] b2c2_flexcop_usb 9-1:0.65: probe with driver b2c2_flexcop_usb failed with error -22 [ 1159.071170][T23624] usb 9-1: USB disconnect, device number 9 [ 1160.364153][ T46] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1160.564105][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 1160.586025][ T46] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 1160.623608][ T46] usb 9-1: config 0 has no interface number 0 [ 1160.653605][ T46] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1160.714019][ T46] usb 9-1: config 0 interface 89 has no altsetting 0 [ 1160.749105][ T46] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1160.760484][T24388] bridge0: entered promiscuous mode [ 1160.791158][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.827117][ T46] usb 9-1: Product: syz [ 1160.852372][ T46] usb 9-1: Manufacturer: syz [ 1160.888282][ T46] usb 9-1: SerialNumber: syz [ 1160.929785][ T46] usb 9-1: config 0 descriptor?? [ 1160.961731][ T46] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1160.996021][ T46] em28xx 9-1:0.89: Video interface 89 found: [ 1161.594647][ T46] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 1161.702221][T24400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.760254][T24400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.926031][T24405] syzkaller0: entered promiscuous mode [ 1161.945140][T24405] syzkaller0: entered allmulticast mode [ 1162.744215][ T46] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1162.777169][ T46] em28xx 9-1:0.89: board has no eeprom [ 1162.854212][ T46] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 1162.894721][ T46] em28xx 9-1:0.89: analog set to bulk mode. [ 1162.918853][T22872] em28xx 9-1:0.89: Registering V4L2 extension [ 1162.966480][ T46] usb 9-1: USB disconnect, device number 10 [ 1163.013216][ T46] em28xx 9-1:0.89: Disconnecting em28xx [ 1163.080932][T24417] FAULT_INJECTION: forcing a failure. [ 1163.080932][T24417] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.145988][T24417] CPU: 0 UID: 0 PID: 24417 Comm: syz.5.5157 Tainted: G L syzkaller #0 PREEMPT(full) [ 1163.146017][T24417] Tainted: [L]=SOFTLOCKUP [ 1163.146025][T24417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1163.146037][T24417] Call Trace: [ 1163.146044][T24417] [ 1163.146053][T24417] dump_stack_lvl+0xe8/0x150 [ 1163.146080][T24417] should_fail_ex+0x412/0x560 [ 1163.146109][T24417] should_failslab+0xa8/0x100 [ 1163.146140][T24417] __kmalloc_cache_noprof+0x88/0x660 [ 1163.146166][T24417] ? fuse_lookup_name+0x1d0/0x8b0 [ 1163.146192][T24417] fuse_lookup_name+0x1d0/0x8b0 [ 1163.146219][T24417] ? rcu_is_watching+0x15/0xb0 [ 1163.146244][T24417] ? __pfx_fuse_lookup_name+0x10/0x10 [ 1163.146269][T24417] ? fuse_lock_inode+0xd3/0x120 [ 1163.146305][T24417] ? d_alloc_parallel+0x366/0x1610 [ 1163.146341][T24417] fuse_lookup+0x213/0x4e0 [ 1163.146363][T24417] ? look_up_lock_class+0x57/0x110 [ 1163.146396][T24417] ? __pfx_fuse_lookup+0x10/0x10 [ 1163.146433][T24417] ? __raw_spin_lock_init+0x45/0x100 [ 1163.146461][T24417] ? __init_waitqueue_head+0xa9/0x150 [ 1163.146492][T24417] __lookup_slow+0x2b7/0x410 [ 1163.146517][T24417] ? __pfx___lookup_slow+0x10/0x10 [ 1163.146553][T24417] ? down_read+0x270/0x2e0 [ 1163.146588][T24417] lookup_slow+0x53/0x70 [ 1163.146613][T24417] path_lookupat+0x3f5/0x8c0 [ 1163.146649][T24417] filename_lookup+0x256/0x5d0 [ 1163.146677][T24417] ? __pfx_filename_lookup+0x10/0x10 [ 1163.146723][T24417] ? __might_fault+0xaf/0x130 [ 1163.146748][T24417] ? __might_fault+0xaf/0x130 [ 1163.146778][T24417] filename_linkat+0x11a/0x600 [ 1163.146808][T24417] ? __pfx_filename_linkat+0x10/0x10 [ 1163.146832][T24417] ? do_getname+0x151/0x250 [ 1163.146852][T24417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.146873][T24417] __se_sys_link+0x55/0x2c0 [ 1163.146893][T24417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.146913][T24417] do_syscall_64+0x15f/0xf80 [ 1163.146936][T24417] ? trace_irq_disable+0x3b/0x140 [ 1163.146962][T24417] ? clear_bhb_loop+0x40/0x90 [ 1163.146985][T24417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.147004][T24417] RIP: 0033:0x7fa0ccb9cdd9 [ 1163.147022][T24417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.147039][T24417] RSP: 002b:00007fa0cdaf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 1163.147059][T24417] RAX: ffffffffffffffda RBX: 00007fa0cce16090 RCX: 00007fa0ccb9cdd9 [ 1163.147073][T24417] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 1163.147086][T24417] RBP: 00007fa0cdaf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.147098][T24417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.147110][T24417] R13: 00007fa0cce16128 R14: 00007fa0cce16090 R15: 00007fa0ccf3fa48 [ 1163.147141][T24417] [ 1163.148356][T22872] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 1163.202561][T24421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.341355][T22872] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 1163.389833][T24421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.599327][T22872] em28xx 9-1:0.89: No AC97 audio processor [ 1163.640839][T22872] usb 9-1: Decoder not found [ 1163.667350][T22872] em28xx 9-1:0.89: failed to create media graph [ 1163.687388][T22872] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 1163.718616][T22872] em28xx 9-1:0.89: Registering snapshot button... [ 1163.760729][T22872] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input107 [ 1163.829361][T22872] em28xx 9-1:0.89: Remote control support is not available for this card. [ 1163.854137][T24434] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5161'. [ 1163.874731][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 1163.882767][ T46] em28xx 9-1:0.89: Closing input extension [ 1163.910041][ T46] em28xx 9-1:0.89: Deregistering snapshot button [ 1163.999169][ T46] em28xx 9-1:0.89: Freeing device [ 1164.138778][T24434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5161'. [ 1164.333894][ T46] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1164.376147][T24442] bond4: option primary_reselect: invalid value (21) [ 1164.410769][T24442] bond4 (unregistering): Released all slaves [ 1164.483543][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 1164.528357][ T46] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1164.607641][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.646365][ T46] usb 9-1: Product: syz [ 1164.672168][ T46] usb 9-1: Manufacturer: syz [ 1164.691914][ T46] usb 9-1: SerialNumber: syz [ 1164.729587][ T46] usb 9-1: config 0 descriptor?? [ 1164.785977][ T46] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1166.506513][T24467] FAULT_INJECTION: forcing a failure. [ 1166.506513][T24467] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.548744][T24467] CPU: 1 UID: 0 PID: 24467 Comm: syz.6.5170 Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.548775][T24467] Tainted: [L]=SOFTLOCKUP [ 1166.548782][T24467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1166.548794][T24467] Call Trace: [ 1166.548802][T24467] [ 1166.548812][T24467] dump_stack_lvl+0xe8/0x150 [ 1166.548839][T24467] should_fail_ex+0x412/0x560 [ 1166.548873][T24467] should_failslab+0xa8/0x100 [ 1166.548901][T24467] ? fuse_get_req+0x7da/0x10d0 [ 1166.548930][T24467] kmem_cache_alloc_noprof+0x87/0x650 [ 1166.548964][T24467] fuse_get_req+0x7da/0x10d0 [ 1166.549006][T24467] ? stack_depot_save_flags+0x33/0x810 [ 1166.549029][T24467] ? unwind_get_return_address+0x4d/0x90 [ 1166.549059][T24467] ? __pfx_fuse_get_req+0x10/0x10 [ 1166.549085][T24467] ? __kasan_kmalloc+0x93/0xb0 [ 1166.549109][T24467] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1166.549134][T24467] ? fuse_lookup_name+0x1d0/0x8b0 [ 1166.549155][T24467] ? fuse_lookup+0x213/0x4e0 [ 1166.549176][T24467] ? __lookup_slow+0x2b7/0x410 [ 1166.549197][T24467] ? lookup_slow+0x53/0x70 [ 1166.549218][T24467] ? path_lookupat+0x3f5/0x8c0 [ 1166.549238][T24467] ? filename_lookup+0x256/0x5d0 [ 1166.549259][T24467] ? filename_linkat+0x11a/0x600 [ 1166.549277][T24467] ? __se_sys_link+0x55/0x2c0 [ 1166.549296][T24467] ? do_syscall_64+0x15f/0xf80 [ 1166.549319][T24467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.549347][T24467] __fuse_simple_request+0x2cf/0x1db0 [ 1166.549388][T24467] ? __pfx___fuse_simple_request+0x10/0x10 [ 1166.549433][T24467] ? __kasan_kmalloc+0x93/0xb0 [ 1166.549461][T24467] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1166.549495][T24467] fuse_lookup_name+0x35e/0x8b0 [ 1166.549528][T24467] ? __pfx_fuse_lookup_name+0x10/0x10 [ 1166.549567][T24467] ? d_alloc_parallel+0x366/0x1610 [ 1166.549605][T24467] fuse_lookup+0x213/0x4e0 [ 1166.549627][T24467] ? look_up_lock_class+0x57/0x110 [ 1166.549656][T24467] ? __pfx_fuse_lookup+0x10/0x10 [ 1166.549694][T24467] ? __raw_spin_lock_init+0x45/0x100 [ 1166.549723][T24467] ? __init_waitqueue_head+0xa9/0x150 [ 1166.549755][T24467] __lookup_slow+0x2b7/0x410 [ 1166.549782][T24467] ? __pfx___lookup_slow+0x10/0x10 [ 1166.549818][T24467] ? down_read+0x270/0x2e0 [ 1166.549847][T24467] lookup_slow+0x53/0x70 [ 1166.549872][T24467] path_lookupat+0x3f5/0x8c0 [ 1166.549911][T24467] filename_lookup+0x256/0x5d0 [ 1166.549940][T24467] ? __pfx_filename_lookup+0x10/0x10 [ 1166.549992][T24467] ? __might_fault+0xaf/0x130 [ 1166.550018][T24467] ? __might_fault+0xaf/0x130 [ 1166.550049][T24467] filename_linkat+0x11a/0x600 [ 1166.550080][T24467] ? __pfx_filename_linkat+0x10/0x10 [ 1166.550104][T24467] ? do_getname+0x151/0x250 [ 1166.550125][T24467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.550145][T24467] __se_sys_link+0x55/0x2c0 [ 1166.550165][T24467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.550184][T24467] do_syscall_64+0x15f/0xf80 [ 1166.550197][T24467] ? trace_irq_disable+0x3b/0x140 [ 1166.550213][T24467] ? clear_bhb_loop+0x40/0x90 [ 1166.550225][T24467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.550236][T24467] RIP: 0033:0x7f2f8899cdd9 [ 1166.550247][T24467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.550255][T24467] RSP: 002b:00007f2f89850028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 1166.550267][T24467] RAX: ffffffffffffffda RBX: 00007f2f88c16090 RCX: 00007f2f8899cdd9 [ 1166.550275][T24467] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 1166.550282][T24467] RBP: 00007f2f89850090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.550289][T24467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.550295][T24467] R13: 00007f2f88c16128 R14: 00007f2f88c16090 R15: 00007f2f88d3fa48 [ 1166.550311][T24467] [ 1167.227865][T24471] syzkaller0: entered promiscuous mode [ 1167.261065][T24471] syzkaller0: entered allmulticast mode [ 1167.312687][T24471] TC_ACT_REPEAT abuse ? [ 1167.562089][ T46] gspca_ov534_9: reg_r err -71 [ 1167.776286][ T46] gspca_ov534_9: Unknown sensor 0000 [ 1167.776380][ T46] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 1167.804072][ T46] usb 9-1: USB disconnect, device number 11 [ 1167.990856][T24494] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5178'. [ 1168.480913][T24507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.520382][T24507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.539860][T24513] loop8: detected capacity change from 0 to 7 [ 1168.570376][T24513] Dev loop8: unable to read RDB block 7 [ 1168.591765][T24513] loop8: unable to read partition table [ 1168.606333][T24513] loop8: partition table beyond EOD, truncated [ 1168.622448][T24513] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1168.883548][T23624] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1169.044436][T23624] usb 9-1: Using ep0 maxpacket: 16 [ 1169.059597][T23624] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.071726][T23624] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.084734][T23624] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1169.098866][T23624] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1169.109341][T23624] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.121966][T23624] usb 9-1: config 0 descriptor?? [ 1169.332711][T24525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.368121][T24525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.557769][T23624] microsoft 0003:045E:07DA.0054: ignoring exceeding usage max [ 1169.607451][T23624] hid_parser_main: 288 callbacks suppressed [ 1169.607474][T23624] microsoft 0003:045E:07DA.0054: unknown main item tag 0x3 [ 1169.664989][T23624] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1169.702217][T23624] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1169.736343][T23624] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1169.761274][T23624] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1169.781679][T23624] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1169.792463][T24533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5190'. [ 1169.805489][T23624] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1169.816766][T23624] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1169.836156][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1169.836171][ T29] audit: type=1326 audit(1777864465.665:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24532 comm="syz.5.5190" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1169.870954][T23624] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1169.897257][T23624] microsoft 0003:045E:07DA.0054: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1169.956153][T23624] microsoft 0003:045E:07DA.0054: no inputs found [ 1169.965991][ T29] audit: type=1326 audit(1777864465.665:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24532 comm="syz.5.5190" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1170.016070][T23624] microsoft 0003:045E:07DA.0054: could not initialize ff, continuing anyway [ 1170.062610][T23624] usb 9-1: USB disconnect, device number 12 [ 1170.111891][ T29] audit: type=1326 audit(1777864465.665:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24532 comm="syz.5.5190" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1170.172635][T24535] fido_id[24535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1170.208975][ T29] audit: type=1326 audit(1777864465.665:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24532 comm="syz.5.5190" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1170.258929][ T29] audit: type=1326 audit(1777864465.665:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24532 comm="syz.5.5190" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1170.369509][ T29] audit: type=1326 audit(1777864465.665:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24532 comm="syz.5.5190" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1170.462048][ T29] audit: type=1326 audit(1777864465.665:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24532 comm="syz.5.5190" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1170.520258][ T29] audit: type=1326 audit(1777864465.665:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24532 comm="syz.5.5190" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1170.614416][ T29] audit: type=1326 audit(1777864465.665:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24532 comm="syz.5.5190" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1170.663923][T24545] netlink: 'syz.3.5192': attribute type 11 has an invalid length. [ 1170.709699][ T29] audit: type=1326 audit(1777864465.665:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24532 comm="syz.5.5190" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa0ccb9cdd9 code=0x7ffc0000 [ 1171.066159][T24557] loop8: detected capacity change from 0 to 7 [ 1171.076966][T24557] Dev loop8: unable to read RDB block 7 [ 1171.082989][T24557] loop8: unable to read partition table [ 1171.089017][T24557] loop8: partition table beyond EOD, truncated [ 1171.096814][T24557] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1172.963979][ T46] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1173.146458][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 1173.173388][ T46] usb 9-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=52.85 [ 1173.211750][ T46] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1173.240323][ T46] usb 9-1: Manufacturer: syz [ 1173.281120][ T46] usb 9-1: config 0 descriptor?? [ 1173.366816][ T46] usb_8dev 9-1:0.0 can0: sending command message failed [ 1173.404680][T24614] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5212'. [ 1173.405314][ T46] usb_8dev 9-1:0.0 can0: can't get firmware version [ 1173.448309][T24614] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5212'. [ 1173.784705][ T46] usb_8dev 9-1:0.0: probe with driver usb_8dev failed with error -22 [ 1173.810261][T24622] netlink: 'syz.7.5213': attribute type 6 has an invalid length. [ 1173.829325][ T46] usb 9-1: USB disconnect, device number 13 [ 1173.846022][T24622] netlink: 'syz.7.5213': attribute type 7 has an invalid length. [ 1173.861213][T24622] netlink: 'syz.7.5213': attribute type 8 has an invalid length. [ 1174.673684][ T46] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1174.876506][ T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1174.906194][ T46] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1174.933470][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.965861][ T46] usb 9-1: config 0 descriptor?? [ 1174.989244][T24635] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1175.448497][ T46] hid-picolcd 0003:04D8:C002.0055: unknown main item tag 0x0 [ 1175.479664][ T46] hid-picolcd 0003:04D8:C002.0055: unknown main item tag 0x0 [ 1175.503677][ T46] hid-picolcd 0003:04D8:C002.0055: unknown main item tag 0x0 [ 1175.531612][ T46] hid-picolcd 0003:04D8:C002.0055: unknown main item tag 0x0 [ 1175.550517][ T46] hid-picolcd 0003:04D8:C002.0055: unknown main item tag 0x0 [ 1175.573511][ T46] hid-picolcd 0003:04D8:C002.0055: unknown main item tag 0x0 [ 1175.596095][ T46] hid-picolcd 0003:04D8:C002.0055: unknown main item tag 0x0 [ 1175.621635][ T46] hid-picolcd 0003:04D8:C002.0055: unknown main item tag 0x0 [ 1175.643729][ T46] hid-picolcd 0003:04D8:C002.0055: unknown main item tag 0x0 [ 1175.665939][ T46] hid-picolcd 0003:04D8:C002.0055: unknown main item tag 0x0 [ 1175.671458][T24635] input: syz1 as /devices/virtual/input/input108 [ 1175.696444][ T46] hid-picolcd 0003:04D8:C002.0055: collection stack underflow [ 1175.723650][ T46] hid-picolcd 0003:04D8:C002.0055: item 0 0 0 12 parsing failed [ 1175.749927][ T46] hid-picolcd 0003:04D8:C002.0055: device report parse failed [ 1175.782304][ T46] hid-picolcd 0003:04D8:C002.0055: probe with driver hid-picolcd failed with error -22 [ 1175.836327][ T46] usb 9-1: USB disconnect, device number 14 [ 1175.956629][T24645] tipc: Started in network mode [ 1175.979931][T24645] tipc: Node identity 2a37010b1504, cluster identity 4711 [ 1176.003877][T24645] tipc: Enabled bearer , priority 0 [ 1176.024854][T24645] syzkaller0: entered promiscuous mode [ 1176.043937][T24645] syzkaller0: entered allmulticast mode [ 1176.334971][T24650] tipc: Resetting bearer [ 1176.371942][T24650] tipc: Disabling bearer [ 1176.550094][T24661] binder_alloc: 24660: binder_alloc_buf, no vma [ 1176.692864][T24666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.706335][T24666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.737388][T24666] program syz.3.5228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1176.793895][T24669] netlink: 'syz.3.5228': attribute type 23 has an invalid length. [ 1177.145113][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.151438][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.623286][T24687] loop8: detected capacity change from 0 to 7 [ 1178.634111][T24687] Dev loop8: unable to read RDB block 7 [ 1178.641528][T24687] loop8: unable to read partition table [ 1178.650621][T24687] loop8: partition table beyond EOD, truncated [ 1178.657023][T24687] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1178.791931][T24680] netlink: 'syz.7.5230': attribute type 1 has an invalid length. [ 1178.803089][T24680] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5230'. [ 1178.832694][T24690] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5233'. [ 1179.658171][T24699] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1182.198812][T24715] FAULT_INJECTION: forcing a failure. [ 1182.198812][T24715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.248296][T24715] CPU: 0 UID: 0 PID: 24715 Comm: syz.3.5241 Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.248327][T24715] Tainted: [L]=SOFTLOCKUP [ 1182.248334][T24715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1182.248346][T24715] Call Trace: [ 1182.248354][T24715] [ 1182.248361][T24715] dump_stack_lvl+0xe8/0x150 [ 1182.248388][T24715] should_fail_ex+0x412/0x560 [ 1182.248417][T24715] _copy_to_user+0x31/0xb0 [ 1182.248445][T24715] simple_read_from_buffer+0xe1/0x170 [ 1182.248473][T24715] proc_fail_nth_read+0x1bb/0x230 [ 1182.248501][T24715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1182.248528][T24715] ? rw_verify_area+0x2a6/0x4d0 [ 1182.248553][T24715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1182.248578][T24715] vfs_read+0x20c/0xa70 [ 1182.248609][T24715] ? __pfx___mutex_lock+0x10/0x10 [ 1182.248635][T24715] ? __pfx_vfs_read+0x10/0x10 [ 1182.248661][T24715] ? __fget_files+0x2a/0x420 [ 1182.248685][T24715] ? __fget_files+0x3a0/0x420 [ 1182.248705][T24715] ? __fget_files+0x2a/0x420 [ 1182.248735][T24715] ksys_read+0x150/0x270 [ 1182.248763][T24715] ? __pfx_ksys_read+0x10/0x10 [ 1182.248797][T24715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.248817][T24715] do_syscall_64+0x15f/0xf80 [ 1182.248841][T24715] ? trace_irq_disable+0x3b/0x140 [ 1182.248867][T24715] ? clear_bhb_loop+0x40/0x90 [ 1182.248888][T24715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.248907][T24715] RIP: 0033:0x7f30f515d60e [ 1182.248925][T24715] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1182.248941][T24715] RSP: 002b:00007f30f604cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1182.248960][T24715] RAX: ffffffffffffffda RBX: 00007f30f604d6c0 RCX: 00007f30f515d60e [ 1182.248975][T24715] RDX: 000000000000000f RSI: 00007f30f604d0a0 RDI: 0000000000000004 [ 1182.248987][T24715] RBP: 00007f30f604d090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.248997][T24715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.249009][T24715] R13: 00007f30f5416038 R14: 00007f30f5415fa0 R15: 00007f30f553fa48 [ 1182.249039][T24715] [ 1182.462963][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1182.680305][T24724] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5244'. [ 1182.751537][T24724] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5244'. [ 1183.003172][T24738] tipc: Started in network mode [ 1183.024243][T24738] tipc: Node identity c6ac87b6deb6, cluster identity 4711 [ 1183.055804][T24738] tipc: Enabled bearer , priority 0 [ 1183.077793][T24742] syzkaller0: entered promiscuous mode [ 1183.103328][T24742] syzkaller0: entered allmulticast mode [ 1183.218983][T24738] tipc: Resetting bearer [ 1183.275304][T24737] tipc: Resetting bearer [ 1183.407320][T24737] tipc: Disabling bearer [ 1183.954018][T23624] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1184.173502][T23624] usb 9-1: Using ep0 maxpacket: 32 [ 1184.210311][T23624] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.262240][T23624] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.301811][T23624] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1184.391773][T23624] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1184.436654][T23624] usb 9-1: Product: syz [ 1184.455525][T23624] usb 9-1: Manufacturer: syz [ 1184.522034][T23624] hub 9-1:4.0: USB hub found [ 1184.606387][T24759] FAULT_INJECTION: forcing a failure. [ 1184.606387][T24759] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.670080][T24759] CPU: 1 UID: 0 PID: 24759 Comm: syz.7.5252 Tainted: G L syzkaller #0 PREEMPT(full) [ 1184.670112][T24759] Tainted: [L]=SOFTLOCKUP [ 1184.670120][T24759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1184.670132][T24759] Call Trace: [ 1184.670140][T24759] [ 1184.670148][T24759] dump_stack_lvl+0xe8/0x150 [ 1184.670176][T24759] should_fail_ex+0x412/0x560 [ 1184.670203][T24759] should_failslab+0xa8/0x100 [ 1184.670228][T24759] ? fuse_get_req+0x7da/0x10d0 [ 1184.670254][T24759] kmem_cache_alloc_noprof+0x87/0x650 [ 1184.670286][T24759] fuse_get_req+0x7da/0x10d0 [ 1184.670313][T24759] ? stack_depot_save_flags+0x33/0x810 [ 1184.670335][T24759] ? __lock_acquire+0x6b5/0x2cf0 [ 1184.670357][T24759] ? __pfx_fuse_get_req+0x10/0x10 [ 1184.670381][T24759] ? __kasan_kmalloc+0x93/0xb0 [ 1184.670404][T24759] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1184.670428][T24759] ? fuse_dentry_revalidate+0x38c/0xad0 [ 1184.670445][T24759] ? lookup_one_qstr_excl+0x26a/0x360 [ 1184.670467][T24759] ? filename_create+0x20e/0x370 [ 1184.670487][T24759] ? filename_linkat+0x17c/0x600 [ 1184.670504][T24759] ? __se_sys_link+0x55/0x2c0 [ 1184.670522][T24759] ? do_syscall_64+0x15f/0xf80 [ 1184.670544][T24759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.670574][T24759] __fuse_simple_request+0x2cf/0x1db0 [ 1184.670611][T24759] ? __pfx___fuse_simple_request+0x10/0x10 [ 1184.670654][T24759] ? __kasan_kmalloc+0x93/0xb0 [ 1184.670680][T24759] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1184.670712][T24759] fuse_dentry_revalidate+0x506/0xad0 [ 1184.670740][T24759] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 1184.670773][T24759] ? __d_lookup+0x66/0x780 [ 1184.670812][T24759] ? __d_lookup+0x66/0x780 [ 1184.670849][T24759] lookup_one_qstr_excl+0x26a/0x360 [ 1184.670878][T24759] filename_create+0x20e/0x370 [ 1184.670909][T24759] ? __pfx_filename_create+0x10/0x10 [ 1184.670944][T24759] filename_linkat+0x17c/0x600 [ 1184.670979][T24759] ? __pfx_filename_linkat+0x10/0x10 [ 1184.671001][T24759] ? do_getname+0x151/0x250 [ 1184.671019][T24759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.671038][T24759] __se_sys_link+0x55/0x2c0 [ 1184.671057][T24759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.671075][T24759] do_syscall_64+0x15f/0xf80 [ 1184.671096][T24759] ? trace_irq_disable+0x3b/0x140 [ 1184.671122][T24759] ? clear_bhb_loop+0x40/0x90 [ 1184.671144][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.671161][T24759] RIP: 0033:0x7f40d6f9cdd9 [ 1184.671178][T24759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.671195][T24759] RSP: 002b:00007f40d7de8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 1184.671213][T24759] RAX: ffffffffffffffda RBX: 00007f40d7216090 RCX: 00007f40d6f9cdd9 [ 1184.671227][T24759] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 1184.671239][T24759] RBP: 00007f40d7de8090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.671251][T24759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1184.671263][T24759] R13: 00007f40d7216128 R14: 00007f40d7216090 R15: 00007f40d733fa48 [ 1184.671295][T24759] [ 1185.378043][T23624] hub 9-1:4.0: 2 ports detected [ 1185.442839][T24763] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5253'. [ 1186.584402][T24756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.617565][T24756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.372718][T23624] hub 9-1:4.0: set hub depth failed [ 1187.428549][T23624] usb 9-1: USB disconnect, device number 15 [ 1188.023583][ T6867] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1188.056632][T24796] netlink: 'syz.7.5262': attribute type 5 has an invalid length. [ 1188.653558][ T5692] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1188.863547][ T5692] usb 9-1: Using ep0 maxpacket: 16 [ 1188.870819][ T5692] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.882265][ T5692] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1188.901652][ T5692] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1188.924390][ T5692] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1188.951187][ T5692] usb 9-1: SerialNumber: syz [ 1188.982606][ T5692] usb 9-1: cannot find UAC_HEADER [ 1189.167950][ T5692] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1189.224877][ T5692] usb 9-1: USB disconnect, device number 16 [ 1189.255856][T23529] udevd[23529]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1189.368093][T24803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.394545][T24803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.085738][T23622] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1190.098216][T24808] loop9: detected capacity change from 0 to 7 [ 1190.114446][ C0] blk_print_req_error: 11 callbacks suppressed [ 1190.114462][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1190.129819][ C0] buffer_io_error: 9 callbacks suppressed [ 1190.129833][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1190.150417][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1190.159608][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1190.168425][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1190.169791][T24809] program syz.5.5267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1190.177605][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1190.178262][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1190.203846][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1190.215787][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1190.224916][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1190.264016][T23622] usb 9-1: Using ep0 maxpacket: 8 [ 1190.279771][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1190.288932][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1190.299145][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1190.308344][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1190.316340][T24808] ldm_validate_partition_table(): Disk read failed. [ 1190.325087][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1190.334293][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1190.343355][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1190.352558][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1190.361235][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1190.370435][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1190.379494][T24808] Dev loop9: unable to read RDB block 0 [ 1190.387783][T23622] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1190.396726][T23622] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1190.407390][T24808] loop9: unable to read partition table [ 1190.414087][T24808] loop9: partition table beyond EOD, truncated [ 1190.420410][T23622] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1190.431968][T24808] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1190.443916][T23622] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1190.466697][T23622] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1190.539634][T23622] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1190.572577][T23622] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.784310][T24814] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5269'. [ 1190.807924][T23622] usb 9-1: usb_control_msg returned -32 [ 1190.831585][T23622] usbtmc 9-1:16.0: can't read capabilities [ 1191.002268][T24818] netlink: 'syz.3.5271': attribute type 46 has an invalid length. [ 1191.074937][ T5692] usb 9-1: USB disconnect, device number 17 [ 1191.081049][T24806] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 1192.687142][T24847] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 1192.708047][T24847] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 1192.739860][T24847] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5279'. [ 1192.799355][T24847] mac80211_hwsim hwsim51 syzkaller0: left promiscuous mode [ 1192.825026][T24844] kvm: kvm [24843]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffcc0000c800 [ 1192.835264][T24847] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode [ 1192.846248][T24844] kvm: kvm [24843]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffe500000000 [ 1192.894807][ T5692] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 1192.996147][T24852] netlink: 'syz.5.5280': attribute type 5 has an invalid length. [ 1193.079163][ T5692] usb 9-1: Invalid ep0 maxpacket: 16 [ 1193.218541][T24854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1193.245055][ T5692] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 1193.403560][ T5692] usb 9-1: Invalid ep0 maxpacket: 16 [ 1193.415843][ T5692] usb usb9-port1: attempt power cycle [ 1193.795773][ T5692] usb 9-1: new low-speed USB device number 20 using dummy_hcd [ 1193.835228][ T5692] usb 9-1: Invalid ep0 maxpacket: 16 [ 1193.974603][ T5692] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 1194.007185][ T5692] usb 9-1: Invalid ep0 maxpacket: 16 [ 1194.014129][ T5692] usb usb9-port1: unable to enumerate USB device [ 1194.373861][T24862] macvtap1: entered promiscuous mode [ 1194.394039][T24862] syz_tun: entered promiscuous mode [ 1194.401031][T24862] macvtap1: entered allmulticast mode [ 1194.419759][T24862] syz_tun: entered allmulticast mode [ 1194.461818][T24862] syz_tun: left allmulticast mode [ 1194.470324][T24862] syz_tun: left promiscuous mode [ 1195.527266][T24867] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1195.536874][T24867] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1195.756423][T24870] fuse: Unknown parameter 'nd' [ 1195.757149][T24869] fuse: Unknown parameter 'nd' [ 1196.399054][T24896] sock: sock_set_timeout: `syz.7.5293' (pid 24896) tries to set negative timeout [ 1196.413583][T23622] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1196.575832][T23622] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1196.595559][T23622] usb 9-1: config 0 has no interface number 0 [ 1196.612618][T23622] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.633957][T23622] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.656840][T23622] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1196.687009][T23622] usb 9-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1196.709129][T23622] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.736826][T23622] usb 9-1: config 0 descriptor?? [ 1197.228216][T24889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.242128][T24889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.407777][T23622] usbhid 9-1:0.1: can't add hid device: -71 [ 1197.418707][T23622] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 1197.434908][T23622] usb 9-1: USB disconnect, device number 22 [ 1198.234779][T22740] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1198.449613][T22740] usb 9-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1198.468921][T22740] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.487966][T22740] usb 9-1: Product: syz [ 1198.498169][T22740] usb 9-1: Manufacturer: syz [ 1198.508277][T22740] usb 9-1: SerialNumber: syz [ 1198.531145][T22740] usb 9-1: config 0 descriptor?? [ 1198.558676][T22740] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1199.911901][T22740] gspca_topro: reg_w err -71 [ 1199.964950][T22740] gspca_topro: Sensor soi763a [ 1199.987013][T22740] usb 9-1: USB disconnect, device number 23 [ 1200.794708][ T5692] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1201.084133][ T5692] usb 9-1: device descriptor read/64, error -71 [ 1201.403589][ T5692] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1201.663811][ T5692] usb 9-1: device descriptor read/64, error -71 [ 1201.864293][ T5692] usb usb9-port1: attempt power cycle [ 1202.644165][ T5692] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 1202.704888][T24935] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5304'. [ 1202.744185][ T5692] usb 9-1: device descriptor read/8, error -71 [ 1203.075014][ T5692] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1203.104345][ T5692] usb 9-1: device descriptor read/8, error -71 [ 1203.121735][T24943] netlink: 'syz.5.5306': attribute type 1 has an invalid length. [ 1203.253907][ T5692] usb usb9-port1: unable to enumerate USB device [ 1203.371407][T24945] bond2: (slave bridge2): making interface the new active one [ 1203.428547][T24945] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1204.053687][T22872] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1204.110174][T24955] syzkaller0: entered promiscuous mode [ 1204.132486][T24955] syzkaller0: entered allmulticast mode [ 1204.179680][T24955] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5310'. [ 1204.223771][T22872] usb 9-1: Using ep0 maxpacket: 8 [ 1204.242002][T22872] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1204.266856][T22872] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1204.301596][T22872] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1204.333702][T22872] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1204.363771][T22872] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1204.403581][T22872] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1204.433778][T22872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.692903][T22872] usb 9-1: usb_control_msg returned -32 [ 1204.713530][T22872] usbtmc 9-1:16.0: can't read capabilities [ 1204.969063][T24953] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 1204.969442][T22872] usb 9-1: USB disconnect, device number 28 [ 1206.701184][T23622] usb 4-1: USB disconnect, device number 25 [ 1206.842762][T24965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1206.939807][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1206.953795][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1206.963725][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1206.975817][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1206.985645][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1207.530769][T24971] sctp: [Deprecated]: syz.8.5315 (pid 24971) Use of int in max_burst socket option. [ 1207.530769][T24971] Use struct sctp_assoc_value instead [ 1208.003621][T24988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5320'. [ 1208.132855][T24988] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1208.445554][T24967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.472352][T24967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.493907][T24967] bridge_slave_0: entered allmulticast mode [ 1208.520828][T24967] bridge_slave_0: entered promiscuous mode [ 1208.541065][T24967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.564015][T24967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.593744][T24967] bridge_slave_1: entered allmulticast mode [ 1208.622051][T24967] bridge_slave_1: entered promiscuous mode [ 1208.743207][T24967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.792741][T24967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.924547][T24967] team0: Port device team_slave_0 added [ 1208.944999][T24967] team0: Port device team_slave_1 added [ 1209.065068][ T5637] Bluetooth: hci7: command tx timeout [ 1209.855381][T24967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.870433][T24967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.971929][T24967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.069226][T24967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.145830][T24967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.172805][T24967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.251158][T24967] hsr_slave_0: entered promiscuous mode [ 1210.258207][T24967] hsr_slave_1: entered promiscuous mode [ 1210.274928][T24967] debugfs: 'hsr0' already exists in 'hsr' [ 1210.280780][T24967] Cannot create hsr debugfs directory [ 1211.144658][ T5637] Bluetooth: hci7: command tx timeout [ 1211.173395][T25029] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1211.179934][T25029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1211.229046][T25027] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 1211.235584][T25027] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1211.243566][T25029] vhci_hcd vhci_hcd.0: Device attached [ 1211.282309][T25029] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(5) [ 1211.288835][T25029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1211.296634][T25028] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(11) [ 1211.303233][T25028] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1211.311061][T25027] vhci_hcd vhci_hcd.0: Device attached [ 1211.335542][T24967] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1211.349505][T24967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1211.353558][T25029] vhci_hcd vhci_hcd.0: Device attached [ 1211.359215][T24967] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1211.371973][T25028] vhci_hcd vhci_hcd.0: Device attached [ 1211.376674][T25042] sctp: [Deprecated]: syz.8.5328 (pid 25042) Use of int in max_burst socket option. [ 1211.376674][T25042] Use struct sctp_assoc_value instead [ 1211.403226][T24967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1211.411649][T24967] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1211.433844][T25036] vhci_hcd: connection closed [ 1211.434360][T25032] vhci_hcd: connection closed [ 1211.434455][T25030] vhci_hcd: connection closed [ 1211.439537][T24967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1211.462116][ T133] vhci_hcd vhci_hcd.5: stop threads [ 1211.463608][T22872] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1211.474930][T25031] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1211.480730][T25038] vhci_hcd: connection closed [ 1211.489797][ T133] vhci_hcd vhci_hcd.5: release socket [ 1211.507951][T24967] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1211.515552][ T133] vhci_hcd vhci_hcd.5: disconnect device [ 1211.543106][ T133] vhci_hcd vhci_hcd.5: stop threads [ 1211.546286][T24967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1211.561047][ T133] vhci_hcd vhci_hcd.5: release socket [ 1211.577631][ T133] vhci_hcd vhci_hcd.5: disconnect device [ 1211.597860][ T133] vhci_hcd vhci_hcd.5: stop threads [ 1211.616903][ T133] vhci_hcd vhci_hcd.5: release socket [ 1211.636562][ T133] vhci_hcd vhci_hcd.5: disconnect device [ 1211.655229][ T133] vhci_hcd vhci_hcd.5: stop threads [ 1211.673225][ T133] vhci_hcd vhci_hcd.5: release socket [ 1211.688696][ T133] vhci_hcd vhci_hcd.5: disconnect device [ 1211.728735][T25052] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5330'. [ 1211.839434][T24967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.945048][T24967] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.976318][T13722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.983486][T13722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.057361][T13722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.064504][T13722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.272613][T24967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.485410][T24967] veth0_vlan: entered promiscuous mode [ 1212.517453][T25059] syzkaller0: entered promiscuous mode [ 1212.538532][T25059] syzkaller0: entered allmulticast mode [ 1212.723397][T25061] tipc: Enabled bearer , priority 0 [ 1212.765154][T24967] veth1_vlan: entered promiscuous mode [ 1212.801879][T25058] tipc: Resetting bearer [ 1212.944222][T25058] tipc: Disabling bearer [ 1213.028386][T25064] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5333'. [ 1213.086644][T25066] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5333'. [ 1213.151597][T24967] veth0_macvtap: entered promiscuous mode [ 1213.198868][T24967] veth1_macvtap: entered promiscuous mode [ 1213.223962][ T50] Bluetooth: hci7: command tx timeout [ 1213.268632][T25068] bridge_slave_0: Caught tx_queue_len zero misconfig [ 1213.305797][T25068] input: syz0 as /devices/virtual/input/input109 [ 1213.312649][T24967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.374296][T24967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1213.411754][ T1102] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.446613][ T1102] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.601067][ T1102] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.621606][ T1102] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.063556][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 1215.306182][ T5637] Bluetooth: hci7: command tx timeout [ 1215.912212][T25098] sctp: [Deprecated]: syz.5.5339 (pid 25098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1215.912212][T25098] Use struct sctp_sack_info instead [ 1216.277135][ T5692] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1216.286814][ T5637] Bluetooth: hci3: command 0x2016 tx timeout [ 1216.295403][ T5692] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1216.594806][T22872] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1217.397300][T25109] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5343'. [ 1217.548904][ T48] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.578995][ T48] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.603214][ T48] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.626989][ T48] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1218.583931][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 1218.593045][ T5692] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1218.611718][ T5692] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1220.183856][ T5637] Bluetooth: hci6: command 0x0406 tx timeout [ 1225.797668][ T5692] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1225.803898][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 1225.810112][ T5692] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 1230.677306][ T48] bridge_slave_1: left allmulticast mode [ 1230.692168][ T48] bridge_slave_1: left promiscuous mode [ 1230.700111][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.721168][ T48] bridge_slave_0: left allmulticast mode [ 1230.733807][ T48] bridge_slave_0: left promiscuous mode [ 1230.760727][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.081850][ T48] bond3 (unregistering): (slave geneve3): Releasing active interface [ 1231.349174][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.371125][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.400686][ T48] bond0 (unregistering): Released all slaves [ 1231.446936][ T48] bond1 (unregistering): Released all slaves [ 1231.492565][ T48] bond2 (unregistering): Released all slaves [ 1231.556130][ T48] bond3 (unregistering): Released all slaves [ 1231.709723][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1232.184252][ T5692] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1232.192400][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 1232.201721][ T5692] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1232.678854][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1232.823945][ T30] INFO: task syz.4.4891:23257 blocked for more than 143 seconds. [ 1232.834306][ T30] Tainted: G L syzkaller #0 [ 1232.856042][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1232.883469][ T30] task:syz.4.4891 state:D stack:24408 pid:23257 tgid:23255 ppid:14557 task_flags:0x400040 flags:0x00080002 [ 1232.923453][ T30] Call Trace: [ 1232.929125][ T30] [ 1232.943908][ T30] __schedule+0x17b4/0x5680 [ 1232.963670][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1232.973768][ T30] ? __pfx___schedule+0x10/0x10 [ 1232.994510][ T30] ? schedule+0x90/0x360 [ 1233.003739][ T30] schedule+0x164/0x360 [ 1233.023662][ T30] schedule_preempt_disabled+0x13/0x30 [ 1233.043703][ T30] __mutex_lock+0x7f7/0x1550 [ 1233.063692][ T30] ? __mutex_lock+0x608/0x1550 [ 1233.083631][ T30] ? usbdev_open+0x182/0x770 [ 1233.103738][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1233.123722][ T30] ? bus_find_device+0x27d/0x2d0 [ 1233.133567][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 1233.153592][ T30] ? usbdev_open+0xa7/0x770 [ 1233.163735][ T30] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1233.183618][ T30] usbdev_open+0x182/0x770 [ 1233.193533][ T30] ? kobject_get_unless_zero+0x167/0x1f0 [ 1233.213455][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 1233.233561][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1233.241175][ T30] chrdev_open+0x4cd/0x5e0 [ 1233.253575][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1233.258563][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1233.280993][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1233.293448][ T30] do_dentry_open+0x785/0x14e0 [ 1233.299743][ T30] vfs_open+0x3b/0x340 [ 1233.313962][ T30] ? path_openat+0x2df0/0x3860 [ 1233.318781][ T30] path_openat+0x2e08/0x3860 [ 1233.333456][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1233.338889][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1233.350239][ T30] ? __pfx_path_openat+0x10/0x10 [ 1233.363631][ T30] ? __x64_sys_openat+0x138/0x170 [ 1233.370133][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1233.392484][ T30] do_file_open+0x23e/0x4a0 [ 1233.397526][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1233.413471][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1233.418371][ T30] ? alloc_fd+0x64b/0x6c0 [ 1233.422721][ T30] do_sys_openat2+0x113/0x200 [ 1233.443565][ T30] ? __se_sys_futex+0x3a8/0x450 [ 1233.453482][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1233.476449][ T30] ? rcu_is_watching+0x15/0xb0 [ 1233.481295][ T30] __x64_sys_openat+0x138/0x170 [ 1233.489520][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.504392][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1233.510990][ T30] do_syscall_64+0x15f/0xf80 [ 1233.519239][ T30] ? trace_irq_disable+0x3b/0x140 [ 1233.529825][ T30] ? clear_bhb_loop+0x40/0x90 [ 1233.542660][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.555488][ T30] RIP: 0033:0x7fb84d15d60e [ 1233.565008][ T30] RSP: 002b:00007fb84e119b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1233.583447][ T30] RAX: ffffffffffffffda RBX: 00007fb84e11a6c0 RCX: 00007fb84d15d60e [ 1233.609608][ T30] RDX: 0000000000000000 RSI: 00007fb84e119c00 RDI: ffffffffffffff9c [ 1233.625378][ T30] RBP: 00007fb84e119c00 R08: 0000000000000000 R09: 0000000000000000 [ 1233.637625][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1233.663485][ T30] R13: 00007fb84d416038 R14: 00007fb84d415fa0 R15: 00007fb84d53fa48 [ 1233.671525][ T30] [ 1233.683545][ T30] [ 1233.683545][ T30] Showing all locks held in the system: [ 1233.692774][ T30] 1 lock held by khungtaskd/30: [ 1233.705553][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1233.735788][ T30] 4 locks held by kworker/u8:3/48: [ 1233.749362][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1233.772436][ T30] #1: ffffc90000b87c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1233.783299][ T30] #2: ffffffff8fdc0968 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1233.793707][ T30] #3: ffffffff900dc0c0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x300 [ 1233.804142][ T30] 2 locks held by getty/5382: [ 1233.808844][ T30] #0: ffff8880373290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1233.819802][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1233.836588][ T30] 4 locks held by kworker/0:5/5692: [ 1233.841819][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1233.854230][ T30] #1: ffffc90005277c40 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1233.871471][ T30] #2: ffffffff900dc0c0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 1233.882036][ T30] #3: ffff8880934e0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_poweroff+0x24/0xc0 [ 1233.892260][ T30] 6 locks held by kworker/1:4/5707: [ 1233.907497][ T30] 3 locks held by kworker/0:2/22740: [ 1233.918047][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1233.930159][ T30] #1: ffffc90004437c40 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1233.954663][ T30] #2: ffffffff900dc0c0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1233.966967][ T30] 1 lock held by syz.4.4891/23257: [ 1233.973235][ T30] #0: ffff88802aead1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 1233.983250][ T30] 1 lock held by syz.1.4993/23672: [ 1233.988651][ T30] #0: ffff88802b50e1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 1233.997900][ T30] 1 lock held by syz.6.5042/23865: [ 1234.003034][ T30] #0: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1234.014333][ T30] 1 lock held by syz.3.5272/24825: [ 1234.019474][ T30] 2 locks held by syz-executor/24967: [ 1234.027535][ T30] #0: ffffffff8f227340 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1234.037340][ T30] #1: ffffffff900dc0c0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12a/0x580 [ 1234.048498][ T30] 1 lock held by syz.5.5339/25093: [ 1234.061045][ T30] #0: ffffffff8f227340 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1234.071111][ T30] 1 lock held by syz.5.5339/25097: [ 1234.077444][ T30] #0: ffffffff8f227340 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1234.091314][ T30] 1 lock held by syz.7.5340/25101: [ 1234.096742][ T30] #0: ffffffff8f227340 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1234.108980][ T30] 1 lock held by syz.8.5342/25106: [ 1234.114356][ T30] #0: ffffffff8f227340 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1234.127903][ T30] 1 lock held by syz.6.5344/25113: [ 1234.133051][ T30] #0: ffffffff8f227340 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1234.141909][ T30] 1 lock held by syz-executor/25118: [ 1234.148044][ T30] #0: ffffffff8f227340 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1234.157616][ T30] 1 lock held by syz-executor/25138: [ 1234.162931][ T30] #0: ffffffff8f227340 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1234.179415][ T30] 1 lock held by syz-executor/25140: [ 1234.191459][ T30] #0: ffffffff8f227340 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1234.200832][ T30] 2 locks held by sed/25172: [ 1234.205712][ T30] [ 1234.208067][ T30] ============================================= [ 1234.208067][ T30] [ 1234.216533][ T30] NMI backtrace for cpu 0 [ 1234.216552][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1234.216578][ T30] Tainted: [L]=SOFTLOCKUP [ 1234.216585][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1234.216597][ T30] Call Trace: [ 1234.216605][ T30] [ 1234.216612][ T30] dump_stack_lvl+0xe8/0x150 [ 1234.216638][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1234.216666][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1234.216689][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1234.216720][ T30] sys_info+0x135/0x170 [ 1234.216744][ T30] watchdog+0xfd3/0x1030 [ 1234.216777][ T30] ? watchdog+0x1c9/0x1030 [ 1234.216809][ T30] kthread+0x388/0x470 [ 1234.216833][ T30] ? __pfx_watchdog+0x10/0x10 [ 1234.216857][ T30] ? __pfx_kthread+0x10/0x10 [ 1234.216882][ T30] ret_from_fork+0x514/0xb70 [ 1234.216904][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1234.216924][ T30] ? __switch_to+0xc79/0x1410 [ 1234.216951][ T30] ? __pfx_kthread+0x10/0x10 [ 1234.216976][ T30] ret_from_fork_asm+0x1a/0x30 [ 1234.217013][ T30] [ 1234.217020][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1234.334290][ C1] NMI backtrace for cpu 1 [ 1234.334309][ C1] CPU: 1 UID: 0 PID: 6867 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 1234.334332][ C1] Tainted: [L]=SOFTLOCKUP [ 1234.334339][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1234.334351][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1234.334381][ C1] RIP: 0010:x2apic_send_IPI+0x73/0xe0 [ 1234.334406][ C1] Code: 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 42 41 8b 16 0f ae f0 0f ae e8 83 fb 02 b8 00 04 00 00 0f 45 c3 b9 30 08 00 00 0f 30 <66> 90 5b 41 5c 41 5e 41 5f 5d e9 be c5 35 0a cc 89 fe 89 fd 48 c7 [ 1234.334421][ C1] RSP: 0018:ffffc9000555f6d0 EFLAGS: 00000206 [ 1234.334435][ C1] RAX: 00000000000000fb RBX: 00000000000000fb RCX: 0000000000000830 [ 1234.334446][ C1] RDX: 0000000000000000 RSI: 00000000000000fb RDI: 0000000000000000 [ 1234.334457][ C1] RBP: ffffc9000555f840 R08: ffffffff9030a7f7 R09: 1ffffffff20614fe [ 1234.334470][ C1] R10: dffffc0000000000 R11: ffffffff81745300 R12: dffffc0000000000 [ 1234.334483][ C1] R13: dffffc0000000000 R14: ffff8880b86201b0 R15: ffffffff8e264790 [ 1234.334496][ C1] FS: 0000000000000000(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 1234.334510][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1234.334522][ C1] CR2: 00007fff498115d8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 1234.334537][ C1] Call Trace: [ 1234.334544][ C1] [ 1234.334552][ C1] smp_call_function_many_cond+0xc26/0x13d0 [ 1234.334573][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1234.334599][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1234.334618][ C1] ? kmem_cache_alloc_bulk_noprof+0xaf/0x7c0 [ 1234.334643][ C1] ? __pfx___text_poke+0x10/0x10 [ 1234.334666][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1234.334687][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1234.334705][ C1] smp_text_poke_batch_finish+0xb5f/0x1160 [ 1234.334738][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1234.334764][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 1234.334794][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1234.334820][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 1234.334840][ C1] static_key_disable+0x1a/0x20 [ 1234.334857][ C1] toggle_allocation_gate+0x1fe/0x290 [ 1234.334882][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1234.334906][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1234.334933][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1234.334951][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1234.334968][ C1] process_scheduled_works+0xb5d/0x1860 [ 1234.334999][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1234.335019][ C1] ? assign_work+0x3d5/0x5e0 [ 1234.335038][ C1] worker_thread+0xa53/0xfc0 [ 1234.335067][ C1] kthread+0x388/0x470 [ 1234.335088][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1234.335104][ C1] ? __pfx_kthread+0x10/0x10 [ 1234.335125][ C1] ret_from_fork+0x514/0xb70 [ 1234.335143][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1234.335160][ C1] ? __switch_to+0xc79/0x1410 [ 1234.335184][ C1] ? __pfx_kthread+0x10/0x10 [ 1234.335206][ C1] ret_from_fork_asm+0x1a/0x30 [ 1234.335233][ C1] [ 1234.484298][ T50] Bluetooth: hci7: command 0x0c1a tx timeout [ 1234.490675][ T5692] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 1234.659336][ T5692] Bluetooth: hci7: Error when powering off device on rfkill (-110) [ 1234.687141][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1234.694019][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1234.704702][ T30] Tainted: [L]=SOFTLOCKUP [ 1234.709024][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1234.719081][ T30] Call Trace: [ 1234.722366][ T30] [ 1234.725306][ T30] vpanic+0x56c/0xa60 [ 1234.729307][ T30] ? __pfx___schedule+0x10/0x10 [ 1234.734170][ T30] ? __pfx_vpanic+0x10/0x10 [ 1234.738687][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1234.744863][ T30] panic+0xc5/0xd0 [ 1234.748596][ T30] ? __pfx_panic+0x10/0x10 [ 1234.753023][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1234.758413][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1234.764585][ T30] watchdog+0x102c/0x1030 [ 1234.768936][ T30] ? watchdog+0x1c9/0x1030 [ 1234.773375][ T30] kthread+0x388/0x470 [ 1234.777456][ T30] ? __pfx_watchdog+0x10/0x10 [ 1234.782148][ T30] ? __pfx_kthread+0x10/0x10 [ 1234.786753][ T30] ret_from_fork+0x514/0xb70 [ 1234.791353][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1234.796473][ T30] ? __switch_to+0xc79/0x1410 [ 1234.801172][ T30] ? __pfx_kthread+0x10/0x10 [ 1234.805771][ T30] ret_from_fork_asm+0x1a/0x30 [ 1234.810528][ T30] [ 1234.813779][ T30] Kernel Offset: disabled [ 1234.818089][ T30] Rebooting in 86400 seconds..