last executing test programs: 25m8.061697204s ago: executing program 32 (id=549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c00028008000140640101017569b16d2b48e7fef2c550d64402b99ef36d25d7fe"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 21m42.41616621s ago: executing program 0 (id=1279): syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a90308072501"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000003c0)={'\x00', 0x2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) getuid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e21, @remote}}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x24, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a1000004001000000800000000000000000ffff0000000000000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x30000805}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) poll(&(0x7f0000000080)=[{r7, 0x1410}], 0x1, 0xc) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) 21m39.200489796s ago: executing program 0 (id=1290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000020303000800000000000214000000000800010001"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0) 21m39.021016912s ago: executing program 0 (id=1292): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f000000040000000400000012010000000000004f41b6b4159f51", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="00001f00000000000000000000000000000000000000000000000000ca7163c819f6aeb30072684598dd87768f2d8b780ac3a7892239f8574ac79270914ec71ba3e3729831a780773de063337483d7d0d33613832264c3e70384a8b52dee87926fdba61f0df49aaa96f176cbd9b871fdcdcfb719b0a123868895391cf1ad711c43a19a8d7a5a5812fb6a6b41d6531c5df78c6fd3ef205bb40c09893db0b7b1ec0bc2b21df43bff1ab7666795b3cee2507497e98794f4da025ffd6cfbabf95b2c98d5edc9dc37dfa1fd17fe7293c00d387a1a1d55fe41e005108ce3ffbe1685f96e54fd1f81da95da26b81de6274ff489f6"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_io_uring_setup(0x4946, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x2, 0x11000}, &(0x7f0000000340), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000001200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0xc4c85512, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c10000042000701feffffff00000000037c000004004280241001"], 0x103c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 21m36.594806638s ago: executing program 0 (id=1310): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000440)='./file0/file0\x00', 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x2e8, 0x1398, 0x1398, 0x2e8, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0x0, 0xffffffff], [0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1f8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@multicast1, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffffff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e25, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x0, 0xc1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xfeff, 0xb, 0x1, 0x0, "7ec21ee5e3e5558d80179ecc86714ebfe9ad62b266c530ae959c1c3201569791735513742db64531b3f53ec8bb36de3cf4298ffd2edbd5bc05aae5eda6bf4ba7"}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffffff], [0x0, 0xff, 0xffffff00], 'geneve1\x00', 'wg0\x00', {0xff}, {0xff}, 0xc1, 0x0, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'veth1_to_bond\x00', {0x753}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) syz_usb_connect(0x2, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x9, 0x11, 0x15, 0x8, 0x1025, 0x5f, 0x327, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x0, 0xd0, 0x9, [{{0x9, 0x4, 0xe4, 0x8, 0x0, 0xae, 0xbe, 0x1c, 0xd}}]}}]}}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 21m34.478530504s ago: executing program 0 (id=1321): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x1ab400, 0x0) (async, rerun: 64) r2 = epoll_create1(0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000005000000fd0900008400000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000f800000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000080)) (async, rerun: 64) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85edaca83cdef0000f23223f38b347bf86b12ab6c0e981d4b1848069e3fb3c7ce85e8cadd3c7674be8b52e5cd77d5d3a93b20a0f172b189139363aa1b4333d73124ea44e9d8bd32c5731fd16b521d5373941d1571e0cf2c517571887d2a46498a4172416708a4fab24cfd5295f3309a22"], 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x4, [@union={0xc, 0x1, 0x0, 0x5, 0x0, 0xddc, [{0xc, 0x5, 0xdf9d}]}, @union={0x3, 0xa, 0x0, 0x5, 0x0, 0x4, [{0x8, 0x4, 0x9}, {0xe, 0x3, 0x1}, {0x0, 0x5, 0x7}, {0xd, 0x5, 0x8aa}, {0x4, 0x3, 0x3}, {0xb, 0x3, 0xd84}, {0x4, 0x5, 0x9}, {0x9, 0x4, 0x3}, {0x0, 0x4, 0xc}, {0xd, 0x1, 0x2}]}, @const={0x6, 0x0, 0x0, 0xa, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xfffffff7, [{0x0, 0x2, 0xc0f}]}, @typedef={0x2, 0x0, 0x0, 0x8, 0x5}, @struct={0xc, 0x2, 0x0, 0x4, 0x1, 0x8, [{0x7, 0x3, 0x370}, {0x10, 0x3, 0x6e1f}]}]}, {0x0, [0x5f, 0x61]}}, &(0x7f00000004c0)=""/101, 0x10c, 0x65, 0x1, 0x5076}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xffffffff, '\x00', 0x0, r5, 0x2, 0x5}, 0x50) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000000000)=0x3) (async) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, 0x0) (async) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) (async, rerun: 64) readv(r6, &(0x7f0000000180)=[{&(0x7f0000000140)=""/49, 0x31}], 0x1) (rerun: 64) 21m34.138746741s ago: executing program 0 (id=1324): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) close(r0) 21m33.756027315s ago: executing program 33 (id=1324): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) close(r0) 17m39.27003748s ago: executing program 5 (id=2132): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 17m37.192565563s ago: executing program 5 (id=2140): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) syz_open_dev$video(&(0x7f0000000140), 0x6, 0x25a981) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount$fuse(0x0, 0x0, 0x0, 0x200840, 0x0) 17m34.840314395s ago: executing program 5 (id=2145): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038000008000100ac1414bb335ad0327172116a"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000351000/0x2000)=nil) 17m34.725791912s ago: executing program 5 (id=2147): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) (fail_nth: 1) 17m33.820787708s ago: executing program 5 (id=2150): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x4008804) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f00000002c0)={0x0, &(0x7f0000000140)=[&(0x7f00000001c0)="8d2e8a00b152ccd29a85be3f0734c39ec572c0f562534cad1131bff3ac8ca06a9966ad068ce3b40cf8f10fbf0c898c61c03db3d2c898758381081adfeab269059a90595bbf43319620937191b462f68267642f79ed2345931890d2c9d4a0ad9cbf27d315b5e60e7f7e78f27ddec91ea429eaa10b81ff98cee69adabd0f407bdb87d2f257d21aef8d7aa4bb859ffd3a08733eba60eec995bde5533346c9d11605c378d425ee63c18a1855164a69b889b012ac4bec165a8d92d37eea537b2808f828"]}) (async) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f00000002c0)={0x0, &(0x7f0000000140)=[&(0x7f00000001c0)="8d2e8a00b152ccd29a85be3f0734c39ec572c0f562534cad1131bff3ac8ca06a9966ad068ce3b40cf8f10fbf0c898c61c03db3d2c898758381081adfeab269059a90595bbf43319620937191b462f68267642f79ed2345931890d2c9d4a0ad9cbf27d315b5e60e7f7e78f27ddec91ea429eaa10b81ff98cee69adabd0f407bdb87d2f257d21aef8d7aa4bb859ffd3a08733eba60eec995bde5533346c9d11605c378d425ee63c18a1855164a69b889b012ac4bec165a8d92d37eea537b2808f828"]}) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 17m33.519615352s ago: executing program 5 (id=2153): syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) read$FUSE(0xffffffffffffffff, &(0x7f0000012580)={0x2020}, 0x2020) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="04db99"], 0x2, 0x0) finit_module(r4, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x4e14, 0x912a, 0x41, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000000)='\x906\xec', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) 17m32.880817666s ago: executing program 34 (id=2153): syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) read$FUSE(0xffffffffffffffff, &(0x7f0000012580)={0x2020}, 0x2020) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="04db99"], 0x2, 0x0) finit_module(r4, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x4e14, 0x912a, 0x41, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000000)='\x906\xec', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) 16m9.760318236s ago: executing program 1 (id=2401): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="ea1747ee24b86a34d6d5c2e1a5c3fa9bed5f96120d23943a47f115bec6dc08286796f83a316ba76165d3827b631e77dc07a55a6cde8915a691dd4fc768ddd8c53468317c75a269a9928b524cf62f19d7ef3c0a0b030c0d185464d4ba8418d407ef29fc1e4761bcb5a68fcd2317bbfb4eb98caa0d3e2e006a251e095ed496a5552fbf256eb2f643df539bad7e9d72146c7ac03fdba4ce87cb39600feede00000000000000000000000000000616e811ea5c31696a5bc384e7f0005667204385829db5b251", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)='%', 0x1}], 0x1}}], 0x3, 0x400c0) (fail_nth: 1) 16m9.040290824s ago: executing program 1 (id=2404): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038000008000100ac1414bb335ad0327172116ae465f27627806ee806ea0ffff3078f8b53652f47381941e902088ceecaa354cf2bfcb86b6860d79c46b7effb"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000351000/0x2000)=nil) 16m8.272515494s ago: executing program 1 (id=2406): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0xcc8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@mcast2, @mcast1}) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4008001}, 0x0) 16m7.320682343s ago: executing program 1 (id=2411): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) 16m6.265529463s ago: executing program 1 (id=2414): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r4, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0xb516, 0xc2de, 0x8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x1, "5a77bd318786aeb879ca62cdab2a02fa905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba041fb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) 16m5.126814674s ago: executing program 1 (id=2421): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0xcc8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@mcast2, @mcast1}) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4008001}, 0x0) 16m4.677647283s ago: executing program 35 (id=2421): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0xcc8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@mcast2, @mcast1}) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4008001}, 0x0) 9m46.089382054s ago: executing program 6 (id=3685): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'ovf\x00', 0x1, 0x10, 0x4}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r5, 0x5, 0x4002) sched_setscheduler(r5, 0x5, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r7, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405668, &(0x7f00000001c0)={0x0, 0x20, 0x2}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fedbdf250600000014005180080003000600000008000100", @ANYRES32=r9, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0x90) 9m45.04099983s ago: executing program 6 (id=3689): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, 0x0, 0x0, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9m42.426843576s ago: executing program 6 (id=3700): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'fl512\x00', [0x1, 0xb9, 0x5a, 0x1, 0x51f, 0x7, 0x10000, 0xc3, 0x6, 0x0, 0x7, 0x5, 0x100, 0x7, 0x6, 0x0, 0x0, 0x9, 0xf, 0x7, 0x1000, 0x7, 0x6, 0x9155, 0x6, 0x0, 0x40000000, 0x8, 0xf, 0x5, 0x1]}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$caif_seqpacket(0x25, 0x5, 0x3) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x34}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000001400)=0x3d70, 0x4) 9m41.149847093s ago: executing program 6 (id=3706): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) epoll_create1(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002, 0x0) pipe(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) socket$tipc(0x1e, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 9m39.814124637s ago: executing program 6 (id=3709): socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000380)={0x24, &(0x7f0000000080)={0x40, 0x3, 0x2, {0x2, 0x21}}, &(0x7f00000001c0)={0x0, 0x3, 0xa3, @string={0xa3, 0x3, "5f70a9a1739e6bdd7c37b2347fac6dee79cc4b08961a9df36743e3f68091c8450d977b603387c1e767441d4cb9440ba0dae3107b7e762c717d5385848a0604994960ff7792f0eb4f8333ff698aa1ca842681fd0516c95c913610754dfe9c88d25a8220a07deaf86dc2af84ff4a06f333d6970d9a8b03466f63320ec72f062612031d3b854508188063ec7fb64700b1cae20729a249f9b5c970d7da0b9a19ecf0cd"}}, &(0x7f0000000140), 0x0}, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="abf6338760cbcb4c553fec94248c32e2", 0x10) r5 = accept$alg(r2, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000040)=0xd, 0x4) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/225, 0xfec8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) socket$inet6_sctp(0xa, 0x2, 0x84) 9m35.918363051s ago: executing program 6 (id=3722): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') lseek(r0, 0x339, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r6, 0xee00, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 9m30.009905462s ago: executing program 2 (id=3743): r0 = socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x1000, 0x100) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) getpeername$tipc(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r7, 0x0) 9m29.201017115s ago: executing program 2 (id=3746): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) 9m29.011429938s ago: executing program 2 (id=3747): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) creat(0x0, 0xecf86c37d53049cc) sched_setscheduler(0x0, 0x1, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x8926, 0xffffffffffff7ffe) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r1, 0x2ded, 0x60c5, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000180)={[0x8]}, 0x8) (fail_nth: 2) 9m27.325462592s ago: executing program 2 (id=3750): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) (fail_nth: 2) 9m26.686849902s ago: executing program 2 (id=3752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000300)=0x90) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x205, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x840) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "d172f5", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0xc2, 0x2, 0x9}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 9m25.90879749s ago: executing program 2 (id=3756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03000000000000006e9a7c9f3c5081be0a51384dcdacc3c8327aae57c133bb66f442ef2ccda3ef01280473e3b2b7626760ed6c5ef690aaa8310f598c89e333035d0b0c4575bdd31539"], 0x0, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r7, 0x0, 0x0) setreuid(0x0, 0x0) getresgid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000180)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 9m25.176577735s ago: executing program 36 (id=3756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03000000000000006e9a7c9f3c5081be0a51384dcdacc3c8327aae57c133bb66f442ef2ccda3ef01280473e3b2b7626760ed6c5ef690aaa8310f598c89e333035d0b0c4575bdd31539"], 0x0, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r7, 0x0, 0x0) setreuid(0x0, 0x0) getresgid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000180)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 9m20.568945309s ago: executing program 37 (id=3722): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') lseek(r0, 0x339, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r6, 0xee00, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 12.79415988s ago: executing program 9 (id=5560): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x16, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) 12.745678635s ago: executing program 9 (id=5561): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r6, r7, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r4) 11.770103692s ago: executing program 8 (id=5565): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) epoll_create1(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002, 0x0) pipe(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) socket$tipc(0x1e, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dde5bf3eba23db"}, 0x28) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x1000) 10.328318902s ago: executing program 8 (id=5568): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0xb, 0x7, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 9.67047057s ago: executing program 8 (id=5574): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003980)=[{{&(0x7f0000000600)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/178, 0xb2}, {&(0x7f0000000440)=""/18, 0x12}], 0x3, &(0x7f0000000840)=""/198, 0xc6}, 0x7}, {{&(0x7f00000009c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000000a40)=""/156, 0x9c}, {&(0x7f0000000b00)=""/178, 0xb2}, {&(0x7f0000001c00)=""/183, 0xb7}, {&(0x7f0000001cc0)=""/231, 0xe7}, {&(0x7f0000001dc0)=""/214, 0xd6}, {&(0x7f0000000940)=""/49, 0x31}, {&(0x7f0000001ec0)=""/13, 0xd}, {&(0x7f0000001f00)=""/151, 0x97}, {&(0x7f0000001fc0)=""/38, 0x26}, {&(0x7f0000002000)=""/246, 0xf6}], 0xa, &(0x7f00000021c0)=""/3, 0x3}, 0xffffffff}, {{&(0x7f0000002200)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003640)=[{&(0x7f0000002280)=""/239, 0xef}, {&(0x7f0000002380)=""/33, 0x21}, {&(0x7f00000023c0)=""/238, 0xee}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/219, 0xdb}, {&(0x7f00000035c0)=""/80, 0x50}], 0x6, &(0x7f00000036c0)=""/147, 0x93}, 0x1}, {{&(0x7f0000003780)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003800)=""/7, 0x7}], 0x1, &(0x7f0000003880)=""/231, 0xe7}, 0xd71}], 0x4, 0x120a1, &(0x7f0000003a80)={0x0, 0x989680}) syz_usbip_server_init(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5a3, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) setpgid(0x0, r3) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x81901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) getdents64(r4, &(0x7f0000000c00)=""/4096, 0x1000) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @mcast1, 0xbc}, {0xa, 0x4e22, 0x3, @private0, 0x401}, r5, 0x4}}, 0x48) 9.587926655s ago: executing program 4 (id=5575): socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0x0, 0x3, 0x93, @string={0x93, 0x3, "eb763590a12a68b8c530590b4abe7edf9a91c9c4f5fe80968c7bc503427d3ebde928ccc09a68f114befca3c0a783c53d669497362e554112c20fad42840ee732ea67f023465802bb944cb3b40ea16ae675549b2e74fea891365a92a52b008dc67128e452c0eb0449ad75bb90205fa7ea77b01ea9eb705880feb2c97707ce664e562f47fc06fc8353349557cf36c21ca9c7"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000240)={0x0, 0xe, 0x57, "e5948bb19315362210b528a8bdbcf676ffa81aea91831486042ca8eb55afe6d178b4d8472704618a1e18cd551a37fa5022c6ddef5d3ab6a706b8ee7f25513c1a0038cc6c09c4f7c4a20cc645948309f6a41d79eba1c908"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x74}, &(0x7f0000000440)={0x20, 0x0, 0x2b, {0x29, "6214f5087d24a0883e1847490cbff6d5d3321adfc966ef555aa2c19723d7de18a7221b82030cebcbcf"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x5}}) syz_usb_disconnect(r0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)=0x11) socket$inet_sctp(0x2, 0x1, 0x84) 9.068458954s ago: executing program 9 (id=5577): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) epoll_create1(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002, 0x0) pipe(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) socket$tipc(0x1e, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dde5bf3eba23db"}, 0x28) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x1000) 8.249618379s ago: executing program 3 (id=5579): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="080028bd700022dcdf2502d688a5"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x21000011, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0xa, 0x80002, 0x10006) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="2b0100000000"], 0xd) 7.207581101s ago: executing program 9 (id=5581): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r6, r7, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.221979624s ago: executing program 3 (id=5583): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0xa, 0x4) close(r0) (fail_nth: 3) 6.142370986s ago: executing program 8 (id=5584): socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) move_pages(0x0, 0x0, &(0x7f0000002340), 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a042, 0x155) 6.030894671s ago: executing program 3 (id=5585): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_cancel(0x0, 0xfffffffffffffffe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e21, 0x0, @mcast2, 0x8}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xf, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f00000000c0)) r6 = dup(0xffffffffffffffff) write$6lowpan_enable(r6, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 5.625273051s ago: executing program 3 (id=5587): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x2, 0x80805, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x4, 0x5, 0x1, 0x0, 0x1}) sendmmsg$inet_sctp(r4, &(0x7f0000000880), 0x0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/39], 0x30}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x400002, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f00000002c0)={0xca80}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000440)="18144398b031442b052d9fd16884bfc2bd30b4c6171818207c65e04aeac9a266323938746c64406fcabc362eede4d5fb27fdcbc0d1286c03ecb81dd9054b7c8b1bef74534e026fa40beb70bd689897381ee4c288968929ecb9cd3068d7194a38a4e89d0ca263563781938d3927d323f72c6653de637a764b81b6f49679e877ab13455bb1b12e97949677a6bcc1c60b743a81fecf49de7b7a4af6cd145cf607b31f98f787931f98115ce509cb89d0e54399239855ae83f5eec9e2aa47054685cc8a42cc6464aa019ce120abd8110bd4a506", 0xd1}, {&(0x7f00000003c0)="f5b4bfd9b83c5bef1d7d16ba6d7f05d8ee1f05801d", 0x15}, {&(0x7f0000000540)="67436b9f7f1235f5261006d2c434d19ae681bb9e89bfadd28f887daca531bd335aaabc7d2d217edfcfa9eafd09a472efd9cf9845676a56d8d87e4a905f158c21a050e0ce2fec85273aabd72240c21b44d1f1a5e7efd734f5c18dc5d2d033cf5c2b65", 0x62}, {&(0x7f00000005c0)="1d176044a3918b28dbd597a78ea71c1aaf16dab747abea7f146c0f131ed27ceaa5bc340aeecb3341baea21544c68bf02087d4d7bf17938a17112e9847d76d0c17e037d117725189d12a2b066a84262e72a94337b22c7e81337229d8123c8d9c20ca2a73be239e6ea998c24d0b3aa38cd129efd2fa834bae71735b24ac7dfed6c8f5abea1b70926f2accd40f96d380d1d5645a83d8c3d5df13cb902b936587763e90028fa31dd62db66b06b0d41fad1df7cdb", 0xb2}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="000000000001000000010000ce402a85", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x800}}], 0x1, 0x20048814) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r7}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086201, &(0x7f0000000080)=0x2) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) 5.323225413s ago: executing program 4 (id=5588): r0 = socket(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xf9) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) (async) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="e0010000", @ANYRES16=r8, @ANYBLOB="00082dbd7000ffdbdf2509000000700001801c0002800800040004000000080001000400000008000400000000000d0001007564703a73797a31000000000800030001000000380004001400010002004e230a0101000000000000000000200002000a004e2200000ffffc000000000000000000000000000000c509000040010680080006000900000047000300a1ed1491304576a4f850294fc626193bb0114e55c68537f1b6a15c7d5c6302de5deb4773ec2f84dfa9730b3d3584b4f3520c2cd10e61efd46b3be4471187f12e359a31000800010001000000040005004c00040067636d286165732900000000000000000000000000000000000000000000000024000000ed8e7097d7f95599c4e1044317d7daba3d7440a38487e24cb8a882deaf1842e854b996724c00040067636d2861657329000000000000000000000000000000000000000000000000240000009ee76e8085af20ee7a259af289bbfc80ea82d813369114bc91d9da6564f7221cbb17c9c23f00040067636d286165732900000000000000000000000000000000000000000000000017000000dca3902d522d5a032a621b020e3349f1e59df0875ec1a30008000100000001001c000380080002000d00000008000300ff00000008000300040200002400098008000200ff0f00000800010005000000080001000100000008000200040000000800068004000200"], 0x20c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) (async) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) (async) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40040) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x5411, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r9}, 0x4) (async) sendmsg$kcm(r7, &(0x7f0000000cc0)={&(0x7f00000000c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)="ab4d6000d1d27c455538659091a238dd55a28b587f2a8faaf35ef78a24f56f7b576f95968e40e4123dec02d678b0a11674d02da1954ce07bfa3282436cd86a088cf9656e7c2e9d034f61707b7c2b8b19d4fc31c8a8137b665f5c288bdb369b5875586845f4e5e630e78247545ce4fdedb862958162040a1960dfa3e1760455e0fef4a3950191d820d2f362e25d243c123e1edc1c6241cd29febd88c309451a1799240e27dbcfa25d9daab3ed09dcf99dcd1f0c17624ba59e72127f4b8a5e37d2514956ec540f480e61074922c01312b2cf17a6c8940592a29615efe734fed367b428de552e2b399bfc8415a130e7cb", 0xef}, {&(0x7f0000000640)="62ecb64e1f7780c620a73aa1d536debeb24dfe7040d8b474e8dd049a5d7c093c1c196d9a1ff0ce0e410248f9fa1cdc2c315d3c65fca984e17ba15688a981666c7c3514c7c2fc793d1ca716c9246f72e07fe585877d3aca66d2987f157f2bc16792ab29ebef0050ee00bd15733ec6f1677dd0403c80a7c5c075dc8aa22f4e8e27e173868aaf24eae276344e25903458ddd04f8123ea9cf8e2977983e1f983ba81ef385aa79d227a07f4be4e8bf0d887532591bd0e171368faa93ea5bdda88f7877a6cd528ff831089b69725de7ec8b60690ee29f7", 0xd4}, {&(0x7f0000000300)}], 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x510}, 0x20000004) 4.666520675s ago: executing program 7 (id=5589): timer_create(0x2, 0x0, &(0x7f0000000300)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000040)={0x0, 0x38, 0x2, @thr={&(0x7f00000000c0)="985394313819336c755914d5a8e1999f0e5bbcd2b3794d4cbe5c8b545e1a1ce35f2e07046667f3b72182814462378e6b31d579463e2fc6b69028e59587cfe1f5b6af2a5781d7726b114f880b", &(0x7f0000000340)="279e47a5462585d2b5e3339e5ec26bb08549a9e9b3ae722e752cfed4ddf9be18fdf5377068035d4853a953fe8f7275a07ac1bba5caea9661dea7e65b64d9d9f7a9c900a6159ad1a788a9547effe3b5f918e1c5bd66f1e0ced43fe1ffd6fc8cb91df445d1de303e605df292a332152c26c5d8d4fbd410c28d90c31c6ef4ab703102c830698a3360f855f459b42657d0630165f21882a1eb2c505a36f5eaa36f75a4d3b67b62db356125b83694630665645fd09e44a44aa730528d57a63e9edd8e70b2b68489bb9887b37f5fcc579aaa77be295f6498f5ed1b78f8e6b095bb199d12d7e7a07e9890b349a37a7d78020a14a1b5bc9829"}}, &(0x7f0000000080)=0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x3, 0x5001) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) r3 = socket(0x25, 0x3, 0x1000038) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x7) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) 4.515894605s ago: executing program 7 (id=5590): r0 = gettid() r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x141000, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000100)={0x1, 0x20, 0x40, 0x6e1, 0x4, 0x0, 0xffffffff, 0xd53c, 0x0, 0x3, 0x20, 0xe, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000200)={0xc, r2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, 0x0, 0x20000080) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002041, 0x0) getgroups(0x0, 0x0) 4.439160007s ago: executing program 3 (id=5591): socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_create1(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002, 0x0) pipe(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x20008000) socket$tipc(0x1e, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4.000525458s ago: executing program 7 (id=5592): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x2, 0x80805, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x4, 0x5, 0x1, 0x0, 0x1}) sendmmsg$inet_sctp(r4, &(0x7f0000000880), 0x0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/39], 0x30}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x400002, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f00000002c0)={0xca80}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000440)="18144398b031442b052d9fd16884bfc2bd30b4c6171818207c65e04aeac9a266323938746c64406fcabc362eede4d5fb27fdcbc0d1286c03ecb81dd9054b7c8b1bef74534e026fa40beb70bd689897381ee4c288968929ecb9cd3068d7194a38a4e89d0ca263563781938d3927d323f72c6653de637a764b81b6f49679e877ab13455bb1b12e97949677a6bcc1c60b743a81fecf49de7b7a4af6cd145cf607b31f98f787931f98115ce509cb89d0e54399239855ae83f5eec9e2aa47054685cc8a42cc6464aa019ce120abd8110bd4a506", 0xd1}, {&(0x7f00000003c0)="f5b4bfd9b83c5bef1d7d16ba6d7f05d8ee1f05801d", 0x15}, {&(0x7f0000000540)="67436b9f7f1235f5261006d2c434d19ae681bb9e89bfadd28f887daca531bd335aaabc7d2d217edfcfa9eafd09a472efd9cf9845676a56d8d87e4a905f158c21a050e0ce2fec85273aabd72240c21b44d1f1a5e7efd734f5c18dc5d2d033cf5c2b65", 0x62}, {&(0x7f00000005c0)="1d176044a3918b28dbd597a78ea71c1aaf16dab747abea7f146c0f131ed27ceaa5bc340aeecb3341baea21544c68bf02087d4d7bf17938a17112e9847d76d0c17e037d117725189d12a2b066a84262e72a94337b22c7e81337229d8123c8d9c20ca2a73be239e6ea998c24d0b3aa38cd129efd2fa834bae71735b24ac7dfed6c8f5abea1b70926f2accd40f96d380d1d5645a83d8c3d5df13cb902b936587763e90028fa31dd62db66b06b0d41fad1df7cdb", 0xb2}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="000000000001000000010000ce402a85", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x800}}], 0x1, 0x20048814) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r7}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086201, &(0x7f0000000080)=0x2) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) 3.931197775s ago: executing program 9 (id=5593): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10) io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b4}) r3 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000100)='net/ip_tables_matches\x00') syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000005540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_SRC={0x8, 0x2, @remote}]}, 0x24}}, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) ioctl$RNDGETENTCNT(r7, 0x80045200, 0xffffffffffffffff) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x40, &(0x7f0000001840)=ANY=[@ANYRES32, @ANYRES64=r8, @ANYBLOB="b547d4922d2339ce546f8ef55430004ebe3109"]) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x6, {0x6, 0x4, "45e2567a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.897224949s ago: executing program 8 (id=5594): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0x4, &(0x7f00000004c0)={&(0x7f0000000440)="c44241b6fc3ef0408160bb841e97fbc421a9db9297c80000c462f9237e0ec42241096aa8260f01f9f6892d00000000430fc4890a0000009bc421a96db290474df23b9967a554eb", 0x4, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000000500)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = dup(r1) connect$unix(r2, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) epoll_pwait(r2, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x518, &(0x7f0000000100), 0x8) connect$llc(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r8, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x43, 0x92, 0xd5, 0x20, 0x54c, 0x6c3, 0xeb7a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x87, 0x70, 0x7, [{{0x9, 0x4, 0xcb, 0x1, 0x0, 0x4f, 0x3e, 0xaf, 0xb5}}]}}]}}, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3.826339985s ago: executing program 4 (id=5595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 3) 2.68542393s ago: executing program 7 (id=5596): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003900), 0x0, 0x6}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, 0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_cancel(0x0, 0xfffffffffffffffe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e21, 0x0, @mcast2, 0x8}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xf, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x0, 0x0, 0x0) r7 = dup(0xffffffffffffffff) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4) 2.269792026s ago: executing program 7 (id=5597): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x20008000) socket$tipc(0x1e, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dde5bf3eba23db"}, 0x28) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x1000) 2.174874333s ago: executing program 4 (id=5598): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000340), &(0x7f0000002340)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) ioprio_set$pid(0x0, 0x0, 0x2000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f0000000180), &(0x7f0000000240)=[0x1], 0x0, 0x700000000000000) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) prlimit64(r1, 0x7, &(0x7f0000000080)={0xfffffffffffff000, 0x8001}, &(0x7f00000000c0)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(r3, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 1.950699996s ago: executing program 7 (id=5599): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003980)=[{{&(0x7f0000000600)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/178, 0xb2}, {&(0x7f0000000440)=""/18, 0x12}], 0x3, &(0x7f0000000840)=""/198, 0xc6}, 0x7}, {{&(0x7f00000009c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000000a40)=""/156, 0x9c}, {&(0x7f0000000b00)=""/178, 0xb2}, {&(0x7f0000001c00)=""/183, 0xb7}, {&(0x7f0000001cc0)=""/231, 0xe7}, {&(0x7f0000001dc0)=""/214, 0xd6}, {&(0x7f0000000940)=""/49, 0x31}, {&(0x7f0000001ec0)=""/13, 0xd}, {&(0x7f0000001f00)=""/151, 0x97}, {&(0x7f0000001fc0)=""/38, 0x26}, {&(0x7f0000002000)=""/246, 0xf6}], 0xa, &(0x7f00000021c0)=""/3, 0x3}, 0xffffffff}, {{&(0x7f0000002200)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003640)=[{&(0x7f0000002280)=""/239, 0xef}, {&(0x7f0000002380)=""/33, 0x21}, {&(0x7f00000023c0)=""/238, 0xee}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/219, 0xdb}, {&(0x7f00000035c0)=""/80, 0x50}], 0x6, &(0x7f00000036c0)=""/147, 0x93}, 0x1}, {{&(0x7f0000003780)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003800)=""/7, 0x7}], 0x1, &(0x7f0000003880)=""/231, 0xe7}, 0xd71}], 0x4, 0x120a1, &(0x7f0000003a80)={0x0, 0x989680}) syz_usbip_server_init(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5a3, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) r4 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) setpgid(0x0, r4) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x81901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) getdents64(r5, &(0x7f0000000c00)=""/4096, 0x1000) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @mcast1, 0xbc}, {0xa, 0x4e22, 0x3, @private0, 0x401}, r6, 0x4}}, 0x48) 1.688597714s ago: executing program 3 (id=5600): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x1d, 0x2, 0x6) syz_emit_ethernet(0x1b, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @random="886875c3eb79", @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x0, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0xbc, 0x4e, 'A', "29c3"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000002c0)=[r3], &(0x7f0000000200), &(0x7f00000000c0)=[r4], &(0x7f0000000040), 0x0, 0x300}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000005c0)=""/102392, 0x18ff8) syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6, 0x800, 0x3, 0xffffffff}, &(0x7f0000000200)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 1.226384251s ago: executing program 4 (id=5601): io_uring_setup(0x70c5, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x8000001}) r0 = socket(0x2b, 0x1, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}], 0x20) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf) openat(0xffffffffffffff9c, 0x0, 0x42042, 0x14a) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x3, 0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x103}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x3f, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) sendto$isdn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 427.977648ms ago: executing program 8 (id=5602): r0 = gettid() r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x141000, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000100)={0x1, 0x20, 0x40, 0x6e1, 0x4, 0x0, 0xffffffff, 0xd53c, 0x0, 0x3, 0x20, 0xe, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000200)={0xc, r2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, 0x0, 0x20000080) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002041, 0x0) getgroups(0x0, 0x0) 344.900087ms ago: executing program 9 (id=5603): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r4, &(0x7f0000002200)={0x2020}, 0x2020) write$binfmt_script(r5, &(0x7f0000020240), 0x10010) 0s ago: executing program 4 (id=5604): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000400007012bbd700000000000017c00000400c2800c00018006000600843b0000100002800c000680060036"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001400)=""/226, 0xe2}], 0x1}, 0x5}], 0x1, 0x10000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='nfsd\x00', 0x2208004, 0x0) kernel console output (not intermixed with test programs): utes in process `syz.4.4983'. [ 1520.990946][T24867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4983'. [ 1522.552504][T20213] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1522.767518][T20213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.779833][T20213] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1522.784390][T24866] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4982'. [ 1522.799735][T20213] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1522.807798][T24866] netlink: 'syz.7.4982': attribute type 11 has an invalid length. [ 1522.846184][T20213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.854510][T24866] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4982'. [ 1522.854905][T20213] usb 4-1: Product: syz [ 1522.868869][T20213] usb 4-1: Manufacturer: syz [ 1522.873938][T20213] usb 4-1: SerialNumber: syz [ 1522.908445][T20213] usb 4-1: config 0 descriptor?? [ 1522.946186][T24890] program syz.9.4989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1523.121057][T24892] overlayfs: overlapping lowerdir path [ 1523.137467][T24896] syzkaller1: entered promiscuous mode [ 1523.145167][T24896] syzkaller1: entered allmulticast mode [ 1524.883647][T20213] usb 4-1: USB disconnect, device number 78 [ 1525.132497][ T30] audit: type=1326 audit(1761165755.490:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24922 comm="syz.3.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b878efc9 code=0x7ffc0000 [ 1525.156238][ T30] audit: type=1326 audit(1761165755.490:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24922 comm="syz.3.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b878efc9 code=0x7ffc0000 [ 1525.183541][ T30] audit: type=1326 audit(1761165755.540:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24922 comm="syz.3.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9b878efc9 code=0x7ffc0000 [ 1525.344340][ T30] audit: type=1326 audit(1761165755.540:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24922 comm="syz.3.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b878efc9 code=0x7ffc0000 [ 1525.373582][ T30] audit: type=1326 audit(1761165755.540:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24922 comm="syz.3.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b878efc9 code=0x7ffc0000 [ 1525.399482][ T30] audit: type=1326 audit(1761165755.540:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24922 comm="syz.3.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9b878efc9 code=0x7ffc0000 [ 1525.430773][ T30] audit: type=1326 audit(1761165755.540:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24922 comm="syz.3.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b878efc9 code=0x7ffc0000 [ 1525.464396][ T30] audit: type=1326 audit(1761165755.540:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24922 comm="syz.3.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b878efc9 code=0x7ffc0000 [ 1525.490299][ T30] audit: type=1326 audit(1761165755.540:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24922 comm="syz.3.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9b878efc9 code=0x7ffc0000 [ 1525.520821][ T30] audit: type=1326 audit(1761165755.550:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24922 comm="syz.3.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b878efc9 code=0x7ffc0000 [ 1525.623632][T24929] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4998'. [ 1525.851193][T24919] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1525.996585][T24919] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1526.004094][T24919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1526.010196][T24919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1526.173521][T24933] program syz.4.5001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1526.349484][T24939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1526.456135][T24940] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4999'. [ 1526.906339][T24941] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1526.912887][T24941] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1527.032714][T24637] Bluetooth: hci4: command 0x0c1a tx timeout [ 1527.142000][T24941] vhci_hcd vhci_hcd.0: Device attached [ 1527.310435][T24946] overlayfs: overlapping lowerdir path [ 1527.372628][T20213] usb 49-1: new low-speed USB device number 4 using vhci_hcd [ 1527.476487][T24941] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1527.488062][T24941] cramfs: wrong magic [ 1527.697797][T24959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1528.122667][T13757] Bluetooth: hci1: command 0x0406 tx timeout [ 1528.128782][T13757] Bluetooth: hci5: command 0x0406 tx timeout [ 1528.136090][T24637] Bluetooth: hci3: command 0x0406 tx timeout [ 1528.510474][T24942] vhci_hcd: connection reset by peer [ 1528.524887][T23841] vhci_hcd: stop threads [ 1528.529346][T23841] vhci_hcd: release socket [ 1528.535324][T23841] vhci_hcd: disconnect device [ 1528.825429][T24976] FAULT_INJECTION: forcing a failure. [ 1528.825429][T24976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1528.945568][T24976] CPU: 1 UID: 0 PID: 24976 Comm: syz.9.5011 Not tainted syzkaller #0 PREEMPT(full) [ 1528.945594][T24976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1528.945603][T24976] Call Trace: [ 1528.945609][T24976] [ 1528.945616][T24976] dump_stack_lvl+0x16c/0x1f0 [ 1528.945645][T24976] should_fail_ex+0x512/0x640 [ 1528.945670][T24976] _copy_from_user+0x2e/0xd0 [ 1528.945692][T24976] wext_handle_ioctl+0xc2/0x2a0 [ 1528.945720][T24976] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1528.945755][T24976] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1528.945780][T24976] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1528.945806][T24976] sock_ioctl+0x3a1/0x6b0 [ 1528.945825][T24976] ? __pfx_sock_ioctl+0x10/0x10 [ 1528.945840][T24976] ? hook_file_ioctl_common+0x145/0x410 [ 1528.945869][T24976] ? selinux_file_ioctl+0x180/0x270 [ 1528.945887][T24976] ? selinux_file_ioctl+0xb4/0x270 [ 1528.945906][T24976] ? __pfx_sock_ioctl+0x10/0x10 [ 1528.945924][T24976] __x64_sys_ioctl+0x18e/0x210 [ 1528.945949][T24976] do_syscall_64+0xcd/0xfa0 [ 1528.945976][T24976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.945995][T24976] RIP: 0033:0x7ff5c5d8efc9 [ 1528.946010][T24976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1528.946026][T24976] RSP: 002b:00007ff5c6cb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1528.946043][T24976] RAX: ffffffffffffffda RBX: 00007ff5c5fe5fa0 RCX: 00007ff5c5d8efc9 [ 1528.946054][T24976] RDX: 0000200000000040 RSI: 0000000000008b2c RDI: 0000000000000004 [ 1528.946065][T24976] RBP: 00007ff5c6cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1528.946075][T24976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1528.946085][T24976] R13: 00007ff5c5fe6038 R14: 00007ff5c5fe5fa0 R15: 00007ffe511f9548 [ 1528.946109][T24976] [ 1530.639093][T24993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1531.382633][T25003] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5020'. [ 1531.452620][T25010] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1531.459162][T25010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1531.593688][T25010] vhci_hcd vhci_hcd.0: Device attached [ 1531.600293][T25016] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5022'. [ 1531.686918][T25010] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1531.694908][T25010] cramfs: wrong magic [ 1532.200468][T25025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1533.207309][T25011] vhci_hcd: connection reset by peer [ 1533.219004][T17321] vhci_hcd: stop threads [ 1533.223765][T17321] vhci_hcd: release socket [ 1533.231214][T17321] vhci_hcd: disconnect device [ 1533.327147][T20213] vhci_hcd: vhci_device speed not set [ 1534.066264][T25047] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1534.074046][T25047] cramfs: wrong magic [ 1534.082553][T25044] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1534.089094][T25044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1534.140061][T25044] vhci_hcd vhci_hcd.0: Device attached [ 1534.257613][T25055] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5034'. [ 1534.384038][T25062] netlink: 'syz.9.5036': attribute type 11 has an invalid length. [ 1534.392049][T25062] netlink: 244 bytes leftover after parsing attributes in process `syz.9.5036'. [ 1534.404785][T15064] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1534.442204][T25064] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1534.448759][T25064] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1534.534779][T25064] vhci_hcd vhci_hcd.0: Device attached [ 1534.608562][T25064] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1534.616666][T25064] cramfs: wrong magic [ 1534.773348][T25045] vhci_hcd: connection reset by peer [ 1534.806330][T23841] vhci_hcd: stop threads [ 1534.810926][T23841] vhci_hcd: release socket [ 1534.815492][T20213] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 1534.823851][T23841] vhci_hcd: disconnect device [ 1535.001693][T25077] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5039'. [ 1535.049042][T25077] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5039'. [ 1535.292472][T25065] vhci_hcd: connection reset by peer [ 1535.307014][T18652] vhci_hcd: stop threads [ 1535.311363][T18652] vhci_hcd: release socket [ 1535.321505][T18652] vhci_hcd: disconnect device [ 1536.415253][T25090] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5042'. [ 1536.429223][T25090] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5042'. [ 1536.494250][T25093] netlink: 'syz.8.5042': attribute type 21 has an invalid length. [ 1536.502828][T25093] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5042'. [ 1536.534224][T25093] netlink: 'syz.8.5042': attribute type 5 has an invalid length. [ 1536.561028][T25093] netlink: 'syz.8.5042': attribute type 6 has an invalid length. [ 1536.581852][T25093] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5042'. [ 1536.625249][T25095] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5046'. [ 1536.696413][T25101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5047'. [ 1536.717254][T25101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5047'. [ 1536.974381][T25106] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5048'. [ 1538.076041][T25117] program syz.7.5050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1539.291363][T25129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1539.562981][T15064] vhci_hcd: vhci_device speed not set [ 1539.778382][T25141] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1539.785011][T25141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1539.809979][T25141] vhci_hcd vhci_hcd.0: Device attached [ 1539.835194][T25141] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1539.843051][T25141] cramfs: wrong magic [ 1540.012467][T20213] vhci_hcd: vhci_device speed not set [ 1540.438484][ T42] usb 51-1: new low-speed USB device number 3 using vhci_hcd [ 1540.446155][T25151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1540.722860][T25142] vhci_hcd: connection reset by peer [ 1540.730130][T18652] vhci_hcd: stop threads [ 1540.734745][T18652] vhci_hcd: release socket [ 1540.741460][T18652] vhci_hcd: disconnect device [ 1541.984998][T25161] program syz.7.5060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1542.020228][T25152] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1542.030891][T25152] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1542.048316][T25152] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1542.066250][T25152] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1542.702859][T24637] Bluetooth: hci4: command 0x0c1a tx timeout [ 1543.336699][T25175] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5061'. [ 1543.776589][T25180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5064'. [ 1543.975854][T25191] bridge_slave_0: left allmulticast mode [ 1543.987824][T25191] bridge_slave_0: left promiscuous mode [ 1543.997695][T25191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.052557][T24637] Bluetooth: hci5: command 0x0406 tx timeout [ 1544.058705][T24637] Bluetooth: hci1: command 0x0406 tx timeout [ 1544.160480][T13757] Bluetooth: hci3: command 0x0406 tx timeout [ 1545.108406][T24637] Bluetooth: hci1: unexpected event for opcode 0x042c [ 1545.152226][T25191] bridge_slave_1: left allmulticast mode [ 1545.190870][T25191] bridge_slave_1: left promiscuous mode [ 1545.286667][T25191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.358541][T25191] bond0: (slave bond_slave_0): Releasing backup interface [ 1545.447318][T25191] bond0: (slave bond_slave_1): Releasing backup interface [ 1545.467776][T25191] team0: Port device team_slave_0 removed [ 1545.561978][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.579028][T25191] team0: Port device team_slave_1 removed [ 1545.588757][T25191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1545.596571][T25191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1545.612909][T25191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1545.625797][T25191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.641904][T25191] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1545.728958][ T42] vhci_hcd: vhci_device speed not set [ 1545.881209][T25210] program syz.8.5070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1546.022633][T20213] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1546.030677][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 1546.162430][T20213] usb 10-1: device descriptor read/64, error -32 [ 1546.527142][T25218] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5073'. [ 1546.585478][T25217] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5074'. [ 1546.595242][T20213] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1546.794965][T20213] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1546.804014][T20213] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1546.814525][T20213] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1547.272305][T20213] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1547.288004][T20213] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1547.435996][T20213] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1547.455164][T20213] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1547.464107][T20213] usb 10-1: Product: syz [ 1547.471185][T20213] usb 10-1: Manufacturer: syz [ 1547.576317][T20213] cdc_wdm 10-1:1.0: skipping garbage [ 1547.581711][T20213] cdc_wdm 10-1:1.0: skipping garbage [ 1547.612635][T20213] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1547.619331][T20213] cdc_wdm 10-1:1.0: Unknown control protocol [ 1548.259379][T20213] usb 10-1: USB disconnect, device number 19 [ 1548.479466][T25238] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1548.507717][T25238] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1548.534690][T25238] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1548.581252][T25238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1548.815811][T25256] syzkaller1: entered promiscuous mode [ 1548.821449][T25256] syzkaller1: entered allmulticast mode [ 1549.331112][T25266] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5086'. [ 1549.610139][T25268] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5087'. [ 1549.652445][T24637] Bluetooth: hci4: command 0x0c1a tx timeout [ 1549.755161][T25272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1549.771865][T13757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1549.783930][T13757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1549.792957][T13757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1549.800739][T13757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1549.808470][T13757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1550.532540][T13757] Bluetooth: hci5: command 0x0406 tx timeout [ 1550.613771][T13757] Bluetooth: hci3: command 0x0406 tx timeout [ 1550.622093][T24637] Bluetooth: hci1: command 0x0406 tx timeout [ 1551.240893][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.364297][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.132539][T13757] Bluetooth: hci0: command tx timeout [ 1552.524804][T25283] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1552.546942][T25283] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1552.557258][T25283] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1552.824847][T25283] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1552.829914][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.830945][T25283] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1552.848022][T25283] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1552.910857][T25283] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1553.206512][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.271164][T25271] chnl_net:caif_netlink_parms(): no params data found [ 1553.278999][T25317] FAULT_INJECTION: forcing a failure. [ 1553.278999][T25317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.319774][T25317] CPU: 1 UID: 0 PID: 25317 Comm: syz.8.5098 Not tainted syzkaller #0 PREEMPT(full) [ 1553.319797][T25317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1553.319806][T25317] Call Trace: [ 1553.319811][T25317] [ 1553.319818][T25317] dump_stack_lvl+0x16c/0x1f0 [ 1553.319853][T25317] should_fail_ex+0x512/0x640 [ 1553.319877][T25317] _copy_to_user+0x32/0xd0 [ 1553.319900][T25317] simple_read_from_buffer+0xcb/0x170 [ 1553.319928][T25317] proc_fail_nth_read+0x197/0x240 [ 1553.319950][T25317] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1553.319972][T25317] ? rw_verify_area+0xcf/0x6c0 [ 1553.319996][T25317] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1553.320017][T25317] vfs_read+0x1e4/0xcf0 [ 1553.320042][T25317] ? __pfx___mutex_lock+0x10/0x10 [ 1553.320057][T25317] ? __pfx_vfs_read+0x10/0x10 [ 1553.320079][T25317] ? __fget_files+0x20e/0x3c0 [ 1553.320104][T25317] ksys_read+0x12a/0x250 [ 1553.320119][T25317] ? __pfx_ksys_read+0x10/0x10 [ 1553.320141][T25317] do_syscall_64+0xcd/0xfa0 [ 1553.320168][T25317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.320185][T25317] RIP: 0033:0x7f70dc58d9dc [ 1553.320199][T25317] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1553.320215][T25317] RSP: 002b:00007f70dd38d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1553.320231][T25317] RAX: ffffffffffffffda RBX: 00007f70dc7e6090 RCX: 00007f70dc58d9dc [ 1553.320242][T25317] RDX: 000000000000000f RSI: 00007f70dd38d0a0 RDI: 0000000000000004 [ 1553.320252][T25317] RBP: 00007f70dd38d090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.320261][T25317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.320270][T25317] R13: 00007f70dc7e6128 R14: 00007f70dc7e6090 R15: 00007ffe42f11238 [ 1553.320293][T25317] [ 1553.349797][T25321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5099'. [ 1554.079543][T25271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.532609][T13757] Bluetooth: hci4: command 0x0c1a tx timeout [ 1554.597946][T25271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.654456][T13757] Bluetooth: hci1: command 0x0406 tx timeout [ 1554.660501][T13757] Bluetooth: hci5: command 0x0406 tx timeout [ 1554.686159][T25271] bridge_slave_0: entered allmulticast mode [ 1554.902624][T13757] Bluetooth: hci3: command 0x0406 tx timeout [ 1554.910258][T24637] Bluetooth: hci0: command 0x040f tx timeout [ 1555.004244][T25271] bridge_slave_0: entered promiscuous mode [ 1555.058616][T25271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.085348][T25324] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1555.112046][T25271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.122267][T25324] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1555.138907][T25324] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1555.159967][T25271] bridge_slave_1: entered allmulticast mode [ 1555.171236][T25324] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1555.178492][T25324] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1555.191640][T25271] bridge_slave_1: entered promiscuous mode [ 1555.310643][T25357] Bluetooth: MGMT ver 1.23 [ 1557.093022][T24637] Bluetooth: hci4: command 0x0c1a tx timeout [ 1557.172462][T24637] Bluetooth: hci3: command 0x0406 tx timeout [ 1557.172493][T13757] Bluetooth: hci1: command 0x0406 tx timeout [ 1557.179025][T24637] Bluetooth: hci5: command 0x0406 tx timeout [ 1557.267978][T24637] Bluetooth: hci0: command 0x040f tx timeout [ 1557.648852][ T13] bond0 (unregistering): Released all slaves [ 1557.754001][ T13] IPVS: stopping master sync thread 16549 ... [ 1557.764899][T25360] bridge_slave_0: left allmulticast mode [ 1557.767148][ T13] IPVS: stopping backup sync thread 16572 ... [ 1557.770804][T25360] bridge_slave_0: left promiscuous mode [ 1557.786566][T25360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.820991][T25360] bridge_slave_1: left allmulticast mode [ 1557.826996][T25360] bridge_slave_1: left promiscuous mode [ 1557.833422][T25360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.968878][T25360] bond0: (slave bond_slave_0): Releasing backup interface [ 1557.999212][T25360] bond0: (slave bond_slave_1): Releasing backup interface [ 1558.015755][T25360] team0: Port device team_slave_0 removed [ 1558.031732][T25360] team0: Port device team_slave_1 removed [ 1558.038566][T25360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1558.047511][T25360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.056680][T25360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1558.065171][T25360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1558.094976][T25360] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1558.396490][T25271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1558.424323][T25372] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1558.432150][T25372] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1558.441830][T25372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1558.448062][T25372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1558.458227][T25372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1558.465861][T25271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1558.571411][T25383] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5113'. [ 1559.496289][T25271] team0: Port device team_slave_0 added [ 1559.504717][T25271] team0: Port device team_slave_1 added [ 1559.664616][T25271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1559.683077][T25271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1559.721261][T25405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5119'. [ 1559.730896][T25405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5119'. [ 1559.811110][T25271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.865493][ T13] hsr_slave_0: left promiscuous mode [ 1559.882587][ T13] hsr_slave_1: left promiscuous mode [ 1559.913163][T25405] netlink: 'syz.3.5119': attribute type 21 has an invalid length. [ 1559.919412][ T13] veth1_macvtap: left promiscuous mode [ 1559.926793][T25405] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5119'. [ 1559.942041][ T13] veth1_vlan: left promiscuous mode [ 1559.947917][ T13] veth0_vlan: left promiscuous mode [ 1560.162466][ T42] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1560.344055][ T42] usb 5-1: config 0 has no interfaces? [ 1560.351068][ T42] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1560.373409][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.418260][ T42] usb 5-1: config 0 descriptor?? [ 1560.455782][T24637] Bluetooth: hci3: command 0x0406 tx timeout [ 1560.455806][T13757] Bluetooth: hci1: command 0x0406 tx timeout [ 1560.461831][T24637] Bluetooth: hci5: command 0x0406 tx timeout [ 1560.467961][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 1560.532479][T13757] Bluetooth: hci0: command 0x040f tx timeout [ 1560.692857][T25408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.720741][T25408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.971770][T25413] program syz.8.5121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1561.645261][T25425] netlink: 'syz.9.5123': attribute type 11 has an invalid length. [ 1561.653160][T25425] netlink: 244 bytes leftover after parsing attributes in process `syz.9.5123'. [ 1561.676743][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1561.676769][ T30] audit: type=1400 audit(1761165791.970:2373): avc: denied { mount } for pid=25422 comm="syz.9.5123" name="/" dev="rpc_pipefs" ino=101823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1561.861171][ T30] audit: type=1400 audit(1761165791.990:2374): avc: denied { mounton } for pid=25422 comm="syz.9.5123" path="/277/file0" dev="rpc_pipefs" ino=101823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 1562.136928][T25271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.144151][T25271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.170934][T25271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.203316][T25405] netlink: 'syz.3.5119': attribute type 5 has an invalid length. [ 1562.211039][T25405] netlink: 'syz.3.5119': attribute type 6 has an invalid length. [ 1562.219821][T25405] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5119'. [ 1562.252520][ T30] audit: type=1400 audit(1761165792.610:2375): avc: denied { relabelfrom } for pid=25398 comm="syz.4.5118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1562.352480][ T30] audit: type=1400 audit(1761165792.610:2376): avc: denied { relabelto } for pid=25398 comm="syz.4.5118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1562.376510][ T30] audit: type=1400 audit(1761165792.700:2377): avc: denied { unmount } for pid=20198 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1562.573653][T25271] hsr_slave_0: entered promiscuous mode [ 1562.588955][T25271] hsr_slave_1: entered promiscuous mode [ 1562.623439][T13757] Bluetooth: hci0: command 0x040f tx timeout [ 1563.263247][T15064] usb 5-1: USB disconnect, device number 14 [ 1563.658873][T25445] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5128'. [ 1563.688657][T25445] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5128'. [ 1564.318058][T25455] program syz.8.5131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1564.693376][T13757] Bluetooth: hci0: command 0x040f tx timeout [ 1565.907483][T25271] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1566.047724][T25271] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1566.214891][T25473] netlink: 'syz.8.5134': attribute type 11 has an invalid length. [ 1566.222915][T25473] netlink: 244 bytes leftover after parsing attributes in process `syz.8.5134'. [ 1566.640682][T25271] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1566.733532][T25271] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1567.264699][T25271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1567.350207][T25271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.370756][T23841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.377942][T23841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1567.405815][T25271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1567.417837][T25271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1567.435178][T23841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.442393][T23841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1567.893829][T13757] Bluetooth: hci3: unexpected event for opcode 0x042c [ 1569.034941][T25271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1569.780168][T25511] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5141'. [ 1571.608035][T25522] syzkaller1: entered promiscuous mode [ 1571.622663][T25522] syzkaller1: entered allmulticast mode [ 1572.225369][T25271] veth0_vlan: entered promiscuous mode [ 1572.247364][T25271] veth1_vlan: entered promiscuous mode [ 1572.279476][T25541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1572.288934][T25271] veth0_macvtap: entered promiscuous mode [ 1574.025587][T25271] veth1_macvtap: entered promiscuous mode [ 1574.551674][T25271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1574.593676][T25271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1574.616248][ T79] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.630591][T25547] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5150'. [ 1574.658852][ T79] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.708550][ T79] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.734910][ T79] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.990532][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1575.024204][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1575.164690][T17321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1575.184197][T17321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1577.741075][T25577] netlink: 'syz.8.5155': attribute type 11 has an invalid length. [ 1577.748989][T25577] netlink: 244 bytes leftover after parsing attributes in process `syz.8.5155'. [ 1578.220423][T25580] bridge_slave_0: left allmulticast mode [ 1578.226308][T25580] bridge_slave_0: left promiscuous mode [ 1578.235867][T25580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.520163][T25580] bridge_slave_1: left allmulticast mode [ 1578.526020][T25580] bridge_slave_1: left promiscuous mode [ 1578.532078][T25580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.677965][T25588] netlink: 'syz.7.5157': attribute type 11 has an invalid length. [ 1578.685902][T25588] netlink: 244 bytes leftover after parsing attributes in process `syz.7.5157'. [ 1579.399902][T25580] bond0: (slave bond_slave_0): Releasing backup interface [ 1579.786366][T25580] bond0: (slave bond_slave_1): Releasing backup interface [ 1579.821479][T25580] team0: Port device team_slave_0 removed [ 1579.835739][T25580] team0: Port device team_slave_1 removed [ 1579.843226][T25580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1579.850636][T25580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.887419][T25580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1579.894063][T25606] FAULT_INJECTION: forcing a failure. [ 1579.894063][T25606] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.895098][T25580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.915499][T25606] CPU: 0 UID: 0 PID: 25606 Comm: syz.3.5162 Not tainted syzkaller #0 PREEMPT(full) [ 1579.915516][T25606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1579.915523][T25606] Call Trace: [ 1579.915527][T25606] [ 1579.915531][T25606] dump_stack_lvl+0x16c/0x1f0 [ 1579.915550][T25606] should_fail_ex+0x512/0x640 [ 1579.915563][T25606] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1579.915581][T25606] should_failslab+0xc2/0x120 [ 1579.915593][T25606] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1579.915610][T25606] ? __d_alloc+0x32/0xae0 [ 1579.915624][T25606] ? __d_alloc+0x32/0xae0 [ 1579.915634][T25606] __d_alloc+0x32/0xae0 [ 1579.915645][T25606] ? lockdep_init_map_type+0x5c/0x280 [ 1579.915657][T25606] d_alloc_pseudo+0x1c/0xc0 [ 1579.915672][T25606] alloc_file_pseudo+0xcf/0x230 [ 1579.915687][T25606] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1579.915704][T25606] sock_alloc_file+0x50/0x210 [ 1579.915720][T25606] do_accept+0x240/0x530 [ 1579.915731][T25606] ? do_raw_spin_lock+0x12c/0x2b0 [ 1579.915743][T25606] ? __pfx_do_accept+0x10/0x10 [ 1579.915762][T25606] __sys_accept4+0x100/0x1c0 [ 1579.915773][T25606] ? __pfx___sys_accept4+0x10/0x10 [ 1579.915784][T25606] ? ksys_write+0x1ac/0x250 [ 1579.915793][T25606] ? __pfx_ksys_write+0x10/0x10 [ 1579.915805][T25606] __x64_sys_accept+0x74/0xb0 [ 1579.915816][T25606] ? lockdep_hardirqs_on+0x7c/0x110 [ 1579.915831][T25606] do_syscall_64+0xcd/0xfa0 [ 1579.915847][T25606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.915858][T25606] RIP: 0033:0x7fb9b878efc9 [ 1579.915867][T25606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1579.915877][T25606] RSP: 002b:00007fb9b95fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1579.915888][T25606] RAX: ffffffffffffffda RBX: 00007fb9b89e5fa0 RCX: 00007fb9b878efc9 [ 1579.915894][T25606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1579.915901][T25606] RBP: 00007fb9b95fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1579.915906][T25606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1579.915912][T25606] R13: 00007fb9b89e6038 R14: 00007fb9b89e5fa0 R15: 00007fffd4dea118 [ 1579.915926][T25606] [ 1580.156118][T25580] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1580.332287][T25612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5163'. [ 1580.341354][T25612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5163'. [ 1580.372756][T25612] netlink: 'syz.3.5163': attribute type 21 has an invalid length. [ 1580.380761][T25612] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5163'. [ 1580.448362][T25612] netlink: 'syz.3.5163': attribute type 5 has an invalid length. [ 1580.457586][T25612] netlink: 'syz.3.5163': attribute type 6 has an invalid length. [ 1580.467341][T25612] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5163'. [ 1581.206236][T25628] netlink: 'syz.4.5167': attribute type 11 has an invalid length. [ 1581.214200][T25628] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5167'. [ 1581.642614][T25611] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1581.652175][T25611] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1581.932053][T25611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1581.944768][T25611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1581.957581][T25611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1582.329479][T25641] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1582.336023][T25641] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1582.402526][T20213] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1582.507786][T25645] netlink: 'syz.7.5171': attribute type 11 has an invalid length. [ 1582.515702][T25645] netlink: 244 bytes leftover after parsing attributes in process `syz.7.5171'. [ 1582.789817][T13757] Bluetooth: hci4: command 0x0c1a tx timeout [ 1582.808937][T25641] vhci_hcd vhci_hcd.0: Device attached [ 1582.918977][T25647] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1582.932471][T20213] usb 10-1: device descriptor read/64, error -71 [ 1582.952547][T25647] cramfs: wrong magic [ 1583.042517][ T889] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 1583.222448][T20213] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1583.364082][T20213] usb 10-1: device descriptor read/64, error -71 [ 1583.748121][T25660] netlink: 'syz.8.5175': attribute type 11 has an invalid length. [ 1583.756168][T25660] netlink: 244 bytes leftover after parsing attributes in process `syz.8.5175'. [ 1584.102437][T13757] Bluetooth: hci5: command 0x0406 tx timeout [ 1584.110641][T13757] Bluetooth: hci0: command 0x040f tx timeout [ 1584.116752][T13757] Bluetooth: hci3: command 0x0406 tx timeout [ 1584.122831][T13757] Bluetooth: hci1: command 0x0406 tx timeout [ 1584.133238][T20213] usb usb10-port1: attempt power cycle [ 1584.662491][T25643] vhci_hcd: connection reset by peer [ 1584.805439][ T13] vhci_hcd: stop threads [ 1584.815798][ T13] vhci_hcd: release socket [ 1584.894898][ T13] vhci_hcd: disconnect device [ 1585.039729][T25675] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5177'. [ 1586.471851][T25688] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1586.671966][T25688] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1586.750504][T25688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1586.859416][T25688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1587.038415][T25688] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1587.055998][T25692] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1587.512530][T15064] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1587.613149][ T42] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1587.641687][T25726] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1587.648328][T25726] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1587.743209][T23541] Bluetooth: hci4: command 0x0c1a tx timeout [ 1587.752502][ T42] usb 10-1: device descriptor read/64, error -71 [ 1587.765676][T25731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5189'. [ 1587.787697][T25726] vhci_hcd vhci_hcd.0: Device attached [ 1587.802428][T15064] usb 9-1: Using ep0 maxpacket: 8 [ 1587.823063][T15064] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1587.835472][T15064] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1587.863207][T15064] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1587.874418][T15064] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1587.884590][T15064] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1587.906304][T25726] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1587.914148][T25726] cramfs: wrong magic [ 1587.930611][T15065] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1587.940999][T15064] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1587.950254][T15064] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.983791][T25738] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1587.992718][ T42] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1588.000719][T25738] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1588.177376][ T42] usb 10-1: device descriptor read/64, error -71 [ 1588.178218][T25716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.192458][ T889] vhci_hcd: vhci_device speed not set [ 1588.202957][T25716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.314504][T25743] netlink: 666 bytes leftover after parsing attributes in process `syz.8.5184'. [ 1588.344086][ T42] usb usb10-port1: attempt power cycle [ 1588.440894][T15064] usb 9-1: usb_control_msg returned -32 [ 1588.569318][T25744] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1588.579808][T25744] cramfs: wrong magic [ 1588.583851][T15064] usbtmc 9-1:16.0: can't read capabilities [ 1588.589879][T25742] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1588.596388][T25742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1588.622519][T25742] vhci_hcd vhci_hcd.0: Device attached [ 1588.730010][T23541] Bluetooth: hci5: command 0x0406 tx timeout [ 1588.772607][T23541] Bluetooth: hci1: command 0x0406 tx timeout [ 1588.812450][ T42] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1588.853249][ T42] usb 10-1: device descriptor read/8, error -71 [ 1588.941970][T25728] vhci_hcd: connection reset by peer [ 1588.947319][T23541] Bluetooth: hci3: command 0x0406 tx timeout [ 1589.053216][T25745] vhci_hcd: connection closed [ 1589.066360][T25754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5193'. [ 1589.085634][T25754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5193'. [ 1589.103913][T23541] Bluetooth: hci0: command 0x040f tx timeout [ 1589.113939][ T889] usb 41-1: device descriptor read/64, error -110 [ 1589.124280][T23841] vhci_hcd: stop threads [ 1589.132425][T23841] vhci_hcd: release socket [ 1589.142496][T23841] vhci_hcd: disconnect device [ 1589.152674][T23841] vhci_hcd: stop threads [ 1589.157039][T25716] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 1589.186130][T23841] vhci_hcd: release socket [ 1589.202732][ T42] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1589.214209][T23841] vhci_hcd: disconnect device [ 1589.233318][ T42] usb 10-1: device descriptor read/8, error -71 [ 1589.292513][ T889] vhci_hcd: vhci_device speed not set [ 1589.376058][ T42] usb usb10-port1: unable to enumerate USB device [ 1589.634949][T15064] usb 9-1: USB disconnect, device number 56 [ 1590.234862][T25772] fuse: Bad value for 'fd' [ 1590.249549][T25760] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1590.258865][T25760] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1590.268803][T25760] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1590.304017][T25760] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1590.324704][T25760] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1590.743192][T25785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5200'. [ 1591.484435][T25791] program syz.4.5202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1592.132527][T13757] Bluetooth: hci4: command 0x0c1a tx timeout [ 1592.292465][T13757] Bluetooth: hci1: command 0x0406 tx timeout [ 1592.298706][T13757] Bluetooth: hci5: command 0x0406 tx timeout [ 1592.372511][T13757] Bluetooth: hci0: command 0x040f tx timeout [ 1592.378651][T23541] Bluetooth: hci3: command 0x0406 tx timeout [ 1593.342493][T15065] vhci_hcd: vhci_device speed not set [ 1593.602031][T25823] netlink: 'syz.3.5208': attribute type 11 has an invalid length. [ 1593.610145][T25823] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5208'. [ 1594.557385][T25831] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1594.586651][T25831] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1594.713137][ T30] audit: type=1326 audit(1761165825.080:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25840 comm="syz.4.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98e98efc9 code=0x7ffc0000 [ 1594.822851][ T30] audit: type=1326 audit(1761165825.080:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25840 comm="syz.4.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98e98efc9 code=0x7ffc0000 [ 1594.846447][ C0] vkms_vblank_simulate: vblank timer overrun [ 1595.011860][T25847] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5215'. [ 1595.310180][T25827] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1595.318166][T25827] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1595.341594][T25827] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1595.347629][ T30] audit: type=1326 audit(1761165825.080:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25840 comm="syz.4.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff98e98efc9 code=0x7ffc0000 [ 1595.372155][ T30] audit: type=1326 audit(1761165825.080:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25840 comm="syz.4.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98e98efc9 code=0x7ffc0000 [ 1595.471735][T25827] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1595.500153][T25827] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1595.521730][ T30] audit: type=1326 audit(1761165825.080:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25840 comm="syz.4.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98e98efc9 code=0x7ffc0000 [ 1595.602507][ T30] audit: type=1326 audit(1761165825.080:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25840 comm="syz.4.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff98e98efc9 code=0x7ffc0000 [ 1595.625972][ T30] audit: type=1326 audit(1761165825.080:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25840 comm="syz.4.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98e98efc9 code=0x7ffc0000 [ 1595.653581][ T30] audit: type=1326 audit(1761165825.080:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25840 comm="syz.4.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff98e98efc9 code=0x7ffc0000 [ 1595.718949][ T30] audit: type=1326 audit(1761165825.080:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25840 comm="syz.4.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98e98efc9 code=0x7ffc0000 [ 1595.812769][ T30] audit: type=1326 audit(1761165825.080:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25840 comm="syz.4.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff98e98efc9 code=0x7ffc0000 [ 1596.601486][T25869] netlink: 'syz.9.5219': attribute type 11 has an invalid length. [ 1596.609418][T25869] netlink: 244 bytes leftover after parsing attributes in process `syz.9.5219'. [ 1596.952477][T13757] Bluetooth: hci4: command 0x0c1a tx timeout [ 1597.150858][T25861] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1597.582635][T13757] Bluetooth: hci5: command 0x0406 tx timeout [ 1597.588884][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 1597.595138][T23541] Bluetooth: hci1: command 0x0406 tx timeout [ 1597.601610][ T5818] Bluetooth: hci0: command 0x040f tx timeout [ 1597.813339][T25878] netlink: 'syz.8.5221': attribute type 11 has an invalid length. [ 1597.821215][T25878] netlink: 244 bytes leftover after parsing attributes in process `syz.8.5221'. [ 1598.880088][T25896] netlink: 'syz.8.5224': attribute type 11 has an invalid length. [ 1598.887994][T25896] netlink: 244 bytes leftover after parsing attributes in process `syz.8.5224'. [ 1601.943703][T25929] netlink: 'syz.4.5233': attribute type 11 has an invalid length. [ 1601.951788][T25929] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5233'. [ 1602.478091][T25931] input: syz0 as /devices/virtual/input/input32 [ 1602.492806][T15065] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 1602.677591][T15065] usb 8-1: config 0 has an invalid interface number: 46 but max is 0 [ 1602.701372][T15065] usb 8-1: config 0 has no interface number 0 [ 1602.982957][T15065] usb 8-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1603.089884][T15065] usb 8-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1603.152729][T15065] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.154062][T15065] usb 8-1: Product: syz [ 1603.154173][T15065] usb 8-1: Manufacturer: syz [ 1603.161868][T15065] usb 8-1: SerialNumber: syz [ 1603.342468][T15065] usb 8-1: config 0 descriptor?? [ 1603.343361][T25925] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1603.351886][T15065] ums-karma 8-1:0.46: USB Mass Storage device detected [ 1603.708092][T15065] ums-karma 8-1:0.46: probe with driver ums-karma failed with error -5 [ 1603.723228][T25950] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5239'. [ 1603.957924][T25952] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5238'. [ 1604.454196][ T42] usb 8-1: USB disconnect, device number 41 [ 1605.000205][T25958] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1605.392958][T25958] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1605.410450][T25958] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1606.584847][T25958] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1606.609469][T25958] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1606.791877][T25974] netlink: 'syz.7.5244': attribute type 11 has an invalid length. [ 1606.799747][T25974] netlink: 244 bytes leftover after parsing attributes in process `syz.7.5244'. [ 1606.924338][T25982] netlink: 'syz.4.5246': attribute type 11 has an invalid length. [ 1606.932216][T25982] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5246'. [ 1607.298958][T24637] Bluetooth: hci4: command 0x0c1a tx timeout [ 1607.305517][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.422507][T24637] Bluetooth: hci5: command 0x0406 tx timeout [ 1607.492451][T24637] Bluetooth: hci1: command 0x0406 tx timeout [ 1608.612584][T24637] Bluetooth: hci0: command 0x040f tx timeout [ 1608.618743][T24637] Bluetooth: hci3: command 0x0406 tx timeout [ 1609.053427][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1609.053442][ T30] audit: type=1400 audit(1761165839.410:2410): avc: denied { shutdown } for pid=25999 comm="syz.4.5251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1609.197078][ T30] audit: type=1400 audit(1761165839.410:2411): avc: denied { write } for pid=25999 comm="syz.4.5251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1610.631806][T26035] netlink: 'syz.9.5259': attribute type 11 has an invalid length. [ 1610.639801][T26035] netlink: 244 bytes leftover after parsing attributes in process `syz.9.5259'. [ 1611.373905][T26023] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1611.654882][T26023] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1611.662321][T26023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1611.731209][T26023] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1611.822530][T26023] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1612.222542][ T42] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1612.572404][ T42] usb 10-1: Using ep0 maxpacket: 8 [ 1612.612425][T24637] Bluetooth: hci4: command 0x0c1a tx timeout [ 1612.898495][ T42] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1612.922387][ T42] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1612.943272][ T42] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1612.972804][ T42] usb 10-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1612.982016][ T42] usb 10-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1613.001004][ T42] usb 10-1: Product: syz [ 1613.732485][ T5818] Bluetooth: hci5: command 0x0406 tx timeout [ 1613.732483][T24637] Bluetooth: hci1: command 0x0406 tx timeout [ 1613.812472][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 1613.892443][ T5818] Bluetooth: hci0: command 0x040f tx timeout [ 1614.252492][ T42] usb 10-1: Manufacturer: syz [ 1614.257303][ T42] usb 10-1: SerialNumber: syz [ 1614.273204][ T42] usb 10-1: config 0 descriptor?? [ 1614.281254][ T42] smsusb:smsusb_probe: board id=2, interface number 0 [ 1614.292716][ T42] smsusb:smsusb_probe: Device initialized with return code -19 [ 1614.788082][T26060] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1614.836663][T26060] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1614.851721][T26060] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1614.872236][T26060] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1614.881873][T26060] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1614.918691][T26076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.936405][T26076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.122828][T15064] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1615.225750][T26088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5271'. [ 1615.242509][T15065] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1615.273968][T15064] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 1615.298311][T15064] usb 5-1: config 0 has no interface number 1 [ 1615.402554][T15064] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1615.419665][T15064] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1615.477283][T15065] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1615.497094][T15064] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 1615.530057][T15065] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.582473][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 1615.771941][T15065] usb 4-1: config 0 descriptor?? [ 1615.792442][T15064] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1615.823979][T15064] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1615.846382][T15064] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1615.964286][T15064] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1615.974925][T15064] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.984837][T15064] usb 5-1: Product: syz [ 1615.989003][T15064] usb 5-1: Manufacturer: syz [ 1615.996338][T15064] usb 5-1: SerialNumber: syz [ 1616.014460][T26094] netlink: 'syz.8.5272': attribute type 1 has an invalid length. [ 1616.022424][T26094] netlink: 232 bytes leftover after parsing attributes in process `syz.8.5272'. [ 1616.031729][T26094] NCSI netlink: No device for ifindex 0 [ 1616.041792][T15064] usb 5-1: config 0 descriptor?? [ 1616.077881][T26066] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1616.088580][T15064] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1616.098972][T15065] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1616.113357][T15065] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1616.122677][T15064] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1616.129737][T15065] [drm] Initialized udl on minor 2 [ 1616.253135][T15064] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1616.310011][T15065] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1616.321106][T15065] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1616.484910][T26066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5266'. [ 1616.678677][T26096] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1616.686795][T26096] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1616.697224][T26096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1616.703484][T26096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1616.711093][T26096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1616.836472][T15065] usb 4-1: USB disconnect, device number 79 [ 1616.842596][T15064] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1616.872655][T15064] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1616.888401][T26080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.890279][ T42] usb 5-1: USB disconnect, device number 15 [ 1616.897142][T26080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1616.994792][T26110] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5274'. [ 1617.266750][T20213] usb 10-1: USB disconnect, device number 27 [ 1617.397886][T26118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1617.612450][T15065] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1618.782662][ T5818] Bluetooth: hci0: command 0x040f tx timeout [ 1618.788982][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 1618.794999][T23541] Bluetooth: hci5: command 0x0406 tx timeout [ 1618.795069][T24637] Bluetooth: hci1: command 0x0406 tx timeout [ 1619.036193][T26120] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1619.047427][T26120] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1619.061572][T26120] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1619.075418][T26120] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1619.087223][T26120] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1619.786001][T24637] Bluetooth: hci4: command 0x0c1a tx timeout [ 1620.403471][T26139] netlink: zone id is out of range [ 1620.410753][T26139] netlink: zone id is out of range [ 1620.462469][T26139] netlink: zone id is out of range [ 1620.469894][T26139] netlink: zone id is out of range [ 1620.550906][T26139] netlink: zone id is out of range [ 1621.351657][ T30] audit: type=1326 audit(1761165851.710:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26165 comm="syz.9.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c5d8efc9 code=0x7ffc0000 [ 1621.376180][T26167] FAULT_INJECTION: forcing a failure. [ 1621.376180][T26167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1621.389352][T26167] CPU: 0 UID: 0 PID: 26167 Comm: syz.4.5290 Not tainted syzkaller #0 PREEMPT(full) [ 1621.389374][T26167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1621.389383][T26167] Call Trace: [ 1621.389389][T26167] [ 1621.389395][T26167] dump_stack_lvl+0x16c/0x1f0 [ 1621.389423][T26167] should_fail_ex+0x512/0x640 [ 1621.389447][T26167] _copy_to_user+0x32/0xd0 [ 1621.389468][T26167] simple_read_from_buffer+0xcb/0x170 [ 1621.389504][T26167] proc_fail_nth_read+0x197/0x240 [ 1621.389525][T26167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1621.389548][T26167] ? rw_verify_area+0xcf/0x6c0 [ 1621.389571][T26167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1621.389590][T26167] vfs_read+0x1e4/0xcf0 [ 1621.389609][T26167] ? __pfx___mutex_lock+0x10/0x10 [ 1621.389624][T26167] ? __pfx_vfs_read+0x10/0x10 [ 1621.389645][T26167] ? __fget_files+0x20e/0x3c0 [ 1621.389668][T26167] ksys_read+0x12a/0x250 [ 1621.389682][T26167] ? __pfx_ksys_read+0x10/0x10 [ 1621.389704][T26167] do_syscall_64+0xcd/0xfa0 [ 1621.389730][T26167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.389746][T26167] RIP: 0033:0x7ff98e98d9dc [ 1621.389760][T26167] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1621.389775][T26167] RSP: 002b:00007ff98f854030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1621.389791][T26167] RAX: ffffffffffffffda RBX: 00007ff98ebe6090 RCX: 00007ff98e98d9dc [ 1621.389802][T26167] RDX: 000000000000000f RSI: 00007ff98f8540a0 RDI: 0000000000000004 [ 1621.389811][T26167] RBP: 00007ff98f854090 R08: 0000000000000000 R09: 0000000000000000 [ 1621.389821][T26167] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1621.389831][T26167] R13: 00007ff98ebe6128 R14: 00007ff98ebe6090 R15: 00007ffea0095058 [ 1621.389857][T26167] [ 1621.860299][ T30] audit: type=1326 audit(1761165851.710:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26165 comm="syz.9.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c5d8efc9 code=0x7ffc0000 [ 1621.860437][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 1621.890294][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 1621.891836][T13757] Bluetooth: hci5: command 0x0406 tx timeout [ 1621.972460][T24637] Bluetooth: hci0: command 0x040f tx timeout [ 1621.985487][ T30] audit: type=1326 audit(1761165851.980:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26165 comm="syz.9.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5c5d8efc9 code=0x7ffc0000 [ 1622.009664][ T30] audit: type=1326 audit(1761165851.980:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26165 comm="syz.9.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c5d8efc9 code=0x7ffc0000 [ 1622.033645][ T30] audit: type=1326 audit(1761165851.980:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26165 comm="syz.9.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c5d8efc9 code=0x7ffc0000 [ 1622.059996][ T30] audit: type=1326 audit(1761165851.980:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26165 comm="syz.9.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5c5d8efc9 code=0x7ffc0000 [ 1622.220544][T26178] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5291'. [ 1622.463349][ T30] audit: type=1326 audit(1761165851.980:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26165 comm="syz.9.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c5d8efc9 code=0x7ffc0000 [ 1622.492772][ T30] audit: type=1326 audit(1761165852.250:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26165 comm="syz.9.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff5c5d8efc9 code=0x7ffc0000 [ 1622.530972][ T30] audit: type=1326 audit(1761165852.250:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26165 comm="syz.9.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c5d8efc9 code=0x7ffc0000 [ 1622.686339][ T30] audit: type=1326 audit(1761165852.250:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26165 comm="syz.9.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff5c5d8efc9 code=0x7ffc0000 [ 1622.787002][T26186] netlink: 'syz.8.5292': attribute type 11 has an invalid length. [ 1622.794924][T26186] netlink: 244 bytes leftover after parsing attributes in process `syz.8.5292'. [ 1623.661873][T26201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1623.976499][T26204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1625.259852][T26225] loop5: detected capacity change from 0 to 9295 [ 1625.319466][T14922] Buffer I/O error on dev loop5, logical block 1161, async page read [ 1625.992894][T15065] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 1626.105608][T20213] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1626.285581][T15065] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1626.295356][T15065] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.303807][T15065] usb 10-1: Product: syz [ 1626.308352][T15065] usb 10-1: Manufacturer: syz [ 1626.313779][T15065] usb 10-1: SerialNumber: syz [ 1626.326399][T15065] usb 10-1: config 0 descriptor?? [ 1626.501244][T20213] usb 8-1: Using ep0 maxpacket: 16 [ 1626.516128][T20213] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1626.525422][T20213] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.544029][T20213] usb 8-1: Product: syz [ 1626.552096][T20213] usb 8-1: Manufacturer: syz [ 1626.592558][T20213] usb 8-1: SerialNumber: syz [ 1626.618816][T20213] usb 8-1: config 0 descriptor?? [ 1626.710691][T15065] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1627.367659][T20213] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1627.383920][T20213] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1627.413682][T20213] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1627.431959][T20213] usb 8-1: media controller created [ 1627.475593][T20213] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1627.597847][T20213] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1627.605912][T20213] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1627.850323][T26233] dtv5100: wlen = 0, aborting. [ 1627.856100][T26233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1627.880394][T26233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1627.891445][T20213] usb 8-1: USB disconnect, device number 42 [ 1627.991710][T20213] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1628.002635][T15064] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1628.083449][T26262] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1628.091013][T26262] cramfs: wrong magic [ 1628.143530][T26261] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1628.150070][T26261] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1628.157713][T26261] vhci_hcd vhci_hcd.0: Device attached [ 1628.175130][T15064] usb 5-1: Using ep0 maxpacket: 8 [ 1628.182574][T15064] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1628.251826][T15064] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1628.261486][T15064] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.277055][T26232] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5308'. [ 1628.293148][T15065] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1628.307267][T15064] usb 5-1: Product: syz [ 1628.312024][T15065] usb 10-1: USB disconnect, device number 28 [ 1628.372816][T15064] usb 5-1: Manufacturer: syz [ 1628.466967][T14654] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 1628.486675][T15064] usb 5-1: SerialNumber: syz [ 1628.503723][T15064] usb 5-1: config 0 descriptor?? [ 1628.515311][T15064] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1628.642436][T26263] vhci_hcd: connection reset by peer [ 1628.771982][T23841] vhci_hcd: stop threads [ 1628.776484][T23841] vhci_hcd: release socket [ 1628.789032][T23841] vhci_hcd: disconnect device [ 1628.923402][T26274] netlink: 'syz.8.5317': attribute type 11 has an invalid length. [ 1628.931279][T26274] netlink: 244 bytes leftover after parsing attributes in process `syz.8.5317'. [ 1630.077176][T26276] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1630.112284][T26276] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1630.124416][T26276] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1630.158779][T26276] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1630.176896][T26276] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1630.348659][T15064] gspca_zc3xx: reg_w_i err -71 [ 1631.004473][T15064] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1631.020993][T15064] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1631.031959][T15064] usb 5-1: USB disconnect, device number 16 [ 1631.412466][T13757] Bluetooth: hci4: command 0x0c1a tx timeout [ 1632.132702][T13757] Bluetooth: hci1: command 0x0406 tx timeout [ 1632.132708][T24637] Bluetooth: hci5: command 0x0406 tx timeout [ 1632.224366][T13757] Bluetooth: hci0: command 0x040f tx timeout [ 1632.224390][T24637] Bluetooth: hci3: command 0x0406 tx timeout [ 1632.736468][T26322] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5330'. [ 1633.473512][T13757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1633.483426][T13757] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1633.491586][T13757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1633.502224][T13757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1633.511373][T13757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1633.562553][T14654] vhci_hcd: vhci_device speed not set [ 1633.589381][ T1314] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.872465][T26333] netlink: 'syz.9.5332': attribute type 11 has an invalid length. [ 1633.880363][T26333] netlink: 244 bytes leftover after parsing attributes in process `syz.9.5332'. [ 1634.283912][ T1314] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.489276][ T1314] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.705931][ T1314] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.471370][T26351] 9pnet_fd: Insufficient options for proto=fd [ 1635.653615][T13757] Bluetooth: hci2: command tx timeout [ 1635.679903][T26327] chnl_net:caif_netlink_parms(): no params data found [ 1635.993894][ T1314] bridge_slave_1: left allmulticast mode [ 1636.001555][T26361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5339'. [ 1636.012053][ T1314] bridge_slave_1: left promiscuous mode [ 1636.018413][ T1314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.027729][ T1314] bridge_slave_0: left allmulticast mode [ 1636.036259][T26361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5339'. [ 1636.042369][ T1314] bridge_slave_0: left promiscuous mode [ 1636.137250][T26362] netlink: 'syz.7.5338': attribute type 11 has an invalid length. [ 1636.145148][T26362] netlink: 244 bytes leftover after parsing attributes in process `syz.7.5338'. [ 1636.457640][ T1314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.525037][T26356] netlink: 'syz.3.5339': attribute type 21 has an invalid length. [ 1636.540276][T26356] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5339'. [ 1636.636515][T26364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1637.744184][T13757] Bluetooth: hci2: command tx timeout [ 1638.111774][ T1314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1638.125718][ T1314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1638.135352][ T1314] bond0 (unregistering): Released all slaves [ 1638.146839][ T1314] bond1 (unregistering): Released all slaves [ 1638.288577][ T1314] bond2 (unregistering): Released all slaves [ 1638.403858][T26356] netlink: 'syz.3.5339': attribute type 5 has an invalid length. [ 1638.477144][T26356] netlink: 'syz.3.5339': attribute type 6 has an invalid length. [ 1638.612228][T26356] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5339'. [ 1638.696942][T26389] program syz.9.5344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1638.781029][ T1314] IPVS: stopping master sync thread 19130 ... [ 1638.792902][T26367] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1638.820859][T26367] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1638.827021][T26367] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1638.837977][T26367] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1638.849164][T26367] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1638.857478][T26367] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1638.883177][T26390] fuse: Bad value for 'fd' [ 1638.982919][T26367] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1639.015466][T26327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.066232][T26327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.253886][T26327] bridge_slave_0: entered allmulticast mode [ 1639.488513][T26327] bridge_slave_0: entered promiscuous mode [ 1639.616556][T26327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.650775][T26327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.661146][T26327] bridge_slave_1: entered allmulticast mode [ 1639.857390][T26327] bridge_slave_1: entered promiscuous mode [ 1640.074633][T26327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1640.098048][T26327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.779378][ T1314] hsr_slave_0: left promiscuous mode [ 1640.862408][T24637] Bluetooth: hci3: command 0x0406 tx timeout [ 1640.868521][T24637] Bluetooth: hci1: command 0x0406 tx timeout [ 1640.874734][T24637] Bluetooth: hci5: command 0x0406 tx timeout [ 1640.883073][T24637] Bluetooth: hci2: command 0x0419 tx timeout [ 1640.889104][T13757] Bluetooth: hci0: command 0x040f tx timeout [ 1640.904654][ T1314] hsr_slave_1: left promiscuous mode [ 1640.928138][ T1314] veth0_macvtap: left promiscuous mode [ 1641.032131][ T1314] veth1_vlan: left promiscuous mode [ 1641.039414][ T1314] veth0_vlan: left promiscuous mode [ 1642.594889][ T1314] team0 (unregistering): Port device team_slave_1 removed [ 1642.645677][ T1314] team0 (unregistering): Port device team_slave_0 removed [ 1643.019922][T26433] netlink: 'syz.7.5354': attribute type 11 has an invalid length. [ 1643.027839][T26433] netlink: 244 bytes leftover after parsing attributes in process `syz.7.5354'. [ 1643.047160][T13757] Bluetooth: hci2: command 0x0419 tx timeout [ 1643.865023][T26407] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1643.871031][T26407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1643.887412][T26407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1643.894807][T26407] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1643.900942][T26407] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1643.985069][T26327] team0: Port device team_slave_0 added [ 1644.028605][T26327] team0: Port device team_slave_1 added [ 1644.164840][T26327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1644.171807][T26327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1644.475328][T26456] netlink: 'syz.7.5357': attribute type 11 has an invalid length. [ 1644.483270][T26456] netlink: 244 bytes leftover after parsing attributes in process `syz.7.5357'. [ 1644.654347][T26327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1644.989745][T26327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1644.990407][T26458] netlink: 'syz.4.5359': attribute type 11 has an invalid length. [ 1645.015904][T26327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1645.091639][T26458] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5359'. [ 1645.118260][T26449] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1645.170448][T26327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.264911][T26449] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1645.285107][T26449] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1645.307253][T26449] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1645.337347][T26449] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1646.020139][T26327] hsr_slave_0: entered promiscuous mode [ 1646.056680][T26327] hsr_slave_1: entered promiscuous mode [ 1646.066399][T26327] debugfs: 'hsr0' already exists in 'hsr' [ 1646.072222][T26327] Cannot create hsr debugfs directory [ 1646.375492][T26472] overlayfs: overlapping lowerdir path [ 1647.076671][T26481] overlayfs: overlapping lowerdir path [ 1647.176396][T13757] Bluetooth: hci5: command 0x0406 tx timeout [ 1647.340873][T13757] Bluetooth: hci0: command 0x040f tx timeout [ 1647.346997][T13757] Bluetooth: hci3: command 0x0406 tx timeout [ 1647.353036][T13757] Bluetooth: hci1: command 0x0406 tx timeout [ 1647.412885][T23541] Bluetooth: hci2: command 0x0419 tx timeout [ 1648.038124][T26488] No control pipe specified [ 1648.823206][T26490] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1648.831062][T26490] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1648.838147][T26490] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1648.847631][T26490] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1648.856014][T26490] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1648.977388][T26327] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1649.033771][T26327] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1649.048177][T26327] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1649.089930][T26327] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1649.489598][T26327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1649.507349][T26327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1649.521729][T17321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.528963][T17321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1649.589341][T17321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.596510][T17321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1649.783779][T26327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1649.914905][T26510] netlink: 'syz.4.5371': attribute type 11 has an invalid length. [ 1649.922865][T26510] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5371'. [ 1650.533673][T23541] Bluetooth: hci5: command 0x0406 tx timeout [ 1650.863070][T23541] Bluetooth: hci0: command 0x040f tx timeout [ 1650.869247][T24637] Bluetooth: hci1: command 0x0406 tx timeout [ 1650.869258][T13757] Bluetooth: hci3: command 0x0406 tx timeout [ 1650.916712][T26327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1650.932437][T13757] Bluetooth: hci2: command 0x0419 tx timeout [ 1651.460249][T26533] netlink: 'syz.4.5373': attribute type 11 has an invalid length. [ 1651.468149][T26533] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5373'. [ 1651.940388][T26327] veth0_vlan: entered promiscuous mode [ 1652.047020][T26327] veth1_vlan: entered promiscuous mode [ 1652.087686][T26327] veth0_macvtap: entered promiscuous mode [ 1652.097356][T26327] veth1_macvtap: entered promiscuous mode [ 1652.128353][T26327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.384164][T26327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1652.426415][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.435240][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.460986][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.485051][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.579523][T23841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.625597][T23841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.004777][T23841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.159631][T23841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.779861][T26557] program syz.8.5328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1655.379400][T26552] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1655.386981][T26552] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1655.396567][T26552] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1655.404116][T26552] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1655.425225][T26552] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1656.779992][T13757] Bluetooth: hci5: command 0x0406 tx timeout [ 1657.472496][T13757] Bluetooth: hci2: command 0x0419 tx timeout [ 1657.486564][T23541] Bluetooth: hci0: command 0x040f tx timeout [ 1657.490826][T13757] Bluetooth: hci3: command 0x0406 tx timeout [ 1657.499723][T23541] Bluetooth: hci1: command 0x0406 tx timeout [ 1658.062434][ T889] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1658.212727][ T889] usb 9-1: Using ep0 maxpacket: 8 [ 1658.242146][ T889] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1658.487730][ T889] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1658.523280][ T889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.531380][ T889] usb 9-1: Product: syz [ 1658.591617][ T889] usb 9-1: Manufacturer: syz [ 1658.602116][ T889] usb 9-1: SerialNumber: syz [ 1658.625204][ T889] usb 9-1: config 0 descriptor?? [ 1658.644140][ T889] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1660.501431][ T889] gspca_zc3xx: reg_w_i err -71 [ 1661.024814][T26628] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1661.030938][T26628] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1661.037941][T26628] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1661.044477][T26628] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1661.050602][T26628] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1661.512400][ T889] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1661.537923][T26646] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1661.545117][ T889] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1661.582807][T26646] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1661.601339][ T889] usb 9-1: USB disconnect, device number 57 [ 1661.618121][T26646] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1661.673083][T26646] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1661.705007][T26646] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1662.022910][T26667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5405'. [ 1662.939704][T26682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1663.652709][T24637] Bluetooth: hci1: command 0x0406 tx timeout [ 1663.658337][T23541] Bluetooth: hci3: command 0x0406 tx timeout [ 1663.742442][T23541] Bluetooth: hci2: command 0x0419 tx timeout [ 1663.746532][T24637] Bluetooth: hci0: command 0x040f tx timeout [ 1664.449985][T26697] netlink: 'syz.3.5411': attribute type 11 has an invalid length. [ 1664.458220][T26697] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5411'. [ 1664.810167][T26671] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1664.871532][T26671] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1664.908909][T26700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 1664.912747][T26671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1665.023834][T23541] Bluetooth: hci5: command 0x0406 tx timeout [ 1665.033394][T26671] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1665.073379][T26700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 1665.082653][T26671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1665.425390][T26704] fuse: Bad value for 'fd' [ 1665.819172][ T889] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1666.092453][ T889] usb 5-1: Using ep0 maxpacket: 8 [ 1666.244874][T10872] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1666.313240][ T889] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1666.321604][T26718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1666.326047][ T889] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1666.341257][ T889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.349331][ T889] usb 5-1: Product: syz [ 1666.463017][ T889] usb 5-1: Manufacturer: syz [ 1666.467815][ T889] usb 5-1: SerialNumber: syz [ 1666.482546][T10872] usb 10-1: Using ep0 maxpacket: 8 [ 1666.483474][ T889] usb 5-1: config 0 descriptor?? [ 1666.510098][ T889] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1666.519457][T10872] usb 10-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1666.762988][T10872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.771893][T10872] usb 10-1: Product: syz [ 1666.883065][T10872] usb 10-1: Manufacturer: syz [ 1666.903437][T10872] usb 10-1: SerialNumber: syz [ 1666.913125][T10872] usb 10-1: config 0 descriptor?? [ 1666.933046][T24637] Bluetooth: hci1: command 0x0406 tx timeout [ 1667.094546][T24637] Bluetooth: hci2: command 0x0419 tx timeout [ 1667.096093][T23541] Bluetooth: hci0: command 0x040f tx timeout [ 1667.100692][T13757] Bluetooth: hci3: command 0x0406 tx timeout [ 1667.320546][T10872] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1668.074305][T26730] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1668.080658][T26730] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1668.087904][T26730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1668.094484][T26730] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1668.100553][T26730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1668.172585][T26743] netlink: 'syz.3.5423': attribute type 11 has an invalid length. [ 1668.180495][T26743] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1668.387407][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.518424][ T889] gspca_zc3xx: reg_w_i err -71 [ 1669.105255][T26712] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5415'. [ 1669.174760][T10872] gspca_sunplus: reg_w_riv err -71 [ 1669.186328][T10872] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1669.213530][T10872] usb 10-1: USB disconnect, device number 29 [ 1669.244407][ T889] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1669.492902][T24637] Bluetooth: hci5: command 0x0406 tx timeout [ 1669.502377][ T889] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1669.605719][ T889] usb 5-1: USB disconnect, device number 17 [ 1669.921826][T26760] netlink: 'syz.4.5427': attribute type 11 has an invalid length. [ 1669.929757][T26760] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5427'. [ 1670.184580][T24637] Bluetooth: hci2: command 0x0419 tx timeout [ 1670.190814][T24637] Bluetooth: hci0: command 0x040f tx timeout [ 1670.198512][T24637] Bluetooth: hci3: command 0x0406 tx timeout [ 1670.205675][T24637] Bluetooth: hci1: command 0x0406 tx timeout [ 1670.541859][ T889] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1670.665414][T26767] netlink: 'syz.9.5430': attribute type 11 has an invalid length. [ 1670.673354][T26767] netlink: 244 bytes leftover after parsing attributes in process `syz.9.5430'. [ 1671.070208][T26766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5429'. [ 1671.789112][T26772] netlink: 'syz.4.5431': attribute type 11 has an invalid length. [ 1671.797059][T26772] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5431'. [ 1671.966553][ T889] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1671.997663][T26766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5429'. [ 1672.009039][ T889] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1672.018271][ T889] usb 9-1: Product: syz [ 1672.091355][ T889] usb 9-1: Manufacturer: syz [ 1672.098278][ T889] usb 9-1: SerialNumber: syz [ 1672.134737][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1672.134748][ T30] audit: type=1400 audit(1761165902.490:2442): avc: denied { remount } for pid=26773 comm="syz.9.5432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1672.163933][ T889] usb 9-1: config 0 descriptor?? [ 1672.177666][ T889] ch341 9-1:0.0: ch341-uart converter detected [ 1673.016790][T26783] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1673.023522][T26783] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1673.032633][T26783] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1673.039156][T26783] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1673.046351][T26783] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1673.693516][T26798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1673.814448][T15269] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1673.974174][T15269] usb 10-1: Using ep0 maxpacket: 8 [ 1673.988885][T15269] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1674.087495][T15269] usb 10-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1674.099031][T15269] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.107688][T15269] usb 10-1: Product: syz [ 1674.112491][T15269] usb 10-1: Manufacturer: syz [ 1674.117540][T15269] usb 10-1: SerialNumber: syz [ 1674.137575][T26801] program syz.4.5439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1674.176651][T15269] usb 10-1: config 0 descriptor?? [ 1674.209848][T15269] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1674.561851][ T889] usb 9-1: failed to send control message: -110 [ 1674.572582][ T889] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1674.695648][T26805] syzkaller0: MTU too low for tipc bearer [ 1674.747545][T14654] usb 9-1: USB disconnect, device number 58 [ 1674.753509][T26805] tipc: Enabling of bearer rejected, failed to enable media [ 1674.761716][T14654] ch341 9-1:0.0: device disconnected [ 1674.852847][T13757] Bluetooth: hci5: command 0x0406 tx timeout [ 1675.129071][T24637] Bluetooth: hci0: command 0x040f tx timeout [ 1675.135326][T24637] Bluetooth: hci3: command 0x0406 tx timeout [ 1675.141407][T24637] Bluetooth: hci1: command 0x0406 tx timeout [ 1675.148370][T13757] Bluetooth: hci2: command 0x0419 tx timeout [ 1675.938631][T26829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1676.239762][T15269] gspca_zc3xx: reg_w_i err -71 [ 1676.912388][T15269] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1676.918760][T15269] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1676.958186][T15269] usb 10-1: USB disconnect, device number 30 [ 1677.211140][T26850] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5452'. [ 1677.388349][T26850] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5452'. [ 1677.964717][T26863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5455'. [ 1677.992733][T26863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5455'. [ 1678.621136][T26876] tipc: Failed to remove unknown binding: 66,1,1/0:2557063604/2557063606 [ 1678.637375][T26876] FAULT_INJECTION: forcing a failure. [ 1678.637375][T26876] name failslab, interval 1, probability 0, space 0, times 0 [ 1678.653691][T26876] CPU: 0 UID: 0 PID: 26876 Comm: syz.3.5458 Not tainted syzkaller #0 PREEMPT(full) [ 1678.653707][T26876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1678.653714][T26876] Call Trace: [ 1678.653718][T26876] [ 1678.653722][T26876] dump_stack_lvl+0x16c/0x1f0 [ 1678.653743][T26876] should_fail_ex+0x512/0x640 [ 1678.653758][T26876] should_failslab+0xc2/0x120 [ 1678.653771][T26876] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1678.653788][T26876] ? __alloc_skb+0x2b2/0x380 [ 1678.653804][T26876] ? __alloc_skb+0x2b2/0x380 [ 1678.653815][T26876] __alloc_skb+0x2b2/0x380 [ 1678.653827][T26876] ? __pfx___alloc_skb+0x10/0x10 [ 1678.653844][T26876] tipc_buf_acquire+0x26/0xe0 [ 1678.653858][T26876] tipc_msg_create+0x39/0x1d0 [ 1678.653873][T26876] tipc_group_proto_xmit+0x150/0x7c0 [ 1678.653891][T26876] tipc_group_delete+0xf6/0x490 [ 1678.653909][T26876] ? __lock_acquire+0x622/0x1c90 [ 1678.653928][T26876] ? __pfx_tipc_group_delete+0x10/0x10 [ 1678.653950][T26876] ? __tipc_shutdown+0x729/0xee0 [ 1678.653961][T26876] ? __lock_acquire+0xb05/0x1c90 [ 1678.653980][T26876] tipc_sk_leave+0x10e/0x1c0 [ 1678.653996][T26876] ? __pfx_tipc_sk_leave+0x10/0x10 [ 1678.654011][T26876] ? __pfx_woken_wake_function+0x10/0x10 [ 1678.654027][T26876] ? tipc_sk_filtering+0x420/0x520 [ 1678.654040][T26876] tipc_release+0x126/0x16f0 [ 1678.654052][T26876] ? down_write+0x14d/0x200 [ 1678.654062][T26876] ? __pfx_down_write+0x10/0x10 [ 1678.654073][T26876] ? __pfx_locks_remove_file+0x10/0x10 [ 1678.654087][T26876] __sock_release+0xb3/0x270 [ 1678.654105][T26876] ? __pfx_sock_close+0x10/0x10 [ 1678.654121][T26876] sock_close+0x1c/0x30 [ 1678.654134][T26876] __fput+0x402/0xb70 [ 1678.654151][T26876] fput_close_sync+0x118/0x210 [ 1678.654165][T26876] ? __pfx_fput_close_sync+0x10/0x10 [ 1678.654177][T26876] ? dnotify_flush+0x79/0x4c0 [ 1678.654197][T26876] __x64_sys_close+0x8b/0x120 [ 1678.654212][T26876] do_syscall_64+0xcd/0xfa0 [ 1678.654228][T26876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.654240][T26876] RIP: 0033:0x7fb9b878efc9 [ 1678.654249][T26876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1678.654260][T26876] RSP: 002b:00007fb9b95fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1678.654271][T26876] RAX: ffffffffffffffda RBX: 00007fb9b89e5fa0 RCX: 00007fb9b878efc9 [ 1678.654277][T26876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1678.654284][T26876] RBP: 00007fb9b95fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.654290][T26876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1678.654296][T26876] R13: 00007fb9b89e6038 R14: 00007fb9b89e5fa0 R15: 00007fffd4dea118 [ 1678.654310][T26876] [ 1678.654419][T26876] tipc: Failed to remove unknown binding: 66,1,1/0:2557063604/2557063606 [ 1678.869437][ C0] vkms_vblank_simulate: vblank timer overrun [ 1678.968754][T26876] tipc: Failed to remove unknown binding: 66,1,1/0:2557063604/2557063606 [ 1679.113632][ T30] audit: type=1400 audit(1761165909.470:2443): avc: denied { setopt } for pid=26880 comm="syz.8.5461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1680.786442][T26906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1680.992516][T10872] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1681.499917][T10872] usb 9-1: Using ep0 maxpacket: 8 [ 1681.550627][T26910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5468'. [ 1681.552628][T10872] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1681.562756][T26910] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5468'. [ 1681.577811][ T30] audit: type=1400 audit(1761165911.920:2444): avc: denied { getopt } for pid=26909 comm="syz.7.5468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1681.600970][T10872] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1681.620330][T10872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.644577][T10872] usb 9-1: Product: syz [ 1681.652445][T10872] usb 9-1: Manufacturer: syz [ 1681.663120][T10872] usb 9-1: SerialNumber: syz [ 1681.680321][T10872] usb 9-1: config 0 descriptor?? [ 1681.717911][T10872] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1682.390351][T26921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5470'. [ 1682.403336][T26921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5470'. [ 1682.668008][T26925] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5471'. [ 1683.593815][T10872] gspca_zc3xx: reg_w_i err -71 [ 1684.207650][T26943] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 1684.223728][T26943] audit: out of memory in audit_log_start [ 1684.252397][T10872] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1684.258867][T10872] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1684.279268][T10872] usb 9-1: USB disconnect, device number 59 [ 1684.505698][T26948] netlink: 'syz.7.5479': attribute type 11 has an invalid length. [ 1684.513589][T26948] netlink: 244 bytes leftover after parsing attributes in process `syz.7.5479'. [ 1686.477040][T26972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1686.532580][ T30] audit: type=1400 audit(1761165916.880:2445): avc: denied { mount } for pid=26967 comm="syz.7.5484" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1686.616548][ T30] audit: type=1400 audit(1761165916.900:2446): avc: denied { search } for pid=26967 comm="syz.7.5484" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1686.966345][ T30] audit: type=1400 audit(1761165916.900:2447): avc: denied { search } for pid=26967 comm="syz.7.5484" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1687.056590][ T30] audit: type=1400 audit(1761165916.900:2448): avc: denied { search } for pid=26967 comm="syz.7.5484" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1688.241440][T15065] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1688.585222][T15065] usb 8-1: config 14 has an invalid interface number: 21 but max is 0 [ 1688.594367][T15065] usb 8-1: config 14 has no interface number 0 [ 1688.676147][T15065] usb 8-1: config 14 interface 21 has no altsetting 0 [ 1688.713168][T15065] usb 8-1: string descriptor 0 read error: -22 [ 1688.723927][T15065] usb 8-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 1688.737955][T15065] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.765661][T15065] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1688.773435][T15065] usb 8-1: MIDIStreaming interface descriptor not found [ 1689.229377][T26987] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1689.712065][T26987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1689.741908][T26987] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1689.834989][T26987] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1689.841407][T26987] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1690.063309][T27011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1690.902947][T13757] Bluetooth: hci5: command 0x0406 tx timeout [ 1690.903248][T14654] usb 8-1: USB disconnect, device number 43 [ 1691.742622][T13757] Bluetooth: hci1: command 0x0406 tx timeout [ 1691.812502][T13757] Bluetooth: hci3: command 0x0406 tx timeout [ 1691.826637][T27032] netlink: 'syz.3.5503': attribute type 8 has an invalid length. [ 1691.838310][T27033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5501'. [ 1691.892496][T24637] Bluetooth: hci0: command 0x040f tx timeout [ 1691.900348][T13757] Bluetooth: hci2: command 0x0419 tx timeout [ 1691.912762][T27033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5501'. [ 1692.245957][T27045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5504'. [ 1692.270316][T27045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5504'. [ 1692.508639][T27047] fuse: Bad value for 'fd' [ 1692.602404][T15065] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1692.613254][T14654] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1692.844049][T15065] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1692.862443][T15065] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.872946][T14654] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1692.893233][T15065] usb 9-1: config 0 descriptor?? [ 1692.921866][T14654] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.061118][T14654] usb 10-1: config 0 descriptor?? [ 1693.144603][T15065] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1693.171683][T15065] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1693.212448][T15065] [drm] Initialized udl on minor 2 [ 1693.439527][T14654] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1693.440320][T15065] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1693.919463][T14654] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 3 [ 1693.927155][T14654] [drm] Initialized udl on minor 3 [ 1693.933776][T14654] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1693.941625][T14654] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1693.945024][T15065] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1693.957885][T15269] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1693.975990][T15269] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1693.997434][T27039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.008025][T15065] usb 9-1: USB disconnect, device number 60 [ 1694.014168][T15269] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1694.030931][T27039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.174574][T10872] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1694.178748][T15269] usb 10-1: USB disconnect, device number 31 [ 1694.190703][T10872] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1694.216856][T27062] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5511'. [ 1694.217650][T27044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.233133][T27061] FAULT_INJECTION: forcing a failure. [ 1694.233133][T27061] name failslab, interval 1, probability 0, space 0, times 0 [ 1694.238321][T27044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.262710][T27061] CPU: 1 UID: 0 PID: 27061 Comm: syz.4.5510 Not tainted syzkaller #0 PREEMPT(full) [ 1694.262736][T27061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1694.262753][T27061] Call Trace: [ 1694.262760][T27061] [ 1694.262767][T27061] dump_stack_lvl+0x16c/0x1f0 [ 1694.262799][T27061] should_fail_ex+0x512/0x640 [ 1694.262820][T27061] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1694.262849][T27061] should_failslab+0xc2/0x120 [ 1694.262870][T27061] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1694.262894][T27061] ? __alloc_skb+0x2b2/0x380 [ 1694.262921][T27061] ? __alloc_skb+0x2b2/0x380 [ 1694.262938][T27061] __alloc_skb+0x2b2/0x380 [ 1694.262958][T27061] ? __pfx___alloc_skb+0x10/0x10 [ 1694.262988][T27061] alloc_skb_with_frags+0xe0/0x860 [ 1694.263011][T27061] ? __might_fault+0xe3/0x190 [ 1694.263034][T27061] ? __might_fault+0x13b/0x190 [ 1694.263062][T27061] sock_alloc_send_pskb+0x7f9/0x980 [ 1694.263083][T27061] ? _copy_from_iter+0x15d/0x1720 [ 1694.263110][T27061] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1694.263131][T27061] ? _parse_integer_limit+0x17f/0x1d0 [ 1694.263160][T27061] ? iov_iter_advance+0x7d/0x6c0 [ 1694.263184][T27061] tun_get_user+0x7e2/0x3cc0 [ 1694.263220][T27061] ? __pfx_tun_get_user+0x10/0x10 [ 1694.263245][T27061] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1694.263274][T27061] ? find_held_lock+0x2b/0x80 [ 1694.263297][T27061] ? tun_get+0x191/0x370 [ 1694.263323][T27061] tun_chr_write_iter+0xdc/0x210 [ 1694.263348][T27061] vfs_write+0x7d3/0x11d0 [ 1694.263363][T27061] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1694.263389][T27061] ? __pfx_vfs_write+0x10/0x10 [ 1694.263403][T27061] ? find_held_lock+0x2b/0x80 [ 1694.263438][T27061] ksys_write+0x12a/0x250 [ 1694.263454][T27061] ? __pfx_ksys_write+0x10/0x10 [ 1694.263475][T27061] do_syscall_64+0xcd/0xfa0 [ 1694.263501][T27061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.263518][T27061] RIP: 0033:0x7ff98e98efc9 [ 1694.263533][T27061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1694.263549][T27061] RSP: 002b:00007ff98f875038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1694.263566][T27061] RAX: ffffffffffffffda RBX: 00007ff98ebe5fa0 RCX: 00007ff98e98efc9 [ 1694.263577][T27061] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000003 [ 1694.263588][T27061] RBP: 00007ff98f875090 R08: 0000000000000000 R09: 0000000000000000 [ 1694.263597][T27061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1694.263608][T27061] R13: 00007ff98ebe6038 R14: 00007ff98ebe5fa0 R15: 00007ffea0095058 [ 1694.263632][T27061] [ 1694.669701][T27072] xt_TCPMSS: Only works on TCP SYN packets [ 1694.824972][T15065] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1694.833426][T15269] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1695.163762][T27066] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1695.203668][T27066] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1695.209858][T27066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1695.232698][T27066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1695.239864][T27066] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1695.267447][T27098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1696.527273][T27108] program syz.7.5519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1696.772390][T13757] Bluetooth: hci5: command 0x0406 tx timeout [ 1697.291921][T27121] netlink: 'syz.9.5522': attribute type 11 has an invalid length. [ 1697.299954][T27121] netlink: 244 bytes leftover after parsing attributes in process `syz.9.5522'. [ 1697.458218][T13757] Bluetooth: hci2: command 0x0419 tx timeout [ 1697.464472][T13757] Bluetooth: hci0: command 0x040f tx timeout [ 1697.470598][T13757] Bluetooth: hci3: command 0x0406 tx timeout [ 1697.476753][T13757] Bluetooth: hci1: command 0x0406 tx timeout [ 1697.795766][T27135] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5528'. [ 1697.804869][T27135] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5528'. [ 1697.815297][T27135] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5528'. [ 1697.839258][T27135] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5528'. [ 1697.853670][T27135] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5528'. [ 1697.863815][T27135] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5528'. [ 1698.015669][T14654] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1698.709613][T14654] usb 8-1: Using ep0 maxpacket: 8 [ 1698.937593][T14654] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1698.979383][T14654] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1699.009117][T14654] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.048875][T14654] usb 8-1: Product: syz [ 1699.069040][T14654] usb 8-1: Manufacturer: syz [ 1699.088422][T14654] usb 8-1: SerialNumber: syz [ 1699.121104][T14654] usb 8-1: config 0 descriptor?? [ 1699.131622][T14654] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1699.186978][T15065] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1699.349357][T27157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1699.352422][T15065] usb 4-1: Using ep0 maxpacket: 16 [ 1699.424154][T15065] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1699.434541][T15065] usb 4-1: config 0 has no interface number 0 [ 1699.440741][T15065] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1699.756611][T15065] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1699.766705][T15065] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1699.776013][T15065] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.786740][T15065] usb 4-1: config 0 descriptor?? [ 1700.091648][T27151] netlink: 'syz.3.5531': attribute type 10 has an invalid length. [ 1700.150293][T27163] netlink: 'syz.3.5531': attribute type 10 has an invalid length. [ 1700.347281][T27151] team0: Port device dummy0 added [ 1700.426871][T27163] team0: Port device dummy0 removed [ 1700.662726][T27168] netlink: 'syz.9.5535': attribute type 11 has an invalid length. [ 1700.670647][T27168] netlink: 244 bytes leftover after parsing attributes in process `syz.9.5535'. [ 1701.166032][T14654] gspca_zc3xx: reg_w_i err -71 [ 1701.454167][T15065] uclogic 0003:28BD:0071.0027: pen parameters not found [ 1701.573538][T15065] uclogic 0003:28BD:0071.0027: interface is invalid, ignoring [ 1701.812756][T14654] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1701.819741][T14654] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1701.825601][T27151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5531'. [ 1702.002750][T14654] usb 8-1: USB disconnect, device number 44 [ 1702.030121][ T30] audit: type=1400 audit(1761165932.390:2449): avc: denied { ioctl } for pid=27178 comm="syz.7.5539" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1702.054360][T15065] usb 4-1: USB disconnect, device number 81 [ 1703.186792][T27191] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1703.194317][T27191] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1703.201003][T27191] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1703.207909][T27191] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1703.214775][T27191] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1704.361002][T27216] netlink: 'syz.9.5546': attribute type 11 has an invalid length. [ 1704.369010][T27216] netlink: 244 bytes leftover after parsing attributes in process `syz.9.5546'. [ 1705.092466][T24637] Bluetooth: hci5: command 0x0406 tx timeout [ 1705.252730][T13757] Bluetooth: hci0: command 0x040f tx timeout [ 1705.267018][ T5818] Bluetooth: hci2: command 0x0419 tx timeout [ 1705.277173][T13757] Bluetooth: hci3: command 0x0406 tx timeout [ 1705.287343][T24637] Bluetooth: hci1: command 0x0406 tx timeout [ 1705.732770][T10872] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1705.976765][T27225] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1705.984215][T27225] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1705.990618][T27225] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1705.999210][T27225] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1706.009742][T27225] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1706.063093][T10872] usb 9-1: Using ep0 maxpacket: 8 [ 1706.369808][T10872] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1706.383221][T10872] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1706.407046][T10872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.432453][T10872] usb 9-1: Product: syz [ 1706.442565][T10872] usb 9-1: Manufacturer: syz [ 1706.447200][T10872] usb 9-1: SerialNumber: syz [ 1706.484068][T10872] usb 9-1: config 0 descriptor?? [ 1706.510243][T10872] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1706.684920][T27246] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1707.093262][T27246] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1707.100252][T27246] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1707.107409][T27246] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1707.114237][T27246] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1708.114980][T27272] netlink: 'syz.7.5559': attribute type 11 has an invalid length. [ 1708.123051][T27272] netlink: 244 bytes leftover after parsing attributes in process `syz.7.5559'. [ 1708.527122][T27274] overlayfs: overlapping lowerdir path [ 1708.636826][T10872] gspca_zc3xx: reg_w_i err -71 [ 1708.650222][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5561'. [ 1708.697287][T24637] Bluetooth: hci5: command 0x0406 tx timeout [ 1708.748861][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5561'. [ 1708.772539][T24637] Bluetooth: hci1: command 0x0406 tx timeout [ 1709.102618][T27284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5563'. [ 1709.182423][T24637] Bluetooth: hci3: command 0x0406 tx timeout [ 1709.252388][T10872] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1709.332904][T24637] Bluetooth: hci2: command 0x0419 tx timeout [ 1709.339177][T24637] Bluetooth: hci0: command 0x040f tx timeout [ 1709.427718][T10872] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1709.460362][T10872] usb 9-1: USB disconnect, device number 62 [ 1710.863816][T27300] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1710.892778][T27300] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1710.916229][T27300] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1710.942619][T27300] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1710.949733][T27300] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1711.001022][T27301] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1711.297072][T27316] FAULT_INJECTION: forcing a failure. [ 1711.297072][T27316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1711.319400][T27316] CPU: 1 UID: 0 PID: 27316 Comm: syz.3.5569 Not tainted syzkaller #0 PREEMPT(full) [ 1711.319423][T27316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1711.319434][T27316] Call Trace: [ 1711.319443][T27316] [ 1711.319451][T27316] dump_stack_lvl+0x16c/0x1f0 [ 1711.319481][T27316] should_fail_ex+0x512/0x640 [ 1711.319506][T27316] _copy_to_user+0x32/0xd0 [ 1711.319529][T27316] simple_read_from_buffer+0xcb/0x170 [ 1711.319559][T27316] proc_fail_nth_read+0x197/0x240 [ 1711.319581][T27316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1711.319603][T27316] ? rw_verify_area+0xcf/0x6c0 [ 1711.319629][T27316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1711.319649][T27316] vfs_read+0x1e4/0xcf0 [ 1711.319669][T27316] ? __pfx___mutex_lock+0x10/0x10 [ 1711.319685][T27316] ? __pfx_vfs_read+0x10/0x10 [ 1711.319709][T27316] ? __fget_files+0x20e/0x3c0 [ 1711.319735][T27316] ksys_read+0x12a/0x250 [ 1711.319751][T27316] ? __pfx_ksys_read+0x10/0x10 [ 1711.319782][T27316] do_syscall_64+0xcd/0xfa0 [ 1711.319811][T27316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.319829][T27316] RIP: 0033:0x7fb9b878d9dc [ 1711.319844][T27316] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1711.319861][T27316] RSP: 002b:00007fb9b95bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1711.319878][T27316] RAX: ffffffffffffffda RBX: 00007fb9b89e6180 RCX: 00007fb9b878d9dc [ 1711.319890][T27316] RDX: 000000000000000f RSI: 00007fb9b95bc0a0 RDI: 0000000000000005 [ 1711.319902][T27316] RBP: 00007fb9b95bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.319913][T27316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1711.319923][T27316] R13: 00007fb9b89e6218 R14: 00007fb9b89e6180 R15: 00007fffd4dea118 [ 1711.319949][T27316] [ 1711.638297][T27319] overlayfs: overlapping lowerdir path [ 1711.647377][T27321] sctp: [Deprecated]: syz.3.5572 (pid 27321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1711.647377][T27321] Use struct sctp_sack_info instead [ 1711.751503][T27325] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5573'. [ 1711.933027][T27321] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1712.157120][T27332] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1712.163679][T27332] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1712.190366][T27332] vhci_hcd vhci_hcd.0: Device attached [ 1712.212828][T23541] Bluetooth: hci5: command 0x0406 tx timeout [ 1712.297493][T27332] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1712.305600][T27332] cramfs: wrong magic [ 1712.441637][T26308] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1712.495178][T10872] usb 49-1: new low-speed USB device number 5 using vhci_hcd [ 1712.661685][T27345] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5578'. [ 1712.732536][T26308] usb 5-1: Using ep0 maxpacket: 8 [ 1712.932628][T24637] Bluetooth: hci1: command 0x0406 tx timeout [ 1712.938956][T23541] Bluetooth: hci3: command 0x0406 tx timeout [ 1713.005460][T26308] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1713.014623][T23541] Bluetooth: hci2: command 0x0419 tx timeout [ 1713.020721][T23541] Bluetooth: hci0: command 0x040f tx timeout [ 1713.033315][T26308] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1713.080549][T26308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.093231][T26308] usb 5-1: Product: syz [ 1713.097640][T26308] usb 5-1: Manufacturer: syz [ 1713.104171][T26308] usb 5-1: SerialNumber: syz [ 1713.156335][T26308] usb 5-1: config 0 descriptor?? [ 1713.163988][T26308] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1713.662207][T27334] vhci_hcd: connection reset by peer [ 1714.020426][ T13] vhci_hcd: stop threads [ 1714.038043][ T13] vhci_hcd: release socket [ 1714.053025][ T13] vhci_hcd: disconnect device [ 1714.249035][T27350] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1714.255405][T27350] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1714.261849][T27350] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1714.268322][T27350] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1714.274579][T27350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1714.283422][T27365] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5581'. [ 1714.307160][T27365] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5581'. [ 1714.680181][T27369] netlink: 'syz.7.5582': attribute type 11 has an invalid length. [ 1714.688114][T27369] netlink: 244 bytes leftover after parsing attributes in process `syz.7.5582'. [ 1715.014438][T26308] gspca_zc3xx: reg_w_i err -71 [ 1715.633488][T26308] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1715.639823][T26308] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1715.687027][T27381] FAULT_INJECTION: forcing a failure. [ 1715.687027][T27381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1715.705494][T26308] usb 5-1: USB disconnect, device number 18 [ 1715.707822][T27381] CPU: 0 UID: 0 PID: 27381 Comm: syz.7.5586 Not tainted syzkaller #0 PREEMPT(full) [ 1715.707843][T27381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1715.707852][T27381] Call Trace: [ 1715.707858][T27381] [ 1715.707864][T27381] dump_stack_lvl+0x16c/0x1f0 [ 1715.707889][T27381] should_fail_ex+0x512/0x640 [ 1715.707911][T27381] _copy_from_user+0x2e/0xd0 [ 1715.707930][T27381] do_hidp_sock_ioctl.constprop.0+0x367/0x510 [ 1715.707953][T27381] ? __pfx_do_hidp_sock_ioctl.constprop.0+0x10/0x10 [ 1715.707989][T27381] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1715.708011][T27381] ? kasan_quarantine_put+0x10a/0x240 [ 1715.708037][T27381] ? tomoyo_path_number_perm+0x18d/0x580 [ 1715.708067][T27381] sock_do_ioctl+0x118/0x280 [ 1715.708091][T27381] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1715.708118][T27381] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1715.708140][T27381] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1715.708161][T27381] sock_ioctl+0x227/0x6b0 [ 1715.708176][T27381] ? __pfx_sock_ioctl+0x10/0x10 [ 1715.708189][T27381] ? hook_file_ioctl_common+0x145/0x410 [ 1715.708214][T27381] ? selinux_file_ioctl+0x180/0x270 [ 1715.708229][T27381] ? selinux_file_ioctl+0xb4/0x270 [ 1715.708246][T27381] ? __pfx_sock_ioctl+0x10/0x10 [ 1715.708261][T27381] __x64_sys_ioctl+0x18e/0x210 [ 1715.708283][T27381] do_syscall_64+0xcd/0xfa0 [ 1715.708306][T27381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.708321][T27381] RIP: 0033:0x7f0fff38efc9 [ 1715.708334][T27381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1715.708348][T27381] RSP: 002b:00007f10002f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1715.708364][T27381] RAX: ffffffffffffffda RBX: 00007f0fff5e6090 RCX: 00007f0fff38efc9 [ 1715.708374][T27381] RDX: 0000200000000340 RSI: 00000000400448c8 RDI: 0000000000000008 [ 1715.708383][T27381] RBP: 00007f10002f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1715.708392][T27381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1715.708401][T27381] R13: 00007f0fff5e6128 R14: 00007f0fff5e6090 R15: 00007ffdf9e6a4a8 [ 1715.708422][T27381] [ 1716.134216][T23541] Bluetooth: hci5: command 0x0406 tx timeout [ 1716.140777][T27391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=27391 comm=syz.4.5588 [ 1716.296225][T23541] Bluetooth: hci2: command 0x0419 tx timeout [ 1716.303879][T23541] Bluetooth: hci0: command 0x040f tx timeout [ 1716.309861][T23541] Bluetooth: hci3: command 0x0406 tx timeout [ 1716.316057][T23541] Bluetooth: hci1: command 0x0406 tx timeout [ 1716.869837][T27397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1717.594767][T27405] tipc: Started in network mode [ 1717.599672][T27405] tipc: Node identity 96ff38c5c314, cluster identity 4711 [ 1717.606999][T27405] tipc: Enabled bearer , priority 0 [ 1717.676255][T10872] vhci_hcd: vhci_device speed not set [ 1717.731836][T27411] syzkaller0: entered promiscuous mode [ 1717.840312][T27411] syzkaller0: entered allmulticast mode [ 1717.973505][T27405] FAULT_INJECTION: forcing a failure. [ 1717.973505][T27405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1718.048732][T27405] CPU: 0 UID: 0 PID: 27405 Comm: syz.4.5595 Not tainted syzkaller #0 PREEMPT(full) [ 1718.048759][T27405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1718.048770][T27405] Call Trace: [ 1718.048776][T27405] [ 1718.048783][T27405] dump_stack_lvl+0x16c/0x1f0 [ 1718.048813][T27405] should_fail_ex+0x512/0x640 [ 1718.048838][T27405] _copy_from_user+0x2e/0xd0 [ 1718.048861][T27405] get_user_ifreq+0xf1/0x250 [ 1718.048887][T27405] sock_do_ioctl+0x16b/0x280 [ 1718.048914][T27405] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1718.048947][T27405] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1718.048974][T27405] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1718.049001][T27405] sock_ioctl+0x227/0x6b0 [ 1718.049018][T27405] ? __pfx_sock_ioctl+0x10/0x10 [ 1718.049031][T27405] ? hook_file_ioctl_common+0x145/0x410 [ 1718.049059][T27405] ? selinux_file_ioctl+0x180/0x270 [ 1718.049074][T27405] ? selinux_file_ioctl+0xb4/0x270 [ 1718.049086][T27405] ? __pfx_sock_ioctl+0x10/0x10 [ 1718.049097][T27405] __x64_sys_ioctl+0x18e/0x210 [ 1718.049113][T27405] do_syscall_64+0xcd/0xfa0 [ 1718.049129][T27405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.049141][T27405] RIP: 0033:0x7ff98e98efc9 [ 1718.049150][T27405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1718.049161][T27405] RSP: 002b:00007ff98f875038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.049171][T27405] RAX: ffffffffffffffda RBX: 00007ff98ebe5fa0 RCX: 00007ff98e98efc9 [ 1718.049178][T27405] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1718.049184][T27405] RBP: 00007ff98f875090 R08: 0000000000000000 R09: 0000000000000000 [ 1718.049191][T27405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1718.049196][T27405] R13: 00007ff98ebe6038 R14: 00007ff98ebe5fa0 R15: 00007ffea0095058 [ 1718.049210][T27405] [ 1718.448620][T24637] Bluetooth: hci2: command 0x0419 tx timeout [ 1718.470497][T27404] tipc: Resetting bearer [ 1718.569488][T27404] tipc: Disabling bearer [ 1718.624144][T20213] tipc: Node number set to 1441478853 [ 1718.686295][T15065] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1719.062375][ T889] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1719.242386][T15065] usb 9-1: Using ep0 maxpacket: 32 [ 1719.249227][T15065] usb 9-1: config 8 has an invalid interface number: 203 but max is 0 [ 1719.257865][T15065] usb 9-1: config 8 has no interface number 0 [ 1719.264349][ T889] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1719.273681][ T889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.293777][T15065] usb 9-1: config 8 interface 203 has no altsetting 0 [ 1719.306804][ T889] usb 10-1: config 0 descriptor?? [ 1719.314625][T15065] usb 9-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 1719.323909][T15065] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.338531][T15065] usb 9-1: Product: syz [ 1719.352378][T15065] usb 9-1: Manufacturer: syz [ 1719.372641][T15065] usb 9-1: SerialNumber: syz [ 1719.520599][ T889] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1719.614962][T27431] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1719.621597][T27431] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1719.643161][ T889] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 1719.668444][ T889] [drm] Initialized udl on minor 2 [ 1719.671336][T27431] vhci_hcd vhci_hcd.0: Device attached [ 1719.744088][T27431] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1719.752462][T27431] cramfs: wrong magic [ 1719.845330][ T889] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1719.858051][ T889] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1719.902397][T20213] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 1720.050645][T15064] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1720.074186][ T889] usb 10-1: USB disconnect, device number 33 [ 1720.120407][T15064] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1720.182997][T27417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.203415][T27417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.583154][ T889] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1720.773066][T27432] vhci_hcd: connection reset by peer [ 1720.801354][T15065] port100 9-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 1720.852915][ T1314] vhci_hcd: stop threads [ 1720.862999][ T1314] vhci_hcd: release socket [ 1720.880336][ T1314] vhci_hcd: disconnect device [ 1720.899036][T27443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1721.027115][T15065] usb 9-1: USB disconnect, device number 63 [ 1721.439014][T27448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1733.780520][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.801404][ T30] audit: type=1400 audit(1761165956.840:2450): avc: denied { mount } for pid=27447 comm="syz.4.5604" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1831.632268][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1831.639253][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15315/1:b..l P17088/1:b..l P23841/1:b..l [ 1831.650190][ C1] rcu: (detected by 1, t=10502 jiffies, g=137105, q=713 ncpus=2) [ 1831.658030][ C1] task:kworker/u8:8 state:R running task stack:23544 pid:23841 tgid:23841 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1831.672688][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1831.680500][ C1] Call Trace: [ 1831.683756][ C1] [ 1831.686665][ C1] __schedule+0x1190/0x5de0 [ 1831.691165][ C1] ? __pfx___schedule+0x10/0x10 [ 1831.696002][ C1] ? mark_held_locks+0x49/0x80 [ 1831.700746][ C1] preempt_schedule_irq+0x51/0x90 [ 1831.705743][ C1] irqentry_exit+0x36/0x90 [ 1831.710132][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1831.716170][ C1] RIP: 0010:__rcu_read_lock+0xa7/0xf0 [ 1831.721534][ C1] Code: 48 b8 00 00 00 00 00 fc ff df 89 9d 84 04 00 00 65 48 8b 1d d3 8b ff 11 48 8d bb 84 04 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1f 8b 83 84 04 00 [ 1831.741119][ C1] RSP: 0018:ffffc9000ded7a98 EFLAGS: 00000a03 [ 1831.747161][ C1] RAX: dffffc0000000000 RBX: ffff8880693f2480 RCX: ffffffff8b28bf00 [ 1831.755105][ C1] RDX: 0000000000000000 RSI: ffff88806bb442c0 RDI: ffff8880693f2904 [ 1831.763046][ C1] RBP: ffff8880693f2480 R08: 0000000000000004 R09: 000000000000031f [ 1831.770986][ C1] R10: 0000000000000400 R11: 0000000000000001 R12: dffffc0000000000 [ 1831.778927][ C1] R13: ffff888026d00d80 R14: 000000000000031f R15: ffff88806bb442c0 [ 1831.786874][ C1] ? batadv_iv_ogm_schedule_buff+0x7b0/0x14c0 [ 1831.792922][ C1] batadv_iv_ogm_schedule_buff+0x5ad/0x14c0 [ 1831.798794][ C1] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 1831.805094][ C1] ? batadv_send_skb_packet+0x597/0x6f0 [ 1831.810618][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 1831.817704][ C1] process_one_work+0x9cf/0x1b70 [ 1831.822633][ C1] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 1831.830151][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1831.835505][ C1] ? assign_work+0x1a0/0x250 [ 1831.840152][ C1] worker_thread+0x6c8/0xf10 [ 1831.844715][ C1] ? __kthread_parkme+0x19e/0x250 [ 1831.849711][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1831.854789][ C1] kthread+0x3c5/0x780 [ 1831.858825][ C1] ? __pfx_kthread+0x10/0x10 [ 1831.863387][ C1] ? rcu_is_watching+0x12/0xc0 [ 1831.868123][ C1] ? __pfx_kthread+0x10/0x10 [ 1831.872682][ C1] ret_from_fork+0x675/0x7d0 [ 1831.877239][ C1] ? __pfx_kthread+0x10/0x10 [ 1831.881799][ C1] ret_from_fork_asm+0x1a/0x30 [ 1831.886554][ C1] [ 1831.889544][ C1] task:udevd state:R running task stack:26664 pid:17088 tgid:17088 ppid:5183 task_flags:0x40014c flags:0x00080001 [ 1831.902985][ C1] Call Trace: [ 1831.906236][ C1] [ 1831.909140][ C1] __schedule+0x1190/0x5de0 [ 1831.913630][ C1] ? x64_sys_call+0x150b/0x1730 [ 1831.918451][ C1] ? __kernel_text_address+0xd/0x40 [ 1831.923624][ C1] ? __pfx___schedule+0x10/0x10 [ 1831.928446][ C1] ? __lock_acquire+0x622/0x1c90 [ 1831.933363][ C1] ? mark_held_locks+0x49/0x80 [ 1831.938099][ C1] preempt_schedule_irq+0x51/0x90 [ 1831.943095][ C1] irqentry_exit+0x36/0x90 [ 1831.947485][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1831.953448][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1831.959486][ C1] Code: b6 6b 57 00 48 89 df 5b e9 7d 1a 5d 00 be 03 00 00 00 5b e9 e2 99 e7 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 b8 45 e4 11 65 8b 05 c9 45 e4 [ 1831.979067][ C1] RSP: 0018:ffffc9000f0af440 EFLAGS: 00000202 [ 1831.985102][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81ce40a2 [ 1831.993043][ C1] RDX: ffff888026cf8000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1832.000984][ C1] RBP: 00007f33498f16c5 R08: 0000000000000001 R09: 0000000000000000 [ 1832.008924][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff81a801e0 [ 1832.016874][ C1] R13: ffffc9000f0af560 R14: 0000000000000000 R15: ffff888026cf8000 [ 1832.024823][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1832.030951][ C1] ? is_bpf_text_address+0xb2/0x1a0 [ 1832.036123][ C1] is_bpf_text_address+0x50/0x1a0 [ 1832.041129][ C1] kernel_text_address+0x8d/0x100 [ 1832.046123][ C1] __kernel_text_address+0xd/0x40 [ 1832.051118][ C1] unwind_get_return_address+0x59/0xa0 [ 1832.056559][ C1] arch_stack_walk+0xa6/0x100 [ 1832.061215][ C1] stack_trace_save+0x8e/0xc0 [ 1832.065862][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1832.071207][ C1] ? __lock_acquire+0x622/0x1c90 [ 1832.076119][ C1] save_stack+0x160/0x1f0 [ 1832.080423][ C1] ? __pfx_save_stack+0x10/0x10 [ 1832.085248][ C1] ? free_unref_folios+0xa31/0x1610 [ 1832.090418][ C1] ? folios_put_refs+0x4be/0x750 [ 1832.095322][ C1] ? free_pages_and_swap_cache+0x245/0x4a0 [ 1832.101109][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1832.107233][ C1] ? tlb_finish_mmu+0x168/0x7c0 [ 1832.112053][ C1] ? exit_mmap+0x3fc/0xb90 [ 1832.116439][ C1] ? __mmput+0x12a/0x410 [ 1832.120655][ C1] ? mmput+0x62/0x70 [ 1832.124519][ C1] ? do_exit+0x7c7/0x2bf0 [ 1832.128833][ C1] ? do_group_exit+0xd3/0x2a0 [ 1832.133491][ C1] ? __x64_sys_exit_group+0x3e/0x50 [ 1832.138666][ C1] ? x64_sys_call+0x150b/0x1730 [ 1832.143491][ C1] ? do_syscall_64+0xcd/0xfa0 [ 1832.148142][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.154187][ C1] ? page_ext_put+0x3e/0xd0 [ 1832.158670][ C1] __reset_page_owner+0x84/0x1a0 [ 1832.163578][ C1] free_unref_folios+0xa31/0x1610 [ 1832.168578][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1832.174366][ C1] folios_put_refs+0x4be/0x750 [ 1832.179106][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1832.184364][ C1] free_pages_and_swap_cache+0x245/0x4a0 [ 1832.189991][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1832.196165][ C1] ? __pfx___might_resched+0x10/0x10 [ 1832.201440][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1832.207406][ C1] tlb_finish_mmu+0x168/0x7c0 [ 1832.212064][ C1] exit_mmap+0x3fc/0xb90 [ 1832.216368][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1832.221121][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 1832.226640][ C1] __mmput+0x12a/0x410 [ 1832.230692][ C1] mmput+0x62/0x70 [ 1832.234396][ C1] do_exit+0x7c7/0x2bf0 [ 1832.238534][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1832.243539][ C1] ? __pfx_do_exit+0x10/0x10 [ 1832.248108][ C1] ? rcu_is_watching+0x12/0xc0 [ 1832.252844][ C1] do_group_exit+0xd3/0x2a0 [ 1832.257321][ C1] __x64_sys_exit_group+0x3e/0x50 [ 1832.262328][ C1] x64_sys_call+0x150b/0x1730 [ 1832.266982][ C1] do_syscall_64+0xcd/0xfa0 [ 1832.271466][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.277329][ C1] RIP: 0033:0x7f33498f16c5 [ 1832.281713][ C1] RSP: 002b:00007fffe48ad228 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1832.290125][ C1] RAX: ffffffffffffffda RBX: 000055bf7f64fd60 RCX: 00007f33498f16c5 [ 1832.298079][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1832.306458][ C1] RBP: 000055bf7f3642c0 R08: 0000000000000000 R09: 0000000000000000 [ 1832.314402][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1832.322343][ C1] R13: 00007fffe48ad270 R14: 0000000000000000 R15: 0000000000000000 [ 1832.330300][ C1] [ 1832.333381][ C1] task:udevd state:R running task stack:26664 pid:15315 tgid:15315 ppid:5183 task_flags:0x40014c flags:0x00080001 [ 1832.346920][ C1] Call Trace: [ 1832.350175][ C1] [ 1832.353082][ C1] __schedule+0x1190/0x5de0 [ 1832.357561][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1832.362735][ C1] ? unwind_next_frame+0x3e1/0x20a0 [ 1832.367905][ C1] ? __pfx___schedule+0x10/0x10 [ 1832.372733][ C1] ? mark_held_locks+0x49/0x80 [ 1832.377472][ C1] preempt_schedule_irq+0x51/0x90 [ 1832.382471][ C1] irqentry_exit+0x36/0x90 [ 1832.386859][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1832.392811][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 1832.397980][ C1] Code: 65 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 32 0a e9 0e 0f 82 74 02 00 00 8b 35 aa 3a e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 49 65 08 12 0f 85 c7 02 00 00 48 83 c4 [ 1832.417652][ C1] RSP: 0018:ffffc90003a1f3c8 EFLAGS: 00000206 [ 1832.423753][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c4460 RCX: 00000000d63968bf [ 1832.431711][ C1] RDX: 0000000000000000 RSI: ffffffff8da047c8 RDI: ffffffff8bf06cc0 [ 1832.439663][ C1] RBP: 0000000000000002 R08: 01feeab069f3d1a9 R09: 0000000000000000 [ 1832.447619][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1832.455561][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1832.463514][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1832.468705][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1832.474845][ C1] is_module_text_address+0x33/0x220 [ 1832.480111][ C1] ? is_module_text_address+0x1f/0x220 [ 1832.485545][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1832.491677][ C1] kernel_text_address+0x81/0x100 [ 1832.496674][ C1] __kernel_text_address+0xd/0x40 [ 1832.501668][ C1] unwind_get_return_address+0x59/0xa0 [ 1832.507099][ C1] arch_stack_walk+0xa6/0x100 [ 1832.511751][ C1] stack_trace_save+0x8e/0xc0 [ 1832.516401][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1832.521749][ C1] ? __lock_acquire+0x622/0x1c90 [ 1832.526665][ C1] save_stack+0x160/0x1f0 [ 1832.531056][ C1] ? __pfx_save_stack+0x10/0x10 [ 1832.535973][ C1] ? free_unref_folios+0xa31/0x1610 [ 1832.541146][ C1] ? folios_put_refs+0x4be/0x750 [ 1832.546146][ C1] ? free_pages_and_swap_cache+0x245/0x4a0 [ 1832.551935][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1832.558059][ C1] ? tlb_finish_mmu+0x168/0x7c0 [ 1832.562887][ C1] ? exit_mmap+0x3fc/0xb90 [ 1832.567280][ C1] ? __mmput+0x12a/0x410 [ 1832.571491][ C1] ? mmput+0x62/0x70 [ 1832.575357][ C1] ? do_exit+0x7c7/0x2bf0 [ 1832.579757][ C1] ? do_group_exit+0xd3/0x2a0 [ 1832.584428][ C1] ? __x64_sys_exit_group+0x3e/0x50 [ 1832.589659][ C1] ? x64_sys_call+0x150b/0x1730 [ 1832.594513][ C1] ? do_syscall_64+0xcd/0xfa0 [ 1832.599190][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.605251][ C1] ? page_ext_put+0x3e/0xd0 [ 1832.609767][ C1] __reset_page_owner+0x84/0x1a0 [ 1832.615134][ C1] free_unref_folios+0xa31/0x1610 [ 1832.620269][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1832.626071][ C1] folios_put_refs+0x4be/0x750 [ 1832.630822][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1832.636111][ C1] free_pages_and_swap_cache+0x245/0x4a0 [ 1832.641730][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1832.647893][ C1] ? __pfx___might_resched+0x10/0x10 [ 1832.653178][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1832.659152][ C1] tlb_finish_mmu+0x168/0x7c0 [ 1832.663808][ C1] exit_mmap+0x3fc/0xb90 [ 1832.668029][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1832.672795][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 1832.678330][ C1] __mmput+0x12a/0x410 [ 1832.682378][ C1] mmput+0x62/0x70 [ 1832.686098][ C1] do_exit+0x7c7/0x2bf0 [ 1832.690235][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1832.695309][ C1] ? __pfx_do_exit+0x10/0x10 [ 1832.699906][ C1] ? rcu_is_watching+0x12/0xc0 [ 1832.704677][ C1] do_group_exit+0xd3/0x2a0 [ 1832.709164][ C1] __x64_sys_exit_group+0x3e/0x50 [ 1832.714164][ C1] x64_sys_call+0x150b/0x1730 [ 1832.718815][ C1] do_syscall_64+0xcd/0xfa0 [ 1832.723294][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.729157][ C1] RIP: 0033:0x7f33498f16c5 [ 1832.733546][ C1] RSP: 002b:00007fffe48ad228 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1832.741927][ C1] RAX: ffffffffffffffda RBX: 000055bf7f599630 RCX: 00007f33498f16c5 [ 1832.749869][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1832.757811][ C1] RBP: 000055bf7f3642c0 R08: 0000000000000000 R09: 0000000000000000 [ 1832.765755][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1832.773707][ C1] R13: 00007fffe48ad270 R14: 0000000000000000 R15: 0000000000000000 [ 1832.781656][ C1] [ 1832.784648][ C1] rcu: rcu_preempt kthread starved for 9899 jiffies! g137105 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1832.795816][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1832.805755][ C1] rcu: RCU grace-period kthread stack dump: [ 1832.811611][ C1] task:rcu_preempt state:R running task stack:28120 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1832.825052][ C1] Call Trace: [ 1832.828302][ C1] [ 1832.831208][ C1] __schedule+0x1190/0x5de0 [ 1832.835697][ C1] ? __lock_acquire+0x622/0x1c90 [ 1832.840709][ C1] ? __pfx___schedule+0x10/0x10 [ 1832.845796][ C1] ? find_held_lock+0x2b/0x80 [ 1832.850445][ C1] ? schedule+0x2d7/0x3a0 [ 1832.854748][ C1] schedule+0xe7/0x3a0 [ 1832.858798][ C1] schedule_timeout+0x123/0x290 [ 1832.863619][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1832.868960][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1832.874218][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1832.880000][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1832.885436][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1832.890171][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1832.895431][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1832.900605][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1832.905517][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1832.910338][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1832.916118][ C1] rcu_gp_kthread+0x26d/0x380 [ 1832.920766][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1832.925930][ C1] ? rcu_is_watching+0x12/0xc0 [ 1832.930668][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1832.935845][ C1] ? __kthread_parkme+0x19e/0x250 [ 1832.940845][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1832.946011][ C1] kthread+0x3c5/0x780 [ 1832.950119][ C1] ? __pfx_kthread+0x10/0x10 [ 1832.954711][ C1] ? rcu_is_watching+0x12/0xc0 [ 1832.959461][ C1] ? __pfx_kthread+0x10/0x10 [ 1832.964022][ C1] ret_from_fork+0x675/0x7d0 [ 1832.968580][ C1] ? __pfx_kthread+0x10/0x10 [ 1832.973138][ C1] ret_from_fork_asm+0x1a/0x30 [ 1832.977891][ C1] [ 1832.980887][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1832.987177][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1832.992361][ C0] NMI backtrace for cpu 0 [ 1832.992371][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1832.992386][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1832.992394][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1832.992415][ C0] Code: 17 6d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 e5 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1832.992427][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1832.992439][ C0] RAX: 0000000009501201 RBX: 0000000000000000 RCX: ffffffff8b6042a9 [ 1832.992448][ C0] RDX: 0000000000000000 RSI: ffffffff8da2a184 RDI: ffffffff8bf06cc0 [ 1832.992457][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 1832.992465][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 1832.992473][ C0] R13: ffffffff8e097a00 R14: ffffffff9081f4d0 R15: 0000000000000000 [ 1832.992482][ C0] FS: 0000000000000000(0000) GS:ffff888124a0b000(0000) knlGS:0000000000000000 [ 1832.992497][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1832.992506][ C0] CR2: 000020000039a030 CR3: 00000000353ce000 CR4: 00000000003526f0 [ 1832.992515][ C0] Call Trace: [ 1832.992521][ C0] [ 1832.992526][ C0] default_idle+0x13/0x20 [ 1832.992538][ C0] default_idle_call+0x6c/0xb0 [ 1832.992551][ C0] do_idle+0x38d/0x500 [ 1832.992569][ C0] ? __pfx_do_idle+0x10/0x10 [ 1832.992584][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 1832.992601][ C0] cpu_startup_entry+0x4f/0x60 [ 1832.992617][ C0] rest_init+0x16b/0x2b0 [ 1832.992630][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1832.992646][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1832.992663][ C0] start_kernel+0x3f6/0x4e0 [ 1832.992679][ C0] x86_64_start_reservations+0x18/0x30 [ 1832.992695][ C0] x86_64_start_kernel+0x130/0x190 [ 1832.992710][ C0] common_startup_64+0x13e/0x148 [ 1832.992730][ C0] [ 1833.358884][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1833.372454][T20213] vhci_hcd: vhci_device speed not set SYZFAIL: failed to send rpc fd=3 want=175272 sent=0 n=-1 (errno 32: Broken pipe) [ 1833.562179][ T30] audit: type=1400 audit(1761166063.900:2451): avc: denied { write } for pid=5796 comm="syz-executor" path="pipe:[4015]" dev="pipefs" ino=4015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1834.370780][T26437] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.522338][T26437] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.630808][T26437] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.767098][T26437] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.890269][T26437] bridge_slave_1: left allmulticast mode [ 1834.896176][T26437] bridge_slave_1: left promiscuous mode [ 1834.901844][T26437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1834.910191][T26437] bridge_slave_0: left allmulticast mode [ 1834.915954][T26437] bridge_slave_0: left promiscuous mode [ 1834.921580][T26437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.196987][T26437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1835.207660][T26437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1835.217486][T26437] bond0 (unregistering): Released all slaves [ 1835.457452][T26437] hsr_slave_0: left promiscuous mode [ 1835.463373][T26437] hsr_slave_1: left promiscuous mode [ 1835.469016][T26437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1835.476472][T26437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1835.484325][T26437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1835.491689][T26437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1835.509100][T26437] veth1_macvtap: left promiscuous mode [ 1835.514729][T26437] veth0_macvtap: left promiscuous mode [ 1835.520258][T26437] veth1_vlan: left promiscuous mode [ 1835.525537][T26437] veth0_vlan: left promiscuous mode [ 1835.851718][T26437] team0 (unregistering): Port device team_slave_1 removed [ 1835.888931][T26437] team0 (unregistering): Port device team_slave_0 removed [ 1836.598747][T26437] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.681016][T26437] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.716841][T26437] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.768160][T26437] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.883366][T26437] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.978621][T26437] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.034183][T26437] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.084666][T26437] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.216781][T26437] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.298164][T26437] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.352025][T26437] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.423778][T26437] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.542162][T26437] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.618980][T26437] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.693121][T26437] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.753576][T26437] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.889850][T26437] bridge_slave_1: left allmulticast mode [ 1837.895873][T26437] bridge_slave_1: left promiscuous mode [ 1837.901557][T26437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.910419][T26437] bridge_slave_0: left allmulticast mode [ 1837.916238][T26437] bridge_slave_0: left promiscuous mode [ 1837.921885][T26437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1837.934267][T26437] bridge0: port 3(batadv0) entered disabled state [ 1837.943953][T26437] bridge_slave_1: left allmulticast mode [ 1837.949589][T26437] bridge_slave_1: left promiscuous mode [ 1837.955357][T26437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.963514][T26437] bridge_slave_0: left allmulticast mode [ 1837.969164][T26437] bridge_slave_0: left promiscuous mode [ 1837.975057][T26437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.194647][T26437] dvmrp8 (unregistering): left allmulticast mode [ 1838.403719][T26437] bond0 (unregistering): Released all slaves [ 1838.690233][T26437] bond0 (unregistering): Released all slaves [ 1838.954164][T26437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1838.964341][T26437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1838.973966][T26437] bond0 (unregistering): Released all slaves [ 1839.384681][T26437] tipc: Left network mode [ 1839.448006][T26437] IPVS: stopping master sync thread 19165 ... [ 1840.029210][T26437] hsr_slave_0: left promiscuous mode [ 1840.034983][T26437] hsr_slave_1: left promiscuous mode [ 1840.043778][T26437] hsr_slave_0: left promiscuous mode [ 1840.049430][T26437] hsr_slave_1: left promiscuous mode [ 1840.057806][T26437] hsr_slave_0: left promiscuous mode [ 1840.064523][T26437] hsr_slave_1: left promiscuous mode [ 1840.070149][T26437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1840.077568][T26437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1840.085740][T26437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1840.093160][T26437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1840.102895][T26437] hsr_slave_0: left promiscuous mode [ 1840.108540][T26437] hsr_slave_1: left promiscuous mode [ 1840.114431][T26437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1840.121803][T26437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1840.129517][T26437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1840.137040][T26437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1840.170608][T26437] veth1_macvtap: left promiscuous mode [ 1840.176268][T26437] veth0_macvtap: left promiscuous mode [ 1840.181806][T26437] veth1_vlan: left promiscuous mode [ 1840.187230][T26437] veth0_vlan: left promiscuous mode [ 1840.193113][T26437] veth1_macvtap: left promiscuous mode [ 1840.198578][T26437] veth0_macvtap: left promiscuous mode [ 1840.204588][T26437] veth1_vlan: left promiscuous mode [ 1840.209810][T26437] veth0_vlan: left promiscuous mode [ 1840.215960][T26437] veth1_macvtap: left promiscuous mode [ 1840.221427][T26437] veth0_macvtap: left promiscuous mode [ 1840.227106][T26437] veth1_vlan: left promiscuous mode [ 1840.232402][T26437] veth0_vlan: left promiscuous mode [ 1840.238241][T26437] veth1_macvtap: left promiscuous mode [ 1840.243837][T26437] veth0_macvtap: left promiscuous mode [ 1840.249378][T26437] veth1_vlan: left promiscuous mode [ 1840.254750][T26437] veth0_vlan: left promiscuous mode