last executing test programs: 2m48.325716836s ago: executing program 1 (id=821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x2108}, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x12) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd49032800030020000000600000000104730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="14001900fe800000000000000000000000000019040002"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m47.408183864s ago: executing program 3 (id=825): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x140, 0x0, 0xfeffffff, 0xa8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x328}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000780)={'vlan0\x00', &(0x7f0000000680)=@ethtool_rxfh={0x1, 0x1, 0x5, 0x2, 0x4, '\x00', 0xffffffff}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x20008000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x20008000) 2m47.396962327s ago: executing program 1 (id=826): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000340)=""/184, 0xb8}, {0x0}], 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x7, 0x6, @mcast2}]}, 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x2, 0x4) r5 = openat$panthor(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x807c6406, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m47.305286759s ago: executing program 3 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x401) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000000000000000000800010000000100"/36], 0x24}}, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r8, 0xb}) 2m45.691659197s ago: executing program 3 (id=828): r0 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00', &(0x7f00000000c0)=""/13, 0xd) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x2e, 0x9, 0x70bd27, 0x25dfdbfe, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xe}, @generic]}, @generic]}]}, 0x20}, 0x1, 0x0, 0x0, 0x46804}, 0x84) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2m44.0366343s ago: executing program 3 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) unshare(0x22020600) r3 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\xcd(\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) fallocate(r3, 0x20, 0x1, 0x9) r4 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0xfff3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) creat(0x0, 0xecf86c37d53049cc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) io_setup(0x7, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x281, 0x0) ioctl$COMEDI_DEVINFO(r5, 0x80b06401, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) 2m43.85908825s ago: executing program 1 (id=836): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x9f) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/70, &(0x7f00000000c0)=0x46) syz_clone3(&(0x7f0000000340)={0x2000, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x2b}, &(0x7f00000001c0)=""/72, 0x48, &(0x7f0000000240)=""/168, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r0}}, 0x58) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f00000003c0), 0x4003) (async, rerun: 64) r3 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000400)={0x9, r3}) (async) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x25, 0xf, [@prep={0x83, 0x1f, {{}, 0x3, 0x81, @device_a, 0x3, @void, 0x1, 0x10000, @device_b, 0x9}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x4004000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', r5, 0x2f, 0xc, 0xff, 0x1, 0x30, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7827, 0x40, 0x1df9, 0x7fffffff}}) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) (async) sendto$inet6(r0, &(0x7f00000006c0)="4d419409ebb9eb3422ed6be0c8bf11c29c3ccf2c500b746a691d11e4628deece9adf7707c921275d070c983023aae0d0311a9e3cf616e36a995770153f21c9c15454272c0fada27f6c0272880fcc46b6f18d402d37b2d63e735fe309dd95b18b1e", 0x61, 0x4890, &(0x7f0000000740)={0xa, 0x4e20, 0x4, @mcast2, 0xc}, 0x1c) (async) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000780)) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x1, 0x20) execveat(r6, &(0x7f0000000800)='./file0\x00', &(0x7f0000000a00)={[&(0x7f0000000840)='-\'@\x00', &(0x7f0000000880)='syztnl1\x00', &(0x7f00000008c0)='\\-\x00', &(0x7f0000000900)='\x00', &(0x7f0000000940)='\x00', &(0x7f0000000980)='!\x00', &(0x7f00000009c0)='syztnl1\x00']}, &(0x7f0000000b40)={[&(0x7f0000000a40)='&]}\x00', &(0x7f0000000a80)='\x00', &(0x7f0000000ac0)='%%\xa2.^(./\x00', &(0x7f0000000b00)='\x00']}, 0x400) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf9}]}]}, 0x2c}}, 0x4011) sendmmsg$inet6(r4, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000c80)="5e25fc906890a26aa125d04d6c09db435f7e1aec749ede014b81dfe7f74abb822061703f470ba4ed8f9edc2fc149856dc6437c6b0db565aa668c3ebd064095bd6ab497927ef3d7a49fc57a5e3dd0bbfbccf87946b66577e7d062fab705463f5e0a07553ad2f1d0116c4bfa3792bddf", 0x6f}, {&(0x7f0000000d00)="3ae219ceb754ecbdb62cafaabf9343bf298e44eb8a9c1254734b73effaf0c41dc92477ff19c2350657b3c3de8f439aa70e159212fe6e3f72157168ac1fa0b320ef7bbdd3b0e2fd666bbad70f4b56863bcce0eb70970255a7616d8c3a6334d6025489e0a6238647a5d51b5659bd33876e1a5574405aed093e", 0x78}, {&(0x7f0000000d80)="c632d0a25a3811d90a877a0ecaa1771b9dbba8709afe818c05ae15cdda7a5af0f5f9163df804739831b1c9c7a931687d8fb4bb149098b8286bb4c26ce5d850fc376b854475b5986b56b8466cfba04fb8d015cc24b7d1bd9945683ce9daeb22c7e3d6464889a1ab70857cfc172766a4435453c8a63cb09d01471b01e0ade04d86d60e82b5a81c61f4b9457c7275c376ea99dbda4b0624d41175c474ea434a", 0x9e}, {&(0x7f0000000e40)="fcd9662aa1c0a1807fa51fb9a24c97a1edd1403b65321c6fb44b0ea914a2b5251821c00934cc9c5b5e2e3adb4ee55a8cc43e1c764928ed75", 0x38}, {&(0x7f0000000e80)="5468dad4fdf8a4cca06e771dc4407247f17c6a14e5884025fa58fc70694827aa19b5e5134717381067c05c39f0b8d5270e31caee72ba05fc229dc08a447e40d94c97b7b7ed00ecaedaeeadfc1700e4015657a9b4ef00c132837feac76dd33b91f27435f77902cebb1b2ac2fcb332853a8a86bf", 0x73}, {&(0x7f0000000f00)="787cc145d466fa3060fa7736764b4f7e138ed617865f3ba8d99932e77f8eee52346c45190a3c12ef1d22e775d3ad1e98b246c129243be0486682c094d79742592ee326e7646c99a6d41b4ea585c07007a11ec872328a761f2a0029015048eff5678efebd1fb378241f6b9a17df1d539cb9cab9821b989456", 0x78}, {&(0x7f0000000f80)="601ae8f483232815", 0x8}, {&(0x7f0000000fc0)="6d6cca7a3412e1a239f138b6565962f6a5c94d892a80188493903c64f52fb263a76152c7ba3cf05a0fd54d5eee1ed0fc892b7e2e02cd79c3a28bb2df1f7c536f375ff7483d7f9a760e136d26eb9d5b943b277ca745076ec7034387277bbad91e9319558c63c3e4e31823d6c3860d6091eaf41ae1670dcb8fb5ac8a3cd5719f0257a03bc305d62586521c1ad3b4d21fdfed753f2b9cee521406f8eead8c58a48c0d5076b3138dd7758804902d71b9b13beddcb6c75450f36362daac42df7a", 0xbe}, {&(0x7f0000001080)}], 0x9, &(0x7f0000001180)=[@dstopts_2292={{0xa0, 0x29, 0x4, {0xb2b75790f73021f7, 0x10, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x7f, 0x6}}, @ra={0x5, 0x2, 0xfffd}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x1e3}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x7, 0x1, [0x3, 0x6, 0xfffffffffffff054, 0x5, 0x1, 0x4]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x18, {0x1, 0x4, 0x78, 0x6, [0x80000000, 0xffffffffffffffff]}}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x87, 0x12, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @private0, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @mcast1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x40}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x8, 0x4, '\x00', [@pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0x2, 0x0, [0x8000000000000000, 0x9]}}, @enc_lim={0x4, 0x1, 0x6}]}}}, @hopopts={{0x108, 0x29, 0x36, {0x88, 0x1e, '\x00', [@pad1, @ra={0x5, 0x2, 0x8}, @generic={0x18, 0xdd, "3fd21a30dc867c435eea6e244deb86da8b0732e9add4e9ca027177e54720cc4c3bec6cdab78753a2830a3ae640954d9723bca5ec79cc2261041f9f9364ab1a18f7c765ee294a255b5fb2a8e2d167d8042de6c36b6d82203205b10db5e1f7e61add92247aca45e8fbf5242569485802b81b224824262e00abd00bdfb9d096378242875d8d772100eb60ff1baa851c98e0cee577c614187302863ed20a309b4390c55127a46ffcfc0c055749557f00b0cd1a83fa29e79fb9b737f0ec8007f55840a1011011c39e5acddc6e50a2e2efb37506ca8f46d2aaae7e04dacc0a99"}, @ra={0x5, 0x2, 0x42c4}, @jumbo={0xc2, 0x4, 0x5}]}}}], 0x2a0}}], 0x1, 0x40) (async, rerun: 64) pipe(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000003a40)={0x0, 0x9}, &(0x7f0000003a80)=0x8) sendmmsg$inet_sctp(r8, &(0x7f0000003dc0)=[{&(0x7f00000014c0)=@in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, &(0x7f00000039c0)=[{&(0x7f0000001500)="50f831094e12c32ab1777a5946f0a6c297565a1503f39896805fc9c4e262bb1780133cbb76d41c4b14eb74af094e537965417e712f8308606773085873f1f0e7caf41e056308b17ba8c1cc441941a9ae7a238bbd84a894ffeb06295b59990083d92b9f52ca98be94498a5a7d7d944271f725288f426d66cd6a10996e4e84ef5bcb30d737dcad6ffbd91f7ae3f2452856b1ddb1a8aac5494fd563f72c7725ddf3", 0xa0}, {&(0x7f00000015c0)="277c38cb81bc3621578c70c8b5427b582c2c32dc2f7f834683aeee87ea16e1c88600704988860b29a4b6811fda92ee18659d00a026abe4b36f9cdb5193c4b2155a14b5ee3529898467b90cb3331e29419ed6c67eb25da122d71ac0ead6e16a9ee49c5ffb6e482db2da8fe0da11ddc16d8e6dac4112b674cb21995be44e8a3390afd190e5ea638c1c0b8b58acf22b2d6fbdda85fd89f55075bb1b6f7ee941d3e2f576f1f8e6a0398d3835f96e3346b46243534f8e8c06aff3b6f1", 0xba}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="6d89b2f2210e0debf29b128af906a39d3d36520c5eda097119199b1d88244ce2e997e030fcc2285881a14ced328ea3681be47620d940b13f5a11332d953844644dc9f38a65118b7b37f6500e0adeff87b374df0a82851569aba7c6ae50dbed4b278b208f75492de724f65016ef5e33e74a0d921625c157d4b07fd10b0661ef7335f492953ba09d9d9f3b8eec29bd4757ca0892b04aed4b413e52df0267292684549257a8b0b0f9a695062eb124", 0xad}, {&(0x7f0000002740)="febb3fdf0e3201079ccbb80ea38a20a563b043db55d4f95f5d74a6a15e2d222d0c8743f30682e245c87316dd066e3ec0b0609ede82e6cc1dd31ffcafbc31cf1b83fee03661c409399bc4b6b20350b43d0c718d2bfda91b5193a83b7e6ce526ee2fa1eaa20462c29d879adb2f90b065dd36a143d4b05debcd08ceb93a3d5ed782b2261edb7e9e53ceaa0aacdda48f0173ffbae60a0cf48124856a0d71c0b42a69d7", 0xa1}, {&(0x7f0000002800)="c497a54f927bc628e5b4b0f5774addf1964350a15050fe868ffe5b81d46d9af7bf62981bbc59c69aa85be1f8aacdd643e5d54e4148141d021c405d116798d0ea09e7fc271f8873894a584e3747704ec9ccdcbc0e9cac6b3b8687e29b414896b944f1fc68454308deb28aa580e88eebcbe1584189a282037abd6b001859531b60480fbc9acf0159b79f0de4a70ea5a0c39dca061c23bfc7eaeb791bb1c9e743c29c1e7b35cd18002be99cd127d4e398eebda7c02af10d2af631eccc80fe1479e927c990b646e459e6ce6359378d481a608a32ad52c64d39cf74c09501755279e05ff131b3fce46712dfa2ee34", 0xec}, {&(0x7f0000002900)="34738d3c5894bd8db47f526207050a1f16db626e0aab349bd454686298f2893078fbd28298eaa505bf2e8951ed2bc9573ccb9fb56abaeb6d86aadbe14518b59d97bae8bb19bd0846f8294cc3fcdc21eeaf839714a8537c42b33a60a4abdb5a2236fc9463341d6f977d684adf01ac277ad04ee24667b6625bbb1673d2092762d80b0371d9205f9559f83de571ef8e", 0x8e}, {&(0x7f00000029c0)="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", 0x1000}], 0x8, &(0x7f0000003ac0)=[@init={0x18, 0x84, 0x0, {0x8, 0x6, 0x9, 0x9211}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @init={0x18, 0x84, 0x0, {0xd6aa, 0x8, 0x9, 0x8}}, @authinfo={0x18, 0x84, 0x6, {0x7a4}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x1, 0x820d, 0xfdf0, 0x4, 0x0, 0x6, 0x3b, r9}}], 0xb0, 0x400c091}, {&(0x7f0000003b80)=@in6={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfd}, 0x1c, &(0x7f0000003c00)=[{&(0x7f0000003bc0)="5b05df702e028ad7a2333f867e8cc57460ca", 0x12}], 0x1, 0x0, 0x0, 0x84}, {&(0x7f0000003c40)=@in6={0xa, 0x4e23, 0xfffffff8, @mcast2, 0x8}, 0x1c, &(0x7f0000003d80)=[{&(0x7f0000003c80)="4b4572208fee654dee3730ea9b45af7252955f55008a65c0737ef9aa8f6f7490b605371073ac708fdf0583c13ec742aa89a4c58f65392de7bf9f229452cd720d9f894216a38e541c93d413b93c03bad8d1dac764037f2abe5efb7cd082d7957f6a7e412411f2e72ac8186521b20f09b0216898d3a718623576e9e9b68f01883ad19a2da98f32b5c27f5ec5cb092620784b85eb315bd39b9dca133040c083999f", 0xa0}, {&(0x7f0000003d40)="8b11995b1b37cc11bf6b50b2f7cfaf621e0790a794a83436ce4ad9ccdd9e5e16cbe3f6d4d847", 0x26}], 0x2, 0x0, 0x0, 0x4080}], 0x3, 0x91) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003e80)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) read(r10, &(0x7f0000003f00)=""/99, 0x63) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000003f80)={r4, r0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000003fc0), &(0x7f0000004000)=0x4) (async, rerun: 32) execveat(r6, &(0x7f0000004040)='./file0\x00', &(0x7f00000041c0)={[&(0x7f0000004080)='icmp6\x00', &(0x7f00000040c0)='\x00', &(0x7f0000004100)='!\x00', &(0x7f0000004140)='[\x00', &(0x7f0000004180)='!\x00']}, &(0x7f00000042c0)={[&(0x7f0000004200)='syz1\x00', &(0x7f0000004240)='\x00', &(0x7f0000004280)='\x00']}, 0x800) (async) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000004340)={0x8, 0x9, {0x51, 0xbf8, 0x3e, {0x0, 0xffff}, {0xfffc, 0x1d20}, @period={0x5a, 0x200, 0xfffa, 0x9, 0xfff, {0x4, 0x4, 0xfff8, 0x6}, 0x9, &(0x7f0000004300)=[0xfffc, 0xc, 0xa691, 0x7, 0x2ce, 0x80, 0xfffe, 0xbc1, 0x8]}}, {0x57, 0xff, 0x5, {0x0, 0x5738}, {0x9, 0x6}, @cond=[{0x4, 0x401, 0x0, 0x6, 0x6, 0x2}, {0xe, 0x6, 0x7, 0x5, 0x8, 0x3}]}}) (async, rerun: 32) unshare(0x40000800) (rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) getsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f00000043c0), &(0x7f0000004400)=0x8) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000004540)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004500)={&(0x7f00000044c0)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x0) 2m43.50816117s ago: executing program 1 (id=838): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 2m42.624285264s ago: executing program 3 (id=841): r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) 2m42.079440635s ago: executing program 3 (id=844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xf8, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f0000000040)={0x18, 0x0, r4, {0x7}}, 0x18) write$FUSE_ATTR(r2, &(0x7f0000000200)={0x78, 0x0, r4, {0x80000000, 0x0, 0x0, {0x0, 0x9, 0x7131c579, 0xfffffffffffffff8, 0x0, 0x2, 0x0, 0x7fffffff, 0x1, 0x1000, 0x8, 0x0, 0x0, 0x808, 0x1}}}, 0x78) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000017000/0x2000)=nil, 0x2000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000000e0c0)=""/102400, 0x19000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34010000170001000000000000000000fc0000000000000000000000000000000000000000000000e0000002000000000000000000000000ac1414bb000000000000000000000000fc3c86dba5b0b7fdac00000000000000000100000000000000000000e8000000b2594cbb089d3e19d58eafe254407bef598d8e7646046587253cadced7cd38223c0cee18f54a0e8a02a0e71fd7e221c8e22a87f0282dc3983c08d469eae875bef70816c37c352f1f365f5cde06d3afacca2d4c165af898bcc79ac2feb17270de209ff70012b36a53594c06876efa5a51d14e8760f1e75503b1fee9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000c0008005a07350000000000"], 0x134}}, 0x20044000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000010) fanotify_init(0x1a, 0x800) openat$dir(0xffffffffffffff9c, 0x0, 0x50000, 0xa8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m40.418730372s ago: executing program 1 (id=847): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f0000000180)={0x3, 0x0, [{0xa54, 0x0, 0x40020298ce9}, {0x251, 0x0, 0x80000000a}, {0x9f9, 0x0, 0x400}, {0x227, 0x0, 0x40}, {0x276}, {0x863, 0x1000000, 0x5}, {0xc95cc95315b8f1ce, 0x0, 0x21b}, {0x40000104, 0x0, 0xfffffffffffffffe}]}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x9) connect$inet(r6, 0x0, 0x0) close(r6) 2m38.769914524s ago: executing program 1 (id=851): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, 0x0) r3 = getpid() ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000600)={0x2, 0x9}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x21, 0x2, 0xb, &(0x7f0000000000)={0xffffffffffffffff}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000ff020000000000008de03c49c1a7b10c87", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf25540000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000013000a00060008021100000100000a0006000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4060}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) 2m33.386289213s ago: executing program 4 (id=865): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c2) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000100060000000000040001000000000020000600000000002000020200000000"], 0x24, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000c80)=ANY=[], 0x7) syz_io_uring_setup(0xbdc, 0x0, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x400}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000040)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x8000, 0x80, 0x4c3, 0x7, {{0x17, 0x4, 0x1, 0x29, 0x5c, 0x64, 0x0, 0x9, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x34, 0x37, 0x1, 0x0, [{@rand_addr=0x64010102, 0x9}, {@broadcast, 0x1}, {@multicast2, 0x4}, {@empty, 0x9}, {@multicast2, 0x101}, {@multicast2, 0x4}]}, @cipso={0x86, 0xc, 0x3, [{0x6, 0x6, "01976d61"}]}, @timestamp={0x44, 0x8, 0x12, 0x0, 0x0, [0x2]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe82}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bind$inet6(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x2a, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/97, 0x61) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') pread64(r6, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) close(0xffffffffffffffff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0xffffffffffffff9d, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0xfff5, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040) 2m32.056098459s ago: executing program 4 (id=868): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x55, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x15}, @request_death], 0x0, 0x0, 0x0}) 2m31.081860005s ago: executing program 4 (id=871): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b00000019766177244fff0001090000000000000000021800000000fd018f00000008000100ac141400100016800c0001000000000000000fff080005000a0101020600"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "fafac0348886ec6ca005b2d292649e4dbd42a3446049d9952cc199677d836942efd66f9bf786ec9cb4995e7d321d39b373e0fbadb55c66bcb7119c0074afe6bc", 0x19}, 0x48, 0xfffffffffffffffd) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, 0x0, 0x25, 0x10, @void}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r4, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) shutdown(r5, 0x0) connect$unix(r5, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = accept(r6, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000000)='\x00', 0x1, 0x44004850, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, 0x0, 0x0) 2m28.011805979s ago: executing program 4 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000030101"], 0x14}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400000002070101000000000000000003000009aba61615150d6bf8b38145c6b2fd9c179abb04dfd51aa3ae9c7474827a47cb0c30ee98b49a06bb7b76ad6090f4be7a50b6cb5d3ee422746b6aa831633cff1df225ec1e11f08db6978c0761864dfd0b897c034a9c601e277701113a1fbbcf62b795e75a64ebbeaa4d28211ba2df5cf5e0c7e2b32f2efada68431beed0d08ee0cc1ebdd0e5bc83600ca416611c86a7c958a4ea33962ee029f0c3"], 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) close(r0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xd296895ede2f911a) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x6, 0xfffffffc, 0x40000000}) timer_create(0x2, &(0x7f0000000380)={0x0, 0xd, 0x1}, &(0x7f00000003c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f00000001c0)) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086666048800000000000109022400010000100809040090010300000009210000000122050009058103"], 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220500000093"], 0x0}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) mount$nfs(&(0x7f0000000040)='volatile', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x282, &(0x7f0000000240)=ANY=[@ANYBLOB='&,$@,[}!}:,\x00']) 2m26.402563377s ago: executing program 32 (id=844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xf8, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f0000000040)={0x18, 0x0, r4, {0x7}}, 0x18) write$FUSE_ATTR(r2, &(0x7f0000000200)={0x78, 0x0, r4, {0x80000000, 0x0, 0x0, {0x0, 0x9, 0x7131c579, 0xfffffffffffffff8, 0x0, 0x2, 0x0, 0x7fffffff, 0x1, 0x1000, 0x8, 0x0, 0x0, 0x808, 0x1}}}, 0x78) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000017000/0x2000)=nil, 0x2000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000000e0c0)=""/102400, 0x19000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34010000170001000000000000000000fc0000000000000000000000000000000000000000000000e0000002000000000000000000000000ac1414bb000000000000000000000000fc3c86dba5b0b7fdac00000000000000000100000000000000000000e8000000b2594cbb089d3e19d58eafe254407bef598d8e7646046587253cadced7cd38223c0cee18f54a0e8a02a0e71fd7e221c8e22a87f0282dc3983c08d469eae875bef70816c37c352f1f365f5cde06d3afacca2d4c165af898bcc79ac2feb17270de209ff70012b36a53594c06876efa5a51d14e8760f1e75503b1fee9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000c0008005a07350000000000"], 0x134}}, 0x20044000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000010) fanotify_init(0x1a, 0x800) openat$dir(0xffffffffffffff9c, 0x0, 0x50000, 0xa8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m26.043685639s ago: executing program 4 (id=885): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) memfd_create(0x0, 0x3) msgget(0x2, 0x40) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) r2 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet(0x2, 0x1, 0x0) pipe(0x0) io_setup(0x1000, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x2}]) io_getevents(r5, 0x0, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x49, 0x8, 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00') timer_create(0x5, &(0x7f0000000180)={0x0, 0x35, 0x0, @thr={&(0x7f0000001300)="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", &(0x7f0000000200)="d3ddf966dd065391665aad87a3f78b52da2ba933da1f979e81a53545aa3abed8a7523818f3d9448b3bf078201eb675eee87fb917a0c92bae8007a6796000ea71604e18e8005431174c21c220b7f429dcb03bd40dfc0a9a0837e99b4646c277"}}, &(0x7f00000002c0)) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) 2m25.743793039s ago: executing program 4 (id=886): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x8, 0x80000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x3, 0x5002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x4, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xb0, 0x6, 0x13, 0x0, "0c449f9069584bd7896acc94537bb3d1e1ce3cda422f8ef8d863bc3a8a03e9a61cdbdfdda13e4328ceeda87aa3ec552d3160b65c097552749cc74fd2aff66adc", "c9dc81b7e58abb1b5c50a539c87c778099ca9cbe6bcbbf3b12ff0c6f6e424e7d", [0x7, 0x401]}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000140), 0x4, &(0x7f0000000480)) ioctl$BLKRRPART(r4, 0x125f, 0x500000000000000) 2m25.609512987s ago: executing program 33 (id=886): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x8, 0x80000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x3, 0x5002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x4, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xb0, 0x6, 0x13, 0x0, "0c449f9069584bd7896acc94537bb3d1e1ce3cda422f8ef8d863bc3a8a03e9a61cdbdfdda13e4328ceeda87aa3ec552d3160b65c097552749cc74fd2aff66adc", "c9dc81b7e58abb1b5c50a539c87c778099ca9cbe6bcbbf3b12ff0c6f6e424e7d", [0x7, 0x401]}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000140), 0x4, &(0x7f0000000480)) ioctl$BLKRRPART(r4, 0x125f, 0x500000000000000) 2m23.610507245s ago: executing program 34 (id=851): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, 0x0) r3 = getpid() ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000600)={0x2, 0x9}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x21, 0x2, 0xb, &(0x7f0000000000)={0xffffffffffffffff}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000ff020000000000008de03c49c1a7b10c87", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf25540000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000013000a00060008021100000100000a0006000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4060}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) 10.712132921s ago: executing program 2 (id=1301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00'}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') r4 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) listen(r8, 0x4000) close(r8) r9 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r9, 0x2284, &(0x7f0000000080)) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) socket$unix(0x1, 0x5, 0x0) 9.35783129s ago: executing program 2 (id=1307): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0xc0045103, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xb}}, './file0\x00'}) tee(r2, r0, 0x7, 0x4) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000000400)={0x14}, 0x14) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d486100009058acf", @ANYRESDEC=r3], 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000000c0)={'wg2\x00', 0x32f}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_usb_control_io$uac1(r5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pB \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'gretap0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x40, 0x700, 0x6, 0x1, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x67, 0x0, 0x2, 0x4, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4}, @noop, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0xf5, 0x3, 0x9, [{@multicast2, 0x3}, {@private=0xa010102, 0x40004}, {@multicast2, 0x1}, {@multicast1, 0xfff}]}, @timestamp={0x44, 0x2c, 0x75, 0x0, 0x4, [0xff, 0x6, 0x1, 0x7, 0x7f7c, 0x7, 0x3, 0x7, 0xffffffff, 0x5e0]}, @timestamp={0x44, 0xc, 0x5c, 0x0, 0x5, [0x6, 0x5]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000060000005a0000000200000002000000", @ANYRES32=r6, @ANYBLOB="ff00"/20, @ANYRES32=r7, @ANYRES32=r2, @ANYBLOB="0100000003000000030000fdff000000000000000000000800020000"], 0x50) 7.83085243s ago: executing program 5 (id=1310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [@ldst={0x0, 0x0, 0x6, 0x9, 0x1, 0x8, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x8, 0x1, 0xd9f8}, 0x10, 0x0, r0, 0x4, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r5, 0x1], &(0x7f0000000a00)=[{0x2, 0x4, 0x7, 0x2}, {0x0, 0x3, 0x4, 0x9}, {0x2, 0x5, 0x4}, {0x1, 0x5, 0x8, 0x5}], 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x2004c889) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0xe8, 0x3, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x900}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TUPLE_ORIG={0xa8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x57}]}, 0xe8}}, 0x8080) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/39, 0x27}], 0x1, 0x0, 0xfffffffd) connect$inet6(r9, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r8, 0x0, 0x4004080) ioctl$VIDIOC_QBUF(r7, 0xc058ff0b, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x10, 0x200, {}, {0x3, 0x8, 0xe, 0x9f, 0x0, 0x7b, "c16599e2"}, 0xabdb, 0x1, {}, 0xbaa}) mount(&(0x7f0000000580)=@rnullb, &(0x7f00000005c0)='./file1\x00', &(0x7f0000000100)='ufs\x00', 0x22c244e, 0x0) 7.807756533s ago: executing program 7 (id=1311): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x11, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x5e0) 7.037228535s ago: executing program 7 (id=1314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.785410962s ago: executing program 5 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f000043a000/0x800000)=nil, 0x800000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040), 0x0) sendto$inet6(r2, &(0x7f0000000400)="27630e20068c8eb2c98d2cb4b51ba651ef9c7c9495eebe69e68c140418a0190acf2114956226d6bb05dbf1bc449ed27c7a3db36fee9ce5a84f6a973a64771523f09616188b0d5c9ab4f7c9cc3df9ace87b32c935cf41f8c8c20b8921f9bd9fbe5f332a474c7248f9455919034b55c875df96797e527279743d60ea69c7959dfbec9b9d8d2dc573110ffb4c78b652d58a647906090000000000c313395ed2d7b365646c21489ad869ba29ac5e855e5d4eff8d3b537c49d5c4517afc4d6ab23a4b6406697ef0fd8f1323c4e80fdb2fe36fd433a39eed423cd8a71e545a65925b67888a94566792e14c8257431cb05ef74076", 0xf1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast1, 0xdc}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x18c) r6 = semget$private(0x0, 0x4000, 0x0) semctl$SETALL(r6, 0x0, 0x14, &(0x7f0000000740)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000080000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 6.663463845s ago: executing program 0 (id=1317): poll(0x0, 0x0, 0xffffffff) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1802000066000000000000000300000085000000d0000000850000001100000095000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_emit_vhci(0x0, 0xe) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=0x1, 0xffffffffffffffff, 0x29, 0x2020}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) gettid() syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept(r3, 0x0, 0x0) unshare(0x62040200) 6.622749136s ago: executing program 7 (id=1318): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa0800450000280064000004029078000000e0e000000211009078e000000200010001000000000000000098a7118a258cf1afc031fefe52e462537e54665876f78cb7fe3f7562567b4a73"], 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x4, 0x3, {{0x33, 0x4, 0x2, 0x34, 0xcc, 0x66, 0x0, 0x9, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x44, 0x2a, 0x3, 0x4, [{@multicast1, 0x2}, {@rand_addr=0x64010102, 0xe43a2a4}, {@rand_addr=0x64010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4}, {@local}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x81}, {@multicast1, 0x3}, {@remote, 0x101}]}, @generic={0xe, 0x2}, @timestamp_prespec={0x44, 0x2c, 0x32, 0x3, 0x1, [{@loopback, 0x41}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x4}, {@private=0xa010101, 0xea6}, {@rand_addr=0x64010101, 0x6}, {@remote, 0x1}]}, @timestamp_addr={0x44, 0xc, 0x17, 0x1, 0x3, [{@loopback, 0xfffffffa}]}, @timestamp={0x44, 0x2c, 0xa7, 0x0, 0xb, [0x81, 0x9, 0x2d0c, 0x1, 0x3, 0x8, 0x3, 0x2, 0x7ff, 0x4]}, @cipso={0x86, 0xd, 0x0, [{0x7, 0x7, "6d0370c90c"}]}]}}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7, 0xfffffff8, 0x1, 0x8840, r0, 0x7, '\x00', r1, r0, 0x3, 0x5, 0x2, 0xc, @value=r0}, 0x50) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_usb_connect(0x6, 0x8b6, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0xff, 0x9b, 0xb1, 0x0, 0x830, 0x80, 0x9638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a4, 0x2, 0x8, 0x1, 0x40, 0x1, [{{0x9, 0x4, 0xd8, 0x8, 0x8, 0xbf, 0x4c, 0x40, 0x97, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "86"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x3, 0xc}, {0x6, 0x24, 0x1a, 0x378d, 0x1}, [@mdlm_detail={0x5f, 0x24, 0x13, 0x5, "d669c84485157f97f3069713a632c0208ec8933863544de55d2bc5dab7c66ace4ece5e58d57ff5498fd8f78bf83d07db8d990a1c5c924bbbd054bd851c72c8c3687d995d01ecf4a55399fe4e1a9f3310956d73b10ba4161d7698fe"}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0xcf, 0x24, 0x13, 0x4, "abcdb7602fc1f7fd0c0d2a24d6be1d086e06c080a7105386de585e23a5ed61a39868584a32d29e24436ae04943848e11e039204c1036e66b6945095c885bc5fc6b84f3d0c2c65175f7aafc5c0e54cc020800ac520af24905e0458352c17114150958041c01309110c691dc074699247fb42d1e6758224712f30222e5f7c3ece5fbb27d6d08b30d72915599c02f10a873775622a603cd6c1cf0eb9a090823451165834c318b3cf3e9f936f3a2db2934d3c0fa436bcd53f60ffac6b80af25d1524c22a5500843c2fa031aa2f"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x4, 0x39, 0x2, [@generic={0x12, 0x9, "712e80941b49a8d29c84be79ef002cf5"}, @generic={0xfc, 0x22, "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"}]}}, {{0x9, 0x5, 0x80, 0x14, 0x10, 0x5, 0x3, 0x40}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0xa, 0x5c, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf5, 0x7}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x8, 0x7, 0x29}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xf, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xae}, @generic={0x66, 0x8, "542814c764b94f91d573537f54b8892ec0a2626893e63bd4ab7888892fe578a5f52d4494719e275659d9f030a09917a4f1b4e04cb00355f7e57a2377dca6d6d0e37529f5ab344b18a97d4916fc2ea1eaece1cc0ec5b1105fbff3276b8ab524d786992e52"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x0, 0x3, 0x6, [@generic={0x4e, 0x22, "6c2cee588d28729b6c9fdfe79c9db59afd1fb89f8b034ab10e569a82308708fce1dd690a9e3cfe3d50145d49ffa8940782cb8ade43f127e5607ed210344882811151082ad1bbc143fa2740a9"}, @generic={0x101, 0x7, "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"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x7f, 0x23, 0xc}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x4, 0x9, 0x0, [@generic={0xd5, 0x11, "1ac0b8a5f1cf9785ff169611b5898110a5adfd3a4fb10e32f39a405bea1ca8f017ef4654b2e371267ab97c22da8c3e6e2af8ef7b71b5679a2b858aa708a4a5b1ce877fc5882ea1a6f52719921d09a8786e7306badae2097a2fab49e29d5c7bb8b87fbda81cac42c9307e4368a88a357586f81ceb9f3be590c2b6ddfb8ee4b2b2b8f8844340f0cdcdabc1e804146b63e14114eb9b3a3ee1287a14c4b9902c610929a5fa63c1ed92668f0f75766d7aa38c7c5defd23462cb8a8e9229ffeda1f662e5354f4ed5b4074d5c60b27e75980c436c17bd"}]}}]}}, {{0x9, 0x4, 0x2e, 0xf8, 0xb, 0x6b, 0x11, 0xc8, 0x3, [], [{{0x9, 0x5, 0x8, 0x10, 0x40, 0x2, 0xf8, 0x29, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5}, @generic={0xd, 0x7, "90a9b610d2547e7e49bf88"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0xe5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x8}]}}, {{0x9, 0x5, 0xdd0ab550992c95ff, 0x2, 0x40, 0x5, 0x1, 0xb5, [@generic={0xdb, 0x22, "68923d5d101e4f4a2347f0ac2743551c2b3fa7fab7bcf3f0b473429e7a68cdb55b7d789154c54bcb965197527017b0944d49db92b93d9788a9aeb99b10ccc2d28c639a9376883c1548146f1da89108fda9eaf2461895fb46fd90ff63879a63947f1eea3f73a0eb09cbbd28ecfd7bf02ce97f2df8dc66d6947614d597f8d6d3a053bc6433cf9c20b445ae02e598ce6c727dd39c6fc734d398c6c37ead2378e8bd3c74c0b36f965a32d22899d82f24effee63f9fb129ebb758af5f0a7f5eca3028e1bc77e3a7587253ae236a20d9ac99314ca1fe9eb518df3c48"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x5, 0x0, 0x7, [@generic={0x53, 0x10, "0113a300d9f5c19a993b72fe332a1c0961b1326e340e876476a33c59f39bb564b3e11e3825a66e5343995a506b6c2bc15b22847af825adf6d5bd6ed6000bd7906e5cb7eb7ade0b916fb4cc7b3b5c66b220"}, @generic={0x66, 0x26, "cc47dfd265070bd12628a706b9a45eeb5c5027e5aef9b4e90e66ac573a85dccfb053f7740dbf21dc53778ad9fa0ae747ac87a8a018c4e64d11b9c0881a1aa3ddbb6706240928d8da7b310ea6b6c8c67e1729b2c2a7005a6eb90f293797863e67cf2b4c49"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x56, 0x87, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0xfa, 0x6}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0xf7, 0x8, 0xf9, [@generic={0x3e, 0x30, "924a23b1c4664e6dbb2d8e8e2a6920445c3e9b569fe65f354cd0afc3d3f4a6a01e9311a82447006e678ac3daec6840a53b1d70c2b9ce12818fed9ffc"}, @generic={0xe, 0x30, "60e67545ddb61f7acac5c0ef"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x4, 0x6, 0xf, [@generic={0x5c, 0x22, "63fe9cd206c7fdb865fd2544740bd6a91a38ea43348f4d226259ce2fa5c3ababdb6451f96b21bed42178c10d0a3e63291397489d021ba1457884cd512494022f93b9aa7a41624e423274723ed06e0f60f1b277023249da6bea3d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xc9c}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x87, 0x4, 0xfd}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x6, 0x1, 0x3}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x7f, 0x6}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x9, 0x1, 0xfc, [@generic={0x7c, 0x2, "5792a799dd7b964cc02dd6b5b08fd418075478dedca864767cc934a0598cf6955fe35dba92f99faf0ae9cadb8224b4ae0878f3ba36b60076f3e4fcc87f7bb2692abf793b7df696b605afab24db07d70064b2828a2eb83a623ea1babd4d6c48b7b6bbe89a5390c71897ec25abc61c11f9ebf61fd1b217514e08f1"}]}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x3, 0x4, 0xdf, 0x10, 0xd5}, 0xe2, &(0x7f00000005c0)={0x5, 0xf, 0xe2, 0x5, [@generic={0xa0, 0x10, 0x1, "82b856ae083cd5a4df8bb31d9a5030585a57079fd32b54db6c779ab3a2fd4ec5fb4e58a29da78fe8922e3f2153fe2ec42c400fe5977ca5821507b909776469dd3cd6b15cd0572dd76816994025284646cbd36ea49de3abc4f04cdbd953249e921501673f7139296e7cf1cdff97d2d666fa6dc947603fbd0ffe5d98de53f54658a29749191a7ad0a9ba4458a37c0c696f794003d3c476b5bf98b224afbf"}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x4, 0xf00f, 0x6, [0xff0000, 0xffc000, 0xf, 0xff, 0x37]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0xff, 0x9, 0x2, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x4, 0xe}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x7, 0xfa, 0xffff, 0x6}]}, 0x6, [{0x2d, &(0x7f00000006c0)=@string={0x2d, 0x3, "bedfec3e8978fcbd66401af1e2a9f0bc63a4a7f80ddc2594f57b33f192d43b0ac87bef1c60eb83fd8b7e6e"}}, {0x26, &(0x7f0000000700)=@string={0x26, 0x3, "06337ee42338e1e1c460dc70d877dcd19e89055f12e00263a2f00d6f1a1389e3c5e3075f"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x411}}, {0x19, &(0x7f0000000780)=@string={0x19, 0x3, "838d6f04f23e9ebac905a68dc7c0abfb015044f96cf858"}}, {0xf8, &(0x7f0000000940)=@string={0xf8, 0x3, "cc7d3729ff05d5c8188f1ae83598809127cb942df41ff2e9f1c00f1ae2ef8eec77152cfd2f5dae2902753875c2466b875ffbd7eaa18b6d720083034a1132f9b0d671d574ee587af6514738a656d61821aafd7b8c163f2e6650965db6b6e263556a16d3ba77219a443c0062ce226e3f6ad276ffb60381354bbde574ca1737ad44713d85a2d2ac050767f4b959bb47ddd5245738d1d9e29e6aa05c23c82d16c0982191b6d54598d01b42acafda745af0c98c932f7bcbf35ba92e3eb4e9b2c1b7be7d222fccc7511c3a38ee9a9d4abf00368ecca9cf09a8069f9f9f370949aa6ec37c13b7f734a7b52fe239b149a4e45165bb02e37ae4f1"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x140c}}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8, @ANYRES16], 0x0) 5.731779765s ago: executing program 0 (id=1319): syz_open_dev$usbfs(0x0, 0x76, 0x141b41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x4008084) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000000), 0x4) r5 = dup3(r3, r4, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0x96, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b29, 0x0) memfd_secret(0xa51cd372813f45c5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) 5.489555651s ago: executing program 2 (id=1320): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, &(0x7f0000000640)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x1000, 0x40000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000000206010000000006000000000040000076dc216092d56afb7330be2a02bd86f705bcfbf60d96dc4f8dfdae21a37979c45a977057"], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) keyctl$read(0x7ffffffffffff, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000580)=""/90) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000480)) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) socket$netlink(0x10, 0x3, 0x0) 4.684872377s ago: executing program 7 (id=1321): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "4fa80963", {0x1, 0x4, 0x4, 0x40, 0x7}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000072be"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.55916771s ago: executing program 0 (id=1322): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r1 = creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) connect$bt_rfcomm(r1, &(0x7f0000001040)={0x1f, @any, 0x47}, 0xa) syz_open_dev$vim2m(&(0x7f0000000000), 0x100000000b, 0x2) syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, 0xffffffffffffffff, 0xd925000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FIONREAD(r3, 0x5453, 0xfffffffffffffffe) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001080)={'vlan0\x00'}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001100), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000010c0)=@ccm_128={{0x303}, "d252745d477037e3", "9b09289f6ed4eca289f4b7bcfb8687e8", "1f183036", "590d9c766a1e8bb6"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 4.024412124s ago: executing program 0 (id=1323): syz_open_dev$cec(0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000003000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000040), 0x0) 3.795250434s ago: executing program 2 (id=1324): r0 = socket$inet6(0xa, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@private=0xa010100, 0x4e22, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x406, 0x8, 0x5}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xddf9, 0x2, 0xfffffffe, 0x183}) close_range(r4, r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) accept(r5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 3.441744023s ago: executing program 5 (id=1325): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000640)="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", 0x2619, r1, 0x4}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700000f, 0x4, 0x1, 0x0, r2, 0x0}]) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xaa, r2, 0x4}, 0x38) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) io_uring_setup(0x542b, &(0x7f0000000240)={0x0, 0x2de0, 0x8000, 0x0, 0x2c1, 0x0, r4}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000120005ff00000400040000000000004a", @ANYRES32=0x0, @ANYBLOB="452b0000002104001400128009000100697069700000000004000280"], 0x34}}, 0x0) socket$kcm(0x29, 0x2, 0x0) 3.276050976s ago: executing program 5 (id=1327): r0 = timerfd_create(0x7, 0x80800) timerfd_settime(r0, 0x2, &(0x7f0000000100), &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000"]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000280)={0x55, 0x0, &(0x7f0000000140)=[@request_death, @request_death], 0x0, 0x0, 0x0}) 2.557276735s ago: executing program 2 (id=1328): socket$inet(0x2b, 0xa, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000540)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x40000000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket(0x10, 0x3, 0x0) r4 = userfaultfd(0x80801) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.391303475s ago: executing program 6 (id=1329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xffff0001}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffffb}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xc511}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dmmidi(0x0, 0x2, 0x181083) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)=r4) 2.206747774s ago: executing program 5 (id=1330): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='souRce', 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04}]}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x169}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000005000/0x1000)=nil, r3, 0x2, 0x13, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000048040)=""/102392, 0x18ff8) fsopen(&(0x7f0000000140)='reiserfs\x00', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2b, 0x3, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, 0x0, 0x5005) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 1.810116359s ago: executing program 6 (id=1331): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}, 0x1, 0x0, 0xc00e0000}, 0x0) 1.75236321s ago: executing program 2 (id=1332): r0 = syz_clone(0x80200, &(0x7f0000000000)="7d1fcec2c76a57470e2c85ca745ecee4ba061d8315de4a584d0c12c1bda3ba1deec47599ed400a48a8d486db6847377950334c37d35ec4478c17e9210267a315682a04fbcaa431c9ff804185052c3929c1d2d3a4b07bff677bf4c88186b1813329b1ea54ec564943533c0682096e6b9c017cd9adfbf5f30065a5d68bf63f97ff407fd352d10a6d5bd3a6a50d56d93f57b72ff4e7bdfb70031279ea128933c7fd9aa0bbd5efbd25209f0cc7755c98a87a8b67c8dc9e463073331a170c903146e12e79", 0xc2, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="dabc7450a10e3288dd2d3102913abcb25248f8261df7d3b05205693907c0c346057c") r1 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f00000003c0)={0x14, &(0x7f0000000200)={0x20, 0x23, 0xbb, {0xbb, 0x8, "a57dcd9161dbdd099d24ccfce2d31f9b2eeeae47c965d0711d490ee5f06115ba81f568822f3eabfeae6626c048c45a656530772f9ea29a41fa3feb6803e142f4ff96a5f5f1b91382026fcd37baf53ce3556070d56b744201ceba2751b4430150aec4c3d40186cb5392952dd26edf5e6be98094972f2d986bf1ba40864bd9ddfbfb5f05794e87a63efcbac8e21fd0606b0565c339763f0566ea781ac15590b28de7bce434878518d12f390bfb409430a1157cce936dcfe30173"}}, &(0x7f0000000300)={0x0, 0x3, 0xab, @string={0xab, 0x3, "5b837073d8f11589db14901e578a78bc5b5bd88fc3d74eea535a55dfb6dbb36f3730fdb9f48152e1e3702c0fca3b59ef37d7c0b3b480fb44b9db471f176d6635780f4ccb0dd47488d11bd185642ad48635ea38fd83e1e3653ac1ed77b8798978913d667158831c7eb7c831326853c4fc00df7f3d42f5fc16f0ed08fab28a3121170f43d48bc02cd8635dbf190dad306d3889032c1c6f694f88f83d098c514c983f9431617331930e2f"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000400)={0x20, 0x7, 0x36, "3c49be44a3c5e164a5cda4a6f70069b69997d1aed41cbe3b50ef0ba7fa7ca08a7f7bc1d000cf8d6c929bd0c7e7fa2d45bf27c039909c"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000540)={0xc0, 0xa2, 0x2f, "8aac66e241f25781bb816fb6571618e648efc833ccc0123e47732d5e6e5179d66082b150f4f59a8bcb719457cf0981"}}) r2 = syz_usb_connect$uac1(0x4, 0xc7, &(0x7f00000005c0)={{0x12, 0x1, 0x301, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0xeb, 0x20, 0xfc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x3fd, 0x4, 0xff, 0xaaf, 0x6, 0xd6}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x4, 0x3, [0x5, 0x3, 0x0], 0x31}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0xa0, "3d9f71914493"}, @processing_unit={0x7, 0x24, 0x7, 0x6, 0x2, 0xf5}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x6, 0x5, 0x0, 0x5, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x3, 0x2, 0x5, "fe7c", "09ef"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb0, 0x2, 0x4, {0x7, 0x25, 0x1, 0x0, 0xfb, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xb, 0x8af, 0x9, 'K\a$'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x2, 0xa, {0x7, 0x25, 0x1, 0x1, 0x0, 0x5}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x300, 0x7f, 0x4, 0x81, 0x20, 0x52}, 0x2b, &(0x7f0000000700)={0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x1, 0x200}, @generic={0x1c, 0x10, 0x4, "e1cc8b3bcccc1f54dfa163b0869b8962a7e9621a2224782b0d"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x68, &(0x7f0000000780)=@string={0x68, 0x3, "492c65234f3cfa98721b51ed1a58d0ec745bbdca92673f77e7b6e710e22ebf2e957a0234cde06fc62df2774a17d69e79382c7f649cf574dfa1d61b7cfee0ac8e65a9bf854ec33c48f07a33f8e4f6d670f176bb658ea976b6dfdd8afb2100f08761e0dfd574df"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_ep_read(r2, 0x4, 0xd5, &(0x7f0000000880)=""/213) pselect6(0x40, &(0x7f0000000980)={0x6d6, 0x0, 0x0, 0x7, 0x101, 0x9, 0x7, 0xffff}, &(0x7f00000009c0)={0x1, 0x228, 0x3, 0x0, 0xa2, 0x5, 0x7fffffff, 0x6a}, &(0x7f0000000a00)={0x4, 0x8, 0x5, 0xffffffffffffff81, 0x1, 0x6, 0x8, 0xe}, &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x4]}, 0x8}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x3, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x28, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0x40, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xb, 0x4}}]}}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x201, 0x81, 0x8, 0x8, 0x8, 0x5}, 0x9c, &(0x7f0000000b80)={0x5, 0xf, 0x9c, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x2, 0x1}, @generic={0x8d, 0x10, 0x5cd13124ba9d47d7, "ed9d4f13b01df673554e072372b6b768647f4dd0b1c42e59649e0fb09c44f0b5d154d0d4de2b0ff308fc10344945db6237941d66ac36bd2160d78ec567519f0c11861613fd8c9a88ca10ad6b96bbe12b808f7cc96024fb69aeefc2f2f4946ff2d9b51f6cd864beb3ecdbbab01411f0f4a67e580d88a1cf34f7253338ff0366b38b09b918ad4e307960ab"}]}, 0xa, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x436}}, {0xff, &(0x7f0000000cc0)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x38, &(0x7f0000000f00)=@string={0x38, 0x3, "eaedfecbcfed7d79822bfcdba790492ce0530b38aa96bcee899124f2bb9b558c26230819aa7bf81b843c2dd583383e603586d91eff89"}}, {0xea, &(0x7f0000000f40)=@string={0xea, 0x3, "981f387c4e2508224ac4c9b082caa4b9903fea8e441ab228e112da6ae9b543af60e958762ab00a70f3018453901f657710f859a75fb65947cc7a84dc7f7a4b5bc9d4a8304c2dfb3a59b314cb32c7f319a88170d654b6cf0c636dec4eb225726dbb08d6f6a5af6d6c8a0c0baae79e41f72621a109828fad56187349ef8dd5b49630e6dbc420271bb0168ddb51967391781f718b9252c1c93b09a5ffb180bf970fb0cd0bf0769a57b1a54c6cde0ec69bdff9744a84366a6383e57a532cf22d5c1a6504107fb0a038183406dde1fb620485fbda0199b1c4dae2a44928fa061a515ff301dbc9482f4607"}}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001140), &(0x7f0000001180)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000011c0)={r3}) r4 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000001200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000001440)={0x2c, &(0x7f0000001240)={0x20, 0x8, 0x98, {0x98, 0x5, "88c5b22614c875250a8695fc234520f1c8d06e7f486ef4633d8a935670cfb3c2ee8e16c7dc91d4d98a3b920b9b56c4de007594ea82e1c5ddfb9fbf145eac3d5b57029fae1922129d44092ff1c246be577da79ae617de467642833e5e5498b982738f2b0337c76d3c83ed2992976e7adf84227a241e577f045665b22ff9a5e67988f3a9aae57224b2be24628079790059e37d878a97ec"}}, &(0x7f0000001300)={0x0, 0x3, 0x66, @string={0x66, 0x3, "f36b47dc1d102481edc20b5d62529db0c06b1ea79d3d4244e11a0b2a89697ff99b759ff1b61dc3a9c5efa1f3a9c8b4785c18f6e6a5c007eb39f4a5ad4676603fe3fa3a21d180750012676648a860d01230bb263cceb1ba791a5bf1606a477629ca9dc4d5"}}, &(0x7f0000001380)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xda, 0xb2, 0x4, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "05d0b80c38193f2137cf93592d1b5af8"}]}}, &(0x7f00000013c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x3, 0xd5, 0x8, "e873d626", "230b6ac7"}}, &(0x7f0000001400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc, 0x1, 0x4, 0x4, 0x1, 0x0, 0x1}}}, &(0x7f00000018c0)={0x84, &(0x7f0000001480)={0x0, 0xb, 0x5a, "ff045497f4f998ea8ceb353f50c6a092c3a19e6f6c021c15e80e87bfd99f6758c94060644ca06593f12274aca76400857db55bac56b6dba40235cd64e1dd23a8d08ac4167ce114d1e83e72cbc61b98eed5417c7a9143ed3bfd9b"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001580)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000015c0)={0x20, 0x0, 0x8, {0x8, 0x20, [0xff0]}}, &(0x7f0000001600)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000001640)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001680)={0x40, 0xb, 0x2, "d726"}, &(0x7f00000016c0)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000001700)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001740)={0x40, 0x17, 0x6, @random="d12c4a63128f"}, &(0x7f0000001780)={0x40, 0x19, 0x2, "09ab"}, &(0x7f00000017c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001800)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001840)={0x40, 0x1e, 0x1}, &(0x7f0000001880)={0x40, 0x21, 0x1, 0xb}}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001980)=0x0) r6 = getpgrp(r5) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f00000019c0)) syz_usb_control_io$uac1(r2, &(0x7f0000001ac0)={0x14, &(0x7f0000001a00)={0x0, 0x8, 0x4b, {0x4b, 0xd, "47e0fdc404bb9e8978398af7a00da4dbb66af3fbba1b4517149d98cbfee304dce3678ba5fc9c552cf5df784a5302d566f5ed448ff5e16db466c5fc62b2e0880c86166fe5d8200b4b21"}}, &(0x7f0000001a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}}, &(0x7f0000001d40)={0x44, &(0x7f0000001b00)={0x40, 0x31, 0x64, "a4970a3355fbccaa535f7f435153f3af8392adfc2fd4fcc7cd6ea411b634acc06a45e7ced33d7285ead6c86b432c52d28008642e346a9c789b9407dea0d949c6083790666427842a0e1fdf8c480cce262877fa42ef42fbd1dba3c7fae097f813a3ee9e6f"}, &(0x7f0000001b80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001bc0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001c00)={0x20, 0x81, 0x2, "b6ac"}, &(0x7f0000001c40)={0x20, 0x82, 0x1, "e9"}, &(0x7f0000001c80)={0x20, 0x83, 0x1, '^'}, &(0x7f0000001cc0)={0x20, 0x84, 0x2, "9dc9"}, &(0x7f0000001d00)={0x20, 0x85, 0x3, "d20f6c"}}) syz_usb_control_io$lan78xx(r1, &(0x7f0000001ec0)={0x14, &(0x7f0000001dc0)={0x20, 0x1, 0xa7, {0xa7, 0x11, "dcc9ef91c9d4a54b17a2b7d2fab974868b4542d47db84a372e1fc6c51402c9acf8c01ece50cf885e93d50fa5d3465301d9bb8de13d28df6d59eaa615c30345a329aaf6827201ed0919d2e1f655cfab40a15cae542cdc7ed30076bd7d808b2a15bf8f01528285f862b410b535d1d32b6338c04650dddb9f57e28382fbc859581a284a4eceb67325d36433e8736cd028b5bcf94037d8b8606398191173b648d20e93979adbf2"}}, &(0x7f0000001e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}}, &(0x7f0000002100)={0x34, &(0x7f0000001f00)={0x40, 0x10, 0x91, "116dac5c90b5fb629cfdfaaeec2092bb631b08037eb69dbd0e186c7387891620eb391475883f0aab9b830658bb0fcf2be68945591df5b0b1eee0d12f05e8939e95505138da9e409f41002ecdbf7e2093e5bb8b36c8f5b102ff3414081249a6356aa784d3fc3e55d33a04bc6995cb54d9c9ab11fbcf54179014abb9b7e154556c22712c438c40df970a0d02e71cf41848a1"}, &(0x7f0000001fc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002000)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002040)={0xc0, 0xa1, 0x4, 0x10000}, &(0x7f0000002080)={0x40, 0xa0, 0x4, 0x1}, &(0x7f00000020c0)={0xc0, 0xa2, 0x2f, "aa0f472295e79d0f887b649007f8271aa74e1fdb24579489ff89d3a992582505d646bf4954bda780e5aea8e264a03e"}}) r8 = syz_clone3(&(0x7f0000002340)={0x80, &(0x7f0000002140), &(0x7f0000002180), &(0x7f00000021c0), {0x3}, &(0x7f0000002200)=""/68, 0x44, &(0x7f0000002280)=""/82, &(0x7f0000002300)=[0xffffffffffffffff, r6, r6, r6, r0, r6, r6, r5], 0x8}, 0x58) kcmp$KCMP_EPOLL_TFD(r5, r8, 0x7, r3, &(0x7f00000023c0)={r3, r3, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01864c1, &(0x7f0000002400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000002440)={r9, 0x7fff, 0x5, 0xcde5}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002480)) syz_usb_ep_read(r4, 0x4, 0x1000, &(0x7f00000024c0)=""/4096) listen(r3, 0x75) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f00000034c0)) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x15) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000003500), 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r10, 0x84, 0x74, &(0x7f0000003540)=""/126, &(0x7f00000035c0)=0x7e) 1.40129993s ago: executing program 7 (id=1333): close(0x3) r0 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r5], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x4000880}, 0x20004800) 1.360584356s ago: executing program 6 (id=1334): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sendmmsg$unix(r1, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="ed3be6210ece8dbb33b913e73d4586847be05f8eef46c0b1ff381f2c48b062761d7ce53d92c1c4d08e89c136b17bf9f54aae745475305a522ed24517bbdb18be5edbf0f5eadef5943a83094c2c7339125eb2e98e33d6b5acb65f60c0bbd5b8db0945243339ab9be50e840705d06c78aae71d7310865370965ca679427c174f2c303ff9ec37ea38660c73e7096d492db1a8e68ee086108b93c19a20b6776cdc8be216697ae6afd0386215fdc8ad0bbef0ee7d286a6cd9f55cde6601", 0xbb}, {&(0x7f00000000c0)="bfa4a3a9e533f2b07f12616340", 0xd}, {&(0x7f0000000100)="c803d3cccd24f2e8ba347e3ef03b49780aad830cae10f053dfca243e6e015206c78e25cbbf738f122b4a04eeb43206dd9e3f0e0c70d41ec549a928f8dc0c7ccfaffc51acfe9ce8d295e416602a01493b1ca215c3f2b01f2b16f1e8ce0f991a9c4c89115444abcc1e3f1648a9e2ef3f9d4fa2eba81bbbecf67bb32b03c55d02d473589021e82f78074b9ffbdc95d1ffb538dcd461dca0602ae808ff7c630b4cb76a30856f320b0acd6b5d41", 0xab}, {&(0x7f00000001c0)="bc3dbbbabd995c7f60f57eba10659807955977ac372441e8c4084ca530cae9dad03a5122a09e908602d644f69609d058c19d07df7c7a71eecac100c96d437f62ca9734de835016803899be172cf57becf577551c1704b7c9143336dd05175a2d8a316ca51124f7e510d1eb6663ff58b31f3c9420321ce072f10e1163eddcd7e7c8e18d8923e78706e04c", 0x8a}, {&(0x7f0000000300)="d05680bbaed9a72bc87a15ed8f9b294981df12c2876e4ecba2bb0b3329d63855116b67672f3cf4cec08402abd9deef249372ded59db252de588f5c07c9ecc49fcd17e38eee4f", 0x46}], 0x5, &(0x7f0000000640)=[@rights={{0x10}}], 0x10}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000006c0)="283cd236f14c2ddcb029ab766eed3abec44f5585222fe0e962f8b153b30b439721c24749a9b5e57dc5b5bb6e9291cee5d1328b0f1e71b6cb3241bd8abe7ff72528e2216c34fd6e8348506bfc1ff3045dbb516251f5", 0x55}, {&(0x7f0000000740)="8d04b04e5735478bdb6789756e37216d2e54a882e313efc0e518b06da3c1d3eb7e0774a2cca0fd29f259afc2178ef8b88c74b13852645300e441dc930786dce2a7b1f8648b539704030ae353866c72f824e8df69f00a86e0a81805c522c242e55543c63a4cb0b78f3f1522ef10a38d4489fb865f4d992c2ac81e96749ec05e921c20a045", 0x84}, {&(0x7f0000000800)="09063082caa90d0f872b2428b6c31424892eb2a1583028ab3764e0a5b06f02ee5ee099500657363f0168d7d3b08ac7b1b388d35cd0911a80293bcbf062aa170c551c8d97f7e51fed9d31ab9ccadf152818fcffa0e5c47dd33fb8d6f74ebb5215bea9bcd9a10571be214c928f4ee67429b6c4f05ad6ca0fe92b3cd15b093d0afc6845eea31a695d352a13921ddc4dc07f1b8b792ee3e8784296862e507e0c073e831d4d98e150e42a9e344a25f8df5fc6f1238215fda8f1827690d5e4d790216bbd15f04b2e48f0680dfe7e84a7db1e116d5c596e983c3d14881971bdbf344d7fbcd716110637891aac5b34f39297e2cfcb", 0xf1}, {&(0x7f0000000900)="c088c69ffc562b6d88e0ee2d6b4b00aef2a81a139aaf94d08703bb061959d5bcd650c05ee1", 0x25}, {&(0x7f0000000940)="8f7947d2a75dccd1b96dcdd8a6f93201591eff69af567d4243c91f7b3dee8f5f69248b5a663bae21797cb2db1f5bd91a953d5ce760a53895235db4e9b064207f06e6bdd248209a7ffa2ae7062cd113a812af2f5114fe9189d3b64759e223930c6d1de0c952f296264c23f8eb9954e848caf678c9c0b79a73c54a49469823c5e5d1e89058a1ded2c3d799cef5074b429de30fdbec0fb6a95cb75306b05d", 0x9d}, {&(0x7f0000000a00)="e477d684eed344ee49fb1674cbc6fcd104cb957f260f7841411fc575f512aecddbdc23aaedd4e5ceddd05eab42dcc1f4a0d2240e65d58784b4c80b7599b3d0d6c033940bc22520153c4e807f2b700864bfed34ef12ad2894b67985fdba4ca8f95bdb9bbf0a233d284343c2b983c9552f8d9aff277bc06292f37bb0b22ee9bf6d4e09d58ea8c5786c52e75764053874efad0251b52384d122c03adb45f740fb1e9e732e66ee9127023f316d3c14d58cd7431a0b4600fac1f3b023d51f6a0c76c417149d8e31ad4e98e009f549c1baf7449635cf94", 0xd4}, {&(0x7f0000000b00)="67b866a4212664444af3e103cde54e4e9159e437e77744bf8fc5e610a855a17fb788556c0daede42905835259a95cc8f4a61291128fcef6f40ba58a18d49df2e1bb958e442b09c22060f0ec7fdc415", 0x4f}], 0x7, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000f00)="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", 0xfd}, {&(0x7f0000001000)="28b1552c5ecef5aa55ee2cccd62a2c96cb41357e67826ce831d6d7f8db02943752bff937dc4ad009141a0871fed684d6d80fa2682ff377304611b90f5f98a34f0470af50be7192ecb3195b7311af227b227de7958c527fe0ca11f7f5010d3d2238537f15d0bb53308f868ebcc29969ac8b66f12ced08bd6b90ff11aedffdd158f408cb36c1f5598c82833a7151fe469781a69e10d9c6f4df885fdddc9371765bda2c708981d5ba", 0xa7}, {&(0x7f00000010c0)="396e6d52910fc010b4ad6714e693b3fa4ed79b6d3846f7dad7aeb1324d041531914d1fb45c9606652213f2eba5738028e2ceb14661d3ddd060299ea4cc1e7ca0fdd9ffced9b7dd465b8f256bcca9a7017b988f644d893c88271eb51eaeaa5494e7a00acd08730cddd4da3fa38eb2992591fd1c0470", 0x75}, {&(0x7f0000001140)="109c8e25fc1638eabe5bd9d3ad2c11a06cc4737faca6b30e161e6acca80e77b31281f62984a8a8c844e5d688e1cf7cb45ead8d4283c93dee77827265ad81819981c3d6d0d228c9859dffa8d90ea2436053e299d39604e445f52da52151e76786004bb3e0ff68890a82a77d4fdc7f96dd1d2b8f83f5f752106320ec83fc1ee3873da10c7c04f8c98a5eb509b954cd56", 0x8f}, {&(0x7f0000001200)="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", 0x767}], 0x5, 0x0, 0x0, 0x50}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="240000000006"], 0x40}}], 0x4, 0xc881) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x2441, 0x83) fcntl$setstatus(r2, 0x4, 0x24400) fdatasync(r2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x1, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r5 = syz_clone3(&(0x7f0000000d00)={0x50d2500, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0x10}, &(0x7f0000000c00)=""/86, 0x56, &(0x7f0000000c80)=""/85, &(0x7f0000000600)=[0x0, 0x0], 0x2}, 0x58) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000680)=r5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x2, {0xa, 0x4e22, 0x17, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfac}, r6}}, 0x38) 1.227413387s ago: executing program 5 (id=1335): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) close_range(r0, r0, 0x200000000000000) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x3, "64d9"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0495c20000000000010902"], 0x0) 1.226724416s ago: executing program 6 (id=1336): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r1 = creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) connect$bt_rfcomm(r1, &(0x7f0000001040)={0x1f, @any, 0x47}, 0xa) syz_open_dev$vim2m(&(0x7f0000000000), 0x100000000b, 0x2) syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, 0xffffffffffffffff, 0xd925000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FIONREAD(r3, 0x5453, 0xfffffffffffffffe) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001100), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000010c0)=@ccm_128={{0x303}, "d252745d477037e3", "9b09289f6ed4eca289f4b7bcfb8687e8", "1f183036", "590d9c766a1e8bb6"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 880.167025ms ago: executing program 7 (id=1337): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1400210bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x18) pwritev(r2, 0x0, 0x0, 0x2, 0x4) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='bfs\x00', 0x8000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000002c0)=ANY=[], 0x8) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) r5 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 383.81582ms ago: executing program 6 (id=1338): syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x38080) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x3, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x2}, 0x8, 0xe4, &(0x7f0000000080)="dcc4c911344a7819c9cde327674d6ca841eec5dcfa9f13accf58789647eccbf81545b436734cc6b2ca68ddd9cdfaa91f5268016c833b01ecb7873f22c34f0e33b1e98d73ddac10912426c9954963248d0a6ce6940654cd6d71d00549185e123aa549d5afd8ba63b7950d6e00b1f2b94eac36eb5a306a15e07c84499e4afcef8c60ddefc409cb321151c82ebbcb7d0754b1a35d7b65d9164d2cd0b9a6bb03d5376e17b51479d96f8a7b72c84a2dea44bf381f105b12f3a36b1b68ef2b1c0794f8eae505", 0xc3, 0x0, 0x3, 0x8, 0x7, 0xa61, &(0x7f0000000180)="5b13dd9ae03481bc203215c5a29b27112086d4f0708eb4f9cdee8ee38151dfe96ae2c2a554be362d9eea3f291664908e2a7a900f9b7acc746ed1747365f8bca9e6a87ebd056aaa6f9123492b75fa885691c280d62e1654e113312a0ae35f38a22ec1"}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000240)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x2e, 0x30, 0x27, 0x61, 0x0, 0x61]}}, &(0x7f0000000500)=""/230, 0x2c, 0xe6, 0x0, 0x800, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x14, &(0x7f0000000340)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffbff}}], &(0x7f0000000400)='GPL\x00', 0xe90, 0x5a, &(0x7f0000000440)=""/90, 0x41000, 0x21, '\x00', 0x0, @fallback=0x1c, r2, 0x8, &(0x7f0000000640)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x5, 0x7f}, 0x10, r3, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000009c0)=[{0x5, 0x3, 0x1, 0x7}, {0x2, 0x2, 0x10, 0x9}, {0x4, 0x2, 0x5, 0x8}, {0x1, 0x4, 0xd, 0x1}, {0x1, 0x1, 0xd, 0xd}, {0x5, 0x2, 0xe, 0x3}], 0x10, 0x6}, 0x94) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000b00)) gettid() r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000b40), 0x38082, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000b80)=0x1, 0x4) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x5) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000c40)={0x5a, @local, 0x4e24, 0x4, 'sed\x00', 0x11, 0xb52, 0x30}, 0x2c) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x560200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xfc, 0x17, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5}, 0x800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000e40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000ec0), r5) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000fc0)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x80, 0x5, 0x5, 0x7fffffff, 0x8]}, &(0x7f0000001040)=0x78) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001080)=0x9c8) r8 = syz_clone(0x100200, &(0x7f00000010c0)="ae937d3a8d1fb8088e67e39086419cd7390c54069d1dd9dea96b931677b8f93679571fd36a8e3d1ea5f677f9d689fcd57aaece42fa3b8875278eb7d0d1bbf289ed9ecb7a47b34cca034ab5302648b9018631862aada41703a1c946e11a6006a7c89626dde04f", 0x66, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="eb72eae972c6acc325658813adac12b463fa61347f4e935ba6723ca88f1aeb80feb9085d8ec824") migrate_pages(r8, 0x16, &(0x7f0000001200), &(0x7f0000001240)=0x7fff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000001280)={0x0, 0xc7, "015610619feffbd27f9ab47828d23658ee62636415d5b92054fd58e062c918e34fa3047a3b4ab5629d42dbf2301017e6571b4d3ae2e5939976246338d633896fd42e40b4c780f3eec29576e05840878beb25a3f2c6e6b5f82d5d7b9814072f7bc31c326dde9990b5b331ae00f9e159bd9fb3abf9ee1e8ac92efd2756c07241e99da4c9c89aa740f5a986c77438dbbf60e19519408ceaef4f44692f1477613ec76c28f7db6765715a0357e55be4a0ac9a95bfb5ba6002d8728909b918268ebdecf5f41aae4e98b0"}, &(0x7f0000001380)=0xcf) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000013c0)={r9, @in6={{0xa, 0x4e20, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffe}}, 0x4, 0x4, 0x7, 0x9, 0x400}, &(0x7f0000001480)=0x98) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f00000014c0)=r8) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000001500)=@routing={0x2b, 0x8, 0x2, 0x3, 0x0, [@mcast2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}, 0x48) r10 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r10, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000894) 308.014881ms ago: executing program 0 (id=1339): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000b4b000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024"], 0x250}}, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$FS_IOC_GETVERSION(r6, 0xc040ff0b, &(0x7f0000000180)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) set_mempolicy(0x2, &(0x7f00000001c0)=0x6c76, 0x7) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socket$inet6_sctp(0xa, 0x1, 0x84) 155.541081ms ago: executing program 0 (id=1340): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b000600000008001800400000000a001000010000000000000008000b000600000008000c"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2442, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000004400)='/proc/mdstat\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r5, &(0x7f0000000140)='./file0\x00', &(0x7f0000002280)=@FILEID_INO32_GEN_PARENT={0x0, 0x2, {{0x0, 0x4}, 0x39c6, 0xf137}}, 0x0, 0x200) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) 0s ago: executing program 6 (id=1341): socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000740)=ANY=[@ANYRES16=r5, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f6d6561737572652c66737500009bbf2a12a522af7a32372d363036622d653032322d303438312d66336563366538", @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRES16=r2, @ANYRESHEX=0x0, @ANYRESDEC=r5, @ANYBLOB="2c736d61636b6673726f6f743dae38352b6422dc5202f30054e9433d66f278432bdd868af7effd8582e69e6376000104763d07d9458fff8c2c3c1f06ca6c1e45297b9bf159c94304df8f093452596a51000515ff60889cb20f8ac1b30063402b2e4a2c8b2c00"]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYBLOB="3c3639f8ee53a97c9096fbebd6fb6a0b35c5d77ad6800549aad5ff7cdc88de16919e170c97fb75b442ba980676bfcb555acb612d1d45ed89c9798805a9c646a5425f55692f98fde0996b9656"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x4b, &(0x7f0000000000)=0x401, 0x4) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e21, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2e9}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) kernel console output (not intermixed with test programs): 1400 audit(1771960859.966:502): avc: denied { execute } for pid=9249 comm="syz.4.846" path="/dev/sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 329.498570][ T977] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 329.594179][ T977] usb 2-1: device descriptor read/8, error -71 [ 329.771340][ T977] usb usb2-port1: unable to enumerate USB device [ 331.089837][ T9235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.432134][ T29] audit: type=1400 audit(1771960862.266:503): avc: denied { remount } for pid=9267 comm="syz.0.849" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 331.650539][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 333.138655][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 333.166943][ T9] usb 1-1: config 248 has an invalid descriptor of length 232, skipping remainder of the config [ 333.179865][ T9] usb 1-1: config 248 has 0 interfaces, different from the descriptor's value: 1 [ 333.200110][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=4f.ea [ 333.219876][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.235427][ T9] usb 1-1: Product: syz [ 333.239800][ T9] usb 1-1: Manufacturer: syz [ 333.246907][ T9] usb 1-1: SerialNumber: syz [ 333.286300][ T29] audit: type=1400 audit(1771960864.226:504): avc: denied { setopt } for pid=9278 comm="syz.4.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 333.636923][ T9268] tmpfs: Bad value for 'nr_inodes' [ 333.837135][ T9279] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.851'. [ 333.851842][ T977] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 334.062837][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 334.090396][ T977] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 334.111489][ T977] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.158543][ T977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.179212][ T977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.290361][ T9] usb 1-1: USB disconnect, device number 23 [ 334.313333][ T977] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.328661][ T977] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.342312][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.579805][ T977] usb 3-1: usb_control_msg returned -32 [ 334.603084][ T977] usbtmc 3-1:16.0: can't read capabilities [ 334.929170][ T9298] FAULT_INJECTION: forcing a failure. [ 334.929170][ T9298] name failslab, interval 1, probability 0, space 0, times 0 [ 334.943687][ T9298] CPU: 0 UID: 0 PID: 9298 Comm: syz.2.854 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.943715][ T9298] Tainted: [L]=SOFTLOCKUP [ 334.943721][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 334.943730][ T9298] Call Trace: [ 334.943736][ T9298] [ 334.943742][ T9298] dump_stack_lvl+0x100/0x190 [ 334.943763][ T9298] should_fail_ex.cold+0x5/0xa [ 334.943777][ T9298] ? tomoyo_realpath_from_path+0xb6/0x690 [ 334.943791][ T9298] should_failslab+0xc2/0x120 [ 334.943808][ T9298] __kmalloc_noprof+0xe0/0x850 [ 334.943824][ T9298] tomoyo_realpath_from_path+0xb6/0x690 [ 334.943840][ T9298] tomoyo_path_number_perm+0x23c/0x580 [ 334.943857][ T9298] ? tomoyo_path_number_perm+0x22e/0x580 [ 334.943877][ T9298] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 334.943908][ T9298] ? find_held_lock+0x2b/0x80 [ 334.943922][ T9298] ? __fget_files+0x215/0x3d0 [ 334.943931][ T9298] ? hook_file_ioctl_common+0x146/0x410 [ 334.943948][ T9298] ? __fget_files+0x21f/0x3d0 [ 334.943960][ T9298] security_file_ioctl+0xd3/0x230 [ 334.943977][ T9298] __x64_sys_ioctl+0xb7/0x210 [ 334.943993][ T9298] do_syscall_64+0x106/0xf80 [ 334.944004][ T9298] ? clear_bhb_loop+0x40/0x90 [ 334.944017][ T9298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.944028][ T9298] RIP: 0033:0x7f5e1af9c629 [ 334.944037][ T9298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.944047][ T9298] RSP: 002b:00007f5e1bee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.944057][ T9298] RAX: ffffffffffffffda RBX: 00007f5e1b216090 RCX: 00007f5e1af9c629 [ 334.944064][ T9298] RDX: 0000000000000000 RSI: 0000000000005b03 RDI: 0000000000000004 [ 334.944070][ T9298] RBP: 00007f5e1bee4090 R08: 0000000000000000 R09: 0000000000000000 [ 334.944075][ T9298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.944081][ T9298] R13: 00007f5e1b216128 R14: 00007f5e1b216090 R15: 00007ffc65919168 [ 334.944095][ T9298] [ 334.944136][ T9298] ERROR: Out of memory at tomoyo_realpath_from_path. [ 335.201536][ T9298] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 335.232897][ T9300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=9300 comm=syz.4.859 [ 335.402726][ T5913] usb 3-1: USB disconnect, device number 18 [ 335.818869][ T9319] syzkaller0: entered promiscuous mode [ 335.826261][ T9319] syzkaller0: entered allmulticast mode [ 338.350590][ T9302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.472062][ T9342] binder: 9337:9342 unknown command 0 [ 338.477499][ T9342] binder: 9337:9342 ioctl c0306201 200000000280 returned -22 [ 339.414198][ T9350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=9350 comm=syz.4.871 [ 339.757734][ T9356] netlink: 48 bytes leftover after parsing attributes in process `syz.2.872'. [ 341.481306][ T29] audit: type=1400 audit(1771960871.836:505): avc: denied { map } for pid=9357 comm="syz.0.873" path="socket:[25753]" dev="sockfs" ino=25753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 341.682896][ T29] audit: type=1400 audit(1771960871.836:506): avc: denied { read } for pid=9357 comm="syz.0.873" path="socket:[25753]" dev="sockfs" ino=25753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 341.706733][ T9364] FAULT_INJECTION: forcing a failure. [ 341.706733][ T9364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.725632][ T9364] CPU: 0 UID: 0 PID: 9364 Comm: syz.0.875 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.725660][ T9364] Tainted: [L]=SOFTLOCKUP [ 341.725666][ T9364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.725675][ T9364] Call Trace: [ 341.725681][ T9364] [ 341.725687][ T9364] dump_stack_lvl+0x100/0x190 [ 341.725719][ T9364] should_fail_ex.cold+0x5/0xa [ 341.725742][ T9364] _copy_to_user+0x32/0xd0 [ 341.725768][ T9364] simple_read_from_buffer+0xcb/0x170 [ 341.725797][ T9364] proc_fail_nth_read+0x1af/0x230 [ 341.725819][ T9364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.725841][ T9364] ? rw_verify_area+0xce/0x6d0 [ 341.725863][ T9364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.725884][ T9364] vfs_read+0x1e4/0xb30 [ 341.725908][ T9364] ? __pfx_vfs_read+0x10/0x10 [ 341.725926][ T9364] ? __fget_files+0x215/0x3d0 [ 341.725943][ T9364] ? __fget_files+0x21f/0x3d0 [ 341.725961][ T9364] ksys_read+0x12a/0x250 [ 341.725980][ T9364] ? __pfx_ksys_read+0x10/0x10 [ 341.726004][ T9364] do_syscall_64+0x106/0xf80 [ 341.726017][ T9364] ? clear_bhb_loop+0x40/0x90 [ 341.726034][ T9364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.726047][ T9364] RIP: 0033:0x7f0b1335cece [ 341.726059][ T9364] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 341.726071][ T9364] RSP: 002b:00007f0b14188fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 341.726084][ T9364] RAX: ffffffffffffffda RBX: 00007f0b141896c0 RCX: 00007f0b1335cece [ 341.726093][ T9364] RDX: 000000000000000f RSI: 00007f0b141890a0 RDI: 0000000000000005 [ 341.726101][ T9364] RBP: 00007f0b14189090 R08: 0000000000000000 R09: 0000000000000000 [ 341.726108][ T9364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.726116][ T9364] R13: 00007f0b13616038 R14: 00007f0b13615fa0 R15: 00007fff5c5bdf68 [ 341.726135][ T9364] [ 341.920142][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 342.483056][ T29] audit: type=1400 audit(1771960873.426:507): avc: denied { setopt } for pid=9372 comm="syz.4.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 342.730558][ T5913] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 342.882567][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 342.892633][ T5913] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.905017][ T5913] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.916524][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 342.923328][ T5913] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 342.933629][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.951466][ T5913] usb 5-1: config 0 descriptor?? [ 343.422273][ T5913] smartjoyplus 0003:6666:8804.000A: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.4-1/input0 [ 343.435245][ T5913] smartjoyplus 0003:6666:8804.000A: Force feedback for SmartJoy PLUS PS2/USB adapter [ 343.636661][ T9373] nfs: Unknown parameter '&' [ 343.643763][ T5913] usb 5-1: USB disconnect, device number 26 [ 344.324885][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.333959][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.342142][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.353196][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.361662][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.500343][ T9398] chnl_net:caif_netlink_parms(): no params data found [ 344.550834][ T9398] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.565375][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.578912][ T9398] bridge_slave_0: entered allmulticast mode [ 344.598684][ T9398] bridge_slave_0: entered promiscuous mode [ 344.614525][ T9398] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.637079][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.649253][ T9398] bridge_slave_1: entered allmulticast mode [ 344.668136][ T9398] bridge_slave_1: entered promiscuous mode [ 344.723744][ T6368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.737067][ T6368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 344.795033][ T9398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.824880][ T9408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=9408 comm=syz.2.888 [ 344.846327][ T9398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.878948][ T6368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.890993][ T5129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.892542][ T6368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 344.909195][ T5129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.917769][ T5129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.925391][ T5129] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.932820][ T5129] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.006508][ T6368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.021371][ T6368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 345.041788][ T9398] team0: Port device team_slave_0 added [ 345.049379][ T9398] team0: Port device team_slave_1 added [ 345.089853][ T6368] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.102362][ T6368] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 345.158635][ T9398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.166931][ T9398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.195411][ T9398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.247262][ T9398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.256261][ T9398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.283264][ T9398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.415236][ T9398] hsr_slave_0: entered promiscuous mode [ 345.429052][ T9398] hsr_slave_1: entered promiscuous mode [ 345.439312][ T9398] debugfs: 'hsr0' already exists in 'hsr' [ 345.445989][ T9398] Cannot create hsr debugfs directory [ 345.647411][ T9378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.814899][ T6368] bond0 (unregistering): (slave geneve2): Releasing active interface [ 345.839171][ T9415] netlink: 76 bytes leftover after parsing attributes in process `syz.0.889'. [ 345.906357][ T6368] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.933422][ T6368] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.946832][ T6368] .` (unregistering): Released all slaves [ 346.055532][ T6368] bond0 (unregistering): Released all slaves [ 346.076729][ T6368] bond1 (unregistering): Released all slaves [ 346.205509][ T9409] chnl_net:caif_netlink_parms(): no params data found [ 346.281074][ T6368] tipc: Left network mode [ 346.410900][ T51] Bluetooth: hci5: command tx timeout [ 346.465453][ T9437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=9437 comm=syz.0.891 [ 346.546733][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.569185][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.585782][ T9409] bridge_slave_0: entered allmulticast mode [ 346.644416][ T9409] bridge_slave_0: entered promiscuous mode [ 346.745609][ T9409] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.770182][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.834467][ T9409] bridge_slave_1: entered allmulticast mode [ 346.878284][ T9409] bridge_slave_1: entered promiscuous mode [ 346.961147][ T51] Bluetooth: hci4: command tx timeout [ 347.376198][ T5129] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 347.386264][ T5129] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 347.395368][ T5129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 347.420627][ T9456] loop6: detected capacity change from 0 to 2640 [ 347.430340][ T5129] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 347.438540][ T5129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 347.460777][ T9456] buffer_io_error: 27 callbacks suppressed [ 347.460793][ T9456] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.483910][ T9409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.517017][ T9456] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.541266][ T9409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.555057][ T9458] veth0: entered promiscuous mode [ 347.588422][ T9456] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.637599][ T9456] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.717798][ T9456] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.726713][ T9456] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.737930][ T9456] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.747546][ T9456] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.760809][ T9456] ldm_validate_partition_table(): Disk read failed. [ 347.760844][ T6368] hsr_slave_0: left promiscuous mode [ 347.767491][ T9456] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.799117][ T9456] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.807923][ T9456] Dev loop6: unable to read RDB block 0 [ 347.814727][ T9456] loop6: unable to read partition table [ 347.820777][ T9456] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 347.861040][ T6368] hsr_slave_1: left promiscuous mode [ 347.866921][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.881574][ T9461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=9461 comm=syz.2.895 [ 347.901776][ T6368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.909807][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.920908][ T6368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.993353][ T6368] veth1_macvtap: left promiscuous mode [ 347.999043][ T6368] veth0_macvtap: left promiscuous mode [ 348.086940][ T6368] veth1_vlan: left promiscuous mode [ 348.099423][ T6368] veth0_vlan: left promiscuous mode [ 348.499940][ T5129] Bluetooth: hci5: command tx timeout [ 349.010618][ T6368] team0 (unregistering): Port device team_slave_1 removed [ 349.030576][ T6368] team0 (unregistering): Port device team_slave_0 removed [ 349.039913][ T5129] Bluetooth: hci4: command tx timeout [ 349.266250][ T9455] veth0: left promiscuous mode [ 349.304498][ T9409] team0: Port device team_slave_0 added [ 349.321852][ T9409] team0: Port device team_slave_1 added [ 349.471670][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.520908][ T51] Bluetooth: hci6: command tx timeout [ 349.569397][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.639525][ T9409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.803113][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.812279][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.839604][ T9409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.996491][ T2742] block nbd3: Possible stuck request ffff888028ba0000: control (read@0,1024B). Runtime 30 seconds [ 350.008883][ T2742] block nbd3: Possible stuck request ffff888028ba0200: control (read@1024,1024B). Runtime 30 seconds [ 350.021549][ T2742] block nbd3: Possible stuck request ffff888028ba0400: control (read@2048,1024B). Runtime 30 seconds [ 350.032752][ T2742] block nbd3: Possible stuck request ffff888028ba0600: control (read@3072,1024B). Runtime 30 seconds [ 350.127101][ T9409] hsr_slave_0: entered promiscuous mode [ 350.135113][ T9409] hsr_slave_1: entered promiscuous mode [ 350.142052][ T9409] debugfs: 'hsr0' already exists in 'hsr' [ 350.147759][ T9409] Cannot create hsr debugfs directory [ 350.180384][ T6368] IPVS: stop unused estimator thread 0... [ 350.308677][ T9453] chnl_net:caif_netlink_parms(): no params data found [ 350.393362][ T9453] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.401367][ T9453] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.408503][ T9453] bridge_slave_0: entered allmulticast mode [ 350.415415][ T9453] bridge_slave_0: entered promiscuous mode [ 350.422927][ T9453] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.430234][ T9453] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.437354][ T9453] bridge_slave_1: entered allmulticast mode [ 350.444955][ T9453] bridge_slave_1: entered promiscuous mode [ 350.465708][ T9453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.476644][ T9453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.499294][ T9453] team0: Port device team_slave_0 added [ 350.506806][ T9453] team0: Port device team_slave_1 added [ 350.524816][ T9453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.531872][ T9453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.558527][ T9453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.569437][ T5129] Bluetooth: hci5: command tx timeout [ 350.575940][ T9453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.583335][ T9453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.610175][ T9453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.640183][ T9453] hsr_slave_0: entered promiscuous mode [ 350.646277][ T9453] hsr_slave_1: entered promiscuous mode [ 350.652635][ T9453] debugfs: 'hsr0' already exists in 'hsr' [ 350.658342][ T9453] Cannot create hsr debugfs directory [ 351.119379][ T5129] Bluetooth: hci4: command tx timeout [ 351.598438][ T5129] Bluetooth: hci6: command tx timeout [ 352.213528][ T9470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.225812][ T9398] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.250196][ T9453] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 352.268816][ T9453] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 352.290317][ T9409] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 352.305914][ T9398] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.323554][ T9398] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.343289][ T9453] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 352.363227][ T9453] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 352.392782][ T9409] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 352.411900][ T9398] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 352.460953][ T9409] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 352.471284][ T9498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.900'. [ 352.492161][ T9409] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 352.598364][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 352.638127][ T5129] Bluetooth: hci5: command tx timeout [ 353.147875][ T9453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.207615][ T5129] Bluetooth: hci4: command tx timeout [ 353.365253][ T9398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.462736][ T9453] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.533288][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.540450][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.586936][ T9398] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.653555][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.660711][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.786646][ T5129] Bluetooth: hci6: command tx timeout [ 353.817833][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.824956][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.917724][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.052180][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.059325][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.124944][ T9409] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.176383][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.183532][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.430988][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.438123][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.854225][ T9398] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 354.880046][ T9398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.565535][ T9409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.617866][ T9398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.682594][ T9453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.848826][ T5129] Bluetooth: hci6: command tx timeout [ 356.167414][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 356.213811][ T9398] veth0_vlan: entered promiscuous mode [ 356.365558][ T9] usb 3-1: config 0 has no interfaces? [ 356.581421][ T9398] veth1_vlan: entered promiscuous mode [ 356.591181][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 356.601034][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.611511][ T9] usb 3-1: Product: syz [ 356.628452][ T9] usb 3-1: Manufacturer: syz [ 356.633081][ T9] usb 3-1: SerialNumber: syz [ 356.649091][ T9] usb 3-1: config 0 descriptor?? [ 356.695612][ T9409] veth0_vlan: entered promiscuous mode [ 356.729830][ T9453] veth0_vlan: entered promiscuous mode [ 356.755598][ T9409] veth1_vlan: entered promiscuous mode [ 356.774848][ T9453] veth1_vlan: entered promiscuous mode [ 356.804919][ T9398] veth0_macvtap: entered promiscuous mode [ 356.819644][ T9398] veth1_macvtap: entered promiscuous mode [ 356.852891][ T9398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.874361][ T9409] veth0_macvtap: entered promiscuous mode [ 356.895603][ T9409] veth1_macvtap: entered promiscuous mode [ 356.906148][ T9398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.941243][ T9453] veth0_macvtap: entered promiscuous mode [ 356.962033][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.982971][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.015446][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.076396][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.110563][ T9453] veth1_macvtap: entered promiscuous mode [ 357.158998][ T9563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.222698][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.256772][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.353339][ T3550] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.437646][ T9453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.447569][ T3550] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.529487][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.540787][ T9453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.549748][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.564131][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.580153][ T3550] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.591983][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.616050][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.827006][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.765173][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.808582][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.842968][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.852238][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.865940][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.994890][ T29] audit: type=1400 audit(1771961145.860:508): avc: denied { mounton } for pid=9409 comm="syz-executor" path="/root/syzkaller.B8T9rf/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 359.030109][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.051565][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.069371][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.105860][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.113745][ T29] audit: type=1400 audit(1771961145.890:509): avc: denied { mounton } for pid=9409 comm="syz-executor" path="/root/syzkaller.B8T9rf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 359.232429][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.331552][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.335365][ T29] audit: type=1400 audit(1771961145.890:510): avc: denied { mounton } for pid=9409 comm="syz-executor" path="/root/syzkaller.B8T9rf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 359.390168][ T29] audit: type=1400 audit(1771961145.900:511): avc: denied { mounton } for pid=9409 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 359.644299][ T9628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=9628 comm=syz.6.908 [ 359.780492][ T5865] usb 3-1: USB disconnect, device number 19 [ 360.607068][ T9655] netlink: 56 bytes leftover after parsing attributes in process `syz.5.913'. [ 360.625482][ T9655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.913'. [ 360.640137][ T9655] netlink: 31 bytes leftover after parsing attributes in process `syz.5.913'. [ 360.650312][ T9658] fuse: Bad value for 'user_id' [ 360.657178][ T9658] fuse: Bad value for 'user_id' [ 360.662225][ T9655] netlink: 31 bytes leftover after parsing attributes in process `syz.5.913'. [ 360.810653][ T5129] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 361.676325][ T9680] overlayfs: failed to resolve './file1/file0': -2 [ 362.284259][ T9697] nbd: must specify at least one socket [ 362.305083][ T9697] kernel profiling enabled (shift: 6) [ 362.560233][ T9704] syz_tun: entered allmulticast mode [ 362.746234][ T9703] syz_tun: left allmulticast mode [ 363.451801][ T9735] tmpfs: Bad value for 'nr_inodes' [ 363.845646][ T9737] syzkaller1: entered promiscuous mode [ 363.851186][ T9737] syzkaller1: entered allmulticast mode [ 364.064423][ T29] audit: type=1400 audit(1771961151.013:512): avc: denied { write } for pid=9742 comm="syz.2.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 364.321545][ T977] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 364.503949][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 364.521006][ T977] usb 1-1: no configurations [ 364.530883][ T977] usb 1-1: can't read configurations, error -22 [ 364.672055][ T977] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 364.724456][ T29] audit: type=1400 audit(1771961151.683:513): avc: denied { listen } for pid=9764 comm="syz.5.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 364.822163][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 364.852126][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 364.905416][ T977] usb 1-1: no configurations [ 364.910461][ T977] usb 1-1: can't read configurations, error -22 [ 364.919235][ T977] usb usb1-port1: attempt power cycle [ 365.072821][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 365.522634][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.535953][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 365.549247][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 365.960452][ T977] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 366.340481][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.414352][ T9] usb 3-1: Product: syz [ 366.423665][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 366.484212][ T9] usb 3-1: Manufacturer: syz [ 366.542568][ T977] usb 1-1: no configurations [ 366.670778][ T977] usb 1-1: can't read configurations, error -22 [ 366.679212][ T9] usb 3-1: SerialNumber: syz [ 366.701712][ T9] usb 3-1: config 0 descriptor?? [ 366.833453][ T977] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 366.873013][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 366.880079][ T977] usb 1-1: no configurations [ 366.887787][ T977] usb 1-1: can't read configurations, error -22 [ 366.895887][ T977] usb usb1-port1: unable to enumerate USB device [ 366.930348][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 366.945380][ T9781] tmpfs: Bad value for 'nr_inodes' [ 367.171941][ T9786] FAULT_INJECTION: forcing a failure. [ 367.171941][ T9786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.219552][ T9786] CPU: 0 UID: 0 PID: 9786 Comm: syz.0.951 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.219580][ T9786] Tainted: [L]=SOFTLOCKUP [ 367.219586][ T9786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 367.219598][ T9786] Call Trace: [ 367.219603][ T9786] [ 367.219609][ T9786] dump_stack_lvl+0x100/0x190 [ 367.219642][ T9786] should_fail_ex.cold+0x5/0xa [ 367.219671][ T9786] _copy_to_user+0x32/0xd0 [ 367.219697][ T9786] simple_read_from_buffer+0xcb/0x170 [ 367.219728][ T9786] proc_fail_nth_read+0x1af/0x230 [ 367.219753][ T9786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.219777][ T9786] ? rw_verify_area+0xce/0x6d0 [ 367.219799][ T9786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.219821][ T9786] vfs_read+0x1e4/0xb30 [ 367.219849][ T9786] ? __pfx_vfs_read+0x10/0x10 [ 367.219872][ T9786] ? __fget_files+0x215/0x3d0 [ 367.219894][ T9786] ? __fget_files+0x21f/0x3d0 [ 367.219917][ T9786] ksys_read+0x12a/0x250 [ 367.219941][ T9786] ? __pfx_ksys_read+0x10/0x10 [ 367.219973][ T9786] do_syscall_64+0x106/0xf80 [ 367.219990][ T9786] ? clear_bhb_loop+0x40/0x90 [ 367.220011][ T9786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.220028][ T9786] RIP: 0033:0x7f0b1335cece [ 367.220042][ T9786] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 367.220058][ T9786] RSP: 002b:00007f0b14188fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.220075][ T9786] RAX: ffffffffffffffda RBX: 00007f0b141896c0 RCX: 00007f0b1335cece [ 367.220086][ T9786] RDX: 000000000000000f RSI: 00007f0b141890a0 RDI: 0000000000000003 [ 367.220096][ T9786] RBP: 00007f0b14189090 R08: 0000000000000000 R09: 0000000000000000 [ 367.220105][ T9786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.220115][ T9786] R13: 00007f0b13616038 R14: 00007f0b13615fa0 R15: 00007fff5c5bdf68 [ 367.220139][ T9786] [ 367.643771][ T9] rc_core: IR keymap rc-imon-pad not found [ 367.649673][ T9] Registered IR keymap rc-empty [ 367.707806][ T9] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 367.726720][ T9] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 367.775531][ T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 367.788899][ T9791] loop6: detected capacity change from 0 to 2640 [ 367.826788][ T5795] buffer_io_error: 11 callbacks suppressed [ 367.826804][ T5795] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.827622][ T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 367.889270][ T5795] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.921176][ T5795] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.929089][ T5795] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.937240][ T5795] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.972086][ T9795] veth0: entered promiscuous mode [ 367.977411][ T5795] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.998403][ T9796] binder: 9783:9796 ioctl c0306201 200000000040 returned -22 [ 368.203516][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 368.361827][ T5795] Buffer I/O error on dev loop6, logical block 0, async page read [ 368.385431][ T5795] Buffer I/O error on dev loop6, logical block 0, async page read [ 368.426376][ T5795] ldm_validate_partition_table(): Disk read failed. [ 368.436307][ T9803] syzkaller0: entered promiscuous mode [ 368.452459][ T9803] syzkaller0: entered allmulticast mode [ 368.460952][ T9801] sg_write: data in/out 601/21 bytes for SCSI command 0x0-- guessing data in; [ 368.460952][ T9801] program syz.2.953 not setting count and/or reply_len properly [ 368.488721][ T5795] Buffer I/O error on dev loop6, logical block 0, async page read [ 368.502384][ T9] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:20> initialized [ 368.577645][ T5795] Buffer I/O error on dev loop6, logical block 0, async page read [ 368.596058][ T9] usb 3-1: USB disconnect, device number 20 [ 368.661740][ T5795] Dev loop6: unable to read RDB block 0 [ 368.676969][ T5795] loop6: unable to read partition table [ 368.702665][ T9806] netlink: 'syz.2.955': attribute type 4 has an invalid length. [ 368.727893][ T9791] ldm_validate_partition_table(): Disk read failed. [ 368.758138][ T9807] capability: warning: `syz.2.955' uses 32-bit capabilities (legacy support in use) [ 368.804889][ T9791] Dev loop6: unable to read RDB block 0 [ 368.855941][ T9791] loop6: unable to read partition table [ 368.930329][ T9791] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 368.960195][ T29] audit: type=1400 audit(1771961411.913:514): avc: denied { create } for pid=9808 comm="syz.2.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 368.970898][ T9790] veth0: left promiscuous mode [ 369.016698][ T29] audit: type=1400 audit(1771961411.973:515): avc: denied { bind } for pid=9808 comm="syz.2.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 369.037873][ T29] audit: type=1400 audit(1771961411.973:516): avc: denied { connect } for pid=9808 comm="syz.2.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 369.378609][ T9815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.958'. [ 369.804976][ T9822] tmpfs: Bad value for 'nr_inodes' [ 370.107156][ T9826] affs: No valid root block on device nullb0 [ 370.115516][ T29] audit: type=1400 audit(1771961413.073:517): avc: denied { getopt } for pid=9824 comm="syz.5.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 370.243400][ T29] audit: type=1400 audit(1771961413.093:518): avc: denied { watch } for pid=9824 comm="syz.5.961" path="/15/file0" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 370.316969][ T9835] Bluetooth: hci7: Frame reassembly failed (-84) [ 371.065993][ T5129] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 371.079961][ T5129] CPU: 1 UID: 0 PID: 5129 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.079997][ T5129] Tainted: [L]=SOFTLOCKUP [ 371.080003][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.080015][ T5129] Workqueue: hci5 hci_rx_work [ 371.080047][ T5129] Call Trace: [ 371.080053][ T5129] [ 371.080060][ T5129] dump_stack_lvl+0x100/0x190 [ 371.080091][ T5129] sysfs_warn_dup.cold+0x1c/0x28 [ 371.080116][ T5129] sysfs_create_dir_ns+0x24b/0x2b0 [ 371.080143][ T5129] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 371.080169][ T5129] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 371.080191][ T5129] kobject_add_internal+0x2c8/0x930 [ 371.080215][ T5129] kobject_add+0x16a/0x1e0 [ 371.080234][ T5129] ? __pfx_kobject_add+0x10/0x10 [ 371.080252][ T5129] ? preempt_schedule_thunk+0x16/0x30 [ 371.080278][ T5129] ? kobject_put+0xb9/0x640 [ 371.080297][ T5129] ? _raw_spin_unlock+0x3e/0x50 [ 371.080328][ T5129] device_add+0x294/0x1950 [ 371.080353][ T5129] ? __pfx_dev_set_name+0x10/0x10 [ 371.080380][ T5129] ? __pfx_device_add+0x10/0x10 [ 371.080403][ T5129] ? mgmt_send_event_skb+0x2fb/0x460 [ 371.080437][ T5129] hci_conn_add_sysfs+0x1a3/0x260 [ 371.080457][ T5129] le_conn_complete_evt+0x11cb/0x1f40 [ 371.080491][ T5129] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 371.080535][ T5129] hci_le_conn_complete_evt+0x23c/0x3a0 [ 371.080580][ T5129] ? skb_pull_data+0x15f/0x1e0 [ 371.080607][ T5129] hci_le_meta_evt+0x34a/0x5f0 [ 371.080636][ T5129] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 371.080667][ T5129] hci_event_packet+0x682/0x11c0 [ 371.080694][ T5129] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 371.080723][ T5129] ? __pfx_hci_event_packet+0x10/0x10 [ 371.080751][ T5129] ? kcov_remote_start+0x374/0x660 [ 371.080775][ T5129] ? lockdep_hardirqs_on+0x78/0x100 [ 371.080798][ T5129] hci_rx_work+0x451/0xfc0 [ 371.080830][ T5129] process_one_work+0x9d7/0x1920 [ 371.080861][ T5129] ? __pfx_process_one_work+0x10/0x10 [ 371.080902][ T5129] ? __pfx_hci_rx_work+0x10/0x10 [ 371.080934][ T5129] worker_thread+0x5da/0xe40 [ 371.080962][ T5129] ? __pfx_worker_thread+0x10/0x10 [ 371.080985][ T5129] ? kthread+0x13a/0x450 [ 371.081003][ T5129] ? __pfx_worker_thread+0x10/0x10 [ 371.081021][ T5129] kthread+0x370/0x450 [ 371.081037][ T5129] ? __pfx_kthread+0x10/0x10 [ 371.081057][ T5129] ret_from_fork+0x754/0xd80 [ 371.081076][ T5129] ? __pfx_ret_from_fork+0x10/0x10 [ 371.081096][ T5129] ? __switch_to+0x7b4/0x1120 [ 371.081119][ T5129] ? __pfx_kthread+0x10/0x10 [ 371.081139][ T5129] ret_from_fork_asm+0x1a/0x30 [ 371.081176][ T5129] [ 371.081363][ T5129] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 371.394379][ T5129] Bluetooth: hci5: failed to register connection device [ 371.879112][ T9872] binder: 9863:9872 ioctl c0306201 200000000040 returned -22 [ 372.312599][ T5129] Bluetooth: hci7: command 0x1003 tx timeout [ 372.329133][ T51] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 372.410501][ T29] audit: type=1400 audit(1771961415.364:519): avc: denied { mount } for pid=9873 comm="syz.6.967" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 372.992106][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.996940][ T977] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 373.078442][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 373.099410][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 373.111552][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 373.126324][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 373.345668][ T29] audit: type=1326 audit(1771961416.254:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9889 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d879c629 code=0x7ffc0000 [ 373.391455][ T29] audit: type=1326 audit(1771961416.254:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9889 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d879c629 code=0x7ffc0000 [ 373.392303][ T977] usb 6-1: Using ep0 maxpacket: 16 [ 373.416581][ T29] audit: type=1326 audit(1771961416.254:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9889 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83d879c629 code=0x7ffc0000 [ 373.436413][ T977] usb 6-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 373.464523][ T29] audit: type=1326 audit(1771961416.254:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9889 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d879c629 code=0x7ffc0000 [ 373.530302][ T29] audit: type=1326 audit(1771961416.254:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9889 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f83d879c629 code=0x7ffc0000 [ 373.531558][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 373.596412][ T9902] xt_hashlimit: max too large, truncated to 1048576 [ 373.609936][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 373.622003][ T977] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 373.646446][ T29] audit: type=1326 audit(1771961416.254:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9889 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d879c629 code=0x7ffc0000 [ 373.647576][ T977] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.695563][ T977] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 373.708700][ T977] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 373.723750][ T29] audit: type=1326 audit(1771961416.254:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9889 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83d879c629 code=0x7ffc0000 [ 373.778749][ T977] usb 6-1: Manufacturer: syz [ 373.852651][ T5913] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 373.914101][ T977] usb 6-1: config 0 descriptor?? [ 373.991892][ T5913] usb 1-1: device descriptor read/64, error -71 [ 374.071138][ T9913] loop6: detected capacity change from 0 to 2640 [ 374.096515][ T9913] buffer_io_error: 27 callbacks suppressed [ 374.096531][ T9913] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.144348][ T9913] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.169162][ T9913] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.285782][ T5913] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 374.289601][ T9913] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.316028][ T9922] veth0: entered promiscuous mode [ 374.321936][ T9913] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.330901][ T9913] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.339743][ T9913] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.368176][ T977] rc_core: IR keymap rc-hauppauge not found [ 374.382968][ T977] Registered IR keymap rc-empty [ 374.402615][ T977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.468608][ T5913] usb 1-1: device descriptor read/64, error -71 [ 374.692332][ T9913] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.712349][ T977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.729963][ T9913] ldm_validate_partition_table(): Disk read failed. [ 374.736665][ T9913] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.766222][ T9913] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.777504][ T977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 374.798063][ T9913] Dev loop6: unable to read RDB block 0 [ 374.803550][ T5913] usb usb1-port1: attempt power cycle [ 374.810425][ T977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input19 [ 374.852170][ T977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.854889][ T9913] loop6: unable to read partition table [ 374.920581][ T9913] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 374.956533][ T977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.995509][ T977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.031434][ T977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.038169][ T9911] veth0: left promiscuous mode [ 375.064103][ T5177] ldm_validate_partition_table(): Disk read failed. [ 375.073297][ T977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.080411][ T5177] Dev loop6: unable to read RDB block 0 [ 375.080531][ T5177] loop6: unable to read partition table [ 375.136510][ T977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.155944][ T977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.187633][ T5913] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 375.198350][ T977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.220222][ T5913] usb 1-1: device descriptor read/8, error -71 [ 375.242093][ T977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.286771][ T977] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.329797][ T977] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 375.462803][ T977] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 375.551166][ T5913] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 375.659077][ T5913] usb 1-1: device descriptor read/8, error -71 [ 375.738453][ T977] usb 6-1: USB disconnect, device number 2 [ 375.789022][ T5913] usb usb1-port1: unable to enumerate USB device [ 375.904023][ T9949] netlink: 'syz.5.980': attribute type 2 has an invalid length. [ 375.912013][ T9949] netlink: 'syz.5.980': attribute type 5 has an invalid length. [ 376.321321][ T5129] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 377.948947][ T9977] bridge0: entered promiscuous mode [ 377.955373][ T9977] macvlan2: entered promiscuous mode [ 377.986675][ T30] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 378.166594][ T30] usb 1-1: device descriptor read/64, error -71 [ 378.986741][ T30] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 379.204995][ T30] usb 1-1: device descriptor read/64, error -71 [ 379.570791][ T30] usb usb1-port1: attempt power cycle [ 380.194835][ T30] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 380.197153][T10009] Mount JFS Failure: -5 [ 380.390410][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 380.390422][ T29] audit: type=1400 audit(1771961678.509:529): avc: denied { ioctl } for pid=10004 comm="syz.5.993" path="socket:[31046]" dev="sockfs" ino=31046 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 380.697586][ T30] usb 1-1: device descriptor read/8, error -71 [ 381.055355][ T30] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 381.514941][ T2742] block nbd3: Possible stuck request ffff888028ba0000: control (read@0,1024B). Runtime 60 seconds [ 381.525673][ T2742] block nbd3: Possible stuck request ffff888028ba0200: control (read@1024,1024B). Runtime 60 seconds [ 381.537519][ T2742] block nbd3: Possible stuck request ffff888028ba0400: control (read@2048,1024B). Runtime 60 seconds [ 381.548429][ T2742] block nbd3: Possible stuck request ffff888028ba0600: control (read@3072,1024B). Runtime 60 seconds [ 381.671229][T10016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.994'. [ 381.801190][ T30] usb 1-1: device not accepting address 35, error -71 [ 381.836374][ T30] usb usb1-port1: unable to enumerate USB device [ 382.664238][ T5129] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 382.674155][ T5129] CPU: 1 UID: 0 PID: 5129 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.674187][ T5129] Tainted: [L]=SOFTLOCKUP [ 382.674194][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.674207][ T5129] Workqueue: hci6 hci_rx_work [ 382.674239][ T5129] Call Trace: [ 382.674245][ T5129] [ 382.674253][ T5129] dump_stack_lvl+0x100/0x190 [ 382.674285][ T5129] sysfs_warn_dup.cold+0x1c/0x28 [ 382.674312][ T5129] sysfs_create_dir_ns+0x24b/0x2b0 [ 382.674340][ T5129] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 382.674366][ T5129] ? find_held_lock+0x2b/0x80 [ 382.674395][ T5129] ? kobject_add_internal+0x25f/0x930 [ 382.674418][ T5129] ? kobject_add_internal+0x25f/0x930 [ 382.674440][ T5129] ? do_raw_spin_unlock+0x145/0x1e0 [ 382.674460][ T5129] kobject_add_internal+0x2c8/0x930 [ 382.674483][ T5129] kobject_add+0x16a/0x1e0 [ 382.674502][ T5129] ? __pfx_kobject_add+0x10/0x10 [ 382.674520][ T5129] ? class_to_subsys+0x10f/0x150 [ 382.674547][ T5129] ? kobject_put+0xb9/0x640 [ 382.674566][ T5129] ? _raw_spin_unlock+0x28/0x50 [ 382.674595][ T5129] device_add+0x294/0x1950 [ 382.674618][ T5129] ? __pfx_dev_set_name+0x10/0x10 [ 382.674641][ T5129] ? __pfx_device_add+0x10/0x10 [ 382.674660][ T5129] ? mgmt_send_event_skb+0x2fb/0x460 [ 382.674691][ T5129] hci_conn_add_sysfs+0x1a3/0x260 [ 382.674709][ T5129] le_conn_complete_evt+0x11cb/0x1f40 [ 382.674740][ T5129] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 382.674772][ T5129] hci_le_conn_complete_evt+0x23c/0x3a0 [ 382.674799][ T5129] ? skb_pull_data+0x15f/0x1e0 [ 382.674824][ T5129] hci_le_meta_evt+0x34a/0x5f0 [ 382.674850][ T5129] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 382.674879][ T5129] hci_event_packet+0x682/0x11c0 [ 382.674903][ T5129] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 382.674930][ T5129] ? __pfx_hci_event_packet+0x10/0x10 [ 382.674956][ T5129] ? kcov_remote_start+0x374/0x660 [ 382.674980][ T5129] ? lockdep_hardirqs_on+0x78/0x100 [ 382.675003][ T5129] hci_rx_work+0x451/0xfc0 [ 382.675035][ T5129] process_one_work+0x9d7/0x1920 [ 382.675067][ T5129] ? __pfx_process_one_work+0x10/0x10 [ 382.675096][ T5129] ? __pfx_hci_rx_work+0x10/0x10 [ 382.675125][ T5129] worker_thread+0x5da/0xe40 [ 382.675152][ T5129] ? __pfx_worker_thread+0x10/0x10 [ 382.675172][ T5129] ? kthread+0x13a/0x450 [ 382.675187][ T5129] ? __pfx_worker_thread+0x10/0x10 [ 382.675205][ T5129] kthread+0x370/0x450 [ 382.675221][ T5129] ? __pfx_kthread+0x10/0x10 [ 382.675240][ T5129] ret_from_fork+0x754/0xd80 [ 382.675260][ T5129] ? __pfx_ret_from_fork+0x10/0x10 [ 382.675280][ T5129] ? __switch_to+0x7b4/0x1120 [ 382.675303][ T5129] ? __pfx_kthread+0x10/0x10 [ 382.675321][ T5129] ret_from_fork_asm+0x1a/0x30 [ 382.675357][ T5129] [ 382.676541][ T5129] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 382.962139][ T5129] Bluetooth: hci6: failed to register connection device [ 382.994550][T10030] netlink: 52 bytes leftover after parsing attributes in process `syz.5.998'. [ 386.680014][T10056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1005'. [ 386.795883][T10056] 9pnet_fd: Insufficient options for proto=fd [ 387.936426][ T9661] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 388.109651][ T9661] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.142428][ T9661] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 388.192829][ T9661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.212697][ T9661] usb 3-1: config 0 descriptor?? [ 388.311207][ T29] audit: type=1400 audit(1771961686.258:530): avc: denied { append } for pid=10062 comm="syz.0.1008" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 388.316323][T10063] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 388.439851][T10066] Mount JFS Failure: -5 [ 388.713471][ T9661] hid_parser_main: 3 callbacks suppressed [ 388.713492][ T9661] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0 [ 388.768833][ T9661] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0 [ 388.778517][ T9661] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0 [ 388.801870][ T9661] konepure 0003:1E7D:2DB4.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 389.006049][T10071] syzkaller0: entered promiscuous mode [ 389.014740][T10071] syzkaller0: entered allmulticast mode [ 389.015901][T10072] netlink: 'syz.0.1010': attribute type 1 has an invalid length. [ 389.749635][T10080] syzkaller0: entered promiscuous mode [ 389.761034][T10080] syzkaller0: entered allmulticast mode [ 390.881203][ T29] audit: type=1400 audit(1771961688.271:531): avc: denied { read } for pid=10091 comm="syz.7.1017" lport=41129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 390.907607][ T5804] usb 3-1: USB disconnect, device number 21 [ 391.127124][ T29] audit: type=1400 audit(1771961688.888:532): avc: denied { module_load } for pid=10099 comm="syz.2.1018" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=31227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 391.232250][T10103] Invalid ELF header magic: != ELF [ 391.500222][ T5873] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 391.859097][ T5873] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 392.155233][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.163464][ T5873] usb 1-1: Product: syz [ 392.174453][ T5873] usb 1-1: Manufacturer: syz [ 392.182187][ T5873] usb 1-1: SerialNumber: syz [ 392.205329][ T5873] usb 1-1: config 0 descriptor?? [ 392.291466][T10116] netlink: 'syz.2.1023': attribute type 4 has an invalid length. [ 392.572211][T10116] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1023'. [ 392.605264][ T5873] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 393.365754][ T5129] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 393.588852][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 393.689770][T10132] Invalid ELF header magic: != ELF [ 393.714850][ T29] audit: type=1400 audit(1771961691.294:533): avc: denied { module_load } for pid=10130 comm="syz.2.1028" path=2F6D656D66643A2D42D59A707070F0202864656C6574656429 dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 393.879801][T10136] netlink: 'syz.6.1025': attribute type 4 has an invalid length. [ 395.384106][ T5873] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 395.428349][T10136] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1025'. [ 396.664075][ T5873] usb 1-1: USB disconnect, device number 36 [ 397.691970][T10161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1033'. [ 397.710381][T10136] .`: renamed from bond0 (while UP) [ 398.461772][T10159] tipc: Started in network mode [ 398.466650][T10159] tipc: Node identity 4, cluster identity 4711 [ 398.472850][T10159] tipc: Node number set to 4 [ 398.519620][T10170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1035'. [ 398.548752][T10170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1035'. [ 399.414057][ T29] audit: type=1400 audit(1771961696.647:534): avc: denied { read write } for pid=10180 comm="syz.7.1039" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 399.668747][ T29] audit: type=1400 audit(1771961696.647:535): avc: denied { ioctl open } for pid=10180 comm="syz.7.1039" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 400.086879][ T977] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 400.210204][T10195] openvswitch: netlink: Flow actions attr not present in new flow. [ 400.232900][ T977] usb 6-1: device descriptor read/64, error -71 [ 400.273865][ T5804] libceph: connect (1)[c::]:6789 error -101 [ 400.301670][ T5804] libceph: mon0 (1)[c::]:6789 connect error [ 400.398329][T10195] ceph: No mds server is up or the cluster is laggy [ 400.509373][ T977] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 400.653662][T10208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1045'. [ 400.682005][ T977] usb 6-1: device descriptor read/64, error -71 [ 400.694962][T10206] binder: BINDER_SET_CONTEXT_MGR already set [ 400.709151][T10206] binder: 10205:10206 ioctl 4018620d 200000000100 returned -16 [ 400.822649][ T977] usb usb6-port1: attempt power cycle [ 401.299984][T10211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=10211 comm=syz.7.1046 [ 401.358502][ T977] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 401.443028][ T977] usb 6-1: device descriptor read/8, error -71 [ 402.045183][ T977] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 402.126856][T10218] hpfs: hpfs_map_sector(): read error [ 402.436399][ T977] usb 6-1: device descriptor read/8, error -71 [ 402.575885][ T977] usb usb6-port1: unable to enumerate USB device [ 403.550115][ T51] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 404.195380][T10243] syzkaller1: entered promiscuous mode [ 404.208958][T10243] syzkaller1: entered allmulticast mode [ 404.499888][ T29] audit: type=1400 audit(1771961701.401:536): avc: denied { create } for pid=10252 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 405.039748][ T29] audit: type=1400 audit(1771961701.401:537): avc: denied { connect } for pid=10252 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 405.332686][T10261] netlink: 'syz.0.1057': attribute type 4 has an invalid length. [ 405.360894][T10261] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1057'. [ 405.387552][T10263] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1058'. [ 406.340974][T10266] netlink: 'syz.5.1059': attribute type 2 has an invalid length. [ 406.968729][T10276] fuse: Unknown parameter '' [ 407.743497][T10284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10284 comm=syz.0.1064 [ 408.323585][T10288] 9p: Bad value for 'rfdno' [ 408.332015][ T29] audit: type=1400 audit(1771961704.995:538): avc: denied { getopt } for pid=10287 comm="syz.7.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 409.160447][ T29] audit: type=1400 audit(1771961705.772:539): avc: denied { getopt } for pid=10282 comm="syz.6.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 409.343723][T10310] trusted_key: encrypted_key: key user:syz not found [ 410.378212][T10334] netlink: 'syz.6.1074': attribute type 4 has an invalid length. [ 410.431625][T10334] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1074'. [ 411.134224][ T5852] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 411.366387][ T5852] usb 6-1: device descriptor read/64, error -71 [ 411.520489][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1080'. [ 411.578707][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1080'. [ 411.676837][ T5852] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 411.796260][T10353] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1081'. [ 411.858169][ T5852] usb 6-1: device descriptor read/64, error -71 [ 411.977004][T10355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=10355 comm=syz.2.1083 [ 411.980900][ T5852] usb usb6-port1: attempt power cycle [ 412.374480][T10364] fuse: Bad value for 'fd' [ 412.413476][ T5852] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 412.434770][ T29] audit: type=1400 audit(1771961708.795:540): avc: denied { create } for pid=10361 comm="syz.0.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 412.477532][ T29] audit: type=1400 audit(1771961708.795:541): avc: denied { setattr } for pid=10361 comm="syz.0.1085" name="" dev="pipefs" ino=30628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 412.563655][ T5852] usb 6-1: device descriptor read/8, error -71 [ 412.585326][ T29] audit: type=1400 audit(1771961708.795:542): avc: denied { ioctl } for pid=10361 comm="syz.0.1085" path="socket:[30632]" dev="sockfs" ino=30632 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 412.707632][T10369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1088'. [ 412.862581][ T5852] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 412.906572][ T5852] usb 6-1: device descriptor read/8, error -71 [ 413.063335][ T5852] usb usb6-port1: unable to enumerate USB device [ 413.591088][T10376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1089'. [ 414.043681][ T2742] block nbd3: Possible stuck request ffff888028ba0000: control (read@0,1024B). Runtime 90 seconds [ 414.054496][ T2742] block nbd3: Possible stuck request ffff888028ba0200: control (read@1024,1024B). Runtime 90 seconds [ 414.065367][ T2742] block nbd3: Possible stuck request ffff888028ba0400: control (read@2048,1024B). Runtime 90 seconds [ 414.076250][ T2742] block nbd3: Possible stuck request ffff888028ba0600: control (read@3072,1024B). Runtime 90 seconds [ 414.200159][T10383] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 414.647835][ T29] audit: type=1400 audit(1771961710.910:543): avc: denied { accept } for pid=10384 comm="syz.5.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 414.806832][ T29] audit: type=1400 audit(1771961710.910:544): avc: denied { create } for pid=10384 comm="syz.5.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 414.987121][ T5808] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 415.156586][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1092'. [ 415.590795][T10407] netlink: 'syz.2.1097': attribute type 4 has an invalid length. [ 415.598599][T10407] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1097'. [ 417.257586][T10430] Mount JFS Failure: -5 [ 418.943377][ T10] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 419.538172][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 420.003878][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.039147][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 420.069213][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.086163][T10466] netlink: 'syz.5.1114': attribute type 4 has an invalid length. [ 420.093967][T10466] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1114'. [ 420.194506][T10466] .`: renamed from bond0 (while UP) [ 420.279651][T10469] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1115'. [ 420.338056][ T10] usb 3-1: usb_control_msg returned -32 [ 420.344970][ T10] usbtmc 3-1:16.0: can't read capabilities [ 421.454388][T10478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.550333][T10478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.740275][ T5804] usb 3-1: USB disconnect, device number 22 [ 422.778739][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'. [ 422.972369][T10501] netlink: 'syz.5.1122': attribute type 16 has an invalid length. [ 422.991063][T10501] netlink: 'syz.5.1122': attribute type 17 has an invalid length. [ 424.587511][ T977] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 424.835946][ T977] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 425.300950][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.308943][ T977] usb 1-1: Product: syz [ 425.326639][ T977] usb 1-1: Manufacturer: syz [ 425.331268][ T977] usb 1-1: SerialNumber: syz [ 426.025990][ T5852] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 426.248396][ T977] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 426.263080][ T977] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 426.460182][ T5852] usb 3-1: config 24 has 1 interface, different from the descriptor's value: 2 [ 426.655074][ T5852] usb 3-1: config 24 interface 0 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 426.679412][ T5852] usb 3-1: config 24 interface 0 has no altsetting 0 [ 426.747505][ T5852] usb 3-1: config 24 interface 0 has no altsetting 1 [ 426.796129][ T5852] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=70.25 [ 426.816060][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.843702][ T5852] usb 3-1: Product: syz [ 426.849354][ T5852] usb 3-1: Manufacturer: syz [ 426.855323][ T5852] usb 3-1: SerialNumber: syz [ 427.047340][ T29] audit: type=1326 audit(1771961722.515:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3559c629 code=0x7fc00000 [ 427.172491][T10511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.185019][T10511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.212589][ T10] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 429.438352][ T5852] usb 3-1: selecting invalid altsetting 0 [ 429.474224][ T5852] usb 3-1: selecting invalid altsetting 0 [ 429.488226][ T5852] usb 3-1: selecting invalid altsetting 0 [ 429.497947][ T5852] usb 3-1: selecting invalid altsetting 0 [ 429.530970][ T5852] usb 3-1: selecting invalid altsetting 0 [ 429.541756][ T5852] usb 3-1: selecting invalid altsetting 0 [ 429.839162][ T977] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 429.887817][ T977] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 430.100073][ T977] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 430.114274][ T51] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 430.125547][ T977] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 430.160095][ T29] audit: type=1326 audit(1771961725.332:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9b3553da19 code=0x7fc00000 [ 430.207409][ T5852] usb 3-1: USB disconnect, device number 23 [ 430.282239][ T977] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 430.347839][ T977] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 430.447669][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:24.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.500770][ T977] usb 1-1: USB disconnect, device number 37 [ 430.690960][T10581] blk_print_req_error: 7 callbacks suppressed [ 430.691022][T10581] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.711898][T10581] buffer_io_error: 27 callbacks suppressed [ 430.711933][T10581] Buffer I/O error on dev nbd2, logical block 0, async page read [ 430.732986][T10581] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.744170][T10581] Buffer I/O error on dev nbd2, logical block 0, async page read [ 430.754251][T10581] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.767926][T10581] Buffer I/O error on dev nbd2, logical block 0, async page read [ 430.778154][T10581] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.787829][T10581] Buffer I/O error on dev nbd2, logical block 0, async page read [ 430.796466][T10581] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.807594][T10581] Buffer I/O error on dev nbd2, logical block 0, async page read [ 430.817713][T10581] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.832632][T10581] Buffer I/O error on dev nbd2, logical block 0, async page read [ 430.843235][T10581] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.854356][T10581] Buffer I/O error on dev nbd2, logical block 0, async page read [ 430.867289][T10581] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.878153][T10581] Buffer I/O error on dev nbd2, logical block 0, async page read [ 430.886052][T10581] ldm_validate_partition_table(): Disk read failed. [ 430.897268][T10581] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.908370][T10581] Buffer I/O error on dev nbd2, logical block 0, async page read [ 430.918647][T10581] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.932683][T10581] Buffer I/O error on dev nbd2, logical block 0, async page read [ 430.940841][T10581] Dev nbd2: unable to read RDB block 0 [ 430.954040][T10581] nbd2: unable to read partition table [ 430.967955][T10581] Mount JFS Failure: -5 [ 431.208709][ T977] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 431.389811][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 431.482068][ T977] usb 1-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 431.503518][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.539317][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 432.554960][ T977] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 432.564951][ T977] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.591338][ T977] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 432.717906][ T977] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 432.726500][ T977] usb 1-1: Manufacturer: syz [ 432.771154][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 432.791180][ T977] usb 1-1: config 0 descriptor?? [ 433.151397][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.173220][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 433.243008][T10603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1151'. [ 433.255952][ T10] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 433.277576][ T10] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 433.309538][ T10] usb 6-1: Manufacturer: syz [ 433.369327][ T10] usb 6-1: config 0 descriptor?? [ 433.388457][ T977] rc_core: IR keymap rc-hauppauge not found [ 433.394430][ T977] Registered IR keymap rc-empty [ 433.428073][ T977] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.463051][ T977] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.508681][ T977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 433.558402][ T977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 433.934017][ T977] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.179621][ T977] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.202138][ T977] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.222149][ T977] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.285975][ T977] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.350374][ T977] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.424787][ T977] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.462054][ T977] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.500300][ T977] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.535022][ T977] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.807164][ T977] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 434.841424][ T977] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 434.879792][ T977] usb 1-1: USB disconnect, device number 38 [ 436.631180][ T5865] usb 6-1: USB disconnect, device number 12 [ 438.492236][ T5913] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 438.500134][ T29] audit: type=1400 audit(1771961733.063:547): avc: denied { read } for pid=10646 comm="syz.5.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 438.520732][ T5913] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 438.529915][ T5913] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 438.595202][T10654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=10654 comm=syz.7.1163 [ 438.608512][ T5913] hid-generic 0003:0004:0000.000C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 438.626238][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.838494][T10655] fido_id[10655]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 438.929781][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1166'. [ 439.443218][T10668] fuse: Unknown parameter '' [ 440.525070][ T12] Bluetooth: hci7: Frame reassembly failed (-84) [ 440.666447][T10671] syzkaller0: entered promiscuous mode [ 440.672825][T10671] syzkaller0: entered allmulticast mode [ 441.568015][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 441.622171][ T29] audit: type=1400 audit(1771961736.142:548): avc: denied { append } for pid=10690 comm="syz.2.1174" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 442.160933][ T5913] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 442.433427][ T5913] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 442.531550][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 442.554259][ T5913] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 442.586959][ T5913] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 442.606855][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.626070][ T5913] usb 1-1: Product: syz [ 442.631265][ T5913] usb 1-1: Manufacturer: syz [ 442.636117][ T5913] usb 1-1: SerialNumber: syz [ 442.645944][ T5913] usb 1-1: config 0 descriptor?? [ 442.656117][T10702] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 442.664713][T10702] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 442.674701][ T5913] usb 1-1: ucan: probing device on interface #0 [ 442.727119][ T5808] Bluetooth: hci7: command 0x1003 tx timeout [ 442.733385][ T51] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 442.859590][T10711] FAULT_INJECTION: forcing a failure. [ 442.859590][T10711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.885116][T10711] CPU: 0 UID: 0 PID: 10711 Comm: syz.6.1179 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.885143][T10711] Tainted: [L]=SOFTLOCKUP [ 442.885148][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.885158][T10711] Call Trace: [ 442.885164][T10711] [ 442.885174][T10711] dump_stack_lvl+0x100/0x190 [ 442.885206][T10711] should_fail_ex.cold+0x5/0xa [ 442.885227][T10711] _copy_from_user+0x2e/0xd0 [ 442.885253][T10711] copy_msghdr_from_user+0x9f/0x4f0 [ 442.885279][T10711] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 442.885307][T10711] ? __pfx__kstrtoull+0x10/0x10 [ 442.885330][T10711] ___sys_sendmsg+0x106/0x1e0 [ 442.885353][T10711] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.885386][T10711] ? find_held_lock+0x2b/0x80 [ 442.885423][T10711] __sys_sendmmsg+0x205/0x430 [ 442.885443][T10711] ? __pfx___sys_sendmmsg+0x10/0x10 [ 442.885467][T10711] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 442.885497][T10711] ? fput+0x79/0x100 [ 442.885515][T10711] ? ksys_write+0x1ac/0x250 [ 442.885540][T10711] ? __pfx_ksys_write+0x10/0x10 [ 442.885568][T10711] __x64_sys_sendmmsg+0x9c/0x100 [ 442.885585][T10711] ? lockdep_hardirqs_on+0x78/0x100 [ 442.885601][T10711] do_syscall_64+0x106/0xf80 [ 442.885617][T10711] ? clear_bhb_loop+0x40/0x90 [ 442.885639][T10711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.885657][T10711] RIP: 0033:0x7f83d879c629 [ 442.885671][T10711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.885687][T10711] RSP: 002b:00007f83d69f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 442.885703][T10711] RAX: ffffffffffffffda RBX: 00007f83d8a16090 RCX: 00007f83d879c629 [ 442.885713][T10711] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000006 [ 442.885724][T10711] RBP: 00007f83d69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 442.885734][T10711] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 442.885744][T10711] R13: 00007f83d8a16128 R14: 00007f83d8a16090 R15: 00007fff24f0aa58 [ 442.885768][T10711] [ 443.141484][ T29] audit: type=1400 audit(1771961737.536:549): avc: denied { write } for pid=10713 comm="syz.2.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 443.352467][ T5913] usb 1-1: ucan: device reported invalid device info [ 443.359874][ T5913] usb 1-1: ucan: probe failed; try to update the device firmware [ 443.616521][T10725] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 443.861438][ T977] usb 1-1: USB disconnect, device number 39 [ 443.880737][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 444.174439][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 444.202085][ T24] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 444.210190][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.265077][ T24] usb 6-1: config 0 has no interface number 0 [ 444.271202][ T24] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 444.329710][ T24] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 444.344232][T10742] mkiss: ax0: crc mode is auto. [ 444.376386][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.403190][ T24] usb 6-1: Product: syz [ 444.429281][ T24] usb 6-1: Manufacturer: syz [ 444.433912][ T24] usb 6-1: SerialNumber: syz [ 444.458191][ T24] usb 6-1: config 0 descriptor?? [ 444.485872][ T24] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 444.510880][ T24] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 444.710049][ T24] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 445.251654][T10750] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.1186'. [ 445.261367][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 445.361746][ T24] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 446.189345][ T2742] block nbd3: Possible stuck request ffff888028ba0000: control (read@0,1024B). Runtime 120 seconds [ 446.209107][ T2742] block nbd3: Possible stuck request ffff888028ba0200: control (read@1024,1024B). Runtime 120 seconds [ 446.227165][ T2742] block nbd3: Possible stuck request ffff888028ba0400: control (read@2048,1024B). Runtime 120 seconds [ 446.240955][ T2742] block nbd3: Possible stuck request ffff888028ba0600: control (read@3072,1024B). Runtime 120 seconds [ 446.582370][ T29] audit: type=1400 audit(1771961740.793:550): avc: denied { read } for pid=10757 comm="syz.0.1192" path="socket:[34032]" dev="sockfs" ino=34032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 446.606629][T10758] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.613891][T10758] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.745152][ T5852] usb 6-1: USB disconnect, device number 13 [ 446.774700][T10758] bridge0: entered allmulticast mode [ 446.780095][ T29] audit: type=1400 audit(1771961740.943:551): avc: denied { accept } for pid=10757 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 447.141008][ T977] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 447.326900][T10758] bridge_slave_1: left allmulticast mode [ 447.356526][T10766] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1194'. [ 447.365716][T10758] bridge_slave_1: left promiscuous mode [ 447.387506][T10758] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.507898][T10771] netlink: 'syz.2.1189': attribute type 4 has an invalid length. [ 447.518044][T10771] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1189'. [ 447.703734][T10758] bridge_slave_0: left allmulticast mode [ 447.709868][T10758] bridge_slave_0: left promiscuous mode [ 447.776573][ T977] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 447.789389][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.808168][T10758] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.819659][ T977] usb 1-1: Product: syz [ 447.831112][ T977] usb 1-1: Manufacturer: syz [ 447.842731][ T977] usb 1-1: SerialNumber: syz [ 448.706322][T10781] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1196'. [ 449.244141][ T5913] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 449.294956][ T5913] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 449.701872][ T5852] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 450.056803][ T977] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 450.101747][ T977] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 450.146624][ T977] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 450.252239][ T5852] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 450.278667][ T977] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 450.310448][ T5852] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 450.347266][ T977] usb 1-1: USB disconnect, device number 40 [ 450.355523][ T5852] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 450.397102][ T5852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 450.426715][ T5852] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 450.437263][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 450.458018][ T5852] usb 3-1: Product: syz [ 450.465477][T10801] netlink: 840 bytes leftover after parsing attributes in process `syz.6.1200'. [ 450.490259][ T5852] usb 3-1: Manufacturer: syz [ 450.526884][ T5852] usb 3-1: SerialNumber: syz [ 450.528566][T10801] netlink: 'syz.6.1200': attribute type 1 has an invalid length. [ 450.558093][ T5852] usb 3-1: config 0 descriptor?? [ 450.577537][T10787] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 450.587124][ T5852] usb 3-1: selecting invalid altsetting 0 [ 450.612548][T10801] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1200'. [ 450.835326][T10802] netlink: 'syz.0.1199': attribute type 2 has an invalid length. [ 450.850800][T10786] usb 3-1: BOGUS urb xfer, pipe 0 != type 1 [ 450.934312][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 450.983253][ T24] usb 3-1: USB disconnect, device number 24 [ 451.169801][T10808] syzkaller0: entered promiscuous mode [ 451.188991][T10808] syzkaller0: entered allmulticast mode [ 451.428270][ T29] audit: type=1400 audit(1771961745.332:552): avc: denied { bind } for pid=10812 comm="syz.6.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 451.830978][ T51] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 452.332221][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 452.387004][T10834] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1209'. [ 452.555056][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 452.575339][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.589866][ T24] usb 3-1: Product: syz [ 452.636888][ T24] usb 3-1: Manufacturer: syz [ 452.991664][ T24] usb 3-1: SerialNumber: syz [ 453.097378][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 453.155492][ T5865] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 454.620038][ T5865] usb 3-1: Service connection timeout for: 256 [ 454.628911][ T5865] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 454.681101][ T5865] ath9k_htc: Failed to initialize the device [ 454.759864][ T5865] usb 3-1: ath9k_htc: USB layer deinitialized [ 454.786276][ T5913] usb 3-1: USB disconnect, device number 25 [ 454.968054][ T29] audit: type=1400 audit(1771961748.636:553): avc: denied { create } for pid=10866 comm="syz.6.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 455.005607][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1218'. [ 455.038043][T10867] openvswitch: netlink: Unknown nsh attribute 0 [ 455.113669][T10869] fuse: Unknown parameter '' [ 456.392500][ T5865] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 456.576317][ T5865] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.608974][ T5865] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 456.631521][ T5865] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.658789][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.667245][ T5865] usb 6-1: Product: syz [ 456.674593][ T5865] usb 6-1: Manufacturer: syz [ 456.682623][ T5865] usb 6-1: SerialNumber: syz [ 456.708221][ T5865] cdc_mbim 6-1:1.0: skipping garbage [ 456.863147][ T29] audit: type=1800 audit(1771961750.424:554): pid=10888 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1223" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 457.079371][T10883] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 457.287212][T10892] loop6: detected capacity change from 0 to 2640 [ 457.328754][T10892] buffer_io_error: 6 callbacks suppressed [ 457.328769][T10892] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.386990][T10892] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.415490][T10892] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.472047][T10892] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.527446][T10892] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.570363][T10892] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.590387][T10892] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.591512][ T29] audit: type=1400 audit(1771962007.103:555): avc: denied { bind } for pid=10891 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 457.598236][T10892] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.598254][T10892] ldm_validate_partition_table(): Disk read failed. [ 457.665316][ T29] audit: type=1400 audit(1771962007.103:556): avc: denied { name_bind } for pid=10891 comm="syz.2.1225" src=28260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 457.689616][ T29] audit: type=1400 audit(1771962007.103:557): avc: denied { node_bind } for pid=10891 comm="syz.2.1225" saddr=224.0.0.1 src=28260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 457.717416][T10892] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.725442][T10892] Buffer I/O error on dev loop6, logical block 0, async page read [ 457.733899][T10892] Dev loop6: unable to read RDB block 0 [ 457.750559][T10892] loop6: unable to read partition table [ 457.771211][T10892] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 457.860952][T10883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.901268][T10883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.943313][T10883] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 457.968922][ T5865] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 457.983128][ T5865] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 458.063174][ T5865] wwan wwan0: port wwan0mbim0 attached [ 458.107530][ T5865] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 3a:59:f2:8e:5d:46 [ 458.200186][ T5913] usb 6-1: USB disconnect, device number 14 [ 458.260555][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1226'. [ 458.290833][ T5913] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 458.371723][ T5913] wwan wwan0: port wwan0mbim0 disconnected [ 459.250586][ T29] audit: type=1400 audit(1771962008.629:558): avc: denied { ioctl } for pid=10915 comm="syz.6.1230" path="socket:[34884]" dev="sockfs" ino=34884 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 460.410744][T10937] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1234'. [ 460.599061][T10932] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 460.608079][T10932] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1232'. [ 460.860719][ T29] audit: type=1400 audit(1771962010.145:559): avc: denied { setopt } for pid=10945 comm="syz.7.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 460.909196][ T29] audit: type=1400 audit(1771962010.145:560): avc: denied { write } for pid=10945 comm="syz.7.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 460.955240][ T29] audit: type=1400 audit(1771962010.145:561): avc: denied { connect } for pid=10945 comm="syz.7.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 460.979050][ T29] audit: type=1400 audit(1771962010.154:562): avc: denied { write } for pid=10945 comm="syz.7.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 461.364976][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 461.483292][ T29] audit: type=1400 audit(1771962010.744:563): avc: denied { map } for pid=10964 comm="syz.5.1243" path="/dev/ttyS3" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 462.812728][ T5808] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 462.999114][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1247'. [ 463.052659][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1247'. [ 463.817644][ T5865] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 463.852385][ T5865] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 464.060034][T11011] fido_id[11011]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 464.074141][ T5913] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 464.146247][T11015] syzkaller0: entered promiscuous mode [ 464.152307][T11015] syzkaller0: entered allmulticast mode [ 464.213218][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1255'. [ 464.239973][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1255'. [ 464.260342][ T5913] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 464.289163][ T5913] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 464.299051][T11018] netlink: 'syz.6.1255': attribute type 11 has an invalid length. [ 464.319229][ T5913] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 464.332478][T11018] netlink: 'syz.6.1255': attribute type 13 has an invalid length. [ 464.342869][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.365412][T11010] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 464.382367][ T5913] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 465.009561][T11033] kvm: user requested TSC rate below hardware speed [ 465.617076][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 465.627020][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.627041][ T51] Tainted: [L]=SOFTLOCKUP [ 465.627045][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.627053][ T51] Workqueue: hci2 hci_rx_work [ 465.627075][ T51] Call Trace: [ 465.627080][ T51] [ 465.627085][ T51] dump_stack_lvl+0x100/0x190 [ 465.627104][ T51] sysfs_warn_dup.cold+0x1c/0x28 [ 465.627121][ T51] sysfs_create_dir_ns+0x24b/0x2b0 [ 465.627139][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 465.627153][ T51] ? find_held_lock+0x2b/0x80 [ 465.627167][ T51] ? kobject_add_internal+0x25f/0x930 [ 465.627181][ T51] ? kobject_add_internal+0x25f/0x930 [ 465.627197][ T51] ? do_raw_spin_unlock+0x145/0x1e0 [ 465.627212][ T51] kobject_add_internal+0x2c8/0x930 [ 465.627230][ T51] kobject_add+0x16a/0x1e0 [ 465.627242][ T51] ? __pfx_kobject_add+0x10/0x10 [ 465.627254][ T51] ? class_to_subsys+0x10f/0x150 [ 465.627272][ T51] ? kobject_put+0xb9/0x640 [ 465.627282][ T51] ? _raw_spin_unlock+0x28/0x50 [ 465.627302][ T51] device_add+0x294/0x1950 [ 465.627316][ T51] ? __pfx_dev_set_name+0x10/0x10 [ 465.627333][ T51] ? __pfx_device_add+0x10/0x10 [ 465.627348][ T51] ? mgmt_send_event_skb+0x2fb/0x460 [ 465.627369][ T51] hci_conn_add_sysfs+0x1a3/0x260 [ 465.627381][ T51] le_conn_complete_evt+0x11cb/0x1f40 [ 465.627401][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 465.627421][ T51] hci_le_conn_complete_evt+0x23c/0x3a0 [ 465.627437][ T51] ? skb_pull_data+0x15f/0x1e0 [ 465.627459][ T51] hci_le_meta_evt+0x34a/0x5f0 [ 465.627477][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 465.627496][ T51] hci_event_packet+0x682/0x11c0 [ 465.627513][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 465.627532][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 465.627550][ T51] ? kcov_remote_start+0x374/0x660 [ 465.627566][ T51] ? lockdep_hardirqs_on+0x78/0x100 [ 465.627581][ T51] hci_rx_work+0x451/0xfc0 [ 465.627600][ T51] process_one_work+0x9d7/0x1920 [ 465.627619][ T51] ? __pfx_process_one_work+0x10/0x10 [ 465.627635][ T51] ? __pfx_hci_rx_work+0x10/0x10 [ 465.627651][ T51] worker_thread+0x5da/0xe40 [ 465.627668][ T51] ? kthread+0x13a/0x450 [ 465.627677][ T51] ? __pfx_worker_thread+0x10/0x10 [ 465.627688][ T51] kthread+0x370/0x450 [ 465.627697][ T51] ? __pfx_kthread+0x10/0x10 [ 465.627708][ T51] ret_from_fork+0x754/0xd80 [ 465.627720][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 465.627731][ T51] ? __switch_to+0x7b4/0x1120 [ 465.627745][ T51] ? __pfx_kthread+0x10/0x10 [ 465.627755][ T51] ret_from_fork_asm+0x1a/0x30 [ 465.627776][ T51] [ 465.627792][ T51] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 465.906944][ T51] Bluetooth: hci2: failed to register connection device [ 466.099152][ T29] audit: type=1400 audit(1771962015.049:564): avc: denied { read append } for pid=11009 comm="syz.5.1252" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 467.464433][T11027] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 467.471006][T11027] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 467.485257][T11027] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 467.493396][T11027] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 467.499665][T11027] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 467.508855][T11027] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 467.514800][T11027] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 467.521964][T11027] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 467.532053][T11027] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 467.539502][T11027] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 467.546341][T11027] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 467.553153][T11027] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 467.561349][T11027] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 467.571274][T11027] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 467.578934][T11027] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 467.587033][T11027] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 467.593327][T11027] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 467.600327][T11027] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 467.609675][T11027] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 467.616951][T11027] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 467.624268][T11027] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 467.631922][T11027] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 467.663909][ T5873] usb 6-1: USB disconnect, device number 15 [ 467.925868][T11078] fuse: Unknown parameter '' [ 468.289663][ T5873] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 468.482653][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 469.063595][ T5873] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 469.093869][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.126160][T11084] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1268'. [ 469.135708][ T5873] usb 6-1: Product: syz [ 469.135729][ T5873] usb 6-1: Manufacturer: syz [ 469.141334][T11084] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1268'. [ 469.222944][ T5873] usb 6-1: SerialNumber: syz [ 469.273663][ T5873] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 469.303131][ T24] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 469.336271][T11092] loop7: detected capacity change from 0 to 7 [ 469.350709][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1271'. [ 469.367975][T11094] netlink: 'syz.7.1271': attribute type 30 has an invalid length. [ 469.458708][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1271'. [ 469.480549][T11101] netlink: 'syz.6.1269': attribute type 1 has an invalid length. [ 469.549981][T11101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.563277][T11073] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1266'. [ 469.563386][T11103] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1266'. [ 469.617360][T11099] netlink: 'syz.7.1271': attribute type 30 has an invalid length. [ 469.643771][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.660236][ T5808] Bluetooth: hci2: command 0x0406 tx timeout [ 469.667833][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 469.955896][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 469.962121][ T5808] Bluetooth: hci5: command 0x0c1a tx timeout [ 469.962142][ T5129] Bluetooth: hci3: command 0x0406 tx timeout [ 469.968849][ T5811] Bluetooth: hci6: command 0x0406 tx timeout [ 469.991173][ C1] blk_print_req_error: 6 callbacks suppressed [ 469.991191][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 470.007263][ C1] buffer_io_error: 11 callbacks suppressed [ 470.007273][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 470.053676][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.063080][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.072939][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.105239][T11092] Dev loop7: unable to read RDB block 7 [ 470.182693][ T29] audit: type=1326 audit(1771962018.877:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05d9c629 code=0x7fc00000 [ 470.219326][T11092] loop7: unable to read partition table [ 470.311531][ T5913] usb 6-1: USB disconnect, device number 16 [ 470.336962][T11092] loop7: partition table beyond EOD, truncated [ 470.430243][ T29] audit: type=1326 audit(1771962018.877:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5b05d9c629 code=0x7fc00000 [ 470.430739][ T24] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 470.473864][T11092] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 470.562133][ T29] audit: type=1326 audit(1771962018.877:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05d9c629 code=0x7fc00000 [ 470.580183][ T24] ath9k_htc: Failed to initialize the device [ 470.680279][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 470.697168][ T29] audit: type=1326 audit(1771962018.877:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05d9c629 code=0x7fc00000 [ 470.786708][ T5913] usb 6-1: ath9k_htc: USB layer deinitialized [ 471.307908][ T29] audit: type=1326 audit(1771962018.877:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05d9c629 code=0x7fc00000 [ 471.332939][ T29] audit: type=1326 audit(1771962018.877:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05d9c629 code=0x7fc00000 [ 471.357031][ T29] audit: type=1326 audit(1771962018.877:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05d9c629 code=0x7fc00000 [ 471.845051][ T29] audit: type=1326 audit(1771962018.877:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05d9c629 code=0x7fc00000 [ 471.880026][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 471.895172][ T5808] Bluetooth: hci2: command 0x0406 tx timeout [ 471.911428][ T29] audit: type=1326 audit(1771962018.877:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.7.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05d9c629 code=0x7fc00000 [ 472.134169][ T5811] Bluetooth: hci6: command 0x0406 tx timeout [ 472.146315][ T5808] Bluetooth: hci5: command 0x0c1a tx timeout [ 472.152435][ T5129] Bluetooth: hci3: command 0x0406 tx timeout [ 472.152444][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 472.507837][T11143] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1281'. [ 473.203154][ T5873] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 473.203407][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 473.375061][ T5873] usb 1-1: config 0 has an invalid interface number: 221 but max is 0 [ 473.467282][ T5873] usb 1-1: config 0 has no interface number 0 [ 473.494726][ T5873] usb 1-1: config 0 interface 221 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.522482][ T5873] usb 1-1: config 0 interface 221 has no altsetting 0 [ 473.536026][ T5873] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=10.00 [ 473.547537][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.706509][ T5873] usb 1-1: config 0 descriptor?? [ 473.816351][T11164] binder: 11159:11164 unknown command 0 [ 473.823686][T11164] binder: 11159:11164 ioctl c0306201 200000000280 returned -22 [ 474.097909][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 474.277105][ T5873] usbhid 1-1:0.221: can't add hid device: -71 [ 474.307528][ T5873] usbhid 1-1:0.221: probe with driver usbhid failed with error -71 [ 474.337896][ T5873] usb 1-1: USB disconnect, device number 41 [ 474.354426][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 474.360582][ T5811] Bluetooth: hci6: command 0x0406 tx timeout [ 474.369271][ T5808] Bluetooth: hci5: command 0x0c1a tx timeout [ 474.369678][ T5129] Bluetooth: hci3: command 0x0406 tx timeout [ 474.695953][ T5873] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 474.806902][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 475.167259][ T5873] usb 1-1: config 0 has an invalid interface number: 221 but max is 0 [ 476.031675][ T5873] usb 1-1: config 0 has no interface number 0 [ 476.037817][ T5873] usb 1-1: config 0 interface 221 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.087546][ T5873] usb 1-1: config 0 interface 221 has no altsetting 0 [ 476.118440][ T5873] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=10.00 [ 476.576261][ T5129] Bluetooth: hci6: command 0x0406 tx timeout [ 476.582344][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 477.078399][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.107161][ T5873] usb 1-1: config 0 descriptor?? [ 477.288819][T11196] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1290'. [ 477.302709][ T5873] usb 1-1: can't set config #0, error -71 [ 477.341498][ T5873] usb 1-1: USB disconnect, device number 42 [ 477.442058][T11204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=11204 comm=syz.0.1293 [ 477.475099][ T29] audit: type=1400 audit(1771962025.644:574): avc: denied { watch_sb watch_reads } for pid=11197 comm="syz.6.1292" path="/68/file1" dev="tmpfs" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 478.023462][ T29] audit: type=1400 audit(1771962025.896:575): avc: denied { associate } for pid=11208 comm="syz.5.1294" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 478.397127][T10984] block nbd3: Possible stuck request ffff888028ba0000: control (read@0,1024B). Runtime 150 seconds [ 478.408075][T10984] block nbd3: Possible stuck request ffff888028ba0200: control (read@1024,1024B). Runtime 150 seconds [ 478.458299][T10984] block nbd3: Possible stuck request ffff888028ba0400: control (read@2048,1024B). Runtime 150 seconds [ 478.469497][T10984] block nbd3: Possible stuck request ffff888028ba0600: control (read@3072,1024B). Runtime 150 seconds [ 478.672098][T11214] loop6: detected capacity change from 0 to 2640 [ 478.697541][ T6588] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.734934][ T6588] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.750586][ T6588] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.777515][ T6588] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.795321][ T6588] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.852153][ T6588] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.889762][ T6588] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.895338][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 478.925868][ T6588] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.945746][ T6588] ldm_validate_partition_table(): Disk read failed. [ 478.975223][ T6588] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.985648][T11217] veth0: entered promiscuous mode [ 479.003675][ T6588] Buffer I/O error on dev loop6, logical block 0, async page read [ 479.099223][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 479.105672][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.117392][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.138894][ T6588] Dev loop6: unable to read RDB block 0 [ 479.153308][ T6588] loop6: unable to read partition table [ 479.163506][T11214] ldm_validate_partition_table(): Disk read failed. [ 479.172158][T11214] Dev loop6: unable to read RDB block 0 [ 479.178892][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.189005][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.210876][T11214] loop6: unable to read partition table [ 479.216009][ T10] usb 6-1: Product: syz [ 479.220960][ T10] usb 6-1: Manufacturer: syz [ 479.225623][ T10] usb 6-1: SerialNumber: syz [ 479.231640][T11214] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 479.260659][ T10] cdc_ether 6-1:1.0: invalid descriptor buffer length [ 479.300554][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 479.313879][T11211] veth0: left promiscuous mode [ 479.451279][T11226] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1299'. [ 479.478520][ T10] usb 6-1: USB disconnect, device number 17 [ 479.498006][ T29] audit: type=1400 audit(1771962283.578:576): avc: denied { name_bind } for pid=11212 comm="syz.5.1295" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 479.528009][T11229] IPv6: NLM_F_REPLACE set, but no existing node found! [ 480.430492][T11246] netlink: 'syz.7.1302': attribute type 3 has an invalid length. [ 480.440682][T11246] netlink: 'syz.7.1302': attribute type 3 has an invalid length. [ 480.449519][T11246] netlink: 'syz.7.1302': attribute type 3 has an invalid length. [ 480.460369][T11246] netlink: 'syz.7.1302': attribute type 3 has an invalid length. [ 480.471593][T11246] netlink: 'syz.7.1302': attribute type 3 has an invalid length. [ 480.483292][T11246] netlink: 'syz.7.1302': attribute type 3 has an invalid length. [ 480.499689][T11246] netlink: 'syz.7.1302': attribute type 3 has an invalid length. [ 480.511020][T11246] netlink: 'syz.7.1302': attribute type 3 has an invalid length. [ 480.523480][T11246] netlink: 'syz.7.1302': attribute type 3 has an invalid length. [ 480.533304][T11246] netlink: 'syz.7.1302': attribute type 3 has an invalid length. [ 481.469292][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1306'. [ 481.735466][T11264] fuse: Unknown parameter '' [ 481.823069][ T5804] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 481.842831][ T29] audit: type=1400 audit(1771962285.787:577): avc: denied { create } for pid=11265 comm="syz.7.1308" name="#11" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 481.949711][ T29] audit: type=1400 audit(1771962285.787:578): avc: denied { link } for pid=11265 comm="syz.7.1308" name="#11" dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 482.152222][ T5804] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 482.189861][ T29] audit: type=1400 audit(1771962285.787:579): avc: denied { rename } for pid=11265 comm="syz.7.1308" name="#12" dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 482.221765][ T5804] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 482.561666][ T5804] usb 3-1: config 0 has no interface number 0 [ 482.567809][ T5804] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 14385, setting to 64 [ 482.707265][ T5804] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.722911][ T5804] usb 3-1: config 0 interface 52 has no altsetting 0 [ 482.732995][ T5804] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 482.742944][ T5804] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 482.771061][ T5804] usb 3-1: Manufacturer: syz [ 482.771173][T11282] IPv6: NLM_F_CREATE should be specified when creating new route [ 483.238163][ T5804] usb 3-1: config 0 descriptor?? [ 483.256596][ T5804] hub 3-1:0.52: bad descriptor, ignoring hub [ 483.262669][ T5804] hub 3-1:0.52: probe with driver hub failed with error -5 [ 483.567798][ T5804] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input21 [ 483.949304][ T5865] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 484.138678][ T29] audit: type=1400 audit(1771962287.930:580): avc: denied { execute } for pid=11308 comm="syz.7.1318" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 484.229318][ T5865] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.250307][ T5865] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 484.262769][ T5804] usb 3-1: USB disconnect, device number 26 [ 484.285524][ T5865] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 484.317440][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.349086][ T5865] usb 6-1: config 0 descriptor?? [ 484.818856][T11326] Mount JFS Failure: -5 [ 484.897801][T11329] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1316'. [ 485.185553][T11329] bridge0: port 3(dummy0) entered blocking state [ 485.192226][T11329] bridge0: port 3(dummy0) entered disabled state [ 485.198712][T11329] dummy0: entered allmulticast mode [ 485.206090][T11329] dummy0: entered promiscuous mode [ 485.211941][T11329] bridge0: port 3(dummy0) entered blocking state [ 485.218299][T11329] bridge0: port 3(dummy0) entered forwarding state [ 485.318663][T11334] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 486.528797][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'. [ 486.538843][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'. [ 486.638743][T11355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11355 comm=syz.2.1324 [ 486.654841][T11355] validate_nla: 46 callbacks suppressed [ 486.654871][T11355] netlink: 'syz.2.1324': attribute type 1 has an invalid length. [ 486.716105][T11355] bond0: (slave gretap1): making interface the new active one [ 486.726640][T11355] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 486.755915][T11355] vlan2: entered allmulticast mode [ 486.762171][T11355] bond0: entered allmulticast mode [ 486.767408][T11355] gretap1: entered allmulticast mode [ 486.775111][T11355] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 486.803804][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 486.834932][ T9661] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 486.892424][ T5865] Bluetooth: Can't get state to change to load ram patch err [ 486.929484][ T5865] Bluetooth: Loading patch file failed [ 486.943636][ T5865] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 486.980767][ T5865] usb 6-1: USB disconnect, device number 18 [ 487.165721][ T9661] usb 1-1: Using ep0 maxpacket: 8 [ 487.510977][T11366] binder: 11363:11366 unknown command 0 [ 487.516541][T11366] binder: 11363:11366 ioctl c0306201 200000000280 returned -22 [ 487.758266][ T9661] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 487.768411][ T9661] usb 1-1: config 0 has no interface number 0 [ 487.775100][ T9661] usb 1-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 9 [ 487.792275][ T9661] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 487.806109][ T9661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.816168][ T9661] usb 1-1: config 0 descriptor?? [ 487.829135][T11351] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 487.841841][ T9661] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 489.018984][T11388] openvswitch: netlink: Missing valid actions attribute. [ 489.026486][T11388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.045357][ T29] audit: type=1400 audit(1771962292.535:581): avc: denied { ioctl } for pid=11389 comm="syz.6.1334" path="socket:[36542]" dev="sockfs" ino=36542 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 489.230575][ T5804] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 489.606044][ T977] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 489.690166][ T5804] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 64 [ 489.700796][ T5804] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.724312][ T5913] usb 1-1: USB disconnect, device number 43 [ 489.920806][ T5804] usb 3-1: config 1 interface 0 has no altsetting 0 [ 489.934098][ T977] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 489.946808][ T977] usb 6-1: config 0 interface 0 has no altsetting 0 [ 490.022060][ T977] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 490.039656][ T5804] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 490.059788][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.069870][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.084280][ T5804] usb 3-1: Product: ㍠뀛蝛ꦷ剒ั誏젳꣏햳괵稇햔Ꚉ㔉ᜱ쏩꿏갴㵿ﲃ暑➀ꨧ孾Ὑ䀚ϔ霹沸ᅘ鑲鑼ᶳ췦찻牖짊兜䤆彇⮗麑￨鷏ꑅ屋ن럥℠⌬佧⽽ⓨᗽ룍폞梋㓳쑮喇蛏⮦♰跚۲虡⺷寞둏㡅ᬌ錈ᑕ洊莜•톪莥谺澝鞻脷葊틐Ỽᇜ㶆䣌ᓋ飯㥄紋䞷薁甗嵺簈ᇒ䯢裔⩼䤏ꖸ얓쭕㨐圁搯 [ 490.130083][T11406] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1339'. [ 490.139282][T11406] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1339'. [ 490.159292][ T977] usb 6-1: config 0 descriptor?? [ 490.253462][ T5804] usb 3-1: Manufacturer: ж [ 490.258029][ T5804] usb 3-1: SerialNumber: Т [ 490.379089][T11383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 490.410449][T11383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 490.535725][T11416] fuse: Unknown parameter '' [ 490.610181][ T31] INFO: task syz.3.844:9244 blocked for more than 143 seconds. [ 490.622395][ T977] apple 0003:05AC:027A.000F: hidraw0: USB HID v0.05 Device [HID 05ac:027a] on usb-dummy_hcd.5-1/input0 [ 490.638225][ T31] Tainted: G L syzkaller #0 [ 490.655134][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.675605][T11383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.716133][T11383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.751624][ T31] task:syz.3.844 state:D stack:29000 pid:9244 tgid:9242 ppid:5803 task_flags:0x400140 flags:0x00080002 [ 490.781185][ T31] Call Trace: [ 490.786967][ T31] [ 490.795713][ T31] __schedule+0xfee/0x60e0 [ 490.806677][ T31] ? __lock_acquire+0x4a5/0x2630 [ 490.818770][ T31] ? __pfx___schedule+0x10/0x10 [ 490.834467][ T31] ? find_held_lock+0x2b/0x80 [ 490.847336][ T31] ? schedule+0x2bf/0x390 [ 490.874860][T11392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.884052][T11392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.884948][ T31] schedule+0xdd/0x390 [ 490.903450][ T31] schedule_preempt_disabled+0x13/0x30 [ 490.914673][ T31] __mutex_lock+0xc9a/0x1b90 [ 490.920855][ T977] usb 6-1: USB disconnect, device number 19 [ 490.940135][ T31] ? bdev_open+0xa2/0xe40 [ 490.954735][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 490.965197][ T31] ? bd_prepare_to_claim+0x1e0/0x280 [ 490.976836][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 491.011413][ T31] ? file_init_path+0x48e/0x670 [ 491.018225][ T31] ? bdev_open+0xa2/0xe40 [ 491.023331][ T31] bdev_open+0xa2/0xe40 [ 491.027663][ T31] ? iput+0x3a/0x40 [ 491.031808][ T31] bdev_file_open_by_dev+0x179/0x210 [ 491.039884][ T31] setup_bdev_super+0x385/0x730 [ 491.046588][ T31] get_tree_bdev_flags+0x363/0x620 [ 491.051943][ T31] ? __pfx_jfs_fill_super+0x10/0x10 [ 491.057964][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 491.063722][ T31] ? cap_capable+0x107/0x460 [ 491.075515][ T31] ? bpf_lsm_capable+0x9/0x10 [ 491.081280][ T31] ? security_capable+0x80/0x260 [ 491.086624][ T31] vfs_get_tree+0x92/0x320 [ 491.091182][ T31] path_mount+0x7d0/0x23d0 [ 491.096229][ T31] ? __pfx_path_mount+0x10/0x10 [ 491.101789][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 491.107246][ T31] ? putname+0xb1/0x110 [ 491.113712][ T31] ? kmem_cache_free+0x124/0x6a0 [ 491.119350][ T31] ? __x64_sys_mount+0x293/0x310 [ 491.124552][ T31] __x64_sys_mount+0x293/0x310 [ 491.128734][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 491.130432][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 491.196771][ T5804] usb 3-1: USB disconnect, device number 27 [ 491.211376][ T31] ? kcov_ioctl+0x16a/0x720 [ 491.230022][ T31] do_syscall_64+0x106/0xf80 [ 491.252420][ T31] ? clear_bhb_loop+0x40/0x90 [ 491.261108][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.275211][ T31] RIP: 0033:0x7f9aa7b9c629 [ 491.285636][ T31] RSP: 002b:00007f9aa8ab1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 491.339523][ T31] RAX: ffffffffffffffda RBX: 00007f9aa7e16090 RCX: 00007f9aa7b9c629 [ 491.354668][ T31] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 491.370853][ T31] RBP: 00007f9aa7c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 491.385996][ T31] R10: 0000000001a0c000 R11: 0000000000000246 R12: 0000000000000000 [ 491.402436][ T31] R13: 00007f9aa7e16128 R14: 00007f9aa7e16090 R15: 00007ffccc0a3318 [ 491.418884][ T31] [ 491.424686][ T31] INFO: task syz.1.851:9276 blocked for more than 144 seconds. [ 491.443529][ T31] Tainted: G L syzkaller #0 [ 491.460350][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.470600][ T31] task:syz.1.851 state:D stack:25864 pid:9276 tgid:9272 ppid:5812 task_flags:0x400040 flags:0x00080002 [ 491.484445][ T31] Call Trace: [ 491.495821][ T31] [ 491.504344][ T31] __schedule+0xfee/0x60e0 [ 491.514061][ T31] ? __lock_acquire+0x4a5/0x2630 [ 491.553121][ T31] ? __pfx___schedule+0x10/0x10 [ 491.567646][ T31] ? find_held_lock+0x2b/0x80 [ 491.572404][ T31] ? schedule+0x2bf/0x390 [ 491.576739][ T31] schedule+0xdd/0x390 [ 491.589908][ T31] super_lock+0x283/0x3f0 [ 491.594301][ T31] ? __pfx_super_lock+0x10/0x10 [ 491.607450][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 491.613537][ T31] ? __iterate_supers+0x1b6/0x370 [ 491.618597][ T31] __iterate_supers+0x1e0/0x370 [ 491.624523][ T31] ? __pfx_quota_sync_one+0x10/0x10 [ 491.629712][ T31] __x64_sys_quotactl+0x2b3/0x400 [ 491.635215][ T31] ? __pfx___x64_sys_quotactl+0x10/0x10 [ 491.640767][ T31] do_syscall_64+0x106/0xf80 [ 491.645794][ T31] ? clear_bhb_loop+0x40/0x90 [ 491.650455][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.657942][ T31] RIP: 0033:0x7fe37c79c629 [ 491.662357][ T31] RSP: 002b:00007fe37d62a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 491.671272][ T31] RAX: ffffffffffffffda RBX: 00007fe37ca16090 RCX: 00007fe37c79c629 [ 491.679692][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000101 [ 491.688301][ T31] RBP: 00007fe37c832b39 R08: 0000000000000000 R09: 0000000000000000 [ 491.696337][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.704305][ T31] R13: 00007fe37ca16128 R14: 00007fe37ca16090 R15: 00007fff0b96fec8 [ 491.712845][ T31] [ 491.722839][ T31] [ 491.722839][ T31] Showing all locks held in the system: [ 491.767704][ T31] 1 lock held by khungtaskd/31: [ 491.802712][ T31] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 491.812642][ T31] 2 locks held by getty/5567: [ 491.832155][ T31] #0: ffff88803572b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 491.842683][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 491.854519][ T31] 2 locks held by syz-executor/5809: [ 491.861222][ T31] 1 lock held by udevd/7589: [ 491.865810][ T31] #0: ffff888028a6c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 491.878835][ T31] 2 locks held by syz.3.844/9244: [ 491.883867][ T31] #0: ffff8880550dc0e0 (&type->s_umount_key#70/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 491.894240][ T31] #1: ffff888028a6c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 491.903770][ T31] [ 491.906094][ T31] ============================================= [ 491.906094][ T31] [ 491.916194][ T31] NMI backtrace for cpu 0 [ 491.916210][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 491.916238][ T31] Tainted: [L]=SOFTLOCKUP [ 491.916243][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.916253][ T31] Call Trace: [ 491.916259][ T31] [ 491.916265][ T31] dump_stack_lvl+0x100/0x190 [ 491.916297][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 491.916316][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 491.916343][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 491.916368][ T31] sys_info+0x141/0x190 [ 491.916387][ T31] watchdog+0xd25/0x1050 [ 491.916416][ T31] ? __pfx_watchdog+0x10/0x10 [ 491.916438][ T31] ? __kthread_parkme+0x18c/0x230 [ 491.916464][ T31] ? kthread+0x13a/0x450 [ 491.916479][ T31] ? __pfx_watchdog+0x10/0x10 [ 491.916500][ T31] kthread+0x370/0x450 [ 491.916515][ T31] ? __pfx_kthread+0x10/0x10 [ 491.916532][ T31] ret_from_fork+0x754/0xd80 [ 491.916550][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 491.916569][ T31] ? __switch_to+0x7b4/0x1120 [ 491.916589][ T31] ? __pfx_kthread+0x10/0x10 [ 491.916606][ T31] ret_from_fork_asm+0x1a/0x30 [ 491.916639][ T31] [ 491.916646][ T31] Sending NMI from CPU 0 to CPUs 1: [ 492.056777][ C1] NMI backtrace for cpu 1 [ 492.056795][ C1] CPU: 1 UID: 0 PID: 5809 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 492.056815][ C1] Tainted: [L]=SOFTLOCKUP [ 492.056820][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.056828][ C1] RIP: 0010:check_preemption_disabled+0x2d/0xe0 [ 492.056849][ C1] Code: 53 48 83 ec 08 65 8b 1d 35 dc 7d 08 65 f7 05 26 dc 7d 08 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c e9 85 17 03 00 9c 58 c4 02 74 ea 65 4c 8b 25 ee db 7d 08 48 89 fd 41 f6 44 24 2f 04 [ 492.056862][ C1] RSP: 0018:ffffc900047472b0 EFLAGS: 00000046 [ 492.056873][ C1] RAX: 0000000000000046 RBX: 0000000000000001 RCX: ffffffff9187a501 [ 492.056882][ C1] RDX: 0000000000000000 RSI: ffffffff8df637a2 RDI: ffffffff8c1aefa0 [ 492.056890][ C1] RBP: ffffffff81b7fdde R08: 0000000000000001 R09: 0000000000000007 [ 492.056898][ C1] R10: 0000000000000200 R11: 0000000000018005 R12: ffff88807a150000 [ 492.056907][ C1] R13: ffffc90004747390 R14: 0000000000000202 R15: ffffc900047473c4 [ 492.056916][ C1] FS: 00005555915e0500(0000) GS:ffff88812444a000(0000) knlGS:0000000000000000 [ 492.056930][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.056939][ C1] CR2: 00007ffc65917d80 CR3: 000000005f3fa000 CR4: 00000000003526f0 [ 492.056947][ C1] Call Trace: [ 492.056951][ C1] [ 492.056957][ C1] ? unwind_next_frame+0x3be/0x1ea0 [ 492.056974][ C1] lock_release+0x9a/0x320 [ 492.056995][ C1] unwind_next_frame+0x3c3/0x1ea0 [ 492.057009][ C1] ? save_stack+0x162/0x1e0 [ 492.057028][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 492.057046][ C1] arch_stack_walk+0x94/0xf0 [ 492.057062][ C1] ? __reset_page_owner+0x84/0x190 [ 492.057082][ C1] stack_trace_save+0x8e/0xc0 [ 492.057098][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 492.057117][ C1] ? __lock_acquire+0x4a5/0x2630 [ 492.057136][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 492.057156][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 492.057168][ C1] save_stack+0x162/0x1e0 [ 492.057185][ C1] ? __pfx_save_stack+0x10/0x10 [ 492.057205][ C1] ? page_ext_put+0x3e/0xd0 [ 492.057225][ C1] __reset_page_owner+0x84/0x190 [ 492.057243][ C1] free_unref_folios+0xaea/0x1790 [ 492.057261][ C1] ? mark_held_locks+0x40/0x70 [ 492.057279][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 492.057299][ C1] folios_put_refs+0x53c/0x840 [ 492.057318][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 492.057337][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 492.057358][ C1] shmem_undo_range+0x5e5/0x1570 [ 492.057383][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 492.057407][ C1] ? __lock_acquire+0x4a5/0x2630 [ 492.057434][ C1] ? mark_held_locks+0x40/0x70 [ 492.057455][ C1] shmem_evict_inode+0x39e/0xbd0 [ 492.057473][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 492.057491][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 492.057508][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 492.057527][ C1] ? find_held_lock+0x2b/0x80 [ 492.057542][ C1] ? evict+0x37e/0xad0 [ 492.057556][ C1] ? evict+0x37e/0xad0 [ 492.057572][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 492.057589][ C1] evict+0x3c2/0xad0 [ 492.057604][ C1] ? __pfx_evict+0x10/0x10 [ 492.057620][ C1] ? iput.part.0+0x5fd/0xf50 [ 492.057637][ C1] iput.part.0+0x605/0xf50 [ 492.057651][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 492.057671][ C1] iput+0x35/0x40 [ 492.057685][ C1] filename_unlinkat+0x466/0x730 [ 492.057700][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 492.057718][ C1] ? do_getname+0x191/0x390 [ 492.057733][ C1] __x64_sys_unlink+0x46/0x70 [ 492.057747][ C1] do_syscall_64+0x106/0xf80 [ 492.057758][ C1] ? clear_bhb_loop+0x40/0x90 [ 492.057773][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.057786][ C1] RIP: 0033:0x7f5e1af9b717 [ 492.057797][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 492.057808][ C1] RSP: 002b:00007ffc659183d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 492.057820][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5e1af9b717 [ 492.057828][ C1] RDX: 00007ffc65918400 RSI: 00007ffc65918490 RDI: 00007ffc65918490 [ 492.057837][ C1] RBP: 00007ffc65918490 R08: 00007ffc65919490 R09: 00000000ffffffff [ 492.057845][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc65919520 [ 492.057853][ C1] R13: 00007f5e1b031ef0 R14: 0000000000076219 R15: 00007ffc65919560 [ 492.057866][ C1] [ 492.063623][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 492.063641][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 492.063663][ T31] Tainted: [L]=SOFTLOCKUP [ 492.063668][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.063677][ T31] Call Trace: [ 492.063682][ T31] [ 492.063689][ T31] dump_stack_lvl+0x100/0x190 [ 492.063717][ T31] vpanic+0x552/0x970 [ 492.063733][ T31] ? __pfx_vpanic+0x10/0x10 [ 492.063749][ T31] ? rcu_is_watching+0x12/0xc0 [ 492.063770][ T31] panic+0xd1/0xe0 [ 492.063784][ T31] ? __pfx_panic+0x10/0x10 [ 492.063802][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 492.063823][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 492.063843][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 492.063861][ T31] ? watchdog.cold+0x198/0x1ca [ 492.063877][ T31] ? watchdog+0xd35/0x1050 [ 492.063900][ T31] watchdog.cold+0x1a9/0x1ca [ 492.063922][ T31] ? __pfx_watchdog+0x10/0x10 [ 492.063943][ T31] ? __kthread_parkme+0x18c/0x230 [ 492.063966][ T31] ? kthread+0x13a/0x450 [ 492.063979][ T31] ? __pfx_watchdog+0x10/0x10 [ 492.063997][ T31] kthread+0x370/0x450 [ 492.064010][ T31] ? __pfx_kthread+0x10/0x10 [ 492.064026][ T31] ret_from_fork+0x754/0xd80 [ 492.064042][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 492.064058][ T31] ? __switch_to+0x7b4/0x1120 [ 492.064077][ T31] ? __pfx_kthread+0x10/0x10 [ 492.064093][ T31] ret_from_fork_asm+0x1a/0x30 [ 492.064126][ T31] [ 492.644809][ T31] Kernel Offset: disabled [ 492.649106][ T31] Rebooting in 86400 seconds..