last executing test programs: 9m1.852542889s ago: executing program 32 (id=1466): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0xfffffffd, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x19, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c11a94aa1bac8e451b664726f6f746d6f64653db0303030aa3030303030303030303030303034303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r5, &(0x7f0000006840)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(0x0, 0x14507f, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x11, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000008880)=""/102400, 0xfffffecf) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r7 = openat$cgroup_ro(r1, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 8m58.839996136s ago: executing program 33 (id=1482): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5}]}, 0x24}}, 0x0) r1 = openat$cachefiles(0xffffff9c, &(0x7f0000000240), 0x12081, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0xc, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0007000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) nanosleep(&(0x7f0000000300), 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x3ff, 0x12201) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001080)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [], 0x6c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x208) keyctl$dh_compute(0x17, &(0x7f0000000640), &(0x7f0000000680)=""/22, 0x16, &(0x7f00000007c0)={&(0x7f00000006c0)={'sha3-512-generic\x00'}, &(0x7f0000000700)="c2c24ec1fe85459ec919f697a8520d7c6e71bfdc7610fed3bfefe96b377e93e1e1aae8f7cc0b463501f9a2f39df7afd76e3322ab43c60a6ba6ccb211e48652b7cf95bbab78618d19278cc4ba0c8ba9a660a4f5587fee30b9452bba140c126516fedf0a0c990467a6cafc62feb54b1d6a0e1ac43b380bc85feba9955d475d65114a93742aeacd45005238ae32ad0c416bce2e09d01616aefefead6654a5e253fda89b33277b67f309f5482479fe60db3695", 0xb1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0x4018aee2, &(0x7f0000000240)=""/90) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='msdos\x00', 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x7}, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$sock(r6, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003440)}, 0x0) 8m49.645134837s ago: executing program 4 (id=1516): r0 = mq_open(&(0x7f0000000000)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98+\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\xb1 \x16\x1c9\xb7G\t}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xf9S\x15\xd8\x01I\xe5\xdc\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvr\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x2, 0xa8, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 8m49.644724059s ago: executing program 4 (id=1517): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x3, r0, 0xfc, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="08110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000012edbfb3f2caba6d0b538517debc1d53ddb6b38df41704fc4de0a034fe86aca4eff228da9f967a37782f9c0cfd17496571f42fcb037cc0429a440eb567cec3d46e116094c7592d9839cdab09b3b75a7a22d9896116ddaef80d7ccd41d4a120388a53fd04cd2622913ff574b8b462194f5ab174efce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000cf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0xd49e02f9ce96cfa5, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = socket(0x1a, 0x800, 0xffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r9, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, r8, {0x5, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) unshare(0x2a020400) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006c090890e0878f0e1ac6e7f89b334d959b4a9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90d5943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) unshare(0x2000400) close(r12) 8m48.175512916s ago: executing program 4 (id=1518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0), 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5b6c108701801007fe6010203010902"], 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) sendto$inet6(r0, &(0x7f0000000280)="03", 0x100000, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x9, 0xc9, 0x401}}}, 0x8) 8m47.855089084s ago: executing program 5 (id=1519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)={0x44, r2, 0xb97534d5fe9704cf, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x44}}, 0x0) clock_gettime(0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r4, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0xfd1a}, 0x1, 0x0, 0x0, 0x4008001}, 0x4010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24040091) 8m47.854726856s ago: executing program 5 (id=1520): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @vbi={0x1, 0x315, 0xffffff54, 0x30324c4a, [0x2dec, 0x5], [0xfff, 0x7], 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_audit(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000000)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)="30a19985a9c5cddb84ae087d45b3541cdc4b31c1deed1ad79e6a8089c4e396482ca5dfdea65a49cd521605d732f0ab3d7889b437f798fc2d60174df9384cd18190b312c4568720724368f13e2417f93df0136eea5e9bd828185e73367d220b5cfc637b3668a7d1c9513c76cc7ba954f245cfe96878d52618ab3ad480528db3af85699e5e6b1f7cd4d1c8a003948ea583852853b42c48140cb2e3ab03f9eddaab36dc0e47c24b7b4b3ca416e649b2aa65c73abc0e2d3f444c2cf82a77de393a622e9f3b77fcd7f934fa4c9dde0ecbd60eb579ec483bd5ad79afec120d4a1f87e54926c5f691f3ed", 0xe7}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000d00)) writev(r5, &(0x7f0000000300), 0x0) socket$nl_route(0x10, 0x3, 0x0) 8m47.16528078s ago: executing program 5 (id=1521): close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) io_setup(0x589, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000980)=ANY=[], 0x3c}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001900010000000000000000001d010900500010"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x1662, 0x900) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2329000, 0x800}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000720a00000200000000fa1900800c0000", @ANYRESHEX=r6, @ANYRESOCT, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES16=r1], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYRES16=r7], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r8}, 0x10) 8m46.805452896s ago: executing program 4 (id=1522): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000010c0)=0xffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001100)=@newchain={0x24, 0x64, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0xfff2, 0x5}, {0xffe0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) 8m46.804927521s ago: executing program 4 (id=1523): socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x20363159, 0x0, 0xa, [{0x0, 0xffffffff}, {0x10}, {}, {}, {}, {}, {}, {0x0, 0xa4}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) renameat2(r5, &(0x7f0000000000)='./file1\x00', r5, 0x0, 0x4) sendfile(r6, r5, 0x0, 0x578410eb) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_MASTER={0x8, 0x3}]}, 0x28}}, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r8}) socket$inet6(0xa, 0x3, 0xff) 8m46.483057524s ago: executing program 5 (id=1524): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000080), 0x10) listen(r4, 0x0) accept4$llc(r4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfffffffffffffc51) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="05003300020000000800340001000097"], 0x2c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400000000000000", @ANYRES32=r5, @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) 8m42.223487041s ago: executing program 34 (id=1508): socket$inet6(0xa, 0x6, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x0, 0x4, 0x1000, 0x5, 0x472c, 0x8, 0x4, {0x0, @in={{0x2, 0x4e21, @local}}, 0x7, 0xdf1, 0x9, 0x1, 0x10}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x4, 0x4, 0x324, 0xffffffff, 0x194, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [], [], 'batadv_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @private0, [], [], 'hsr0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x380) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34393b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c00000000b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa88af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340100001a0001000000000000000000fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000a00000000000000480003006465666c61746500"/236], 0x134}}, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x14800, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x5a, 0x6, 0x101, 0x4, 0x7, 0x6, 0x8, 0x80000001}, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) 8m40.730742697s ago: executing program 35 (id=1512): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x7, 0xa}, {0x2, 0xffff, 0x1, 0x4, 0x833}}}}, 0x17) 8m40.16001219s ago: executing program 5 (id=1527): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x4004480c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x690a, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40050) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000000140)=0x9, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29, 0xffe4}, 0x14}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000700)=0x12) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="e9070000000000000000010000001c0002800c00018008000100030000000c0001800800010001000000"], 0x30}}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7fe}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) 8m40.12674571s ago: executing program 4 (id=1528): socket$kcm(0xa, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0xdb, &(0x7f0000000680)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0xa1, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}], "77efe604d60ae419ba09bd362155e4bd0dabd73a98b2b72d51fc035fcb30abc6a0d7983a6caf4de785b33036d38010237e727f2954d9a558388898288478b2b5adc9393550c2ba59d321f1fa8caff0fe67ad26eff5d035c919"}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xb, 0x3}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x10c000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') 8m39.260649184s ago: executing program 5 (id=1529): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x20000000, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0xc0101282, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r8, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x400000, 0x0) 8m24.713388256s ago: executing program 36 (id=1528): socket$kcm(0xa, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0xdb, &(0x7f0000000680)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0xa1, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}], "77efe604d60ae419ba09bd362155e4bd0dabd73a98b2b72d51fc035fcb30abc6a0d7983a6caf4de785b33036d38010237e727f2954d9a558388898288478b2b5adc9393550c2ba59d321f1fa8caff0fe67ad26eff5d035c919"}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xb, 0x3}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x10c000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') 8m24.185929103s ago: executing program 37 (id=1529): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x20000000, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0xc0101282, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r8, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x400000, 0x0) 6m54.37377297s ago: executing program 9 (id=1670): close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) io_setup(0x589, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000002060108000000000000000000000000050005000a00000005000400a18a4af09565b3f7686173683a69702c706f72742c6e657400000000"], 0x3c}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x1662, 0x900) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2329000, 0x800}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000720a00000200000000fa1900800c0000", @ANYRESHEX=r6, @ANYRESOCT, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES16=r1], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYRES16=r7], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r8}, 0x10) 6m53.655149627s ago: executing program 9 (id=1678): openat$dir(0xffffffffffffff9c, 0x0, 0xc04310cc966ef987, 0x11) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x20a382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x228, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x1ec, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x2}}, @TCA_FW_ACT={0x1e0, 0x4, [@m_ife={0x74, 0xa, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x5, 0xff, 0x6}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_SMAC={0xa}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_mirred={0xf4, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0xc6, 0x6, "1e5008cffd725e7b1920eabf447a9bfb5b93e9ad2a7313bc380907b1c40d1fc148a926b4b9a95f4cb9ae3a1f3dc0086759dce9eda2a7a2ed251fb2f61daa32621913c4ff6d0aeb3845018a20b2cd36a279df10985d2bf8ef0ac1ccc5a7db9576b2eb9dcefc7e361d3617259fc929ea18843d022b5672552aac0682cc4b7232a91225752ca9e39ff435fe66bcdf41fb9b9549785ee75e82077da39f7240fa00943b7f3e12268af5daf879b301e684a747e6201ce1904c21ea949acb909cabadd1460a"}, {0xc, 0x7, {0x5b8479fade4d90f0}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x74, 0x1c, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x7f}, @TCA_MPLS_LABEL={0x8, 0x5, 0x70e92}]}, {0x1e, 0x6, "223a28230125caeb5c6167b70bc346a8e39e72042ae7ccc85deb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x228}, 0x1, 0x0, 0x0, 0x80}, 0x800) 6m51.872821295s ago: executing program 38 (id=1690): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x228, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x1ec, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x2}}, @TCA_FW_ACT={0x1e0, 0x4, [@m_ife={0x74, 0xa, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x5, 0xff, 0x6}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_SMAC={0xa}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_mirred={0xf4, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0xc6, 0x6, "1e5008cffd725e7b1920eabf447a9bfb5b93e9ad2a7313bc380907b1c40d1fc148a926b4b9a95f4cb9ae3a1f3dc0086759dce9eda2a7a2ed251fb2f61daa32621913c4ff6d0aeb3845018a20b2cd36a279df10985d2bf8ef0ac1ccc5a7db9576b2eb9dcefc7e361d3617259fc929ea18843d022b5672552aac0682cc4b7232a91225752ca9e39ff435fe66bcdf41fb9b9549785ee75e82077da39f7240fa00943b7f3e12268af5daf879b301e684a747e6201ce1904c21ea949acb909cabadd1460a"}, {0xc, 0x7, {0x5b8479fade4d90f0}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x74, 0x1c, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x7f}, @TCA_MPLS_LABEL={0x8, 0x5, 0x70e92}]}, {0x1e, 0x6, "223a28230125caeb5c6167b70bc346a8e39e72042ae7ccc85deb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x228}, 0x1, 0x0, 0x0, 0x80}, 0x800) 6m19.903011132s ago: executing program 8 (id=1923): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_vhci(0x0, 0xd) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"a2e3ad214fc752f91b4847f70e06d038e7ff7fc6e5539b326d078b089b3b083872090890e0878f0e1ac6e7049b3367959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31300d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f097e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f028dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xfffffffffffffebd}}, 0x1006) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000002c0)={0x0, &(0x7f00000000c0)}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb17", 0x94}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x210}], 0x1, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x403, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x5}]}}}]}, 0x38}, 0x1, 0xba01}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010000000000000000000a0080000004000000050000140005"], 0x30}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009c9abc0825105f0029fe0102030109021200caa70000000904"], 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x0) 6m18.534206462s ago: executing program 8 (id=1930): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) io_setup(0x9, &(0x7f0000000500)) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) 6m18.403190694s ago: executing program 8 (id=1931): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r0, 0x2271, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r7, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x0, 0x989680}, &(0x7f0000000780)={0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r9, 0x0) 6m18.070336462s ago: executing program 8 (id=1933): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000100), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@noswap}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2100) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x6c}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0xffff, 0x9, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0xfffd, 0x401f, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) ioctl$TUNSETNOCSUM(r6, 0x8923, 0x20000000) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) read$FUSE(r6, &(0x7f0000001580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0xee01, r7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {r3, r7}}, './file0/file0\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) 6m16.333608129s ago: executing program 8 (id=1943): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000080), 0x10) listen(r4, 0x0) accept4$llc(r4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="05003300020000000800340001000097"], 0x2c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400000000000000", @ANYRES32, @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) 6m16.124713262s ago: executing program 8 (id=1944): close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) io_setup(0x589, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000002060108000000000000000000000000050005000a00000005000400a18a4af09565b3f7686173683a69702c706f72742c6e657400000000"], 0x3c}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001900010000000000000000001d010900500010"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x1662, 0x900) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000720a00000200000000fa1900800c0000", @ANYRESHEX=r6, @ANYRESOCT, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES16=r1], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYRES16=r7], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r8}, 0x10) 6m16.06862368s ago: executing program 39 (id=1944): close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) io_setup(0x589, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000002060108000000000000000000000000050005000a00000005000400a18a4af09565b3f7686173683a69702c706f72742c6e657400000000"], 0x3c}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001900010000000000000000001d010900500010"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x1662, 0x900) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000720a00000200000000fa1900800c0000", @ANYRESHEX=r6, @ANYRESOCT, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES16=r1], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYRES16=r7], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r8}, 0x10) 5m38.953032894s ago: executing program 7 (id=2181): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x7f00) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xa, {0x3, 0x0, 0x100000000000000, 0x800, 0x0, 0x0, {0x0, 0x3, 0x2, 0x0, 0x0, 0x46, 0x1, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m38.579573236s ago: executing program 7 (id=2183): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x6c, r7, 0x1, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x4e, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @from_mac=@broadcast, {0x9, 0xc4d}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x10, 0x9, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x5, 0x0, {0xc, 0x5, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x81, 0x8}}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) 5m37.653556163s ago: executing program 7 (id=2185): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) syz_usb_connect(0x0, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5b6c108701801007fe6010203010902"], 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="041d1509c90001b6"], 0x8) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002480)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') 5m36.103408677s ago: executing program 7 (id=2193): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x6c, r7, 0x1, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x4e, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @from_mac=@broadcast, {0x9, 0xc4d}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x10, 0x9, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x5, 0x0, {0xc, 0x5, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x81, 0x8}}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) 5m35.243524955s ago: executing program 7 (id=2197): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2dff, 0x53ad, 0x8, 0x0, 0x5b) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_create(0x1, 0x80800) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) ioprio_set$pid(0x2, r6, 0x4007) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) pread64(r5, &(0x7f0000000040)=""/172, 0xac, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x6d) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010003000000ffe3664c37c46073000010000500000000002000040000000000"], 0x24, 0x1) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x112) 5m34.2834489s ago: executing program 7 (id=2206): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x800, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x8, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x38}}, 0x4000) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r3, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000480)="be606c8ba8ed", 0x6}], 0x2, 0xf, 0xff) poll(0x0, 0x0, 0x263) (async) pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="f492", 0x2}], 0x1, 0x401, 0x7fff) (async) syz_usb_disconnect(r1) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getnexthop={0x18, 0x6a, 0x101, 0x0, 0x0, {0x0, 0x2}}, 0x18}}, 0x0) 5m19.294630653s ago: executing program 40 (id=2206): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x800, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x8, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x38}}, 0x4000) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r3, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000480)="be606c8ba8ed", 0x6}], 0x2, 0xf, 0xff) poll(0x0, 0x0, 0x263) (async) pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="f492", 0x2}], 0x1, 0x401, 0x7fff) (async) syz_usb_disconnect(r1) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getnexthop={0x18, 0x6a, 0x101, 0x0, 0x0, {0x0, 0x2}}, 0x18}}, 0x0) 4m8.962163344s ago: executing program 0 (id=3880): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}, 0x1, 0x4c00000000000000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x1a52a53203556666) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m8.891621018s ago: executing program 0 (id=3888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "42c59c23cba5509acc1fcb978db9c707"}]}}}}}}}, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}, {"d3"}}}}}}, 0x0) 4m8.84136904s ago: executing program 0 (id=3892): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) shutdown(r0, 0x1) 4m8.790911212s ago: executing program 0 (id=3894): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a0002000a0ada1b40d80800c500c50083", 0x2d}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) 4m8.790544811s ago: executing program 0 (id=3895): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) r0 = syz_io_uring_setup(0x81f, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x6}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) r3 = memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x4) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 4m8.732758808s ago: executing program 0 (id=3896): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0xfffffffffffffd28, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x1, r2, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) 3m53.518020657s ago: executing program 41 (id=3896): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0xfffffffffffffd28, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x1, r2, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) 2.984503476s ago: executing program 2 (id=5420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x8890) r1 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x2) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)}], 0x1) ioctl$BLKTRACESETUP(r5, 0xc0401273, &(0x7f0000000180)={'\x00', 0x400, 0x1, 0xfff, 0x8000, 0x7, r2}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 2.830493469s ago: executing program 6 (id=5422): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x8, @mcast1, 0x40}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40084504, &(0x7f0000ffcffc)) 2.67335618s ago: executing program 3 (id=5423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x24, 0x28, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {0xb}, {0xd}}}, 0x24}}, 0x24044098) (fail_nth: 6) 2.618519101s ago: executing program 6 (id=5424): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0100002ac0000000000070003", @ANYRESDEC=r0], 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) r5 = userfaultfd(0x801) (async) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x2, 0x9f7b}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYBLOB="030004000d00070008000400c21c7b3128d6db9b30e1bfa313642662273a54862d4c8c2c41a350d0f2", @ANYRES16=r4, @ANYRES64=r7, @ANYRESHEX=r5], 0x10) (async) bind$ax25(r6, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) (async) close(r6) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000300)=0x1000, 0x7ff, 0x6) 2.560370911s ago: executing program 3 (id=5425): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x100) accept4(r0, 0x0, 0x0, 0x0) (fail_nth: 6) shutdown(r0, 0x0) 2.560179315s ago: executing program 6 (id=5426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{}]}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4008811) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x24, 0x28, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {0xfff1}, {0xd}}}, 0x24}}, 0x24044098) 2.500458074s ago: executing program 3 (id=5427): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1) socket$inet(0x2, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0xa2d5, 0xff, 0x7a, 0x6}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800000, 0x0, &(0x7f0000000000)=0x4, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) shmdt(0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 2.498420814s ago: executing program 6 (id=5428): syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) 2.12029544s ago: executing program 3 (id=5429): r0 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x2, &(0x7f00000001c0)=0x6, 0xa) set_mempolicy(0x3, &(0x7f0000000000)=0x9, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x2b8, 0x182, 0x130, 0x0, 0x2a8, 0x3a8, 0x3a8, 0x2a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1c}, @loopback, [0x0, 0xff000000, 0xff000000, 0xff], [0x0, 0xffffff00], 'pim6reg0\x00', 'syz_tun\x00', {0xff}, {}, 0x2e, 0x7, 0x0, 0xc}, 0x0, 0xa4, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x16, 0x8, 0x3, 0x4, '\x00', 'syz1\x00', {0x5c2}}}}, {{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@srh1={{0x8c}, {0x1, 0x49, 0xcd, 0x7, 0xfff7, @empty, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0x0, 0xff], [0x0, 0xffffff00, 0xffffffff, 0xffffff00], 0x2000, 0x66998a5075c8643f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7ff, 0xffff, 0x7f, 'netbios-ns\x00', {0x9}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3cc) sendmsg$tipc(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000b00)="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", 0x137}, {&(0x7f0000002100)="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", 0x492}], 0x2, 0x0, 0x0, 0x8015}, 0x40c0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$inet(r3, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000005c0)={0x9, 0x3, {0xffffffffffffffff}, {0xee01}, 0x5000, 0x46743f5b}) sched_setaffinity(r5, 0x8, &(0x7f0000000600)=0xffffffffffffffff) r6 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r7, {0x0, 0xc2dc}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f00000004c0)={0x1, 0x1, 0x4, r1, 0x7fff}, 0xc) r9 = eventfd2(0xfffffffe, 0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000080)={r9, 0x14}) write$eventfd(r9, &(0x7f0000000080)=0x430f, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001900004228bd7200fcdbdf25bb70dee3cea9388400fd040006000008", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r10, @ANYRES32=r7], 0x2c}}, 0x4000880) 2.119985738s ago: executing program 2 (id=5430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000300", @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000020008000300030000000800070000000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 2.070021369s ago: executing program 2 (id=5431): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x127c, &(0x7f0000000d40)=@type=0x4) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x4, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x2, 0x0, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r2, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) capset(0x0, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xec}}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000000000000000008080900010073797a300000000051995b44a6f45062113c5e5f2f2bc967de012bcc48266749408f874008c8b0d9b6f7801a9181d96387c28480ec0967392fea802d1c99048ddf86122f118c41a7626cdc5cd76a35a18ecd985a4796faa1234bca8f496f763746dcc4ca36bbe99932e98e451ec0ff5b506188849c8506701c4288a065a9bba7f8c86c2c9a926c7bf18d25dab8b39994d4279b613491d9fca6371239257efce670c7cd2136142fd436bb5bda958cac045b6ff58206e19a9cbe7f8ccb2e6164d31358f059aa6393e5d4b3849b"], 0x20}, 0x1, 0x0, 0x0, 0x8009}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x18}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.018633454s ago: executing program 3 (id=5432): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10001, 0x2001) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000007804010600000000000000000c000000fc00000000000000e8ffe06770d0c1f16d9df5c1734cee6c8788a6b51ec1eb918c8839b2bc6c2c64a59230008e94aaf69d9b3766b224679e4a0b87a7ad7020a7c779e25a907c19bfc1b651a84c"], 0x1c}], 0x1}, 0x1) openat$cdrom(0xffffff9c, &(0x7f0000000880), 0x80040, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) set_mempolicy(0x4005, 0x0, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet_int(r3, 0x0, 0x4, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="896117f31bbc1ebcafc34cdc102b16ca5ea68848d77c42a99ab285a2fd0b05db3950e0d5c3e2c30ef80eac6154e71db1d263f1154987edd7e962b0e5504bf2454c6909f71d1719651c09dfd05ff6f37843d2cc275b2e7fb93fe682a1e1d681e4f1f98356656a821c67cab1286c2cf646a1a5ffa41cb44a2428762201d6f5e2642c927100e5286f763519a2453af9f118bfdece675972a7a219cc608397c5536e62d23d066bc9a955aab1d48a0b19cef8eed6becd05f6959114232e9a6f380be2d7ff3dfa11e29de52a08d5853a0ca4e1"], 0x4) chdir(&(0x7f0000000100)='./file0\x00') ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x98, &(0x7f00000000c0)={0xff80000000, 0x10000, 0x2}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x9, 0xfa55, 0xfffd}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 1.201398274s ago: executing program 2 (id=5438): socket$inet6(0xa, 0x1, 0x0) socket(0x8000000010, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000140)=""/190) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee01) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000030400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="bd99933c00dbfa605ca7ab9b68b12eabde378e6834923e5efaffec585c63302f11f7917c3cefade7a0c5e159b39c0370dee158469208754373b7f8be813b15a33e07c96538f595aa91f7a09d31e52a2c1edbf59e1b92113590040e940b27c756c401073fedeea6f34263612136411fff913aa2b9171c1c98c557e2f92051"], 0x44}}, 0x0) 1.14037358s ago: executing program 6 (id=5439): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1230023, &(0x7f0000000080)=ANY=[@ANYBLOB="73e57a653dd4b100"]) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@ifindex, 0x32, 0x4bb11a8cf0efaf80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="30010000200000000002000000080000000000000000000000000000000000000000000000334f879a00000000000000d446632d700fa84782a844a2a48ecf6d2247206d12aa40244308fd61477ec6e26ac15af89e2d73daaa0fe425e4efed342df9377c7095b19eb3b36735104f8f7338224d5f483da5b49f49c5234e34d1"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="00004481e4aa611fd1e3d92345d2c16c3e0d1be532e42700214499e85eb934b5ff14b35bec100916812df23f25e5046ea7973fed6d9a74204f6d0e1f1a9e9a3f13c427698b6b41f9e444c872eb4729aed914cf73ee6316a7b71c275377bc0c0c4dd3273d8c9eb57184105df52bb2831c8f6311f2a01185e42f96ed8c2a6def7970eaf4f1361e5a5b94c5cb41e48c6c34688e37840280095cbf89e4423234528c6c1dd3d9641e2f7e7c41d58f3bde3a9df92ca4fee5b6226356a6ea1412b3949e08838ee97d84b00b2f2060a13005861d2e745f13abb1040b4f100eacf0864a5fb85443bd8a7a41", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioperm(0x0, 0x7fff, 0x2) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) 1.096998576s ago: executing program 2 (id=5440): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x10, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 1.092833958s ago: executing program 3 (id=5441): syz_80211_inject_frame(0x0, 0x0, 0xb5) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x6caf, &(0x7f0000000200)={0x0, 0x100, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x4000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x26040800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 499.874989ms ago: executing program 1 (id=5444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff1, 0xfff1}, {0x0, 0xe}}}, 0x23}}, 0x0) 410.395206ms ago: executing program 1 (id=5445): unshare(0x68060200) unshare(0x4c040900) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r6 = openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0), 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f0000001100)={0x0, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r8, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d06}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa4}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x480c0) 290.364133ms ago: executing program 6 (id=5446): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000080), 0x10) listen(r4, 0x0) accept4$llc(r4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f00000008000300", @ANYBLOB="05003300020000000800340001000097"], 0x2c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400000000000000", @ANYRES32, @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) 220.449266ms ago: executing program 1 (id=5447): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001d14010000000000000000000800030001fc0000080001000000000008003f"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10) 220.128181ms ago: executing program 1 (id=5448): sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x4008800) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) sendto$packet(r0, &(0x7f0000000080)='Y', 0x1, 0x10, &(0x7f00000000c0)={0x11, 0xe, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x1000}, 0x20) syz_clone(0x8104000, 0x0, 0x0, 0x0, 0x0, 0x0) 219.716476ms ago: executing program 2 (id=5449): socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000000c001400", @ANYRES64], 0x28}}, 0x4800) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_io_uring_setup(0x2000110, &(0x7f00000003c0)={0x0, 0x0, 0x2000, 0x0, 0x8000004}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x48, 0x0, r6, 0x0, 0x0}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000), 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 314.18µs ago: executing program 1 (id=5450): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='xprtrdma_err_unrecognized\x00', r0}, 0x18) (async) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="02010009080000000000000000000000030002000000e0000002000005000000000002000000e00000f0ffffffffffffff0000000000000000000000000000001133eab6e673d880887c5ebbbb4db536d2ec70504ec06a17da33b8a91e2b7f44222baac0f5765a41caa8c3e3e27b5e00ca470914fa50894650f1e6b33e6e95"], 0x40}}, 0x4) (async) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x103, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) r4 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r4) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) 0s ago: executing program 1 (id=5451): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) close(r0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) write$midi(r4, &(0x7f0000000440)="97904d559ddaf5cbdc5c4feb8c1c8dfb98d7ea3e696c5d78bd9aa167c7c13734addc1ef72caf89ba76150be2f6413db282b5f6c6f51304e43690393183166a61cc4d5902f8fa3b3e82596ceaf12db304b7cbcc3162986184087a15e2a1bef9ac8afbe4f25204cafc3b156b97a910851cd7bb32718613484d5e12df29a439d7deed5396c5272268e8c91b7913e65730f1d9b9104e41927dd473a74b1b6f79d4b37bac658074954aaf6d83f0b346f642879abd35bff5bedf932b7f3c3309a1e0bb1ee1b0cbc3ec5003578f158361bfef1155a0967b9679d7721e", 0xd9) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x20c, 0xa0, 0x11, 0x148, 0x0, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0xff000000, 0xffffff00, 'veth1_vlan\x00', 'team_slave_1\x00', {}, {0xff}, 0x11, 0x2, 0x10}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x0, 0x4}, 0x2, 0x100000}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x22}, 0xffffffff, 0x0, 'macvtap0\x00', 'tunl0\x00', {}, {}, 0x32, 0x1, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x43, 0x409, 0x8, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x268) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x0, 0x16, 0xa, 0x303, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x0, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'team_slave_1\x00'}, {0x0, 0x1, 'wlan1\x00'}, {0x0, 0x1, 'tunl0\x00'}, {0x0, 0x1, 'macsec0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'wlan0\x00'}, {0x0, 0x1, 'bridge_slave_0\x00'}, {0x0, 0x1, 'nr0\x00'}, {0x0, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'bond_slave_0\x00'}, {0x0, 0x1, 'ip6erspan0\x00'}, {0x0, 0x1, 'veth1_to_bond\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0xc1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'macvlan1\x00'}, {0x0, 0x1, 'veth0_virt_wifi\x00'}, {0x0, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'rose0\x00'}, {0x0, 0x1, 'ip_vti0\x00'}, {0x0, 0x1, 'batadv_slave_1\x00'}, {0x0, 0x1, 'veth1\x00'}, {0x0, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_NUM]}]}], {0xff07}}, 0x88}}, 0xec34c7a65d9caddb) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xde, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x50, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x12ff5c27ea95a5cd, 0x3, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0x81c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x9, 0x59}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xfc, 0x57, 0x5}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0xff, 0xe, 0x3, 0xff}, 0x99, &(0x7f0000000540)={0x5, 0xf, 0x99, 0x3, [@generic={0x39, 0x10, 0x4, "32444001daa88ac47e611b4f409a3ea01e58565044508c7f3731b930010ceb69c8d0a087589b43d5abf52f424bff24630d026c43f4b2"}, @generic={0x47, 0x10, 0x3, "367455cc671b6b76b1b036abb54327d6398566c3a616533f8900cd67f4c543b1abb7644ac3ff9eaf982f35e24ebcd94feeb2ac4df8b27b482b075335c75ee85df49b1bc2"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "3853f66b895161fe344fb9844606e082"}]}, 0x9, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x444}}, {0x6e, &(0x7f00000006c0)=@string={0x6e, 0x3, "678f51ee4aa9ac69411e1e4e1713fc1ff6b53280f523d3a52581447a5785ebeef5c07ffd75a41790c37e7185f112ec91ccbb1d473ad57c2278c540427203913602fdea92996e6f7143e582291694f05fa7d922944fc9219e236d03ed05375a0aeb73a45e5fbe83d268ac90bf"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x814}}, {0x50, &(0x7f00000007c0)=@string={0x50, 0x3, "6f7ada86774207d62f802b0b96df6f18844baae248cf316e999d202f3dabf9718bb2a1116a8753a73c88c79bfe14197ccd607b442235a6eb8a6cf1bbe90fac83e14ba6247b77900f445524d5f99c"}}, {0x50, &(0x7f0000000840)=@string={0x50, 0x3, "fee53a15a12bb61d1d1212c11ea10518468bc1bd3ffa745e7a3d635ad634654a8f9082e686149437c4f281ec7e0033a1acb7a80dea0460f8528609ca89be89f38f9491e97857ebe475b6773b0941"}}, {0x2a, &(0x7f00000008c0)=@string={0x2a, 0x3, "e531ce34aa779a5965052651ffa329c5d9e4a88b5e6decc62065dec8a51db1e98345c7657fb876f1"}}, {0xe0, &(0x7f0000000900)=ANY=[@ANYBLOB="e0034987db36c64515ec28c93b5ef188ae889bfb1ebcad7ed99800a6834b26717724c3f2d54491b9f1c7126987394a69ccf1b9d88215a9eb5d7aa5d2810a892aa7ac93b6794ef240f850cb93ee7bb2ed2f40da2493ce56d1a7a08c73325e37a4bbf3d4e9b5fd891b91552eb6698aca2c030c30874a0cdf70f12f98d23c4e3683afb29be9bf293cc7a89fe8d4974bd4d759153fbbbf8a0454d70415d08d5bec25f53bdfa4741eb2da16363f8a1751ff3397d7b4728fbc4e204068c30fb57326d084189da64d15f0f00a4b1dcf9500fb9e201b0100000000000000b0aa1a4b3ed9"]}, {0xcb, &(0x7f0000000a00)=@string={0xcb, 0x3, "edebdf3cc0997cb7b9f602acc00c7284fd2cda1314afceeafa701e630facfe33f2e00d3151d139023a0edc1bfbc69b7626e073af570b47185272eea8a43dcd7b14df8024fe1a4420dbd0125f6ce443ef4ae9a84ab44584ee784c36fa99acd61fbceb250dd63fe615f30e1b61aaaa7d4913bc62b23b364dbc050fa34cd719fcb9e3987870ca0e8f60379691afa667784815bc0ceefa01be750dd85aca8d4eabf2954b00bf736d52cfe7beb05e352addf19558bdf2b436c844afd020823b5d0eed2d23a2740641c1c9ff"}}]}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000001480)={0x0, r3}) kernel console output (not intermixed with test programs): er: 22838:22848 ioctl 4018620d 200002c0 returned -16 [ 830.638487][ T8319] dvb-usb: bulk message failed: -22 (3/0) [ 830.646105][ T8319] dw2102: command 0x0e transfer failed. [ 830.648532][ T8319] dvb-usb: bulk message failed: -22 (3/0) [ 830.650243][ T8319] dw2102: command 0x0e transfer failed. [ 830.651937][ T8319] dvb-usb: bulk message failed: -22 (1/0) [ 830.653622][ T8319] dw2102: command 0x51 transfer failed. [ 830.665466][ T8319] DVB: Unable to find symbol ds3000_attach() [ 830.667389][ T8319] dvb-usb: no frontend was attached by 'SU3000HD DVB-S USB2.0' [ 830.708609][ T8319] rc_core: IR keymap rc-su3000 not found [ 830.712436][ T8319] Registered IR keymap rc-empty [ 830.716050][ T8319] rc rc0: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 830.721137][ T8319] input: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input185 [ 830.726448][ T8319] dvb-usb: schedule remote query interval to 150 msecs. [ 830.729334][ T8319] dw2102: su3000_power_ctrl: 0, initialized 1 [ 830.731164][ T8319] dvb-usb: SU3000HD DVB-S USB2.0 successfully initialized and connected. [ 830.745009][ T8319] usb 8-1: USB disconnect, device number 86 [ 830.810308][ T8319] dvb-usb: SU3000HD DVB-S USB2.0 successfully deinitialized and disconnected. [ 831.131531][T22854] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4886'. [ 831.159556][T22840] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 831.160762][T22858] netlink: 'syz.2.4888': attribute type 4 has an invalid length. [ 831.208825][ T5945] Bluetooth: hci0: command 0x041b tx timeout [ 831.514398][T22862] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4887'. [ 832.228203][T22871] netlink: 'syz.6.4892': attribute type 10 has an invalid length. [ 832.233758][T22870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.318667][ T9] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 832.409529][ T8319] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 832.468500][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 832.471213][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.474079][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 832.479686][ T9] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 832.482270][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.484540][ T9] usb 7-1: Product: syz [ 832.485753][ T9] usb 7-1: Manufacturer: syz [ 832.487104][ T9] usb 7-1: SerialNumber: syz [ 832.491663][ T9] usb 7-1: config 0 descriptor?? [ 832.493892][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 832.495624][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 832.558445][ T8319] usb 8-1: Using ep0 maxpacket: 8 [ 832.561345][ T8319] usb 8-1: config 1 has an invalid interface number: 36 but max is 0 [ 832.563768][ T8319] usb 8-1: config 1 has no interface number 0 [ 832.565970][ T8319] usb 8-1: config 1 interface 36 altsetting 11 bulk endpoint 0x5 has invalid maxpacket 32 [ 832.569159][ T8319] usb 8-1: config 1 interface 36 altsetting 11 endpoint 0x3 has invalid maxpacket 27120, setting to 64 [ 832.573365][ T8319] usb 8-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 832.576555][ T8319] usb 8-1: config 1 interface 36 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 832.579882][ T8319] usb 8-1: config 1 interface 36 altsetting 11 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 832.583121][ T8319] usb 8-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 832.586266][ T8319] usb 8-1: config 1 interface 36 altsetting 11 endpoint 0xC has invalid wMaxPacketSize 0 [ 832.589378][ T8319] usb 8-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 832.592363][ T8319] usb 8-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 832.595471][ T8319] usb 8-1: config 1 interface 36 has no altsetting 0 [ 832.599647][ T8319] usb 8-1: New USB device found, idVendor=1f4d, idProduct=3000, bcdDevice=68.24 [ 832.602289][ T8319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.604724][ T8319] usb 8-1: Manufacturer:  [ 832.606181][ T8319] usb 8-1: SerialNumber: syz [ 832.609157][T22879] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 832.868519][ T6012] usb 7-1: USB disconnect, device number 56 [ 833.288571][ T5945] Bluetooth: hci0: command 0x041b tx timeout [ 833.359792][T22892] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4897'. [ 833.479508][T22894] netlink: 'syz.1.4898': attribute type 4 has an invalid length. [ 833.704678][T22898] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4899'. [ 834.056590][T22903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4900'. [ 834.553807][T22912] netlink: 'syz.6.4903': attribute type 10 has an invalid length. [ 834.556900][T22911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.984126][T22916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4904'. [ 835.029140][T22904] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 835.082284][ T8319] dvb-usb: found a 'SU3000HD DVB-S USB2.0' in warm state. [ 835.084583][ T8319] dw2102: su3000_power_ctrl: 1, initialized 0 [ 835.086401][ T8319] dvb-usb: bulk message failed: -22 (2/0) [ 835.090577][ T8319] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 835.093466][ T8319] dvbdev: DVB: registering new adapter (SU3000HD DVB-S USB2.0) [ 835.095695][ T8319] usb 8-1: media controller created [ 835.097189][ T8319] dvb-usb: bulk message failed: -22 (6/0) [ 835.099597][ T8319] dw2102: i2c transfer failed. [ 835.101109][ T8319] dvb-usb: bulk message failed: -22 (6/0) [ 835.102739][ T8319] dw2102: i2c transfer failed. [ 835.104114][ T8319] dvb-usb: bulk message failed: -22 (6/0) [ 835.110398][ T8319] dw2102: i2c transfer failed. [ 835.112237][ T8319] dvb-usb: bulk message failed: -22 (6/0) [ 835.114029][ T8319] dw2102: i2c transfer failed. [ 835.115424][ T8319] dvb-usb: bulk message failed: -22 (6/0) [ 835.117046][ T8319] dw2102: i2c transfer failed. [ 835.122389][ T8319] dvb-usb: bulk message failed: -22 (6/0) [ 835.124052][ T8319] dw2102: i2c transfer failed. [ 835.125439][ T8319] dvb-usb: MAC address: 02:02:02:02:02:02 [ 835.130204][ T8319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 835.134689][ T8319] dvb-usb: bulk message failed: -22 (3/0) [ 835.136365][ T8319] dw2102: command 0x0e transfer failed. [ 835.137983][ T8319] dvb-usb: bulk message failed: -22 (3/0) [ 835.140200][ T8319] dw2102: command 0x0e transfer failed. [ 835.303861][T22926] binder: BINDER_SET_CONTEXT_MGR already set [ 835.305671][T22926] binder: 22921:22926 ioctl 4018620d 200002c0 returned -16 [ 835.318536][T13595] usb 11-1: new high-speed USB device number 75 using dummy_hcd [ 835.448468][ T8319] dvb-usb: bulk message failed: -22 (3/0) [ 835.450861][ T8319] dw2102: command 0x0e transfer failed. [ 835.453103][ T8319] dvb-usb: bulk message failed: -22 (3/0) [ 835.455464][ T8319] dw2102: command 0x0e transfer failed. [ 835.457708][ T8319] dvb-usb: bulk message failed: -22 (1/0) [ 835.460066][ T8319] dw2102: command 0x51 transfer failed. [ 835.468532][T13595] usb 11-1: Using ep0 maxpacket: 16 [ 835.473597][T13595] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.477915][T13595] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 835.484057][ T8319] DVB: Unable to find symbol ds3000_attach() [ 835.485998][T13595] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 835.486199][ T8319] dvb-usb: no frontend was attached by 'SU3000HD DVB-S USB2.0' [ 835.489862][T13595] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.495517][T13595] usb 11-1: Product: syz [ 835.497217][T13595] usb 11-1: Manufacturer: syz [ 835.499262][T13595] usb 11-1: SerialNumber: syz [ 835.502079][T13595] usb 11-1: config 0 descriptor?? [ 835.505879][T13595] hub 11-1:0.0: bad descriptor, ignoring hub [ 835.508186][T13595] hub 11-1:0.0: probe with driver hub failed with error -5 [ 835.538618][ T8319] rc_core: IR keymap rc-su3000 not found [ 835.540412][ T8319] Registered IR keymap rc-empty [ 835.542173][ T8319] rc rc0: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 835.545322][ T8319] input: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input186 [ 835.549150][ T8319] dvb-usb: schedule remote query interval to 150 msecs. [ 835.551475][ T8319] dw2102: su3000_power_ctrl: 0, initialized 1 [ 835.553426][ T8319] dvb-usb: SU3000HD DVB-S USB2.0 successfully initialized and connected. [ 835.557658][ T8319] usb 8-1: USB disconnect, device number 87 [ 835.567809][ T8319] dvb-usb: SU3000HD DVB-S USB2.0 successfully deinitialized and disconnected. [ 835.697916][T22932] netlink: 'syz.1.4908': attribute type 4 has an invalid length. [ 835.879007][ T8319] usb 11-1: USB disconnect, device number 75 [ 835.981729][T22939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4909'. [ 836.035122][T22941] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4910'. [ 836.759333][T22947] can0: slcan on ttyS3. [ 836.820904][T22947] can0 (unregistered): slcan off ttyS3. [ 836.830390][T22951] can0: slcan on ttyS3. [ 837.038654][T22951] can0 (unregistered): slcan off ttyS3. [ 837.669277][T22949] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 837.878455][ T6012] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 838.098541][ T6012] usb 8-1: Using ep0 maxpacket: 8 [ 838.102948][ T6012] usb 8-1: config 1 has an invalid interface number: 36 but max is 0 [ 838.105524][ T6012] usb 8-1: config 1 has no interface number 0 [ 838.107419][ T6012] usb 8-1: config 1 interface 36 altsetting 11 bulk endpoint 0x5 has invalid maxpacket 32 [ 838.110403][ T6012] usb 8-1: config 1 interface 36 altsetting 11 endpoint 0x3 has invalid maxpacket 27120, setting to 64 [ 838.114018][ T6012] usb 8-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 838.117230][ T6012] usb 8-1: config 1 interface 36 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 838.120436][ T6012] usb 8-1: config 1 interface 36 altsetting 11 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 838.123738][ T6012] usb 8-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 838.128910][ T6012] usb 8-1: config 1 interface 36 altsetting 11 endpoint 0xC has invalid wMaxPacketSize 0 [ 838.132198][ T6012] usb 8-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 838.135723][ T6012] usb 8-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 838.141744][ T6012] usb 8-1: config 1 interface 36 has no altsetting 0 [ 838.153611][ T6012] usb 8-1: New USB device found, idVendor=1f4d, idProduct=3000, bcdDevice=68.24 [ 838.156647][ T6012] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.159206][ T6012] usb 8-1: Manufacturer:  [ 838.160706][ T6012] usb 8-1: SerialNumber: syz [ 838.170057][T22973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 838.252881][T22989] netlink: 'syz.2.4919': attribute type 4 has an invalid length. [ 838.683090][T22997] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4922'. [ 839.396236][T23001] can0: slcan on ttyS3. [ 839.449259][T23001] can0 (unregistered): slcan off ttyS3. [ 839.452911][T23001] can0: slcan on ttyS3. [ 839.639129][T23009] can0 (unregistered): slcan off ttyS3. [ 840.362217][T23027] netlink: 'syz.6.4926': attribute type 4 has an invalid length. [ 840.373585][T23027] netlink: 'syz.6.4926': attribute type 4 has an invalid length. [ 840.429514][T23007] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 840.591632][T23033] netlink: 'syz.2.4928': attribute type 10 has an invalid length. [ 840.594089][ T6012] dvb-usb: found a 'SU3000HD DVB-S USB2.0' in warm state. [ 840.596192][ T6012] dw2102: su3000_power_ctrl: 1, initialized 0 [ 840.598013][ T6012] dvb-usb: bulk message failed: -22 (2/0) [ 840.601549][ T6012] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 840.604912][ T6012] dvbdev: DVB: registering new adapter (SU3000HD DVB-S USB2.0) [ 840.607141][ T6012] usb 8-1: media controller created [ 840.610797][ T6012] dvb-usb: bulk message failed: -22 (6/0) [ 840.612518][ T6012] dw2102: i2c transfer failed. [ 840.614657][ T6012] dvb-usb: bulk message failed: -22 (6/0) [ 840.616333][ T6012] dw2102: i2c transfer failed. [ 840.618504][ T6012] dvb-usb: bulk message failed: -22 (6/0) [ 840.620202][ T6012] dw2102: i2c transfer failed. [ 840.621789][ T6012] dvb-usb: bulk message failed: -22 (6/0) [ 840.623483][ T6012] dw2102: i2c transfer failed. [ 840.624892][ T6012] dvb-usb: bulk message failed: -22 (6/0) [ 840.628482][ T6012] dw2102: i2c transfer failed. [ 840.629911][ T6012] dvb-usb: bulk message failed: -22 (6/0) [ 840.631589][ T6012] dw2102: i2c transfer failed. [ 840.632994][ T6012] dvb-usb: MAC address: 02:02:02:02:02:02 [ 840.646279][ T6012] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 840.667413][ T6012] dvb-usb: bulk message failed: -22 (3/0) [ 840.669204][ T6012] dw2102: command 0x0e transfer failed. [ 840.670835][ T6012] dvb-usb: bulk message failed: -22 (3/0) [ 840.672492][ T6012] dw2102: command 0x0e transfer failed. [ 840.676650][T23032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.690506][T23036] netlink: 'syz.3.4929': attribute type 4 has an invalid length. [ 840.978441][ T6012] dvb-usb: bulk message failed: -22 (3/0) [ 840.980148][ T6012] dw2102: command 0x0e transfer failed. [ 840.981750][ T6012] dvb-usb: bulk message failed: -22 (3/0) [ 840.983423][ T6012] dw2102: command 0x0e transfer failed. [ 840.985023][ T6012] dvb-usb: bulk message failed: -22 (1/0) [ 840.986671][ T6012] dw2102: command 0x51 transfer failed. [ 840.998817][ T6012] DVB: Unable to find symbol ds3000_attach() [ 841.000574][ T6012] dvb-usb: no frontend was attached by 'SU3000HD DVB-S USB2.0' [ 841.048429][ T6012] rc_core: IR keymap rc-su3000 not found [ 841.050167][ T6012] Registered IR keymap rc-empty [ 841.055458][ T6012] rc rc0: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 841.102074][ T6012] input: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input187 [ 841.115334][ T6012] dvb-usb: schedule remote query interval to 150 msecs. [ 841.117673][ T6012] dw2102: su3000_power_ctrl: 0, initialized 1 [ 841.120269][ T6012] dvb-usb: SU3000HD DVB-S USB2.0 successfully initialized and connected. [ 841.146081][ T6012] usb 8-1: USB disconnect, device number 88 [ 841.198352][ T6012] dvb-usb: SU3000HD DVB-S USB2.0 successfully deinitialized and disconnected. [ 841.308833][T23056] can0: slcan on ttyS3. [ 841.345310][T23057] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4933'. [ 841.358839][T23056] can0 (unregistered): slcan off ttyS3. [ 841.362711][T23056] can0: slcan on ttyS3. [ 841.499032][T23063] can0 (unregistered): slcan off ttyS3. [ 842.407993][T23084] netlink: 'syz.2.4939': attribute type 4 has an invalid length. [ 842.439614][T23073] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 842.464810][T23087] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4938'. [ 842.483756][T12241] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 842.748439][T12241] usb 6-1: Using ep0 maxpacket: 8 [ 842.751010][T12241] usb 6-1: config 1 has an invalid interface number: 36 but max is 0 [ 842.753314][T12241] usb 6-1: config 1 has no interface number 0 [ 842.755028][T12241] usb 6-1: config 1 interface 36 altsetting 11 bulk endpoint 0x5 has invalid maxpacket 32 [ 842.758043][T12241] usb 6-1: config 1 interface 36 altsetting 11 endpoint 0x3 has invalid maxpacket 27120, setting to 64 [ 842.761244][T12241] usb 6-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 842.764275][T12241] usb 6-1: config 1 interface 36 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 842.767319][T12241] usb 6-1: config 1 interface 36 altsetting 11 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 842.770361][T12241] usb 6-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 842.773262][T12241] usb 6-1: config 1 interface 36 altsetting 11 endpoint 0xC has invalid wMaxPacketSize 0 [ 842.775967][T12241] usb 6-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 842.778969][T12241] usb 6-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 842.781888][T12241] usb 6-1: config 1 interface 36 has no altsetting 0 [ 842.785090][T12241] usb 6-1: New USB device found, idVendor=1f4d, idProduct=3000, bcdDevice=68.24 [ 842.788014][T12241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.790297][T12241] usb 6-1: Manufacturer:  [ 842.791606][T12241] usb 6-1: SerialNumber: syz [ 842.793950][T23080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 843.038523][ T57] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 843.208569][ T57] usb 7-1: Using ep0 maxpacket: 32 [ 843.211425][ T57] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.214455][ T57] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.217154][ T57] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.222361][ T57] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 843.224861][ T57] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 843.227202][ T57] usb 7-1: Product: syz [ 843.228485][ T57] usb 7-1: Manufacturer: syz [ 843.229871][ T57] usb 7-1: SerialNumber: syz [ 843.233626][ T57] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input188 [ 843.830027][T23102] syz.3.4944 (23102) used greatest stack depth: 21208 bytes left [ 843.902781][T23113] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4945'. [ 843.923505][T13595] usb 7-1: USB disconnect, device number 57 [ 843.928186][T13595] appletouch 7-1:1.0: input: appletouch disconnected [ 844.558481][ T8] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 844.722008][ T8] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 844.725967][ T8] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 844.729404][ T8] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 844.732436][ T8] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 844.735021][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.754101][ T8] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 845.175674][T12241] dvb-usb: found a 'SU3000HD DVB-S USB2.0' in warm state. [ 845.181218][T12241] dw2102: su3000_power_ctrl: 1, initialized 0 [ 845.183001][T12241] dvb-usb: bulk message failed: -22 (2/0) [ 845.185229][T12241] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 845.188036][T12241] dvbdev: DVB: registering new adapter (SU3000HD DVB-S USB2.0) [ 845.190274][T12241] usb 6-1: media controller created [ 845.190405][ T8] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 845.192326][T12241] dvb-usb: bulk message failed: -22 (6/0) [ 845.195379][ T8] usb 7-1: USB disconnect, device number 58 [ 845.196311][T12241] dw2102: i2c transfer failed. [ 845.199813][T12241] dvb-usb: bulk message failed: -22 (6/0) [ 845.201663][T12241] dw2102: i2c transfer failed. [ 845.203713][T23125] netlink: 'syz.1.4949': attribute type 4 has an invalid length. [ 845.204151][T12241] dvb-usb: bulk message failed: -22 (6/0) [ 845.209656][T12241] dw2102: i2c transfer failed. [ 845.211046][T12241] dvb-usb: bulk message failed: -22 (6/0) [ 845.212659][T12241] dw2102: i2c transfer failed. [ 845.214120][T12241] dvb-usb: bulk message failed: -22 (6/0) [ 845.215757][T12241] dw2102: i2c transfer failed. [ 845.217073][T12241] dvb-usb: bulk message failed: -22 (6/0) [ 845.219290][T12241] dw2102: i2c transfer failed. [ 845.220655][T12241] dvb-usb: MAC address: 02:02:02:02:02:02 [ 845.225448][T12241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 845.230646][T12241] dvb-usb: bulk message failed: -22 (3/0) [ 845.232535][T12241] dw2102: command 0x0e transfer failed. [ 845.234039][T12241] dvb-usb: bulk message failed: -22 (3/0) [ 845.235655][T12241] dw2102: command 0x0e transfer failed. [ 845.259157][T23119] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 845.348283][T23133] can0: slcan on ttyS3. [ 845.383429][T12121] udevd[12121]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 845.423128][T23133] can0 (unregistered): slcan off ttyS3. [ 845.429609][T23134] can0: slcan on ttyS3. [ 845.540967][T12241] dvb-usb: bulk message failed: -22 (3/0) [ 845.542601][T12241] dw2102: command 0x0e transfer failed. [ 845.544118][T12241] dvb-usb: bulk message failed: -22 (3/0) [ 845.548223][T12241] dw2102: command 0x0e transfer failed. [ 845.550017][T12241] dvb-usb: bulk message failed: -22 (1/0) [ 845.564231][T12241] dw2102: command 0x51 transfer failed. [ 845.581361][T12241] DVB: Unable to find symbol ds3000_attach() [ 845.583102][T12241] dvb-usb: no frontend was attached by 'SU3000HD DVB-S USB2.0' [ 845.618416][T12241] rc_core: IR keymap rc-su3000 not found [ 845.620014][T12241] Registered IR keymap rc-empty [ 845.621784][T12241] rc rc0: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 845.624825][T12241] input: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input189 [ 845.631627][T12241] dvb-usb: schedule remote query interval to 150 msecs. [ 845.633710][T12241] dw2102: su3000_power_ctrl: 0, initialized 1 [ 845.635596][T12241] dvb-usb: SU3000HD DVB-S USB2.0 successfully initialized and connected. [ 845.639339][T12241] usb 6-1: USB disconnect, device number 96 [ 845.655161][T23134] can0 (unregistered): slcan off ttyS3. [ 845.659807][T12241] dvb-usb: SU3000HD DVB-S USB2.0 successfully deinitialized and disconnected. [ 846.518464][T23169] can0: slcan on ttyS3. [ 846.559473][T23169] can0 (unregistered): slcan off ttyS3. [ 846.572300][T23169] can0: slcan on ttyS3. [ 846.630130][T23154] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 846.911012][T23175] can0 (unregistered): slcan off ttyS3. [ 847.255663][T23201] binder: BINDER_SET_CONTEXT_MGR already set [ 847.257467][T23201] binder: 23197:23201 ioctl 4018620d 200002c0 returned -16 [ 847.261909][T23201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4959'. [ 847.549916][T23174] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 847.560323][T23205] netlink: 'syz.3.4961': attribute type 4 has an invalid length. [ 847.824186][T23215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4964'. [ 847.829185][T23215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4964'. [ 847.960402][T23218] can0: slcan on ttyS3. [ 848.028714][T23218] can0 (unregistered): slcan off ttyS3. [ 848.033041][T23219] can0: slcan on ttyS3. [ 848.171457][T23219] can0 (unregistered): slcan off ttyS3. [ 849.568588][T23263] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4973'. [ 849.584113][T23265] netlink: 'syz.1.4974': attribute type 4 has an invalid length. [ 849.699567][T23242] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 849.783533][T23272] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4975'. [ 849.988734][T23277] can0: slcan on ttyS3. [ 850.110054][T23277] can0 (unregistered): slcan off ttyS3. [ 850.115581][T23283] can0: slcan on ttyS3. [ 850.269391][T23283] can0 (unregistered): slcan off ttyS3. [ 850.731978][T23312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4981'. [ 851.586404][T23327] netlink: 'syz.6.4985': attribute type 4 has an invalid length. [ 851.831456][T23340] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4988'. [ 852.532004][T23351] can0: slcan on ttyS3. [ 852.628888][T23351] can0 (unregistered): slcan off ttyS3. [ 852.632254][T23355] can0: slcan on ttyS3. [ 852.819534][T23351] can0 (unregistered): slcan off ttyS3. [ 853.239066][T23342] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 853.634568][T23389] binder: BINDER_SET_CONTEXT_MGR already set [ 853.636425][T23389] binder: 23384:23389 ioctl 4018620d 200002c0 returned -16 [ 853.639559][T23389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4995'. [ 853.892163][T23394] netlink: 'syz.2.4997': attribute type 4 has an invalid length. [ 854.279002][T23381] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 854.337128][T23407] can0: slcan on ttyS3. [ 854.349734][T23408] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5000'. [ 854.410638][T23407] can0 (unregistered): slcan off ttyS3. [ 854.415021][T23416] can0: slcan on ttyS3. [ 854.660369][T23429] can0 (unregistered): slcan off ttyS3. [ 855.168661][ T57] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 855.318685][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 855.321976][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 855.327325][ T57] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 855.330736][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.333600][ T57] usb 6-1: Product: syz [ 855.334916][ T57] usb 6-1: Manufacturer: syz [ 855.336335][ T57] usb 6-1: SerialNumber: syz [ 855.338731][ T57] usb 6-1: config 0 descriptor?? [ 855.341852][ T57] hub 6-1:0.0: bad descriptor, ignoring hub [ 855.344275][ T57] hub 6-1:0.0: probe with driver hub failed with error -5 [ 855.348555][ T57] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input190 [ 855.818567][ T1461] usb 6-1: USB disconnect, device number 97 [ 856.222146][T23481] netlink: 'syz.3.5010': attribute type 4 has an invalid length. [ 856.294515][T23486] can0: slcan on ttyS3. [ 856.349360][T23486] can0 (unregistered): slcan off ttyS3. [ 856.352886][T23488] can0: slcan on ttyS3. [ 856.489457][T23488] can0 (unregistered): slcan off ttyS3. [ 856.773553][T23504] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5013'. [ 856.839556][T23476] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 856.936388][T23509] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5015'. [ 857.005895][T23512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5016'. [ 857.338690][ T25] usb 11-1: new high-speed USB device number 76 using dummy_hcd [ 857.488501][ T25] usb 11-1: Using ep0 maxpacket: 16 [ 857.491719][ T25] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 857.496881][ T25] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 857.500636][ T25] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.503891][ T25] usb 11-1: Product: syz [ 857.505566][ T25] usb 11-1: Manufacturer: syz [ 857.507419][ T25] usb 11-1: SerialNumber: syz [ 857.510878][ T25] usb 11-1: config 0 descriptor?? [ 857.513760][ T25] hub 11-1:0.0: bad descriptor, ignoring hub [ 857.516079][ T25] hub 11-1:0.0: probe with driver hub failed with error -5 [ 857.520233][ T25] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input191 [ 857.575242][T23516] can0: slcan on ttyS3. [ 857.638763][T23516] can0 (unregistered): slcan off ttyS3. [ 857.642450][T23522] can0: slcan on ttyS3. [ 857.809305][T23522] can0 (unregistered): slcan off ttyS3. [ 857.849168][ T25] usb 11-1: USB disconnect, device number 76 [ 858.268157][T23542] netlink: 'syz.6.5021': attribute type 4 has an invalid length. [ 859.015748][T23556] can0: slcan on ttyS3. [ 859.078884][T23556] can0 (unregistered): slcan off ttyS3. [ 859.082518][T23558] can0: slcan on ttyS3. [ 859.310471][T23566] can0 (unregistered): slcan off ttyS3. [ 859.350318][T23582] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5027'. [ 859.719113][T23549] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 859.988521][ T1461] usb 11-1: new high-speed USB device number 77 using dummy_hcd [ 860.043072][T23593] netlink: 'syz.1.5031': attribute type 4 has an invalid length. [ 860.138603][ T1461] usb 11-1: Using ep0 maxpacket: 16 [ 860.141354][ T1461] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 860.145793][ T1461] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 860.149203][ T1461] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.151558][ T1461] usb 11-1: Product: syz [ 860.152777][ T1461] usb 11-1: Manufacturer: syz [ 860.154128][ T1461] usb 11-1: SerialNumber: syz [ 860.156033][ T1461] usb 11-1: config 0 descriptor?? [ 860.158761][ T1461] hub 11-1:0.0: bad descriptor, ignoring hub [ 860.160505][ T1461] hub 11-1:0.0: probe with driver hub failed with error -5 [ 860.163482][ T1461] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input192 [ 860.411556][T23597] netlink: 'syz.3.5040': attribute type 4 has an invalid length. [ 860.468508][ T57] usb 11-1: USB disconnect, device number 77 [ 860.614338][T23602] binder: BINDER_SET_CONTEXT_MGR already set [ 860.616237][T23602] binder: 23598:23602 ioctl 4018620d 200002c0 returned -16 [ 860.704784][T23583] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 861.315850][T23621] can0: slcan on ttyS3. [ 861.369139][T23621] can0 (unregistered): slcan off ttyS3. [ 861.379228][T23622] can0: slcan on ttyS3. [ 861.578967][T23630] can0 (unregistered): slcan off ttyS3. [ 862.222319][T23656] netlink: 'syz.6.5043': attribute type 4 has an invalid length. [ 862.462966][T23658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5047'. [ 862.778099][T23668] can0: slcan on ttyS3. [ 862.838900][T23668] can0 (unregistered): slcan off ttyS3. [ 862.841948][T23669] can0: slcan on ttyS3. [ 862.858515][ T25] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 863.008539][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 863.011289][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 863.016703][ T25] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 863.020498][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.023517][ T25] usb 6-1: Product: syz [ 863.025044][ T25] usb 6-1: Manufacturer: syz [ 863.026378][ T25] usb 6-1: SerialNumber: syz [ 863.030943][ T25] usb 6-1: config 0 descriptor?? [ 863.039740][ T25] hub 6-1:0.0: bad descriptor, ignoring hub [ 863.041544][ T25] hub 6-1:0.0: probe with driver hub failed with error -5 [ 863.044915][ T25] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input193 [ 863.046112][T23676] can0 (unregistered): slcan off ttyS3. [ 863.130121][T23642] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 863.278884][T12241] usb 6-1: USB disconnect, device number 98 [ 863.424845][T23697] can0: slcan on ttyS3. [ 863.488594][T23697] can0 (unregistered): slcan off ttyS3. [ 863.492594][T23703] can0: slcan on ttyS3. [ 863.559307][T23697] can0 (unregistered): slcan off ttyS3. [ 864.414651][T23729] netlink: 'syz.3.5055': attribute type 4 has an invalid length. [ 864.519900][T23734] netlink: 'syz.2.5058': attribute type 4 has an invalid length. [ 864.729272][T23722] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 865.294490][T23744] can0: slcan on ttyS3. [ 865.368826][T23744] can0 (unregistered): slcan off ttyS3. [ 865.371571][T23746] can0: slcan on ttyS3. [ 865.448761][T23744] can0 (unregistered): slcan off ttyS3. [ 865.502743][T23758] netlink: 'syz.3.5063': attribute type 10 has an invalid length. [ 865.511914][T23758] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 865.519423][T23757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.669068][T23736] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 865.669313][T12091] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 865.699753][T23765] can0: slcan on ttyS3. [ 865.758915][T23765] can0 (unregistered): slcan off ttyS3. [ 865.763188][T23766] can0: slcan on ttyS3. [ 865.828448][T12091] usb 7-1: Using ep0 maxpacket: 16 [ 865.831820][T12091] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 865.840385][T12091] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 865.848629][T12091] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.851257][T12091] usb 7-1: Product: syz [ 865.852445][T12091] usb 7-1: Manufacturer: syz [ 865.853810][T12091] usb 7-1: SerialNumber: syz [ 865.859638][T12091] usb 7-1: config 0 descriptor?? [ 865.862095][T12091] hub 7-1:0.0: bad descriptor, ignoring hub [ 865.864307][T12091] hub 7-1:0.0: probe with driver hub failed with error -5 [ 865.867116][T12091] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input194 [ 865.909626][T23766] can0 (unregistered): slcan off ttyS3. [ 866.488957][ T5945] Bluetooth: hci4: command 0x0419 tx timeout [ 866.759886][T23792] netlink: 'syz.6.5068': attribute type 4 has an invalid length. [ 866.929297][T23779] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 866.938628][ T35] usb 7-1: USB disconnect, device number 59 [ 867.012733][T23796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5069'. [ 867.171696][T23799] can0: slcan on ttyS3. [ 867.239087][T23799] can0 (unregistered): slcan off ttyS3. [ 867.243976][T23807] can0: slcan on ttyS3. [ 867.319107][T23799] can0 (unregistered): slcan off ttyS3. [ 867.452499][T23817] can0: slcan on ttyS3. [ 867.609650][T23817] can0 (unregistered): slcan off ttyS3. [ 867.613325][T23826] can0: slcan on ttyS3. [ 867.735686][T23817] can0 (unregistered): slcan off ttyS3. [ 867.738532][ T35] usb 11-1: new high-speed USB device number 78 using dummy_hcd [ 867.888469][ T35] usb 11-1: Using ep0 maxpacket: 16 [ 867.891218][ T35] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 867.895501][ T35] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 867.898201][ T35] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.901457][ T35] usb 11-1: Product: syz [ 867.902721][ T35] usb 11-1: Manufacturer: syz [ 867.904099][ T35] usb 11-1: SerialNumber: syz [ 867.906010][ T35] usb 11-1: config 0 descriptor?? [ 867.908784][ T35] hub 11-1:0.0: bad descriptor, ignoring hub [ 867.911242][ T35] hub 11-1:0.0: probe with driver hub failed with error -5 [ 867.914177][ T35] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input195 [ 868.332729][T13595] usb 11-1: USB disconnect, device number 78 [ 868.575878][T23858] can0: slcan on ttyS3. [ 868.649095][T23858] can0 (unregistered): slcan off ttyS3. [ 868.652318][T23864] can0: slcan on ttyS3. [ 868.739776][T23845] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 869.329470][T23875] can0 (unregistered): slcan off ttyS3. [ 869.442264][T23900] can0: slcan on ttyS3. [ 869.530062][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.531946][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.549007][T23900] can0 (unregistered): slcan off ttyS3. [ 869.552481][T23905] can0: slcan on ttyS3. [ 869.569718][T23907] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5082'. [ 869.720054][T23900] can0 (unregistered): slcan off ttyS3. [ 870.319633][T23887] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 870.329101][T23927] can0: slcan on ttyS3. [ 870.398631][T23927] can0 (unregistered): slcan off ttyS3. [ 870.401528][T23932] can0: slcan on ttyS3. [ 870.449197][T23931] can0 (unregistered): slcan off ttyS3. [ 870.459868][T23931] can0: slcan on ttyS3. [ 870.568701][T23932] can0 (unregistered): slcan off ttyS3. [ 870.609101][ T8] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 870.771672][ T8] usb 8-1: Using ep0 maxpacket: 16 [ 870.801410][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 870.824713][ T8] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 870.827928][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.830346][ T8] usb 8-1: Product: syz [ 870.831928][ T8] usb 8-1: Manufacturer: syz [ 870.834276][ T8] usb 8-1: SerialNumber: syz [ 870.844577][ T8] usb 8-1: config 0 descriptor?? [ 870.853258][ T8] hub 8-1:0.0: bad descriptor, ignoring hub [ 870.855127][ T8] hub 8-1:0.0: probe with driver hub failed with error -5 [ 870.870825][ T8] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input196 [ 871.241918][T12241] usb 8-1: USB disconnect, device number 89 [ 871.292080][T23957] can0: slcan on ttyS3. [ 871.311927][T23959] netlink: 'syz.2.5092': attribute type 4 has an invalid length. [ 871.338828][T23957] can0 (unregistered): slcan off ttyS3. [ 871.345513][T23957] can0: slcan on ttyS3. [ 871.399335][T23957] can0 (unregistered): slcan off ttyS3. [ 871.478037][T23971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5093'. [ 871.736982][T23977] can0: slcan on ttyS3. [ 871.790027][T23981] netlink: 'syz.2.5096': attribute type 10 has an invalid length. [ 871.819361][T23977] can0 (unregistered): slcan off ttyS3. [ 871.823609][T23982] can0: slcan on ttyS3. [ 871.888507][T23984] can0 (unregistered): slcan off ttyS3. [ 871.894073][T23986] can0: slcan on ttyS3. [ 872.193044][T23992] can0 (unregistered): slcan off ttyS3. [ 872.588459][ T25] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 872.738435][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 872.742117][ T25] usb 7-1: config 1 has an invalid interface number: 36 but max is 0 [ 872.744469][ T25] usb 7-1: config 1 has no interface number 0 [ 872.746330][ T25] usb 7-1: config 1 interface 36 altsetting 11 bulk endpoint 0x5 has invalid maxpacket 32 [ 872.750162][ T25] usb 7-1: config 1 interface 36 altsetting 11 endpoint 0x3 has invalid maxpacket 27120, setting to 64 [ 872.753519][ T25] usb 7-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 872.756687][ T25] usb 7-1: config 1 interface 36 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 872.761479][ T25] usb 7-1: config 1 interface 36 altsetting 11 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 872.765809][ T25] usb 7-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 872.770112][ T25] usb 7-1: config 1 interface 36 altsetting 11 endpoint 0xC has invalid wMaxPacketSize 0 [ 872.777542][ T25] usb 7-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 872.780694][ T25] usb 7-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 872.783987][ T25] usb 7-1: config 1 interface 36 has no altsetting 0 [ 872.787455][ T25] usb 7-1: New USB device found, idVendor=1f4d, idProduct=3000, bcdDevice=68.24 [ 872.790359][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.792657][ T25] usb 7-1: Manufacturer:  [ 872.793984][ T25] usb 7-1: SerialNumber: syz [ 872.797576][T24012] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 873.019288][T24020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5102'. [ 873.160036][T24007] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 873.186342][T24025] netlink: 'syz.1.5105': attribute type 4 has an invalid length. [ 873.388436][ T35] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 873.538424][ T35] usb 8-1: Using ep0 maxpacket: 16 [ 873.541459][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 873.546620][ T35] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 873.549726][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.552103][ T35] usb 8-1: Product: syz [ 873.553349][ T35] usb 8-1: Manufacturer: syz [ 873.554790][ T35] usb 8-1: SerialNumber: syz [ 873.562734][ T35] usb 8-1: config 0 descriptor?? [ 873.565862][ T35] hub 8-1:0.0: bad descriptor, ignoring hub [ 873.568247][ T35] hub 8-1:0.0: probe with driver hub failed with error -5 [ 873.571022][ T35] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input197 [ 873.651823][T24031] can0: slcan on ttyS3. [ 873.689812][T24031] can0 (unregistered): slcan off ttyS3. [ 873.694646][T24031] can0: slcan on ttyS3. [ 873.768950][T24031] can0 (unregistered): slcan off ttyS3. [ 873.924791][T24052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5109'. [ 873.978820][ T8] usb 8-1: USB disconnect, device number 90 [ 874.490784][T24054] can0: slcan on ttyS3. [ 874.549122][T24054] can0 (unregistered): slcan off ttyS3. [ 874.551283][T24028] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 874.554067][T24060] can0: slcan on ttyS3. [ 874.728797][T24060] can0 (unregistered): slcan off ttyS3. [ 874.979178][T24075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5112'. [ 875.299493][ T25] dvb-usb: found a 'SU3000HD DVB-S USB2.0' in warm state. [ 875.301844][ T25] dw2102: su3000_power_ctrl: 1, initialized 0 [ 875.303706][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 875.318833][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 875.322262][ T25] dvbdev: DVB: registering new adapter (SU3000HD DVB-S USB2.0) [ 875.324575][ T25] usb 7-1: media controller created [ 875.326166][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 875.327896][ T25] dw2102: i2c transfer failed. [ 875.329662][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 875.331374][ T25] dw2102: i2c transfer failed. [ 875.332894][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 875.334560][ T25] dw2102: i2c transfer failed. [ 875.335956][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 875.337589][ T25] dw2102: i2c transfer failed. [ 875.339289][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 875.340926][ T25] dw2102: i2c transfer failed. [ 875.342304][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 875.343928][ T25] dw2102: i2c transfer failed. [ 875.345321][ T25] dvb-usb: MAC address: 02:02:02:02:02:02 [ 875.350114][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 875.354942][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 875.356620][ T25] dw2102: command 0x0e transfer failed. [ 875.358232][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 875.360039][ T25] dw2102: command 0x0e transfer failed. [ 875.668905][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 875.670997][ T25] dw2102: command 0x0e transfer failed. [ 875.672594][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 875.674230][ T25] dw2102: command 0x0e transfer failed. [ 875.675835][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 875.678177][ T25] dw2102: command 0x51 transfer failed. [ 875.690171][ T25] DVB: Unable to find symbol ds3000_attach() [ 875.692826][ T25] dvb-usb: no frontend was attached by 'SU3000HD DVB-S USB2.0' [ 875.749938][ T25] rc_core: IR keymap rc-su3000 not found [ 875.752624][ T25] Registered IR keymap rc-empty [ 875.753037][T24090] netlink: 'syz.1.5116': attribute type 4 has an invalid length. [ 875.754576][ T25] rc rc0: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 875.762603][ T25] input: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input198 [ 875.765855][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 875.768227][ T25] dw2102: su3000_power_ctrl: 0, initialized 1 [ 875.771117][ T25] dvb-usb: SU3000HD DVB-S USB2.0 successfully initialized and connected. [ 875.778966][ T25] usb 7-1: USB disconnect, device number 60 [ 875.802479][ T25] dvb-usb: SU3000HD DVB-S USB2.0 successfully deinitialized and disconnected. [ 876.109125][T24094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5115'. [ 876.163212][T24096] can0: slcan on ttyS3. [ 876.179348][T24076] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 876.220684][T24096] can0 (unregistered): slcan off ttyS3. [ 876.229630][T24102] can0: slcan on ttyS3. [ 876.368677][T24102] can0 (unregistered): slcan off ttyS3. [ 876.498470][ T35] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 876.573480][T24113] netlink: 'syz.6.5119': attribute type 10 has an invalid length. [ 876.648693][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 876.652343][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 876.658099][ T35] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 876.662223][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.662367][T24118] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5120'. [ 876.664671][ T35] usb 7-1: Product: syz [ 876.664682][ T35] usb 7-1: Manufacturer: syz [ 876.664689][ T35] usb 7-1: SerialNumber: syz [ 876.665411][ T35] usb 7-1: config 0 descriptor?? [ 876.675031][ T35] hub 7-1:0.0: bad descriptor, ignoring hub [ 876.676804][ T35] hub 7-1:0.0: probe with driver hub failed with error -5 [ 876.679701][ T35] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input199 [ 876.928488][ T8] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 877.058689][T23825] usb 7-1: USB disconnect, device number 61 [ 877.168431][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 877.170997][ T8] usb 8-1: config 1 has an invalid interface number: 36 but max is 0 [ 877.173476][ T8] usb 8-1: config 1 has no interface number 0 [ 877.175280][ T8] usb 8-1: config 1 interface 36 altsetting 11 bulk endpoint 0x5 has invalid maxpacket 32 [ 877.178118][ T8] usb 8-1: config 1 interface 36 altsetting 11 endpoint 0x3 has invalid maxpacket 27120, setting to 64 [ 877.181305][ T8] usb 8-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 877.184361][ T8] usb 8-1: config 1 interface 36 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 877.187467][ T8] usb 8-1: config 1 interface 36 altsetting 11 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 877.190677][ T8] usb 8-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 877.193712][ T8] usb 8-1: config 1 interface 36 altsetting 11 endpoint 0xC has invalid wMaxPacketSize 0 [ 877.196523][ T8] usb 8-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 877.199592][ T8] usb 8-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 877.202579][ T8] usb 8-1: config 1 interface 36 has no altsetting 0 [ 877.216600][ T8] usb 8-1: New USB device found, idVendor=1f4d, idProduct=3000, bcdDevice=68.24 [ 877.219756][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.222036][ T8] usb 8-1: Manufacturer:  [ 877.223388][ T8] usb 8-1: SerialNumber: syz [ 877.225590][T24119] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 877.620163][T24130] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5124'. [ 877.929304][T24121] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 878.525530][T24143] netlink: 'syz.2.5128': attribute type 10 has an invalid length. [ 878.528831][T24142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.584660][T24144] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5127'. [ 879.053852][T24150] can0: slcan on ttyS3. [ 879.108778][T24150] can0 (unregistered): slcan off ttyS3. [ 879.112831][T24151] can0: slcan on ttyS3. [ 879.241756][T24151] can0 (unregistered): slcan off ttyS3. [ 879.325776][T24164] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5131'. [ 879.634698][ T8] dvb-usb: found a 'SU3000HD DVB-S USB2.0' in warm state. [ 879.636773][ T8] dw2102: su3000_power_ctrl: 1, initialized 0 [ 879.638669][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 879.641633][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 879.644677][ T8] dvbdev: DVB: registering new adapter (SU3000HD DVB-S USB2.0) [ 879.646871][ T8] usb 8-1: media controller created [ 879.648564][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 879.650218][ T8] dw2102: i2c transfer failed. [ 879.651621][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 879.653275][ T8] dw2102: i2c transfer failed. [ 879.654676][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 879.656314][ T8] dw2102: i2c transfer failed. [ 879.657763][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 879.659518][ T8] dw2102: i2c transfer failed. [ 879.660925][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 879.662586][ T8] dw2102: i2c transfer failed. [ 879.663974][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 879.665621][ T8] dw2102: i2c transfer failed. [ 879.666995][ T8] dvb-usb: MAC address: 02:02:02:02:02:02 [ 879.677918][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 879.686137][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 879.687893][ T8] dw2102: command 0x0e transfer failed. [ 879.689932][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 879.691592][ T8] dw2102: command 0x0e transfer failed. [ 879.700410][T24169] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5132'. [ 879.968557][ T25] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 880.008483][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 880.010223][ T8] dw2102: command 0x0e transfer failed. [ 880.011849][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 880.013715][ T8] dw2102: command 0x0e transfer failed. [ 880.015425][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 880.017107][ T8] dw2102: command 0x51 transfer failed. [ 880.036123][ T8] DVB: Unable to find symbol ds3000_attach() [ 880.038115][ T8] dvb-usb: no frontend was attached by 'SU3000HD DVB-S USB2.0' [ 880.078574][ T8] rc_core: IR keymap rc-su3000 not found [ 880.080299][ T8] Registered IR keymap rc-empty [ 880.082611][ T8] rc rc0: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 880.088207][ T8] input: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input200 [ 880.091911][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 880.093956][ T8] dw2102: su3000_power_ctrl: 0, initialized 1 [ 880.095740][ T8] dvb-usb: SU3000HD DVB-S USB2.0 successfully initialized and connected. [ 880.101072][ T8] usb 8-1: USB disconnect, device number 91 [ 880.117305][ T8] dvb-usb: SU3000HD DVB-S USB2.0 successfully deinitialized and disconnected. [ 880.120227][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 880.136744][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 880.142766][ T25] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 880.145473][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.147863][ T25] usb 6-1: Product: syz [ 880.149294][ T25] usb 6-1: Manufacturer: syz [ 880.150836][ T25] usb 6-1: SerialNumber: syz [ 880.154365][ T25] usb 6-1: config 0 descriptor?? [ 880.157105][ T25] hub 6-1:0.0: bad descriptor, ignoring hub [ 880.159400][ T25] hub 6-1:0.0: probe with driver hub failed with error -5 [ 880.163401][ T25] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input201 [ 880.267123][T24181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5135'. [ 880.527459][T12105] usb 6-1: USB disconnect, device number 99 [ 880.779453][T24172] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 881.083774][T24194] netlink: 'syz.1.5138': attribute type 10 has an invalid length. [ 881.250717][T24192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.324970][T24197] can0: slcan on ttyS3. [ 881.398594][T24197] can0 (unregistered): slcan off ttyS3. [ 881.403293][T24202] can0: slcan on ttyS3. [ 881.538863][T24208] can0 (unregistered): slcan off ttyS3. [ 881.796060][T24217] can0: slcan on ttyS3. [ 881.979617][T24223] can0 (unregistered): slcan off ttyS3. [ 882.317513][T24234] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5143'. [ 882.462186][T24237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5144'. [ 883.135256][T24247] can0: slcan on ttyS3. [ 883.198583][T24247] can0 (unregistered): slcan off ttyS3. [ 883.202225][T24252] can0: slcan on ttyS3. [ 883.328558][T23825] usb 11-1: new high-speed USB device number 79 using dummy_hcd [ 883.359362][T24252] can0 (unregistered): slcan off ttyS3. [ 883.478454][T23825] usb 11-1: Using ep0 maxpacket: 16 [ 883.482074][T23825] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 883.487499][T23825] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 883.494307][T23825] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.497523][T23825] usb 11-1: Product: syz [ 883.499339][T23825] usb 11-1: Manufacturer: syz [ 883.501197][T23825] usb 11-1: SerialNumber: syz [ 883.503996][T23825] usb 11-1: config 0 descriptor?? [ 883.507057][T23825] hub 11-1:0.0: bad descriptor, ignoring hub [ 883.509745][T23825] hub 11-1:0.0: probe with driver hub failed with error -5 [ 883.513584][T23825] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input202 [ 883.868576][ T8] usb 11-1: USB disconnect, device number 79 [ 884.266252][T24277] can0: slcan on ttyS3. [ 884.328670][T24277] can0 (unregistered): slcan off ttyS3. [ 884.331983][T24278] can0: slcan on ttyS3. [ 884.498834][T24278] can0 (unregistered): slcan off ttyS3. [ 884.884682][T24293] can0: slcan on ttyS3. [ 884.939064][T24293] can0 (unregistered): slcan off ttyS3. [ 884.950198][T24293] can0: slcan on ttyS3. [ 885.101160][T24307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5154'. [ 885.199553][T24308] can0 (unregistered): slcan off ttyS3. [ 885.946582][T24329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5156'. [ 886.792832][T24344] netlink: 'syz.3.5162': attribute type 4 has an invalid length. [ 886.847353][T24340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5158'. [ 886.969525][ T5945] Bluetooth: hci1: command 0x041b tx timeout [ 886.982505][T24347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5160'. [ 886.988602][T23825] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 887.150022][T23825] usb 7-1: Using ep0 maxpacket: 16 [ 887.152631][T23825] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 887.157403][T23825] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 887.160797][T23825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.163713][T23825] usb 7-1: Product: syz [ 887.165298][T23825] usb 7-1: Manufacturer: syz [ 887.167010][T23825] usb 7-1: SerialNumber: syz [ 887.169795][T23825] usb 7-1: config 0 descriptor?? [ 887.172651][T23825] hub 7-1:0.0: bad descriptor, ignoring hub [ 887.174843][T23825] hub 7-1:0.0: probe with driver hub failed with error -5 [ 887.568670][ T25] usb 7-1: USB disconnect, device number 62 [ 888.000550][T24366] netlink: 'syz.2.5167': attribute type 10 has an invalid length. [ 888.014083][T24365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.081543][T24367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5166'. [ 888.610249][T24355] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 888.885682][T24392] can0: slcan on ttyS3. [ 888.989551][T24392] can0 (unregistered): slcan off ttyS3. [ 888.996127][T24393] can0: slcan on ttyS3. [ 889.228659][T24392] can0 (unregistered): slcan off ttyS3. [ 889.741165][ T1461] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 889.888434][ T1461] usb 7-1: Using ep0 maxpacket: 16 [ 889.891707][ T1461] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 889.896314][ T1461] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 889.899259][ T1461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.901687][ T1461] usb 7-1: Product: syz [ 889.902969][ T1461] usb 7-1: Manufacturer: syz [ 889.904373][ T1461] usb 7-1: SerialNumber: syz [ 889.906382][ T1461] usb 7-1: config 0 descriptor?? [ 889.908917][ T1461] hub 7-1:0.0: bad descriptor, ignoring hub [ 889.911191][ T1461] hub 7-1:0.0: probe with driver hub failed with error -5 [ 889.915737][ T1461] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input203 [ 889.981523][T24426] can0: slcan on ttyS3. [ 890.039503][T24426] can0 (unregistered): slcan off ttyS3. [ 890.043085][T24433] can0: slcan on ttyS3. [ 890.169619][T24433] can0 (unregistered): slcan off ttyS3. [ 890.241684][T24443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5175'. [ 890.268801][T12105] usb 7-1: USB disconnect, device number 63 [ 890.403970][T24445] can0: slcan on ttyS3. [ 890.458918][T24445] can0 (unregistered): slcan off ttyS3. [ 890.462163][T24450] can0: slcan on ttyS3. [ 890.638770][T24450] can0 (unregistered): slcan off ttyS3. [ 890.745728][T24460] netlink: 'syz.1.5178': attribute type 10 has an invalid length. [ 890.751834][T24459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 891.731562][T24477] binder: BINDER_SET_CONTEXT_MGR already set [ 891.733368][T24477] binder: 24473:24477 ioctl 4018620d 200002c0 returned -16 [ 891.859092][T24469] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5181'. [ 892.059458][T24466] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 892.092827][T24479] can0: slcan on ttyS3. [ 892.148909][T24479] can0 (unregistered): slcan off ttyS3. [ 892.153196][T24482] can0: slcan on ttyS3. [ 892.157046][T24483] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5192'. [ 892.308980][T24482] can0 (unregistered): slcan off ttyS3. [ 893.124398][T24512] netlink: 'syz.3.5187': attribute type 10 has an invalid length. [ 893.309081][T24498] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 893.338083][T24516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5188'. [ 893.341046][T24516] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5188'. [ 893.392837][T24513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5186'. [ 893.875357][T24507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.649390][T24517] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 895.205093][ T8] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 895.428476][ T8] usb 8-1: Using ep0 maxpacket: 16 [ 895.433687][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 895.439843][ T8] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 895.442528][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.444855][ T8] usb 8-1: Product: syz [ 895.446154][ T8] usb 8-1: Manufacturer: syz [ 895.447661][ T8] usb 8-1: SerialNumber: syz [ 895.449732][ T8] usb 8-1: config 0 descriptor?? [ 895.451978][ T8] hub 8-1:0.0: bad descriptor, ignoring hub [ 895.454027][ T8] hub 8-1:0.0: probe with driver hub failed with error -5 [ 895.457569][ T8] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input204 [ 895.779189][T24532] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 895.879475][ T8] usb 8-1: USB disconnect, device number 92 [ 896.455684][T24549] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5199'. [ 896.729292][T24550] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 896.884527][T24568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5205'. [ 897.192244][T24573] netlink: 'syz.1.5207': attribute type 10 has an invalid length. [ 897.196727][T24572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.368603][T23825] usb 11-1: new high-speed USB device number 80 using dummy_hcd [ 897.480351][T24576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5208'. [ 897.518654][T23825] usb 11-1: Using ep0 maxpacket: 8 [ 897.524410][T23825] usb 11-1: config 1 has an invalid interface number: 36 but max is 0 [ 897.527140][T23825] usb 11-1: config 1 has no interface number 0 [ 897.529883][T23825] usb 11-1: config 1 interface 36 altsetting 11 bulk endpoint 0x5 has invalid maxpacket 32 [ 897.533072][T23825] usb 11-1: config 1 interface 36 altsetting 11 endpoint 0x3 has invalid maxpacket 27120, setting to 64 [ 897.536360][T23825] usb 11-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 897.542040][T23825] usb 11-1: config 1 interface 36 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 897.545435][T23825] usb 11-1: config 1 interface 36 altsetting 11 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 897.548738][T23825] usb 11-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 897.553097][T23825] usb 11-1: config 1 interface 36 altsetting 11 endpoint 0xC has invalid wMaxPacketSize 0 [ 897.556438][T23825] usb 11-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 897.564325][T23825] usb 11-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 897.567822][T23825] usb 11-1: config 1 interface 36 has no altsetting 0 [ 897.571552][T23825] usb 11-1: New USB device found, idVendor=1f4d, idProduct=3000, bcdDevice=68.24 [ 897.574757][T23825] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.577882][T23825] usb 11-1: Manufacturer:  [ 897.580015][T23825] usb 11-1: SerialNumber: syz [ 897.583853][T24571] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 898.457015][T24591] can0: slcan on ttyS3. [ 898.509065][T24591] can0 (unregistered): slcan off ttyS3. [ 898.513452][T24591] can0: slcan on ttyS3. [ 898.563582][T24595] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5213'. [ 898.648778][T24596] can0 (unregistered): slcan off ttyS3. [ 899.783011][T24624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5217'. [ 900.092758][T23825] dvb-usb: found a 'SU3000HD DVB-S USB2.0' in warm state. [ 900.094659][T23825] dw2102: su3000_power_ctrl: 1, initialized 0 [ 900.096603][T23825] dvb-usb: bulk message failed: -22 (2/0) [ 900.099675][T23825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 900.102513][T23825] dvbdev: DVB: registering new adapter (SU3000HD DVB-S USB2.0) [ 900.103867][T24626] netlink: 'syz.6.5218': attribute type 4 has an invalid length. [ 900.104477][T23825] usb 11-1: media controller created [ 900.108207][T23825] dvb-usb: bulk message failed: -22 (6/0) [ 900.110124][T23825] dw2102: i2c transfer failed. [ 900.111536][T23825] dvb-usb: bulk message failed: -22 (6/0) [ 900.113025][T23825] dw2102: i2c transfer failed. [ 900.114310][T23825] dvb-usb: bulk message failed: -22 (6/0) [ 900.114712][T24626] netlink: 'syz.6.5218': attribute type 4 has an invalid length. [ 900.115828][T23825] dw2102: i2c transfer failed. [ 900.115834][T23825] dvb-usb: bulk message failed: -22 (6/0) [ 900.115840][T23825] dw2102: i2c transfer failed. [ 900.115844][T23825] dvb-usb: bulk message failed: -22 (6/0) [ 900.115849][T23825] dw2102: i2c transfer failed. [ 900.115853][T23825] dvb-usb: bulk message failed: -22 (6/0) [ 900.115858][T23825] dw2102: i2c transfer failed. [ 900.115861][T23825] dvb-usb: MAC address: 02:02:02:02:02:02 [ 900.119411][T23825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 900.134139][T23825] dvb-usb: bulk message failed: -22 (3/0) [ 900.135651][T23825] dw2102: command 0x0e transfer failed. [ 900.137090][T23825] dvb-usb: bulk message failed: -22 (3/0) [ 900.138880][T23825] dw2102: command 0x0e transfer failed. [ 900.349383][T24613] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 900.433903][T24630] netlink: 'syz.1.5219': attribute type 4 has an invalid length. [ 900.450489][T23825] dvb-usb: bulk message failed: -22 (3/0) [ 900.452657][T23825] dw2102: command 0x0e transfer failed. [ 900.454779][T23825] dvb-usb: bulk message failed: -22 (3/0) [ 900.456909][T23825] dw2102: command 0x0e transfer failed. [ 900.463024][T23825] dvb-usb: bulk message failed: -22 (1/0) [ 900.465148][T23825] dw2102: command 0x51 transfer failed. [ 900.477721][T23825] DVB: Unable to find symbol ds3000_attach() [ 900.482014][T23825] dvb-usb: no frontend was attached by 'SU3000HD DVB-S USB2.0' [ 900.518457][T23825] rc_core: IR keymap rc-su3000 not found [ 900.520339][T23825] Registered IR keymap rc-empty [ 900.522315][T23825] rc rc0: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 900.526008][T23825] input: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input205 [ 900.530799][T23825] dvb-usb: schedule remote query interval to 150 msecs. [ 900.532898][T23825] dw2102: su3000_power_ctrl: 0, initialized 1 [ 900.534710][T23825] dvb-usb: SU3000HD DVB-S USB2.0 successfully initialized and connected. [ 900.539720][T23825] usb 11-1: USB disconnect, device number 80 [ 900.553458][T23825] dvb-usb: SU3000HD DVB-S USB2.0 successfully deinitialized and disconnected. [ 901.036889][T24651] can0: slcan on ttyS3. [ 901.089139][T24651] can0 (unregistered): slcan off ttyS3. [ 901.094396][T24652] can0: slcan on ttyS3. [ 901.288583][T24652] can0 (unregistered): slcan off ttyS3. [ 901.450298][T24631] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 901.568517][T23825] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 901.718464][T23825] usb 8-1: Using ep0 maxpacket: 16 [ 901.721618][T23825] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 901.726947][T23825] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 901.730828][T23825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.733818][T23825] usb 8-1: Product: syz [ 901.735417][T23825] usb 8-1: Manufacturer: syz [ 901.737184][T23825] usb 8-1: SerialNumber: syz [ 901.739911][T23825] usb 8-1: config 0 descriptor?? [ 901.742924][T23825] hub 8-1:0.0: bad descriptor, ignoring hub [ 901.745304][T23825] hub 8-1:0.0: probe with driver hub failed with error -5 [ 901.749321][T23825] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input206 [ 901.768631][ T25] usb 11-1: new high-speed USB device number 81 using dummy_hcd [ 901.918537][ T25] usb 11-1: Using ep0 maxpacket: 8 [ 901.921269][ T25] usb 11-1: config 1 has an invalid interface number: 36 but max is 0 [ 901.923866][ T25] usb 11-1: config 1 has no interface number 0 [ 901.925728][ T25] usb 11-1: config 1 interface 36 altsetting 11 bulk endpoint 0x5 has invalid maxpacket 32 [ 901.929064][ T25] usb 11-1: config 1 interface 36 altsetting 11 endpoint 0x3 has invalid maxpacket 27120, setting to 64 [ 901.932381][ T25] usb 11-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 901.935543][ T25] usb 11-1: config 1 interface 36 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 901.938626][T24689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5227'. [ 901.938954][ T25] usb 11-1: config 1 interface 36 altsetting 11 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 901.948411][ T25] usb 11-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 901.951710][ T25] usb 11-1: config 1 interface 36 altsetting 11 endpoint 0xC has invalid wMaxPacketSize 0 [ 901.955598][ T25] usb 11-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 901.959025][ T25] usb 11-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 901.962843][ T25] usb 11-1: config 1 interface 36 has no altsetting 0 [ 901.966232][ T25] usb 11-1: New USB device found, idVendor=1f4d, idProduct=3000, bcdDevice=68.24 [ 901.969156][ T25] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.971651][ T25] usb 11-1: Manufacturer:  [ 901.973096][ T25] usb 11-1: SerialNumber: syz [ 901.978460][T24675] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 902.108777][ T8] usb 8-1: USB disconnect, device number 93 [ 902.591672][T24696] netlink: 'syz.2.5231': attribute type 4 has an invalid length. [ 902.613498][T24699] netlink: 'syz.3.5232': attribute type 4 has an invalid length. [ 903.278413][ T5947] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 903.550559][T24692] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 903.608440][ T5947] usb 7-1: Using ep0 maxpacket: 16 [ 903.611872][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 903.616183][ T5947] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 903.618883][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.621254][ T5947] usb 7-1: Product: syz [ 903.622546][ T5947] usb 7-1: Manufacturer: syz [ 903.623969][ T5947] usb 7-1: SerialNumber: syz [ 903.626542][ T5947] usb 7-1: config 0 descriptor?? [ 903.629333][ T5947] hub 7-1:0.0: bad descriptor, ignoring hub [ 903.631143][ T5947] hub 7-1:0.0: probe with driver hub failed with error -5 [ 903.635578][ T5947] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input207 [ 903.948470][T20806] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 904.018599][ T1461] usb 7-1: USB disconnect, device number 64 [ 904.035812][T24717] can0: slcan on ttyS3. [ 904.098445][T20806] usb 6-1: Using ep0 maxpacket: 16 [ 904.098969][T24717] can0 (unregistered): slcan off ttyS3. [ 904.101686][T20806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 904.103462][T24718] can0: slcan on ttyS3. [ 904.108163][T20806] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 904.111883][T20806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.115142][T20806] usb 6-1: Product: syz [ 904.116845][T20806] usb 6-1: Manufacturer: syz [ 904.119110][T20806] usb 6-1: SerialNumber: syz [ 904.122468][T20806] usb 6-1: config 0 descriptor?? [ 904.125540][T20806] hub 6-1:0.0: bad descriptor, ignoring hub [ 904.127952][T20806] hub 6-1:0.0: probe with driver hub failed with error -5 [ 904.132404][T20806] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input208 [ 904.248634][T24718] can0 (unregistered): slcan off ttyS3. [ 904.478877][ T9] usb 6-1: USB disconnect, device number 100 [ 904.481389][ T25] dvb-usb: found a 'SU3000HD DVB-S USB2.0' in warm state. [ 904.483490][ T25] dw2102: su3000_power_ctrl: 1, initialized 0 [ 904.485327][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 904.492138][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 904.495043][ T25] dvbdev: DVB: registering new adapter (SU3000HD DVB-S USB2.0) [ 904.497267][ T25] usb 11-1: media controller created [ 904.499035][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 904.500659][ T25] dw2102: i2c transfer failed. [ 904.502057][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 904.503792][ T25] dw2102: i2c transfer failed. [ 904.505187][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 904.506845][ T25] dw2102: i2c transfer failed. [ 904.508293][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 904.510226][ T25] dw2102: i2c transfer failed. [ 904.511612][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 904.513210][ T25] dw2102: i2c transfer failed. [ 904.514588][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 904.516192][ T25] dw2102: i2c transfer failed. [ 904.517581][ T25] dvb-usb: MAC address: 02:02:02:02:02:02 [ 904.522363][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 904.527926][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 904.530283][ T25] dw2102: command 0x0e transfer failed. [ 904.530942][T24735] netlink: 'syz.2.5238': attribute type 4 has an invalid length. [ 904.531939][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 904.536487][ T25] dw2102: command 0x0e transfer failed. [ 904.566845][T24736] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5237'. [ 904.571920][T24736] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5237'. [ 904.838477][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 904.840347][ T25] dw2102: command 0x0e transfer failed. [ 904.842168][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 904.843856][ T25] dw2102: command 0x0e transfer failed. [ 904.845479][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 904.847095][ T25] dw2102: command 0x51 transfer failed. [ 904.857291][ T25] DVB: Unable to find symbol ds3000_attach() [ 904.859101][ T25] dvb-usb: no frontend was attached by 'SU3000HD DVB-S USB2.0' [ 904.874175][T24744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5239'. [ 904.898432][ T25] rc_core: IR keymap rc-su3000 not found [ 904.900604][ T25] Registered IR keymap rc-empty [ 904.902732][ T25] rc rc0: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 904.907127][ T25] input: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input209 [ 904.914504][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 904.917644][ T25] dw2102: su3000_power_ctrl: 0, initialized 1 [ 904.919844][ T25] dvb-usb: SU3000HD DVB-S USB2.0 successfully initialized and connected. [ 904.924689][ T25] usb 11-1: USB disconnect, device number 81 [ 904.935591][ T25] dvb-usb: SU3000HD DVB-S USB2.0 successfully deinitialized and disconnected. [ 905.628497][ T35] usb 11-1: new high-speed USB device number 82 using dummy_hcd [ 905.788579][ T35] usb 11-1: Using ep0 maxpacket: 16 [ 905.793888][ T35] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 905.799989][ T35] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 905.802857][ T35] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.805222][ T35] usb 11-1: Product: syz [ 905.806363][ T35] usb 11-1: Manufacturer: syz [ 905.807716][ T35] usb 11-1: SerialNumber: syz [ 905.810057][ T35] usb 11-1: config 0 descriptor?? [ 905.812201][ T35] hub 11-1:0.0: bad descriptor, ignoring hub [ 905.814403][ T35] hub 11-1:0.0: probe with driver hub failed with error -5 [ 905.818603][ T35] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input210 [ 905.951034][T24762] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5244'. [ 906.178700][T23825] usb 11-1: USB disconnect, device number 82 [ 906.501796][T24755] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 906.538600][ T35] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 906.541758][T24770] can0: slcan on ttyS3. [ 906.598941][T24770] can0 (unregistered): slcan off ttyS3. [ 906.601896][T24776] can0: slcan on ttyS3. [ 906.698579][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 906.701764][ T35] usb 6-1: config 1 has an invalid interface number: 36 but max is 0 [ 906.704120][ T35] usb 6-1: config 1 has no interface number 0 [ 906.705901][ T35] usb 6-1: config 1 interface 36 altsetting 11 bulk endpoint 0x5 has invalid maxpacket 32 [ 906.709193][ T35] usb 6-1: config 1 interface 36 altsetting 11 endpoint 0x3 has invalid maxpacket 27120, setting to 64 [ 906.712741][ T35] usb 6-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 906.715772][ T35] usb 6-1: config 1 interface 36 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 906.718898][ T35] usb 6-1: config 1 interface 36 altsetting 11 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 906.721894][ T35] usb 6-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 906.724929][ T35] usb 6-1: config 1 interface 36 altsetting 11 endpoint 0xC has invalid wMaxPacketSize 0 [ 906.727685][ T35] usb 6-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 906.730932][ T35] usb 6-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 906.734010][ T35] usb 6-1: config 1 interface 36 has no altsetting 0 [ 906.738518][ T35] usb 6-1: New USB device found, idVendor=1f4d, idProduct=3000, bcdDevice=68.24 [ 906.738985][T24776] can0 (unregistered): slcan off ttyS3. [ 906.739357][T24786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5248'. [ 906.739550][T24786] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5248'. [ 906.741769][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.752573][ T35] usb 6-1: Manufacturer:  [ 906.754349][ T35] usb 6-1: SerialNumber: syz [ 906.758740][T24766] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 907.538134][T24798] can0: slcan on ttyS3. [ 907.608856][T24798] can0 (unregistered): slcan off ttyS3. [ 907.611765][T24805] can0: slcan on ttyS3. [ 907.622470][T24803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5251'. [ 907.739040][T24818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5253'. [ 907.743524][T24818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5253'. [ 907.788751][T24805] can0 (unregistered): slcan off ttyS3. [ 908.603494][T24842] netlink: 'syz.2.5257': attribute type 4 has an invalid length. [ 909.093450][T24846] can0: slcan on ttyS3. [ 909.169199][T24846] can0 (unregistered): slcan off ttyS3. [ 909.176671][T24847] can0: slcan on ttyS3. [ 909.237434][ T35] dvb-usb: found a 'SU3000HD DVB-S USB2.0' in warm state. [ 909.241245][ T35] dw2102: su3000_power_ctrl: 1, initialized 0 [ 909.243260][ T35] dvb-usb: bulk message failed: -22 (2/0) [ 909.248635][ T35] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 909.256620][T24853] netlink: 'syz.1.5259': attribute type 4 has an invalid length. [ 909.259569][ T35] dvbdev: DVB: registering new adapter (SU3000HD DVB-S USB2.0) [ 909.262609][ T35] usb 6-1: media controller created [ 909.264308][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 909.265980][ T35] dw2102: i2c transfer failed. [ 909.267401][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 909.270140][ T35] dw2102: i2c transfer failed. [ 909.271810][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 909.271852][T24853] netlink: 'syz.1.5259': attribute type 4 has an invalid length. [ 909.273501][ T35] dw2102: i2c transfer failed. [ 909.277091][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 909.279414][ T35] dw2102: i2c transfer failed. [ 909.283624][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 909.285296][ T35] dw2102: i2c transfer failed. [ 909.286694][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 909.288322][ T35] dw2102: i2c transfer failed. [ 909.292595][ T35] dvb-usb: MAC address: 02:02:02:02:02:02 [ 909.297707][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 909.298557][T24847] can0 (unregistered): slcan off ttyS3. [ 909.302543][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 909.304203][ T35] dw2102: command 0x0e transfer failed. [ 909.305878][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 909.307526][ T35] dw2102: command 0x0e transfer failed. [ 909.327103][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5260'. [ 909.330278][T24858] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5260'. [ 909.387953][T24831] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 909.567068][T24871] can0: slcan on ttyS3. [ 909.618428][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 909.620099][ T35] dw2102: command 0x0e transfer failed. [ 909.621679][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 909.623414][ T35] dw2102: command 0x0e transfer failed. [ 909.625017][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 909.626686][ T35] dw2102: command 0x51 transfer failed. [ 909.630992][T24871] can0 (unregistered): slcan off ttyS3. [ 909.640632][T24873] can0: slcan on ttyS3. [ 909.656019][ T35] DVB: Unable to find symbol ds3000_attach() [ 909.657820][ T35] dvb-usb: no frontend was attached by 'SU3000HD DVB-S USB2.0' [ 909.698486][ T35] rc_core: IR keymap rc-su3000 not found [ 909.700221][ T35] Registered IR keymap rc-empty [ 909.703303][ T35] rc rc0: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 909.706247][ T35] input: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input211 [ 909.710816][ T35] dvb-usb: schedule remote query interval to 150 msecs. [ 909.712861][ T35] dw2102: su3000_power_ctrl: 0, initialized 1 [ 909.714621][ T35] dvb-usb: SU3000HD DVB-S USB2.0 successfully initialized and connected. [ 909.722459][ T35] usb 6-1: USB disconnect, device number 101 [ 909.736311][ T35] dvb-usb: SU3000HD DVB-S USB2.0 successfully deinitialized and disconnected. [ 909.819247][T24873] can0 (unregistered): slcan off ttyS3. [ 910.110279][T24894] netlink: 'syz.6.5264': attribute type 4 has an invalid length. [ 910.127988][T24896] netlink: 'syz.2.5266': attribute type 4 has an invalid length. [ 910.223069][T24899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5263'. [ 910.832147][ T8] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 910.998421][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 911.154437][ T8] usb 7-1: config 1 has an invalid interface number: 36 but max is 0 [ 911.156589][ T8] usb 7-1: config 1 has no interface number 0 [ 911.172865][ T8] usb 7-1: config 1 interface 36 altsetting 11 bulk endpoint 0x5 has invalid maxpacket 32 [ 911.176202][ T8] usb 7-1: config 1 interface 36 altsetting 11 endpoint 0x3 has invalid maxpacket 27120, setting to 64 [ 911.179900][ T8] usb 7-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 911.183065][ T8] usb 7-1: config 1 interface 36 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 911.186154][ T8] usb 7-1: config 1 interface 36 altsetting 11 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 911.189378][ T8] usb 7-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 911.192444][ T8] usb 7-1: config 1 interface 36 altsetting 11 endpoint 0xC has invalid wMaxPacketSize 0 [ 911.195544][ T8] usb 7-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 911.198770][ T8] usb 7-1: config 1 interface 36 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 911.202310][ T8] usb 7-1: config 1 interface 36 has no altsetting 0 [ 911.211088][ T8] usb 7-1: New USB device found, idVendor=1f4d, idProduct=3000, bcdDevice=68.24 [ 911.213694][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.215994][ T8] usb 7-1: Manufacturer:  [ 911.217345][ T8] usb 7-1: SerialNumber: syz [ 911.220566][T24907] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 911.513912][T24908] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 911.953308][T24925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5272'. [ 911.956998][T24925] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5272'. [ 912.094145][T24928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5273'. [ 912.750841][T24942] can0: slcan on ttyS3. [ 912.810164][T24942] can0 (unregistered): slcan off ttyS3. [ 912.813694][T24946] can0: slcan on ttyS3. [ 913.000270][T24946] can0 (unregistered): slcan off ttyS3. [ 913.448161][T24957] netlink: 'syz.3.5278': attribute type 4 has an invalid length. [ 913.552569][ T8] dvb-usb: found a 'SU3000HD DVB-S USB2.0' in warm state. [ 913.554608][ T8] dw2102: su3000_power_ctrl: 1, initialized 0 [ 913.556316][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 913.560432][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 913.563843][ T8] dvbdev: DVB: registering new adapter (SU3000HD DVB-S USB2.0) [ 913.566019][ T8] usb 7-1: media controller created [ 913.567479][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 913.569480][ T8] dw2102: i2c transfer failed. [ 913.570864][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 913.572423][ T8] dw2102: i2c transfer failed. [ 913.573740][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 913.575371][ T8] dw2102: i2c transfer failed. [ 913.576718][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 913.578323][ T8] dw2102: i2c transfer failed. [ 913.580076][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 913.581676][ T8] dw2102: i2c transfer failed. [ 913.582997][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 913.584616][ T8] dw2102: i2c transfer failed. [ 913.586051][ T8] dvb-usb: MAC address: 02:02:02:02:02:02 [ 913.591197][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 913.595951][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 913.597635][ T8] dw2102: command 0x0e transfer failed. [ 913.599396][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 913.601068][ T8] dw2102: command 0x0e transfer failed. [ 913.908775][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 913.910523][ T8] dw2102: command 0x0e transfer failed. [ 913.912045][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 913.913683][ T8] dw2102: command 0x0e transfer failed. [ 913.915356][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 913.917056][ T8] dw2102: command 0x51 transfer failed. [ 913.939246][ T8] DVB: Unable to find symbol ds3000_attach() [ 913.941118][ T8] dvb-usb: no frontend was attached by 'SU3000HD DVB-S USB2.0' [ 913.952160][T24973] can0: slcan on ttyS3. [ 913.978567][ T8] rc_core: IR keymap rc-su3000 not found [ 913.980407][ T8] Registered IR keymap rc-empty [ 913.988675][ T8] rc rc0: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 913.991666][ T8] input: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input212 [ 913.995287][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 913.997329][ T8] dw2102: su3000_power_ctrl: 0, initialized 1 [ 913.999472][ T8] dvb-usb: SU3000HD DVB-S USB2.0 successfully initialized and connected. [ 914.009694][ T8] usb 7-1: USB disconnect, device number 65 [ 914.026175][ T8] dvb-usb: SU3000HD DVB-S USB2.0 successfully deinitialized and disconnected. [ 914.029960][T24973] can0 (unregistered): slcan off ttyS3. [ 914.042280][T24974] can0: slcan on ttyS3. [ 914.090589][T24982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5283'. [ 914.094525][T24982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5283'. [ 914.249815][T24974] can0 (unregistered): slcan off ttyS3. [ 914.540120][T25002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5286'. [ 914.740434][T24967] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 914.830772][T25013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5290'. [ 914.922531][T25017] netlink: 'syz.1.5291': attribute type 10 has an invalid length. [ 914.925456][T25016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.294609][T25022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5292'. [ 916.281128][T25037] can0: slcan on ttyS3. [ 916.343638][T25048] FAULT_INJECTION: forcing a failure. [ 916.343638][T25048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.347525][T25048] CPU: 3 UID: 0 PID: 25048 Comm: syz.6.5300 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 916.350690][T25048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 916.353781][T25048] Call Trace: [ 916.354781][T25048] [ 916.355638][T25048] dump_stack_lvl+0x16c/0x1f0 [ 916.357178][T25048] should_fail_ex+0x497/0x5b0 [ 916.358531][T25048] _copy_from_user+0x2e/0xd0 [ 916.359858][T25048] get_compat_msghdr+0xa8/0x170 [ 916.361241][T25048] ? __pfx_get_compat_msghdr+0x10/0x10 [ 916.362756][T25048] ? rcu_is_watching+0x12/0xc0 [ 916.364134][T25048] ? lock_release+0x4e2/0x6f0 [ 916.365473][T25048] ? get_pid_task+0xfc/0x250 [ 916.367067][T25048] ___sys_sendmsg+0x1b0/0x1e0 [ 916.368997][T25048] ? get_pid_task+0x35/0x250 [ 916.370418][T25048] ? __pfx____sys_sendmsg+0x10/0x10 [ 916.371879][T25048] ? lock_release+0x4e2/0x6f0 [ 916.373233][T25048] ? __pfx_lock_release+0x10/0x10 [ 916.374676][T25048] ? trace_lock_acquire+0x14e/0x1f0 [ 916.376090][T25048] ? __fget_files+0x206/0x3a0 [ 916.377530][T25048] __sys_sendmsg+0x16e/0x220 [ 916.378888][T25048] ? __pfx___sys_sendmsg+0x10/0x10 [ 916.380354][T25048] ? rcu_is_watching+0x12/0xc0 [ 916.381703][T25048] __do_fast_syscall_32+0x73/0x120 [ 916.383159][T25048] do_fast_syscall_32+0x32/0x80 [ 916.384572][T25048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 916.386419][T25048] RIP: 0023:0xf7f66579 [ 916.387826][T25048] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 916.393206][T25048] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 916.395571][T25048] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020004340 [ 916.398063][T25048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 916.400369][T25048] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 916.402616][T25048] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 916.404833][T25048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 916.407355][T25048] [ 916.409499][T25037] can0 (unregistered): slcan off ttyS3. [ 916.410247][T25027] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 916.415428][T25045] can0: slcan on ttyS3. [ 916.468190][T25057] netlink: 'syz.1.5302': attribute type 10 has an invalid length. [ 916.477148][T25056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 916.780860][T25049] can0 (unregistered): slcan off ttyS3. [ 918.149545][T25089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5308'. [ 918.558504][T13595] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 918.708464][T13595] usb 6-1: Using ep0 maxpacket: 16 [ 918.711686][T13595] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 918.724404][T13595] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 918.727922][T13595] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.731247][T13595] usb 6-1: Product: syz [ 918.732928][T13595] usb 6-1: Manufacturer: syz [ 918.734855][T13595] usb 6-1: SerialNumber: syz [ 918.737686][T13595] usb 6-1: config 0 descriptor?? [ 918.741670][T13595] hub 6-1:0.0: bad descriptor, ignoring hub [ 918.743543][T13595] hub 6-1:0.0: probe with driver hub failed with error -5 [ 918.746685][T13595] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input213 [ 919.021753][T25100] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5312'. [ 919.062631][T25102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5313'. [ 919.065382][T25102] netlink: 'syz.2.5313': attribute type 12 has an invalid length. [ 919.538242][T25129] netlink: 'syz.3.5315': attribute type 4 has an invalid length. [ 919.638514][ T8] usb 6-1: USB disconnect, device number 102 [ 919.988584][T25150] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5319'. [ 920.179924][T25156] can0: slcan on ttyS3. [ 920.269529][T25156] can0 (unregistered): slcan off ttyS3. [ 920.273006][T25161] can0: slcan on ttyS3. [ 920.558855][T25178] can0 (unregistered): slcan off ttyS3. [ 920.881787][ T39] audit: type=1804 audit(1736313424.162:361): pid=25190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5324" name="/newroot/119/file1" dev="fuse" ino=1 res=1 errno=0 [ 920.888199][ T39] audit: type=1804 audit(1736313424.162:362): pid=25190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5324" name="/newroot/119/file1" dev="fuse" ino=1 res=1 errno=0 [ 921.037493][T25196] netlink: 'syz.1.5326': attribute type 10 has an invalid length. [ 921.042867][T25195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.058794][T25197] netlink: 'syz.6.5325': attribute type 10 has an invalid length. [ 921.293035][T25200] netlink: 'syz.2.5327': attribute type 4 has an invalid length. [ 921.918636][T25192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.118466][T13595] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 922.268560][T13595] usb 7-1: Using ep0 maxpacket: 16 [ 922.271880][T13595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 922.275905][T13595] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 922.278529][T13595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.280708][T13595] usb 7-1: Product: syz [ 922.281840][T13595] usb 7-1: Manufacturer: syz [ 922.283134][T13595] usb 7-1: SerialNumber: syz [ 922.285394][T13595] usb 7-1: config 0 descriptor?? [ 922.287676][T13595] hub 7-1:0.0: bad descriptor, ignoring hub [ 922.289382][T13595] hub 7-1:0.0: probe with driver hub failed with error -5 [ 922.292180][T13595] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input214 [ 922.554207][T25225] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5333'. [ 922.577532][T25227] binder: 25226:25227 ioctl c0306201 200003c0 returned -14 [ 922.638616][T12241] usb 7-1: USB disconnect, device number 66 [ 923.229820][T25236] FAULT_INJECTION: forcing a failure. [ 923.229820][T25236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.233536][T25236] CPU: 3 UID: 0 PID: 25236 Comm: syz.1.5339 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 923.236607][T25236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 923.239632][T25236] Call Trace: [ 923.240621][T25236] [ 923.241484][T25236] dump_stack_lvl+0x16c/0x1f0 [ 923.242913][T25236] should_fail_ex+0x497/0x5b0 [ 923.244296][T25236] _copy_from_user+0x2e/0xd0 [ 923.245664][T25236] snd_seq_oss_write+0x398/0x7b0 [ 923.247138][T25236] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 923.248707][T25236] ? rcu_is_watching+0x12/0xc0 [ 923.250105][T25236] ? lock_release+0x4e2/0x6f0 [ 923.251466][T25236] ? apparmor_file_permission+0x251/0x400 [ 923.253111][T25236] ? __pfx_odev_write+0x10/0x10 [ 923.254528][T25236] odev_write+0x51/0xa0 [ 923.255742][T25236] vfs_write+0x24c/0x1150 [ 923.257033][T25236] ? __fget_files+0x1fc/0x3a0 [ 923.258411][T25236] ? __pfx_lock_release+0x10/0x10 [ 923.259926][T25236] ? __pfx_vfs_write+0x10/0x10 [ 923.261314][T25236] ? __fget_files+0x40/0x3a0 [ 923.262666][T25236] ? lock_acquire+0x2f/0xb0 [ 923.263987][T25236] ? __fget_files+0x40/0x3a0 [ 923.265354][T25236] ? __fget_files+0x206/0x3a0 [ 923.266729][T25236] ksys_write+0x12b/0x250 [ 923.268011][T25236] ? __pfx_ksys_write+0x10/0x10 [ 923.269425][T25236] ? rcu_is_watching+0x12/0xc0 [ 923.270829][T25236] __do_fast_syscall_32+0x73/0x120 [ 923.272312][T25236] do_fast_syscall_32+0x32/0x80 [ 923.273730][T25236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 923.275560][T25236] RIP: 0023:0xf7f30579 [ 923.276747][T25236] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 923.282296][T25236] RSP: 002b:00000000f506555c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 923.284713][T25236] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200003c0 [ 923.286989][T25236] RDX: 000000000000ff49 RSI: 0000000000000000 RDI: 0000000000000000 [ 923.289260][T25236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 923.291547][T25236] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 923.293825][T25236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 923.296109][T25236] [ 923.778026][T25249] netlink: 'syz.6.5341': attribute type 10 has an invalid length. [ 924.250600][T25241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.658437][ T25] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 924.828508][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 924.831160][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 924.835863][ T25] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 924.838563][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.840782][ T25] usb 8-1: Product: syz [ 924.841926][ T25] usb 8-1: Manufacturer: syz [ 924.843294][ T25] usb 8-1: SerialNumber: syz [ 924.845459][ T25] usb 8-1: config 0 descriptor?? [ 924.848090][ T25] hub 8-1:0.0: bad descriptor, ignoring hub [ 924.849835][ T25] hub 8-1:0.0: probe with driver hub failed with error -5 [ 924.852420][ T25] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input215 [ 924.922682][T25269] can0: slcan on ttyS3. [ 924.988729][T25269] can0 (unregistered): slcan off ttyS3. [ 924.993323][T25270] can0: slcan on ttyS3. [ 925.158606][T25270] can0 (unregistered): slcan off ttyS3. [ 925.209784][T25256] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 925.228036][ T9] usb 8-1: USB disconnect, device number 94 [ 925.242626][T25285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5350'. [ 925.251394][T25285] bond1: entered promiscuous mode [ 925.257190][T25285] bond1 (unregistering): Released all slaves [ 925.731404][ T5941] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 925.734286][T25297] veth0_to_bridge: entered promiscuous mode [ 926.584395][T25296] veth0_to_bridge: left promiscuous mode [ 926.789057][ T8319] usb 11-1: new high-speed USB device number 83 using dummy_hcd [ 926.988484][ T8319] usb 11-1: Using ep0 maxpacket: 16 [ 927.004396][ T8319] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 927.050140][ T8319] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 927.053225][ T8319] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.197080][ T8319] usb 11-1: Product: syz [ 927.198929][ T8319] usb 11-1: Manufacturer: syz [ 927.200860][ T8319] usb 11-1: SerialNumber: syz [ 927.203697][ T8319] usb 11-1: config 0 descriptor?? [ 927.209028][ T8319] hub 11-1:0.0: bad descriptor, ignoring hub [ 927.211478][ T8319] hub 11-1:0.0: probe with driver hub failed with error -5 [ 927.217041][ T8319] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input216 [ 927.568640][ T9] usb 11-1: USB disconnect, device number 83 [ 927.770625][T25345] can0: slcan on ttyS3. [ 927.779219][T12087] hid (null): unknown global tag 0xe [ 927.781049][T12087] hid (null): unknown global tag 0xe [ 927.783051][T12087] hid (null): unknown global tag 0xc [ 927.786351][T12087] hid (null): unknown global tag 0xd [ 927.790230][T12087] hid-generic 0000:0004:00A9.0011: unknown main item tag 0x0 [ 927.792388][T12087] hid-generic 0000:0004:00A9.0011: unknown global tag 0xe [ 927.794434][T12087] hid-generic 0000:0004:00A9.0011: item 0 2 1 14 parsing failed [ 927.796838][T12087] hid-generic 0000:0004:00A9.0011: probe with driver hid-generic failed with error -22 [ 928.642207][T25366] FAULT_INJECTION: forcing a failure. [ 928.642207][T25366] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 928.649875][T25366] CPU: 3 UID: 0 PID: 25366 Comm: syz.1.5367 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 928.653038][T25366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 928.656129][T25366] Call Trace: [ 928.657119][T25366] [ 928.658023][T25366] dump_stack_lvl+0x16c/0x1f0 [ 928.659399][T25366] should_fail_ex+0x497/0x5b0 [ 928.660768][T25366] ? fs_reclaim_acquire+0xae/0x150 [ 928.662269][T25366] should_fail_alloc_page+0xe7/0x130 [ 928.663804][T25366] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 928.665582][T25366] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 928.667477][T25366] __alloc_pages_noprof+0x190/0x25b0 [ 928.669006][T25366] ? __kernel_text_address+0xd/0x40 [ 928.670519][T25366] ? arch_stack_walk+0xa7/0x100 [ 928.671941][T25366] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 928.673624][T25366] ? stack_trace_save+0x95/0xd0 [ 928.675046][T25366] ? __pfx_stack_trace_save+0x10/0x10 [ 928.676587][T25366] ? format_decode+0x2d4/0xba0 [ 928.678015][T25366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 928.679724][T25366] ? lock_vma_under_rcu+0x13e/0x980 [ 928.681246][T25366] ? rcu_is_watching+0x12/0xc0 [ 928.682688][T25366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 928.684386][T25366] ? policy_nodemask+0xea/0x4e0 [ 928.685803][T25366] alloc_pages_mpol_noprof+0x2c9/0x610 [ 928.687466][T25366] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 928.689199][T25366] pte_alloc_one+0x20/0x390 [ 928.690532][T25366] __pte_alloc+0x6e/0x3b0 [ 928.691935][T25366] ? __pfx___pte_alloc+0x10/0x10 [ 928.693368][T25366] ? __pfx___might_resched+0x10/0x10 [ 928.694932][T25366] ? mm_alloc_pmd+0x15c/0x240 [ 928.696307][T25366] mfill_atomic_zeropage+0x10fc/0x1630 [ 928.697879][T25366] ? __pfx_mfill_atomic_zeropage+0x10/0x10 [ 928.699666][T25366] ? __might_fault+0xe3/0x190 [ 928.701100][T25366] ? __might_fault+0xe3/0x190 [ 928.702474][T25366] userfaultfd_ioctl+0x2f56/0x3830 [ 928.703955][T25366] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 928.705420][T25366] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 928.707009][T25366] ? __fget_files+0x40/0x3a0 [ 928.708357][T25366] ? __fget_files+0x206/0x3a0 [ 928.709728][T25366] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 928.711298][T25366] ? compat_ptr_ioctl+0x6b/0xa0 [ 928.712702][T25366] compat_ptr_ioctl+0x6b/0xa0 [ 928.714090][T25366] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 928.715640][T25366] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 928.717164][T25366] __do_fast_syscall_32+0x73/0x120 [ 928.718664][T25366] do_fast_syscall_32+0x32/0x80 [ 928.720077][T25366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 928.721908][T25366] RIP: 0023:0xf7f30579 [ 928.723117][T25366] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 928.728482][ T5941] Bluetooth: hci2: command 0x041b tx timeout [ 928.728657][T25366] RSP: 002b:00000000f506555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 928.732863][T25366] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c020aa04 [ 928.735154][T25366] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 928.737420][T25366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 928.739697][T25366] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 928.741984][T25366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 928.744223][T25366] [ 929.065192][T25376] netlink: 'syz.1.5370': attribute type 4 has an invalid length. [ 929.341381][T25382] netlink: 'syz.6.5371': attribute type 4 has an invalid length. [ 929.648991][T25388] can0 (unregistered): slcan off ttyS3. [ 929.652327][T25395] can0: slcan on ttyS3. [ 929.789797][T25395] can0 (unregistered): slcan off ttyS3. [ 929.949172][T25373] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 929.999522][T25416] ubi0: attaching mtd0 [ 930.001237][T25416] ubi0: scanning is finished [ 930.002654][T25416] ubi0: empty MTD device detected [ 930.070714][T25416] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 930.074437][T25416] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 930.076698][T25416] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 930.078872][T25416] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 930.081036][T25416] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 930.082980][T25416] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 930.085351][T25416] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1348751615 [ 930.088184][T25416] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 930.091299][T25418] ubi0: background thread "ubi_bgt0d" started, PID 25418 [ 930.262128][T25425] : renamed from bond0 (while UP) [ 930.969721][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.971518][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.865407][T25463] can0: slcan on ttyS3. [ 931.928575][T25463] can0 (unregistered): slcan off ttyS3. [ 931.929528][T25468] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5389'. [ 931.932867][T25467] can0: slcan on ttyS3. [ 932.045010][T25467] can0 (unregistered): slcan off ttyS3. [ 932.368543][T13595] usb 11-1: new high-speed USB device number 84 using dummy_hcd [ 932.518506][T13595] usb 11-1: Using ep0 maxpacket: 16 [ 932.521329][T13595] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 932.526942][T13595] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 932.529857][T13595] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.532229][T13595] usb 11-1: Product: syz [ 932.533444][T13595] usb 11-1: Manufacturer: syz [ 932.534837][T13595] usb 11-1: SerialNumber: syz [ 932.537483][T13595] usb 11-1: config 0 descriptor?? [ 932.543569][T13595] hub 11-1:0.0: bad descriptor, ignoring hub [ 932.545710][T13595] hub 11-1:0.0: probe with driver hub failed with error -5 [ 932.548697][T13595] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input217 [ 932.938576][T13595] usb 11-1: USB disconnect, device number 84 [ 933.048556][ T8319] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 933.198431][ T8319] usb 8-1: Using ep0 maxpacket: 16 [ 933.201444][ T8319] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 933.206346][ T8319] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 933.209852][ T8319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.212828][ T8319] usb 8-1: Product: syz [ 933.214400][ T8319] usb 8-1: Manufacturer: syz [ 933.216118][ T8319] usb 8-1: SerialNumber: syz [ 933.218780][ T8319] usb 8-1: config 0 descriptor?? [ 933.221311][ T8319] hub 8-1:0.0: bad descriptor, ignoring hub [ 933.223510][ T8319] hub 8-1:0.0: probe with driver hub failed with error -5 [ 933.226901][ T8319] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input218 [ 933.578642][ T35] usb 8-1: USB disconnect, device number 95 [ 933.744419][T25520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5400'. [ 933.919776][T25519] netlink: 'syz.1.5401': attribute type 10 has an invalid length. [ 934.277426][T25527] ubi: mtd0 is already attached to ubi0 [ 934.313638][T25534] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5404'. [ 934.316665][T25534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5404'. [ 934.331082][T25533] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5405'. [ 934.544011][T25540] netlink: 'syz.2.5407': attribute type 4 has an invalid length. [ 934.545189][T25518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.945758][T25544] FAULT_INJECTION: forcing a failure. [ 934.945758][T25544] name failslab, interval 1, probability 0, space 0, times 0 [ 934.949577][T25544] CPU: 0 UID: 0 PID: 25544 Comm: syz.2.5408 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 934.952618][T25544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 934.955666][T25544] Call Trace: [ 934.956630][T25544] [ 934.957484][T25544] dump_stack_lvl+0x16c/0x1f0 [ 934.958830][T25544] should_fail_ex+0x497/0x5b0 [ 934.960173][T25544] ? fs_reclaim_acquire+0xae/0x150 [ 934.961634][T25544] should_failslab+0xc2/0x120 [ 934.963006][T25544] __kmalloc_noprof+0xce/0x4f0 [ 934.964352][T25544] ? rcu_is_watching+0x12/0xc0 [ 934.965674][T25544] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 934.967803][T25544] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 934.969803][T25544] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 934.971370][T25544] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 934.973113][T25544] ? genl_get_cmd+0x195/0x580 [ 934.974474][T25544] ? bpf_lsm_capable+0x9/0x10 [ 934.975830][T25544] ? security_capable+0x7e/0x260 [ 934.977269][T25544] ? ns_capable+0xd7/0x110 [ 934.978579][T25544] genl_rcv_msg+0x565/0x800 [ 934.979894][T25544] ? __pfx_genl_rcv_msg+0x10/0x10 [ 934.981337][T25544] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 934.982874][T25544] ? __pfx_nl80211_join_ibss+0x10/0x10 [ 934.984446][T25544] ? __pfx_nl80211_post_doit+0x10/0x10 [ 934.986006][T25544] netlink_rcv_skb+0x165/0x410 [ 934.987548][T25544] ? __pfx_genl_rcv_msg+0x10/0x10 [ 934.989005][T25544] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 934.990521][T25544] ? down_read+0xc9/0x330 [ 934.991747][T25544] ? __pfx_down_read+0x10/0x10 [ 934.993089][T25544] ? netlink_deliver_tap+0x1ae/0xca0 [ 934.994612][T25544] genl_rcv+0x28/0x40 [ 934.995767][T25544] netlink_unicast+0x53c/0x7f0 [ 934.997139][T25544] ? __pfx_netlink_unicast+0x10/0x10 [ 934.998671][T25544] ? __phys_addr_symbol+0x30/0x80 [ 935.000110][T25544] ? __check_object_size+0x488/0x710 [ 935.001629][T25544] netlink_sendmsg+0x8b8/0xd70 [ 935.003010][T25544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.004539][T25544] ____sys_sendmsg+0x9ae/0xb40 [ 935.005925][T25544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 935.007443][T25544] ? get_compat_msghdr+0x11b/0x170 [ 935.008917][T25544] ? rcu_is_watching+0x12/0xc0 [ 935.010310][T25544] ? lock_release+0x4e2/0x6f0 [ 935.011668][T25544] ? get_pid_task+0xfc/0x250 [ 935.012999][T25544] ___sys_sendmsg+0x135/0x1e0 [ 935.014358][T25544] ? get_pid_task+0x35/0x250 [ 935.015686][T25544] ? __pfx____sys_sendmsg+0x10/0x10 [ 935.017172][T25544] ? lock_release+0x4e2/0x6f0 [ 935.018525][T25544] ? __pfx_lock_release+0x10/0x10 [ 935.019967][T25544] ? trace_lock_acquire+0x14e/0x1f0 [ 935.021454][T25544] ? __fget_files+0x206/0x3a0 [ 935.022812][T25544] __sys_sendmsg+0x16e/0x220 [ 935.024138][T25544] ? __pfx___sys_sendmsg+0x10/0x10 [ 935.025617][T25544] ? rcu_is_watching+0x12/0xc0 [ 935.026996][T25544] __do_fast_syscall_32+0x73/0x120 [ 935.028463][T25544] do_fast_syscall_32+0x32/0x80 [ 935.029954][T25544] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 935.031760][T25544] RIP: 0023:0xf7f03579 [ 935.032964][T25544] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 935.038412][T25544] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 935.040788][T25544] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 935.043038][T25544] RDX: 0000000000040080 RSI: 0000000000000000 RDI: 0000000000000000 [ 935.045287][T25544] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 935.047564][T25544] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 935.049819][T25544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 935.052109][T25544] [ 935.243200][T25555] netlink: 416 bytes leftover after parsing attributes in process `syz.6.5412'. [ 935.246009][T25555] netlink: 416 bytes leftover after parsing attributes in process `syz.6.5412'. [ 935.302648][T25558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 935.439791][T25570] netlink: 'syz.1.5416': attribute type 4 has an invalid length. [ 935.499050][T25566] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 935.519391][T25573] FAULT_INJECTION: forcing a failure. [ 935.519391][T25573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 935.524302][T25573] CPU: 3 UID: 0 PID: 25573 Comm: syz.2.5417 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 935.527848][T25573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 935.530947][T25573] Call Trace: [ 935.531911][T25573] [ 935.532768][T25573] dump_stack_lvl+0x16c/0x1f0 [ 935.534151][T25573] should_fail_ex+0x497/0x5b0 [ 935.535524][T25573] _copy_to_user+0x32/0xd0 [ 935.537024][T25573] bpf_test_finish.isra.0+0x55f/0x680 [ 935.539060][T25573] ? __pfx___static_call_update+0x10/0x10 [ 935.541212][T25573] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 935.543431][T25573] ? 0xffffffffa0004400 [ 935.544890][T25573] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 935.546611][T25573] bpf_prog_test_run_xdp+0xa13/0x1580 [ 935.548172][T25573] ? lock_acquire+0x2f/0xb0 [ 935.549489][T25573] ? __fget_files+0x40/0x3a0 [ 935.550838][T25573] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 935.552744][T25573] ? __fget_files+0x206/0x3a0 [ 935.554115][T25573] ? fput+0x67/0x440 [ 935.555258][T25573] ? __bpf_prog_get+0xa0/0x290 [ 935.556641][T25573] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 935.558821][T25573] __sys_bpf+0x1921/0x57a0 [ 935.560569][T25573] ? __pfx_lock_release+0x10/0x10 [ 935.562086][T25573] ? __pfx___sys_bpf+0x10/0x10 [ 935.563455][T25573] ? vfs_write+0x306/0x1150 [ 935.564764][T25573] ? __mutex_unlock_slowpath+0x164/0x690 [ 935.566376][T25573] ? fput+0x67/0x440 [ 935.567512][T25573] ? ksys_write+0x1ba/0x250 [ 935.568822][T25573] ? __pfx_ksys_write+0x10/0x10 [ 935.570222][T25573] __ia32_sys_bpf+0x76/0xe0 [ 935.571568][T25573] __do_fast_syscall_32+0x73/0x120 [ 935.573038][T25573] do_fast_syscall_32+0x32/0x80 [ 935.574450][T25573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 935.576295][T25573] RIP: 0023:0xf7f03579 [ 935.577487][T25573] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 935.582998][T25573] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 935.585209][T25573] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000200000c0 [ 935.587460][T25573] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 935.589697][T25573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 935.592014][T25573] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 935.594272][T25573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 935.596534][T25573] [ 935.862349][T25582] FAULT_INJECTION: forcing a failure. [ 935.862349][T25582] name failslab, interval 1, probability 0, space 0, times 0 [ 935.865829][T25582] CPU: 2 UID: 0 PID: 25582 Comm: syz.6.5421 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 935.868933][T25582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 935.871977][T25582] Call Trace: [ 935.873004][T25582] [ 935.873843][T25582] dump_stack_lvl+0x16c/0x1f0 [ 935.875202][T25582] should_fail_ex+0x497/0x5b0 [ 935.876524][T25582] ? fs_reclaim_acquire+0xae/0x150 [ 935.878001][T25582] should_failslab+0xc2/0x120 [ 935.879335][T25582] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 935.880944][T25582] ? __alloc_skb+0x2b3/0x380 [ 935.882243][T25582] __alloc_skb+0x2b3/0x380 [ 935.883521][T25582] ? __pfx___alloc_skb+0x10/0x10 [ 935.884895][T25582] ? genl_rcv_msg+0x4bd/0x800 [ 935.886215][T25582] netlink_ack+0x164/0xb20 [ 935.887449][T25582] netlink_rcv_skb+0x327/0x410 [ 935.888780][T25582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 935.890221][T25582] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 935.891712][T25582] ? down_read+0xc9/0x330 [ 935.892920][T25582] ? __pfx_down_read+0x10/0x10 [ 935.894274][T25582] ? netlink_deliver_tap+0x1ae/0xca0 [ 935.895761][T25582] genl_rcv+0x28/0x40 [ 935.896891][T25582] netlink_unicast+0x53c/0x7f0 [ 935.898295][T25582] ? __pfx_netlink_unicast+0x10/0x10 [ 935.899758][T25582] ? __phys_addr_symbol+0x30/0x80 [ 935.901157][T25582] ? __check_object_size+0x488/0x710 [ 935.902694][T25582] netlink_sendmsg+0x8b8/0xd70 [ 935.904054][T25582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.905544][T25582] ____sys_sendmsg+0x9ae/0xb40 [ 935.906912][T25582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 935.908407][T25582] ? get_compat_msghdr+0x11b/0x170 [ 935.909800][T25582] ? rcu_is_watching+0x12/0xc0 [ 935.911138][T25582] ? lock_release+0x4e2/0x6f0 [ 935.912455][T25582] ? get_pid_task+0xfc/0x250 [ 935.913766][T25582] ___sys_sendmsg+0x135/0x1e0 [ 935.915077][T25582] ? get_pid_task+0x35/0x250 [ 935.916382][T25582] ? __pfx____sys_sendmsg+0x10/0x10 [ 935.917865][T25582] ? lock_release+0x4e2/0x6f0 [ 935.919198][T25582] ? __pfx_lock_release+0x10/0x10 [ 935.920628][T25582] ? trace_lock_acquire+0x14e/0x1f0 [ 935.922121][T25582] ? __fget_files+0x206/0x3a0 [ 935.923463][T25582] __sys_sendmsg+0x16e/0x220 [ 935.924775][T25582] ? __pfx___sys_sendmsg+0x10/0x10 [ 935.926271][T25582] ? rcu_is_watching+0x12/0xc0 [ 935.927636][T25582] __do_fast_syscall_32+0x73/0x120 [ 935.929102][T25582] do_fast_syscall_32+0x32/0x80 [ 935.930513][T25582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 935.932316][T25582] RIP: 0023:0xf7f66579 [ 935.933487][T25582] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 935.938988][T25582] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 935.941354][T25582] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000b40 [ 935.943614][T25582] RDX: 0000000020040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 935.945882][T25582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 935.948145][T25582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 935.950396][T25582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 935.952641][T25582] [ 936.009945][T25588] netlink: 'syz.1.5419': attribute type 10 has an invalid length. [ 936.126796][T25590] FAULT_INJECTION: forcing a failure. [ 936.126796][T25590] name failslab, interval 1, probability 0, space 0, times 0 [ 936.130498][T25590] CPU: 2 UID: 0 PID: 25590 Comm: syz.3.5423 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 936.133542][T25590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 936.136598][T25590] Call Trace: [ 936.137588][T25590] [ 936.138449][T25590] dump_stack_lvl+0x16c/0x1f0 [ 936.139817][T25590] should_fail_ex+0x497/0x5b0 [ 936.141162][T25590] ? fs_reclaim_acquire+0xae/0x150 [ 936.142632][T25590] should_failslab+0xc2/0x120 [ 936.143994][T25590] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 936.145691][T25590] ? __alloc_skb+0x2b3/0x380 [ 936.147066][T25590] ? bpf_lsm_capable+0x9/0x10 [ 936.148401][T25590] __alloc_skb+0x2b3/0x380 [ 936.149689][T25590] ? __pfx___alloc_skb+0x10/0x10 [ 936.151191][T25590] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 936.152672][T25590] netlink_ack+0x164/0xb20 [ 936.153965][T25590] netlink_rcv_skb+0x327/0x410 [ 936.155345][T25590] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 936.156919][T25590] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 936.158443][T25590] ? lock_release+0x4e2/0x6f0 [ 936.159798][T25590] ? netlink_deliver_tap+0x1ae/0xca0 [ 936.161316][T25590] netlink_unicast+0x53c/0x7f0 [ 936.162705][T25590] ? __pfx_netlink_unicast+0x10/0x10 [ 936.164223][T25590] ? __phys_addr_symbol+0x30/0x80 [ 936.166447][T25590] ? __check_object_size+0x488/0x710 [ 936.167980][T25590] netlink_sendmsg+0x8b8/0xd70 [ 936.169353][T25590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.170885][T25590] ____sys_sendmsg+0x9ae/0xb40 [ 936.172234][T25590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 936.173749][T25590] ? get_compat_msghdr+0x11b/0x170 [ 936.175238][T25590] ? rcu_is_watching+0x12/0xc0 [ 936.176623][T25590] ? lock_release+0x4e2/0x6f0 [ 936.178002][T25590] ? get_pid_task+0xfc/0x250 [ 936.179335][T25590] ___sys_sendmsg+0x135/0x1e0 [ 936.180696][T25590] ? get_pid_task+0x35/0x250 [ 936.182037][T25590] ? __pfx____sys_sendmsg+0x10/0x10 [ 936.183533][T25590] ? lock_release+0x4e2/0x6f0 [ 936.184892][T25590] ? __pfx_lock_release+0x10/0x10 [ 936.186345][T25590] ? trace_lock_acquire+0x14e/0x1f0 [ 936.187854][T25590] ? __fget_files+0x206/0x3a0 [ 936.189167][T25590] __sys_sendmsg+0x16e/0x220 [ 936.190510][T25590] ? __pfx___sys_sendmsg+0x10/0x10 [ 936.191987][T25590] ? rcu_is_watching+0x12/0xc0 [ 936.193367][T25590] __do_fast_syscall_32+0x73/0x120 [ 936.194829][T25590] do_fast_syscall_32+0x32/0x80 [ 936.196230][T25590] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 936.198064][T25590] RIP: 0023:0xf714e579 [ 936.199234][T25590] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 936.204703][T25590] RSP: 002b:00000000f514055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 936.207094][T25590] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 936.209357][T25590] RDX: 0000000024044098 RSI: 0000000000000000 RDI: 0000000000000000 [ 936.211626][T25590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 936.213891][T25590] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 936.216148][T25590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 936.218464][T25590] [ 936.302493][T25602] netlink: 'syz.3.5427': attribute type 4 has an invalid length. [ 936.558450][ T35] usb 11-1: new high-speed USB device number 85 using dummy_hcd [ 936.649533][T25577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.718960][ T35] usb 11-1: Using ep0 maxpacket: 16 [ 936.721725][ T35] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 936.729701][ T35] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 936.732342][ T35] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.734657][ T35] usb 11-1: Product: syz [ 936.735991][ T35] usb 11-1: Manufacturer: syz [ 936.737561][ T35] usb 11-1: SerialNumber: syz [ 936.740764][ T35] usb 11-1: config 0 descriptor?? [ 936.743060][ T35] hub 11-1:0.0: bad descriptor, ignoring hub [ 936.744842][ T35] hub 11-1:0.0: probe with driver hub failed with error -5 [ 936.747601][ T35] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input219 [ 937.188327][T12087] usb 11-1: USB disconnect, device number 85 [ 937.364461][T25627] netlink: 'syz.1.5434': attribute type 3 has an invalid length. [ 937.366882][T25627] netlink: 'syz.1.5434': attribute type 12 has an invalid length. [ 937.442209][T25636] can0: slcan on ttyS3. [ 937.498470][T25636] can0 (unregistered): slcan off ttyS3. [ 937.502599][T25637] can0: slcan on ttyS3. [ 937.606451][T25643] team_slave_0: entered promiscuous mode [ 937.608156][T25643] team_slave_1: entered promiscuous mode [ 937.610846][T25643] macsec1: entered promiscuous mode [ 937.612429][T25643] team0: entered promiscuous mode [ 937.614102][T25643] macsec1: entered allmulticast mode [ 937.615709][T25643] team0: entered allmulticast mode [ 937.617239][T25643] team_slave_0: entered allmulticast mode [ 937.620162][T25637] can0 (unregistered): slcan off ttyS3. [ 937.620702][T25643] team_slave_1: entered allmulticast mode [ 937.624019][T25643] team0: Device macsec1 is already an upper device of the team interface [ 937.627167][T25643] team0: left allmulticast mode [ 937.628685][T25643] team_slave_0: left allmulticast mode [ 937.630275][T25643] team_slave_1: left allmulticast mode [ 937.631854][T25643] team0: left promiscuous mode [ 937.633428][T25643] team_slave_0: left promiscuous mode [ 937.635019][T25643] team_slave_1: left promiscuous mode [ 937.720305][T25615] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 937.877098][T25660] netlink: 'syz.3.5441': attribute type 10 has an invalid length. [ 937.878507][T25659] : renamed from bond0 (while UP) [ 938.595097][T25655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.610998][T25680] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5446'. [ 938.613961][T25680] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5446'. [ 938.837448][T25688] xt_CT: You must specify a L4 protocol and not use inversions on it [ 939.083327][ T44] ================================================================== [ 939.086245][ T44] BUG: KASAN: slab-use-after-free in move_to_new_folio+0x12e/0x700 [ 939.088980][ T44] Read of size 8 at addr ffff88802302d9b0 by task kcompactd1/44 [ 939.093284][ T44] [ 939.094465][ T44] CPU: 1 UID: 0 PID: 44 Comm: kcompactd1 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 939.097761][ T44] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 939.101155][ T44] Call Trace: [ 939.102247][ T44] [ 939.103213][ T44] dump_stack_lvl+0x116/0x1f0 [ 939.104831][ T44] print_report+0xc3/0x620 [ 939.106376][ T44] ? __virt_addr_valid+0x5e/0x590 [ 939.107911][ T44] ? __phys_addr+0xc6/0x150 [ 939.109313][ T44] kasan_report+0xd9/0x110 [ 939.110806][ T44] ? move_to_new_folio+0x12e/0x700 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 939.112356][ T44] ? move_to_new_folio+0x12e/0x700 [ 939.113904][ T44] kasan_check_range+0xef/0x1a0 [ 939.115327][ T44] move_to_new_folio+0x12e/0x700 [ 939.116748][ T44] migrate_pages_batch+0x200c/0x3150 [ 939.118331][ T44] ? __pfx_compaction_free+0x10/0x10 [ 939.119985][ T44] ? __pfx_migrate_pages_batch+0x10/0x10 [ 939.121600][ T44] ? __schedule+0x3d67/0x5ad0 [ 939.122961][ T44] migrate_pages_sync+0x109/0x8f0 [ 939.124433][ T44] ? __pfx_compaction_alloc+0x10/0x10 [ 939.125977][ T44] ? __pfx_compaction_free+0x10/0x10 [ 939.127496][ T44] ? rcu_is_watching+0x12/0xc0 [ 939.127839][ T5863] syz-executor (5863) used greatest stack depth: 21112 bytes left [ 939.128879][ T44] ? __pfx_migrate_pages_sync+0x10/0x10 [ 939.128891][ T44] ? rcu_is_watching+0x12/0xc0 [ 939.128902][ T44] ? lock_release+0x4e2/0x6f0 [ 939.128911][ T44] ? __pfx_lock_release+0x10/0x10 [ 939.128921][ T44] migrate_pages+0x1a46/0x21f0 [ 939.128931][ T44] ? __pfx_compaction_alloc+0x10/0x10 [ 939.139860][ T44] ? __pfx_compaction_free+0x10/0x10 [ 939.141655][ T44] ? __pfx_migrate_pages+0x10/0x10 [ 939.143382][ T44] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 939.145188][ T44] ? __pfx___might_resched+0x10/0x10 [ 939.146704][ T44] compact_zone+0x1f68/0x4280 [ 939.148071][ T44] ? rcu_is_watching+0x12/0xc0 [ 939.149455][ T44] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 939.150986][ T44] ? trace_irq_enable.constprop.0+0xea/0x140 [ 939.152690][ T44] ? __pfx_compact_zone+0x10/0x10 [ 939.154114][ T44] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 939.155773][ T44] ? __try_to_del_timer_sync+0x116/0x170 [ 939.157379][ T44] ? rcu_is_watching+0x12/0xc0 [ 939.158761][ T44] ? trace_irq_enable.constprop.0+0xea/0x140 [ 939.160460][ T44] compact_node+0x1a2/0x2d0 [ 939.161769][ T44] ? __pfx_compact_node+0x10/0x10 [ 939.163220][ T44] ? __pfx_extfrag_for_order+0x10/0x10 [ 939.164827][ T44] ? rcu_is_watching+0x12/0xc0 [ 939.166226][ T44] kcompactd+0x779/0xdf0 [ 939.167479][ T44] ? __pfx_kcompactd+0x10/0x10 [ 939.168880][ T44] ? __pfx_autoremove_wake_function+0x10/0x10 [ 939.170628][ T44] ? lockdep_hardirqs_on+0x7c/0x110 [ 939.172136][ T44] ? __kthread_parkme+0x148/0x220 [ 939.173578][ T44] ? __pfx_kcompactd+0x10/0x10 [ 939.174984][ T44] kthread+0x2c1/0x3a0 [ 939.176151][ T44] ? _raw_spin_unlock_irq+0x23/0x50 [ 939.177650][ T44] ? __pfx_kthread+0x10/0x10 [ 939.178972][ T44] ret_from_fork+0x45/0x80 [ 939.180230][ T44] ? __pfx_kthread+0x10/0x10 [ 939.181558][ T44] ret_from_fork_asm+0x1a/0x30 [ 939.182940][ T44] [ 939.183820][ T44] [ 939.184535][ T44] Allocated by task 37: [ 939.185696][ T44] kasan_save_stack+0x33/0x60 [ 939.187059][ T44] kasan_save_track+0x14/0x30 [ 939.188389][ T44] __kasan_slab_alloc+0x89/0x90 [ 939.189831][ T44] kmem_cache_alloc_lru_noprof+0x1c8/0x3b0 [ 939.191469][ T44] shmem_alloc_inode+0x25/0x50 [ 939.192820][ T44] alloc_inode+0x5d/0x230 [ 939.194047][ T44] new_inode+0x22/0x210 [ 939.195231][ T44] shmem_get_inode+0x194/0xf00 [ 939.196579][ T44] shmem_mknod+0x1a8/0x450 [ 939.197836][ T44] vfs_mknod+0x5d7/0x8e0 [ 939.199032][ T44] devtmpfs_work_loop+0x1a8/0x7d0 [ 939.200450][ T44] devtmpfsd+0x4c/0x50 [ 939.201606][ T44] kthread+0x2c1/0x3a0 [ 939.202768][ T44] ret_from_fork+0x45/0x80 [ 939.204032][ T44] ret_from_fork_asm+0x1a/0x30 [ 939.205402][ T44] [ 939.206111][ T44] Freed by task 16: [ 939.207201][ T44] kasan_save_stack+0x33/0x60 [ 939.208558][ T44] kasan_save_track+0x14/0x30 [ 939.209897][ T44] kasan_save_free_info+0x3b/0x60 [ 939.211322][ T44] __kasan_slab_free+0x51/0x70 [ 939.212700][ T44] kmem_cache_free+0x152/0x4c0 [ 939.214056][ T44] i_callback+0x43/0x70 [ 939.215255][ T44] rcu_core+0x79d/0x14d0 [ 939.216470][ T44] handle_softirqs+0x213/0x8f0 [ 939.217873][ T44] run_ksoftirqd+0x3a/0x60 [ 939.219156][ T44] smpboot_thread_fn+0x661/0xa30 [ 939.220554][ T44] kthread+0x2c1/0x3a0 [ 939.221708][ T44] ret_from_fork+0x45/0x80 [ 939.222978][ T44] ret_from_fork_asm+0x1a/0x30 [ 939.224389][ T44] [ 939.225092][ T44] Last potentially related work creation: [ 939.226750][ T44] kasan_save_stack+0x33/0x60 [ 939.228165][ T44] __kasan_record_aux_stack+0xba/0xd0 [ 939.229680][ T44] __call_rcu_common.constprop.0+0x99/0x7a0 [ 939.231350][ T44] destroy_inode+0x12c/0x1b0 [ 939.232708][ T44] evict+0x5ed/0x960 [ 939.233836][ T44] iput+0x52a/0x890 [ 939.234936][ T44] do_unlinkat+0x5c3/0x760 [ 939.236213][ T44] __ia32_sys_unlink+0xc4/0x110 [ 939.237619][ T44] __do_fast_syscall_32+0x73/0x120 [ 939.239087][ T44] do_fast_syscall_32+0x32/0x80 [ 939.240491][ T44] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 939.242329][ T44] [ 939.243012][ T44] The buggy address belongs to the object at ffff88802302d4e8 [ 939.243012][ T44] which belongs to the cache shmem_inode_cache of size 1544 [ 939.247128][ T44] The buggy address is located 1224 bytes inside of [ 939.247128][ T44] freed 1544-byte region [ffff88802302d4e8, ffff88802302daf0) [ 939.250982][ T44] [ 939.251667][ T44] The buggy address belongs to the physical page: [ 939.253422][ T44] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23028 [ 939.255868][ T44] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 939.258229][ T44] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 939.260361][ T44] page_type: f5(slab) [ 939.261504][ T44] raw: 00fff00000000040 ffff888040489cc0 dead000000000122 0000000000000000 [ 939.263896][ T44] raw: 0000000000000000 0000000000130013 00000001f5000000 0000000000000000 [ 939.266313][ T44] head: 00fff00000000040 ffff888040489cc0 dead000000000122 0000000000000000 [ 939.268722][ T44] head: 0000000000000000 0000000000130013 00000001f5000000 0000000000000000 [ 939.271185][ T44] head: 00fff00000000003 ffffea00008c0a01 ffffffffffffffff 0000000000000000 [ 939.273625][ T44] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 939.276071][ T44] page dumped because: kasan: bad access detected [ 939.277916][ T44] page_owner tracks the page as allocated [ 939.279492][ T44] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 37, tgid 37 (kdevtmpfs), ts 5927667440, free_ts 0 [ 939.284927][ T44] post_alloc_hook+0x2d1/0x350 [ 939.286292][ T44] get_page_from_freelist+0xfce/0x2f80 [ 939.287841][ T44] __alloc_pages_noprof+0x223/0x25b0 [ 939.289351][ T44] alloc_pages_mpol_noprof+0x2c9/0x610 [ 939.290897][ T44] new_slab+0x2c9/0x410 [ 939.292141][ T44] ___slab_alloc+0xce2/0x1650 [ 939.293477][ T44] __slab_alloc.constprop.0+0x56/0xb0 [ 939.295021][ T44] kmem_cache_alloc_lru_noprof+0xf0/0x3b0 [ 939.296646][ T44] shmem_alloc_inode+0x25/0x50 [ 939.298044][ T44] alloc_inode+0x5d/0x230 [ 939.299280][ T44] new_inode+0x22/0x210 [ 939.300470][ T44] shmem_get_inode+0x194/0xf00 [ 939.301841][ T44] shmem_mknod+0x1a8/0x450 [ 939.303114][ T44] vfs_mknod+0x5d7/0x8e0 [ 939.304338][ T44] devtmpfs_work_loop+0x1a8/0x7d0 [ 939.305783][ T44] devtmpfsd+0x4c/0x50 [ 939.306931][ T44] page_owner free stack trace missing [ 939.308435][ T44] [ 939.309131][ T44] Memory state around the buggy address: [ 939.310701][ T44] ffff88802302d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 939.312943][ T44] ffff88802302d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 939.315176][ T44] >ffff88802302d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 939.317419][ T44] ^ [ 939.319003][ T44] ffff88802302da00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 939.321251][ T44] ffff88802302da80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 939.323489][ T44] ================================================================== [ 939.328044][ T44] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 939.330142][ T44] CPU: 2 UID: 0 PID: 44 Comm: kcompactd1 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 939.333113][ T44] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 939.336161][ T44] Call Trace: [ 939.337145][ T44] [ 939.338004][ T44] dump_stack_lvl+0x3d/0x1f0 [ 939.339337][ T44] panic+0x71d/0x800 [ 939.340474][ T44] ? __pfx_panic+0x10/0x10 [ 939.341748][ T44] ? rcu_is_watching+0x12/0xc0 [ 939.343128][ T44] ? preempt_schedule_thunk+0x1a/0x30 [ 939.344664][ T44] ? preempt_schedule_common+0x44/0xc0 [ 939.346205][ T44] ? check_panic_on_warn+0x1f/0xb0 [ 939.347646][ T44] check_panic_on_warn+0xab/0xb0 [ 939.349048][ T44] end_report+0x117/0x180 [ 939.350273][ T44] kasan_report+0xe9/0x110 [ 939.351537][ T44] ? move_to_new_folio+0x12e/0x700 [ 939.352993][ T44] ? move_to_new_folio+0x12e/0x700 [ 939.354457][ T44] kasan_check_range+0xef/0x1a0 [ 939.355844][ T44] move_to_new_folio+0x12e/0x700 [ 939.357283][ T44] migrate_pages_batch+0x200c/0x3150 [ 939.358790][ T44] ? __pfx_compaction_free+0x10/0x10 [ 939.360297][ T44] ? __pfx_migrate_pages_batch+0x10/0x10 [ 939.361871][ T44] ? __schedule+0x3d67/0x5ad0 [ 939.363216][ T44] migrate_pages_sync+0x109/0x8f0 [ 939.364661][ T44] ? __pfx_compaction_alloc+0x10/0x10 [ 939.366212][ T44] ? __pfx_compaction_free+0x10/0x10 [ 939.367759][ T44] ? rcu_is_watching+0x12/0xc0 [ 939.369128][ T44] ? __pfx_migrate_pages_sync+0x10/0x10 [ 939.370698][ T44] ? rcu_is_watching+0x12/0xc0 [ 939.372047][ T44] ? lock_release+0x4e2/0x6f0 [ 939.373359][ T44] ? __pfx_lock_release+0x10/0x10 [ 939.374772][ T44] migrate_pages+0x1a46/0x21f0 [ 939.376117][ T44] ? __pfx_compaction_alloc+0x10/0x10 [ 939.377622][ T44] ? __pfx_compaction_free+0x10/0x10 [ 939.379087][ T44] ? __pfx_migrate_pages+0x10/0x10 [ 939.380519][ T44] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 939.382252][ T44] ? __pfx___might_resched+0x10/0x10 [ 939.383716][ T44] compact_zone+0x1f68/0x4280 [ 939.385052][ T44] ? rcu_is_watching+0x12/0xc0 [ 939.386409][ T44] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 939.387902][ T44] ? trace_irq_enable.constprop.0+0xea/0x140 [ 939.389555][ T44] ? __pfx_compact_zone+0x10/0x10 [ 939.390965][ T44] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 939.392462][ T44] ? __try_to_del_timer_sync+0x116/0x170 [ 939.394021][ T44] ? rcu_is_watching+0x12/0xc0 [ 939.395355][ T44] ? trace_irq_enable.constprop.0+0xea/0x140 [ 939.397008][ T44] compact_node+0x1a2/0x2d0 [ 939.398266][ T44] ? __pfx_compact_node+0x10/0x10 [ 939.399763][ T44] ? __pfx_extfrag_for_order+0x10/0x10 [ 939.401301][ T44] ? rcu_is_watching+0x12/0xc0 [ 939.402686][ T44] kcompactd+0x779/0xdf0 [ 939.403876][ T44] ? __pfx_kcompactd+0x10/0x10 [ 939.405223][ T44] ? __pfx_autoremove_wake_function+0x10/0x10 [ 939.406928][ T44] ? lockdep_hardirqs_on+0x7c/0x110 [ 939.408379][ T44] ? __kthread_parkme+0x148/0x220 [ 939.409797][ T44] ? __pfx_kcompactd+0x10/0x10 [ 939.411123][ T44] kthread+0x2c1/0x3a0 [ 939.412300][ T44] ? _raw_spin_unlock_irq+0x23/0x50 [ 939.413799][ T44] ? __pfx_kthread+0x10/0x10 [ 939.415146][ T44] ret_from_fork+0x45/0x80 [ 939.416437][ T44] ? __pfx_kthread+0x10/0x10 [ 939.417798][ T44] ret_from_fork_asm+0x1a/0x30 [ 939.419194][ T44] [ 939.420594][ T44] Kernel Offset: disabled [ 939.421848][ T44] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:17:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=ffff888024a28270 RCX=0000000000000001 RDX=ffff888024d60000 RSI=ffffc90000405134 RDI=0000000000000005 RBP=ffff8880439ca028 RSP=ffffc90004ff7180 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000001 R11=00000000000a2012 R12=ffffc90000405100 R13=ffff888024a282cc R14=ffff888024a28278 R15=0000000000000001 RIP=ffffffff86123b1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74539e0 CR3=000000006c374000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851449b5 RDI=ffffffff9a668200 RBP=ffffffff9a6681c0 RSP=ffffc900006b6f08 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000006b R14=ffffffff85144950 R15=0000000000000000 RIP=ffffffff851449df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50844b4 CR3=000000005cf4e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000f15594 RBX=0000000000000002 RCX=ffffffff8b1a6899 RDX=ffffed10056c6fee RSI=ffffffff8bb16fc0 RDI=ffffffff81702ec9 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901cead0 R15=0000000000000000 RIP=ffffffff8b1a7c7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f707ac1e CR3=000000004675e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000808e0018 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73b3ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000037f68 RCX=ffffffff81764849 RDX=1ffffffff1b05f9f RSI=ffffffff8bb16fc0 RDI=ffffffff8d82fcf8 RBP=0000000000000003 RSP=ffffc900034578f0 R8 =0000000000000000 R9 =fffffbfff2039d5a R10=ffffffff901cead7 R11=00000000000a2012 R12=ffff88804df5baa0 R13=1ffff9200068af3c R14=000000000000383c R15=fff0000000000fff RIP=ffffffff817f1bd1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbd95e93d00 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ddb686b000 CR3=0000000049cc2000 CR4=00352ef0 DR0=0000000000000003 DR1=0000000000000006 DR2=0000000000000401 DR3=0000000000000200 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 acd0a23096e32184 3aab787cf078b2fd ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 177b315d2e434c96 b8cfcd8d62e2c15b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d538d9abb8cf355 dc9b221fc127ca67 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 589b7a9943a2dee2 e54a36c292423550 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000dec0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002399d15534600 000239a4000239a4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee819a00405d1600 dbcf2200000239a4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 93a86e0000000005 000239a380010000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b2a87c0080010000 8001000036df0e00 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 67b18e3261de898d 5ce0c2f490cb5098 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a05b0ef6a2b1430 ab17e37b14ac985e ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=d16e97e0d16e97e0 d16e97e0d16e97e0 d16e97e0d16e97e0 d16e97e0d16e97e0 d16e97e0d16e97e0 d16e97e0d16e97e0 d16e97e0d16e97e0 d16e97e0d16e97e0 ZMM22=9901b9ad9901b9ad 9901b9ad9901b9ad 9901b9ad9901b9ad 9901b9ad9901b9ad 9901b9ad9901b9ad 9901b9ad9901b9ad 9901b9ad9901b9ad 9901b9ad9901b9ad ZMM23=028dfddb028dfddb 028dfddb028dfddb 028dfddb028dfddb 028dfddb028dfddb 028dfddb028dfddb 028dfddb028dfddb 028dfddb028dfddb 028dfddb028dfddb ZMM24=dcdb4f91dcdb4f91 dcdb4f91dcdb4f91 dcdb4f91dcdb4f91 dcdb4f91dcdb4f91 dcdb4f91dcdb4f91 dcdb4f91dcdb4f91 dcdb4f91dcdb4f91 dcdb4f91dcdb4f91 ZMM25=14a48b8614a48b86 14a48b8614a48b86 14a48b8614a48b86 14a48b8614a48b86 14a48b8614a48b86 14a48b8614a48b86 14a48b8614a48b86 14a48b8614a48b86 ZMM26=62b45e5c62b45e5c 62b45e5c62b45e5c 62b45e5c62b45e5c 62b45e5c62b45e5c 62b45e5c62b45e5c 62b45e5c62b45e5c 62b45e5c62b45e5c 62b45e5c62b45e5c ZMM27=64fe106764fe1067 64fe106764fe1067 64fe106764fe1067 64fe106764fe1067 64fe106764fe1067 64fe106764fe1067 64fe106764fe1067 64fe106764fe1067 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2522000025220000 2522000025220000 2522000025220000 2522000025220000 2522000025220000 2522000025220000 2522000025220000 2522000025220000