last executing test programs: 4m42.714469526s ago: executing program 3 (id=2708): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x4, 0x0) syz_clone3(&(0x7f0000001300)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x1a}, 0x0, 0x0, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) socket$caif_stream(0x25, 0x1, 0x5) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x23, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0489010504"], 0x7) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) mount$9p_rdma(&(0x7f0000000000), 0x0, 0x0, 0x10c820, 0x0) read(r1, 0x0, 0x20) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000640)='io_uring_complete\x00', r7}, 0x18) 4m39.961789007s ago: executing program 3 (id=2718): syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) capget(&(0x7f0000000400)={0x19980330, r1}, &(0x7f0000000440)={0xa57f, 0x1, 0x7fff, 0xffff29f4, 0x4, 0x2}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0xa94a7000) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8401) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x74bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0xe}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 4m35.831876054s ago: executing program 3 (id=2729): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi1\x00', 0x103040, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=u']) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 4m34.35022469s ago: executing program 3 (id=2735): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi1\x00', 0x103040, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=u']) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 4m31.716099494s ago: executing program 3 (id=2739): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi1\x00', 0x103040, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=u']) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 4m30.19150852s ago: executing program 3 (id=2743): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8, 0x9) fcntl$setpipe(r1, 0x407, 0xb) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x90) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$char_usb(r2, &(0x7f0000000700)="85206b1fee4412c6", 0x8) splice(0xffffffffffffffff, &(0x7f0000000100)=0x4, 0xffffffffffffffff, &(0x7f0000000340)=0x401, 0x101, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/143, 0x8f}, {0x0}], 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r8, 0x8800000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 4m14.806133431s ago: executing program 32 (id=2743): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8, 0x9) fcntl$setpipe(r1, 0x407, 0xb) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x90) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$char_usb(r2, &(0x7f0000000700)="85206b1fee4412c6", 0x8) splice(0xffffffffffffffff, &(0x7f0000000100)=0x4, 0xffffffffffffffff, &(0x7f0000000340)=0x401, 0x101, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/143, 0x8f}, {0x0}], 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r8, 0x8800000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 2m41.50209277s ago: executing program 1 (id=3074): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x1, 0x9, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x66, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @empty}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xd1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 2m41.051448983s ago: executing program 1 (id=3076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x7fffffff80000000, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 2m40.597337409s ago: executing program 1 (id=3078): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0xc0045003, &(0x7f0000001100)) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0xcf, &(0x7f00000002c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000a00)={0xa, 0x4e23, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='$', 0x1}], 0x1}}], 0x2, 0x40408d1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x12) shutdown(r0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000025000103020000200000000001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000018}, 0x4004000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000180)=0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r4, 0xffff, 0x8}, &(0x7f0000000200)=0xc) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x73, &(0x7f00000000c0)=@can, 0x0, 0x0, 0x2}) io_uring_enter(r7, 0x47f6, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x18c8, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x189c, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x1894, 0x4, [@m_police={0x1240, 0x3, 0x0, 0x0, {{0xb}, {0x11a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x8, 0x5, 0x200, {0xc3, 0x2, 0xe331, 0x81, 0x2b, 0x2}, {0x1, 0x0, 0x401, 0xe9b, 0xd}, 0x2, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc, 0x1000, 0x8, 0x8, 0x9, 0x1, 0x187, 0xffffffff, 0x31, 0xab4, 0xd3, 0x7, 0xe33, 0x7, 0x7, 0xfff, 0xc63, 0x40, 0x2, 0xd, 0x2, 0x7, 0x6, 0x5, 0x9, 0xe, 0x1, 0x80000001, 0x5, 0xb, 0x7, 0x9, 0x4, 0x80000000, 0x1, 0x7, 0x1, 0x80000001, 0xffffffff, 0x8, 0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x4, 0x526a, 0x8001, 0x5, 0x6, 0x61f, 0x1, 0xfffffffa, 0xfffffe00, 0x2, 0x66, 0xfff, 0x2f, 0xffff, 0x1000, 0xffff, 0x9, 0x9, 0x9, 0x2, 0x9, 0x4, 0xdcb, 0xd, 0x8, 0xffffffff, 0x8, 0x6, 0x5, 0x2, 0x5, 0x40, 0x3, 0x8, 0x80000001, 0x6, 0x2, 0x36e, 0x5, 0x80000001, 0x8, 0x5, 0xb3, 0xfffffff7, 0x6, 0x34f, 0x0, 0x1, 0x9aa, 0x10, 0x4, 0x3, 0x8, 0x9, 0x81, 0xf, 0x80, 0x6, 0x8, 0x0, 0x5, 0x5, 0x8001, 0x4, 0x0, 0xe, 0x9, 0x5, 0xedb8, 0x10000, 0xf4, 0x1000, 0x4, 0x4, 0x4, 0x8, 0x0, 0x16d, 0xfffffffc, 0x3, 0x9000, 0x6, 0x10001, 0x5, 0x6, 0xa5e, 0xcf, 0x5, 0x6, 0x6eaf, 0x0, 0x0, 0x5, 0xd36, 0xc19, 0x4, 0x3, 0x2, 0x400, 0xb8, 0x1ff, 0x9, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x0, 0x1, 0xc263, 0x7, 0xc, 0x3, 0x8, 0x9, 0x6, 0x81, 0x5, 0x3, 0x2, 0x9, 0xe65c, 0x3, 0x8, 0x3, 0xf, 0x80000001, 0xfff, 0x53a, 0x3, 0x2, 0xc00000, 0x7c85, 0x1, 0x3, 0xfff, 0x8, 0x9, 0x2, 0xbaa4, 0x3ff, 0x7f, 0x7, 0xd91, 0x101, 0x1003a4d9, 0x32e4, 0x6, 0x5, 0x7, 0x3, 0x8000, 0x10, 0x0, 0x8, 0xfffeffff, 0x8, 0x4, 0x0, 0x8, 0xee3, 0x2, 0x10000, 0x5, 0x7, 0xfffffffc, 0x1, 0x1, 0x6, 0x81, 0xe0, 0x3, 0x3, 0x5, 0x6, 0x3, 0xae, 0x9, 0x6, 0x3, 0x5, 0x1, 0x4, 0x6, 0x0, 0x5, 0x3, 0x3ff, 0xba4f, 0x0, 0x4, 0x3, 0x4, 0xbe, 0x7, 0x0, 0x101, 0x4, 0x2c8f, 0x1ff, 0x489f9a93, 0x7, 0x2, 0x9, 0xffffff90, 0x80, 0xd, 0x5, 0x5]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x9, 0xa4ea, 0x200, 0x2, 0x9, 0x7, 0x1, 0x7, 0x10000, 0xfff, 0x5, 0x8000, 0x4, 0x8, 0x1, 0x4e14194b, 0x9, 0xfffffffa, 0x3, 0x4, 0xfffffffc, 0x6, 0x4, 0x5, 0x8, 0x4, 0x95b, 0x2, 0x0, 0x3, 0x9, 0x8, 0x5, 0x194f, 0xbf6, 0xe6c5, 0x5, 0xf, 0xffffff81, 0x5, 0x2, 0xd, 0x7ff, 0x7, 0xfff, 0x2, 0xfffffffa, 0x81, 0x54c, 0x8, 0x91, 0x8, 0x7, 0x1, 0x101, 0x7, 0xa9, 0x5, 0x7, 0x4, 0x3, 0x10001, 0x16c00000, 0x1, 0x3, 0x8, 0xc, 0xb, 0x81, 0x4, 0x3, 0x0, 0x10001, 0x7, 0x5, 0x80000000, 0x101, 0x5, 0xb, 0x380, 0x6, 0x1, 0xea6, 0x400, 0x4, 0x1, 0xe, 0x7, 0xfff, 0x9, 0x5, 0x2, 0x8, 0x89df, 0x9, 0x7, 0x56, 0x6, 0x65b, 0x8, 0x7ff, 0x9, 0x100, 0x1ff, 0x1ff, 0x7, 0x5, 0x8001, 0x0, 0x7, 0x0, 0x1e, 0x800, 0x2, 0x10, 0x2, 0x8f, 0x8, 0x6, 0x1, 0x9, 0x34, 0x6, 0x3, 0x400, 0xf22, 0xa, 0x7ff, 0x5, 0xfffffff7, 0x22, 0x2, 0x10, 0x8, 0x9, 0x6, 0x4, 0x9, 0xf, 0xfffff800, 0x4, 0x10, 0x9, 0x0, 0x1ff, 0x9, 0x7, 0x8, 0x7, 0x92, 0x200, 0x4, 0xc, 0x6, 0x2, 0x4, 0x2a9, 0x7, 0x8, 0x3, 0x101, 0x10000, 0x3, 0xe, 0x3, 0x6, 0x6, 0x1, 0x0, 0x7, 0x0, 0x3, 0x32a2, 0x4, 0xfb8, 0x1be0, 0xd, 0x916, 0x24, 0xfffffffa, 0x1, 0x200, 0x101, 0x7, 0x6, 0xfffffffb, 0x1, 0x6, 0x6, 0x0, 0x10000, 0x0, 0x7ff, 0x0, 0x3, 0x6, 0x8, 0x1, 0x9, 0x72f, 0x7, 0x1, 0xb, 0x1, 0xcab, 0x800, 0x10, 0x10000, 0x6, 0x8, 0xda0, 0x2, 0x4, 0x7, 0x6, 0x1, 0x8, 0x2, 0x81, 0x81, 0x4, 0x2f9, 0xf46, 0x800, 0x80000000, 0x80f0, 0x4, 0x8, 0x7, 0x10001, 0x371, 0x5, 0xfd, 0xa, 0xe217, 0x6, 0x7fffffff, 0x9, 0x6, 0x3, 0x80, 0x4, 0x7, 0x6, 0xa, 0x7, 0x2, 0x6, 0x3ae8, 0x1, 0xea, 0x3, 0x0, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x7, 0x7, 0x38d7, {0x71, 0x2, 0x2, 0x9, 0xc3a0, 0xd32f}, {0xb, 0x1, 0x4, 0x46, 0x1000, 0xfffffffe}, 0xb, 0xa0c5, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x9, 0xff, 0x0, {0x7, 0x1, 0x8fa, 0xbd, 0x9, 0x3}, {0x8, 0x0, 0x9533, 0x3, 0x64f5, 0x3}, 0x7, 0x5, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x6, 0x6, 0x8, {0x5, 0x2, 0x8, 0x7fff, 0x7, 0x273}, {0x8, 0x0, 0x7, 0x13, 0x7, 0x8}, 0x5fa, 0x5, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5db1, 0x5, 0xe7a9, 0x0, 0x1ff, 0xe, 0x1, 0x9, 0x700000, 0x2, 0xfc1d, 0x400, 0x9, 0x6, 0x1, 0x979, 0x3, 0x7, 0x502, 0x1, 0x9, 0x9, 0x0, 0x8000, 0x3, 0x50d, 0x3, 0x7, 0x1000, 0x3, 0x42, 0x6, 0x7fff, 0xd7, 0x2, 0x0, 0xe137, 0x9, 0x0, 0xffffc5de, 0xff, 0x5, 0x7, 0x9, 0xf, 0x1000, 0x7, 0xfd04, 0x7, 0x7d5, 0x1, 0x4, 0x2, 0x5, 0x9c0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x4, 0x4, 0x0, 0xd84a, 0x87, 0xfffffff9, 0x1, 0x4, 0x6, 0x6, 0x9, 0xc, 0xffff13b1, 0x5, 0x10000, 0x4, 0x8, 0x3f, 0x2, 0xfffffc00, 0xfffffbff, 0xf56a, 0x1ff, 0x0, 0x0, 0x5, 0x1, 0x6, 0x8, 0x1, 0x9, 0x5, 0xfffff0fb, 0xe, 0x7, 0x2, 0x8, 0xb16, 0x2, 0x3, 0xc54, 0x4, 0x6, 0x2, 0x9804, 0xfffffffd, 0x9, 0x7fff, 0x5, 0x5, 0xa, 0x5, 0xfffffffd, 0x8000, 0x24000, 0x3, 0x0, 0x8001, 0x7f, 0x5, 0x4, 0x3, 0x9, 0x3, 0xd7, 0x3, 0x0, 0x3, 0x0, 0x8001, 0x2, 0x4, 0x5, 0x1c, 0xffffff00, 0x7, 0x3, 0x2, 0x5, 0x5, 0xfffff762, 0xffffc01f, 0x3, 0x401, 0x6, 0x10001, 0x200, 0x2, 0x8, 0xfffffff8, 0x4, 0xff, 0x5de, 0x5, 0x0, 0x4, 0xefde, 0xc5, 0x9, 0x1ff, 0xb6, 0x3, 0xd8d, 0xaa, 0x7eb530e4, 0x0, 0x3f05d376, 0x8, 0x4, 0x86fe, 0x6, 0xa, 0x2, 0x3, 0x5, 0x7, 0x1, 0xbad7, 0xa9, 0xc9e, 0x6, 0xfd, 0xc, 0x8001, 0x10000, 0x7, 0xfffffffb, 0x4, 0x7, 0x8000, 0xfffffffb, 0x1d19, 0x8, 0xffff, 0xfffff622, 0x8, 0x9042, 0x5, 0x4, 0xd, 0x647c, 0x4, 0x2, 0x17, 0x8, 0x9, 0x101, 0x4, 0x5ba7, 0x0, 0x2, 0x1, 0xffffffff, 0x200, 0x2, 0x8, 0x4, 0x2, 0x2, 0x148b, 0x2, 0x0, 0x2f, 0x5, 0x401, 0xed, 0x9, 0x3, 0x0, 0xc, 0x1, 0x7, 0x800, 0xfffffff9, 0x5, 0x7f, 0x5, 0xffffff38, 0x2, 0x1ff, 0x800, 0x1ff, 0x15, 0x4, 0x5, 0x77, 0x9a3f, 0x7406a8a6, 0x1a44825d, 0xd719, 0x101, 0x10000, 0x5, 0x1, 0x3, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x3, 0x9, 0xb5, 0x45, {0x6, 0x0, 0x9, 0x9, 0x8, 0x6}, {0x6, 0x0, 0xfff8, 0x400, 0x4, 0xc}, 0x7, 0x800, 0x4c}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x12000, 0x6, 0x5b68, 0x4, 0x7f, 0x4, 0x5, 0xd0e, 0x15, 0x4c, 0x0, 0x7ff, 0xffffffff, 0x7fffffff, 0x81, 0x4, 0x1, 0xf, 0x8000, 0x727, 0x80000000, 0x4, 0x5fb, 0x0, 0x6, 0x8, 0x3, 0x2000, 0x101, 0x400, 0x1, 0x7fffffff, 0x1, 0x1052, 0x7ff, 0x3, 0xbfe, 0x4, 0x3, 0x5, 0x159, 0x1, 0x7, 0x3, 0x7, 0x3, 0x7, 0x1, 0x4, 0x4, 0xffff0000, 0x8001, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0xd, 0x6, 0x8001, 0xc7, 0x6, 0x6, 0x8, 0x3, 0x661, 0x7fffffff, 0x40, 0x4, 0xd, 0x7f, 0x4c7, 0xec50, 0x80000000, 0x9, 0x1, 0x7, 0x25, 0x7, 0x3, 0x8000, 0xc, 0x400, 0x1, 0x8, 0x2, 0x4, 0xce0, 0x4, 0x7, 0x64, 0x9, 0x3, 0x1, 0xd9e, 0x2, 0x5, 0x5, 0x7, 0x0, 0x3, 0x4, 0x3, 0x5, 0x1, 0x3, 0x10, 0xfffffffb, 0x8, 0xffffffff, 0x5, 0x8, 0x3, 0x27d1, 0x3, 0xfffffffc, 0x9, 0x3, 0x5, 0x63c, 0xfffffe01, 0xc, 0x4, 0x3, 0xb2c, 0x42d3fd28, 0x0, 0x2, 0xfffffffe, 0x45, 0x200, 0xa, 0x52, 0xffffffff, 0x1ff, 0x7, 0x1, 0x5, 0xc4cd, 0x10000, 0x7fff, 0x0, 0xac4e, 0x7, 0xfffffc01, 0x4, 0x9707, 0x0, 0x1, 0x1, 0x1ff, 0x7, 0x3, 0x4, 0x6, 0x40, 0x9, 0x5, 0xa782, 0x10000000, 0x80, 0x800, 0x1, 0x7, 0x3, 0x3, 0xa, 0x60, 0x5188, 0xc5, 0x7, 0x2, 0x7fff, 0xb, 0x9af2, 0x7, 0x6e3, 0x3, 0x0, 0x5, 0x7, 0x9, 0x1, 0x8, 0x4, 0x6, 0x1ff, 0x9, 0x4e83, 0x2, 0x31d, 0x6, 0x8, 0x9, 0x9, 0x7, 0x6, 0xc7f5, 0x4, 0x7, 0x7, 0x7, 0x5, 0x3ff, 0x5, 0x1, 0x3, 0x6687, 0xc41, 0x4, 0x63d1, 0x96, 0x2, 0x0, 0xa77, 0xd, 0x4, 0x4, 0x9, 0x930, 0x10001, 0x9, 0x8, 0x5, 0x2, 0x3cb6, 0x5, 0x4, 0x1, 0x8, 0x5, 0x7ff, 0x7, 0x4, 0x5, 0xaa3, 0x9, 0x8001, 0xe90, 0x3ff, 0xfffffffa, 0x8, 0x2800000, 0x2, 0x9, 0x9, 0x8, 0x7, 0x2, 0x9cf, 0x719, 0xfffffff4, 0x4, 0x56, 0x8000, 0x2]}]]}, {0x71, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e2d7d6c31aea3e06975ef3aaa1770d81ceb777a8a733f87a5fd75c8c7aaaf871120b4"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x130, 0x9, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf}}]}, {0xc1, 0x6, "14337e58be45d60f659754ec12e5d9ab30fcb57981051924d37f4f0fd25a3ef87b4e232d3bfdc9c80e6ee7845cbdd8ea6467a6e4d8f14d4a03a927cf8cd13c4b64426d975ee16c7b9e3ea473e415c230d4a08725de6d4cf8fa0a2ee1d29d4426544a0954a83455c69df54a86f88e23bdfc955eff64c7fb93320b3d431c93a09c51b007f50b01eda77a1d9eecd6c666f112264ca0082163908544f2055aff6b63df294e668556bd859c2aeeed83a0033d335fa628e8c8f83687fc15f992"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x60, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0x21, 0x6, "d6337fc71344d621b3f41a408848462f2be26f838c2124f3ed97095d70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x490, 0x12, 0x0, 0x0, {{0xb}, {0x464, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19c44db1, 0xdcb, 0x1, 0x1, 0x2, 0x1, 0xcd4, 0x7, 0x5, 0x1000, 0x4, 0xfffffffd, 0x1, 0xbb77, 0x1, 0x3, 0x8, 0x2, 0x4, 0xea, 0x2, 0x8b5c, 0x8, 0x34e, 0x8, 0x1, 0x80000001, 0x3, 0x932, 0x7, 0x9, 0x8001, 0x80, 0x2, 0x4, 0x10000, 0x9, 0x200, 0x3, 0x400, 0x4, 0xf, 0x6, 0x1a, 0x5, 0x5, 0x80000000, 0x1bb6, 0xfffffffe, 0x9, 0x4, 0x8, 0x6, 0x5, 0x9800, 0x1, 0x356, 0x3, 0x8, 0x1, 0xffffffff, 0xfffffff4, 0x7, 0x6599, 0x4, 0xe931, 0x0, 0x4, 0x5, 0x2, 0x7, 0x1, 0xda, 0x5, 0x75f3c000, 0xa, 0x8c0b, 0x560, 0x7c, 0x100, 0x0, 0xfffffffd, 0x78d7f19a, 0xc, 0x8, 0x7fffffff, 0x3, 0x9, 0x7f, 0x5, 0xffff5c04, 0x8000, 0xdfbe, 0xf6646b3e, 0xffff, 0x2, 0x2e4, 0x400, 0x780f, 0x9, 0x9, 0x9, 0x2, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0xfc, 0x58a6970a, 0x3, 0x1000, 0x12, 0xc, 0x1, 0xff, 0x9, 0x7, 0xe, 0x6, 0x8, 0x7a05cad8, 0x1, 0x84, 0x400, 0xfffffffb, 0x9, 0xe, 0x8, 0x5, 0x4, 0xfffff800, 0x6, 0x7, 0xffffffff, 0x41, 0x6, 0x100, 0xfb67, 0x7, 0xe698, 0x1, 0x4, 0x7, 0x1000, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x0, 0xf, 0xc392, 0xdaa9, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x5d394290, 0x5, 0xd, 0x6, 0x6, 0x200, 0x8, 0x1, 0xa63, 0x5, 0x10001, 0x582, 0x6, 0x6, 0x2, 0x8001, 0x7, 0x8, 0x84c, 0xffff, 0x7, 0xffff, 0x5699, 0xd8fa, 0x7, 0x3, 0x0, 0xb396, 0x7fff, 0x2d3, 0x4, 0x5e73, 0x0, 0x1, 0x18a, 0x3ff, 0x0, 0xc4, 0x2, 0x3ff, 0x3, 0x1ff, 0x8, 0x5fd7000, 0xf3, 0x4, 0x3, 0xd8, 0x1, 0x8, 0x0, 0x8, 0x1, 0xca4a, 0xfffffffe, 0xb, 0x2, 0x3, 0x81, 0x7, 0x6, 0x0, 0x1, 0x39b2, 0x8, 0x1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x4, 0x3, 0x2, 0x446, 0x839, 0x7, 0xea0b, 0x401, 0x1, 0x2, 0xa956, 0x9, 0x7, 0x8, 0x4, 0x1, 0x7f, 0x4d, 0x5, 0xf, 0x800000, 0x35, 0xaa, 0x0, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x75}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0xd3b, 0x2, {0xf6, 0x1, 0x4, 0x200, 0x4597, 0x7fff}, {0x2, 0x2, 0x2, 0xbe, 0x9, 0x40}, 0x6, 0x10001, 0x2}}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x18c8}}, 0x0) 2m38.914677764s ago: executing program 1 (id=3082): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) read$msr(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070800000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x56, &(0x7f0000000440)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r6}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x20000800, 0x1000, 0x1}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x181, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xd, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff1f950000000000000066ce326484bd63cd8e5e3592c12e683c597d9ce354c0f1ccfc140d4e77eac84dcf21ff17eb4cbddd2e0235eaa8105d21fb944cc77f8ebdd0a87548c27cc7af2cbfd50416a4b67f9b2d51317c5953866363af81d2b99b4c76bf13c061578c57c3079581ab849a88d6102b9633e020f82474076cbed9b69beae99ca8ccab80a7cdbcd4c8cb689c5c78bb29e6153e2e4878006f287c"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1}, 0x94) 2m34.192235846s ago: executing program 1 (id=3095): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x6, 0x7, 0x3, 0x7fffffff, 0x10, @remote, @loopback, 0x1, 0x7, 0x8, 0x8000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newtclass={0x24, 0x28, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x1c}, {0xfffe, 0x5}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x40c0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x6, 0x7, 0x3, 0x7fffffff, 0x10, @remote, @loopback, 0x1, 0x7, 0x8, 0x8000}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newtclass={0x24, 0x28, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x1c}, {0xfffe, 0x5}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x40c0) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) 2m31.91947027s ago: executing program 1 (id=3102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7665727369b41e7c5ead585a71302e752c00"]) r2 = io_uring_setup(0x7573, &(0x7f0000000100)={0x0, 0xdbce, 0x2, 0x0, 0x74}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='veno', 0xfe01) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r4 = syz_open_dev$vivid(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000080)={0xffff0000, "2ac5924aa30576140bc100ded1503c27772bd72e83e5d37ef05e7bb61eb4516b", 0x3, 0x1, 0x1, 0x8, 0x8, 0x4, 0x9, 0xda7}) r5 = eventfd2(0x401, 0x80000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x224003, 0x0) write$binfmt_script(r8, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r7, r6, 0x9, 0x8) read$eventfd(r5, &(0x7f0000000300), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x282, 0xe], 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r9 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r9, 0x207a98, 0x0, 0x0, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000a840}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 2m16.69943907s ago: executing program 33 (id=3102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7665727369b41e7c5ead585a71302e752c00"]) r2 = io_uring_setup(0x7573, &(0x7f0000000100)={0x0, 0xdbce, 0x2, 0x0, 0x74}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='veno', 0xfe01) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r4 = syz_open_dev$vivid(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000080)={0xffff0000, "2ac5924aa30576140bc100ded1503c27772bd72e83e5d37ef05e7bb61eb4516b", 0x3, 0x1, 0x1, 0x8, 0x8, 0x4, 0x9, 0xda7}) r5 = eventfd2(0x401, 0x80000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x224003, 0x0) write$binfmt_script(r8, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r7, r6, 0x9, 0x8) read$eventfd(r5, &(0x7f0000000300), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x282, 0xe], 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r9 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r9, 0x207a98, 0x0, 0x0, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000a840}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 17.84933121s ago: executing program 4 (id=3457): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) dup(r0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x40) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) 16.77579914s ago: executing program 4 (id=3459): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0xfffffffffffffffe, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xb6d, 0xf, 0x20203243, 0x3, [0x2], [0x7e, 0xf, 0x6, 0xfffffffe], [0x7fff, 0x401, 0x0, 0x8000003], [0x2046, 0xff]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, 0x0) r3 = syz_open_dev$video(0x0, 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200970}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f00000045c0)={0x2020}, 0x2051) mkdirat(0xffffffffffffff9c, 0x0, 0x4c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x7fff}}, './bus\x00'}) write$9p(r5, &(0x7f0000000480)="a78f2d87cdfc39d1e83fb10fe80a358102236046b34ce14160b68a9863f6c1155bd153ca9fcefd4390ebeccbc91d3676161af8d7de1fb56cb43740ea7beef8c82f4adb3cc1ac28374c54aba608c0d062349a54dc08c657b6c1dc08c4c65db0158c736eed722f4476e76e9d3dc85aa6dcab083afe4c19d5", 0x77) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000002c0)='./file0/file0\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0xc008aeba, 0x0) 11.923404695s ago: executing program 5 (id=3470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000020000000000000001", @ANYRES32=0x0, @ANYBLOB="0131010000000000240012800e00010069703665727370616e000000100002800800040000004000040012"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10.883741235s ago: executing program 5 (id=3472): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16], 0x1c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f00000008c0)={{r1}, "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"}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_neg_reply={{0x6}, {0x6, @none}}}}, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) 9.11146363s ago: executing program 5 (id=3475): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x3c}}, 0x20000018) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000380)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r7}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0xc0086202, &(0x7f0000000080)=0x2) 8.223966653s ago: executing program 2 (id=3478): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0xfffffffffffffffe, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xb6d, 0xf, 0x20203243, 0x3, [0x2], [0x7e, 0xf, 0x6, 0xfffffffe], [0x7fff, 0x401, 0x0, 0x8000003], [0x2046, 0xff]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, 0x0) r3 = syz_open_dev$video(0x0, 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200970}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f00000045c0)={0x2020}, 0x2051) mkdirat(0xffffffffffffff9c, 0x0, 0x4c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x7fff}}, './bus\x00'}) write$9p(r5, &(0x7f0000000480)="a78f2d87cdfc39d1e83fb10fe80a358102236046b34ce14160b68a9863f6c1155bd153ca9fcefd4390ebeccbc91d3676161af8d7de1fb56cb43740ea7beef8c82f4adb3cc1ac28374c54aba608c0d062349a54dc08c657b6c1dc08c4c65db0158c736eed722f4476e76e9d3dc85aa6dcab083afe4c19d5aa484e4401169a2124800f43801732a11d59f987", 0x8b) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000002c0)='./file0/file0\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0xc008aeba, 0x0) 8.199275737s ago: executing program 5 (id=3479): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0xfffffffffffffffe, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xb6d, 0xf, 0x20203243, 0x3, [0x2], [0x7e, 0xf, 0x6, 0xfffffffe], [0x7fff, 0x401, 0x0, 0x8000003], [0x2046, 0xff]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, 0x0) r3 = syz_open_dev$video(0x0, 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200970}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f00000045c0)={0x2020}, 0x2051) mkdirat(0xffffffffffffff9c, 0x0, 0x4c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x7fff}}, './bus\x00'}) write$9p(r5, &(0x7f0000000480)="a78f2d87cdfc39d1e83fb10fe80a358102236046b34ce14160b68a9863f6c1155bd153ca9fcefd4390ebeccbc91d3676161af8d7de1fb56cb43740ea7beef8c82f4adb3cc1ac28374c54aba608c0d062349a54dc08c657b6c1dc08c4c65db0158c736eed722f4476e76e9d3dc85aa6dcab083afe4c19d5aa484e4401169a2124800f43801732a11d59f987", 0x8b) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000002c0)='./file0/file0\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0xc008aeba, 0x0) 8.194665156s ago: executing program 4 (id=3480): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) 7.445935083s ago: executing program 6 (id=3481): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r0, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 7.012096472s ago: executing program 6 (id=3482): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi1\x00', 0x103040, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=u']) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 6.00811626s ago: executing program 6 (id=3484): socket(0x10, 0x803, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4, 0x1, 0x1}, 0x10) 5.483339968s ago: executing program 2 (id=3485): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x8}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x8804) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000040)=0x1f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001180)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a0001"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, 0x0, 0x0) 5.476046693s ago: executing program 4 (id=3486): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x22003, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x510}, 0x1, 0x0, 0x0, 0x5}, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r6, 0x5501) 5.387779868s ago: executing program 6 (id=3487): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) io_setup(0x1, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x1, '\x00', @value=0x1}}) 5.261949524s ago: executing program 0 (id=3488): mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) syz_emit_vhci(&(0x7f0000000980)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x82}}}, 0x7) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='debugfs\x00', 0x2200003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0}) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x800841, 0x0) 4.681170827s ago: executing program 5 (id=3489): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x3c}}, 0x20000018) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000380)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, &(0x7f0000000080)=0x2) 3.661855037s ago: executing program 0 (id=3490): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3fe, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) mlockall(0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000028c0)={0x6c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r7 = epoll_create(0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000027c0)={&(0x7f0000000400)={0x2394, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x20, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x10, 0x12, 0x0, 0x1, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x11c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x10c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x3}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xfd, 0x6, "3c302c6735d08098d582ee1f46f48d16c623ef584f2137aafc58b7a6282ac720fb019719a4c795f6976eccccb309751a3ecde273b4db6f96bf4bfe0f2cd1b918666c07278e3c2523ed67f565cdbf0b5d57afa9ad4c4f0085dd50d63256e7cd4ae3a02f824b335f8f7b47f77b0432664c43282220bb3604d9768a7de189bff61a1e09a3506baab2c789fd80f78004701dfe10a0bde6074d1e3542932078973c94346c63c34303c2f91768fe408f0fcbc48a52bb35acb7e6321b5b35191d2e966e79d7bb53c60eb9bc61daa2420de3ceb6928e80817ebdf17ec39db419147f61b06cf2b0e35459e66f551835fbfd6c94c603bc2d00c6aa78505c"}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x223c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2218, 0x4, 0x0, 0x1, [{0x2cc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_MASK={0xc1, 0x1, "7e46364038a2d3508d128cd8258c74630d26c18c91f9d752a5c16c3d766549de663910a90a62a789118631088300f1b5535104785b2eb36233492f244255838a559b2362883fb1f70980168a804a3f4897966509b8b7cf93f73efb998289981bb16cd908690e0045e56034b52b5ba9eeed090d6eed8aa35c3cc5382ac22e8a245a8ab1fd42839ae2891bf24539518d69c094f047da55411b44534b1c549f787dbeadc4b7d9d8efce58e0475e5aceef123c80131d803ec774926814f8f7"}, @NL80211_PKTPAT_PATTERN={0x13, 0x2, "ea99f657a19325363ac6282ced118c"}, @NL80211_PKTPAT_MASK={0x2c, 0x1, "95c89770b9d367178dd96c7553da460e79ee22a98cb309fe4ad68f181a4f4e999aa005a1595b2d8e"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x401}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x322e}, @NL80211_PKTPAT_MASK={0xd0, 0x1, "bb4e4511c77894400540da712eb7cf55ecb49865d8a26a3c113f332822e7082027caf47ecc1974f3d0ab4feb0d30a1e7cb6b7f4baa509cba7b2c0747eda0eee2563454b563d664487d6c923f2ab789f9a9ae5a513417d9e12ff74a2669d2c7291bf81bb54b45b9b61c39daa4e219150f5c1816586f3d2ae17f8eb6f9720563e9c13e84f4b503bd1368958b46f5badec9fedd5f6f98dcb768074583a195e2dec755dbd2602f3b91b4db66461593c7aaa8197077aca71cec73addcfa1a9baa8e347b5538f8b19bdf3e87d0b78c"}, @NL80211_PKTPAT_MASK={0xda, 0x1, "01fd8607b028c81ae900cbdac8c5ec9997d7b4dc641099980d40185e3eb9ba6edb8f3ea6cad38311b05f035f1f72c6c204b816a49dffa8ebb157a9973206a1809623f664fa7104ecf7c7a6fde92ba612a3e77600aa8abfa9972dda696d4f2adec8da8b7b1eee258d9d3ee94dc8f2e11129fe92e091d55d4f7c94597a78136ecb9861db2563f54154bf380097f4ff5ef28cc08b44c0e444d6815cac9ada4b2a0cae6f064fbd14e5d09c0eed123e5864e0a26bf392a0b2213185c079898fe43401861c8b1b0c75ca38298384f054605297f910db72e421"}]}, {0x438, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x800}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_PATTERN={0xd5, 0x2, "3659192ef747bf84358df0c78608bff88ca2e3ba93c9ecfbdfa6cd786c0254bfab4abe8a01b8e841e012382393dcacd457c8fae44f610d9fa82d5636992a81c30f4e9163cadab24485399ae59bf2af164599f6c1ff4e1347204108ebda089824fc63d94e4b4bfa70b6c9a675dfaf11edbd0519c5da0e4332cee00ac7ab586c03b2af1bda449f20a74526188c8b0561cade6388b6dc3ba7b72016473461b3dd5fd9706568351bc6edf0cfece0b4f6576462f581d12377ffa444b5ba02151f8b7a887b438dc035bba93e8ffa09c3e42c4dbc"}, @NL80211_PKTPAT_MASK={0x7d, 0x1, "7360686be61888b6eaf3ef638ae25d77543a0eeafe0eade82d27b5541319c12ff53bc9f3b3023fb5150523f4c6b81922a69cf0db4e85edfc040f603a99bdad4131899977b2050bfc75fb49b64b501f10e1b6bd70cb55cb71ed9b63b2c6d0845a7e24beda8eff663cdc0fe87cd54b9576a06753d570a610d628"}, @NL80211_PKTPAT_MASK={0xc9, 0x1, "f54def136d153bd4ea61b124d87e91b6db6ef7440d92c1db061e2bad8ba168344cc54b7f8e920f7787c5ca2215b25de74e5b900c99c53587e7abaa7c839eebf5ff23076599de4f8fbd786f7c6330a18e93504f521de8b5f8d7d4c3d4e16a542ce36dead9fb93f357decd650d80417abba4da0db105e5e0defa17f6a769681a5d73a5f70682dc1bece3be2e4d65a96a5bbdd2edd97cdab2b0ea920f56e5a5dea19677eb2e0d48f09b6d7472e79998ea9a1edc9015151ec0b1aebb65c338d997542710b9da48"}, @NL80211_PKTPAT_PATTERN={0x9b, 0x2, "af135cca426ebbba197dabb38c27879008bf80847aa294d10a1ec3624edb4d5f808429cf5bed5c47bcc8fd8ec926a619ba67bb540f18516c58c0ac143be10c82f92bb886fe492adbdfdbf31efbcc760495df6b487db2bb15c5bc7a95159ab269ea378c5a50762cd884a2216ebc4cde8dc40764146b87f789e74232f0b74af7f93be04e799e39845da24b34d0fea50211663d627fb5d5b3"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10001}, @NL80211_PKTPAT_PATTERN={0x9d, 0x2, "36914edb4204459cd37ed25a4fbded73ba1878b13d4de1acc61181ad073b05b8cb0f930de17cb7c222b70341e51213dee8350ddd8e8f10c40275bf1ac1a58f8646d80fc23f4800d06af4b9bd10ea3f62914b172b3d4b2b3737a850f80e53fd669fb3e40c245c75157fe4cbf38544b5ce2326ff963469771b77f492a1defbcedda3bb082c704b7c0302b4949deafe5129263b6fcb3d43de2cca"}, @NL80211_PKTPAT_PATTERN={0xba, 0x2, "b44248a7459a1140f16dbd92e866c730d3c45291e1fe1a70c8c0bae02f8b585f687985901245060236161cb00711b4ce9aebb213a288ab985cc70a9a52fa8b0cee4a5e57e943c7e029f3ba7a1f136eec2898cab78608bb605727e9e5cf195a23cdf89feaffd2f86c4881c33e8b610215e818c4245e53c9c910bee8312f429e197d7f53deae3825f88b294ab06da2065f0d1d64ede29d9ef4273e85e8a4d079636231051dc2d66564d398e4e01347a4127a5f426b021a"}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xc8, 0x2, "4c139730f809376322dea0116b5681f8f46d218ffff9071ba462e58d364e4316a3a8a001b2471ffb87725c9a71427472ba0bb104f9c8debfeeea9b4d7f3809dbe13e3b59307cebff44ef02e71773fc876f8f8b87d76ef301d7a081195d2ad483ebec42fd456e26a201d07f3b64a92ded30739748f261215462b79a458063ff101657b4b0a16baf52b2162ec5ee6212dc79470a0b6c2525d462221e73001e5d99c70874bed582d53264ec06552d4dcb153992b51a7f156dabd533b84f98dcd82fed6dbbe6"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x100}, @NL80211_PKTPAT_PATTERN={0x8a, 0x2, "ce65821df1c709982a0cdc8bbcaf6899bee142a1068d7ce8675aa62cf5ba6ffc0f10f3399b70bb119663e43e480bae1dae0660bae9e3af4585f265287e658c486e46ebe32933604e19a75c3ac303002e707cb0c93d5b662673486221ffd8b57d904157e3fefd31765b17d2fab9921b734442c8ae2ae2a4585d69776b6d2c5666967ba82336ed"}]}, {0x320, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x9b, 0x1, "ac33e40981bb6b759ea1e0a3a711ecd832aee64219f563211960780a90ec7cc4b93edd2456174b38307fb4283652c77feee44adb1cc0974e9a6618c71fc1ee50a67e6616421fb407dac84f305d1a9956bdf0f29df21ecd36e086ac348fbe23c75f8618a4c1f1e4c0614dab731ba0805d6e3eb3fb70616f1847d1a7b7e001bcacca9546ab10ac4129ac99f804248767efa179429ac9f073"}, @NL80211_PKTPAT_MASK={0x29, 0x1, "95a56fcf087c3cba5faf46739978cd570d300d7077d07078d214df87230ce3a8d2433a8094"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0xe7, 0x2, "cb0f71d707c3430bf7ecabc55304f67854f6a62b7be2dd45be00294c5afbfe1d8d62582d8c1418d8d1122ec47e045d4f70cedeca02d6ffab52776365d048b27390b34f886b6649a1c4e1b7834b47139e2051aa6eb4768fd5648ed3321641f1768c97fecc0ff264ca70395a956771acf7fbdae38ecb1fa7afc197ed8756aa49c6be997f3db6c3391231ae4b3a1da017dfc5e493f36e725932df0e73dca82607162880da7b5b5b366424605dc1cacf5121c91d9066129e275e7a5aae21feeb0d29d1ef69a8ce2f1f41480932c00c98453d7276aca686cf45a198cdd8b707daaf25853db3"}, @NL80211_PKTPAT_MASK={0x26, 0x1, "4bc8663b13f4c3270f2028453e205a7b51b9af486a5911a002b12f3e160c0edacdab"}, @NL80211_PKTPAT_MASK={0xc9, 0x1, "0eb1776583acab659d19a180c2010588482f419c37f374a8a33e72580818ac24ee1c42113c5a9dca373aac290a4ccb955bb108fe62241853aeb12669d17723ef417d8ce4d18dbdea2603b75c01c5a3e07734a86be5edeaec36888cc531b535b8544628afb34bc134e8a4c8c2bed84373a3fd1a7c0b1a9d1932f915aaca41f5faa2a201f92239d7b31152f34c09784a8dab26ace9d1937392571804c924eac15406a53192a69467e3d8899314924e3f0613f9ac26a9ecc1c49221cde2ed3bb3a73806abc882"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x101}, @NL80211_PKTPAT_PATTERN={0x57, 0x2, "341095cdbfe306bb706201db0b9089b456672b220999b0051723a7e6adc2dc7f40b8a7d2d1cf4980b0632a07a97a68d9cfad6de3123e362532d10d0584eaa04b7d670d2171957f88158924f55e9515251be2c1"}]}, {0x29c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xd6, 0x2, "be7ce23015385918094f5bb443336018855027dc85a996eb56bc527a199986a2b08b492babeb1582e388c34f43971182d33dc78c1cd462ad23cc1f0d4811526dfff17bb76d157d97ca5d5d3dd2a9492b0e6743c4fdb96b959d3a5fa8999b3819da2278a6f701658a2f46ba9b775852d2b424f67105a03e6ef005c08a4a19eaa2c4cbce58ae58b21a78772bb4fa4d2776bd6f019468a856d15731f285b3e7c05882111f86e6349b21aa8d7d41cb8f86193cd079b85871f38f8ab258dd3a8091421e2fb113d1c1d9440884be2ee813108f7cf1"}, @NL80211_PKTPAT_PATTERN={0x97, 0x2, "dd688fbd22dad6ae304aad7a677b459a1919e54ab70ec156f35e4f94a0b3d687aca9734b3d98441da3d3358096337b86634dd97ee5ce110310d588f10be3e41c31ca110b7a52e4d87e08fcd34222c3376c19bd580361c9c83ee77fbdd44e2988daeca06f7331b454930f976557540f0fd62e19eba3a3c35b6b6215930a1bc7a4019bd5802d1326d60fe0f500ae23bd22f19fff"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7f}, @NL80211_PKTPAT_MASK={0xff, 0x1, "f054cc9f7a81686fb8a5ee450630aedd04fded17041ed0e66c72e052c7c542b921ae9df0286fdfa8d94879fb491d61a93c135f0d6d4154a492193d4d9feace783e95d135b8abe364e09b31fa86a41c0198e34d793e68c71c72d864e2a726f6c072d62119bc57fe28f6cc1ffc6b6d845792eb87ee75748450d4a1ac7dad1044bbf4f655ef35994792602a6e72b98e681ad64c19a4d5a7582a9dacb93d14376964fc25cc7cd3df90154099deb4b466b17a743681fb5f4057d8aa402535026d914b8f6608e6b4698a65e6cbf5bfbf0862022994688f496ab92a79272e6ff28e4373e54b777681d74e932bcc6433d0f35c5018b48e2bab2637bd7aaa45"}, @NL80211_PKTPAT_MASK={0x1d, 0x1, "9d0fb3806cceebbb4ea8b06d7a12b03f87654e72b849f48c8d"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}]}, {0x129c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1004, 0x1, "8bcaf7c9ff90b2a4a693b30f99837d0a43d84b79e790bafb9c947fc87de5a56af097e8a4e9dca2556a80daa0eb8c65a64bb2cdef3e0a3720cacb8a7e5b1e52aabbc0fd97d72c5993909f22f1539c5f090b79abdf7186930b36093dcd273a8d8586847c6e2c0612ffebd11dfefd6ce7455456de5bc204586bfb5f86fe4599f5974d10365cf8c5db529e027371921cf66f9d4e0d302ba9eed23f2586bf4f1b53db029d275eda12b91e0599a17d6c697cae3fc2d985331c9f39c1ada2b4d24067c159b45d7a8757603f9e0eb181649a0468ca6a9866aab4230aff9d6d7c7b2d9c9c1c7b67d7f168eb8bbf0a78318b591b8223703bbae1814fae4be09c167196ec3b5fc9d8abc7790b2d936f489379b7faa3ae9ef0cdd8e085b353c950d6003883819353a82cfea7a01e8dca1e7117dde195bebc376225514c5bfa58c6e1d1996969a439c9d20e0ef1a393ab1e52449dd7745859b12506b6d532dc0a9a6b0fb5469b1c6a861921c52b26247456dcb8f6b3cc1b58b9351a106bf39b1dcca4a21a6e7f29a1d01dc48a21cb435f422d243b5a686e6e2af2b4f7edd21ebdfedfde1673885a243d82a4affac274eba233cf93d747d1578d5df821a41948740c5a0bd48352fb5967ae2d8c463de67beab7ec3ba564e72631315a186da1d87cc365e81615799e4c66f7a7028ccd4b25d270ea0d782b0224611b407ccdd256b5c93839ee5c44178c0085249bacc9d57a4f8fa5b50ad287d63f5a83150c37f9f8a21987d50813573cca9cf4109e005d98d964b544529d1ea2062998cc935b6d367b8cec2a8d201d240aaa1b6e46d9e802f32eb421558f7ef494e1c8a797452482233b77661e633f5022b0b6b95b7bc68f1933ef8cc0897367e36ea9dcc0c7bba43cd4c25d60a36403fca211bd65d57476bdb73007c0b931f6910f28fbaaeb96cede9d4c77e516286b06011f0d8b7d7140ae527c3d207e020604ae0938bb30ccb1b9c96e5d195ecb4ec5b9630b2190eb667209c7f319d7a9dab529b385f8419c6c793051e1d3f3741d8229f6366a0ba34cee5581de86b2c7ac7c91a195d4ccf2d2e4228b3de87ac929833c2dfa9bd36cf73236a1b59c9c07f01234a1c4d46e77782f22cf0d766386e450c6b1e354ab45aa7907b48c3ed27df0a37450171b9d9ecb15559251e16e19857af89184585265e56707e607acb19159deec2c6a1d91b9851965c5a05cb55957a05b5ad3d52ab46d169cf3710acc012f1dfb913c6dae4517661a6c720e53dd1b94e11549fa4e92d91554b1a3f31e5f9b6622f45e18602d3a578e519a7065f3fbc99f1e1a9f3e96b520223a24ec3e70d9910cb8f44067870cacbe08c2d83de9891f2674345edfa5238d71bf222a34b68483e0c9cefebdadb80a1424357242797af779b4d4503ba1de9a9e6bac4a41629e103621e30889c8a12bcc6cf567e1d6052e20419b5848b89506b4b56384bad256877c5ed213e44779523e0a240897f56e9f3fc0e802bbea612f1b5e74715e89b715abde1e842d280910611ec905dd1ee3e84a77dde466c2703cff620a7de3937ba0bb755f56ae072f1ea1f5424cc43d91de0387d834f30c0914bf1acf72e48b99b12371670acf2257869e72fb846209cbcc120b2f3ccb471e7c1b5fbe102df6e4452caea9a567850e66027e3fc410426a4581913a37016221680bafa72aef5a88dc9147b55fc4c1b9f0978959872b8e938a47c6136f06f7a13f9b4ac84c4ca4cdf7c90234fc1984e2f750cf1fc58f37b327959d2fa373336a703b1ce4efa4390a8920755fc0e70a807be61651c272ad68a02f43ad617aca77f4a70a8d7469e7dbb43858fccc24f9715f7512cfc150089810ea878062ff4ab982193123fcb271aa9853c4b8299e27639280fd3267e67b0ce10be2492a2879165e9240a47ccd899b7589e04ba9d739a792c83c4a85470d17b7ceb51032c3a63a65c05691de53b450c580c85c47ab6b3b2ce4cc9133f9c8dc606307c513507a9b5f3a2ab0cd0252ac401c2927ccda965c730e6d402d29b370ddd7b106fb0a4ded154c092bf1556a205671ecaeccf1867c862dac0c5c8346fae337641cdf1331d756e3099325895bab8e1b8333c2b41d5ebcac0d591b296838af0d13fd838ef39937a9f3c23e252a9dd51bf3b68fd1ad8af9c1d58c4ae2a003aaa73a149d579c2ba2b60a028f324c3e7558248315e9867635fc6ae2ca5ef20701286cb7db714887e31f973d0377d58c78d9b8863d0fb755cea64fa466752c69244c2715f4cb7dc102fd2c4774c9858c4203efebd3f2caa5e3cb87a88553d2b8bcb6253994616d3f5c482bc105579d949315a0c9f47a3cf9786fe55f29d4c1538f8568ca17310d9b578b593defbdb1dd873f828cf23b598afd7d042f8dece63bf7b8f90e8e8f4bd35bd618ea24c0a4532c523607b5033a6c8e0a8e55ef2fe74924de4a20a2d8fb9b3ba0fd1ff0e81df81e559f6fec016bb876c8de8ef52f5527be9a4ac0ff09d399791b6a1d86110dad655db6b865089c599bb5e8b8d38090701f66562bb7f1f31696a969ff7ca46a7d94f25c99d85e118cc22c10922e1dc6d6863b6b938a0c8bc61180c4b62f6f2bead1045d68d160543fd7b23f5dcc3b2bfd2115085cf9717a2790ea8b3e489f7fb68999abe8fcfe4bf9a8184eefba213225bb85b051659d6abe4ded58fc126d2e87f015b2f15e8dd3ccb46e17ec120ef0ad7f1b9502c93e33bf13aa93e1119b7e5aa6543e92683f959f1c54bdc0236ac993e96a88acb46c52b81c3e2180fc16885bc5d703a3e6c737de9b98219d3231d85b22e16269cb5b3e9f2ce49c6da8a47facc9ec3a92cb0e14277f07323019b9c47d5b251ab2bf669dcaf2a078ac9048db9544e7c1179b956547a7e65c97473982ea841663b2c3b3f5b1a5a5e1da0d3da1e7e20b15221c3e6e794442b5c683c39f4eb4f90f3cad09356770ccc0361b89c954f20a6f2e48a86b47721fdadfe097a8daf7e401e0f7c4f98be8cb747d83f7d8001915cc982ea7fb73e96576d620e9a22a5ec3ad483f9829eeafb31bde220660a77ddf09c53aeb14a0bab7d0225a05752faf5ccc8e63a615b6eb4cac1b64e79a688738a1d31281940166624ef9563e04a2a6ce69325de501979d489c318aa8f60b97d9555c9f7e113583a4e6a7d4cfce4411ea11980453079327c65926f5cfc66b71c2ab56e30755b60f1143c5416af70e3231b652c4d9a96bb2d84521edca964cbcdeb20ded18f09b47f7d005997783d24e3ef64fa7e768c01dc0d18058eb8dae3dbb1e18b5fd1f83bc34fad109f486c6c52d2bb7fb17daa91a4262a6aea0bbbda35368fb3e19c1ac2f4f5ab56570b087ef3ccb6e371b41e462dc3d60f1ee450d38ae9d67e9931e9541d18347fe1367f7676f40838a21be921c5365f37a8a66371cbb5d85a65025ec1bc04549fbe8dde6e2e97394d2c5b126217e6eff9286ef47330dc59eeeb7e5ec682aa978568fe5bc7e90949b448da924ebf2a09799d6f58e3b51b76530a9dfa9afec385653bcceb291472abafa093d5e22dca1f8150256bf59c4dc6f26d820bc023fb36b34e67d458606c5749517c66860a2f25560c0c49e6370c31f915978c5c07099698cb65e80b6458a677a3fd10cda6978cc1c21d349aa52e1dc17dec604583e5e03b23047af909f24e974f39d4c6858a1a37589a14fb200bff7c6103f59b14c727b60731d17e3be052861dbe3b44ca8fbebfe4006f56eb15466049c62e9cbbe74849a74d9ca249c60601ade45c33b22ab91859ffa4a037c925dc2f89b02d4d219e8b61ad81a302bf70b8fdcb896b9dbf661d2c43dcff05217bc3c3d0d2445fb5e4f973a61e72b35eebc62e843cdb7dda82c6f2f90fed24a28c3424001928a62c8c0803c005352e99af6fe5a988f5ccbca5a5db3634c929b0d65a60eaaf716f2fffcfd8b32051c26523f153b8e0c08ae5a1753cf4e047d28dad8f529192dcaaf9c499365626b6dcca2210592f0160e5ca2241283c2f5590ba12ae68b7554b1c1114c9beb66e433bbeae6301e72edcab26454d3799cb8723cf607f1caaaac5eac1ee30d6d98d481685284d16f7cf232f66e5f45f7bfdaf595cbf34151772bac1cae9563821355336501fb4e6d5d7faa9c3fcd702722168543b5165d3a6202f835f4b5860c65c0772e348d749ca2b5443779c88971d77c6e992635245088e8e513915bd2834b2d0bbbc14fd77d226f00825b503ddc479995c89cd750807e849f3b25a63fd727f76d12ceb2e500d21ee6ef56434be6741c0eaf6e40472347b34fa214c5433a9a4635062fe02b5835cb7685f29182edd26513e1c441f7fb27f636b127b1a7388ccd9412c31e659f4e051f6a46361f88f39ebd2431d3cae43ca00246b3f5e1e035533c83c69c3323ea973152b9274ef1aabfa9102a10be50db752d7d1d993a50be23bf37b18b1fb8320b4f51017fa3d20cfb444487e3dd49353c62cc5ffa16a477761f80fc4633125e519424e9cab636cbbda7154119da1471b5be08a0f1feb7d7b3b5a92c2a0afb86cb5b9ad86a3e285c18c03726fb9db3f65302b7b2d93ba689ba3a74c287110705d590e1ff8f9bd978bade5f22c5eb3a67ed2e7507f5c417a66c36f629b7b69644b9a74acdaa453a212a74006f90aa8003a7f100d80c5d2401a54806bafd1d00b9008e4504e68980098b994dc26b1e387c7ac6d4d489cbe3d4fe9b019e27293bc9dfd3dfde96e038365e18bdd6055e6731d867e72ac6731fdc4587571b2f2e6273996bcca110a9452cc8ee4ae96cabdd1a018a304eb7b280f7c6e6fc4f404b4c5de3248795716989543c4b990fa7b538e5fcbaeb9a95e4063d79c7e7658d76ce60439904f0717dd899d181c1aae2d1a8671012a67084b51c1bff7891fb72384d023c67235c736a9a7049efacb11ef4b5a7e477797de6d7d6fcdd8012bbf76a19a6284a7017f8d0fb817e50066803d98932b1f23e766211af2eac1fe05b703348ba118a6d42771de72d2bafeb0d87f119983def9bff53b7abfb9958a98de42d4d3648de6ac8617e35a0703e6f3cdf4ea6e89f141fa0d669d5ad15475a9c9ae840a77dfd22241266137d6ac737d9eea8a8bf681bf8851e6d0730a471e76fbb06308518c7bd2b76ade73cebf5f69863537515c23b8091e44a438c62ce1d2a14c4e0a990867dc1d1a585e60ba8ab3d473c734393954b383da9f557e94f0eb87546033d04660122b91ed7a5fa9ef8bb3071b26f628a4cf9d252b32bd654475ede06bc409862cccdbf7660dcc40fa3a1b9c313c22fb985bc97c329be2f80a038d0d626c0f73579f821b8e4d1402208f699419f5608f5aa6b2d9c4871a1fe4d4c9b1638dbc7d6db092c99dd6cd5c161f93585a4fe781a2a5e402ef49be3d5dc15178278e4f3d7c7053d7b13c3bbd07fa42b9823a038ff9044040807efdae401f74ee6547b788013af3cafe2908c75691f88d4502ed6f20517e9290d7fb361f0ee9084ed6167b3e8a3cb598f31a5a4e1781a3b09d87618a0ca889aae8c84f1aff4b6630d75a40740661b6554ce25af9188494c405b6f655b078cb47a83810c46d367830653167374e11975e05370a6261416dc78dca5ec91c795d8fa1d2d52ba28e992e44bdb2e2b5da3177e7b1a203db409bc20bdcbc8b18480406e26c3c05fe4ed0620f7e6b74ff7252018660ac99048ed08bb237be3d00edd28f65e982887956c67a1e3ef0ce61ce9063519f363a92f1e447d48ee6d4760bf49b4dce566bcd4318387e0669b779dc9db9e3d8b8f87fa09cd2a5c5c6d55addd1477"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffff}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80}, @NL80211_PKTPAT_PATTERN={0x72, 0x2, "b7f676c1ebde8fb06cd0da53d08e62b843347c35d157392f9f6e77e0a91d2a5003b23b5a7654288a4e32c5a5677151b6e1e00148be3a1ecbf32e8e435c4bac8ac4a816d0f11269167f4c2b718af3bd58918a6d6d9f32e54ab9e6347c0f436f6e0ff8924f20a685c55716e11a4762"}, @NL80211_PKTPAT_MASK={0x78, 0x1, "7d15e51223ea1d7c5fa8a6875bc010a7e6a3e04a374b5278e965b1444889822a052679ce6efea7216149b48d32ef8ca11b7802b61981058ef146c08a7d05892db5cdf0fc91e3b7071ed7036e3c06b86e9c320b6e3bc18736da8415abbb3b06d71f2678eb880876974545b79aec580e61f299cebe"}, @NL80211_PKTPAT_MASK={0x92, 0x1, "2192d5657666c1e5b8134dc425b8af9b4741961544245d712a858d2de81a09b3e1dc49c023109e58b35012660660f7cf077ce3a274ab296c3a0e0bb486fa588e10011808f0b76e3a0ff809f35d5ec808aa514725e40950ad1503ccea7c7597d8c42c9d73e4c6b3819edf809fd400c1b8cab05da973977a1fe6463ba876b96971aa2256b3c3ebde524b2aa6cf311c"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_MASK={0x1c, 0x1, "a18189d44daec7c2dc75fcb5c990dcc0949eb945d4179f4f"}, @NL80211_PKTPAT_PATTERN={0x8a, 0x2, "1442652a27b4602701140802826fe8a8dc2d98e206cdebac1b449b6227d2fa43b7bacd4aeb6ab2329a99a9d0ed184c2cacefca43579850de5c3fbb464545e9394b6df67db73c2c6eeae37e2f7958a3984f74b5608d530a0462e4439e5c1f7ee19ae3308c59938b5427b2fe4a5976658e2ebd4c2c9851a14f24aa806dc47b3d1a0de69889e8d8"}, @NL80211_PKTPAT_PATTERN={0x54, 0x2, "4a67f7ca9506be5324b5ea7d57c5e6042f5f7fdd848003a29d15f45367cf3be493d6edf650d1bb558f9e467b231434d0a442320bb05af2a48e23700de4dade45eeb34e85b5b38820d694c2add5920d3a"}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x7a, 0x1, "d6ba8945755edc42d68e06515bfdcd355e1156dd92cd8865cb48dc07311e92779d66a10cbdb66989d3626c49be756d9622701f946329a807343fbfbd48e04496714ec423b918770de41e2ed4362cf292f10ef2aa419073ce638377fe68b4a808dc9967de69c06dbf145737f28e57c76bc95e5e768499"}, @NL80211_PKTPAT_PATTERN={0x59, 0x2, "02a7a64ddd8709ec11f86c4c1c10c452ea4f635d01c75ae0219b7c65e4a04fb5f326b1aefc5c8a2a829f933d67c623847dddcf9f7321fa01e15ee918262391edd7eee14648bfe3ce2ca8eae772cda2a938b23de457"}, @NL80211_PKTPAT_MASK={0x5a, 0x1, "be5b7b2438ecc408707b903c4625d32857924472b7bbea7495a053b0598508b128c25a393bade1aee696dab6c54a7c744fffe68dbacb3ea138c71ddf6e4fc60cf145a37983c6f3d59162fc843ba4464f27454be8b007"}, @NL80211_PKTPAT_MASK={0x13, 0x1, "15a438d54fd00e0be20327e617b879"}]}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0x2394}}, 0x4) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000000000bdcd3bed542260ce15dcbda45d5c7ed46080fb8606c616ea7dfc5c1125b7cbda46495aef87ac399373195501145d5e377c83de1b8f0eeb9d039f40a25cabd9ec41d0ae067add1c77fddee6c3c0f6b7aff201f3cf30aba6541f85c774cea3a41d37b785a2d21d7ae86ca4413bbcfeb4c9f15830531516e1d23c9a65c3dc695782be6b1032c6063b1e5623c4f705c7ccbe151ac9a1f22ff0f396aa84122beff5b0707f53a7a544f162cfd7f1d71df0f08986c07ac5463b05bfff5047d48b506e35994f21ec98cb9e8428b059a5ad493c409f"], &(0x7f0000000100)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r9, 0x404c534a, &(0x7f0000000300)={0x5, 0x40, 0x7fff}) ioctl$KDSKBMETA(r9, 0x4b63, &(0x7f0000000040)=0x4) 3.618710094s ago: executing program 6 (id=3491): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000000)) openat$mice(0xffffffffffffff9c, 0x0, 0x101) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x1, &(0x7f0000000880)={0x77359400}, 0x0, 0x2) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x7fff) dup3(0xffffffffffffffff, r1, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)=0x20) ftruncate(0xffffffffffffffff, 0x1) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 3.270486659s ago: executing program 4 (id=3492): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r0, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 3.255975232s ago: executing program 2 (id=3493): syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x700}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000300)=@tipc=@id, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r5, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) syz_io_uring_setup(0x2eeb, 0x0, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) 1.995841615s ago: executing program 5 (id=3494): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x20, 0x21, 0x2e, {0x2e, 0x21, "3df9865c72d6ceb7b1ffaf14881156b8a5a0a9b127b1397ace1fc1ef3f88cfa89b3860cf957df49d6b64a5c8"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x0, 0xd, 0x87, "909324c49639a3fd68913146d0f27314e8d421dc626f4defe880020949790aa3761bb430794cba948e825638f011ad62f14aa8cff492e35fe453fdf58eed1376282cbb991f5057658b35e6c3a73a87f4b8df3fbb5979acfc7c1de781d41f8b91302d7e5ab39a0530b85e335c0a93c2a01fc1cd6c1d95441709c8d2b3baf650c9de3e4713087394"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000280)={0xc0, 0xa1, 0x4, 0x8000}, &(0x7f00000002c0)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000300)={0xc0, 0xa2, 0x2f, "deee47b9297cee74170ff5a1c6dea3a7615bed915c8b0af227e14b1b1651b79e8c300e4d8eac8dc19bc3a12ba6842a"}}) (async, rerun: 64) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000040)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ncm(0x0, 0x73, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x7f, 0xb0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "55f79428a7"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x401, 0xf50, 0x4, 0x2}, {0x6, 0x24, 0x1a, 0x1, 0x35}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x76, 0x60}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xb, 0x7, 0x4}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x200, 0x8a, 0x7, 0xe, 0x0, 0x8}, 0x1f1, &(0x7f0000000500)={0x5, 0xf, 0x1f1, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0xf4, 0x4, 0x6, 0xf00, 0xfff6, [0xc0c0, 0xc0, 0xc0, 0xc0]}, @generic={0xe7, 0x10, 0x1, "b1e48afe3b9c5a57a9d5f38579210ce1a9c1b9817848a5e55c192546bd34b998c0a2a1dc6687506b0373984cbbca8dccf0ae2930bbc692fb54d5fd95f578b53277300b4936c96f294712ab0cd497db0dd259782126664b70c1be13f6906ad7a9d35a3207f7d74701b75f547431d0bb7d67a577f91716f868e378454a75dd9acd486d01403c75e0d9ba9fd3c393b3b8bfdc255d820454ff85495305b5494d921d670db6281251a4b93e18dbebae16081d084c28d5e850aed56b15bd7837b41ac41cb49b309d3713d2cff47bb5a0c9d42cfd4f180c2689d05e80a17bce8b8be7fdaf8ba958"}, @generic={0xe3, 0x10, 0x1, "6365f380a68e3d7ac8c9ff05cc8f31e5f81a989c353a519ba523b33e5d32e0056fc8b37607d71eb6b75b5e275cf23f0935afdad5421a5cfc76cd3f3a0e03be5266b5db3f831f04b9d1e7240f3ea5a6beb328a076059115cd71456a1582878af6c1d409d8cd35e3d9fbf33ae44e380fd87c4adbf7fea746a7302f0cd79c1970e52d1b86b2808bb897c7ceb6f604ca7721996c8f23d6a5ed29a33d49f2020920cd172752c190189927394b08c30a7ab8d6101e2fd947ec9f60db2b6deea4ad0010a89f23f7c280f11746e64e69ef62f3461bf796eaedc7dc4a1571f46bc03bde9e"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x409}}, {0x60, &(0x7f0000000740)=@string={0x60, 0x3, "83fdb400739d80ec91ccecea05b746a1a6b157e02042f9e04c311e8f5c2832eebb825c10ac97384ba2ead687122e913ce17c4a482da268ba9ac6f699036000e955bb6584b60eec4e2004dfb3811211cdf2c0fd0b7d196385de0a814914d2"}}, {0x3a, &(0x7f00000007c0)=@string={0x3a, 0x3, "4b97c8525763a2a406a6ba566eb9b0b1d246740f52bb8dc86a74ae42bbe2f1296782bbbc58331e75564ae4ba41be88f9892c85b9b828beef"}}, {0x4f, &(0x7f0000000800)=@string={0x4f, 0x3, "602d1ae7b3465522671e1e1739b96a9d1733ec26397fd2ffd6a8f036399ec7ff9f1645cd5ac9f29c61d0f0a87450d5b6878c6deb2c0233c00dc6c7279b2facb7a3907a8048f751f588e9ef8de8"}}, {0xe0, &(0x7f0000000880)=@string={0xe0, 0x3, "17d775fd8f65c1f3610ed9d7e40586547b31b55d73f47ea1f5c1212ef6c6bb16b16cbf50c3dd6e9621ec704e0a4b56efffe9fe8850af085f83c2499b410dd96a98652db5e361208a3b845d7d444fb41830650d4a5603ea37fd096cd3557b9ef5843ab1b35e055a468eaf1101b48d9c7e4ce5082da50dddf26fa5a88a73c9ee1efb77cb3e578fd22b6ca40b72498854b1cb4a6f7bae60ed60b07ca8d2e123c052b9dddd8a93da0fea7ad47da7d6f94bf438d45e6ea016b59f8c2e10246baf14c6e2f626366659db39064327785f115bcb5b8c9c3e11e7cd47ee5a4cbb2552"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x41d}}, {0x27, &(0x7f0000000480)=@string={0x27, 0x3, "2b814598117abe788ec9fc8040acc289233986facca4f9627a098f683df5d3ff38481d9dd1"}}, {0x1b, &(0x7f0000000a00)=@string={0x1b, 0x3, "4fb7a584ecd140666f91a6fb4ca37c8f6431ab01dce105d39e"}}, {0xa1, &(0x7f0000000a40)=@string={0xa1, 0x3, "0d1cb7ecfd842ca8ae9ccb35e046073c623e4ac18fdb14fb0a5bff8e23e0c00941c74f45d12c38fe3454f5612f4f1b7dbfab36fc2ff01eb922ed4b00456b0088bb83cb7f71615fcbd87953f6f8d731a0efd24731936658a25b3ef35e6d27010ef13efc81ccceda792f4b4b2ea80e0489f97aa8b37ed29dae2b059ffaf9ecd7364926e4fab4dca9bb37de26d670eccad8b3dfee9dfbe78f75c9ba49ffb6eec2"}}]}) 1.918220658s ago: executing program 0 (id=3495): r0 = socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000140)=0x3, 0xe4, 0x4) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x185a7f, 0x197) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @random="8f4c1e94dcc0"}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x30}}, 0x0) r5 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x4000000000000009, &(0x7f00000000c0), 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x7f31, 0x7c5b, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="0131010000000000240012800e00010069703665727370616e000000100002800800040000004000040012"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.73032281s ago: executing program 2 (id=3496): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2000000000000141, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200f2ffffffffffffff000307"], 0x13) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x103042, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x20004080) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0xffffffffffffff9b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b1d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) timer_create(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) 1.667685692s ago: executing program 4 (id=3497): syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100002f123f409713bd00339d010203010902f7ff010000000009040000009ab77000480644d9aedd4267e183e26e0213112d10de35955e81df1b4592cad0f75944dfe42429bc03904327291f1a6a2ba15b63d41cbd6f41cda8b5620aa3673b5f01e53c862e72caf6eea55ec5fab65457d0561942571764118e65d3a33995cf4ee2547e807272a3ef33fbb86e860ace7987479c193b01aa74430048615e84eb0d3cb8f275469df61257028f"], 0x0) listen(0xffffffffffffffff, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000cc0)="5e09d209", 0x4}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @remote, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001080)='J', 0x1}], 0x1}}], 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='0', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) 1.392374908s ago: executing program 6 (id=3498): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r3, 0x0, 0x0, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d10, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) io_setup(0x6, &(0x7f0000000540)) close(r5) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x0, 0x4008032, 0xffffffffffffffff, 0x55b21000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f0000000140)={0x10000, 0x5, 0x0, 0x7, 0x200000000000000, 0x6}) 1.289670497s ago: executing program 0 (id=3499): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5c}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$sock(r8, 0x0, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004800010928bd700018dcdf250a000100", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28081}, 0x8000002) 1.183768632s ago: executing program 2 (id=3500): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000000)) openat$mice(0xffffffffffffff9c, 0x0, 0x101) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x1, &(0x7f0000000880)={0x77359400}, 0x0, 0x2) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x7fff) dup3(0xffffffffffffffff, r1, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)=0x20) ftruncate(0xffffffffffffffff, 0x1) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 278.356899ms ago: executing program 0 (id=3501): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000300)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r2) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x45c, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x14c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63b32a1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49020f92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fc007eb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f6b19ee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e59c3ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cf65bad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4923738}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c9912d7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9517dda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6145715d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5120e099}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5141a2d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c423e4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd368b2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4472f05e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b44f496}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5325da94}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2188825}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a340d66}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x225ff84f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a5cbed9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5db1e2fc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d0b2f6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dba2330}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb3e99ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e7707bf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6da95944}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ebca293}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71de4a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x705548e2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ee3200d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44547eae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21cb4181}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21863838}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x783ec2b9}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cc3420}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f69082b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26141a08}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a438801}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a42dc5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38b4cf3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ba5e5f5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9cac}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f5567c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e15edae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a12980d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4274435e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6673746b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29a422a1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56f5cc}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2418}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x131f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cb553b7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd93c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39bfa540}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2105295e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7195d71c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x659c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f1e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4099}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc56a}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a94}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72f3a0b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5955}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4374}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37528bba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x872c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6621d37a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1845}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x45c}, 0x1, 0x0, 0x0, 0x10}, 0x815) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x12, 0x4, &(0x7f0000000000)={0x6, 0x9}, 0x2) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="07060000000000000000270000000500310004000000080002"], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) 30.636606ms ago: executing program 2 (id=3502): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) read$msr(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070800000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x56, &(0x7f0000000440)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r6}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x20000800, 0x1000, 0x1}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x181, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xd, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000182000", @ANYRES32, @ANYBLOB="00000000ffffff1f950000000000000066ce326484bd63cd8e5e3592c12e683c597d9ce354c0f1ccfc140d4e77eac84dcf21ff17eb4cbddd2e0235eaa8105d21fb944cc77f8ebdd0a87548c27cc7af2cbfd50416a4b67f9b2d51317c5953866363af81d2b99b4c76bf13c061578c57c3079581ab849a88d6102b9633e020f82474076cbed9b69beae99ca8ccab80a7cdbcd4c8cb689c5c78bb29e6153e2e4878006f287cdc3b39ca93"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x94) 0s ago: executing program 0 (id=3503): r0 = syz_io_uring_setup(0x13f8, &(0x7f0000000280)={0x0, 0x8471, 0x80, 0x0, 0x2b9}, &(0x7f0000000300), &(0x7f00000003c0)) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000400)=r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r4, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000001c0)={'adq12b\x00', [0x7, 0x6, 0x7, 0x2, 0x8000, 0x1, 0x4, 0x7, 0x9, 0x3, 0x81, 0x1, 0x8, 0x3, 0xeb8, 0xffffffff, 0x3, 0x4, 0x2, 0x401, 0xf03, 0x0, 0x8, 0x9, 0x80000001, 0x89, 0xe, 0xffff, 0x3e3213c0, 0x7, 0x7, 0x2]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x4, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r7, 0x5) r8 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r8, 0x402, 0x8000003d) fcntl$setown(r8, 0x8, 0xffffffffffffffff) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000000c0)={0x3, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000100)={0x2}, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) kernel console output (not intermixed with test programs): 96] usb 1-1: SerialNumber: syz [ 1156.814786][ T30] audit: type=1400 audit(1768222835.196:641): avc: denied { bind } for pid=18561 comm="syz.5.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1159.363825][ T846] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1160.184052][ T5896] usb 1-1: USB disconnect, device number 41 [ 1160.813545][ T846] usb 3-1: device descriptor read/all, error -71 [ 1162.348607][T18609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2974'. [ 1162.364219][T18611] blktrace: Concurrent blktraces are not allowed on loop0 [ 1162.382690][ T30] audit: type=1400 audit(1768222840.786:642): avc: denied { setopt } for pid=18608 comm="syz.2.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1162.608173][T18617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2979'. [ 1162.945177][T18624] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2980'. [ 1162.968683][T18624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'. [ 1162.988860][T18624] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2980'. [ 1163.319467][T18582] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1163.650637][T18582] usb 3-1: config index 0 descriptor too short (expected 65527, got 18) [ 1163.682352][T18582] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=9d.33 [ 1163.697519][T18582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.744268][T18582] usb 3-1: Product: syz [ 1163.757855][T18582] usb 3-1: Manufacturer: syz [ 1163.762442][T18582] usb 3-1: SerialNumber: syz [ 1163.889122][T18582] usb 3-1: config 0 descriptor?? [ 1163.949858][T18582] usb 3-1: invalid MIDI EP [ 1163.963734][T18582] usb 3-1: snd-bcd2000: error during probing [ 1163.978952][T18582] snd-bcd2000 3-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 1164.642112][T18652] geneve2: entered promiscuous mode [ 1164.682444][T18652] netlink: 'syz.0.2988': attribute type 1 has an invalid length. [ 1164.781851][T18582] usb 3-1: USB disconnect, device number 28 [ 1165.993741][ T6238] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1166.234004][ T6435] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1166.243050][ T6238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.254164][ T6238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.313127][ T6238] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1166.328692][ T6238] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1166.339481][ T6238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.359523][ T6238] usb 6-1: config 0 descriptor?? [ 1166.674028][ T6435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.685249][ T6435] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1166.694458][ T6435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.901305][ T6435] usb 1-1: config 0 descriptor?? [ 1167.346279][T18684] gre1: entered promiscuous mode [ 1167.995157][ T6238] usbhid 6-1:0.0: can't add hid device: -71 [ 1168.001165][ T6238] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1168.102427][ T6238] usb 6-1: USB disconnect, device number 3 [ 1168.127940][ T6435] usbhid 1-1:0.0: can't add hid device: -71 [ 1168.136100][ T6435] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1168.147554][ T6435] usb 1-1: USB disconnect, device number 42 [ 1168.254709][T18696] overlayfs: failed to resolve './file0': -2 [ 1168.654959][ T30] audit: type=1400 audit(1768222847.066:643): avc: denied { write } for pid=18701 comm="syz.2.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1169.426548][T18709] Invalid source name [ 1169.438530][T18712] Invalid source name [ 1169.627673][T18716] FAULT_INJECTION: forcing a failure. [ 1169.627673][T18716] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.640719][T18716] CPU: 1 UID: 0 PID: 18716 Comm: syz.5.3006 Tainted: G L syzkaller #0 PREEMPT(full) [ 1169.640752][T18716] Tainted: [L]=SOFTLOCKUP [ 1169.640759][T18716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1169.640770][T18716] Call Trace: [ 1169.640776][T18716] [ 1169.640783][T18716] dump_stack_lvl+0x16c/0x1f0 [ 1169.640813][T18716] should_fail_ex+0x512/0x640 [ 1169.640846][T18716] should_failslab+0xc2/0x120 [ 1169.640872][T18716] kmem_cache_alloc_noprof+0x83/0x770 [ 1169.640891][T18716] ? lock_acquire+0x179/0x330 [ 1169.640912][T18716] ? skb_clone+0x190/0x3f0 [ 1169.640939][T18716] ? skb_clone+0x190/0x3f0 [ 1169.640957][T18716] skb_clone+0x190/0x3f0 [ 1169.640978][T18716] dev_queue_xmit_nit+0x25b/0xac0 [ 1169.641009][T18716] dev_hard_start_xmit+0x56b/0x6e0 [ 1169.641037][T18716] ? __sys_sendmsg+0x16d/0x220 [ 1169.641066][T18716] __dev_queue_xmit+0x6d7/0x46b0 [ 1169.641108][T18716] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1169.641155][T18716] ? __asan_memcpy+0x3c/0x60 [ 1169.641176][T18716] ? __asan_memcpy+0x3c/0x60 [ 1169.641195][T18716] ? __skb_clone+0x570/0x760 [ 1169.641218][T18716] netlink_deliver_tap+0xa87/0xd30 [ 1169.641248][T18716] netlink_unicast+0x64c/0x870 [ 1169.641276][T18716] ? __pfx_netlink_unicast+0x10/0x10 [ 1169.641310][T18716] netlink_sendmsg+0x8c8/0xdd0 [ 1169.641339][T18716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.641374][T18716] ____sys_sendmsg+0xa5d/0xc30 [ 1169.641400][T18716] ? copy_msghdr_from_user+0x10a/0x160 [ 1169.641419][T18716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1169.641457][T18716] ___sys_sendmsg+0x134/0x1d0 [ 1169.641479][T18716] ? __pfx____sys_sendmsg+0x10/0x10 [ 1169.641543][T18716] __sys_sendmsg+0x16d/0x220 [ 1169.641564][T18716] ? __pfx___sys_sendmsg+0x10/0x10 [ 1169.641601][T18716] do_syscall_64+0xcd/0xf80 [ 1169.641630][T18716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.641648][T18716] RIP: 0033:0x7fd4b4d8f749 [ 1169.641663][T18716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1169.641680][T18716] RSP: 002b:00007fd4b5ba9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.641698][T18716] RAX: ffffffffffffffda RBX: 00007fd4b4fe5fa0 RCX: 00007fd4b4d8f749 [ 1169.641711][T18716] RDX: 0000000020040000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1169.641721][T18716] RBP: 00007fd4b5ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.641731][T18716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.641741][T18716] R13: 00007fd4b4fe6038 R14: 00007fd4b4fe5fa0 R15: 00007fffd8ea0958 [ 1169.641768][T18716] [ 1169.744047][T18716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3006'. [ 1169.923854][T18716] hsr_slave_0: left promiscuous mode [ 1169.937352][T18716] hsr_slave_1: left promiscuous mode [ 1170.244569][T18720] blk_print_req_error: 55 callbacks suppressed [ 1170.244588][T18720] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1170.260279][T18720] buffer_io_error: 54 callbacks suppressed [ 1170.260293][T18720] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1170.273935][T18720] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1170.283416][T18720] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1170.291208][T18720] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1170.301617][T18720] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1170.334793][T18720] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1170.344331][T18720] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1170.352148][T18720] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1170.361789][T18720] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1170.369596][T18720] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1170.379068][T18720] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1170.386903][T18720] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1170.396427][T18720] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1170.405187][T18720] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1170.414850][T18720] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1170.422736][T18720] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1170.432360][T18720] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1170.440264][T18720] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1170.450033][T18720] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1170.458503][T18720] ldm_validate_partition_table(): Disk read failed. [ 1170.465622][T18720] Dev nbd1: unable to read RDB block 0 [ 1170.471710][T18720] nbd1: unable to read partition table [ 1170.477566][T18720] befs: (nbd1): unable to read superblock [ 1170.648397][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'. [ 1170.657726][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'. [ 1170.666752][T18723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1171.358396][T18750] overlayfs: failed to resolve './file0': -2 [ 1171.656921][T18757] vivid-003: disconnect [ 1171.665187][T18757] vivid-003: reconnect [ 1172.741137][ T30] audit: type=1326 audit(1768222851.136:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18767 comm="syz.1.3018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f659a9865e7 code=0x0 [ 1173.573755][ T5896] IPVS: starting estimator thread 0... [ 1173.694377][T18783] IPVS: using max 76 ests per chain, 182400 per kthread [ 1176.826277][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.832540][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.369674][T18813] JFS: discard option not supported on device [ 1177.376108][T18813] Mount JFS Failure: -22 [ 1177.380330][T18813] jfs_mount failed w/return code = -22 [ 1177.411563][T18816] overlayfs: failed to resolve './file0': -2 [ 1178.257119][T18836] netlink: 512 bytes leftover after parsing attributes in process `syz.5.3034'. [ 1179.781214][T18852] blktrace: Concurrent blktraces are not allowed on loop8 [ 1180.521757][T18856] netlink: 'syz.5.3038': attribute type 1 has an invalid length. [ 1180.522502][T18855] geneve2: entered promiscuous mode [ 1180.912372][T18866] overlayfs: failed to get inode (-116) [ 1180.919915][T18866] overlayfs: failed to get inode (-116) [ 1181.358016][T18872] FAULT_INJECTION: forcing a failure. [ 1181.358016][T18872] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.370908][T18872] CPU: 0 UID: 0 PID: 18872 Comm: syz.0.3042 Tainted: G L syzkaller #0 PREEMPT(full) [ 1181.370927][T18872] Tainted: [L]=SOFTLOCKUP [ 1181.370930][T18872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1181.370937][T18872] Call Trace: [ 1181.370941][T18872] [ 1181.370945][T18872] dump_stack_lvl+0x16c/0x1f0 [ 1181.370964][T18872] should_fail_ex+0x512/0x640 [ 1181.370981][T18872] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1181.371000][T18872] should_failslab+0xc2/0x120 [ 1181.371015][T18872] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1181.371026][T18872] ? __alloc_skb+0x156/0x410 [ 1181.371039][T18872] ? __alloc_skb+0x156/0x410 [ 1181.371048][T18872] __alloc_skb+0x156/0x410 [ 1181.371056][T18872] ? __alloc_skb+0x35d/0x410 [ 1181.371065][T18872] ? __pfx___alloc_skb+0x10/0x10 [ 1181.371074][T18872] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1181.371089][T18872] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1181.371107][T18872] netlink_alloc_large_skb+0x69/0x140 [ 1181.371124][T18872] netlink_sendmsg+0x698/0xdd0 [ 1181.371140][T18872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1181.371159][T18872] ____sys_sendmsg+0xa5d/0xc30 [ 1181.371175][T18872] ? copy_msghdr_from_user+0x10a/0x160 [ 1181.371187][T18872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1181.371208][T18872] ___sys_sendmsg+0x134/0x1d0 [ 1181.371220][T18872] ? __pfx____sys_sendmsg+0x10/0x10 [ 1181.371246][T18872] __sys_sendmsg+0x16d/0x220 [ 1181.371258][T18872] ? __pfx___sys_sendmsg+0x10/0x10 [ 1181.371278][T18872] do_syscall_64+0xcd/0xf80 [ 1181.371294][T18872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.371306][T18872] RIP: 0033:0x7f8b3ad8f749 [ 1181.371316][T18872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.371327][T18872] RSP: 002b:00007f8b3bc0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1181.371337][T18872] RAX: ffffffffffffffda RBX: 00007f8b3afe6180 RCX: 00007f8b3ad8f749 [ 1181.371344][T18872] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000006 [ 1181.371350][T18872] RBP: 00007f8b3bc0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.371357][T18872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.371362][T18872] R13: 00007f8b3afe6218 R14: 00007f8b3afe6180 R15: 00007ffda32dbe58 [ 1181.371376][T18872] [ 1181.985466][ T6238] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1182.149899][ T6238] usb 6-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 1182.301925][ T6238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.327985][ T6238] ums-cypress 6-1:1.0: USB Mass Storage device detected [ 1182.552525][T18664] usb 6-1: USB disconnect, device number 4 [ 1182.657785][T18886] netlink: 512 bytes leftover after parsing attributes in process `syz.4.3046'. [ 1184.263820][ T5867] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1185.509658][ T30] audit: type=1804 audit(1768222863.796:645): pid=18903 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3050" name="/newroot/599/file0" dev="tmpfs" ino=3342 res=1 errno=0 [ 1185.608303][ T5867] usb 6-1: config 0 has an invalid interface number: 183 but max is 0 [ 1185.616615][ T5867] usb 6-1: config 0 has no interface number 0 [ 1185.622726][ T5867] usb 6-1: config 0 interface 183 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1185.633808][ T5867] usb 6-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=9d.94 [ 1185.642853][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.643589][T10685] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1185.660129][ T5867] usb 6-1: config 0 descriptor?? [ 1185.663185][T10685] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1185.676067][T10685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1185.686065][T10685] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1185.695115][T10685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1185.695678][T18894] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1185.710901][ T5867] pl2303 6-1:0.183: required endpoints missing [ 1185.876422][T18905] lo speed is unknown, defaulting to 1000 [ 1186.254929][T18905] ip6_vti0 speed is unknown, defaulting to 1000 [ 1187.392177][ T5813] usb 6-1: USB disconnect, device number 5 [ 1187.597480][T18905] chnl_net:caif_netlink_parms(): no params data found [ 1188.195641][T10685] Bluetooth: hci1: command tx timeout [ 1188.252343][T18935] befs: (nbd2): unable to read superblock [ 1188.965383][ T30] audit: type=1804 audit(1768222866.986:646): pid=18939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3057" name="/newroot/23/file0" dev="tmpfs" ino=143 res=1 errno=0 [ 1189.109403][T18905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.125022][T18905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.144612][T18905] bridge_slave_0: entered allmulticast mode [ 1189.152161][T18905] bridge_slave_0: entered promiscuous mode [ 1189.292896][T18905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.339543][T18905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.380571][T18905] bridge_slave_1: entered allmulticast mode [ 1189.414252][T18905] bridge_slave_1: entered promiscuous mode [ 1189.441671][T18949] overlayfs: failed to get inode (-116) [ 1189.447965][T18949] overlayfs: failed to get inode (-116) [ 1189.528668][T18905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.666620][T18905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.826717][T18905] team0: Port device team_slave_0 added [ 1189.853518][T18905] team0: Port device team_slave_1 added [ 1190.035623][T18905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.042652][T18905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.073894][T18905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.190704][T18905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.197819][T18905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.233983][T18905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.256901][T10685] Bluetooth: hci1: command tx timeout [ 1190.258191][T18954] blktrace: Concurrent blktraces are not allowed on loop4 [ 1190.475690][T18905] hsr_slave_0: entered promiscuous mode [ 1190.488674][T18905] hsr_slave_1: entered promiscuous mode [ 1190.501104][T18905] debugfs: 'hsr0' already exists in 'hsr' [ 1190.512091][T18905] Cannot create hsr debugfs directory [ 1190.825078][T18905] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.977569][T18971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3062'. [ 1191.026850][T18970] JFS: discard option not supported on device [ 1191.033225][T18970] Mount JFS Failure: -22 [ 1191.038544][T18970] jfs_mount failed w/return code = -22 [ 1191.083482][T18905] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.157001][T18905] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.564790][T18905] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.334697][T18905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1192.343769][T10685] Bluetooth: hci1: command tx timeout [ 1193.065527][T18905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1193.087581][T18905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1193.102186][T18905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1193.639166][T19012] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3072'. [ 1193.648256][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3072'. [ 1193.657414][T19012] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3072'. [ 1193.759873][T18905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.799295][T18905] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.948906][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3075'. [ 1193.988745][T10527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.995869][T10527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.039881][ T6509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.047052][ T6509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.076443][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3074'. [ 1194.414063][T10685] Bluetooth: hci1: command tx timeout [ 1194.422082][T18905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1194.439760][T19020] netlink: 'syz.2.3070': attribute type 10 has an invalid length. [ 1194.452566][T19020] team0: Failed to send options change via netlink (err -105) [ 1194.463242][T19020] team0: Port device dummy0 added [ 1194.523396][T18905] veth0_vlan: entered promiscuous mode [ 1194.538646][T18905] veth1_vlan: entered promiscuous mode [ 1194.582662][T18905] veth0_macvtap: entered promiscuous mode [ 1194.592673][T18905] veth1_macvtap: entered promiscuous mode [ 1194.715939][T18905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.759204][T18905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.789708][ T423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.799870][ T423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.816003][ T423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.834446][ T423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.153230][ T6435] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1195.193949][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3078'. [ 1195.305452][ T6435] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1195.351682][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.359773][ T6435] usb 6-1: config 1 has no interface number 1 [ 1195.366046][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.375072][ T6435] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1195.392889][ T6435] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1195.402348][ T6435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.410625][ T6435] usb 6-1: Product: syz [ 1195.417498][ T6435] usb 6-1: Manufacturer: syz [ 1195.423718][ T6435] usb 6-1: SerialNumber: syz [ 1195.460778][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.470427][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.299680][ T6435] usb 6-1: found format II with max.bitrate = 26774, frame size=1 [ 1196.324754][ T6435] usb 6-1: found format II with max.bitrate = 26774, frame size=1 [ 1196.338399][ T6435] usb 6-1: failed to enable PITCH for EP 0x82 [ 1196.370870][ T6435] usb 6-1: USB disconnect, device number 6 [ 1197.038381][T19065] blk_print_req_error: 55 callbacks suppressed [ 1197.042568][T19065] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1197.062094][T19065] buffer_io_error: 54 callbacks suppressed [ 1197.062114][T19065] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1197.106191][T19065] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1197.115950][T19065] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1197.124040][T19065] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1197.137910][T19065] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1197.178365][T19065] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1198.197941][T19065] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1198.427508][ T30] audit: type=1400 audit(1768222876.826:647): avc: denied { read } for pid=19080 comm="syz.5.3085" name="file0" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1198.691732][T19065] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1198.752140][T19065] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1198.790994][T19069] veth0_vlan: entered allmulticast mode [ 1198.969396][T19065] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1199.416846][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1199.423131][T19065] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1199.426182][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1199.442545][T19092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1199.463817][T19065] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1199.569439][T19065] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1199.729438][T19065] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1199.739292][T19065] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1200.206389][T19065] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1200.543732][T19065] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1200.571078][T19065] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1200.767707][T19065] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1200.854957][T19065] ldm_validate_partition_table(): Disk read failed. [ 1200.884489][T19065] Dev nbd1: unable to read RDB block 0 [ 1200.904603][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3092'. [ 1200.923318][T19065] nbd1: unable to read partition table [ 1201.127555][ T30] audit: type=1326 audit(1768222879.536:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.5.3094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd4b4d865e7 code=0x0 [ 1201.163518][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'. [ 1201.172704][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'. [ 1201.181594][T19118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1201.228403][T13662] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1201.239021][T13662] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1201.344041][T13662] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1201.352534][T13662] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1201.360120][T13662] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1201.603933][ T6068] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1201.934244][T19121] lo speed is unknown, defaulting to 1000 [ 1201.959298][T19121] ip6_vti0 speed is unknown, defaulting to 1000 [ 1202.048436][ T6068] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1202.067777][ T6068] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1202.094780][ T6068] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.130291][ T6068] usb 2-1: config 220 has no interface number 2 [ 1202.150521][ T6068] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1202.166416][ T6068] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1202.195746][ T6068] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1202.212967][ T6068] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1202.225980][ T6068] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1202.243803][ T6068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.261173][ T6068] usb 2-1: Product: syz [ 1202.269831][ T6068] usb 2-1: Manufacturer: syz [ 1202.279959][ T6068] usb 2-1: SerialNumber: syz [ 1202.563073][T19136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.582073][T19136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.609978][ T6068] usb 2-1: selecting invalid altsetting 0 [ 1202.631110][ T6068] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1202.695289][ T6068] uvcvideo 2-1:220.0: No valid video chain found. [ 1202.795838][ T6068] usb 2-1: selecting invalid altsetting 0 [ 1202.959685][ T6068] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1203.064966][ T6068] usb 2-1: USB disconnect, device number 42 [ 1203.312816][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.389618][T19121] chnl_net:caif_netlink_parms(): no params data found [ 1203.417481][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.454421][T13662] Bluetooth: hci3: command tx timeout [ 1203.530620][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.635355][T19166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3104'. [ 1203.950780][ T13] netdevsim netdevsim4 ªªªªª» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.032778][T19121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.048789][T19121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.069635][T19121] bridge_slave_0: entered allmulticast mode [ 1204.084650][T19121] bridge_slave_0: entered promiscuous mode [ 1204.206006][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3106'. [ 1204.217597][T19121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.227067][T19121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.234598][T19121] bridge_slave_1: entered allmulticast mode [ 1204.255788][T19121] bridge_slave_1: entered promiscuous mode [ 1204.306251][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3107'. [ 1204.594012][T19121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.670230][T19121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.791020][T19121] team0: Port device team_slave_0 added [ 1204.829129][T19121] team0: Port device team_slave_1 added [ 1204.864741][ T13] bridge_slave_1: left allmulticast mode [ 1204.871812][ T13] bridge_slave_1: left promiscuous mode [ 1204.881498][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.017874][ T13] bridge_slave_0: left allmulticast mode [ 1205.033450][ T13] bridge_slave_0: left promiscuous mode [ 1205.047824][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.537946][T13662] Bluetooth: hci3: command tx timeout [ 1205.644403][T19200] JFS: discard option not supported on device [ 1205.650793][T19200] Mount JFS Failure: -22 [ 1205.655045][T19200] jfs_mount failed w/return code = -22 [ 1205.793817][ T5867] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1206.044423][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 1206.084447][ T5867] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1206.098379][ T5867] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1206.107436][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1206.115474][ T5867] usb 1-1: SerialNumber: syz [ 1206.643821][T18304] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1206.809617][T18304] usb 6-1: config 0 has an invalid interface number: 183 but max is 0 [ 1206.818260][T18304] usb 6-1: config 0 has no interface number 0 [ 1206.824525][T18304] usb 6-1: config 0 interface 183 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1206.844871][T18304] usb 6-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=9d.94 [ 1206.858008][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1206.862964][T18304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.880520][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1206.888274][T18304] usb 6-1: config 0 descriptor?? [ 1206.900091][T19208] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1206.911231][T18304] pl2303 6-1:0.183: required endpoints missing [ 1207.003321][ T13] bond0 (unregistering): Released all slaves [ 1207.020329][ T13] º÷”I (unregistering): Released all slaves [ 1207.052321][T19121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.081274][T19121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.174864][T19121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.217885][ T13] IPVS: stopping master sync thread 6366 ... [ 1207.260317][T19121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1207.274243][T19121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.301178][T19121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.509118][ T13] hsr_slave_0: left promiscuous mode [ 1207.525324][ T13] hsr_slave_1: left promiscuous mode [ 1207.537874][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.550615][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.562400][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.579951][ T13] veth1_macvtap: left promiscuous mode [ 1207.585813][ T13] veth0_macvtap: left promiscuous mode [ 1207.613978][T13662] Bluetooth: hci3: command tx timeout [ 1207.825869][T19216] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1207.834446][ T5813] IPVS: starting estimator thread 0... [ 1207.855015][ T30] audit: type=1400 audit(1768222886.266:649): avc: denied { read } for pid=19215 comm="syz.2.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1207.910735][ T30] audit: type=1400 audit(1768222886.316:650): avc: denied { ioctl } for pid=19215 comm="syz.2.3116" path="socket:[60481]" dev="sockfs" ino=60481 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1207.935561][T19217] IPVS: using max 76 ests per chain, 182400 per kthread [ 1207.962114][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1207.993978][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1208.232002][T19121] hsr_slave_0: entered promiscuous mode [ 1208.238868][T19121] hsr_slave_1: entered promiscuous mode [ 1208.245628][T19121] debugfs: 'hsr0' already exists in 'hsr' [ 1208.251400][T19121] Cannot create hsr debugfs directory [ 1208.257213][T18304] lo speed is unknown, defaulting to 1000 [ 1208.263078][T18304] infiniband syz0: ib_query_port failed (-19) [ 1208.603188][ T13] IPVS: stop unused estimator thread 0... [ 1208.692104][ T5813] usb 1-1: USB disconnect, device number 43 [ 1208.773633][T19121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1208.783047][T19121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1208.797585][T19121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1208.809644][T19121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1208.951717][T19121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.955614][ T5813] usb 6-1: USB disconnect, device number 7 [ 1208.978623][T19121] 8021q: adding VLAN 0 to HW filter on device team0 [ 1209.045392][ T6509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.052497][ T6509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.132397][ T6509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.139513][ T6509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.694185][T13662] Bluetooth: hci3: command tx timeout [ 1209.925151][T19121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1210.283822][T19121] veth0_vlan: entered promiscuous mode [ 1210.312325][T19121] veth1_vlan: entered promiscuous mode [ 1210.476283][T19121] veth0_macvtap: entered promiscuous mode [ 1210.504043][T19121] veth1_macvtap: entered promiscuous mode [ 1211.119694][T19121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.146597][T19121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.229735][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.239826][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.248992][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.268170][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.965336][T19260] sch_tbf: burst 19872 is lower than device lo mtu (65525) ! [ 1212.001669][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.043818][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.111782][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.123898][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.184223][ T5813] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1213.551580][ T5813] usb 3-1: config index 0 descriptor too short (expected 65527, got 18) [ 1213.585201][ T5813] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=9d.33 [ 1213.597849][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.608495][ T5813] usb 3-1: Product: syz [ 1213.613283][ T5813] usb 3-1: Manufacturer: syz [ 1213.620628][ T5813] usb 3-1: SerialNumber: syz [ 1213.629033][ T5813] usb 3-1: config 0 descriptor?? [ 1213.645302][ T5813] usb 3-1: invalid MIDI EP [ 1213.649820][ T5813] usb 3-1: snd-bcd2000: error during probing [ 1213.657252][ T5813] snd-bcd2000 3-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 1214.372437][ T30] audit: type=1326 audit(1768222892.776:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19293 comm="syz.5.3132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd4b4d865e7 code=0x0 [ 1214.419424][ T6435] usb 3-1: USB disconnect, device number 29 [ 1215.420645][ T30] audit: type=1400 audit(1768222893.826:652): avc: denied { load_policy } for pid=19304 comm="syz.4.3136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1215.443881][T19305] SELinux: failed to load policy [ 1215.453071][ T30] audit: type=1400 audit(1768222893.856:653): avc: denied { map } for pid=19304 comm="syz.4.3136" path="socket:[60965]" dev="sockfs" ino=60965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1215.478557][ T30] audit: type=1400 audit(1768222893.886:654): avc: denied { read } for pid=19304 comm="syz.4.3136" path="socket:[60965]" dev="sockfs" ino=60965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1215.501892][ T30] audit: type=1400 audit(1768222893.886:655): avc: denied { getopt } for pid=19304 comm="syz.4.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1215.503254][T19312] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1215.664860][T18571] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1215.933750][T18571] usb 1-1: Using ep0 maxpacket: 32 [ 1215.940582][T18571] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1215.951106][T18571] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1215.972136][T18571] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1215.993746][T18571] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1216.018053][T18571] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1216.147663][T18571] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1216.157274][T18571] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1216.166086][T18571] usb 1-1: Product: syz [ 1216.170345][T18571] usb 1-1: Manufacturer: syz [ 1216.177308][T18571] usb 1-1: SerialNumber: syz [ 1216.184107][T18571] usb 1-1: config 0 descriptor?? [ 1216.191704][T18571] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1216.202534][T18571] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1216.657913][ T6435] usb 1-1: USB disconnect, device number 44 [ 1216.671057][ T6435] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1217.438567][T19333] netlink: 512 bytes leftover after parsing attributes in process `syz.4.3141'. [ 1218.807775][ T30] audit: type=1326 audit(1768222897.216:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19340 comm="syz.2.3144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f55e69865e7 code=0x0 [ 1219.011713][T10685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1219.022977][T10685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1219.033195][T10685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1219.046870][T10685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1219.229670][T10685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1220.408943][T19345] ip6_vti0 speed is unknown, defaulting to 1000 [ 1220.579873][T19362] tmpfs: Group quota block hardlimit too large. [ 1220.783892][ T6435] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1220.856088][T18571] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1221.013869][ T6435] usb 5-1: Using ep0 maxpacket: 32 [ 1221.038542][T18571] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1221.076040][ T6435] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1221.165352][T18571] usb 6-1: config 1 has no interface number 1 [ 1221.199786][ T6435] usb 5-1: config 0 has no interface number 0 [ 1221.217459][T18571] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1221.237766][ T6435] usb 5-1: config 0 interface 188 altsetting 0 endpoint 0x8D has invalid maxpacket 11415, setting to 1024 [ 1221.286012][ T6435] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 1221.297974][T18571] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1221.324013][T18571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.337930][ T6435] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1221.357134][T19345] chnl_net:caif_netlink_parms(): no params data found [ 1221.365003][T18571] usb 6-1: Product: syz [ 1221.369158][T18571] usb 6-1: Manufacturer: syz [ 1221.373864][T10685] Bluetooth: hci0: command tx timeout [ 1221.383790][ T6435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.391815][ T6435] usb 5-1: Product: syz [ 1221.398548][T18571] usb 6-1: SerialNumber: syz [ 1221.410700][ T6435] usb 5-1: Manufacturer: syz [ 1221.423751][ T6435] usb 5-1: SerialNumber: syz [ 1221.436198][ T6435] usb 5-1: config 0 descriptor?? [ 1221.455540][T19357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1221.523957][ T6435] asix 5-1:0.188: probe with driver asix failed with error -22 [ 1221.565155][T19376] netlink: 512 bytes leftover after parsing attributes in process `syz.2.3151'. [ 1221.778992][T19345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.779594][T18571] usb 6-1: found format II with max.bitrate = 26774, frame size=1 [ 1222.228322][T18571] usb 6-1: found format II with max.bitrate = 26774, frame size=1 [ 1222.255648][T18571] usb 6-1: failed to enable PITCH for EP 0x82 [ 1222.258911][T19345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.273370][T19345] bridge_slave_0: entered allmulticast mode [ 1222.288443][T19345] bridge_slave_0: entered promiscuous mode [ 1222.300103][T19345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.307388][T19345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.314820][T19345] bridge_slave_1: entered allmulticast mode [ 1222.324305][T19345] bridge_slave_1: entered promiscuous mode [ 1222.404457][T18571] usb 6-1: USB disconnect, device number 8 [ 1222.627822][T19345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1222.657033][T19345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.679603][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3152'. [ 1222.688887][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3152'. [ 1222.697899][T19384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1222.752739][T19345] team0: Port device team_slave_0 added [ 1222.760443][ T30] audit: type=1400 audit(1768222901.126:657): avc: denied { set_context_mgr } for pid=19355 comm="syz.4.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1222.783514][T19345] team0: Port device team_slave_1 added [ 1222.817479][T19345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.825457][T19345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.881120][T19345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.993984][T19345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.029936][T19345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.279547][T19345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.453894][T10685] Bluetooth: hci0: command tx timeout [ 1223.491268][T19345] hsr_slave_0: entered promiscuous mode [ 1223.498563][T19345] hsr_slave_1: entered promiscuous mode [ 1223.592981][T19345] debugfs: 'hsr0' already exists in 'hsr' [ 1223.686032][T19345] Cannot create hsr debugfs directory [ 1224.275728][T19345] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1224.287724][T19345] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1224.297363][T19345] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1224.307663][T19345] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1224.494863][T18582] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1224.526872][T19345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.570909][T19345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.588076][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.595176][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.655863][T18582] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.669107][T18582] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1224.681558][T18582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.685086][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.696701][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.728676][T18582] usb 6-1: config 0 descriptor?? [ 1225.890938][T13662] Bluetooth: hci0: command tx timeout [ 1225.991889][ T48] usb 5-1: USB disconnect, device number 36 [ 1226.477894][T19433] netlink: 512 bytes leftover after parsing attributes in process `syz.4.3161'. [ 1226.530321][T19423] overlayfs: failed lookup in lower (newroot/63, name='file0', err=-40): overlapping layers [ 1226.712923][T19345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.287346][T19442] JFS: discard option not supported on device [ 1227.294133][T19442] Mount JFS Failure: -22 [ 1227.298404][T19442] jfs_mount failed w/return code = -22 [ 1227.380929][T18582] usbhid 6-1:0.0: can't add hid device: -71 [ 1227.408085][T18582] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1227.447739][T18582] usb 6-1: USB disconnect, device number 9 [ 1227.726071][T19345] veth0_vlan: entered promiscuous mode [ 1227.741236][T19345] veth1_vlan: entered promiscuous mode [ 1227.807065][T19345] veth0_macvtap: entered promiscuous mode [ 1227.819733][T19345] veth1_macvtap: entered promiscuous mode [ 1227.850660][T19345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.865867][T19345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.888245][T11833] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.901274][T11833] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.923895][T18582] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1227.934490][T13662] Bluetooth: hci0: command tx timeout [ 1227.944418][T11833] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.980154][T11833] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.707608][T18582] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.749316][T18582] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1228.759268][T18582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.769674][T18582] usb 1-1: config 0 descriptor?? [ 1228.779963][T18582] pwc: Askey VC010 type 2 USB webcam detected. [ 1228.956015][T11833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.376880][T18582] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1229.383779][T11833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.422032][ T2092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.430811][ T2092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.653038][T18582] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1229.662172][T18582] pwc: recv_control_msg error -71 req 04 val 1000 [ 1229.670220][T18582] pwc: recv_control_msg error -71 req 04 val 1300 [ 1229.678099][T18582] pwc: recv_control_msg error -71 req 04 val 1400 [ 1229.685956][T18582] pwc: recv_control_msg error -71 req 02 val 2000 [ 1229.717488][T18582] pwc: recv_control_msg error -71 req 02 val 2100 [ 1229.835452][T18582] pwc: recv_control_msg error -71 req 04 val 1500 [ 1229.947073][T18582] pwc: recv_control_msg error -71 req 02 val 2500 [ 1231.059299][T18582] pwc: recv_control_msg error -71 req 02 val 2400 [ 1231.067604][T18582] pwc: recv_control_msg error -71 req 02 val 2600 [ 1231.074485][T18582] pwc: recv_control_msg error -71 req 02 val 2900 [ 1231.081270][T18582] pwc: recv_control_msg error -71 req 02 val 2800 [ 1231.088375][T18582] pwc: recv_control_msg error -71 req 04 val 1100 [ 1231.095235][T18582] pwc: recv_control_msg error -71 req 04 val 1200 [ 1231.102923][T18582] pwc: Registered as video103. [ 1231.117339][T18582] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input47 [ 1231.132384][T18582] usb 1-1: USB disconnect, device number 45 [ 1232.454992][T19490] befs: (nbd4): unable to read superblock [ 1233.284070][T18304] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1233.483710][T10894] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1233.508945][T18304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.528109][T18304] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1233.541723][T18304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.559486][T18304] usb 6-1: config 0 descriptor?? [ 1233.695560][T10894] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1233.723853][T10894] usb 5-1: config 1 has no interface number 1 [ 1233.730020][T10894] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1233.878574][T10894] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1233.897362][T10894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.928139][T10894] usb 5-1: Product: syz [ 1233.941056][T10894] usb 5-1: Manufacturer: syz [ 1233.958084][T10894] usb 5-1: SerialNumber: syz [ 1234.215051][T10894] usb 5-1: found format II with max.bitrate = 26774, frame size=1 [ 1234.252667][T10894] usb 5-1: found format II with max.bitrate = 26774, frame size=1 [ 1234.444073][T10894] usb 5-1: failed to enable PITCH for EP 0x82 [ 1234.611406][T10894] usb 5-1: USB disconnect, device number 37 [ 1234.627897][T18304] usbhid 6-1:0.0: can't add hid device: -71 [ 1234.638803][T18304] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1234.694275][T18304] usb 6-1: USB disconnect, device number 10 [ 1235.042955][T19530] overlayfs: failed lookup in lower (newroot/2, name='file0', err=-40): overlapping layers [ 1235.289454][T19532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3178'. [ 1236.333571][T19536] veth0_vlan: entered allmulticast mode [ 1236.471648][T19542] block nbd5: not configured, cannot reconfigure [ 1236.793409][T19546] block nbd0: Dead connection, failed to find a fallback [ 1236.800569][T19546] block nbd0: shutting down sockets [ 1236.805827][T19546] blk_print_req_error: 54 callbacks suppressed [ 1236.805854][T19546] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1236.821542][T19546] buffer_io_error: 54 callbacks suppressed [ 1236.821570][T19546] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1237.044990][T19546] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1237.054645][T19546] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1237.062840][T19546] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1237.073030][T19546] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1237.081652][T19546] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1237.091256][T19546] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1237.113107][T19546] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1237.122760][T19546] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1237.131000][T19546] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1237.140625][T19546] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1237.148559][T19546] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1237.158151][T19546] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1237.166091][T19546] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1237.176824][T19546] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1237.184633][T19546] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1237.194166][T19546] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1237.202020][T19546] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1237.211544][T19546] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1237.219866][T19546] ldm_validate_partition_table(): Disk read failed. [ 1237.226887][T19546] Dev nbd0: unable to read RDB block 0 [ 1237.233718][T19546] nbd0: unable to read partition table [ 1237.239598][T19546] befs: (nbd0): unable to read superblock [ 1237.645114][ T6435] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1237.820057][ T6435] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.901017][T19567] befs: (nbd4): unable to read superblock [ 1237.934015][ T6435] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1237.943332][ T6435] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.961899][ T6435] usb 6-1: config 0 descriptor?? [ 1238.262442][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.311941][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.313208][ T6435] pwc: Askey VC010 type 2 USB webcam detected. [ 1238.663672][ T6435] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1239.494499][ T6435] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1239.700557][ T6435] pwc: recv_control_msg error -71 req 04 val 1000 [ 1239.734093][ T6435] pwc: recv_control_msg error -71 req 04 val 1300 [ 1239.754037][ T6435] pwc: recv_control_msg error -71 req 04 val 1400 [ 1239.771027][ T6435] pwc: recv_control_msg error -71 req 02 val 2000 [ 1239.791273][ T6435] pwc: recv_control_msg error -71 req 02 val 2100 [ 1239.933622][ T6435] pwc: recv_control_msg error -71 req 04 val 1500 [ 1239.940369][ T6435] pwc: recv_control_msg error -71 req 02 val 2500 [ 1239.957669][ T6435] pwc: recv_control_msg error -71 req 02 val 2400 [ 1240.484029][ T6435] pwc: recv_control_msg error -71 req 02 val 2600 [ 1240.515275][ T6435] pwc: recv_control_msg error -71 req 02 val 2900 [ 1240.523818][ T6435] pwc: recv_control_msg error -71 req 02 val 2800 [ 1240.555179][ T6435] pwc: recv_control_msg error -71 req 04 val 1100 [ 1240.557230][T19583] geneve2: entered promiscuous mode [ 1240.562216][ T6435] pwc: recv_control_msg error -71 req 04 val 1200 [ 1240.579315][ T6435] pwc: Registered as video103. [ 1240.609073][ T6435] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input48 [ 1240.610462][ T7006] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1240.624298][ T6435] usb 6-1: USB disconnect, device number 11 [ 1240.746909][T19587] netlink: 'syz.4.3191': attribute type 1 has an invalid length. [ 1241.753818][ T7006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.767897][ T7006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.790655][ T7006] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1241.865610][ T7006] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1241.890058][ T7006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.127598][ T7006] usb 7-1: config 0 descriptor?? [ 1243.209681][T19602] befs: (nbd2): unable to read superblock [ 1243.693964][ T7006] usbhid 7-1:0.0: can't add hid device: -71 [ 1243.701136][ T7006] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1243.723997][ T7006] usb 7-1: USB disconnect, device number 2 [ 1244.142147][T18664] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1244.305056][T19614] can0: slcan on ttyS3. [ 1244.704865][T19614] can0 (unregistered): slcan off ttyS3. [ 1244.718096][T19615] can0: slcan on ttyS3. [ 1244.741246][T18664] usb 1-1: config index 0 descriptor too short (expected 65527, got 18) [ 1244.787124][T18664] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=9d.33 [ 1244.821287][T18664] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.885868][T18664] usb 1-1: Product: syz [ 1244.894302][T18664] usb 1-1: Manufacturer: syz [ 1244.894734][T19607] can0 (unregistered): slcan off ttyS3. [ 1244.900243][T18664] usb 1-1: SerialNumber: syz [ 1244.921089][T18664] usb 1-1: config 0 descriptor?? [ 1244.935955][T18664] usb 1-1: invalid MIDI EP [ 1244.974517][ T6435] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1245.032240][T18664] usb 1-1: snd-bcd2000: error during probing [ 1245.509434][ T6435] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1245.614199][ T5813] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1245.695159][T10685] Bluetooth: hci6: command 0x0406 tx timeout [ 1245.880899][T18664] snd-bcd2000 1-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 1245.889581][ T6435] usb 6-1: config 1 has no interface number 1 [ 1245.895205][ T5813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.897495][ T6435] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1246.019586][T19633] can0: slcan on ttyS3. [ 1246.354311][ T6435] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1246.362062][ T5813] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1246.363573][ T6435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.380557][ T6435] usb 6-1: Product: syz [ 1246.386258][ T6435] usb 6-1: Manufacturer: syz [ 1246.390887][ T6435] usb 6-1: SerialNumber: syz [ 1246.397634][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.410301][T19491] usb 1-1: USB disconnect, device number 46 [ 1246.425177][T19633] can0 (unregistered): slcan off ttyS3. [ 1246.435733][T19634] can0: slcan on ttyS3. [ 1246.457310][ T5813] usb 3-1: config 0 descriptor?? [ 1246.468232][ T5813] pwc: Askey VC010 type 2 USB webcam detected. [ 1246.618711][ T6435] usb 6-1: found format II with max.bitrate = 26774, frame size=1 [ 1246.645985][T19630] can0 (unregistered): slcan off ttyS3. [ 1246.646064][ T6435] usb 6-1: found format II with max.bitrate = 26774, frame size=1 [ 1246.676500][ T6435] usb 6-1: failed to enable PITCH for EP 0x82 [ 1246.715197][ T6435] usb 6-1: USB disconnect, device number 12 [ 1246.926936][ T5813] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1246.933876][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3204'. [ 1246.953247][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3204'. [ 1246.973615][T19642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1247.098077][T19643] can0: slcan on ttyS3. [ 1247.379239][ T5813] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1247.424944][ T5813] pwc: recv_control_msg error -71 req 04 val 1000 [ 1247.432534][ T5813] pwc: recv_control_msg error -71 req 04 val 1300 [ 1247.442030][T19643] can0 (unregistered): slcan off ttyS3. [ 1247.456598][T19644] can0: slcan on ttyS3. [ 1247.467064][ T5813] pwc: recv_control_msg error -71 req 04 val 1400 [ 1247.474389][ T5813] pwc: recv_control_msg error -71 req 02 val 2000 [ 1247.489617][ T5813] pwc: recv_control_msg error -71 req 02 val 2100 [ 1247.505160][ T5813] pwc: recv_control_msg error -71 req 04 val 1500 [ 1247.554304][ T5813] pwc: recv_control_msg error -71 req 02 val 2500 [ 1247.588561][T19649] overlayfs: failed to get inode (-116) [ 1247.596317][T19649] overlayfs: failed to get inode (-116) [ 1247.610683][ T5813] pwc: recv_control_msg error -71 req 02 val 2400 [ 1247.643582][ T5813] pwc: recv_control_msg error -71 req 02 val 2600 [ 1247.654899][T19651] netlink: 512 bytes leftover after parsing attributes in process `syz.5.3207'. [ 1247.673408][ T5813] pwc: recv_control_msg error -71 req 02 val 2900 [ 1247.679910][T19639] can0 (unregistered): slcan off ttyS3. [ 1247.836364][ T5813] pwc: recv_control_msg error -71 req 02 val 2800 [ 1247.854787][ T5813] pwc: recv_control_msg error -71 req 04 val 1100 [ 1247.862262][ T5813] pwc: recv_control_msg error -71 req 04 val 1200 [ 1248.350110][ T5813] pwc: Registered as video103. [ 1248.385882][ T5813] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input49 [ 1248.658496][ T5813] usb 3-1: USB disconnect, device number 30 [ 1248.754015][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'. [ 1248.762935][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'. [ 1248.772169][T19660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1249.174927][T19669] befs: (nbd5): unable to read superblock [ 1249.306539][T19672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3211'. [ 1251.245650][ T30] audit: type=1400 audit(1768222929.656:658): avc: denied { call } for pid=19698 comm="syz.4.3218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1251.409670][ T5813] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1251.427195][T19701] FAULT_INJECTION: forcing a failure. [ 1251.427195][T19701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1251.589488][ T5813] usb 3-1: config index 0 descriptor too short (expected 65527, got 18) [ 1251.977074][ T5813] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=9d.33 [ 1252.032101][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.050949][T19701] CPU: 1 UID: 0 PID: 19701 Comm: syz.4.3218 Tainted: G L syzkaller #0 PREEMPT(full) [ 1252.050982][T19701] Tainted: [L]=SOFTLOCKUP [ 1252.050990][T19701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1252.051000][T19701] Call Trace: [ 1252.051007][T19701] [ 1252.051015][T19701] dump_stack_lvl+0x16c/0x1f0 [ 1252.051045][T19701] should_fail_ex+0x512/0x640 [ 1252.051078][T19701] _copy_to_user+0x32/0xd0 [ 1252.051109][T19701] simple_read_from_buffer+0xcb/0x170 [ 1252.051137][T19701] proc_fail_nth_read+0x197/0x240 [ 1252.051159][T19701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1252.051181][T19701] ? rw_verify_area+0xcf/0x6c0 [ 1252.051202][T19701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1252.051222][T19701] vfs_read+0x1e4/0xcf0 [ 1252.051247][T19701] ? __pfx___mutex_lock+0x10/0x10 [ 1252.051276][T19701] ? __pfx_vfs_read+0x10/0x10 [ 1252.051307][T19701] ? __fget_files+0x20e/0x3c0 [ 1252.051340][T19701] ksys_read+0x12a/0x250 [ 1252.051363][T19701] ? __pfx_ksys_read+0x10/0x10 [ 1252.051415][T19701] do_syscall_64+0xcd/0xf80 [ 1252.051443][T19701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.051462][T19701] RIP: 0033:0x7f2a9fd8e15c [ 1252.051478][T19701] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1252.051496][T19701] RSP: 002b:00007f2a9dfd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1252.051514][T19701] RAX: ffffffffffffffda RBX: 00007f2a9ffe6090 RCX: 00007f2a9fd8e15c [ 1252.051526][T19701] RDX: 000000000000000f RSI: 00007f2a9dfd50a0 RDI: 000000000000000a [ 1252.051538][T19701] RBP: 00007f2a9dfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.051549][T19701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.051560][T19701] R13: 00007f2a9ffe6128 R14: 00007f2a9ffe6090 R15: 00007ffde26d4ed8 [ 1252.051597][T19701] [ 1252.432318][ T5813] usb 3-1: Product: syz [ 1252.444172][ T5813] usb 3-1: Manufacturer: syz [ 1252.455243][ T5813] usb 3-1: SerialNumber: syz [ 1252.536733][ T5813] usb 3-1: config 0 descriptor?? [ 1252.565146][T18304] IPVS: starting estimator thread 0... [ 1252.658225][ T5813] usb 3-1: invalid MIDI EP [ 1252.687721][ T5813] usb 3-1: snd-bcd2000: error during probing [ 1252.699351][ T5813] snd-bcd2000 3-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 1252.734748][T19711] IPVS: using max 76 ests per chain, 182400 per kthread [ 1253.585176][T19491] usb 3-1: USB disconnect, device number 31 [ 1253.707964][T19724] overlayfs: failed to get inode (-116) [ 1253.714447][T19724] overlayfs: failed to get inode (-116) [ 1254.483833][T19737] befs: (nbd5): unable to read superblock [ 1255.198414][T19746] overlayfs: failed to get inode (-116) [ 1255.401397][T19746] overlayfs: failed to get inode (-116) [ 1256.073857][T19491] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1256.226447][T19491] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.261025][T19491] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.345749][T19757] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1256.383440][ T30] audit: type=1400 audit(1768222934.786:659): avc: denied { execute } for pid=19754 comm="syz.6.3231" path="/sys/power/resume" dev="sysfs" ino=1435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 1256.423894][T19491] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1256.465282][T19491] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1256.491726][T19491] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.498632][ T30] audit: type=1400 audit(1768222934.896:660): avc: denied { write } for pid=19758 comm="syz.4.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1256.548090][T19491] usb 6-1: config 0 descriptor?? [ 1256.970896][ T30] audit: type=1804 audit(1768222935.376:661): pid=19765 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3233" name="/newroot/77/file0" dev="tmpfs" ino=434 res=1 errno=0 [ 1257.530894][ T6068] IPVS: starting estimator thread 0... [ 1257.633742][T19770] IPVS: using max 45 ests per chain, 108000 per kthread [ 1257.725494][T19774] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3236'. [ 1258.291288][T19491] usbhid 6-1:0.0: can't add hid device: -71 [ 1258.297312][T19491] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1258.306565][T19491] usb 6-1: USB disconnect, device number 13 [ 1258.986225][T19796] netlink: 'syz.4.3241': attribute type 1 has an invalid length. [ 1259.324219][T19491] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1259.502592][T19801] can0: slcan on ttyS3. [ 1259.580429][T19491] usb 1-1: Using ep0 maxpacket: 32 [ 1259.613770][T19801] can0 (unregistered): slcan off ttyS3. [ 1259.660433][T19802] can0: slcan on ttyS3. [ 1259.775163][T19491] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1259.819083][T19491] usb 1-1: config 0 has no interface number 0 [ 1259.854031][T19491] usb 1-1: config 0 interface 188 altsetting 0 endpoint 0x8D has invalid maxpacket 11415, setting to 1024 [ 1259.927147][T19491] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 1261.031188][T19491] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1261.045885][T19798] can0 (unregistered): slcan off ttyS3. [ 1261.100203][T19491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.113813][T19491] usb 1-1: Product: syz [ 1261.118094][T19491] usb 1-1: Manufacturer: syz [ 1261.122696][T19491] usb 1-1: SerialNumber: syz [ 1261.141715][T19491] usb 1-1: config 0 descriptor?? [ 1261.240982][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3245'. [ 1261.249891][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3245'. [ 1261.258756][T19809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1261.339007][T19793] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1261.360375][T19491] asix 1-1:0.188: probe with driver asix failed with error -22 [ 1261.390536][T19812] netlink: 512 bytes leftover after parsing attributes in process `syz.6.3247'. [ 1262.188773][T19819] netlink: 512 bytes leftover after parsing attributes in process `syz.5.3248'. [ 1263.248730][ T30] audit: type=1400 audit(1768222941.646:662): avc: denied { connect } for pid=19824 comm="syz.2.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1263.549522][T19828] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1263.563844][ T30] audit: type=1400 audit(1768222941.656:663): avc: denied { shutdown } for pid=19824 comm="syz.2.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1264.004228][ T6068] usb 1-1: USB disconnect, device number 47 [ 1264.234623][ T5813] IPVS: starting estimator thread 0... [ 1264.340949][T19841] IPVS: using max 76 ests per chain, 182400 per kthread [ 1265.935845][T10685] Bluetooth: hci2: command 0x0406 tx timeout [ 1266.461198][ T30] audit: type=1326 audit(1768222944.776:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e698f749 code=0x7ffc0000 [ 1266.641679][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 1266.650666][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 1266.660308][T19864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1266.660987][ T30] audit: type=1326 audit(1768222944.776:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e698f749 code=0x7ffc0000 [ 1266.764838][T19867] FAULT_INJECTION: forcing a failure. [ 1266.764838][T19867] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.779484][ T30] audit: type=1326 audit(1768222944.776:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f55e698f749 code=0x7ffc0000 [ 1266.803822][ T5905] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1266.814304][T19867] CPU: 0 UID: 0 PID: 19867 Comm: syz.4.3258 Tainted: G L syzkaller #0 PREEMPT(full) [ 1266.814324][T19867] Tainted: [L]=SOFTLOCKUP [ 1266.814328][T19867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1266.814335][T19867] Call Trace: [ 1266.814339][T19867] [ 1266.814343][T19867] dump_stack_lvl+0x16c/0x1f0 [ 1266.814363][T19867] should_fail_ex+0x512/0x640 [ 1266.814380][T19867] ? __kmalloc_noprof+0xca/0x910 [ 1266.814400][T19867] should_failslab+0xc2/0x120 [ 1266.814415][T19867] __kmalloc_noprof+0xeb/0x910 [ 1266.814433][T19867] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1266.814454][T19867] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1266.814471][T19867] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1266.814492][T19867] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1266.814509][T19867] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1266.814530][T19867] ? bpf_lsm_capable+0x9/0x10 [ 1266.814543][T19867] ? security_capable+0x7e/0x260 [ 1266.814556][T19867] ? ns_capable+0xd7/0x110 [ 1266.814573][T19867] genl_rcv_msg+0x55c/0x800 [ 1266.814590][T19867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1266.814607][T19867] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1266.814619][T19867] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 1266.814630][T19867] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1266.814650][T19867] netlink_rcv_skb+0x158/0x420 [ 1266.814664][T19867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1266.814681][T19867] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1266.814701][T19867] ? netlink_deliver_tap+0x1ae/0xd30 [ 1266.814717][T19867] genl_rcv+0x28/0x40 [ 1266.814731][T19867] netlink_unicast+0x5aa/0x870 [ 1266.814753][T19867] ? __pfx_netlink_unicast+0x10/0x10 [ 1266.814772][T19867] netlink_sendmsg+0x8c8/0xdd0 [ 1266.814789][T19867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1266.814809][T19867] ____sys_sendmsg+0xa5d/0xc30 [ 1266.814825][T19867] ? copy_msghdr_from_user+0x10a/0x160 [ 1266.814837][T19867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1266.814858][T19867] ___sys_sendmsg+0x134/0x1d0 [ 1266.814871][T19867] ? __pfx____sys_sendmsg+0x10/0x10 [ 1266.814900][T19867] __sys_sendmsg+0x16d/0x220 [ 1266.814912][T19867] ? __pfx___sys_sendmsg+0x10/0x10 [ 1266.814933][T19867] do_syscall_64+0xcd/0xf80 [ 1266.814950][T19867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.814961][T19867] RIP: 0033:0x7f2a9fd8f749 [ 1266.814971][T19867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1266.814982][T19867] RSP: 002b:00007f2a9dff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1266.814993][T19867] RAX: ffffffffffffffda RBX: 00007f2a9ffe5fa0 RCX: 00007f2a9fd8f749 [ 1266.815000][T19867] RDX: 0000000000008000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1266.815007][T19867] RBP: 00007f2a9dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.815013][T19867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.815020][T19867] R13: 00007f2a9ffe6038 R14: 00007f2a9ffe5fa0 R15: 00007ffde26d4ed8 [ 1266.815034][T19867] [ 1267.134583][ T30] audit: type=1326 audit(1768222944.776:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e698f749 code=0x7ffc0000 [ 1267.158494][ T30] audit: type=1326 audit(1768222944.776:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e698f749 code=0x7ffc0000 [ 1267.193710][ T5905] usb 3-1: device descriptor read/64, error -71 [ 1267.232202][ T30] audit: type=1326 audit(1768222944.776:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f55e698e1ff code=0x7ffc0000 [ 1267.302227][ T30] audit: type=1326 audit(1768222944.776:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e698f749 code=0x7ffc0000 [ 1267.351215][ T30] audit: type=1326 audit(1768222944.776:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e698f749 code=0x7ffc0000 [ 1267.453759][ T5905] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1267.467772][T19875] block nbd5: not configured, cannot reconfigure [ 1267.673740][ T5905] usb 3-1: device descriptor read/64, error -71 [ 1267.803766][ T5932] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1268.386430][T19883] qnx4: no qnx4 filesystem (no root dir). [ 1268.393854][T18304] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1268.401853][ T5905] usb usb3-port1: attempt power cycle [ 1268.402078][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1268.402091][ T30] audit: type=1326 audit(1768222946.196:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55e698f34b code=0x7ffc0000 [ 1268.473524][ T30] audit: type=1326 audit(1768222946.846:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55e698f34b code=0x7ffc0000 [ 1268.498661][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.524714][ T5932] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1268.533873][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.544415][ T5932] usb 1-1: config 0 descriptor?? [ 1268.556573][ T30] audit: type=1326 audit(1768222946.846:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55e698f34b code=0x7ffc0000 [ 1268.581188][ T30] audit: type=1326 audit(1768222946.926:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55e698f34b code=0x7ffc0000 [ 1268.626630][T18304] usb 5-1: Using ep0 maxpacket: 16 [ 1268.634098][T18304] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1268.647683][ T30] audit: type=1326 audit(1768222946.926:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55e698f34b code=0x7ffc0000 [ 1268.702455][T18304] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1268.713352][T18304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1268.723253][ T30] audit: type=1326 audit(1768222947.136:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55e698f34b code=0x7ffc0000 [ 1268.753728][T19492] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1268.764735][T18304] usb 5-1: SerialNumber: syz [ 1268.765455][ T5905] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1268.814890][ T5905] usb 3-1: device descriptor read/8, error -71 [ 1268.815592][ T30] audit: type=1326 audit(1768222947.226:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55e698f34b code=0x7ffc0000 [ 1268.845083][ T30] audit: type=1326 audit(1768222947.226:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55e698f34b code=0x7ffc0000 [ 1268.923731][T19492] usb 6-1: Using ep0 maxpacket: 32 [ 1268.930368][T19492] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1268.939440][ T30] audit: type=1326 audit(1768222947.346:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55e698f34b code=0x7ffc0000 [ 1268.965196][T19492] usb 6-1: config 0 has no interface number 0 [ 1268.971291][T19492] usb 6-1: config 0 interface 188 altsetting 0 endpoint 0x8D has invalid maxpacket 11415, setting to 1024 [ 1269.030030][T19492] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 1269.045958][ T30] audit: type=1326 audit(1768222947.346:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55e698f34b code=0x7ffc0000 [ 1269.084197][ T5905] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1269.089176][T19492] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1269.177551][ T5905] usb 3-1: device descriptor read/8, error -71 [ 1269.236797][T19492] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.299761][T19492] usb 6-1: Product: syz [ 1269.314029][ T5905] usb usb3-port1: unable to enumerate USB device [ 1269.316660][T19492] usb 6-1: Manufacturer: syz [ 1269.329679][T19492] usb 6-1: SerialNumber: syz [ 1269.338438][T19492] usb 6-1: config 0 descriptor?? [ 1269.344272][T19887] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1269.393912][T19492] asix 6-1:0.188: probe with driver asix failed with error -22 [ 1269.440162][ T5932] usbhid 1-1:0.0: can't add hid device: -71 [ 1269.446516][ T5932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1269.513287][ T5932] usb 1-1: USB disconnect, device number 48 [ 1269.723865][ T5905] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1270.245873][ T5905] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1270.255768][ T5905] usb 3-1: config 1 has no interface number 1 [ 1270.261912][ T5905] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1270.290279][ T5905] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1270.299733][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.307916][ T5905] usb 3-1: Product: syz [ 1270.312178][ T5905] usb 3-1: Manufacturer: syz [ 1270.316915][ T5905] usb 3-1: SerialNumber: syz [ 1270.591276][ T5905] usb 3-1: found format II with max.bitrate = 26774, frame size=1 [ 1271.057548][ T5905] usb 3-1: found format II with max.bitrate = 26774, frame size=1 [ 1271.103021][ T5905] usb 3-1: failed to enable PITCH for EP 0x82 [ 1271.119210][ T5932] usb 5-1: USB disconnect, device number 38 [ 1271.206228][ T5905] usb 3-1: USB disconnect, device number 36 [ 1271.538120][ T6435] usb 6-1: USB disconnect, device number 14 [ 1272.737235][T19937] netlink: 512 bytes leftover after parsing attributes in process `syz.2.3274'. [ 1273.003853][ T5932] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1273.139201][T13662] Bluetooth: hci6: unexpected event for opcode 0x040e [ 1273.714351][T19492] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1273.733738][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 1273.854962][ T5932] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1273.914275][T19492] usb 6-1: Using ep0 maxpacket: 16 [ 1274.051576][ T5932] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1274.239822][T19492] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1274.314000][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1274.322114][ T5932] usb 5-1: SerialNumber: syz [ 1274.531894][T19492] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1274.563788][T19492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1274.571787][T19492] usb 6-1: SerialNumber: syz [ 1274.662810][T19950] FAULT_INJECTION: forcing a failure. [ 1274.662810][T19950] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.694709][T19950] CPU: 1 UID: 0 PID: 19950 Comm: syz.0.3276 Tainted: G L syzkaller #0 PREEMPT(full) [ 1274.694730][T19950] Tainted: [L]=SOFTLOCKUP [ 1274.694734][T19950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1274.694741][T19950] Call Trace: [ 1274.694745][T19950] [ 1274.694749][T19950] dump_stack_lvl+0x16c/0x1f0 [ 1274.694770][T19950] should_fail_ex+0x512/0x640 [ 1274.694788][T19950] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1274.694800][T19950] should_failslab+0xc2/0x120 [ 1274.694816][T19950] kmem_cache_alloc_noprof+0x83/0x770 [ 1274.694828][T19950] ? skb_clone+0x190/0x3f0 [ 1274.694844][T19950] ? skb_clone+0x190/0x3f0 [ 1274.694855][T19950] skb_clone+0x190/0x3f0 [ 1274.694867][T19950] netlink_deliver_tap+0xabd/0xd30 [ 1274.694884][T19950] netlink_unicast+0x71f/0x870 [ 1274.694901][T19950] ? __pfx_netlink_unicast+0x10/0x10 [ 1274.694920][T19950] netlink_ack+0x696/0xb80 [ 1274.694939][T19950] netlink_rcv_skb+0x332/0x420 [ 1274.694953][T19950] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1274.694965][T19950] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1274.694986][T19950] ? ns_capable+0xd7/0x110 [ 1274.695004][T19950] nfnetlink_rcv+0x1b3/0x430 [ 1274.695014][T19950] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1274.695024][T19950] ? netlink_deliver_tap+0x1ae/0xd30 [ 1274.695040][T19950] netlink_unicast+0x5aa/0x870 [ 1274.695056][T19950] ? __pfx_netlink_unicast+0x10/0x10 [ 1274.695076][T19950] netlink_sendmsg+0x8c8/0xdd0 [ 1274.695092][T19950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.695111][T19950] ____sys_sendmsg+0xa5d/0xc30 [ 1274.695128][T19950] ? copy_msghdr_from_user+0x10a/0x160 [ 1274.695140][T19950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1274.695161][T19950] ___sys_sendmsg+0x134/0x1d0 [ 1274.695174][T19950] ? __pfx____sys_sendmsg+0x10/0x10 [ 1274.695202][T19950] __sys_sendmsg+0x16d/0x220 [ 1274.695214][T19950] ? __pfx___sys_sendmsg+0x10/0x10 [ 1274.695235][T19950] do_syscall_64+0xcd/0xf80 [ 1274.695251][T19950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.695263][T19950] RIP: 0033:0x7f847898f749 [ 1274.695273][T19950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1274.695284][T19950] RSP: 002b:00007f8476bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1274.695295][T19950] RAX: ffffffffffffffda RBX: 00007f8478be5fa0 RCX: 00007f847898f749 [ 1274.695302][T19950] RDX: 0000000000000800 RSI: 0000200000000240 RDI: 0000000000000003 [ 1274.695309][T19950] RBP: 00007f8476bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.695316][T19950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.695322][T19950] R13: 00007f8478be6038 R14: 00007f8478be5fa0 R15: 00007ffcc6ee78e8 [ 1274.695336][T19950] [ 1275.402872][ T5905] usb 6-1: USB disconnect, device number 15 [ 1276.264454][ T5905] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1276.286879][T19971] geneve2: entered promiscuous mode [ 1276.368882][T19974] netlink: 'syz.2.3283': attribute type 1 has an invalid length. [ 1276.506793][ T7006] usb 5-1: USB disconnect, device number 39 [ 1276.747644][T19979] befs: (nbd5): unable to read superblock [ 1277.976960][T19995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3288'. [ 1277.985978][T19995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3288'. [ 1277.995039][T19995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1278.072006][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3289'. [ 1278.386978][T20001] netlink: 'syz.2.3290': attribute type 1 has an invalid length. [ 1279.208894][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3294'. [ 1279.220374][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3294'. [ 1279.229368][T20013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1280.164578][T20027] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3299'. [ 1280.192454][T20027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.204463][T20038] netlink: 512 bytes leftover after parsing attributes in process `syz.5.3302'. [ 1280.345195][T20027] bridge_slave_1 (unregistering): left allmulticast mode [ 1280.359816][T20027] bridge_slave_1 (unregistering): left promiscuous mode [ 1280.373885][T20027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.475571][T20043] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3299'. [ 1280.485350][T20043] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3299'. [ 1280.533973][ T7226] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1281.279289][ T7226] usb 3-1: config 8 interface 0 has no altsetting 0 [ 1281.295349][ T7226] usb 3-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=fb.bc [ 1281.308619][T20051] JFS: discard option not supported on device [ 1281.314973][T20051] Mount JFS Failure: -22 [ 1281.319216][T20051] jfs_mount failed w/return code = -22 [ 1281.371554][ T7226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.697413][ T7226] usb 3-1: string descriptor 0 read error: -71 [ 1281.748014][ T7226] pwc: Logitech QuickCam detected (reserved ID). [ 1281.770673][ T7226] pwc: Failed to set LED on/off time (-71) [ 1282.737302][ T7226] pwc: send_video_command error -71 [ 1282.743025][ T7226] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1282.754754][ T7226] Philips webcam 3-1:8.0: probe with driver Philips webcam failed with error -71 [ 1282.777715][ T7226] usb 3-1: USB disconnect, device number 37 [ 1283.043963][ T7006] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1283.367746][T20073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3309'. [ 1283.376930][T20073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3309'. [ 1283.385911][T20073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1283.712225][T20072] FAULT_INJECTION: forcing a failure. [ 1283.712225][T20072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.714969][ T7006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.736489][ T7006] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1283.746115][T20072] CPU: 1 UID: 0 PID: 20072 Comm: syz.0.3311 Tainted: G L syzkaller #0 PREEMPT(full) [ 1283.746147][T20072] Tainted: [L]=SOFTLOCKUP [ 1283.746154][T20072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1283.746164][T20072] Call Trace: [ 1283.746171][T20072] [ 1283.746178][T20072] dump_stack_lvl+0x16c/0x1f0 [ 1283.746208][T20072] should_fail_ex+0x512/0x640 [ 1283.746239][T20072] _copy_to_user+0x32/0xd0 [ 1283.746269][T20072] bpf_test_finish.isra.0+0x549/0x6b0 [ 1283.746296][T20072] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 1283.746315][T20072] ? lockdep_hardirqs_on+0x7c/0x110 [ 1283.746344][T20072] ? preempt_schedule_common+0x44/0xc0 [ 1283.746368][T20072] ? preempt_schedule_thunk+0x16/0x30 [ 1283.746398][T20072] bpf_prog_test_run_flow_dissector+0x5da/0x980 [ 1283.746432][T20072] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1283.746461][T20072] ? find_held_lock+0x2b/0x80 [ 1283.746489][T20072] ? __fget_files+0x204/0x3c0 [ 1283.746519][T20072] ? __fget_files+0x20e/0x3c0 [ 1283.746542][T20072] ? __might_fault+0x70/0x190 [ 1283.746564][T20072] ? fput+0x70/0xf0 [ 1283.746579][T20072] ? __bpf_prog_get+0x97/0x2a0 [ 1283.746601][T20072] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1283.746624][T20072] __sys_bpf+0x1035/0x4980 [ 1283.746653][T20072] ? __pfx___sys_bpf+0x10/0x10 [ 1283.746677][T20072] ? find_held_lock+0x2b/0x80 [ 1283.746713][T20072] ? find_held_lock+0x2b/0x80 [ 1283.746745][T20072] ? __mutex_unlock_slowpath+0x161/0x790 [ 1283.746786][T20072] ? fput+0x70/0xf0 [ 1283.746801][T20072] ? ksys_write+0x1ac/0x250 [ 1283.746825][T20072] ? __pfx_ksys_write+0x10/0x10 [ 1283.746853][T20072] __x64_sys_bpf+0x78/0xc0 [ 1283.746877][T20072] ? lockdep_hardirqs_on+0x7c/0x110 [ 1283.746901][T20072] do_syscall_64+0xcd/0xf80 [ 1283.746928][T20072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.746946][T20072] RIP: 0033:0x7f847898f749 [ 1283.746961][T20072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1283.746979][T20072] RSP: 002b:00007f8476bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1283.746997][T20072] RAX: ffffffffffffffda RBX: 00007f8478be5fa0 RCX: 00007f847898f749 [ 1283.747009][T20072] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 1283.747021][T20072] RBP: 00007f8476bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.747032][T20072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.747043][T20072] R13: 00007f8478be6038 R14: 00007f8478be5fa0 R15: 00007ffcc6ee78e8 [ 1283.747070][T20072] [ 1283.747173][ T7006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.197246][ T7006] usb 5-1: config 0 descriptor?? [ 1285.304093][T19492] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1285.327289][T20094] can0: slcan on ttyS3. [ 1285.377134][T20094] can0 (unregistered): slcan off ttyS3. [ 1285.391223][T20094] can0: slcan on ttyS3. [ 1285.418522][T20099] blktrace: Concurrent blktraces are not allowed on loop0 [ 1285.487876][T19492] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.567711][T19492] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.579022][T20074] can0 (unregistered): slcan off ttyS3. [ 1285.653403][T19492] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1285.718722][T19492] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1285.748852][T19492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.763915][T19492] usb 6-1: config 0 descriptor?? [ 1285.861470][ T7006] usbhid 5-1:0.0: can't add hid device: -71 [ 1285.872326][ T7006] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1285.897246][ T7006] usb 5-1: USB disconnect, device number 40 [ 1285.933772][T20110] veth0_vlan: entered allmulticast mode [ 1286.085990][T20111] block nbd6: not configured, cannot reconfigure [ 1287.389118][T19492] usbhid 6-1:0.0: can't add hid device: -71 [ 1287.399302][T19492] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1287.409706][T19492] usb 6-1: USB disconnect, device number 16 [ 1287.439804][T20118] netlink: 'syz.5.3320': attribute type 6 has an invalid length. [ 1289.047139][T20137] gre1: entered promiscuous mode [ 1289.187651][T20138] can0: slcan on ttyS3. [ 1289.335910][T20138] can0 (unregistered): slcan off ttyS3. [ 1289.376730][T20139] can0: slcan on ttyS3. [ 1289.634809][T20131] can0 (unregistered): slcan off ttyS3. [ 1293.904316][T19492] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1295.187868][T20178] netlink: 'syz.4.3335': attribute type 1 has an invalid length. [ 1295.754212][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1295.754230][ T30] audit: type=1400 audit(1768222974.166:701): avc: denied { lock } for pid=20181 comm="syz.0.3337" path="socket:[64127]" dev="sockfs" ino=64127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1295.800998][T20184] netlink: 512 bytes leftover after parsing attributes in process `syz.5.3338'. [ 1296.645759][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 1296.803824][ T5867] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1296.893259][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3342'. [ 1297.324732][T20208] netlink: 'syz.2.3334': attribute type 1 has an invalid length. [ 1297.493909][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 1297.598931][ T5867] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1297.650722][ T5867] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1297.665996][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1297.679070][ T5867] usb 5-1: SerialNumber: syz [ 1297.979780][T20218] FAULT_INJECTION: forcing a failure. [ 1297.979780][T20218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1298.104742][T20218] CPU: 0 UID: 0 PID: 20218 Comm: syz.2.3343 Tainted: G L syzkaller #0 PREEMPT(full) [ 1298.104773][T20218] Tainted: [L]=SOFTLOCKUP [ 1298.104779][T20218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1298.104790][T20218] Call Trace: [ 1298.104796][T20218] [ 1298.104803][T20218] dump_stack_lvl+0x16c/0x1f0 [ 1298.104825][T20218] should_fail_ex+0x512/0x640 [ 1298.104845][T20218] _copy_from_user+0x2e/0xd0 [ 1298.104862][T20218] copy_msghdr_from_user+0x98/0x160 [ 1298.104876][T20218] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1298.104898][T20218] ? lock_acquire+0x179/0x330 [ 1298.104923][T20218] ___sys_sendmsg+0xfe/0x1d0 [ 1298.104944][T20218] ? __pfx____sys_sendmsg+0x10/0x10 [ 1298.104963][T20218] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1298.105008][T20218] __sys_sendmsg+0x16d/0x220 [ 1298.105020][T20218] ? __pfx___sys_sendmsg+0x10/0x10 [ 1298.105031][T20218] ? irqentry_exit+0x1dd/0x8c0 [ 1298.105046][T20218] ? rcu_is_watching+0x12/0xc0 [ 1298.105065][T20218] do_syscall_64+0xcd/0xf80 [ 1298.105081][T20218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.105093][T20218] RIP: 0033:0x7f55e698f749 [ 1298.105102][T20218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1298.105115][T20218] RSP: 002b:00007f55e78c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1298.105133][T20218] RAX: ffffffffffffffda RBX: 00007f55e6be6090 RCX: 00007f55e698f749 [ 1298.105145][T20218] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1298.105155][T20218] RBP: 00007f55e78c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.105166][T20218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1298.105176][T20218] R13: 00007f55e6be6128 R14: 00007f55e6be6090 R15: 00007fffac01f038 [ 1298.105200][T20218] [ 1298.793724][ T5867] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1298.801524][T17522] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1298.967866][T17522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.979237][T17522] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1298.988535][ T5867] usb 1-1: config index 0 descriptor too short (expected 65527, got 18) [ 1299.036566][ T5867] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=9d.33 [ 1299.046640][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.079359][T17522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.089467][ T5867] usb 1-1: Product: syz [ 1299.111899][ T5867] usb 1-1: Manufacturer: syz [ 1299.117418][T17522] usb 6-1: config 0 descriptor?? [ 1299.123082][ T5867] usb 1-1: SerialNumber: syz [ 1299.146154][ T5867] usb 1-1: config 0 descriptor?? [ 1299.159331][ T5867] usb 1-1: invalid MIDI EP [ 1299.164165][ T5867] usb 1-1: snd-bcd2000: error during probing [ 1299.192975][ T5867] snd-bcd2000 1-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 1299.698514][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.707867][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.358096][ T5905] usb 1-1: USB disconnect, device number 49 [ 1300.425822][T20241] blktrace: Concurrent blktraces are not allowed on loop12 [ 1300.523364][T19444] usb 5-1: USB disconnect, device number 41 [ 1301.266758][T17522] usbhid 6-1:0.0: can't add hid device: -71 [ 1301.280328][T17522] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1301.310337][T17522] usb 6-1: USB disconnect, device number 18 [ 1301.788450][ T30] audit: type=1804 audit(1768222979.976:702): pid=20255 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3353" name="/newroot/96/file0" dev="tmpfs" ino=539 res=1 errno=0 [ 1302.011161][T20259] geneve2: entered promiscuous mode [ 1302.666933][T20260] netlink: 'syz.0.3354': attribute type 1 has an invalid length. [ 1302.674240][ T30] audit: type=1804 audit(1768222980.676:703): pid=20262 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3355" name="/newroot/50/file0" dev="tmpfs" ino=286 res=1 errno=0 [ 1303.170684][T20267] gre1: entered promiscuous mode [ 1303.245955][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3356'. [ 1303.486207][T20273] blktrace: Concurrent blktraces are not allowed on loop0 [ 1303.562775][T20275] befs: (nbd6): unable to read superblock [ 1304.181651][T20278] block nbd5: not configured, cannot reconfigure [ 1304.225369][T20284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3360'. [ 1304.234462][T20284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3360'. [ 1304.243597][T20284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1304.566308][T20288] gre2: entered promiscuous mode [ 1308.192411][T20319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1308.806517][T20325] JFS: discard option not supported on device [ 1308.812708][T20325] Mount JFS Failure: -22 [ 1308.817405][T20325] jfs_mount failed w/return code = -22 [ 1309.362683][T20332] can0: slcan on ttyS3. [ 1309.785629][T20330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3371'. [ 1309.835702][T20332] can0 (unregistered): slcan off ttyS3. [ 1309.855881][T20333] can0: slcan on ttyS3. [ 1309.943789][T20328] can0 (unregistered): slcan off ttyS3. [ 1310.091936][T20345] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3376'. [ 1310.967072][T20346] block nbd6: not configured, cannot reconfigure [ 1311.863844][ T6238] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1311.888290][T20371] tmpfs: Unknown parameter 'usrquota_block_har:imit' [ 1312.029456][ T6238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.053709][T10685] Bluetooth: hci1: command 0x0406 tx timeout [ 1312.291873][ T6238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.301647][T20376] overlayfs: failed lookup in lower (newroot/45, name='file0', err=-40): overlapping layers [ 1312.317579][ T6238] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1312.360967][ T6238] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1312.383140][ T6238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.406586][ T6238] usb 5-1: config 0 descriptor?? [ 1312.476815][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3382'. [ 1312.553837][ T5813] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1312.773825][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 1312.780621][ T5813] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1312.792168][ T5813] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1312.804155][ T5813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1312.813496][ T5813] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1312.921716][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.930149][ T5813] usb 3-1: Product: syz [ 1312.935177][ T5813] usb 3-1: Manufacturer: syz [ 1312.939900][ T5813] usb 3-1: SerialNumber: syz [ 1312.946922][ T5813] usb 3-1: config 0 descriptor?? [ 1312.953777][T17522] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1313.037736][T20386] befs: (nbd5): unable to read superblock [ 1313.105947][T17522] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.127103][T17522] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1313.158022][T17522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.178184][ T5813] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1313.187115][T17522] usb 1-1: config 0 descriptor?? [ 1313.197071][ T5813] imon 3-1:0.0: unable to initialize intf0, err -90 [ 1313.206112][T17522] pwc: Askey VC010 type 2 USB webcam detected. [ 1313.214507][ T5813] imon:imon_probe: failed to initialize context! [ 1313.225787][ T5813] imon 3-1:0.0: unable to register, err -19 [ 1313.239703][ T5813] usb 3-1: USB disconnect, device number 38 [ 1313.581999][T20389] overlayfs: failed to get inode (-116) [ 1313.590924][T20389] overlayfs: failed to get inode (-116) [ 1313.622091][T17522] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1313.836090][T17522] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1313.925073][ T6238] usbhid 5-1:0.0: can't add hid device: -71 [ 1313.931105][ T6238] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1314.084301][ T6238] usb 5-1: USB disconnect, device number 42 [ 1314.950740][T17522] pwc: recv_control_msg error -71 req 04 val 1000 [ 1314.971497][T17522] pwc: recv_control_msg error -71 req 04 val 1300 [ 1314.992983][T17522] pwc: recv_control_msg error -71 req 04 val 1400 [ 1315.010181][T17522] pwc: recv_control_msg error -71 req 02 val 2000 [ 1315.029504][T17522] pwc: recv_control_msg error -71 req 02 val 2100 [ 1315.051631][T17522] pwc: recv_control_msg error -71 req 04 val 1500 [ 1315.068001][T17522] pwc: recv_control_msg error -71 req 02 val 2500 [ 1315.078487][T17522] pwc: recv_control_msg error -71 req 02 val 2400 [ 1315.095895][T17967] bridge_slave_1: left allmulticast mode [ 1315.116732][T17522] pwc: recv_control_msg error -71 req 02 val 2600 [ 1315.124880][T17522] pwc: recv_control_msg error -71 req 02 val 2900 [ 1315.127367][T17967] bridge_slave_1: left promiscuous mode [ 1315.131797][T17522] pwc: recv_control_msg error -71 req 02 val 2800 [ 1315.671360][T17967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.689539][T17967] bridge_slave_0: left allmulticast mode [ 1315.694970][T17522] pwc: recv_control_msg error -71 req 04 val 1100 [ 1315.702038][T17967] bridge_slave_0: left promiscuous mode [ 1315.713244][T17967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.727242][T17522] pwc: recv_control_msg error -71 req 04 val 1200 [ 1315.768706][T17522] pwc: Registered as video103. [ 1315.816093][T17522] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input50 [ 1315.845790][T17522] usb 1-1: USB disconnect, device number 50 [ 1315.980430][T11837] smc: removing ib device syz2 [ 1316.073009][T20405] overlayfs: failed to get inode (-116) [ 1316.080906][T20405] overlayfs: failed to get inode (-116) [ 1316.873102][T20416] block nbd6: not configured, cannot reconfigure [ 1317.003388][T20408] ALSA: mixer_oss: invalid OSS volume '' [ 1317.154626][T17967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.163449][T20418] overlayfs: failed lookup in lower (newroot/72, name='file0', err=-40): overlapping layers [ 1317.177623][T17967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.192614][T17967] bond0 (unregistering): Released all slaves [ 1317.230567][T17967] º÷”I (unregistering): Released all slaves [ 1319.434091][T20441] can0: slcan on ttyS3. [ 1319.944082][T20441] can0 (unregistered): slcan off ttyS3. [ 1320.946441][T20457] FAULT_INJECTION: forcing a failure. [ 1320.946441][T20457] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.959456][T20457] CPU: 1 UID: 0 PID: 20457 Comm: syz.5.3402 Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.959487][T20457] Tainted: [L]=SOFTLOCKUP [ 1320.959494][T20457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1320.959506][T20457] Call Trace: [ 1320.959512][T20457] [ 1320.959520][T20457] dump_stack_lvl+0x16c/0x1f0 [ 1320.959550][T20457] should_fail_ex+0x512/0x640 [ 1320.959578][T20457] ? __kmalloc_noprof+0xca/0x910 [ 1320.959610][T20457] should_failslab+0xc2/0x120 [ 1320.959637][T20457] __kmalloc_noprof+0xeb/0x910 [ 1320.959664][T20457] ? __kernel_text_address+0xd/0x40 [ 1320.959688][T20457] ? unwind_get_return_address+0x59/0xa0 [ 1320.959714][T20457] ? constrain_params_by_rules+0x175/0xca0 [ 1320.959751][T20457] ? constrain_params_by_rules+0x175/0xca0 [ 1320.959775][T20457] constrain_params_by_rules+0x175/0xca0 [ 1320.959805][T20457] ? stack_trace_save+0x8e/0xc0 [ 1320.959829][T20457] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1320.959854][T20457] ? __lock_acquire+0x436/0x2890 [ 1320.959882][T20457] ? __kasan_kmalloc+0xaa/0xb0 [ 1320.959902][T20457] ? snd_pcm_oss_change_params_locked+0x247/0x3ab0 [ 1320.959928][T20457] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1320.959968][T20457] ? snd_pcm_oss_ioctl+0x2212/0x37f0 [ 1320.960002][T20457] ? rcu_is_watching+0x12/0xc0 [ 1320.960019][T20457] ? snd_interval_refine+0x2fa/0x580 [ 1320.960043][T20457] snd_pcm_hw_refine+0x7de/0xad0 [ 1320.960074][T20457] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1320.960109][T20457] ? __asan_memset+0x23/0x50 [ 1320.960128][T20457] ? _snd_pcm_hw_param_min+0x259/0x630 [ 1320.960159][T20457] snd_pcm_oss_change_params_locked+0x7d7/0x3ab0 [ 1320.960186][T20457] ? trace_contention_end+0xc0/0x110 [ 1320.960215][T20457] ? __mutex_lock+0x27b/0x1ca0 [ 1320.960245][T20457] ? __mutex_lock+0x27b/0x1ca0 [ 1320.960272][T20457] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1320.960300][T20457] ? __pfx___mutex_lock+0x10/0x10 [ 1320.960324][T20457] ? snd_pcm_oss_ioctl+0x110e/0x37f0 [ 1320.960367][T20457] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1320.960400][T20457] snd_pcm_oss_ioctl+0x2212/0x37f0 [ 1320.960428][T20457] ? hook_file_ioctl_common+0x144/0x410 [ 1320.960458][T20457] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1320.960490][T20457] ? selinux_file_ioctl+0x180/0x270 [ 1320.960515][T20457] ? selinux_file_ioctl+0xb4/0x270 [ 1320.960540][T20457] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1320.960569][T20457] __x64_sys_ioctl+0x18e/0x210 [ 1320.960593][T20457] do_syscall_64+0xcd/0xf80 [ 1320.960620][T20457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.960638][T20457] RIP: 0033:0x7fd4b4d8f749 [ 1320.960654][T20457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.960672][T20457] RSP: 002b:00007fd4b5b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1320.960692][T20457] RAX: ffffffffffffffda RBX: 00007fd4b4fe6180 RCX: 00007fd4b4d8f749 [ 1320.960704][T20457] RDX: 00002000000001c0 RSI: 00000000c0045002 RDI: 0000000000000005 [ 1320.960716][T20457] RBP: 00007fd4b5b67090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.960727][T20457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.960738][T20457] R13: 00007fd4b4fe6218 R14: 00007fd4b4fe6180 R15: 00007fffd8ea0958 [ 1320.960764][T20457] [ 1321.902004][T20463] blktrace: Concurrent blktraces are not allowed on loop10 [ 1322.286577][T20467] veth0_vlan: entered allmulticast mode [ 1322.770086][T20470] block nbd4: not configured, cannot reconfigure [ 1322.896276][ T30] audit: type=1400 audit(1768223001.306:704): avc: denied { read write } for pid=20476 comm="syz.5.3409" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1323.135952][ T30] audit: type=1400 audit(1768223001.306:705): avc: denied { open } for pid=20476 comm="syz.5.3409" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1323.236508][ T5932] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1323.283420][ T5932] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1323.294011][ T6068] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1323.585066][ T6068] usb 1-1: config index 0 descriptor too short (expected 65527, got 18) [ 1324.164766][ T6068] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=9d.33 [ 1324.186541][ T6068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.279166][ T6068] usb 1-1: Product: syz [ 1324.283375][ T6068] usb 1-1: Manufacturer: syz [ 1324.305349][ T6068] usb 1-1: SerialNumber: syz [ 1324.363254][ T6068] usb 1-1: config 0 descriptor?? [ 1324.383261][ T6068] usb 1-1: invalid MIDI EP [ 1324.619649][ T6068] usb 1-1: snd-bcd2000: error during probing [ 1324.654802][ T6068] snd-bcd2000 1-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 1324.863914][T20498] blktrace: Concurrent blktraces are not allowed on loop4 [ 1324.872171][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3414'. [ 1325.379069][ T6068] usb 1-1: USB disconnect, device number 51 [ 1325.536171][T20507] befs: (nbd6): unable to read superblock [ 1325.597769][T20509] overlayfs: failed to get inode (-116) [ 1325.603454][T20509] overlayfs: failed to get inode (-116) [ 1325.648372][T17967] IPVS: stopping master sync thread 6636 ... [ 1327.092332][T17967] hsr_slave_0: left promiscuous mode [ 1327.433753][T10685] Bluetooth: hci3: command 0x0406 tx timeout [ 1327.669520][T17967] hsr_slave_1: left promiscuous mode [ 1327.708580][T17967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1327.742506][T17967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.867911][T17967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1327.891103][T17967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.975896][ T30] audit: type=1804 audit(1768223006.376:706): pid=20538 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3422" name="/newroot/63/file0" dev="tmpfs" ino=362 res=1 errno=0 [ 1328.003035][T20533] block nbd6: not configured, cannot reconfigure [ 1328.321318][T17967] veth1_macvtap: left promiscuous mode [ 1328.334525][T17967] veth0_macvtap: left promiscuous mode [ 1328.656753][T17967] team0 (unregistering): Port device team_slave_1 removed [ 1328.688588][T17967] team0 (unregistering): Port device team_slave_0 removed [ 1329.317383][T20552] netlink: 'syz.2.3427': attribute type 1 has an invalid length. [ 1330.131733][T17967] IPVS: stop unused estimator thread 0... [ 1330.322477][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3433'. [ 1332.433945][T20590] overlayfs: missing 'lowerdir' [ 1332.841523][T20595] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3439'. [ 1332.857551][T20595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3439'. [ 1332.866832][T20595] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3439'. [ 1333.395120][ T5867] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1334.579640][ T5867] usb 1-1: config index 0 descriptor too short (expected 65527, got 18) [ 1334.612637][ T5867] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=9d.33 [ 1334.617621][ T30] audit: type=1804 audit(1768223012.396:707): pid=20616 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3445" name="/newroot/67/file0" dev="tmpfs" ino=383 res=1 errno=0 [ 1334.652860][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.799560][ T5867] usb 1-1: Product: syz [ 1334.803870][ T5867] usb 1-1: Manufacturer: syz [ 1334.808520][ T5867] usb 1-1: SerialNumber: syz [ 1334.821094][ T5867] usb 1-1: config 0 descriptor?? [ 1334.829672][ T5867] usb 1-1: invalid MIDI EP [ 1334.900740][ T5867] usb 1-1: snd-bcd2000: error during probing [ 1334.919071][ T5867] snd-bcd2000 1-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 1334.999735][T20622] JFS: discard option not supported on device [ 1335.006876][T20622] Mount JFS Failure: -22 [ 1335.011184][T20622] jfs_mount failed w/return code = -22 [ 1335.835765][T20630] JFS: discard option not supported on device [ 1335.842158][T20630] Mount JFS Failure: -22 [ 1335.846429][T20630] jfs_mount failed w/return code = -22 [ 1336.837959][T20648] gre2: entered promiscuous mode [ 1337.230459][T17522] usb 1-1: USB disconnect, device number 52 [ 1337.379870][T20651] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3454'. [ 1337.423788][T20651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3454'. [ 1337.443803][T20651] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3454'. [ 1338.420386][T20667] blktrace: Concurrent blktraces are not allowed on loop10 [ 1338.694315][T20673] usb usb8: usbfs: process 20673 (syz.5.3461) did not claim interface 0 before use [ 1338.843720][ T6238] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1339.162060][T20684] JFS: discard option not supported on device [ 1339.169012][T20684] Mount JFS Failure: -22 [ 1339.173281][T20684] jfs_mount failed w/return code = -22 [ 1339.533822][ T6238] usb 1-1: Using ep0 maxpacket: 8 [ 1339.540734][ T6238] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1339.550032][ T6238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.649382][ T6238] usb 1-1: config 0 descriptor?? [ 1339.670834][ T6238] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 1340.542383][T20694] geneve2: entered promiscuous mode [ 1340.705030][T20696] netlink: 'syz.6.3465': attribute type 1 has an invalid length. [ 1341.062594][T18582] usb 1-1: USB disconnect, device number 53 [ 1342.161406][T20706] blktrace: Concurrent blktraces are not allowed on loop10 [ 1342.974022][T13662] Bluetooth: hci0: command 0x0406 tx timeout [ 1343.484349][T20710] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3468'. [ 1343.594468][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'. [ 1343.605951][T20710] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3468'. [ 1345.693698][ T6068] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1346.011209][ T6068] usb 7-1: config 0 has an invalid interface number: 183 but max is 0 [ 1346.170607][ T6068] usb 7-1: config 0 has no interface number 0 [ 1346.182932][ T6068] usb 7-1: config 0 interface 183 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1346.197084][ T6068] usb 7-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=9d.94 [ 1346.212490][ T6068] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.224705][ T6068] usb 7-1: config 0 descriptor?? [ 1346.232336][T20722] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1346.241345][ T6068] pl2303 7-1:0.183: required endpoints missing [ 1347.706243][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3477'. [ 1347.725683][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3477'. [ 1347.746833][T20756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1347.826360][T18582] usb 7-1: USB disconnect, device number 4 [ 1349.334911][T20770] JFS: discard option not supported on device [ 1349.341911][T20770] Mount JFS Failure: -22 [ 1349.346363][T20770] jfs_mount failed w/return code = -22 [ 1349.765097][T20772] tipc: Failed to remove unknown binding: 66,1,1/0:4018045218/4018045220 [ 1350.085364][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3486'. [ 1350.146140][T20783] input: syz0 as /devices/virtual/input/input51 [ 1350.452550][ T30] audit: type=1400 audit(1768223028.486:708): avc: denied { ioctl } for pid=20773 comm="syz.4.3486" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1350.452718][T20777] vivid-002: disconnect [ 1350.762957][T20786] blk_print_req_error: 55 callbacks suppressed [ 1350.762976][T20786] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1350.778705][T20786] buffer_io_error: 54 callbacks suppressed [ 1350.778721][T20786] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1350.792312][T20786] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1350.801845][T20786] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1350.809636][T20786] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1350.904993][T20786] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1350.913274][T20786] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1350.934521][T20786] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1350.942790][T20786] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1350.952400][T20786] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1350.960566][T20786] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1350.970138][T20786] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1350.978583][T20786] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1350.988183][T20786] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1350.996552][T20786] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1351.036613][T20786] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1351.044817][T20786] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1351.055078][T20786] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1351.063005][T20786] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1351.073677][T20786] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1351.082664][T20786] ldm_validate_partition_table(): Disk read failed. [ 1351.089827][T20786] Dev nbd0: unable to read RDB block 0 [ 1351.095907][T20786] nbd0: unable to read partition table [ 1351.101685][T20786] befs: (nbd0): unable to read superblock [ 1351.560429][T20776] vivid-002: reconnect [ 1352.678916][T20803] can0: slcan on ttyS3. [ 1353.464169][T20803] can0 (unregistered): slcan off ttyS3. [ 1353.743709][T20818] loop6: detected capacity change from 0 to 2640 [ 1353.753149][T20818] ldm_validate_partition_table(): Disk read failed. [ 1353.760337][T20818] Dev loop6: unable to read RDB block 0 [ 1353.766681][T20818] loop6: unable to read partition table [ 1353.773487][T20818] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1353.858578][ T5867] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1354.175414][ T5867] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1354.194405][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.811380][T19444] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1354.916978][ T5867] usb 6-1: config 0 descriptor?? [ 1354.975832][ T5867] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1355.176443][T19444] usb 5-1: config index 0 descriptor too short (expected 65527, got 18) [ 1355.227311][T19444] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=9d.33 [ 1355.286542][T19444] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.300178][T19444] usb 5-1: Product: syz [ 1355.309000][T19444] usb 5-1: Manufacturer: syz [ 1355.318837][T19444] usb 5-1: SerialNumber: syz [ 1355.325500][T19444] usb 5-1: config 0 descriptor?? [ 1355.338959][T19444] usb 5-1: invalid MIDI EP [ 1355.347996][T19444] usb 5-1: snd-bcd2000: error during probing [ 1355.359099][T20839] veth0_vlan: entered allmulticast mode [ 1355.373880][ T31] INFO: task syz.1.3102:19162 blocked for more than 143 seconds. [ 1355.381630][ T31] Tainted: G L syzkaller #0 [ 1355.434170][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1355.455867][T19444] snd-bcd2000 5-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 1355.464013][ T31] task:syz.1.3102 state:D stack:28104 pid:19162 tgid:19152 ppid:18322 task_flags:0x400640 flags:0x00080002 [ 1355.479903][ T31] Call Trace: [ 1355.483256][ T31] [ 1355.486282][ T31] ? __schedule+0x10b9/0x6150 [ 1355.491341][ T31] __schedule+0x1139/0x6150 [ 1355.497628][ T31] ? __lock_acquire+0x436/0x2890 [ 1355.502670][ T31] ? __pfx___schedule+0x10/0x10 [ 1355.502821][T20841] block nbd2: not configured, cannot reconfigure [ 1355.507704][ T31] ? find_held_lock+0x2b/0x80 [ 1355.522097][ T31] ? schedule+0x2d7/0x3a0 [ 1355.529926][ T31] schedule+0xe7/0x3a0 [ 1355.536259][ T31] schedule_timeout+0x257/0x290 [ 1355.553728][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1355.559140][ T31] ? rcu_is_watching+0x12/0xc0 [ 1355.569503][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1355.574857][ T31] __wait_for_common+0x2fc/0x4e0 [ 1355.580010][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1355.585802][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1355.591554][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1355.597012][ T31] wait_for_completion_state+0x1c/0x40 [ 1355.603671][ T31] vfs_coredump+0x848/0x55e0 [ 1355.609071][ T31] ? trace_pelt_se_tp+0xed/0x130 [ 1355.614342][ T31] ? __pfx_vfs_coredump+0x10/0x10 [ 1355.635944][ T31] ? __lock_acquire+0x436/0x2890 [ 1355.662380][ T31] ? __lock_acquire+0x436/0x2890 [ 1355.786578][ T31] ? lock_acquire+0x179/0x330 [ 1355.815481][ T31] ? lock_acquire+0x179/0x330 [ 1355.842303][ T31] ? find_held_lock+0x2b/0x80 [ 1355.903241][ T31] ? __lock_acquire+0x436/0x2890 [ 1355.930467][ T31] ? lock_acquire+0x179/0x330 [ 1355.953659][ T31] ? find_held_lock+0x2b/0x80 [ 1355.962534][ T5867] usb 6-1: USB disconnect, device number 19 [ 1355.972058][ T31] ? stack_depot_save_flags+0x3de/0x9b0 [ 1355.982124][ T31] ? __pfx___cant_migrate+0x10/0x10 [ 1355.988790][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1355.995320][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1356.002659][ T31] ? stack_depot_save_flags+0x3de/0x9b0 [ 1356.008570][ T31] ? kasan_save_stack+0x42/0x60 [ 1356.015799][ T31] ? proc_coredump_connector+0x2d1/0x4f0 [ 1356.021578][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1356.029773][ T31] ? rcu_is_watching+0x12/0xc0 [ 1356.038454][ T31] get_signal+0x22e1/0x26d0 [ 1356.043032][ T31] ? __pfx_get_signal+0x10/0x10 [ 1356.047926][ T31] ? signal_wake_up_state+0x9e/0x120 [ 1356.054279][ T31] ? rcu_is_watching+0x12/0xc0 [ 1356.059067][ T31] arch_do_signal_or_restart+0x8f/0x7e0 [ 1356.064721][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1356.071030][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1356.076859][ T31] exit_to_user_mode_loop+0x8c/0x540 [ 1356.082127][ T31] do_syscall_64+0x4ee/0xf80 [ 1356.086747][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.092633][ T31] RIP: 0033:0x7f659a98f749 [ 1356.097162][ T31] RSP: 002b:00007f659b7d80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1356.105663][ T31] RAX: 00000000000000ca RBX: 00007f659abe6188 RCX: 00007f659a98f749 [ 1356.113674][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f659abe618c [ 1356.121644][ T31] RBP: 00007f659abe6180 R08: 00007f659b81b000 R09: 0000000000000000 [ 1356.129655][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1356.138333][ T31] R13: 00007f659abe6218 R14: 00007ffd1f6514d0 R15: 00007ffd1f6515b8 [ 1356.146468][ T31] [ 1356.149526][ T31] [ 1356.149526][ T31] Showing all locks held in the system: [ 1356.158314][ T31] 1 lock held by khungtaskd/31: [ 1356.163267][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1356.173198][ T31] 2 locks held by getty/5575: [ 1356.177938][ T31] #0: ffff88814d8510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1356.187778][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 1356.197910][ T31] 2 locks held by kworker/u8:24/19807: [ 1356.203350][ T31] #0: ffff88801cb1a148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1356.213991][ T31] #1: ffffc9000c5afc90 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1356.225517][ T31] 1 lock held by syz.4.3497/20815: [ 1356.230610][ T31] #0: ffffffff8e3d4cc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 1356.240555][ T31] 2 locks held by syz.2.3502/20838: [ 1356.245847][ T31] #0: ffff888056923b88 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1356.257077][ T31] #1: ffffffff8e3d4df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1356.267658][ T31] [ 1356.269994][ T31] ============================================= [ 1356.269994][ T31] [ 1356.280020][ T31] NMI backtrace for cpu 1 [ 1356.280041][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1356.280065][ T31] Tainted: [L]=SOFTLOCKUP [ 1356.280072][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1356.280081][ T31] Call Trace: [ 1356.280087][ T31] [ 1356.280094][ T31] dump_stack_lvl+0x116/0x1f0 [ 1356.280123][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1356.280141][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1356.280162][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1356.280179][ T31] sys_info+0x133/0x180 [ 1356.280203][ T31] watchdog+0xe66/0x1180 [ 1356.280226][ T31] ? rcu_is_watching+0x12/0xc0 [ 1356.280240][ T31] ? __pfx_watchdog+0x10/0x10 [ 1356.280256][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1356.280277][ T31] ? __kthread_parkme+0x19e/0x250 [ 1356.280292][ T31] ? __pfx_watchdog+0x10/0x10 [ 1356.280308][ T31] kthread+0x3c5/0x780 [ 1356.280326][ T31] ? __pfx_kthread+0x10/0x10 [ 1356.280344][ T31] ? rcu_is_watching+0x12/0xc0 [ 1356.280357][ T31] ? __pfx_kthread+0x10/0x10 [ 1356.280375][ T31] ret_from_fork+0x983/0xb10 [ 1356.280392][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1356.280409][ T31] ? __switch_to+0x7af/0x10d0 [ 1356.280429][ T31] ? __pfx_kthread+0x10/0x10 [ 1356.280447][ T31] ret_from_fork_asm+0x1a/0x30 [ 1356.280479][ T31] [ 1356.280488][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1356.423600][ C0] NMI backtrace for cpu 0 [ 1356.423619][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1356.423639][ C0] Tainted: [L]=SOFTLOCKUP [ 1356.423645][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1356.423654][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1356.423679][ C0] Code: a6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 19 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1356.423694][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1356.423708][ C0] RAX: 0000000006b1fcd9 RBX: 0000000000000000 RCX: ffffffff8b7846d9 [ 1356.423719][ C0] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b400 [ 1356.423729][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 1356.423739][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 1356.423750][ C0] R13: ffffffff8e097b40 R14: ffffffff9088bdd0 R15: 0000000000000000 [ 1356.423760][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 1356.423777][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1356.423788][ C0] CR2: 00007f55e6bb6ad8 CR3: 000000007465e000 CR4: 00000000003526f0 [ 1356.423799][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1356.423808][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1356.423816][ C0] Call Trace: [ 1356.423821][ C0] [ 1356.423826][ C0] default_idle+0x13/0x20 [ 1356.423846][ C0] default_idle_call+0x6c/0xb0 [ 1356.423865][ C0] do_idle+0x38d/0x510 [ 1356.423888][ C0] ? __pfx_do_idle+0x10/0x10 [ 1356.423909][ C0] cpu_startup_entry+0x4f/0x60 [ 1356.423929][ C0] rest_init+0x16b/0x2b0 [ 1356.423941][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1356.423957][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1356.423973][ C0] start_kernel+0x3ef/0x4d0 [ 1356.423988][ C0] x86_64_start_reservations+0x18/0x30 [ 1356.424002][ C0] x86_64_start_kernel+0x130/0x190 [ 1356.424015][ C0] common_startup_64+0x13e/0x148 [ 1356.424038][ C0] [ 1356.630072][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1356.636938][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1356.647615][ T31] Tainted: [L]=SOFTLOCKUP [ 1356.651919][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1356.661947][ T31] Call Trace: [ 1356.665219][ T31] [ 1356.668130][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1356.672724][ T31] vpanic+0x640/0x6f0 [ 1356.676689][ T31] panic+0xca/0xd0 [ 1356.680388][ T31] ? __pfx_panic+0x10/0x10 [ 1356.684792][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1356.690761][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1356.696899][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 1356.703035][ T31] ? watchdog+0xe83/0x1180 [ 1356.707442][ T31] ? watchdog+0xe76/0x1180 [ 1356.711844][ T31] watchdog+0xe94/0x1180 [ 1356.716074][ T31] ? rcu_is_watching+0x12/0xc0 [ 1356.720823][ T31] ? __pfx_watchdog+0x10/0x10 [ 1356.725479][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1356.730664][ T31] ? __kthread_parkme+0x19e/0x250 [ 1356.735670][ T31] ? __pfx_watchdog+0x10/0x10 [ 1356.740330][ T31] kthread+0x3c5/0x780 [ 1356.744383][ T31] ? __pfx_kthread+0x10/0x10 [ 1356.748959][ T31] ? rcu_is_watching+0x12/0xc0 [ 1356.753702][ T31] ? __pfx_kthread+0x10/0x10 [ 1356.758276][ T31] ret_from_fork+0x983/0xb10 [ 1356.762850][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1356.767942][ T31] ? __switch_to+0x7af/0x10d0 [ 1356.772604][ T31] ? __pfx_kthread+0x10/0x10 [ 1356.777179][ T31] ret_from_fork_asm+0x1a/0x30 [ 1356.781945][ T31] [ 1356.785232][ T31] Kernel Offset: disabled [ 1356.789530][ T31] Rebooting in 86400 seconds..