last executing test programs: 10m28.621301594s ago: executing program 32 (id=2563): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') preadv(r2, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') syz_io_uring_setup(0xf04, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) read(r4, &(0x7f0000000080)=""/186, 0xba) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) 10m28.012676465s ago: executing program 33 (id=2569): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 10m27.834882539s ago: executing program 34 (id=2570): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) socket(0xa, 0x5, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x148, 0x34324142, 0x4, 0xfffefffe, 0x0, 0x5, 0x10, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000001c0)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000000540)=0x9) socket$kcm(0xa, 0x5, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 10m27.386171283s ago: executing program 35 (id=2571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {0x0}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m26.933309358s ago: executing program 36 (id=2572): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socket(0x22, 0x2, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7m18.124049165s ago: executing program 5 (id=3526): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) io_setup(0xffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000004000800000", @ANYBLOB="feffffff00"/14, @ANYRES32, @ANYBLOB="0300"/13], 0x50) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/51, 0x33, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r4 = gettid() r5 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5}) io_uring_enter(r5, 0x1, 0x2, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)={{0x12, 0x1, 0x351, 0x29, 0xfb, 0xf0, 0x40, 0x738, 0x4540, 0xc6ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x2, 0x6, 0x10, 0x78, [{{0x9, 0x4, 0xd4, 0x9, 0x1, 0x78, 0x6d, 0x3d, 0x40, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x9, 0x4, 0x2}}]}}, {{0x9, 0x4, 0xe2, 0x0, 0x2, 0xb2, 0x26, 0x18, 0xbb, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x7c, 0x9e, 0x9, [@generic={0x7, 0x5, "85e371932d"}]}}, {{0x9, 0x5, 0x7, 0xb, 0x0, 0x9, 0x73, 0x3}}]}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 7m14.663954189s ago: executing program 6 (id=3533): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x4ff, 0x8000) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0xffffffffffffffff, 0x102, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, 0x0, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0xa0, 0x0, 0x100000001, {{0xfffffffffffffffd, 0x0, 0x7, 0x5, 0xfffffffb, 0x3, {0x0, 0x7fff, 0x6, 0x100000008, 0x4, 0x1, 0x1ff, 0x9, 0x0, 0x2000, 0xfffffffc, 0x0, 0xee01, 0x43, 0x4}}, {0x0, 0x2}}}, 0x0, 0x0}) 7m10.817502807s ago: executing program 5 (id=3534): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 7m10.816889801s ago: executing program 6 (id=3535): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7m10.816705002s ago: executing program 8 (id=3536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(r0, 0x1, 0x10, &(0x7f0000001180)=""/83, &(0x7f00000010c0)=0x53) 7m7.944192989s ago: executing program 8 (id=3538): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7m7.389980342s ago: executing program 5 (id=3539): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x10000000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r1, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 7m7.233212714s ago: executing program 6 (id=3541): r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0xece, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 7m7.107793748s ago: executing program 5 (id=3543): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8005, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000003c0)={0x0, 0x42474752, 0x1, @stepwise={0xffffffff, 0x80, 0x5, 0xffffffff, 0x6, 0x80000000}}) 7m6.857682385s ago: executing program 5 (id=3545): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="b0") 7m5.322922337s ago: executing program 6 (id=3549): gettid() r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 7m4.348342166s ago: executing program 8 (id=3550): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f0000000040)="822a0a0202005469c524dee7e5c20cf81affff126bcf0000", 0x18) 7m3.649839381s ago: executing program 6 (id=3551): r0 = memfd_create(&(0x7f0000000fc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1b\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0odH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xea\x03\x00\x00\x0072M\x88k@\x00\x00\x00\x00\x00\x00\x00\x00\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\x97\x82\x99:u[\xf4q1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d000701001200000000000003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r7], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0), 0x820182, 0x0) r10 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r10, 0x48e9, 0x0, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) 7m2.977053771s ago: executing program 8 (id=3554): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x200) r1 = dup(r0) r2 = syz_io_uring_setup(0x649, &(0x7f0000000200)={0x0, 0x24c8, 0x80, 0xfbffffff, 0x4}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 7m1.304103155s ago: executing program 5 (id=3555): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000010140), 0x48c02, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semget$private(0x0, 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x80003, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000010180)=@newchain={0x24, 0x64, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff1, 0xd}, {0x2, 0xd8352db178a4905a}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = dup(0xffffffffffffffff) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) syz_genetlink_get_family_id$nl80211(0x0, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r7, 0x18, 0x0, 0x4) 7m1.175204336s ago: executing program 8 (id=3556): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 6m46.255736573s ago: executing program 37 (id=3546): socketpair$unix(0x1, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x18}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[]) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0xff) shutdown(r0, 0x1) 6m45.954435102s ago: executing program 38 (id=3553): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d000701001200000000000003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r7], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0), 0x820182, 0x0) r10 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r10, 0x48e9, 0x0, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) 6m45.854673795s ago: executing program 39 (id=3555): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000010140), 0x48c02, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semget$private(0x0, 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x80003, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000010180)=@newchain={0x24, 0x64, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff1, 0xd}, {0x2, 0xd8352db178a4905a}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = dup(0xffffffffffffffff) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) syz_genetlink_get_family_id$nl80211(0x0, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r7, 0x18, 0x0, 0x4) 6m45.671587674s ago: executing program 40 (id=3556): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 6m36.609973565s ago: executing program 9 (id=3567): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg0\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r5, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcffffff0100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000) socket(0x2b, 0x2, 0xffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtclass={0x70, 0x28, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffff, 0x7}, {0x5, 0xa}, {0x5, 0x7}}, [@tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_qfq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x73, 0x6}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_RATE={0x6, 0x5, {0x37, 0x80}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_ingress={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 6m36.487279549s ago: executing program 9 (id=3568): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0x3) 6m36.385813238s ago: executing program 9 (id=3569): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = fanotify_init(0x200, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x48001059, r2, 0x0) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) 6m36.181826657s ago: executing program 9 (id=3570): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0xa15c, 0x404, 0x7, 0xffffffff}}) 6m36.110046406s ago: executing program 9 (id=3571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}]}, 0x40}}, 0x0) 6m36.007765622s ago: executing program 9 (id=3572): syz_open_dev$char_usb(0xc, 0xb4, 0xfffffff0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 6m11.652151911s ago: executing program 41 (id=3572): syz_open_dev$char_usb(0xc, 0xb4, 0xfffffff0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 2m31.476838104s ago: executing program 3 (id=4361): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x2b, 0x3, 0x200c0400, 0x0, 0x0, 0x0, 0xe382, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000480)={0x10, 0xffffffffffffffda, r2}, 0x10) 2m31.364295592s ago: executing program 3 (id=4363): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f00000003c0), &(0x7f0000000500), 0x1000000}, 0x20) 2m31.272100341s ago: executing program 3 (id=4364): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x318735e0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x5}}, 0x30) syz_fuse_handle_req(r0, &(0x7f00000041c0)="0a44566bd8cd7422e078875d6a98d0a2dcc0a0c7881e44e46c6bf84253a3ba4cba8183c2236313cd49babfb721c547a5caed646bac2f2ea43e134e2a05d84cd813c9e2a96e68352f95c458f6ba48078f1d10fce44d869b4a00c68ca338ff3b877cb434f502cedfe83cbfb33d5233d081ec8ee2ac10e08194f6257183be922fc7203071a2aaf87478d1420237a1516e749623929f0d60f15e536376ba41fbbce034588b60680572f0d1d76ed122dc46252cc143f0e665e3f4e3f56bc454957265bd9a029cf8c7397ca01f95bc0e6601673bb31804c34307725385260df48c32527d74e51e5f26728aaedf9f379f5960f5e6e7146eff3254aaf54eb42834e1f57595a2b0333f5ca1474e07c2447c33dbe8f62f24cd788ac18475493edb813450e917837b125ad6f850e6af93e16828a6741c6ac00a4e25cfcd498f1b857e74a4eb8dce5ffcb3999031f1da13e9e6a973134ec04795a3fe91388fb6b349e668f49bd4c4ffa71a8662916219b4a2075bbfe4892cd1080f662005c1c2030d35999c9637f4836ae5745acae8ff0d745184e58241510d780f8a9aeeccb17b9213527a1b747dd23df6b4ac2ca4bd07fb7de6bb4bf8811e5c2f99f4bbcb3cba79fc483182bb981815a1b1ba5afad464631e6eb940a5da4e73787e9e0103bc7ea59cc8d63f740131a14c3cd034e91e885bd730521ba80c1071f25e0073a44bf8e36cc23a5f433378a13d2e2be7fbb8ca204976651924ae8637b339e883f4d388e239424031e20616341a5d51cd5d574382d518e4824dcdadba86143b4de3ff8126f0be226d1e6526a2af981d11092c428bc699ea208d4d38d63ef525b8da551207397fdb7d57a52c2062182072b017141de1b70bd15c758c88c65f6acffd5b5b0846c2a779660ceef46b22336abf817a24d27c3f66839b5f2f99131898dd372a124d9e5df84b24fa7be045b92fb225a735da1be1972c706120c391ffadf231603ffbb86d38ff2c76202a0f81317a7f790dadcdca1d109e4428f52246b17f6b5822f64d36da71167df86cedf76f4405f320f70a3d6d6307a13e023d9a23985fd9c95793118674346d7977654ed14a121c1bc0b3e8672087245e0721230edc667c1fb6bcdb22b3264b7fffedb589a2899096493ba97ce5fb0ad97821d0a4528465380e086b61f632eb0ce1f89eea2d8336217f51b4085433d426d404431360be55776cbb0f80c33e807732df3d73bf9d9a8e3b1468d2ac7c73a4aa239c96bbeef3965132a02254d887e65fbeaf517e913cc331ed36c3e326163d1a3aef7df9db06f8997668cc35e39813c82a440a73f12011bcc0b2abb993b99e79727d49e6656e8d9ecfb7b65c2c187ca6262361c6a7d3679aba9df764d13485874b1443f47d8caea64963011294082a9d50ed2fb08cdfaaa7dbcf782b7e8f8d8206dbc421bf9807727126b1ea364498f3ae693fe19f5b56af13df090892919c136c201a0d058c1863f136a3ff389cc510c17b1de341ca9a8d6ffd80fd019ac3fd9eeeb845202f2c5f207b1e7e169d57164855b9c3dbdf3c696124136d07a4de6be16b43352567a3e3bab0f73ccdd41255ffeb3ecb2bdf9eedd1d4332f4a7534b01b6331474880d4d07b464bd8c3b18d02fbf1faeeff70c8ae35b4eef002930dfa9a0c9350ffb72c82535a55280ac9c6d5384cf9aa3c66cc918497f51a6dbad608eee21f6085f85990983d0a51e5b41cb69ae52d60fa835045aaa0132be8b4dfdb10f521bc22b0192a4133040453c5a0a8bbb5d4c46ea25f2be5b0e79d71c4a13db6e9cb66db9f2c4804d41b9c26f96fd23c358ee9c8f57322540953224b56072af25b5c7041de560f1d4bde367eb3bbac949d9a9a86123ae62d0f4741446192e85772fb893b64c0e7c44a6e967af906b0f50e32be384027379c8dde251f549f94b16cee199da537d07ae89848da801b43bab3b65651402756cb22d17e602cdc33790ec8a5484a955bc8f487597ac9752166a405bbd7dfc9107af72b46e39d29afd2a0447e53377fd11997ab21db0f740699843a168720377e365caf88fd319dca184cadb8ffb4d288a0045b349be5ecb64561a2bdfa13336ef96aea86c48a5e405330a01c5390d482e6ccf4ebb2cf149d8b6274b2f9e6e1066004172a1a90e0db9838afafcb663bd693b2e5ca35858dcb82c05cbc87ec5cedfbb08daf55c472e250861bf357569342d90a667f3ac7fc2d4e54220444a97810ac14b0af6b043a07c1d791182635b983492f21db4a6ffee2d686238869e50b9bb73d75ec26087c0c8cb92ff25740b3995e4d771469b8474efef04d8d75f3544aaf84f02ad977948764d4c1bce36aa4198d6f22091b263d9eae96f1096fe3d8045949f189f33ec713101fea26ea043fe98b987542e33ab372058c64205e90a0e1f52d04b2c5ba7a5572ddb95f7d2b04f22e2e987c5d0f879db65718d8979da2a45cd333a5aacf96081977a9eb3dcee4afb44443ad37528c5a314d1ea08d1c3f0a36d4bdf77fc0caaeaa1eb2746a26683561b62d22f4e166192892e2ec1597f8bf6e89cd53840c8d7baea220e1b5e17df52a05017363727b0cc77ee61577a79b3de2ed364f3419a30d23701044b45ed3ba44b01804750bacf5bc959cffba86619f3331cc939fecadb5cba1edfe28952e0f70d2d99ce696dab9411aa2f7e7ca6207a3b16fc36a70e339aa5a618f6bcb0272968eba6edd95242825fe6e47cf1d50d229d4b1676aad0e9410aa1f2d6d2fcb9c4ec8e06c83faefbc2143de2367123bdb7669bd959782cf64def3a601c596611ac98d76df33e1fe340829340ba0a582d014ffacf9a9394300ab7efd60222cf96a99e42dae6e1ff1fcad1e3280ca07de5ea7e08b264a60015ffb76cc72d70ded58a1e2f59906f3c76433e4353a94a2a49f91103e2b5491ac7f66d54ae2a0e82099c4c9bd683971c2d3dd51601bf5e94f7660158bc6fdc1b2ce3d689a3aa64c29810ad7d9e91e49b72e6f97230a2a966434bf5cdb339556e6452e6b446766f55df45219fc02192cb73076285e74eb848229bffd812f6058782b3f5d0efa4d7b0d3c120931aa8b679e318ecc5ea539e3dcaf87473e2573189ce500b616957d88a09a014baffbd66990e41a3432891279cb82d9c4b50675ff067b76503535631aab9a29ee7e274eded1cd542c801bf519e1119fbab84f57c7686209c9e5177545bf0f403609c81fe6d8f2979d886c43fa3053b38b6e21ec3632011c97451d8409f169f71d226e61fdd206ec5f962b0277eee286a694ba5381493941ed44b3659994d3cd2a8c9c3bdb2f63d77eaee180428d7d6df86f6738cf7adb4b863c9ee9da9904bba4c2c3188a1ce31c5b082857e5566055c8cf58a9e9f7624d220b8d3093cbc6eaed7fcf15fc700ed711575aff5fb5cb7e206c810ea7a766d2960a1356687aad2ec171e4a1db6540a9257385a1e8b9f029485866c32e74c1a19e1113040c9d215f9f4bb4311f0d587b9cb6d11cdf28d4cbcdde4ee7831e5c8608335a1e41883b55b3609b9c4fb8489619481dffc6224e4c98b1e89831187b28b6bcebe7f78c779f5a2896e47bef8e607811b435c517e8e3f19d74752d7ae99cb7caf69c0f977f1b94f8f11bdbf35444fabaac2fc0e568d3b5b3b9f13162b1fa92615bc16492b870fc85c79c51b6516276f8e559e769a8d37a2335d67edbdbe2d4ded10e79ad26629ba6de862acb27fa7d0607a5c83840e446ca0d231ae9175ae9cddf35443ef8434a61d54b704d2b46835ca030d4325dd62918d361c27bd6e422f3f8431ff979953c88a5f3d07a84b733b2fffda5dedbc2ba876ea653aaa2a8446019d2cb69c4c7023177af7b5de358c4a93ba969415c7e3bd3e10a17653cc4c0031dc779d47bedc8d0f77b9fb39484e47d1edfa16a4839d7e3c1f4147bf7a5a41395980d0234577d433c4f3663a648865cf5cfc4a713bfde809cae8161f044770d8f3dd65f183392ed73dd0512951dce40dd6f68927144d09a6df1225769a47a2f1dc7da5a0e5651dc0198c2feb7de7aae5675a3753272294cdc8f05b4bf1b478d6e2a18f6a9dfdc42421bae7072786a4122cb3fcc61b2d0bc9314b92be8be3f9b8b109631305e06b52c0bf621d577f014d0572327c49fd705b45794aa8f198b37c139c4a8008763c654af912552549203733ad09c667104a3c1756dacc50af3d19bd996a99a7f857d9ff8c337c6feb16cb7fe282cbf8c975bdb60a7ddaa056352d9cf752f2b49fd0ae9dd7a263c4e1c1a027c7d45529b5a49de9f2306862b8ef8d386594f9909aabc849c5955241d192ab57d52fd2c7db0e4066bc3f70445599a60016de606b30a92b1bcbcd9dc8cfb492a6e66aa2be612e1d5f7fc61989d51285f1ef8a4e724a46c36bdaa6bed82ec972fe3e929a7a708397432b13e266d9a66954e011a158c9bc031587f9315382dfcc2334100d99b7d50b87096970d294261dd3263bee8f5aac2d86f070d70e278ecca4cf6ff05e511c0a65d6da81b68d94cd635e9dc98c1259fa2060de60d05117090a9a36d7b7aab999cd28a6c0727336312ede8f7fe0118e22aeb4094a64311fa766412d68ee04a93a1b9e2da91afcc91a1fc3c216f0aed6da74baed3242e620482ae01d3055562d16cab58500a5f41145d2275f6da8e24003cae19a7bdb9de8ef57965341253901962d846fcfd687e32fc81e716c42fae279382c8a750c9ef9543c942ca644287ec9cc921f99e9c901810a342e198f3b60a5c75aa91e67c1a6f08008841ddbe0766604b38a211929682303ce61e8024ea4589aa955886adc98f365af515daf30c376eb2b96fd78d46bc3999935a336c89f02ebe822bb5db6a1fd145c4d403b88f17b3fac670b2eb1296b3a5a7055556c21259695c248696162fc179aa1b4ec10e022ea7bacd0255937f9aa89f4d4c58bdedb54b43fde47268552f51b949a9cfbdabf6e3172853e6de9d0b0d9643349595769e98dab85282c49ce8c52301c04710a2c43cf63decaf65243d4756015b681bb680fdd1aba59d63b54e2ebedc68df32e575a95adfb2b18a79688b23ffb498d03012250f0dfaaed5353025aea7a35c8a89873b5f73adb41cc864b9f86e14624d70c917f05e47bab793958de9957cf23c94a9807b30bd7574edf66250224b887a8c02baa05cc02abd4c008339129b3109f1b04da29a9edf472991a440fcc8e586bef32b8c95fcd3d6702b9f43bf41454d5fe72a1f1ac80604c93dc9e9abf9a824c6d45e65b4f39f8341799dce4eac5e9036450ba7829221fdac7ec394c0a8e9813f5aad3ad0052f5156b3dca979e9c9a8755d4be2502727d346889210a13e5391951afef1880bcbd2a9ea020c9b2946563cd40c40f6202bce9bd1d2a1bbc3e5e6b2a9d2220343fd1ff5cde1b4d27c0601b8890b6ad8d3d80075a23725bddd81c15cd1b63e0123c4ac01de7b62b1e0fe2b72eaf400a1bcc63f76316d471eb191c931d5350e83a110b89e77668cfdc47734b91c2268fbbd89ce15b50b84c423a1f27943c32739e99b046a665c966275dba2dd6449b69ec53e5cb9cde89afe4149589c7378f5f3648d748bf3d46fa53f50d1228714252a328cebe7146d81dbb2f850aad492bc0697e2760dc9c60bc76a010e85110c0076478a21b47e5fbc4f7397a319e1db642e305bb1330674d96eb4b421f0f2131d125d4cec8aef4637dce572bad633e076972c9147a48b4c67135ace6a4490e16fa4731d62864e910762f1eb58afa63031c78c375a90147ceef07cd1e8155a649f2558d67dba9d6d2e012a3af4b603cd094e4a3b2e30c65c80cf8d9b2cb840e9df91e70162b80e74be96467574ca0ac5ad52238163283c556f0865c2338d6dcc73fa330634f6e5ce68e766df2db5b7edce0d98203e1d4374e7eda3558667229ea2daeb74156cf5895c4afb460cb4037456b14d9b748ddf7b8f3d5accd3e0d8d2eca2a78056d945eb4383078cc09a3a77736ce4e91f8174fe03fdceef8df92a50c2797b0cd06c6f1ae95650e48d103fb269c0a004d62237b77257807c8954678476030d788543d84770a1533a72141c7ea919e533bc182a3306782233d1a20153fa3e9e315a856e75f760bb7f943ea2f5956243f75fdb241ddfb4c081219ebb4eb3c3e989e3d953a93d96dafe1142c29434a554a92d319747e618cbd3af5202e51d30761e81b6c2d6febf221e3147b63171ea5dbaab4cba1b0fe7dc9cb249d74bbbcd7ef11c35fade1132ee4b74dc6090cfb6f852fb01d79aa0e5ee6897b7c021c6a1e69995e0546932c56e65b2581d619fc59f9775f3e8573b3c4926b8f6a9041512788d11a6fb279941ce24fea916e6568db25f1fcd3fd1e907fb3c45ddbca37230f5b3ffd48cf9c2269ec068d0bc528aac14807636c9067c5e32f2c2f259f6502ffffdbea40ad1b6b4a1d819fccc5c77da908204781747ecb0f2245dfa2941a9dba5d11ad186ab0eb87173dda634bd5a9221143e244c793d6262c904a64ba36cdced65abdd3be06d534b649b03791f7ce41e9abdea4d2c17f14bfbee0455dfa791f241341c78ce24cb8b86a9e332787d4ac1bdc20d022ae9588e8d63c22925d5e507bf41faddc17e01d3354c597908124705d88131b2e8ce8d04d660ce4100b5288d750d996e069bca1fe21f9b84c97011dd14c95c3cd538bf619b1df241fcf286c7014f8467a7ee81b2bef1c3bc56573894dbb54efb6a2fff0302b26c7589e08993e755059ba8b94fe728f1fdcb8ab10a5133d0434973e6667c25288b6e5e2d75202aec6bc0255177a53ea7c666afa79dca738a9d20990f118075b9f1cfb8ff1e5be75b49635bcbf43cb3bf97719dae8ec5c5528fcf89a9dda8fe6c08f7f737d69ef181ad3e35cf8e46efd94358b4640de1c387e295ae38edd0d5b80287f022895ca4dd9532bece6b2bbe100a83fef98dc5af595f4f7e4747ff5d28ab372db71b7c1c423183fa8ba4d823cc05b7be8819dd669b6517bd753e83f4d407a72dcbfcd0e9b2d5daef7fa88c1618236375a50ad2baa6a5e0551e679dce352181a1f9e72f5fca8c323b945bdd92e2d424b3e75041734d099f778fcb1e6407c80e7724d52ab110b02c0c9d1d4b78df12fc443fd8dc8fe82d9f3c8da7b87fdfb11e912c97a4e61425ac7b3954cb2e7e46ed0e24cc0c961dd5c2fc619a9e5e3550ca7bc21f2adc1a85c5b9dade357f1ecfd72646b27e7ab59b1b4d63c63082907b3be4cda341c49ade8992af489d11cf285b81a34c5614284ab4bb94018009e2333aa8e4630a9f6792b44b62d9c6e9d1855ffecab30c611cf5dc1e6ec09088b83a4c2cda9e5ee080df0b5e36b9badc035d6991bfd82fbb408faac15ced6ddcc917a9249b767f8844d6458411c1a31ff84e272311ea968ed3ff02f2e0caa47b1a6e030b07984c07d71e740420a9ed47b26799feecbba4f26dcdb61c9422e940550bfafa99ef0f826d2bcb1d7862016abe81d021be29adabe2c399fb9aa2f3ac472012b26ccd4eea2957343b06ac8ad71a637b8fa209ab6d4351fae53a9af0e920c043df94eccd5c1a847cb17d13589021f1a621b457fbe02a16f0f4b9dee0e7eb9358b8afd999d47f5143d49d4aef227f5b06ecef1ed71207e3526ff82b6ec69d3e8788f6c476437fe96f0533394027cf48e3e146aed7943d872bc35de34f7fdba13e5e1c259a68aa8050a813aa734f202ad7faba9f64b16f5068b43bdfb726e5fa54a1675dcab0697fc47a4fa3dd472022cc0d317d39076ad9847e72e1965b227f3e49ad6e8e742305bdd05d0c88b5859d6cfc98cc47a566269dbc4c200615f3e995511a69d8e724f0c842c06c46b5460dca83137656aae785e8415cfb57d57265af9c1d8f126081bcb218a427b80ccfaa95b8bd3f87f58f09ac52a2a47bbff99b057576d26876fa758c8e41172dd2bd45742a30d55f1b65bafc0c7c9c785f583069caf6de080c9057238e110456c0f9e8d898918b6981011f8dd17c55caced49eed32839305ec37b45e8cc4c35aec0c8a4cac54035a941842e5d19fd298757799c4a501718bf21a024106a292626d4eb3c784119b9f5003c6cdb36e442c04ca5b0ea59efb63fe90f9e218fdd9f0864f407cf8edbe71f3fb1d3a587ccfadbf7a5acbb0713b1ca1991e25e75738ca68e1817d08fdbacfab6900242b91ed9541efd2ca469bf7acc7857185d47506fd0a735d7b542949241976cfb1252f2e490fcdef3166f993ff9a812d0af902001a4f239989c087b41de65f83af93e349a2d37ad3b59c5009465e14030ecdfc8fec2d27939af2311bc5d544b19220b12a5782deb83f0e193f57cc4631d8746e7d0736e1295128f3a48aeacf2952be3005b09de00c9a4565e07692d8355a947d072de4324f2e8f3b2f01483d31999826b4ac7bad4f6ae099225f751995f463e5f762b9671ebb79fdfc51b5080af6fae4837a4e00a76b775eaa6f1fa1479b6afe5d66ac5fd148fdc4750d6ae1e268da446ba08dc4d7c872bd6401f1dd6b226e91bcf77c085e3c115f49d05a29c4e282caa7b8a60a1fe09a2e98227a2cbaa838d6053cb56bc7cc84e6ffa81c18ee26c1b32c2ce205c8fee3b2f4fa8d983b4901c80d766a3299fd62e3339a697305ab7cda995b3cce61e3372f152841ec1d540c9f6cfe2871e7cf4e6997afac85b1c05bed03a5e017bce4b45b0903e9c60cf3538df7df9d8fa93b53856fe93f522f723470c553799c90c56fb705040ba78141f7e5e9117f4876c45884edd5059c8588fc39f9c6268038c4a462a4a5fbbecac0daaf54876ac0217a9ab6f83ec52f15a170005e57baead0e8b1570508e10d2c9808ff3a437436d93ffd02c72c703e2e1917c0c82c3a4b4c03cb91c961451e3f6e2d9d9e58ac1810831d7618f81a34c23cc14029326f16cd043e82ea3bea5c6bcb84152d140659d1a4f135cee82640f96e177c030907117a6c6a8049fd3815fa06249ba4b37c2381c0eca124e7f5abd393c6d175ccf0c5fd4a6e9e00d5338899ed03b5a5023dbe4c6ae1f1ffc192411049e6fa34adeefa3b2e6b45165f341e0b853561ea0d183d93100efe80237ab878312281d607ac8dc10f34e6840a6b6d5c2975348a15761326504c24d5ec648f5714254087bd8c53fe131461ca4cea09ab52848b2526edb91a2bf6c0287aeaac51eb720507d66522ff2f94d90ec584f6088910ee079538e43cf8db55e2f0d70a60eac90eafd82480d11ea5dd795a05a698c2961eedad5f8a79dc3ffa92129f76b8d795e24a1905fc82f11c40d68d11af282621b9a2e39a8dd146013bd3a044f55366af078f7c15adc548029ba4ed896ddb646d74e3af69d8597831e08eb4df1b7ed54b8f3b327753ebf47d50a215c461cd422483c8f2d54f010fa9b76e5afef86b1bb8aa6d4b0c5c9ee798791379ed4dea481feb37ea18b5c7c0146aed32772245cc39628ecc13e03b76c302f80ebcb50279fa2ff74139468a23f36881ee7e7119d8040f90c7e3d8f75d80624d17d881e363b4913eb02e73224c7dac1077d19cc9063f8831053eaa9ecf87ffc31140f6a0a47869e5a5660e5d53b404c34e17b4693df9d5418131c8aaabb0e15aee98594c57cfb2202f209a4529a293b37ef68a2e95fb8fe5142e974f1d3fe3a08ed169379387e96ab5d927771ca7157e9bbd2650992680105dcd6a75829e0643b5ad708e5c65ea4b04b3eeedc24bcac8152cb887f32436a11efab6dc2509fa42d3d31e8aac73e9e8e84a88d7096b9549bc4a879d8f824eb63809a253409294f359b76ac3f031e6bf74a4de018f1c666239bae7bb01c523f53efc922232415d68264872296967dd150af095a12717e7eaeeb98f48c84a70fce8063790f9c2f43db477175e1c8da911ce853042d84e7f24df59e8caca5ee93e2daa6aa18e92930b4495dc22ff6729964942d1baaccd07233dcab828c2254f719132271e9239390e2ebb74ddde7284ebb8955719f7d086cdbe7eef6d7298576fac821eae5a8b6ddf9d88a1dcb32121b6d3ce49c245dd675e8a3b2254a9998ec0d0d7d9570bf6b6db0392c5b060872e154841096351d880f71bc00e5a576b14c26f85840c93a0c424cdbbc57b1d1212e300a874921c1f9c0de14a8cf61f8ebd03eee5cc79f34a41235b6c72aebf48243250c6dae8547b6634374e0bd073f7c162d4226a26032bc154eba7964b2975a8d35f17560a5312cf124741c74774f9a30f8d5ddc891e78bafdaf4f86d16d4c1363d23708463ab1314e3bade23316c7fbf51d2a2417da5162f9112c4331eab695d457e3712bb5f880c68367dba95b61f6f6a9297e477eaec615dff2cd3222f21d90abd8bd4b12fabb278c9fd44ce1ed024ccf908cb4995a1d9da53f62532203d7079e20a46b2b069be4b13a52a81c3b5227f57d6c184945a1799e80dbc7cd137e3427df352c0c0fba04f3b7fb02aa36c9af4611ebb51333326f8f750d662a0a8b43e30acaaeaf2653431b57e95a77adf8261298f791d200c02bdf4b821f7d09f972dd165ce92109c8dce081bd0bd53f598200bb3c5d875bbf1be2a7dc68355e42c515c20f2d72cef3d680a42e8a705f17c6ce15f47b144e55a3e566cb73ba5ee18c5a1535e5f4b4c1774736ed1654bc024b6c748b48d9cea48a06a571d264fc876f9afb2bb43441b39bb3f9e844f70dabd4d0ea06a46c1361a60ef5914411397600e63ecaa65f6598b4ce6f3a967c93ef0697e268b70d0637709ea3fef1da8afed0d2ffd36503197efcf68e0a2cb10b4104b209c133fdbe11e07a8d5c511045d19b69c63818e55168de4357a99eed1d8410664efdc866451de9bf6794d9742e2182449e2ae3869a01f1ed7ee37ffe817a38c502b8243a1c05f1ccbd349c7b9864cbf45b5a3c6f395e4a6602a02bb80ccac94ab66d67dfd8e5cc6fa6321e930354a2c40a1e8d360752dbdcf00134d34a21b24b9acfa2cd37f3c191461f4c9d8243176f42a8109bb05c37ee715ceb027861cf71268f283035d71ce4bae4ac5f79ee5211475ddfc33f02dcd91276e5ca265e5b9104222fdff5969f434a4412ba9fe00aec27f559b63c25a9e8d53c063db549035ec2c8e91e1a6247045541a7e28ff6c13e9f29a3683e55731d80d714b9d5801cfbf617aeb6651290293ac0f4e246df99e72434772b7d8494485537b7b2063c7bc5e80eb6c7ab6647d01189cc910aae2fe8249a0fc3226caa8994b476c6777bf113d153c43da337a6304fd10582d58919596a6de42ad500b62c1e6550d8cdc059496073a48110b2fccb42c96e3e3640f1a87fe379779adcd8836aa8dc545db39bb3afc032c16977e150e9572c3e5f8e04bc15497ec8217a0e187ba097fa95a855af66d47a105bdc3c837091daf5fbeb3ee5ce10b132f912b89ea1c6b9ecb8fbee0e4ea4e43b835ae583b67aab430dec741ea03195fed3cc164472d4b571d166ae20e0a309a80ce00b0fb349f7641f41a31993a8bd9ee092aa7ef16c9563e4db6236c9e702710dc95b198f533b1140441a1827aa4bef6a01c689127eb7028d1bb083edc8a08b8d239389d99948f1290623ba908e6e1c606035b70ba7065f8011451151dca715fb920b4d87858f01c5484df0e63656", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="f1737118458723aa6fad9674b336ce0f0e4f9a590af9cbc892ffaeebd2c1911812584b169f9691cb3843c1544afa9da08dc0efe3e6714bb529f3285f9633156f21460f0b19504f21e4202650e68b3cd97a3824ce159744f16e07623a38f6077b995bb70ca4e6ee313fbd9937f0a8cd1043a853b5ec18a6add5500124870643635a47134d5f346d2ce498528b289030d689ee4f1933955547d7a1a02c16d1323328f83c6e39efa19b3a4e8e2acb7d446ec70955b9c122a881df65114e309ed9605225a19a07f6df3a52599aa974975a7598fd5d8977a4083422a83d795e95efd11e78201892c1a667576f54faa2b090f363c5c6c58d64e62332e935aeeebdf0a580617d12f4dd957d13d21eafc3987ae43c0bdb0571c290227757115432768af7581cfa8bd90a2f0c85aa43e6e7496a6a1d16636eb153961195e194707bfcced6b31cda93d1d82824bdcba11ce636211e6a2d8fd8b49abcf68e35d4b5b2be9e08570d89896359bbe3fd3fd8df8d37d6f34009635b6f14922e0e13938f591e5dfd3ee64a13d1010109afaba564256699f40d4af9acb29f57cafe956852787e5b1dc0c6dc61314cb51346926eb41a252a2a44066fb7c38772c55f0caff0da346821b1efe13669272b084972ca5eaa678896bbbd2194429e310ce954cf3de048ecf8843b82acb61bf7d1760cda8f0f8d781f207c0b81c655b52c41e8b2070a7ef45a8e1ac0070709f837b2b78ecb7c50332f1ed5c1f9a369548629b0f10457a7ea478168fed1f0c261921e19ac478eb8e9f703fb6096925b3bfa6d3d60bf712220ea5f5a6e9c33ecf653f40849eb4610ed32c7d3ee443aaa6aed33dc590d8133e71391dc45d560d7442ba325aa88eb81cdad58f16794832f214de3ac2aaba11e4fe94b8c2002f101e0ca72cf67de89f6beeabe2eca30841cb62bfcd70b3c973bd6bb3b1d5612fd02c03bea24e54edeb558d656e494f2f9753e241ba8cca7ab22a0c386fb13139db2b8b182f9449f98a745abca05a5ce4f0fd500584a975264eecae3decf0b81c9b0cb16a53be0f7cd101e75e6d355b6410c62ce731739f06141c1a0185dea457167f1f07acf137d854eedbb63e3d4812aaf8bd89dc405be6a55b08555bf6fc8f082a3a6dfc359669bb11c8245def27675f9f7843b5b930bdc7e8a086f2313f35739c29369c1380370021583af2620fc001a0f283d2ab738a936b56d9444e5e321d0277ec0528c1ca6fc17241f6de1b797f0f9bc83b47addff767926ca527d409eb23ba7f8269212f40b886d00affad255871275ac0640e2db57cd710798c29b09ac4074f69df4f172b95941e8caf60aacb9f84f71bfd9980c7dbdb0e3e06ef74bb4593b63f38859de8215e1cdea56832830e1c6c416889dbdf5a58492151876cf501884abfdafbdb8fde2d82dd77cbd20207ac9ab0d8e5976292ede3bc3358703f720a960e1cc53158b6c05a68815aecce32d51fc2abfedb2ed709eaa45193da955b7d44b6722af26f3ec6c437653b267218f8cfbaf013aae88a9a0bec88aa9916cca6e9115eaa299549eaa847ba5d9490c65037c1cc94281645ca39d6f2d2706f952c1e0cbf53389dc66d442553e894c7656512eb157e3c39144988c1e3ed27af98318d630fc0896e96d7d212ae80f9bdaaca8e558e6033414f5e8c86e4b2ebe4cdb077ef6f286f3c98a9545f5dcfd46739a745150ab762459cceb1d2e9f56e2f1e59c741c47c519da2a15a14b75f1266d023ce78e9e29782e6b616deeec488408fa53962bf412937bdf63b25c469c92867b145cb73a46f88fb81df683e979bfe15b65ed905b6c0eceff85c3d0b52efd411b3b512d897775b64ff301ba9cb2618595af4a40c95795f8993aa34f13684d7e56101fe2b9869df1d6ca3c4ef81c62323734c8dba6cf4bccfd9074147ecbb5f43b3e85cb064ce45af5b6086fc016413afce0d38f9a4e916e1fc08772f158d791d1ef86e58a60893962bb93b21e2e0cf01c35158718f395df1489767e94b4cb717dbe73693cd98620f1dda1351e40495e6d166a1d5b56054a97a40ee86b4b48cd751831352e9bbda8361eda2bd9fecd6df15ac7dd6c51723c7eeb58ffe63746dcae6851eef9473b9200f4681f8b14a36215fb6279a19335009c6b1068c042d0977ea75ad60ed06961ede6fc74f84f49d3fb72b251a8acff52d0a1e8ec8e9632b831cd24c62867eacb7ee36532c801e3567d7f2fda8768f98b981ddd583dc4e3424c59c6d2de874d3a7c2b4fbcc6e3b96503020ecea0728480ca04a2b90b183ddcfbe34156341df97aab3953aa9b81c3d69d9b20511e1cd850609b3f1d1e8dfa6e8bf90a927d4d3b010dca06a1b09aad8f661c56a895b15375a6a532e76486509b7c17e516c2c67b3f80d3510127252096df0fd45e0cd62d24cb7658460f674dae61e932335fddba62ee35143c1071459a8f55e42768b777237d797418b5267423bf1f0c1fc130e2b7d40a0997d26030c9f485994df68f30a910221f502f26ee500bfa54487dd6a82ae964da5b967e8eab9ffc9d4d5d0199f4f633dcd9713ec2e4484cc25dc7cd06cc3eeecf874270871854a5e96c8b424214e1202edb23ef6fe692640ece04ff9665ec050bcaa0c1ccdd96e285bae472032d9e2f889559596a357a5fb9481599013d9dc0888c33cbfa9941e9739cc342ecf9ff6f0a08d898c2df11eec9a9c994d227436156dbd07f128f1ed53ad4ea1245d43cb1191a0afd18049f86ff0f2f33a22a40e3f32a04c7b888d044f38be60e9379cff5e7cfcddd195cd465dadaaaf03123dbd3e6195d50a24a8e3479cc82f14cd92375a80594e7031789153a6f88f1f1d9df102c9247c1169159d4a724125710f6404b899e4b9dd1ad8867eed6267db02186b1583d9178845c667617b09f82203fcef74d45a7de4c04c4d131cce81aaacf12d05eb6d83facb43e102a2fae3a0985b896edb6be894c3681a594e3b3c7d543094a3fbaefc75184e1f5deb061390033d0fd6dcb0c70594b85f0b9948a4ed3f1139ba381e5a22c65a72cb061f515ebd2df85ac162266832b6665af9c04ad0e6add65a1d209bcef3f5e41c95011c31f6a4421ba939fb3c15ee9e4a8195b374dc1008c6de0fec3631b06ad559f82b4b36c2fe39cff4341a3b46b119b27a9df883eb3229f835190b3b6f7f4b7f9f7824191bf1af104a658bf2d4499c7f619bdf25aa42917599f42776933dfbdcf20db67987f11f89019985d93a93eeb6aeb8e9690c9924db1c36c34b1bd5cc6fbac54a17b98def767a5de26e64698a9778d59e50e75e3345eb7ec79db59a8f99a84603d274986e913dc4d626bd44b2fec6090f1de8fc22ebf16ef5340bb1af38b72e370e565289a6ee1de185d7f353e5b860963e998aa58044a9b1bf847233e16952342ca24f07415c0a88675b26a89782efbe22ac0af0def87aa7ed8d14fd23bdf46c2f08b0c40c4c179a282a46c0fcd50a8280c7050eb5a546c9158416e9f8c8b5e64ecf18922c73968f8dd7bbff56a3983f2502cb76fd0cb3ddbe59ddfae5e6a95d887adbd2b781b136fc5a5c19e808dc9aa84f315f5c184b9e7dd037e6db1085f922f0bbd442156b84616f033efed03c206a87c733cfc57d1202dd89dcad1787e076686b1621a8fdcc80816973771ebde777c4f7ff755b84728b51bbf652c69da3308841ee8c946ba0302f09318818c763a1d38751930d5f2debc407c7041437087322a1960795de89ddba8aaf11a082305f696be662be7653a7ed397e5dddea74932e1e6f000e2969fdfc979ef263040f3559a83a64c546c5cc585dd9a38b238819ac1ae65cc78d3e0ff7e66328503b489cb3acbc6308c13fd8477831d700650dcf909de1cf8caadb71649fb022adb5e4f7887940a076966cea00a2c21ea802455d1d6d9ce91364f69414b4d7bb30c78ffb5ed4e8f35340b53ce066e11af44ad34efa6ada894754617d0c2ab97c9e9562193bb799e42e4bad44dc445d371a1b62f358b19727f3efb868c3f73c473b000bdba882634b3ab4393c0fdcd902ef42c6f369740839dad77756c4fe2b67ee95c34d7329b77880cbd2437e2ae63385df40eb92e300632c8338688fb2be65bcfd90150c577ca23e591995a386fa59e6faa9e9dd58e250c0a0d4c81177d0e7337c3b6be151644a8ec5c71f888c21373876e673ddb8397839ab7d83111b4c9fac9a416105cef6d7bbbcc149c1a72f1a568739aeff4d43aa70ea4707cbab6dfa37a693a74a462e26693e6a6fe398711984e1d287469fcaacbaff0db800b94a450e6624f1680e3c8553bb4273b901d895aface688bc12e1350aed78df83b153c61586dbaa53f9108fd00069e593f613823284d42121cde40d7aadd98500cbab00cf593075cedfae93ebd19e0246beed22f0988886a77b49e50c71b0838819b4e1ef89eb1634b8c020856955578ebbc94bfde7c8b409576bdce4153d4146bd29b66fb639c8a2c6b2d5d04e9605e25c6fc5edad73f870128915a00ae9ab0f170e0917ce627ee1ccce3de5332c368417ca9784d6acb3adcfddf8b62f05f628ca044a0e9c18ba0b2f5b46c76787418ad81f60c6a50d7402abc68cb6458a8bd460b8cfac86d6a31ad5a00210d49234313a093bd4ac39c1c5a9562c4fc33c66f7729ae41d84273c3f71049fe380cb6615ea5cc578867fc10c4e5b041291cb3a6a1c3a28c0f839aa356875ea064ab5c057c588642b23466c4835b89d3aab81de754428b138278c5caa627e5aa3e797ea27c2da530314b65dd35bb8c1f8d265a2b71e6a1dfa7093d75b907e9d35b1be90fa7934b93cc2d8e5811f421774e6e66182483867d15ff0f47b933b8a18815a099593f443d1d2a9827a49fea6b598b76a0d1ea3aac5e9791c8ad36db3d9d936e977e819fd4beeb1dbe2ea06a9156c99f124bf7fb93d48142fdd65486ec4987284210f0d9a194f87bbad0b8277da0fc016f4393ddc6e66ba19cb8f5df4e5dfeb2e12ceba9fba5670b3fbfd3670b2f59ca3ac02214cb800082b1329f3d4f216e2c4f328b9d35b0407f4e478f93e3b6103dc71527a095fc9f7858ff32616b0e3eb8cd1893690a00a9738e78902e6c44d42816bb5bfb00aceda90b2665c21dba51b6576e66dbda31abec2fc651f2959b1afa8a36217d8c928061e6c1fe11c8d3b561eb48fb419bad1094fea3cd5897abe8142425e3f4a40086d2cee919f1227eecc8a67a5ca6aeca58112c25fa0b637f2066ac53094b3ad1248686228ddda88539afe18ea4194335e601097c4c86a358a6ccf033cca09873704f694b31a8c126ac428acfdfb7d90f5fc1d8749322c73f1d9b9314ab57d4043083a825fe162c66015a273640f1b79d26f3a3c4494fdffdf7aea4510d7d25e2cd55280ca3b2bb3df2c20cb6699a61364c3b5faf122a9f4080d0b9f0772b86f73be13244fbfc095c2a29ea490b340ae6d3dfa31468fdc5c4b6fcffd9a58e32786ada21e978b23bb568173cb74f1846c4480903a0892abf5080c12e811da8b41ca46ee43f0f4f2aa1527b582f037906f48f9025cc71403be4875b03afea87501f48b3eb86016dbc4307ed907dac26a7d8674a552a73ec9cda9cd41de8057028269022b8540ba54adcfec3e3daf83a7d853602bc41aeac6bcee06421c82f83c14c725cbb10661fe1bf41b574837f5f6cc502c8605d6ca8f7308dc4660e565dccd81fa77b0c2c35aadddfb6f5d259e874ff9d5827480f6a70b7dca12c1170ec504e2fefa0d9a087ec736c8f2c26f1e23b11008b84c976350884dd050d03b2fd6ee3784a12b336fe742768c2e0a9c918c07f73f5b2eb6b789c055d9a6d7d27d11b76876f9798f4b65ac4769729eb82a0339a84aa9af45083e19580a2d85ecb1a994747fa3ca3ddd84b2d7cd0f3ba1e5258f59bf3b573d2f3063bdf1a9080d09875a56ce890572ddd4e799d54749619f587f992d72b7bb56eb2906b1ea8eb78add294817271baec90a6ed91f34283c3e0a1d313c0e90947a04164d688fa045884ccfee71cc3ba53767f2030ccad1c09cb31d1e071008869fdcacad466db57782360f398d0b17a4f8e27e3f8333ec3b4042824ea4ccc76178fb5cb438c0aff1e93ba9986237ab426b7efa966be2fd02ab3213750396cec5f44df923f5cc3f9c68955ab606ad7b572375bb4c668d4edba8c0ccea550bea5d5fd3e92c2fcd78c019e1df0021c1bb00198df9d6084d0ad6fde6f426a2b34e1e7d4b352721be93668a88300f0acb63da70bc1d3588c5942f92d50e583a6a94ece7d18cbfe35c06ae6a54a94d6cd37b16fdc4f3065c9639cb5db7f498510fcf855f3a104769c2d19244b6ef2d4b3c0a42ef0241aa8a8d6f804bf711a9d8512fae4abe127aec074602b78fc4642f7fff959714293df2fb8fd7e5e785c8f0de835fa8e5a067b347c98a359ea7985cbf802f62540d2b764e3877e1ffcc73dedfa2567eb68c3b8151b4434dd2bb947a2a0d71c626cb38e266702399c19f09b426528609186d00e87865f53ebff94930c49d20c41032148b3df4259324f5773c1c8435e6968e9792d762a4a87642c75215cebdb80da1d48b8cf3075769dbb482a642b1a714fbc3e8c96419abf2d9e310a04d468d4471fe19f41da18a3b9838c74762d72af909fd965900b3f6811c830955ae04d42a4808edfdf8983a624be8988b8a32a0ce2adcbd2478a6ed05207b91da8f1afb0b7189c9f87b0ba58e5f29d6ea811280f86a4bc8106a2129d07b915da29f0d230d95df7a27a93b2836d973af86bd2ec5fad21ad70af8896f404e5441f6416124908f85befca958e2b537d50b047ad70a8b5acf160505c3450b37e3aafa8e6b50dd8fab7fb98df24d6b13e7930abe7785dc6433c882bbf87069a000d5ffcb99ee0b1b79cbba4902b85bde0069394b2cfd70bd887230b5866ba25e728253b17d2854d601cb7f12b2f72ac4f784298747b904b1eaa52b7edc42f0f23dec2de8ae3091bb57b6e5dc1f4bbf67ed79ef764184867877ca49907646e4f1aee642ae865ce645707ae524b974c36b719ef3b30dd8bd4677d656be027a09727daa538ba3b0aa942329b80b769de13bc32edff90c562022a3385d5ef583d59d59f53ac4f1deae3de3016c300cf62838a60bf29f76debfcd893b80c6138fd17436471a9dbae3b8f12ea110d6464153d89f54117ba0ab44d7f948909efe0fc1e28301155759e94c35e54c758551ca66b51044ca98d92963586ba2c5bc358201cf33578290459baf1a672f486aa1eff62290df694f747f9e72ceb185448ea16fe43acfe958bd810a9c33d6baa8977628163d5224aa2023b49057638fc25095a2cf3f1191ab5d6e744da451255f08add20aa6544eb3f1b69d92a3d02ceb1adf4508a8a217004a51c69af3b5ce7f33ab3c6c2dbb6a78952cdb8dd857dd99dd2fc78acd876da17b1b8a91d1f4c96e156c55bdf513ed0522c8bc7e8cfc8dd1a76977c45c636c168650d82e3ca7560ee9312c1e54a15811fffad89bc44c0210368e12bb320ba9f763a116c8ab7724190075cbba1cc1d15d4e790e95be4329c7c35b61cf6a69e32c66ac2cdea1e1c39c347c5efbb96d9237d85243880df5b696bf2235f802c2d3d7cbd6cf42d2834bf0d47c5b856eca14a166306db9e17217d1c9e22e5a748720da74050f1421cb6ade2733d934ff3f4ac06348ebd9b248dc8dfda2be1bb137d09ffb0da3500000e1820fcba98a5249c0192129d2a806371d2dcf624dd2e0962fd8920cd2176e5e292fa366ad5571d1fd440dbb0f4f1d246b44dad609aeee816cd7a0e9f2dd49476a908107f4bf1ee71ea55a8fcd75470d63a5a1066e83aa230c9b35c484142572c89d2d66d1554e3be9adab0cc94ff88637dc45de22caf4974fee6ee6305906a970bb94f9f9845a25ceb7c020e78e9f0235369309e84954604d751de90d31bf764e9065a48724ee3a62ef8296ced0170f40c9201a09b8e0f4329416868036996a35b39ce75aebf3f5525aa68b94487e53596f70b5e091dc8957cf952f319c6b02485e132dbacdae8602c185c8ecf86cc26a58dde9265c46149694a9bf7ec12627ce2e485457de508bc0b9b96e560ef2d5cd2704118aece1e4ea15b4c04449c75e91bf0dc594eeb249e5a458307fa0d8e3a2a7c1035ad8155b3aaac508574325d7dd02bb02ec4701132b8cfb558a5a30c919cb2633c733c0b0826c13cecd71c66c6c7c43831104e7f8e70e51d36727e4426dd36c726f7a07653c240f71a7bcf5b6f56b77824a50765f1fd50b3a6408a0e4334deb5c84b71bb7c739c35ac2c98358604aa2f8c7ed6d4165704dca679a2e3d47f609dd78d3885a50e9305ac50b776d0e29fa4c286e6a4906328eef1244729b8a6c41afa29ce7adecc5fbcd443fcfa27c59d54c6ffd53ade6a63893b4efdf94ca0bb974ed253781b2697da2979eea306e9ed53ce4efc9d85c7ee6ed378cc6ecce8d508e5c6a9134539c8088a138924ec6a1935f96f9a6f6864056128a35bbef306b913c100965e32459b96754a16c33c1c9eb9a385a17601badf3a0e2098bf255cab5791ead7ee1a3268aaeb59a6b225b1986dfbe297d90d9b395f676d3a8e38a2bde9165f1ab17c1890b23eac5760d62014a19c7e15bf4b939ef1ec0b4e160fbc031813138d1d336c0cefe17bd501b84b455d01ba3ae2a6d21b990c009c6e6fe1151017c721079dcab44c1de8d0cf6ca655cdb32c70f72080be5f99abd81af3954082d072d05aa277528cf4828ede3572f663b23fcc2a655bce6e35bd341f4d91f63cd95c46da122f49f45c564562e252fb03099db6f9a7134f03c82ae9e2af98ea8def5d5d40c7c62f56723d0f6fca05b64bb6a406fe38f0a1824c12f8bebae475773f163830eb61b6f97bee538044d53895bf9ce8f68b4aa12a66fb163d68cafa301f67e6ebdf4c55d627208315a20ae2f0d477f394f9b6c94e0adb86028595f3b11cca00e57b68e73da304e324a9297f17370184b80bc29b98ac4b3b918b5330494e1ed3c96af7e423651e69cce63b6c32dd8324c0d6022165958588669d6aae81d03ec64308680e087029676235341947216646af7783e7eabe9c2df6ada36d7cc453a2c3b96078d9db69064771ab0d6428d8d8c258f32bf9cc7e90d1131328bfae23fa499d02907b9acdf2bb24f8c083baaf305c31160cef6eff3a1ae243f0d29142235b073a19fc547fa0bac54f3dad14d501eea3f0b5207bb966c7168e1fb175841fe4ca98ad75c6480d208458383b771450179a4febf14779e7a021ff6d87681215041d2225caa3549f1c26551ec97e1b056bb2cebb294ff48f4ffd7812c7b77d8a38cec1be54629400736c9ecbec21b639694980ca10e1ffc2d72b633c4117ce5fb7fea75810e2c30f78ae290cd4cef094d5834932f244fdde8e299192fe1db4713ff23ead0cbe3b38ad1836d8aa646818d3de42c77676abb79f05f31d2fa63c17c3c70835269716fd0417c1440afada13ed57575165e42a7f160475c32177b6f50b2e65e20c74a27f481d5871297ae805a11bb99b9c7b373c629c3a08d84adbb6ce26e66329d83ecfa6c03710a3ff013a43dcc69ab3a72c99944f05d20e20e530a465f57ca9a309989c3a0df1d1f041af84409906e333fa685ab17b941297bdef6346e34448478ddbcaf31c0376251e0cbd186d26edf58c364eb511e30d26dc5ccd32e1252d665e645954b4c3c96cbd7cc3296f440b665a53bb57e1160a025ae725ca007945fe347f06ac64f9fcdd00c5eb01a0d1bf0cf9007742a9592c3cb5db7421d9205a13c71281990b82667510496af5bc8db8e7453ebd430be8f474644e943cc6806b7a59d060c8840a54312bf5238562a1e272d3a88857480a9328cea37de53b7bb7844ef6655171a8a1a49c76cb0e50cb7892fc081db3cbda4268402b0e092ac10cc5e39a7297b6812a3e918a2e510ed021c605357c4a2eb3d5f7a1c5f3a4559f761cae740b3f5d6afae6f9a7899791ef492733dbabaf62cca0f4eb8b4d87d015a1b126b58d5371fe4fc1c81a217a53d3b24881a7bd0de3ef94b9487a14f831697a6c9547fc9df2bff8e228caffbde702a0e7cd267be77365394e8ba2475bd6e50a54737bd713901d8d1f53718275b6f1c1bee6d5a00519ec610ff305e20d276b7413ab1527cd6072d84842218d43dd026f4ea31610faacd33ae4ff49172cb410ef4ce8b8ab5b0ef70aabaecd981506d6616b3c30fcc405c5222291e2f3cbde7383a6814b56b1641cd983bda427c6182ebfb462dd20f7e46fc55516db690abc5c8ab4caaa21548c763eaa80140a51d1a037b87c829f65b4e628665655513787346837c3094d3d8e38aeaf0a8f1d4bf6ba84a09bc47980037ee2b0dc05d6ef7a9d63eba77cf803218b4689fa8ca706236d91d8ed8852c75c4a492a77964107dd7cabf1172868f51e87ee96f38c56da92e511a7062997026f01e0dd13cc30f53a90a5aa7f696088d945557afd10e3e062ba1804bcce2c52a8a2b54b0eb7b865b9fe394f9ab0c8bd0890117f1bb01d4f331560014afaca39b16d98b4a40f536f690a69ceb2fc6bc4bd7540f760c3738770c0764a9fa3108c7119fa6492d498988e4bd496eb42dd60bd01a323e77ce4949c9d7f7da7f98dff0b90598e5e32c600e7724287c6e4762b7a4be4d69f80d125987444cff287ed2c3c80eba2f91450d0d13d1b9189dd4b24700917545c7adbb4d86aa63be04c61954821617c53877458c7ad3ed2970116ea28a4237e27a81426baf32f60f4c430c4dd63f387b50996d1c7303374725f2008498688dbb5a6e84fd8fe42b027937296a9f37e8f5be730ac7a0902bf1b1169f56c6ae7d9849c64c1e483b7d9852a19c255793a41064a97b4f5036b3eba49219e51f7647d652f310b386c47bbf758beacac9d4a5afa2fa84fb9ae82f6484698bdf8a950c07fa4cd3a720af136f52de4df29f7c3cb9aa71f4a6c7b14eac577b6a0aaff394ed5144a4f89500abb6b8b48f64c1f119628ca8a0cff11b12b92cec6ed71e3d99bafec75a30357c1e59ed6de22ffb42fe420b6ad863587c02d889de3fc24462c9a70912956a633a857c185a151e9922ca9365045ba275c10278736fdc5b221a41f207a4e8c878761a1afb7f9fa59eefa395a91b2d08344a7fa0a1518bc3a1b0d749bbf5a6772ffe8b0f612c5d4ee72eddf3007dd6f83403606ba74d101cf57a3881f78332666fea99e8394926c734f1bc3de5a8bdf5f486e5e557d2e3a4e9c0334cdad51ba2186dc58c70c117ee99a22dc14a7370e88e45d5ee35f4ddc349b333de6510a3b34ca558920e04808bed886638db09a07ca17b4709f56b6bd247f71c1dc7d888104857fd1b9f2c95f43604b48058e7a044dc3a0a46c344951865e9f2c47451abe215f12fb255d08775b0a977dab035cdfad6c2574e10a9b9c983fac90a7933d1e46acd260d0982a54151faabe6e0829b8a27bc9939a9fe65f538db514261be4e257a7d9b820143608560bb00351e67b35ffc90f288526e373453ec499ba2cb64b44c8149a81f742553d25be0689eb8f2ca48d90728e423636de06c64a5a0bbbb5da2a7c17521c09192230d3f61093d1fbd3a4d1", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) 2m31.25582797s ago: executing program 3 (id=4366): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x18000, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) pselect6(0x40, &(0x7f0000000400), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) 2m30.351962485s ago: executing program 3 (id=4375): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 2m30.279216801s ago: executing program 3 (id=4376): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x840) 2m15.221839893s ago: executing program 42 (id=4376): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x840) 9.592842222s ago: executing program 0 (id=5373): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$evdev(&(0x7f0000001500), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) unshare(0x62040200) socket(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x1a91, 0x9482, 0x2, 0x0, 0x0) 7.775306256s ago: executing program 0 (id=5380): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) epoll_create1(0x80000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 7.633161695s ago: executing program 0 (id=5381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200"/647], 0x310) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000080)=""/57, 0x39}, {&(0x7f00000000c0)=""/60, 0x3c}], 0x3, 0x5, 0xfff7fffd) 7.080585666s ago: executing program 2 (id=5383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$video(0x0, 0xa7, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x7, 0x100000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24020840) 6.441455361s ago: executing program 0 (id=5387): r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, 0x0, 0x400601, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000340)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000500)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x7, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000"], 0x74}}, 0x4040040) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x3ffc0, 0x1656, 0x401, 0x5, 0xfffffffffffffff7, 0x7, 0x8d1, 0x3}, &(0x7f0000000200)={0xb66, 0x9, 0x3, 0x401, 0x4, 0x5b9d, 0x5, 0x4}, &(0x7f0000000240)={0x989, 0x8, 0x80000000, 0x127, 0xad, 0x7a9, 0xde, 0x8}, &(0x7f0000000400)={r4, r5+10000000}, &(0x7f0000000480)={&(0x7f0000000440)={[0x4]}, 0x8}) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 6.203766933s ago: executing program 2 (id=5388): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, &(0x7f0000000e40)=""/58, 0x3a}, 0x80}, {{&(0x7f0000000e80)=@alg, 0x80, &(0x7f0000004400)}, 0x4}], 0x4000000000000cc, 0x40010003, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, 0x0) 3.714013603s ago: executing program 4 (id=5395): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 3.679704998s ago: executing program 4 (id=5396): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034000)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) 3.644211683s ago: executing program 2 (id=5397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x2198, 0x30, 0x1, 0x0, 0x0, {}, [{0x2184, 0x1, [@m_police={0x2138, 0x1c, 0x0, 0x0, {{0xb}, {0x20ec, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0x123, 0x6, 0x42, 0x81, 0x1, 0x3ff, 0x9, 0x7, 0x0, 0x1, 0x3ff, 0x7, 0xd05a, 0x3, 0xebf, 0x1, 0x4, 0x54, 0xb52, 0x0, 0x1, 0x1, 0x4, 0x6, 0xffffffff, 0x4, 0x80000000, 0x80000000, 0xe4, 0x4c, 0x7fff, 0x2000000, 0x3, 0x2, 0xffc, 0xff, 0x9, 0xa, 0x8001, 0x0, 0x5, 0x7, 0x2af0, 0x3, 0xa3f3, 0x9, 0x4, 0x8, 0xc46, 0x9, 0x7, 0xf9f, 0x1, 0x6, 0x7fff, 0x7, 0x0, 0x6, 0x4, 0x4, 0x1, 0xfffffff1, 0x6, 0x3, 0xf78, 0x9, 0x6, 0xffff35aa, 0x9, 0x7a16, 0x1, 0x6, 0x5, 0x3, 0x6, 0x6, 0xe, 0xfffffeff, 0x1, 0x1, 0x81, 0x8, 0x6, 0x1, 0x4, 0xf, 0x5, 0x6, 0x7fffffff, 0xfffffff9, 0x1, 0x8, 0xc, 0x7ecf, 0xfffffffe, 0x5, 0x4af0, 0x3, 0x6c5, 0x9, 0x40, 0x9, 0x6f, 0x8, 0x8001, 0x2, 0x4, 0xf0000000, 0x4, 0x80000001, 0x9, 0x10001, 0x8, 0x128, 0x81, 0x4, 0x7, 0x4, 0x7, 0x52d3, 0x2, 0x8001, 0x5, 0x7, 0xb6200, 0x5, 0x101, 0x4, 0x40, 0xfffffff8, 0x7fffffff, 0x8, 0x5, 0x8, 0x2, 0x10001, 0xedb8, 0x80000001, 0x7, 0x1, 0x33c, 0x5, 0x11a, 0x8, 0x6, 0xffffffff, 0x3, 0xffffffff, 0x6, 0x1, 0x81, 0x2, 0x1, 0x8, 0x80000000, 0xa9b7, 0xfffffffb, 0x0, 0x25, 0x0, 0x4, 0x401, 0x401, 0x5, 0x8f0a, 0x7, 0x3ff, 0x6b5, 0x6, 0xe27, 0x4, 0x20000000, 0xfffffe01, 0x80, 0x553a, 0xfffff000, 0x7, 0x9, 0x5, 0x2d4, 0x5, 0x2, 0x7, 0x10, 0x8, 0xa6fc, 0x5, 0x5, 0x8, 0x8c, 0x5, 0xb8, 0x209, 0x9, 0xa, 0x53, 0xc0, 0x80000000, 0x80000000, 0x5821, 0x5, 0xffffffff, 0x1, 0x27, 0x10001, 0x8001, 0x7, 0x7ff, 0xffffffc0, 0x1, 0x9, 0x1, 0x480a, 0xfffffff5, 0x879, 0x4, 0xfffffffa, 0x8b2, 0xff, 0x7addbc19, 0x0, 0x805, 0x81, 0x4, 0x7, 0x7, 0x7, 0x5399, 0x9, 0x3, 0x8000, 0x6, 0x1, 0xc3, 0xf, 0x5, 0x2, 0xfffffff8, 0x7f, 0x99, 0x8, 0x159, 0x4, 0x7fffffff, 0xfffffb7f, 0x81, 0x4, 0x3a, 0x5, 0x546, 0x1000, 0x7f, 0x3, 0x400, 0xd]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x1, 0x7, 0x0, 0x8000, 0x4, 0x4, 0x800, 0x5, 0x80000000, 0x9, 0x4, 0x7fffffff, 0xa00000, 0x3, 0x0, 0x400, 0x5, 0x0, 0x8, 0x54d, 0x4, 0x7, 0x7, 0x7, 0x3ff, 0x10, 0x8d4a, 0x7, 0x0, 0x33, 0x1, 0x10001, 0x10001, 0x3, 0x7, 0x8001, 0xee, 0x10, 0xc, 0x5, 0xf, 0x1, 0x5, 0xfffff036, 0x4, 0x0, 0x2, 0x80000000, 0x9, 0x506, 0x5, 0x8, 0x3, 0x7ff, 0x7f, 0x8, 0xc3, 0xffffff01, 0xb, 0x3ff, 0xff, 0x3ff, 0x8, 0x8, 0x8, 0x170, 0xe5, 0xf, 0x2, 0x10, 0x2, 0xc, 0x40000000, 0x7, 0x1ff, 0x5, 0xb9d2, 0x8000, 0xfffffffb, 0x200, 0x8, 0xffffffff, 0xffffffff, 0x7ff, 0x0, 0xa4000000, 0x0, 0xa, 0x74d, 0xc7, 0x6, 0xffffffff, 0xd, 0x7ff, 0x10000, 0x1ef6, 0x5, 0x7, 0x8, 0x200, 0x2, 0x4, 0x3, 0xfffffffc, 0x5, 0x9, 0x2, 0xf7, 0xfff, 0xfff, 0xba, 0x0, 0x9, 0x3, 0x200, 0x1000, 0x8, 0x5, 0x9, 0x7, 0x0, 0x8, 0x0, 0xb3, 0xfff, 0x68, 0x400, 0x4, 0xfffffff9, 0x6, 0x7, 0x7, 0x81, 0x8, 0x101, 0x0, 0x7, 0x2999, 0xfffffffb, 0x0, 0xc, 0x8, 0x4, 0xe, 0x3ff, 0x8001, 0x8826, 0x7fffffff, 0x2, 0xc, 0x0, 0x3, 0x6, 0x200, 0x7, 0x1000, 0x9, 0x2, 0x40, 0x0, 0x1946000, 0x6c4, 0x3, 0xfff, 0x10001, 0xa9, 0x10001, 0x1, 0x7fff, 0x8, 0x0, 0x101, 0x7, 0x2, 0x401, 0x1, 0x7ff, 0x0, 0xf01, 0x7f, 0x6, 0x1000, 0xdc0d, 0xf8f, 0x40, 0x7fffffff, 0xb6, 0x1ee, 0x2, 0x0, 0x5, 0x7, 0xffff836d, 0x3, 0x65, 0x8, 0xfffffffc, 0x2, 0x101, 0x3, 0x1, 0x4, 0x8000, 0x5, 0x101, 0x0, 0x83, 0x7, 0x6, 0x1, 0x6d, 0xffffffff, 0x101, 0x7, 0x1, 0x6, 0x7, 0x3, 0x4, 0x5, 0x1, 0x5, 0x8, 0x6, 0x401, 0x10001, 0xa, 0x9, 0xc, 0x4, 0x100, 0xa7, 0x7f, 0x2, 0x800, 0x8, 0x2, 0x3, 0x0, 0x9, 0x6, 0x7b3, 0x9, 0x80000001, 0x9, 0x1, 0x1, 0xc, 0x3ff, 0x3ff, 0x9, 0x0, 0xfffffff9, 0xfff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0xffffffffffffffff, 0xa55a, 0x1, 0xffffff00, {0x2, 0x0, 0x101, 0x0, 0xfff, 0x93ad}, {0x4, 0x1, 0x5, 0x6, 0x4, 0x3}, 0x9, 0x51a, 0xfffffc33}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xa, 0x8, 0x6, 0x0, 0x6, 0x0, 0x8, 0x5, 0x1ff, 0x7, 0x2, 0x8, 0x8, 0x0, 0x5, 0x3, 0x11, 0x9, 0xd58, 0x5, 0x5, 0x0, 0x9, 0x9, 0x3, 0x1, 0x5, 0x3ff, 0xe, 0x1, 0x0, 0x8, 0x1, 0x8000, 0x7, 0xfffffff1, 0x7, 0x7fffffff, 0x401, 0x1, 0x7e9, 0xff, 0x10001, 0x7, 0x9, 0xc3b, 0xa0, 0x9fb, 0x3, 0x7, 0x8, 0xd, 0x9, 0xe3c0, 0x7, 0x9, 0xf, 0x0, 0x8000, 0xfff, 0x4, 0x7, 0x6, 0x5, 0xffff, 0x3, 0x65, 0x9, 0x80000001, 0xeb56, 0x8, 0xf0fc, 0x81, 0x6, 0x81, 0x3, 0x9, 0xb, 0x7, 0x7, 0x0, 0xffff, 0x6e49c6a6, 0xffff, 0x1, 0x8001, 0x5598, 0x7, 0x1, 0xfffffffd, 0x62, 0x1, 0xbe8, 0xffff00, 0x7, 0x4c7, 0xfffffff8, 0x1, 0x6, 0x400, 0xb4, 0x113f87ed, 0x5, 0x8, 0x3, 0x7, 0xeb, 0x66b3e604, 0x6, 0x4, 0x4, 0x0, 0x4, 0x0, 0x8, 0x7, 0x4, 0x2, 0xb, 0x8, 0x6, 0x7, 0xfffffff7, 0x7fff, 0x3, 0xfffffff4, 0x10001, 0x0, 0xf, 0x8, 0x1, 0x2, 0xe, 0x80, 0xb6e, 0xe7, 0x2, 0xc1c, 0x7, 0x3, 0xc5ba, 0x2, 0x200, 0x8, 0x8, 0x1, 0x7, 0xd56, 0x3, 0xe412, 0x3ff, 0x5, 0x85d, 0x9, 0x7, 0x7f, 0x9, 0xa, 0x4, 0x7fffffff, 0xb, 0x0, 0xfffffff7, 0x0, 0x4, 0x4f4, 0xc, 0x0, 0x0, 0xc0bc, 0xd, 0x4, 0x7, 0xd, 0xffffffff, 0x0, 0xfff, 0x9, 0x5, 0x6, 0x790, 0x4, 0x6, 0x8, 0x81, 0x3fff8, 0x8, 0x15, 0x6, 0xb25, 0x9, 0x8, 0x2, 0x7a, 0x0, 0xfffffff9, 0x2, 0xf, 0x0, 0x8, 0x1000, 0x7, 0x9, 0xdfc, 0x0, 0x80000001, 0x0, 0x5, 0x0, 0x4e, 0xffff, 0x2, 0x7, 0x8, 0x18, 0x5, 0x3, 0x3, 0xa, 0x7, 0x4, 0x5b, 0x1, 0xa9, 0x22, 0xa, 0x7d, 0x6, 0xffffffff, 0x9, 0xffff51c4, 0x779, 0x7b56dcaf, 0x0, 0x5, 0x3e, 0x7531, 0x6, 0x1, 0x1, 0x2, 0x9, 0x5, 0x0, 0x40, 0x4, 0x401, 0xfe2, 0x1, 0x2, 0x9, 0x1000, 0x3, 0x24, 0x3]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2b5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1, 0x7, 0x10001, 0x9, 0x100, 0x1, 0x5, 0x8001, 0x7, 0x6, 0x80000001, 0x9, 0x80000000, 0x3, 0x81, 0x7ff, 0x5, 0x1, 0x8, 0x2, 0x5, 0x5, 0x97, 0x5, 0xb9, 0x1200000, 0x1, 0xb1d, 0xffffffff, 0x6, 0x5, 0x5, 0x6, 0xd8, 0x7, 0x1000, 0x6, 0xf689, 0x5, 0x0, 0x80, 0x1, 0x3, 0x2, 0x8, 0x5, 0x7, 0x4a7, 0x7f, 0x655bd89d, 0x1, 0x2, 0x200, 0x7fffffff, 0x0, 0x3, 0x3, 0x569, 0x0, 0x6, 0x3, 0x81, 0x429, 0x5, 0x8, 0x9, 0x4, 0x1c6, 0x8, 0x3ff, 0x1, 0x1000, 0x10001, 0x9, 0x5, 0x1, 0xce, 0x8, 0xbbb7, 0xfffffff7, 0x9, 0x5, 0x64e1, 0x1, 0x0, 0x6, 0x3, 0xb8, 0x3, 0x400, 0x8, 0x10000, 0x3, 0x4, 0x7fffffff, 0x2, 0x7fff, 0x5, 0xd121, 0x8, 0x1, 0x7, 0xd47f, 0x1, 0x10000, 0x9, 0xfffffffe, 0x3, 0x2, 0xffffffff, 0x7, 0x101, 0xe, 0xd1, 0x83a8, 0x7, 0x9, 0xfc, 0x80010, 0x3, 0x6, 0xfffffbff, 0x0, 0x7, 0x1, 0x7, 0xfffffbff, 0x8, 0x1, 0x800, 0x4, 0x4, 0x0, 0x7, 0x293b, 0x1, 0xfffffffd, 0x0, 0x9, 0x998, 0x80, 0x1ff, 0x5, 0xdf98, 0xa, 0x6, 0x0, 0x2, 0x1, 0x40f99ad, 0x5, 0x9, 0x156544b, 0xdfd8, 0xfffffff3, 0x3, 0x0, 0x3f3, 0x8, 0x0, 0x20, 0x0, 0xfff, 0x9, 0x2, 0x56, 0x9, 0x7, 0x8, 0x401, 0x100, 0xb7, 0x1ff, 0x5d3, 0x9, 0xbd33, 0x0, 0x3713, 0x7, 0x4, 0x8, 0x0, 0x2, 0x3, 0x5, 0x6, 0xa, 0xffff, 0x20000, 0x9, 0x6c9ab727, 0x6, 0x12, 0x64a, 0x2, 0x81, 0xfff, 0xb, 0x6, 0x40, 0x9, 0x0, 0x4, 0x8, 0x2, 0x7fffffff, 0x7, 0x7, 0x6, 0x1, 0xfffffffe, 0x9, 0xa66a, 0x5, 0xd, 0x1, 0x9fba, 0x200, 0x9, 0x1, 0xd, 0xed, 0x2, 0xdd5e, 0xe, 0x8675, 0x4, 0x101, 0x6, 0xfffffffa, 0x9, 0x4, 0xfff, 0x4b0071cf, 0x1, 0x8001, 0x6, 0x4, 0x0, 0xc, 0x7, 0x5, 0x1, 0x0, 0x40, 0x3, 0x8, 0x80000, 0x8, 0x4, 0x0, 0x3, 0x6, 0x7, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5c, 0x5ada, 0x1000, 0x6, 0x100, 0x1, 0x6, 0xc339, 0x9, 0x9, 0xfffffff8, 0x1, 0x80, 0x200, 0x80000001, 0x1, 0x1, 0x6, 0x3, 0x7, 0x5, 0x5, 0x1, 0x9, 0xfffffffc, 0x7, 0x7, 0x5, 0x1, 0x7, 0x10001, 0xe, 0x6, 0x7fffffff, 0xb, 0xffffffff, 0xfffffffb, 0x95c0, 0xfffffffc, 0x9, 0x51, 0xd, 0xb, 0x40, 0x6, 0x40000000, 0x800, 0x1, 0xfff, 0x4, 0x62cf8b07, 0x53dd, 0x2, 0x100, 0x0, 0x401, 0x3, 0x98, 0xd2ed, 0x5, 0x211, 0x5, 0x3, 0x1, 0x4, 0x3, 0xfffffff8, 0x9, 0x3ff, 0x9, 0x7, 0x5, 0x7, 0x7f, 0x1, 0x8, 0x5, 0x5, 0x6, 0xffff, 0x400, 0x7, 0xc, 0xc, 0x9, 0x5da, 0x1, 0x5, 0x3, 0xf8ef, 0x6, 0x7, 0xb32, 0x9, 0xd8d4, 0x4, 0x8000, 0x4, 0x5, 0xfffffff9, 0xba9e, 0x4, 0x3, 0x6, 0x5, 0x2, 0x1000, 0x5, 0x8, 0x7, 0x7, 0x10001, 0x200, 0x5, 0xfffffff8, 0x2, 0x64, 0x9, 0x1, 0x0, 0x5, 0x1, 0x81, 0x4, 0x9, 0x692, 0xd, 0xffff, 0xd, 0x4, 0x3, 0x5, 0x100, 0x8000, 0x4, 0x8, 0x3, 0x20, 0x7fffffff, 0x4, 0x3, 0x0, 0x4, 0x5, 0x42a4, 0x6, 0x3a6, 0x9, 0xffffff5c, 0xfffffff8, 0x0, 0x10, 0x6, 0x4, 0x7f, 0x0, 0x4, 0x5, 0xfffffff9, 0x1, 0x6, 0x1000, 0x0, 0x3, 0x5, 0x7, 0x2, 0xffff, 0x1ce, 0x4, 0xf, 0x38, 0xfffffff8, 0x3, 0x2a5e, 0x7, 0x4, 0xff, 0x6, 0x1, 0xffff, 0x4, 0x8, 0x2, 0x3, 0xade86662, 0x9, 0x4, 0x6, 0x6, 0x57f63c80, 0x2, 0x9, 0xc4b4, 0x0, 0x3ff, 0x375, 0x4, 0x80, 0x7, 0xfff, 0x2, 0x0, 0x4, 0x5, 0x80, 0x2, 0x800, 0x7fff, 0xa, 0x81, 0x9, 0xfff, 0xffffffff, 0x80, 0x10001, 0x6, 0x7ff, 0x400, 0x10001, 0x7, 0x0, 0x3, 0x1, 0xcee, 0x9, 0x0, 0x3, 0x81, 0x7, 0x8, 0x1, 0x680a5b4d, 0x45e2, 0x8, 0x9391, 0x8, 0x8, 0x5, 0xff, 0x6184, 0x3, 0x1c, 0x100, 0x7, 0x7264, 0x6, 0x0, 0x7ff, 0x3, 0x4, 0x3, 0x1ff, 0x2, 0xfff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3c32a553}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xedf4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x2, 0x7, 0xa3bd, 0xfff, 0xbd2, 0x0, 0x20, 0xfffffffc, 0x2, 0x4, 0xcc, 0x40, 0x8, 0x3, 0xb, 0x2, 0x9, 0x29, 0x0, 0x6, 0x55, 0x7, 0xfffffffd, 0x24f, 0x0, 0x1, 0x6, 0x0, 0x7, 0xffffffff, 0x7, 0x1c0000, 0x3, 0x9, 0x10, 0xfffffffe, 0x1ab9, 0x400, 0x80000001, 0x401, 0x6f3b, 0xe, 0x0, 0x4, 0x3ff, 0x100, 0x2, 0x7, 0x2, 0x6, 0xf18, 0x7, 0x49c2, 0x76cd, 0x4, 0x8, 0x5, 0xfffff913, 0x5, 0x7, 0x7, 0x19afa0, 0xfff, 0x3800, 0x4, 0x5, 0x400, 0x6, 0x7, 0xcb95, 0x8001, 0x3, 0xd, 0x101, 0xfffffffa, 0x1, 0x9, 0x1, 0x4, 0x8, 0x6e, 0x61, 0x6, 0x9, 0x1, 0x3, 0x8d8d, 0x10, 0xa000000, 0x8f, 0x35, 0xb44, 0x3, 0x6, 0x1, 0xffffffff, 0xf1d, 0x7fff, 0x4, 0x8, 0xf, 0x5, 0x8c, 0xf3b, 0x9, 0x1000, 0x3, 0x9, 0x2, 0x1ff, 0x2, 0x10001, 0x5, 0x4, 0x4, 0x4, 0x8, 0x5, 0x8, 0x8000, 0x4, 0x2, 0x5, 0x8, 0x6, 0x12, 0x1, 0x3, 0x150c0000, 0x30, 0x1, 0x2, 0xa, 0x401, 0xffffffff, 0x3, 0x9b, 0x4f, 0x6, 0x8, 0xfc3, 0x9, 0x1, 0x81, 0x3, 0xd, 0x7, 0x5, 0xb, 0x4, 0x6, 0x9, 0x6, 0x2c, 0xff800000, 0x9, 0x9, 0x9, 0x0, 0x9, 0x20000, 0x9, 0x4, 0xfffffff5, 0x2, 0xab2c, 0x1, 0x3, 0x6, 0x2, 0x1ff, 0x6, 0x3, 0x1000, 0x4, 0xffff, 0xf, 0x9, 0x8001, 0x6, 0x49a4, 0x80000000, 0x7, 0xd9, 0x7fffffff, 0x6, 0x8f65, 0x2, 0x8, 0xb, 0x2, 0x2, 0x9, 0x1, 0xffffffff, 0x4, 0x5, 0x40, 0x7, 0x9, 0x2, 0x6, 0x8, 0x2, 0xfff, 0x4, 0x101, 0xff, 0x2, 0x6, 0xc816, 0x2, 0x6, 0x0, 0x7, 0x2, 0x6, 0x7, 0x6, 0x7f, 0x38c, 0x1, 0x202e, 0x822c, 0xb557, 0xe, 0x0, 0x3, 0x6, 0x76, 0xcc8, 0x8b4, 0x0, 0xffffff61, 0x6, 0x2006, 0x0, 0x3a, 0x4, 0x0, 0x2, 0x6f4, 0x73, 0x1, 0xe6, 0x7, 0x2, 0x2, 0x80, 0x1af, 0x2, 0x6, 0x7f, 0x1, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff, 0x80000001, 0x9f40, 0x100, 0x8, 0xa, 0x4, 0x0, 0x88, 0x10000, 0x80000001, 0x1000, 0x1, 0x0, 0x2, 0x9, 0xffff8001, 0x5, 0xf, 0x4, 0x6, 0xffffffff, 0x8, 0x632, 0xa, 0x10, 0x10000, 0x0, 0x1f30, 0x8, 0x3, 0x8, 0x9, 0x4, 0x6, 0x2b0c, 0x957, 0x1, 0x40, 0x6e8, 0x80, 0x3, 0x4, 0x9c3, 0x4, 0x2, 0x8, 0xabb, 0xdda, 0x5, 0xffff, 0x8, 0x8, 0x9, 0x10001, 0x0, 0xe53, 0xcc, 0x1, 0x1, 0x6, 0x57e7, 0xebd, 0xe, 0x4, 0x6, 0x7, 0xed71, 0x7, 0x80000000, 0x9b, 0x0, 0xfffffffc, 0x2, 0x5, 0x40, 0x7, 0x8, 0x83, 0x8, 0x997, 0x5, 0x9, 0x7fffffff, 0x5, 0x8, 0x2, 0x42bb0aa6, 0x5, 0x4, 0xfffffffb, 0x2, 0x5, 0x3, 0x7ff, 0xffff, 0xa, 0x0, 0xffffffcc, 0xd, 0x40, 0x7, 0x1, 0x4, 0x9, 0x8, 0x2, 0x6101, 0x3200, 0x4, 0x4, 0x51, 0x6, 0x100, 0x1, 0x0, 0x80000001, 0x4, 0x40, 0x8000, 0xe55d, 0x6, 0x5, 0x5, 0x9, 0x1, 0x7, 0x50, 0x3, 0xd8, 0xc, 0x4, 0x3, 0x7fffffff, 0x3, 0x8000, 0x3, 0x45, 0x0, 0xff, 0x0, 0x4, 0x6bb, 0x452, 0x101, 0x1, 0x4, 0x5, 0x3, 0x5, 0x6, 0x1, 0xbf, 0x4, 0xc7, 0x1, 0x8001, 0x4, 0x2, 0x1, 0x1, 0xe52, 0x2, 0x2, 0x1ff, 0xd, 0x9, 0x1, 0x2, 0x7, 0x5, 0x47, 0x7, 0x1000, 0x3, 0x9, 0x8, 0x1, 0x0, 0xbc86, 0x401, 0x1, 0x10001, 0x0, 0x1, 0x392, 0x7, 0x4, 0x1, 0x8001, 0x0, 0xd, 0x2, 0xf16a, 0x80, 0xf0f, 0x25, 0x7f, 0x9, 0x2, 0x89, 0x7, 0x4, 0x7ff, 0x5, 0x400, 0x2, 0x2, 0x4, 0x4, 0xf9c, 0x19a, 0x7, 0x0, 0x7, 0xb02, 0x3, 0x9, 0x100, 0x10001, 0x13180, 0x81, 0x8, 0x800, 0x1c37, 0x84c9, 0x9, 0x8, 0x3, 0x6a2f, 0x9ecc, 0xfff, 0x7f, 0x1, 0x3, 0x66a, 0x8, 0x6, 0x3, 0xfffffffd, 0x7, 0xe6, 0x7, 0x80000001, 0x0, 0x3, 0x1, 0x0, 0xffff6c0f, 0x2, 0x7f, 0x3ee6, 0x401, 0x9, 0x792, 0xfee1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x7, 0xf4, 0x2, 0x5, 0x1d3d, 0x6, 0x6, 0x4, 0x6, 0x8, 0x7f, 0x5, 0x6, 0xfffffff7, 0x69, 0x3, 0x6, 0x7, 0x6, 0x6, 0x9f87, 0x4, 0xffff0761, 0x0, 0xaa, 0x8000, 0x5, 0x5, 0x8, 0xbf7, 0xaf7, 0x5, 0x8001, 0x6, 0x69a3fa30, 0x3, 0x10001, 0x5, 0xb, 0x2, 0x5, 0x0, 0xe3f, 0xffffffff, 0xf31, 0x6, 0x8, 0x1ff, 0x4ade74fc, 0x3, 0x7, 0x80000000, 0x592, 0xfffffffc, 0x6, 0x6, 0xe77, 0x5, 0xfffffffb, 0x7, 0x3ff, 0xff, 0x9, 0x8, 0x1, 0x5, 0x7fffffff, 0x3, 0xff, 0xd6dfadab, 0x7, 0x8, 0x8, 0xd, 0x1, 0x6, 0xfffffffc, 0x4, 0x4, 0x6, 0x70a, 0x6, 0x1, 0x3, 0x9, 0x4, 0x3e, 0x1, 0x1, 0xfffffffc, 0x9, 0x52, 0x7, 0x3, 0xb, 0x65, 0x9, 0x8000000, 0xc, 0x5, 0xc, 0x80, 0x4, 0x3, 0x23f, 0x6df, 0x7fffffff, 0xe, 0x1, 0x9, 0x10001, 0x2, 0xda67, 0x400, 0x6, 0xef1, 0x9, 0x200, 0x5, 0x5, 0x45, 0x8, 0x2, 0x53400000, 0xce0, 0x400, 0x65b492ae, 0x0, 0x7, 0x3, 0x0, 0x7f, 0x7, 0xe60, 0x8, 0x1, 0x6, 0x9, 0x6, 0x5, 0x10001, 0x9, 0x4, 0x80000000, 0x4, 0x4, 0x5, 0x100, 0x8, 0xb, 0xffffffe4, 0x3, 0x6c5, 0x10, 0xfff, 0x5, 0x57, 0x5, 0xe, 0xffff, 0x4, 0x200, 0x5c1, 0x0, 0x2, 0x2519fd87, 0x10001, 0x7fff, 0x7, 0x6, 0x1000, 0x8, 0x6, 0xa, 0x6, 0x7, 0x4fd, 0x200, 0x38, 0x80, 0x2, 0x2, 0x3, 0xfffffffa, 0x5, 0x3, 0x3, 0x2e6, 0xf06, 0x9, 0x5, 0x19b, 0x0, 0x6, 0xdd8c, 0x80, 0xc, 0xd3b2, 0x0, 0x1, 0x9, 0x25, 0x80000000, 0x75f, 0x73d5, 0x0, 0x3, 0x7fffffff, 0x9ff1, 0x3d97, 0x8b, 0x400, 0xd, 0x3, 0x2f70, 0x6c1c, 0x6b, 0x4, 0x83b, 0x9, 0xffffff0c, 0x5, 0x9, 0x2, 0x74, 0xd, 0x5, 0x6, 0x4, 0x101, 0x3, 0x8, 0x9, 0x8, 0xff, 0x2, 0x2, 0x0, 0x7, 0x8000, 0x80000000, 0x7, 0x40, 0x2, 0x5, 0x1000000, 0x9, 0x1, 0x9, 0xffffffff, 0x7, 0x2, 0xfffffffd, 0x8001]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]]}, {0x22, 0x6, "28649557c32ef019a3b3863393e12b8b902f59cf3b63545fa48b0a882b56"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x2198}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$evdev(0x0, 0x1800202, 0x0) ioctl$EVIOCGREP(r5, 0x80084522, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) fchown(0xffffffffffffffff, r1, r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x74, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0) 3.544425295s ago: executing program 7 (id=5399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x7, 0x100000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.464376214s ago: executing program 1 (id=5400): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) syz_open_procfs(r0, &(0x7f00000001c0)='fdinfo/4\x00') 3.084103185s ago: executing program 0 (id=5401): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x4, 0x36, &(0x7f0000000240)=ANY=[@ANYRES8=r2], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x800000, 0xfffffff3, 0x5, 0xb47, 0x1, 0x3, 0x2}}, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.024220966s ago: executing program 1 (id=5402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f00000003c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 2.644252181s ago: executing program 2 (id=5403): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') r0 = socket$packet(0x11, 0x3, 0x300) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) socket(0x200000100000011, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f00000002c0), &(0x7f0000000440)=@v1={0x1000000, [{0x1}]}, 0xc, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x4b4b, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x7fff, 0x2, 0x3432564e, 0x1, 0x1, [{0x1, 0x4}, {0xfa, 0x2}, {0x5, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000001}, {0x3ff, 0x2000002}, {0x5, 0x800000}], 0x9, 0xbe, 0x3}}) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) 2.501431569s ago: executing program 4 (id=5404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r2, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 2.49607776s ago: executing program 7 (id=5405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="000219bd7000fbdbdf256b0000000800", @ANYRES32, @ANYBLOB="0a00060008021100000100000a001a00ffffffffffff00000a001a0008021100000000000a001a0008021100000000000a000600ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40080) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.379862941s ago: executing program 4 (id=5406): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1], &(0x7f0000000380)='syzkaller\x00'}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x10) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) copy_file_range(r5, &(0x7f0000000040)=0x2, r6, &(0x7f0000000080)=0x6, 0x2, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x10000000) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x24400, 0x0) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x0, 0x4, "00769a7d82000100000014955959153000"}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000200)={0x1}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x4000) syz_open_pts(r0, 0x0) 2.320276297s ago: executing program 7 (id=5407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193", 0xa}, {&(0x7f0000000200)="b700000006000000000000f1dd0fccd5de", 0x11}, {&(0x7f0000000540)="37a8a6c41ef711513a5554633f6ecf2512425af281e4", 0x16}], 0x3) 2.171864287s ago: executing program 7 (id=5408): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, &(0x7f0000000e40)=""/58, 0x3a}, 0x80}, {{&(0x7f0000000e80)=@alg, 0x80, &(0x7f0000004400)}, 0x4}], 0x4000000000000cc, 0x40010003, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, 0x0) 2.047221s ago: executing program 1 (id=5409): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16], 0x1000f) 2.00759544s ago: executing program 1 (id=5410): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x4}, {0x4}]}]}]}, 0x3c}}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000b50b000005"]) 1.234285825s ago: executing program 7 (id=5411): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ipvlan1\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 1.11097935s ago: executing program 2 (id=5412): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffff", 0x42}], 0x1) 924.2489ms ago: executing program 1 (id=5413): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000001c0)=""/101, &(0x7f0000000280)=0x65) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x400, 0x38, r4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000040) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'TLL^'}, {0x20, '#! '}]}, 0x14) 410.277478ms ago: executing program 4 (id=5414): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00020000000000000000000006000000040100000000afe274d9da000000000000000000004c8a169cee4fe972fb3f9ecae1d0419011fbcb6133383796a098d74dfe1f561a4affb0ad0066fb9dc1c4be4bb8ccb24c6e11e563f0748ef1bbf2f590fa3489"], 0xfc}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 345.191017ms ago: executing program 7 (id=5415): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034000)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) 261.771897ms ago: executing program 4 (id=5416): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x7, 0x100000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) umount2(&(0x7f0000000040)='.\x00', 0x2) 88.375809ms ago: executing program 1 (id=5417): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x2007, @fd=r8, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b000000000000001c000000000004"], 0x48) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 8.280103ms ago: executing program 0 (id=5418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000380)='Q', 0x1}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=5419): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x2007, @fd=r7, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) io_uring_enter(r4, 0x26c3, 0xdfffeffb, 0x4c, 0x0, 0x1d) kernel console output (not intermixed with test programs): ller #0 PREEMPT(full) [ 887.716070][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 887.716082][ T5168] Workqueue: hci0 hci_rx_work [ 887.716102][ T5168] Call Trace: [ 887.716108][ T5168] [ 887.716115][ T5168] dump_stack_lvl+0x16c/0x1f0 [ 887.716133][ T5168] sysfs_warn_dup+0x7f/0xa0 [ 887.716154][ T5168] sysfs_create_dir_ns+0x24b/0x2b0 [ 887.716174][ T5168] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 887.716194][ T5168] ? kobject_add_internal+0x25b/0x9b0 [ 887.716214][ T5168] ? lock_release+0x201/0x2f0 [ 887.716237][ T5168] ? do_raw_spin_unlock+0x172/0x230 [ 887.716256][ T5168] kobject_add_internal+0x2c4/0x9b0 [ 887.716277][ T5168] kobject_add+0x16e/0x240 [ 887.716294][ T5168] ? __pfx_kobject_add+0x10/0x10 [ 887.716311][ T5168] ? lock_release+0x201/0x2f0 [ 887.716333][ T5168] ? do_raw_spin_unlock+0x172/0x230 [ 887.716350][ T5168] ? kobject_put+0xab/0x5a0 [ 887.716369][ T5168] device_add+0x288/0x1aa0 [ 887.716389][ T5168] ? __pfx_dev_set_name+0x10/0x10 [ 887.716410][ T5168] ? __pfx_device_add+0x10/0x10 [ 887.716429][ T5168] ? mgmt_send_event_skb+0x2fb/0x460 [ 887.716454][ T5168] hci_conn_add_sysfs+0x17e/0x230 [ 887.716469][ T5168] le_conn_complete_evt+0x1075/0x1d70 [ 887.716494][ T5168] ? trace_contention_end+0xdd/0x130 [ 887.716508][ T5168] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 887.716530][ T5168] ? hci_event_packet+0x459/0x11c0 [ 887.716550][ T5168] ? rcu_is_watching+0x12/0xc0 [ 887.716569][ T5168] ? lock_release+0x201/0x2f0 [ 887.716600][ T5168] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 887.716623][ T5168] ? skb_pull_data+0x166/0x210 [ 887.716649][ T5168] hci_le_meta_evt+0x357/0x5e0 [ 887.716664][ T5168] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 887.716690][ T5168] hci_event_packet+0x682/0x11c0 [ 887.716715][ T5168] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 887.716731][ T5168] ? __pfx_hci_event_packet+0x10/0x10 [ 887.716753][ T5168] ? kcov_remote_start+0x36a/0x6d0 [ 887.716770][ T5168] ? rcu_watching_snap_stopped_since+0xf0/0x110 [ 887.716791][ T5168] ? rcu_is_watching+0x12/0xc0 [ 887.716813][ T5168] hci_rx_work+0x2c5/0x16b0 [ 887.716827][ T5168] ? rcu_is_watching+0x12/0xc0 [ 887.716847][ T5168] process_one_work+0x9cf/0x1b70 [ 887.716867][ T5168] ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10 [ 887.716890][ T5168] ? __pfx_process_one_work+0x10/0x10 [ 887.716910][ T5168] ? assign_work+0x1a0/0x250 [ 887.716926][ T5168] worker_thread+0x6c8/0xf10 [ 887.716945][ T5168] ? __kthread_parkme+0x19e/0x250 [ 887.716967][ T5168] ? __pfx_worker_thread+0x10/0x10 [ 887.716985][ T5168] kthread+0x3c2/0x780 [ 887.716999][ T5168] ? __pfx_kthread+0x10/0x10 [ 887.717014][ T5168] ? ret_from_fork+0x25/0x6f0 [ 887.717029][ T5168] ? rcu_is_watching+0x12/0xc0 [ 887.717048][ T5168] ? rcu_is_watching+0x12/0xc0 [ 887.717070][ T5168] ? __pfx_kthread+0x10/0x10 [ 887.717085][ T5168] ret_from_fork+0x5d7/0x6f0 [ 887.717099][ T5168] ? __pfx_kthread+0x10/0x10 [ 887.717114][ T5168] ret_from_fork_asm+0x1a/0x30 [ 887.717137][ T5168] [ 887.717171][ T5168] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 888.038757][ T5168] Bluetooth: hci0: failed to register connection device [ 888.193442][T19467] vlan2: entered promiscuous mode [ 888.703902][ T7482] gspca_sonixj: reg_r err -32 [ 888.708632][ T7482] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 889.007330][T19494] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3913'. [ 889.034620][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3913'. [ 889.731819][T13913] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 889.755214][T13890] usb 2-1: USB disconnect, device number 66 [ 889.910048][T13913] usb 4-1: Using ep0 maxpacket: 8 [ 889.932072][T13913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.943110][T13913] usb 4-1: config 0 has no interfaces? [ 889.959816][T13913] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 889.978857][T13913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.003740][T13913] usb 4-1: Product: syz [ 890.013455][T13913] usb 4-1: Manufacturer: syz [ 890.064306][T13913] usb 4-1: SerialNumber: syz [ 890.069909][T13913] usb 4-1: config 0 descriptor?? [ 890.127041][T19551] program syz.1.3923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 890.342384][ T5832] usb 4-1: USB disconnect, device number 67 [ 890.551626][ T8089] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 890.738570][ T8089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 890.749679][ T8089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.768003][ T8089] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 890.788018][ T8089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.808590][ T8089] usb 3-1: config 0 descriptor?? [ 890.813279][ T30] audit: type=1400 audit(1755701738.502:535): avc: denied { write } for pid=19572 comm="syz.0.3928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 891.235049][ T8089] savu 0003:1E7D:2D5A.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 891.246955][T13913] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 891.380296][T13890] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 891.411516][T13913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.423287][T13913] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 891.469495][T13913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.497408][T13913] usb 2-1: config 0 descriptor?? [ 891.545800][T13890] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.582131][T13890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 891.623845][T13890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 891.664327][T13890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 891.683013][T13890] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 891.756467][T13890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.774067][T13913] usbhid 2-1:0.0: can't add hid device: -71 [ 891.780086][T13913] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 891.804365][T13890] usb 4-1: config 0 descriptor?? [ 891.820262][T13913] usb 2-1: USB disconnect, device number 67 [ 891.842509][T19597] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 892.356204][T13890] plantronics 0003:047F:FFFF.001E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 892.450046][T13913] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 892.502176][T19653] tipc: Enabling of bearer rejected, failed to enable media [ 892.549703][T19597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.564381][T19597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.598704][ T9] usb 4-1: USB disconnect, device number 68 [ 892.620046][T13913] usb 2-1: Using ep0 maxpacket: 16 [ 892.626475][T13913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.655321][T13913] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 892.679669][T13913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.691495][T13913] usb 2-1: config 0 descriptor?? [ 892.701221][T13890] usb 3-1: reset full-speed USB device number 64 using dummy_hcd [ 892.744535][T19665] netlink: 'syz.0.3941': attribute type 12 has an invalid length. [ 893.281067][T19679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3943'. [ 893.507024][T13913] usbhid 2-1:0.0: can't add hid device: -71 [ 893.527283][T13913] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 893.574913][T13913] usb 2-1: USB disconnect, device number 68 [ 893.594525][T19699] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3949'. [ 893.636383][T19699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3949'. [ 894.054653][T19713] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 894.062596][T19713] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 894.260991][ T8089] usb 3-1: USB disconnect, device number 64 [ 894.400139][ T43] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 894.443510][T19748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 894.624985][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 894.674367][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 894.714158][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 894.726394][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 894.746526][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 894.762603][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.988966][ T43] usb 2-1: config 0 descriptor?? [ 895.001298][T19724] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 895.257144][ T8089] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 895.406022][ T7482] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 895.411133][ T8089] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 895.423319][ T8089] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 895.436492][ T43] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 895.444030][ T8089] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 895.522942][ T8089] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 895.540241][ T8089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.560192][T13890] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 895.578831][ T8089] usb 5-1: Product: syz [ 895.583406][ T8089] usb 5-1: Manufacturer: syz [ 895.593334][ T8089] usb 5-1: SerialNumber: syz [ 895.609212][ T8089] hub 5-1:1.0: bad descriptor, ignoring hub [ 895.623744][ T8089] hub 5-1:1.0: probe with driver hub failed with error -5 [ 895.628487][T19724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.646972][ T7482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.660193][ T7482] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 895.669338][T19724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.680792][ T7482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.693045][ T10] usb 2-1: USB disconnect, device number 69 [ 895.694937][ T7482] usb 4-1: config 0 descriptor?? [ 895.721144][T13890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 895.734228][T13890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.745455][T13890] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 895.759299][T13890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.768858][T13890] usb 1-1: config 0 descriptor?? [ 895.805573][ T8089] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 895.916195][ T7482] usbhid 4-1:0.0: can't add hid device: -71 [ 895.923336][ T7482] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 895.933726][ T7482] usb 4-1: USB disconnect, device number 69 [ 896.256453][T19813] loop2: detected capacity change from 0 to 7 [ 896.264131][T19813] Dev loop2: unable to read RDB block 7 [ 896.269886][T19813] loop2: AHDI p1 p2 [ 896.274101][T19813] loop2: partition table partially beyond EOD, truncated [ 896.282407][T19813] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 896.321193][T17461] udevd[17461]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 896.371863][ T7482] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 896.460375][T19823] tipc: Started in network mode [ 896.465297][T19823] tipc: Node identity ac14140f, cluster identity 4711 [ 896.472331][T19823] tipc: New replicast peer: 255.255.255.255 [ 896.478572][T19823] tipc: Enabled bearer , priority 10 [ 896.493546][T19823] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3972'. [ 896.570082][ T7482] usb 4-1: Using ep0 maxpacket: 16 [ 896.575570][ T30] audit: type=1400 audit(1755701744.192:536): avc: denied { nlmsg_read } for pid=19817 comm="syz.1.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 896.576433][ T7482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.609039][ T7482] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 896.618086][ T7482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.628162][ T7482] usb 4-1: config 0 descriptor?? [ 896.855432][ T10] usb 5-1: USB disconnect, device number 45 [ 896.868268][T13890] savu 0003:1E7D:2D5A.0020: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 896.989766][ T10] usblp0: removed [ 897.026750][T13890] usb 1-1: USB disconnect, device number 72 [ 897.042689][ T7482] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 897.104537][ T7482] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 897.142643][ T7482] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 897.188228][ T7482] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 897.199349][ T7482] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 897.207810][ T7482] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 897.239917][ C1] usb 4-1: input irq status -75 received [ 897.395195][T19858] tipc: Enabling of bearer rejected, failed to enable media [ 897.455600][T13890] usb 4-1: USB disconnect, device number 70 [ 897.589747][T19870] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19870 comm=syz.2.3984 [ 897.602705][ T8089] tipc: Node number set to 2886997007 [ 897.808436][T19877] netlink: 1656 bytes leftover after parsing attributes in process `syz.1.3985'. [ 897.987653][T19879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 897.994280][T19879] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 898.006747][T19879] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 898.017391][T19879] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 898.031013][T19879] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 898.041180][T19879] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 898.049326][T19879] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 898.099436][T19879] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 898.125393][ T30] audit: type=1400 audit(1755701745.822:537): avc: denied { map } for pid=19883 comm="syz.1.3987" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 898.180216][T19879] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 898.189415][ T30] audit: type=1400 audit(1755701745.822:538): avc: denied { execute } for pid=19883 comm="syz.1.3987" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 898.213284][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.221709][T19879] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 898.381468][T19879] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 898.388397][T19879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 898.407522][T19879] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 898.426779][T19879] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 898.435493][T19879] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 898.514014][T19879] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 898.551684][T19879] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 898.633649][T19879] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 899.160038][ T5898] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 899.257108][T19913] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 899.271176][T19913] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 899.321251][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.353683][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.366092][ T5898] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 899.391284][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.403532][ T5898] usb 2-1: config 0 descriptor?? [ 899.720063][T13913] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 899.832764][ T5898] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 899.844652][ T5898] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 899.852549][ T5898] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 899.859508][ T5898] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 899.866887][ T5898] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 899.876406][T13913] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 899.877049][ T5898] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 899.889652][T13913] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 899.930726][T13913] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 899.939773][T13913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.948112][T13890] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 899.957259][ T5168] Bluetooth: hci0: command 0x0c1a tx timeout [ 899.980149][T19917] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 899.981366][T17725] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 899.988740][T13913] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 900.031816][ T5898] cp2112 0003:10C4:EA90.0022: Part Number: 0x00 Device Version: 0x00 [ 900.090722][T13890] usb 5-1: device descriptor read/64, error -71 [ 900.100177][ T5168] Bluetooth: hci2: command 0x0c1a tx timeout [ 900.180120][ T5168] Bluetooth: hci3: command 0x0c1a tx timeout [ 900.200158][T17725] usb 4-1: Using ep0 maxpacket: 8 [ 900.209202][T17725] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 900.217246][T13913] usb 3-1: USB disconnect, device number 65 [ 900.231934][T17725] usb 4-1: config 0 has no interface number 0 [ 900.246641][T17725] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 900.255861][T17725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.264215][T17725] usb 4-1: Product: syz [ 900.268474][T17725] usb 4-1: Manufacturer: syz [ 900.273077][T17725] usb 4-1: SerialNumber: syz [ 900.278661][T17725] usb 4-1: config 0 descriptor?? [ 900.285898][T17725] redrat3 4-1:0.31: Couldn't find all endpoints [ 900.330170][T13890] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 900.420050][ T5168] Bluetooth: hci1: command 0x0c1a tx timeout [ 900.430437][ T5898] cp2112 0003:10C4:EA90.0022: error setting SMBus config [ 900.439533][ T5898] cp2112 0003:10C4:EA90.0022: probe with driver cp2112 failed with error -71 [ 900.453514][ T5898] usb 2-1: USB disconnect, device number 70 [ 900.460162][T13890] usb 5-1: device descriptor read/64, error -71 [ 900.570180][T13890] usb usb5-port1: attempt power cycle [ 900.580134][ T5168] Bluetooth: hci4: command 0x0405 tx timeout [ 900.751159][ T30] audit: type=1400 audit(1755701748.452:539): avc: denied { bind } for pid=19940 comm="syz.0.4007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 900.752866][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4007'. [ 900.771912][ T30] audit: type=1400 audit(1755701748.452:540): avc: denied { node_bind } for pid=19940 comm="syz.0.4007" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 900.910089][T13890] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 900.940477][T13890] usb 5-1: device descriptor read/8, error -71 [ 901.006834][T19946] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.190609][T13890] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 901.221119][T13890] usb 5-1: device descriptor read/8, error -71 [ 901.330607][T13890] usb usb5-port1: unable to enumerate USB device [ 901.970207][ T43] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 902.020106][ T5168] Bluetooth: hci0: command 0x0c1a tx timeout [ 902.180039][ T5168] Bluetooth: hci2: command 0x0c1a tx timeout [ 902.280840][ T5168] Bluetooth: hci3: command 0x0c1a tx timeout [ 902.287330][T20015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4024'. [ 902.296218][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.296244][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.317308][ T43] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 902.326544][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.339673][ T43] usb 1-1: config 0 descriptor?? [ 902.429943][T13913] usb 4-1: USB disconnect, device number 71 [ 902.500081][ T5168] Bluetooth: hci1: command 0x0c1a tx timeout [ 902.720099][ T5168] Bluetooth: hci4: command 0x0405 tx timeout [ 902.898188][ T43] hid_parser_main: 2 callbacks suppressed [ 902.898206][ T43] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 902.928298][ T43] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 902.937320][ T43] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 902.948386][ T43] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 902.957445][ T43] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 902.966824][ T43] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 902.977171][ T43] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 902.985213][ T43] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 903.053264][ T43] cp2112 0003:10C4:EA90.0023: Part Number: 0x00 Device Version: 0x00 [ 903.392899][T13890] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 903.613583][T13890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.679351][ T43] cp2112 0003:10C4:EA90.0023: error setting SMBus config [ 903.690503][ T43] cp2112 0003:10C4:EA90.0023: probe with driver cp2112 failed with error -71 [ 903.705942][ T43] usb 1-1: USB disconnect, device number 73 [ 903.713960][T13890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 903.812399][T13890] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 903.876394][T13890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.902214][T20072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4035'. [ 903.941921][T13890] usb 5-1: config 0 descriptor?? [ 903.957554][T20072] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20072 comm=syz.1.4035 [ 904.028405][T13890] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 904.112925][ T5168] Bluetooth: hci0: command 0x0c1a tx timeout [ 904.167877][T13890] dvb-usb: bulk message failed: -22 (3/0) [ 904.223128][T13890] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 904.260092][ T5168] Bluetooth: hci2: command 0x0c1a tx timeout [ 904.319209][T13890] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 904.340357][ T5168] Bluetooth: hci3: command 0x0c1a tx timeout [ 904.391597][T13890] usb 5-1: media controller created [ 904.520630][T20099] warning: `syz.1.4041' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 904.610176][T20105] PKCS7: Unknown OID: [4] 0.38.11253.7578(bad) [ 904.616720][T20105] PKCS7: Only support pkcs7_signedData type [ 904.640136][ T5168] Bluetooth: hci1: command 0x0c1a tx timeout [ 904.740034][ T5168] Bluetooth: hci4: command 0x0405 tx timeout [ 904.893741][T13890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 904.993812][T13890] dvb-usb: bulk message failed: -22 (6/0) [ 904.999613][T13890] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 905.009260][T13890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input56 [ 905.022195][T13890] dvb-usb: schedule remote query interval to 150 msecs. [ 905.029124][T13890] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 905.038158][T13890] usb 5-1: USB disconnect, device number 50 [ 905.145745][T13890] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 905.167621][T20109] Set syz1 is full, maxelem 6117 reached [ 905.265123][T20118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.526349][T20131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4048'. [ 906.144555][T20146] sctp: [Deprecated]: syz.2.4052 (pid 20146) Use of int in maxseg socket option. [ 906.144555][T20146] Use struct sctp_assoc_value instead [ 906.185016][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 906.250157][ T8089] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 906.420403][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 906.541890][T20157] tipc: Enabled bearer , priority 0 [ 906.581674][T20157] tipc: Resetting bearer [ 906.593057][T20156] tipc: Disabling bearer [ 906.608483][ T8089] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 906.616693][ T8089] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.627783][ T8089] usb 4-1: config 0 has no interface number 0 [ 906.654636][ T8089] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid maxpacket 65535, setting to 64 [ 906.671861][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 906.700044][T13890] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 906.707884][ T8089] usb 4-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 906.722348][T20161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 906.746418][ T8089] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 906.769686][ T8089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.816507][ T8089] usb 4-1: config 0 descriptor?? [ 906.845067][ T8089] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 906.857002][T20165] syzkaller0: entered promiscuous mode [ 906.862484][T20165] syzkaller0: entered allmulticast mode [ 906.910282][T13890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.932609][T13890] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 906.946754][T13890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.959042][T13890] usb 2-1: config 0 descriptor?? [ 906.968959][T13890] pwc: Askey VC010 type 2 USB webcam detected. [ 907.007311][T20173] program syz.4.4065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 907.058562][ T36] usb 4-1: Failed to submit usb control message: -71 [ 907.066448][ T8089] usb 4-1: USB disconnect, device number 72 [ 907.073381][ T36] usb 4-1: unable to send the bmi data to the device: -71 [ 907.081982][ T36] usb 4-1: unable to get target info from device [ 907.088306][ T36] usb 4-1: could not get target info (-71) [ 907.094178][ T36] usb 4-1: could not probe fw (-71) [ 907.200704][ T30] audit: type=1400 audit(1755701754.872:541): avc: denied { bind } for pid=20175 comm="syz.0.4066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 907.460421][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 907.563692][T20196] delete_channel: no stack [ 907.580162][T13890] pwc: recv_control_msg error -71 req 02 val 2b00 [ 907.587605][T13890] pwc: recv_control_msg error -71 req 02 val 2700 [ 907.595175][T13890] pwc: recv_control_msg error -71 req 02 val 2c00 [ 907.635414][T13890] pwc: recv_control_msg error -71 req 04 val 1000 [ 907.756862][T13890] pwc: recv_control_msg error -71 req 04 val 1300 [ 908.122954][T20201] kvm: pic: non byte write [ 908.154613][T13890] pwc: recv_control_msg error -71 req 04 val 1400 [ 908.247719][T13890] pwc: recv_control_msg error -71 req 02 val 2000 [ 908.257668][T20210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4074'. [ 908.325073][T13890] pwc: recv_control_msg error -71 req 02 val 2100 [ 908.339967][T20212] syz_tun: entered promiscuous mode [ 908.362303][T13890] pwc: recv_control_msg error -71 req 04 val 1500 [ 908.390763][T20212] vlan2: entered promiscuous mode [ 908.409820][T20217] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20217 comm=syz.3.4074 [ 908.433194][T13890] pwc: recv_control_msg error -71 req 02 val 2500 [ 908.505470][T13890] pwc: recv_control_msg error -71 req 02 val 2400 [ 908.552954][T13890] pwc: recv_control_msg error -71 req 02 val 2600 [ 908.594035][T13890] pwc: recv_control_msg error -71 req 02 val 2900 [ 908.604165][T13890] pwc: recv_control_msg error -71 req 02 val 2800 [ 908.636297][T13890] pwc: recv_control_msg error -71 req 04 val 1100 [ 908.672972][T13890] pwc: recv_control_msg error -71 req 04 val 1200 [ 908.719773][T13890] pwc: Registered as video103. [ 908.729055][T20225] syzkaller0: entered promiscuous mode [ 908.741460][T13890] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input57 [ 908.760615][T20225] syzkaller0: entered allmulticast mode [ 908.882526][T13890] usb 2-1: USB disconnect, device number 71 [ 909.352172][ T30] audit: type=1400 audit(1755701757.042:542): avc: denied { name_bind } for pid=20241 comm="syz.3.4081" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 909.650608][T20254] netlink: 'syz.3.4084': attribute type 12 has an invalid length. [ 910.069751][T20284] CUSE: info not properly terminated [ 910.627981][T20294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 911.402091][ T5898] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 911.535234][T20300] kvm: kvm [20298]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 911.553177][T20326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4102'. [ 911.558114][T20300] kvm: kvm [20298]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 911.577460][ T5898] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 911.593419][ T5898] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 911.607366][T20300] kvm: kvm [20298]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 911.628005][T20300] kvm: kvm [20298]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x4000 [ 911.636991][ T5898] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 911.651123][T20300] kvm: kvm [20298]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 911.660622][T20300] kvm: kvm [20298]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 911.684648][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.709927][T20337] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4106'. [ 911.725414][T20297] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 911.735383][ T5898] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 911.798677][T20340] kvm: pic: non byte write [ 911.930169][T20346] kvm: user requested TSC rate below hardware speed [ 912.027273][ T43] usb 4-1: USB disconnect, device number 73 [ 914.155616][T20437] tipc: Enabling of bearer rejected, failed to enable media [ 914.404812][T20452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4123'. [ 914.469555][T13890] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 914.487378][T20449] syzkaller0: entered promiscuous mode [ 914.493352][T20449] syzkaller0: entered allmulticast mode [ 914.621520][T13890] usb 5-1: Using ep0 maxpacket: 8 [ 914.643296][T13890] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 914.655812][T13890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.689227][T13890] usb 5-1: config 0 descriptor?? [ 914.909173][T13890] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 914.922356][ T43] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 915.107247][T13890] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 915.379372][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.431353][T13890] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 915.442530][T13890] asix 5-1:0.0: probe with driver asix failed with error -61 [ 915.457341][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.490106][ T5927] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 915.490972][ T43] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 915.538685][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.557159][ T43] usb 3-1: config 0 descriptor?? [ 915.661219][ T5927] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 915.669388][ T5927] usb 1-1: config 0 has no interface number 0 [ 915.683886][ T5927] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 915.693198][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.704178][ T5927] usb 1-1: Product: syz [ 915.708377][ T5927] usb 1-1: Manufacturer: syz [ 915.723303][ T5927] usb 1-1: SerialNumber: syz [ 915.763665][ T5927] usb 1-1: config 0 descriptor?? [ 915.980873][ T5927] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 915.994000][ T43] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 915.997673][ T5927] usb 1-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 916.002832][ T43] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 916.014978][ T5927] usb 1-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 916.028034][ T43] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 916.036684][ T43] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 916.045560][ T43] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 916.052927][ T43] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 916.061951][ T43] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 916.100942][ T43] cp2112 0003:10C4:EA90.0024: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 916.363731][ T30] audit: type=1400 audit(1755701764.042:543): avc: denied { mount } for pid=20533 comm="syz.3.4138" name="/" dev="rpc_pipefs" ino=82322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 916.548575][ T43] cp2112 0003:10C4:EA90.0024: Part Number: 0x00 Device Version: 0x00 [ 916.591445][ T43] cp2112 0003:10C4:EA90.0024: error requesting SMBus config [ 916.602390][ T43] cp2112 0003:10C4:EA90.0024: probe with driver cp2112 failed with error -32 [ 916.753248][ T43] usb 3-1: USB disconnect, device number 66 [ 916.827684][T13913] usb 5-1: USB disconnect, device number 51 [ 917.588377][T20574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4145'. [ 918.379704][T20594] syzkaller0: entered promiscuous mode [ 918.391561][T20594] syzkaller0: entered allmulticast mode [ 918.740054][ T5168] Bluetooth: hci0: command 0x0c1a tx timeout [ 918.905458][T20612] kvm: user requested TSC rate below hardware speed [ 918.983634][ T30] audit: type=1400 audit(1755701766.682:544): avc: denied { bind } for pid=20618 comm="syz.2.4160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 919.866264][ T30] audit: type=1400 audit(1755701767.562:545): avc: denied { unmount } for pid=17471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 920.926569][T20681] tipc: New replicast peer: 255.255.255.255 [ 920.932814][T20681] tipc: Enabled bearer , priority 10 [ 921.334732][T20711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=20711 comm=syz.3.4180 [ 921.348063][T20711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4180'. [ 921.357197][T20711] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 921.364801][T20711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 921.900065][ T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 921.941022][ T8089] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 922.051086][ T9] tipc: Node number set to 1111291804 [ 922.062221][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 922.091513][ T8089] usb 5-1: device descriptor read/64, error -71 [ 922.097776][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 922.144423][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 922.220806][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 922.246400][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 922.265198][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.285987][ T24] usb 2-1: config 0 descriptor?? [ 922.315344][T20709] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 922.332112][ T8089] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 922.417054][T20736] tipc: Enabled bearer , priority 0 [ 922.426646][T20736] tipc: Resetting bearer [ 922.472595][T20735] tipc: Disabling bearer [ 922.511329][ T8089] usb 5-1: device descriptor read/64, error -71 [ 922.751241][ T24] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 922.839388][ T24] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 922.921785][ T8089] usb usb5-port1: attempt power cycle [ 922.936443][ T24] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 922.960287][ T24] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 922.972836][ T24] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 922.985578][ T24] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 923.002470][ T24] usb 2-1: USB disconnect, device number 72 [ 923.031711][T20760] fido_id[20760]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 923.246564][T20772] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 923.261551][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4199'. [ 923.310080][ T8089] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 923.560642][ T8089] usb 5-1: device descriptor read/8, error -71 [ 923.820058][ T8089] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 923.871389][T20809] netlink: 'syz.3.4204': attribute type 1 has an invalid length. [ 923.879134][T20809] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4204'. [ 924.040576][ T8089] usb 5-1: device descriptor read/8, error -71 [ 924.168562][ T8089] usb usb5-port1: unable to enumerate USB device [ 924.285562][T20826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.774092][ T24] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 924.791752][ T24] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 925.009284][T20855] fuse: Unknown parameter 'group_id00000000000000000000' [ 925.306966][T20861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 925.690270][ T5899] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 925.890439][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 925.910031][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 925.918842][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 925.946318][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 925.978181][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 925.995428][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 926.008366][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 926.023122][ T5899] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 926.033061][ T10] usb 2-1: device descriptor read/64, error -71 [ 926.043281][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.135427][ T5899] usb 5-1: Product: syz [ 926.139898][ T5899] usb 5-1: Manufacturer: syz [ 926.144950][ T5899] usb 5-1: SerialNumber: syz [ 926.155112][ T5899] usb 5-1: config 0 descriptor?? [ 926.165634][T20913] kvm: user requested TSC rate below hardware speed [ 926.172674][T20913] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 926.244054][ T30] audit: type=1400 audit(1755701773.942:546): avc: denied { ioctl } for pid=20910 comm="syz.2.4234" path="socket:[81819]" dev="sockfs" ino=81819 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 926.562478][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 926.587713][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 926.597612][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 926.606137][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 926.639439][T20931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4243'. [ 926.678464][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4245'. [ 926.689020][T20935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4245'. [ 926.741520][T20933] nbd3: detected capacity change from 0 to 4 [ 926.750106][ T10] usb 2-1: device descriptor read/64, error -71 [ 926.761859][T20938] block nbd3: shutting down sockets [ 926.791182][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 926.800238][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 926.808137][T18572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 926.817550][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 926.823635][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 926.832923][T18572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 926.841889][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 926.847957][T18572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 926.857213][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 926.863666][ T10] usb usb2-port1: attempt power cycle [ 926.869113][T18572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 926.877162][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 926.935118][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 926.941258][T18572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 926.952149][T18572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 926.959939][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 926.966445][T18572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 926.975552][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 926.988182][T18572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 926.990868][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 926.996967][T18572] ldm_validate_partition_table(): Disk read failed. [ 927.003845][T20943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 927.008898][T18572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 927.026046][T18572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 927.026200][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 927.034192][T18572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 927.056631][T18572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 927.066872][T18572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 927.077365][T18572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 927.078339][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 927.091929][T18572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 927.101498][T18572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 927.111983][T18572] Dev nbd3: unable to read RDB block 0 [ 927.113589][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 927.117664][T18572] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 927.130256][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 927.133211][T18572] Buffer I/O error on dev nbd3, logical block 0, async page read [ 927.147827][T18572] nbd3: unable to read partition table [ 927.149059][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 927.153592][T20945] syzkaller0: entered promiscuous mode [ 927.165327][T20945] syzkaller0: entered allmulticast mode [ 927.166500][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 927.171989][T18572] nbd3: partition table beyond EOD, truncated [ 927.185065][T20940] ldm_validate_partition_table(): Disk read failed. [ 927.193110][T20940] Dev nbd3: unable to read RDB block 0 [ 927.214188][T20940] nbd3: unable to read partition table [ 927.219862][T20940] nbd3: partition table beyond EOD, truncated [ 927.227650][T18572] ldm_validate_partition_table(): Disk read failed. [ 927.238725][T18572] Dev nbd3: unable to read RDB block 0 [ 927.245245][T18572] nbd3: unable to read partition table [ 927.262248][ T5899] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 927.278377][ T5899] input input59: Timeout waiting for response from device. [ 927.280098][T18572] nbd3: partition table beyond EOD, truncated [ 927.300912][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 927.317883][ T5899] usb 5-1: USB disconnect, device number 56 [ 927.329036][ T10] usb 2-1: device descriptor read/8, error -71 [ 927.537290][T20951] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4251'. [ 927.582904][T20956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=20956 comm=syz.3.4250 [ 927.708273][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 927.751170][ T10] usb 2-1: device descriptor read/8, error -71 [ 928.007229][ T10] usb usb2-port1: unable to enumerate USB device [ 928.489940][T20973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 928.603203][T20975] netlink: 'syz.0.4257': attribute type 1 has an invalid length. [ 928.611014][T20975] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4257'. [ 928.867845][T20980] fuse: Bad value for 'user_id' [ 928.878550][T20980] fuse: Bad value for 'user_id' [ 929.024738][T20994] fuse: Bad value for 'fd' [ 929.640100][ T8089] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 929.780274][ T8089] usb 4-1: device descriptor read/64, error -71 [ 930.051484][ T8089] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 930.230070][ T8089] usb 4-1: device descriptor read/64, error -71 [ 930.348294][ T8089] usb usb4-port1: attempt power cycle [ 930.436217][ T30] audit: type=1400 audit(1755701778.042:547): avc: denied { mount } for pid=21027 comm="syz.2.4281" name="/" dev="configfs" ino=1170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 930.535898][ T30] audit: type=1400 audit(1755701778.042:548): avc: denied { setattr } for pid=21027 comm="syz.2.4281" name="/" dev="configfs" ino=1170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 930.563767][T21034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4282'. [ 930.617108][T21036] syz_tun: entered promiscuous mode [ 930.623385][T21036] vlan2: entered promiscuous mode [ 930.690024][ T8089] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 930.710508][ T8089] usb 4-1: device descriptor read/8, error -71 [ 930.758906][ T5856] Bluetooth: hci0: unexpected event for opcode 0x202a [ 930.801171][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 930.956891][T21054] CUSE: info not properly terminated [ 931.345251][ T30] audit: type=1400 audit(1755701779.032:549): avc: denied { unmount } for pid=17471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 931.378485][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.381781][ T8089] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 931.436318][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 931.444764][ T8089] usb 4-1: device descriptor read/8, error -71 [ 931.451844][ T10] usb 2-1: config 0 has no interface number 0 [ 931.465744][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 931.517597][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.531220][ T10] usb 2-1: Product: syz [ 931.535535][ T10] usb 2-1: Manufacturer: syz [ 931.556385][ T10] usb 2-1: SerialNumber: syz [ 931.562139][ T8089] usb usb4-port1: unable to enumerate USB device [ 931.573939][ T10] usb 2-1: config 0 descriptor?? [ 931.809910][ T10] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 931.828135][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 931.838771][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 931.847965][ T10] usb 2-1: media controller created [ 931.863258][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 932.151979][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 932.178854][ T10] usb 2-1: USB disconnect, device number 77 [ 932.513113][T21095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4307'. [ 932.523904][T21095] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21095 comm=syz.2.4307 [ 932.966346][T21103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 932.986107][T21104] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 933.004120][T21104] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 933.076831][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4314'. [ 933.704308][T21137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 933.720442][T21133] nbd4: detected capacity change from 0 to 4 [ 933.733585][ T30] audit: type=1400 audit(1755701781.432:550): avc: denied { connect } for pid=21138 comm="syz.1.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 933.753531][T21141] block nbd4: shutting down sockets [ 933.780973][ C1] blk_print_req_error: 31 callbacks suppressed [ 933.780987][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.788900][ T30] audit: type=1400 audit(1755701781.482:551): avc: denied { bind } for pid=21138 comm="syz.1.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 933.796188][ C1] buffer_io_error: 31 callbacks suppressed [ 933.796200][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 933.818240][T20354] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.839022][T20354] Buffer I/O error on dev nbd4, logical block 0, async page read [ 933.848162][T20354] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.857669][T20354] Buffer I/O error on dev nbd4, logical block 0, async page read [ 933.866779][T20354] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.876032][T20354] Buffer I/O error on dev nbd4, logical block 0, async page read [ 933.884963][T20354] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.894379][T20354] Buffer I/O error on dev nbd4, logical block 0, async page read [ 933.904775][T20354] ldm_validate_partition_table(): Disk read failed. [ 933.915257][T20354] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.923512][ T5163] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 933.925349][T20354] Buffer I/O error on dev nbd4, logical block 0, async page read [ 933.940438][T20354] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.949477][T20354] Buffer I/O error on dev nbd4, logical block 0, async page read [ 933.957402][T20354] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.966531][T20354] Buffer I/O error on dev nbd4, logical block 0, async page read [ 933.974422][T20354] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.983494][T20354] Buffer I/O error on dev nbd4, logical block 0, async page read [ 934.090099][ T5163] usb 3-1: Using ep0 maxpacket: 8 [ 934.173651][ T5163] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.188514][T20354] Dev nbd4: unable to read RDB block 0 [ 934.198215][T20354] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 934.229719][ T5163] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 17 [ 934.290040][T20354] Buffer I/O error on dev nbd4, logical block 0, async page read [ 934.293147][ T5163] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 934.309193][T20354] nbd4: unable to read partition table [ 934.309743][ T5163] usb 3-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 934.315189][T20354] nbd4: partition table beyond EOD, truncated [ 934.325377][ T5163] usb 3-1: Product: syz [ 934.344360][ T5217] ldm_validate_partition_table(): Disk read failed. [ 934.355479][ T5217] Dev nbd4: unable to read RDB block 0 [ 934.360333][ T5163] usb 3-1: Manufacturer: syz [ 934.368428][ T5217] nbd4: unable to read partition table [ 934.376121][ T5163] usb 3-1: SerialNumber: syz [ 934.379500][ T5217] nbd4: partition table beyond EOD, truncated [ 934.469566][T20354] ldm_validate_partition_table(): Disk read failed. [ 934.469927][ T5163] usb 3-1: config 0 descriptor?? [ 934.490316][T20354] Dev nbd4: unable to read RDB block 0 [ 934.496608][T20354] nbd4: unable to read partition table [ 934.503099][T20354] nbd4: partition table beyond EOD, truncated [ 934.707569][ T30] audit: type=1400 audit(1755701782.392:552): avc: denied { checkpoint_restore } for pid=21162 comm="syz.1.4334" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 934.974741][ T30] audit: type=1400 audit(1755701782.622:553): avc: denied { unmount } for pid=21162 comm="syz.1.4334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 935.980567][T21203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4349'. [ 936.611805][ T8089] usb 3-1: USB disconnect, device number 67 [ 937.246009][T21235] fuse: Bad value for 'fd' [ 937.388091][T21241] fuse: Bad value for 'rootmode' [ 937.463165][T21247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 937.971037][T21257] kvm: user requested TSC rate below hardware speed [ 937.977991][T21257] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 938.484515][T21277] fuse: Unknown parameter 'use00000000000000000000' [ 938.498178][T21275] nbd3: detected capacity change from 0 to 4 [ 938.790176][T21284] block nbd0: shutting down sockets [ 939.260080][ T5856] block nbd3: Receive control failed (result -104) [ 939.410237][T21294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.884500][T21306] fuse: Unknown parameter 'use00000000000000000000' [ 939.948884][T21312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4391'. [ 939.968732][T21312] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21312 comm=syz.0.4391 [ 940.008631][T21316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 940.101592][T21318] kvm: pic: non byte write [ 940.507368][T21331] fuse: Unknown parameter 'use00000000000000000000' [ 941.151818][T21344] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 941.167280][T21344] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 941.199213][T21344] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 941.206577][T21344] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 941.213854][T21344] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 941.219875][T21344] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 941.229227][T21344] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 941.239492][T21344] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 941.530071][ T43] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 942.659792][ T8089] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 942.670057][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 942.686968][ T43] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 942.695893][ T43] usb 5-1: config 0 has no interface number 0 [ 942.702329][ T43] usb 5-1: config 0 interface 161 has no altsetting 0 [ 942.718068][ T43] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 942.727681][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.738395][ T43] usb 5-1: Product: syz [ 942.748032][ T43] usb 5-1: Manufacturer: syz [ 942.758060][ T43] usb 5-1: SerialNumber: syz [ 942.770262][ T43] usb 5-1: config 0 descriptor?? [ 942.777757][ T43] ums-jumpshot 5-1:0.161: USB Mass Storage device detected [ 942.788618][ T43] ums-jumpshot 5-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 942.830086][ T8089] usb 3-1: device descriptor read/64, error -71 [ 942.855160][T21409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4414'. [ 942.914685][ T43] IPVS: starting estimator thread 0... [ 942.929882][T21411] kvm: pic: non byte write [ 943.020128][T21413] IPVS: using max 55 ests per chain, 132000 per kthread [ 943.060041][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 943.090055][ T8089] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 943.230050][ T8089] usb 3-1: device descriptor read/64, error -71 [ 943.230157][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 943.236324][ T5168] Bluetooth: hci3: command 0x0c1a tx timeout [ 943.236351][ T5168] Bluetooth: hci2: command 0x0c1a tx timeout [ 943.310041][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 943.380521][ T8089] usb usb3-port1: attempt power cycle [ 943.720043][ T8089] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 943.740812][ T8089] usb 3-1: device descriptor read/8, error -71 [ 943.980084][ T8089] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 944.001142][ T8089] usb 3-1: device descriptor read/8, error -71 [ 944.112128][ T8089] usb usb3-port1: unable to enumerate USB device [ 944.492381][ T5899] usb 5-1: USB disconnect, device number 57 [ 945.140080][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 945.230158][T17417] Bluetooth: hci5: sending frame failed (-49) [ 945.236692][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 945.300030][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 945.310037][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 945.660203][ T43] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 945.846162][ T43] usb 3-1: config 0 has no interfaces? [ 945.882265][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 945.891476][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.899455][ T43] usb 3-1: Product: syz [ 945.903650][ T43] usb 3-1: Manufacturer: syz [ 945.908263][ T43] usb 3-1: SerialNumber: syz [ 945.914680][ T43] usb 3-1: config 0 descriptor?? [ 946.089010][T21481] kvm: pic: non byte write [ 946.212989][T21486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4441'. [ 946.462768][T21490] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 946.468959][T21490] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 946.475053][T21490] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 946.482332][T21490] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 946.488383][T21490] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 946.496176][T21499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=21499 comm=syz.1.4446 [ 946.510745][T21499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4446'. [ 946.519720][T21499] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 946.527315][T21499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 946.648106][T21502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4447'. [ 946.753744][T21506] tipc: Enabling of bearer rejected, failed to enable media [ 946.765913][T21506] syzkaller0: entered promiscuous mode [ 946.771525][T21506] syzkaller0: entered allmulticast mode [ 946.881696][T21508] block nbd0: shutting down sockets [ 947.328675][ T30] audit: type=1400 audit(1755701795.022:554): avc: denied { watch_mount } for pid=21518 comm="syz.1.4455" path="/145" dev="tmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 948.012721][ T24] IPVS: starting estimator thread 0... [ 948.140095][T21533] IPVS: using max 60 ests per chain, 144000 per kthread [ 948.420069][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 948.444501][ T24] usb 3-1: USB disconnect, device number 72 [ 948.500318][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 948.500340][T17417] Bluetooth: hci1: command 0x0c1a tx timeout [ 948.506321][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 948.518389][ T5168] Bluetooth: hci3: command 0x0c1a tx timeout [ 948.528693][T21548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4466'. [ 949.837891][ T30] audit: type=1400 audit(1755701797.532:555): avc: denied { create } for pid=21577 comm="syz.2.4476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 949.858407][ T30] audit: type=1400 audit(1755701797.532:556): avc: denied { connect } for pid=21577 comm="syz.2.4476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 949.887501][ T30] audit: type=1400 audit(1755701797.542:557): avc: denied { read } for pid=21577 comm="syz.2.4476" path="socket:[86229]" dev="sockfs" ino=86229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 951.248110][T21606] netlink: 'syz.2.4485': attribute type 1 has an invalid length. [ 951.255894][T21606] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4485'. [ 951.323408][T21614] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4488'. [ 951.878630][ T10] kernel write not supported for file /511/gid_map (pid: 10 comm: kworker/0:1) [ 952.000905][ T24] IPVS: starting estimator thread 0... [ 952.090026][T21632] IPVS: using max 74 ests per chain, 177600 per kthread [ 952.270928][T21644] program syz.0.4499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 952.814659][T21650] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4500'. [ 953.128546][T21662] netlink: 'syz.2.4502': attribute type 1 has an invalid length. [ 953.136358][T21662] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4502'. [ 954.162384][T21677] tipc: Enabling of bearer rejected, already enabled [ 954.207327][T21681] syzkaller0: entered promiscuous mode [ 954.235140][T21681] syzkaller0: entered allmulticast mode [ 954.328322][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 954.337774][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 954.346070][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 954.442210][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 954.545424][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 954.678422][ T30] audit: type=1400 audit(1755701802.372:558): avc: denied { bind } for pid=21692 comm="syz.2.4516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 954.758837][T21686] chnl_net:caif_netlink_parms(): no params data found [ 954.846298][T21686] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.856413][T21686] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.863741][T21686] bridge_slave_0: entered allmulticast mode [ 954.870314][T21686] bridge_slave_0: entered promiscuous mode [ 954.877247][T21686] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.910019][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 955.209879][T21686] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.217320][T21686] bridge_slave_1: entered allmulticast mode [ 955.224708][T21686] bridge_slave_1: entered promiscuous mode [ 955.254636][T21686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.274807][T21686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.332167][T21686] team0: Port device team_slave_0 added [ 955.341511][T21686] team0: Port device team_slave_1 added [ 955.406560][T21686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.520983][T21686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.548208][T21686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.560334][T21686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.567517][T21686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.796074][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4522'. [ 955.832260][T21686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.859580][T21686] hsr_slave_0: entered promiscuous mode [ 955.865706][T21686] hsr_slave_1: entered promiscuous mode [ 955.871677][T21686] debugfs: 'hsr0' already exists in 'hsr' [ 955.877390][T21686] Cannot create hsr debugfs directory [ 956.001848][ T30] audit: type=1400 audit(1755701803.702:559): avc: denied { read } for pid=21722 comm="syz.2.4524" laddr=::ffff:172.20.20.170 lport=20000 faddr=::ffff:172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 956.146232][ T5856] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 956.155866][ T5856] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 956.232778][T21686] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 956.244993][T21686] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 956.293611][T21686] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 956.310981][T21686] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 956.393521][ T5856] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 956.411953][T21686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.428517][T21686] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.444551][T20417] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.451640][T20417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.479538][T20417] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.486637][T20417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.565831][T21773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4535'. [ 956.661850][ T5856] Bluetooth: hci5: command tx timeout [ 956.667840][T21686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.870662][ T24] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 956.887266][T21686] veth0_vlan: entered promiscuous mode [ 957.055641][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.069482][T21686] veth1_vlan: entered promiscuous mode [ 957.080147][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 957.093565][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 957.175232][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.196232][T21686] veth0_macvtap: entered promiscuous mode [ 957.208096][ T24] usb 3-1: config 0 descriptor?? [ 957.218795][T21686] veth1_macvtap: entered promiscuous mode [ 957.231793][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 957.252164][T21686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.252765][T21808] fuse: Bad value for 'group_id' [ 957.261264][T21686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.275805][T21808] fuse: Bad value for 'group_id' [ 957.285587][ T2976] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.294639][ T2976] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.348886][ T2976] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.373077][ T2976] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.514054][T20417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.862495][T20417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.878920][T20417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.895409][T20417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.914437][T21830] syzkaller0: entered promiscuous mode [ 957.916630][ T30] audit: type=1400 audit(1755701805.612:560): avc: denied { mounton } for pid=21686 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 957.924380][T21830] syzkaller0: entered allmulticast mode [ 958.947588][ T5856] Bluetooth: hci5: command tx timeout [ 959.301116][T21872] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4550'. [ 960.007608][T21896] syzkaller0: entered promiscuous mode [ 960.018469][ T5832] usb 3-1: USB disconnect, device number 73 [ 960.025477][T21896] syzkaller0: entered allmulticast mode [ 960.205299][ T5856] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 960.215451][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 960.215479][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 960.215493][ T5856] Workqueue: hci2 hci_rx_work [ 960.215514][ T5856] Call Trace: [ 960.215521][ T5856] [ 960.215528][ T5856] dump_stack_lvl+0x16c/0x1f0 [ 960.215551][ T5856] sysfs_warn_dup+0x7f/0xa0 [ 960.215575][ T5856] sysfs_create_dir_ns+0x24b/0x2b0 [ 960.215598][ T5856] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 960.215622][ T5856] ? kobject_add_internal+0x25b/0x9b0 [ 960.215644][ T5856] ? lock_release+0x201/0x2f0 [ 960.215671][ T5856] ? do_raw_spin_unlock+0x172/0x230 [ 960.215691][ T5856] kobject_add_internal+0x2c4/0x9b0 [ 960.215713][ T5856] kobject_add+0x16e/0x240 [ 960.215734][ T5856] ? __pfx_kobject_add+0x10/0x10 [ 960.215754][ T5856] ? lock_release+0x201/0x2f0 [ 960.215780][ T5856] ? do_raw_spin_unlock+0x172/0x230 [ 960.215800][ T5856] ? kobject_put+0xab/0x5a0 [ 960.215821][ T5856] device_add+0x288/0x1aa0 [ 960.215843][ T5856] ? __pfx_dev_set_name+0x10/0x10 [ 960.215864][ T5856] ? __pfx_device_add+0x10/0x10 [ 960.215884][ T5856] ? mgmt_send_event_skb+0x2fb/0x460 [ 960.215911][ T5856] hci_conn_add_sysfs+0x17e/0x230 [ 960.215930][ T5856] le_conn_complete_evt+0x1075/0x1d70 [ 960.215958][ T5856] ? trace_contention_end+0xdd/0x130 [ 960.215974][ T5856] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 960.215998][ T5856] ? hci_event_packet+0x459/0x11c0 [ 960.216021][ T5856] ? rcu_is_watching+0x12/0xc0 [ 960.216043][ T5856] ? lock_release+0x201/0x2f0 [ 960.216071][ T5856] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 960.216108][ T5856] ? skb_pull_data+0x166/0x210 [ 960.216139][ T5856] hci_le_meta_evt+0x357/0x5e0 [ 960.216156][ T5856] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 960.216185][ T5856] hci_event_packet+0x682/0x11c0 [ 960.216210][ T5856] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 960.216227][ T5856] ? __pfx_hci_event_packet+0x10/0x10 [ 960.216252][ T5856] ? kcov_remote_start+0x36a/0x6d0 [ 960.216271][ T5856] ? rcu_watching_snap_stopped_since+0xf0/0x110 [ 960.216295][ T5856] ? rcu_is_watching+0x12/0xc0 [ 960.216321][ T5856] hci_rx_work+0x2c5/0x16b0 [ 960.216339][ T5856] ? rcu_is_watching+0x12/0xc0 [ 960.216362][ T5856] process_one_work+0x9cf/0x1b70 [ 960.216385][ T5856] ? __pfx_hci_cmd_work+0x10/0x10 [ 960.216403][ T5856] ? __pfx_process_one_work+0x10/0x10 [ 960.216427][ T5856] ? assign_work+0x1a0/0x250 [ 960.216446][ T5856] worker_thread+0x6c8/0xf10 [ 960.216470][ T5856] ? __pfx_worker_thread+0x10/0x10 [ 960.216490][ T5856] kthread+0x3c2/0x780 [ 960.216507][ T5856] ? __pfx_kthread+0x10/0x10 [ 960.216524][ T5856] ? ret_from_fork+0x25/0x6f0 [ 960.216541][ T5856] ? rcu_is_watching+0x12/0xc0 [ 960.216563][ T5856] ? rcu_is_watching+0x12/0xc0 [ 960.216585][ T5856] ? __pfx_kthread+0x10/0x10 [ 960.216604][ T5856] ret_from_fork+0x5d7/0x6f0 [ 960.216620][ T5856] ? __pfx_kthread+0x10/0x10 [ 960.216637][ T5856] ret_from_fork_asm+0x1a/0x30 [ 960.216666][ T5856] [ 960.565799][ T5856] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 960.579726][ T5856] Bluetooth: hci2: failed to register connection device [ 960.936547][T21931] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.4566'. [ 960.981664][ T5856] Bluetooth: hci5: command tx timeout [ 962.117914][T21977] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 962.680030][ T5168] Bluetooth: hci2: command 0x0c1a tx timeout [ 962.922956][T21998] fuse: Unknown parameter 'fd0x0000000000000004' [ 963.062486][ T5168] Bluetooth: hci5: command tx timeout [ 963.493672][T22034] lo speed is unknown, defaulting to 1000 [ 963.499596][T22034] lo speed is unknown, defaulting to 1000 [ 963.506926][T22034] lo speed is unknown, defaulting to 1000 [ 963.533544][T22034] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 963.615603][T22034] lo speed is unknown, defaulting to 1000 [ 963.624473][T22034] lo speed is unknown, defaulting to 1000 [ 963.633248][T22034] lo speed is unknown, defaulting to 1000 [ 963.642085][T22034] lo speed is unknown, defaulting to 1000 [ 963.650814][T22034] lo speed is unknown, defaulting to 1000 [ 963.659511][T22034] lo speed is unknown, defaulting to 1000 [ 963.744855][T22040] syzkaller0: entered promiscuous mode [ 963.830014][T22040] syzkaller0: entered allmulticast mode [ 963.880631][T22055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4590'. [ 963.950048][ T5168] Bluetooth: hci4: command 0x0405 tx timeout [ 964.499170][T22073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4592'. [ 964.509156][T22073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.526224][T22073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.418244][T22106] tipc: Enabling of bearer rejected, failed to enable media [ 965.441906][T22106] syzkaller0: entered promiscuous mode [ 965.448480][T22106] syzkaller0: entered allmulticast mode [ 965.840081][ T8089] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 965.894710][T22126] tipc: Enabling of bearer rejected, failed to enable media [ 966.001754][ T8089] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 966.015663][ T8089] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.025928][ T8089] usb 3-1: config 0 has no interface number 0 [ 966.047360][ T8089] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 966.067307][ T8089] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.135518][ T8089] usb 3-1: Product: syz [ 966.139689][ T8089] usb 3-1: Manufacturer: syz [ 966.145429][ T8089] usb 3-1: SerialNumber: syz [ 966.161026][ T8089] usb 3-1: config 0 descriptor?? [ 966.168652][ T8089] ims_pcu 3-1:0.41: Zero length descriptor [ 966.174721][ T8089] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 966.479047][T22139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=22139 comm=syz.7.4611 [ 966.510709][ T24] usb 3-1: USB disconnect, device number 74 [ 966.518211][T22139] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4611'. [ 966.527257][T22139] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 966.535067][T22139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.570001][T22143] nbd4: detected capacity change from 0 to 4 [ 966.596881][T22146] block nbd4: shutting down sockets [ 967.353395][T22175] siw: device registration error -23 [ 967.818708][T22191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4630'. [ 968.066800][T22198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=22198 comm=syz.1.4631 [ 968.108334][T22200] fuse: Unknown parameter 'grou00000000000000000000' [ 968.115975][T22198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4631'. [ 968.160557][T22198] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 968.170537][T22198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 968.410077][ T24] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 968.582792][ T24] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 968.597563][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.609470][ T24] usb 8-1: config 0 has no interface number 0 [ 968.619685][ T24] usb 8-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 968.635993][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.651097][ T24] usb 8-1: Product: syz [ 968.655298][ T24] usb 8-1: Manufacturer: syz [ 968.662606][ T24] usb 8-1: SerialNumber: syz [ 968.672842][ T24] usb 8-1: config 0 descriptor?? [ 968.687426][ T24] ims_pcu 8-1:0.41: Missing CDC union descriptor [ 968.696338][ T24] ims_pcu 8-1:0.41: probe with driver ims_pcu failed with error -22 [ 968.820957][ T96] block nbd3: Possible stuck request ffff888026f6e8c0: control (read@0,2048B). Runtime 30 seconds [ 968.900894][ T24] usb 8-1: USB disconnect, device number 33 [ 968.936584][T22216] tipc: Enabling of bearer rejected, failed to enable media [ 970.047655][T22239] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4644'. [ 970.070527][ T8089] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 970.240013][ T8089] usb 5-1: Using ep0 maxpacket: 16 [ 970.339117][ T8089] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 970.465196][T22265] siw: device registration error -23 [ 970.869797][ T8089] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 970.976561][ T8089] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 970.992793][ T8089] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 971.007595][ T8089] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 971.018547][ T8089] usb 5-1: config 1 interface 0 has no altsetting 0 [ 971.025200][ T8089] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 971.128676][ T8089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.547209][ T8089] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 971.751200][T22285] lo speed is unknown, defaulting to 1000 [ 973.090747][ T8089] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 973.101092][ T8089] usb 5-1: USB disconnect, device number 58 [ 973.286042][T22329] fuse: Bad value for 'fd' [ 974.942552][T22383] siw: device registration error -23 [ 975.231295][T22385] fuse: Invalid rootmode [ 975.522656][T22392] fuse: Bad value for 'rootmode' [ 975.656238][T22399] program syz.4.4695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 975.987015][T22399] lo speed is unknown, defaulting to 1000 [ 976.410273][T22413] lo speed is unknown, defaulting to 1000 [ 976.978547][T22423] fuse: Unknown parameter 'grou00000000000000000000' [ 977.048739][T22430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4702'. [ 977.179773][ T5927] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 977.198621][ T5927] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 977.209693][ T5927] usb 1-1: USB disconnect, device number 74 [ 977.776543][T22442] tipc: Enabled bearer , priority 0 [ 977.804035][T22442] syzkaller0: entered promiscuous mode [ 977.809595][T22442] syzkaller0: entered allmulticast mode [ 977.997749][T22441] tipc: Resetting bearer [ 978.060836][T22441] tipc: Disabling bearer [ 978.679598][T22464] lo speed is unknown, defaulting to 1000 [ 978.770006][ T5927] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 978.786999][T22469] fuse: Invalid rootmode [ 978.986628][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 979.065506][ T5927] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 979.100058][ T5927] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 979.109847][ T5927] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 979.146010][ T5927] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 979.161506][ T5927] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 979.243913][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4720'. [ 979.369259][ T5927] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 979.432746][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.730034][ T5927] usb 5-1: GET_CAPABILITIES returned 0 [ 979.739253][ T5927] usbtmc 5-1:16.0: can't read capabilities [ 979.806880][T22498] syzkaller0: entered promiscuous mode [ 979.812461][T22498] syzkaller0: entered allmulticast mode [ 979.911577][ T5832] usb 5-1: USB disconnect, device number 59 [ 979.927793][T22504] lo speed is unknown, defaulting to 1000 [ 979.994453][T22506] overlayfs: failed to resolve './file1': -2 [ 980.402766][T22515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4732'. [ 980.412763][T22515] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4732'. [ 980.490200][ T24] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 980.682226][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 980.752378][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 980.764259][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.864872][ T24] usb 1-1: config 0 descriptor?? [ 980.879285][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 981.560563][T22545] tipc: Enabled bearer , priority 0 [ 981.572642][T22545] syzkaller0: entered promiscuous mode [ 981.582323][T22545] syzkaller0: entered allmulticast mode [ 981.700766][T22545] tipc: Resetting bearer [ 981.723841][T22544] tipc: Resetting bearer [ 981.741193][T22544] tipc: Disabling bearer [ 981.829476][T22553] netlink: 'syz.7.4743': attribute type 1 has an invalid length. [ 981.837286][T22553] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4743'. [ 982.089260][T22554] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4744'. [ 982.192485][ T30] audit: type=1400 audit(1755701829.892:561): avc: denied { transfer } for pid=22556 comm="syz.2.4745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 982.850863][T22573] overlayfs: failed to resolve './file1': -2 [ 983.370443][ T24] usb 1-1: USB disconnect, device number 75 [ 985.029193][T22609] lo speed is unknown, defaulting to 1000 [ 986.146651][T22637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4772'. [ 986.235141][ T5832] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 986.603344][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.656932][ T5832] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 986.740122][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.890062][ T5927] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 986.890435][ T5832] usb 1-1: config 0 descriptor?? [ 986.944850][ T5832] pwc: Askey VC010 type 2 USB webcam detected. [ 987.043677][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.054702][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 987.072322][ T5927] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 987.083666][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.161463][ T5927] usb 5-1: config 0 descriptor?? [ 987.410786][T22659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.557667][T22659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.575624][T22672] delete_channel: no stack [ 987.583804][ T5832] pwc: recv_control_msg error -71 req 02 val 2b00 [ 987.591466][ T5832] pwc: recv_control_msg error -71 req 02 val 2700 [ 987.599497][ T5927] ath6kl: Failed to submit usb control message: -71 [ 987.602580][ T5832] pwc: recv_control_msg error -71 req 02 val 2c00 [ 987.612579][ T5927] ath6kl: unable to send the bmi data to the device: -71 [ 987.617632][T22661] lo speed is unknown, defaulting to 1000 [ 987.619659][ T5927] ath6kl: Unable to send get target info: -71 [ 987.633149][ T5927] ath6kl: Failed to init ath6kl core: -71 [ 987.639279][ T5927] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 987.639550][ T5832] pwc: recv_control_msg error -71 req 04 val 1000 [ 987.650931][ T5927] usb 5-1: USB disconnect, device number 60 [ 987.686876][ T5832] pwc: recv_control_msg error -71 req 04 val 1300 [ 987.700228][ T5832] pwc: recv_control_msg error -71 req 04 val 1400 [ 987.714117][ T5832] pwc: recv_control_msg error -71 req 02 val 2000 [ 987.776679][ T5832] pwc: recv_control_msg error -71 req 02 val 2100 [ 987.786674][ T5832] pwc: recv_control_msg error -71 req 04 val 1500 [ 987.793650][ T5832] pwc: recv_control_msg error -71 req 02 val 2500 [ 987.800526][ T5832] pwc: recv_control_msg error -71 req 02 val 2400 [ 987.807154][ T5832] pwc: recv_control_msg error -71 req 02 val 2600 [ 987.813826][ T5832] pwc: recv_control_msg error -71 req 02 val 2900 [ 987.820475][ T5832] pwc: recv_control_msg error -71 req 02 val 2800 [ 987.827118][ T5832] pwc: recv_control_msg error -71 req 04 val 1100 [ 987.833823][ T5832] pwc: recv_control_msg error -71 req 04 val 1200 [ 987.872042][ T5832] pwc: Registered as video103. [ 987.901388][T22677] overlayfs: failed to resolve './file0': -2 [ 988.188415][ T5832] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input60 [ 988.217431][ T5832] usb 1-1: USB disconnect, device number 76 [ 988.288223][T22686] fuse: Bad value for 'fd' [ 988.359102][T22690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 988.469257][T22695] kvm: user requested TSC rate below hardware speed [ 988.476605][T22695] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 989.489016][ T9] IPVS: starting estimator thread 0... [ 989.580107][T22729] IPVS: using max 118 ests per chain, 283200 per kthread [ 989.606458][T22739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4803'. [ 989.810008][ T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 989.839996][ T5832] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 990.001386][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 990.012430][ T24] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 990.023451][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 990.032959][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.041408][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.055245][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 990.064388][ T24] usb 5-1: invalid MIDI out EP 0 [ 990.069632][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.080341][ T5832] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 990.089673][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.103557][ T5832] usb 3-1: config 0 descriptor?? [ 990.109899][ T24] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 990.267069][ T24] usb 5-1: USB disconnect, device number 61 [ 990.923747][ T5832] usbhid 3-1:0.0: can't add hid device: -32 [ 990.929766][ T5832] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 990.978203][ T5832] usb 3-1: USB disconnect, device number 75 [ 991.119383][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4819'. [ 991.207093][T22776] syzkaller0: entered promiscuous mode [ 991.212729][T22776] syzkaller0: entered allmulticast mode [ 991.308407][T22778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=22778 comm=syz.7.4818 [ 991.322480][T22778] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4818'. [ 991.331634][T22778] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 991.339184][T22778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 992.184399][T22796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4825'. [ 992.247821][T22788] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 992.503635][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.588716][T22808] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4831'. [ 992.750074][ T5856] Bluetooth: hci5: command tx timeout [ 992.820441][T22808] vlan2: entered promiscuous mode [ 992.875474][T22808] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 992.959198][T22811] lo speed is unknown, defaulting to 1000 [ 993.398872][T22826] kvm: user requested TSC rate below hardware speed [ 993.480922][T22826] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 993.655014][T22833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4837'. [ 993.846056][ T5856] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 994.075753][T22848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4844'. [ 994.103636][T22848] vlan2: entered promiscuous mode [ 994.132532][T22850] tipc: Enabled bearer , priority 0 [ 994.151823][T22850] syzkaller0: entered promiscuous mode [ 994.178546][T22850] syzkaller0: entered allmulticast mode [ 994.263517][T22850] tipc: Resetting bearer [ 994.296637][T22849] tipc: Resetting bearer [ 994.423226][T22849] tipc: Disabling bearer [ 995.764964][T22880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.781857][T22881] fuse: Unknown parameter 'user_id00000000000000000000' [ 996.232193][T22901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4862'. [ 996.838461][T22915] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 998.245618][T22932] fuse: Unknown parameter 'user_id00000000000000000000' [ 998.311370][T22937] syzkaller0: entered promiscuous mode [ 998.316923][T22937] syzkaller0: entered allmulticast mode [ 999.180006][ T96] block nbd3: Possible stuck request ffff888026f6e8c0: control (read@0,2048B). Runtime 60 seconds [ 999.505490][T22955] libceph: resolve '400' (ret=-3): failed [ 1000.309436][T22970] fuse: Unknown parameter 'user_id00000000000000000000' [ 1000.530469][T22980] syzkaller0: entered promiscuous mode [ 1000.536754][T22980] syzkaller0: entered allmulticast mode [ 1000.725965][T22984] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4888'. [ 1000.735919][T22984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.780846][T22984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.116187][T23008] kvm: user requested TSC rate below hardware speed [ 1002.126436][T23008] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 1002.149227][T23012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4899'. [ 1002.448002][T23019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1003.225486][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4911'. [ 1003.430045][ T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1003.890025][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1003.898131][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1003.915586][ T10] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1003.925647][ T10] usb 3-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1003.936977][ T10] usb 3-1: Product: syz [ 1003.943081][ T10] usb 3-1: Manufacturer: syz [ 1003.948215][ T10] usb 3-1: SerialNumber: syz [ 1003.974601][ T10] usb 3-1: config 0 descriptor?? [ 1004.593851][T23073] overlayfs: missing 'lowerdir' [ 1004.829554][ T10] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1004.836178][ T10] gspca_sunplus: reg_w_riv err -71 [ 1004.841315][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1004.850105][ T10] usb 3-1: USB disconnect, device number 76 [ 1005.077023][ T30] audit: type=1400 audit(1755701852.772:562): avc: denied { setattr } for pid=23079 comm="syz.7.4920" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1005.147559][ T30] audit: type=1400 audit(1755701852.772:563): avc: denied { write } for pid=23079 comm="syz.7.4920" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1005.177709][ T30] audit: type=1400 audit(1755701852.772:564): avc: denied { open } for pid=23079 comm="syz.7.4920" path="/77/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1005.478044][T23089] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4922'. [ 1005.487031][ T30] audit: type=1400 audit(1755701852.822:565): avc: denied { unmount } for pid=21686 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1005.550386][T23095] binder: BINDER_SET_CONTEXT_MGR already set [ 1005.556646][T23095] binder: 23094:23095 ioctl 4018620d 200000000040 returned -16 [ 1006.710049][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1006.768037][T23132] kvm: pic: non byte write [ 1006.907781][T23140] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4940'. [ 1006.917346][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1006.926861][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1006.937988][ T10] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1006.959633][ T10] usb 5-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1006.985998][ T10] usb 5-1: Product: syz [ 1007.026780][ T10] usb 5-1: Manufacturer: syz [ 1007.031437][ T10] usb 5-1: SerialNumber: syz [ 1007.041010][ T10] usb 5-1: config 0 descriptor?? [ 1007.504370][ T10] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1007.511117][ T10] gspca_sunplus: reg_w_riv err -71 [ 1007.516266][ T10] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1007.525498][ T10] usb 5-1: USB disconnect, device number 62 [ 1007.950590][ T5832] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1008.100065][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 1008.106203][ T5832] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1008.114591][ T5832] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1008.124399][ T5832] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1008.134155][ T5832] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1008.144079][ T5832] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1008.157108][ T5832] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1008.166179][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.288133][T23170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1008.310387][ T10] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1008.329141][T23172] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4952'. [ 1008.424349][ T5832] usb 1-1: GET_CAPABILITIES returned 0 [ 1008.430186][ T5832] usbtmc 1-1:16.0: can't read capabilities [ 1008.470122][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1008.476530][ T10] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 1008.484944][ T10] usb 5-1: config 0 has no interface number 0 [ 1008.491048][ T10] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1008.763951][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1008.773158][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.781223][ T10] usb 5-1: Product: syz [ 1008.785423][ T10] usb 5-1: Manufacturer: syz [ 1008.790065][ T10] usb 5-1: SerialNumber: syz [ 1008.795465][ T10] usb 5-1: config 0 descriptor?? [ 1008.801738][ T10] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 1009.726465][T23193] netlink: 'syz.7.4958': attribute type 1 has an invalid length. [ 1009.734328][T23193] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4958'. [ 1010.567861][ T5832] usb 1-1: USB disconnect, device number 77 [ 1010.602781][T23206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.656412][T23209] kvm: user requested TSC rate below hardware speed [ 1010.664037][T23209] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 1011.203944][ T5927] usb 5-1: USB disconnect, device number 63 [ 1011.514211][T23229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4972'. [ 1011.950091][ T24] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1012.047774][T23219] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1012.175280][ T24] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1012.228683][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1012.454154][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1012.477075][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.505165][ T24] usb 5-1: config 0 descriptor?? [ 1012.533485][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1015.342309][ T43] usb 5-1: USB disconnect, device number 64 [ 1015.895551][T23292] lo speed is unknown, defaulting to 1000 [ 1015.921865][T23293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4989'. [ 1016.269188][T23296] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1016.430065][ T8089] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1016.580811][ T8089] usb 1-1: Using ep0 maxpacket: 16 [ 1016.591617][ T8089] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1016.601256][ T8089] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1016.611049][ T8089] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1016.651336][ T8089] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1016.673804][ T8089] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1016.689055][ T8089] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1016.699406][ T8089] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1016.750069][ T8089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.789369][ T8089] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1017.194960][ T30] audit: type=1400 audit(1755701864.893:566): avc: denied { setopt } for pid=23317 comm="syz.7.4997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1017.766189][ T30] audit: type=1400 audit(1755701865.113:567): avc: denied { ioctl } for pid=23317 comm="syz.7.4997" path="socket:[92911]" dev="sockfs" ino=92911 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1017.812645][T23324] fuse: Bad value for 'fd' [ 1018.465782][T23335] netlink: 'syz.7.5005': attribute type 1 has an invalid length. [ 1018.473531][T23335] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5005'. [ 1019.051392][ T8089] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1019.160334][ T8089] usb 1-1: USB disconnect, device number 78 [ 1019.190010][T23352] kvm: user requested TSC rate below hardware speed [ 1019.206532][T23352] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 1019.440523][T23362] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5012'. [ 1019.984527][T23373] tipc: Started in network mode [ 1020.002692][T23373] tipc: Node identity 0af03a7d9c3d, cluster identity 4711 [ 1020.033108][T23373] tipc: Enabled bearer , priority 0 [ 1020.051929][T23375] syzkaller0: entered promiscuous mode [ 1020.063128][T23375] syzkaller0: entered allmulticast mode [ 1020.089119][T23373] tipc: Resetting bearer [ 1020.112164][T23369] tipc: Resetting bearer [ 1020.136758][T23369] tipc: Disabling bearer [ 1020.852276][T23387] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5016'. [ 1022.183073][T23402] lo speed is unknown, defaulting to 1000 [ 1022.451289][ T10] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1022.641230][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1022.652424][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.730309][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1022.739455][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.796544][ T10] usb 3-1: config 0 descriptor?? [ 1022.892494][T23421] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1023.212187][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1023.303958][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1023.316486][ T10] usb 3-1: USB disconnect, device number 77 [ 1023.668829][T23431] kvm: user requested TSC rate below hardware speed [ 1023.688019][T23431] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886090 (167772180 ns) > initial count (40 ns). Using initial count to start timer. [ 1024.087819][T23445] libceph: resolve '400' (ret=-3): failed [ 1024.926432][T23457] lo speed is unknown, defaulting to 1000 [ 1026.030298][T23484] tmpfs: Bad value for 'huge' [ 1027.605649][T23516] siw: device registration error -23 [ 1028.262939][T23530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1028.670348][T23546] binder: 23544:23546 ioctl c0306201 200000000080 returned -14 [ 1029.440100][ T43] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1029.634740][ T96] block nbd3: Possible stuck request ffff888026f6e8c0: control (read@0,2048B). Runtime 90 seconds [ 1029.700672][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 1029.728554][ T43] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1029.750987][T23563] netlink: 'syz.7.5073': attribute type 1 has an invalid length. [ 1029.758756][T23563] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5073'. [ 1029.945221][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.956541][ T43] usb 1-1: config 0 descriptor?? [ 1030.244470][ T43] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1030.261687][ T43] asix 1-1:0.0: probe with driver asix failed with error -32 [ 1030.282475][T23570] tipc: Enabling of bearer rejected, failed to enable media [ 1030.600276][T23573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1031.029601][T23595] tipc: Enabling of bearer rejected, failed to enable media [ 1031.168740][T23602] lo speed is unknown, defaulting to 1000 [ 1032.193859][ T43] usb 1-1: USB disconnect, device number 79 [ 1032.472138][T23639] syzkaller0: entered promiscuous mode [ 1032.477608][T23639] syzkaller0: entered allmulticast mode [ 1034.587983][T23679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=23679 comm=syz.4.5107 [ 1034.610334][T23679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5107'. [ 1034.627654][T23679] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1034.907694][T23679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1035.030058][ T43] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1035.189968][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1035.213652][ T43] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 1035.233226][ T43] usb 3-1: config 0 has no interface number 0 [ 1035.265292][ T43] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1035.288932][ T43] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1035.311732][ T43] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1035.346541][ T43] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1035.356457][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.375233][ T43] usb 3-1: Product: syz [ 1035.381855][ T43] usb 3-1: Manufacturer: syz [ 1035.394785][ T43] usb 3-1: SerialNumber: syz [ 1035.410948][ T43] usb 3-1: config 0 descriptor?? [ 1035.417458][ T43] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 1035.747101][T23704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5116'. [ 1036.050408][T23713] lo speed is unknown, defaulting to 1000 [ 1036.505327][T23711] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1037.379840][T23739] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1037.587616][T23742] lo speed is unknown, defaulting to 1000 [ 1037.635766][ T9] usb 3-1: USB disconnect, device number 78 [ 1037.915803][T23750] 9pnet_fd: Insufficient options for proto=fd [ 1038.483832][T23763] lo speed is unknown, defaulting to 1000 [ 1038.806781][T23757] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5130'. [ 1038.868496][T23761] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1038.965370][T23772] syz.2.5133: attempt to access beyond end of device [ 1038.965370][T23772] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1038.978231][T23772] syz.2.5133: attempt to access beyond end of device [ 1038.978231][T23772] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1038.991196][T23772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1039.000722][T23772] syz.2.5133: attempt to access beyond end of device [ 1039.000722][T23772] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1039.013623][T23772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1039.023310][T23772] syz.2.5133: attempt to access beyond end of device [ 1039.023310][T23772] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1039.036127][T23772] syz.2.5133: attempt to access beyond end of device [ 1039.036127][T23772] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1039.048960][T23772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1039.058452][T23772] syz.2.5133: attempt to access beyond end of device [ 1039.058452][T23772] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1039.071418][T23772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1039.080994][T23772] syz.2.5133: attempt to access beyond end of device [ 1039.080994][T23772] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1039.093782][T23772] syz.2.5133: attempt to access beyond end of device [ 1039.093782][T23772] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1039.106707][T23772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1039.116190][T23772] syz.2.5133: attempt to access beyond end of device [ 1039.116190][T23772] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1039.129132][T23772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1039.138730][T23772] syz.2.5133: attempt to access beyond end of device [ 1039.138730][T23772] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1039.151595][T23772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1039.161072][T23772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1039.170514][T23772] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1039.553089][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1039.609502][T23796] 9pnet_fd: Insufficient options for proto=fd [ 1039.711981][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1039.723560][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1039.820026][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1039.830168][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.890490][T23774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1039.903707][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1040.615841][ T10] usb 5-1: USB disconnect, device number 65 [ 1041.485281][T23822] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5147'. [ 1042.389031][T23842] lo speed is unknown, defaulting to 1000 [ 1043.686922][T23859] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1044.010189][ T5927] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1044.163390][ T5927] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1044.178035][ T5927] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1044.213725][ T5927] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1044.229424][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.241709][T23863] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1044.257514][ T5927] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1044.317517][T23875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5161'. [ 1044.458027][ T10] usb 5-1: USB disconnect, device number 66 [ 1044.575996][T23888] syzkaller0: entered promiscuous mode [ 1044.610143][T23888] syzkaller0: entered allmulticast mode [ 1044.874591][T23895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1044.902015][T23897] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5169'. [ 1044.949263][T23901] tipc: Enabled bearer , priority 0 [ 1044.956954][T23901] syzkaller0: entered promiscuous mode [ 1044.963113][T23901] syzkaller0: entered allmulticast mode [ 1044.971492][T23901] tipc: Resetting bearer [ 1044.978406][T23900] tipc: Resetting bearer [ 1044.986558][T23900] tipc: Disabling bearer [ 1045.165586][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5174'. [ 1045.762230][T23926] overlayfs: failed to resolve './file1': -2 [ 1046.504358][T23945] libceph: resolve '400' (ret=-3): failed [ 1047.106895][T23949] lo speed is unknown, defaulting to 1000 [ 1047.435528][T23958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5190'. [ 1047.649864][T23974] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5195'. [ 1047.720034][ T24] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1047.767705][T23977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5196'. [ 1047.891172][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1047.902421][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1047.912331][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1047.922338][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.931639][T23960] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1047.942239][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1048.159409][ T9] usb 1-1: USB disconnect, device number 80 [ 1048.702170][T24000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5202'. [ 1049.253906][T24004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5204'. [ 1049.297539][T24015] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5206'. [ 1050.620120][ T30] audit: type=1326 audit(1755701898.303:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24032 comm="syz.7.5211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f473dd8ebe9 code=0x0 [ 1051.677020][T24052] tipc: Enabled bearer , priority 0 [ 1051.715505][T24052] syzkaller0: entered promiscuous mode [ 1051.760330][T24052] syzkaller0: entered allmulticast mode [ 1051.824786][T24052] tipc: Resetting bearer [ 1051.859300][T24051] tipc: Resetting bearer [ 1051.897498][T24051] tipc: Disabling bearer [ 1053.055175][T24076] tipc: Enabled bearer , priority 0 [ 1053.066274][T24076] tipc: Resetting bearer [ 1053.388384][T24075] tipc: Disabling bearer [ 1053.717329][T24101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5228'. [ 1053.726950][T24101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.952506][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.044142][T24101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.990242][T17725] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1055.062079][T24129] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1055.149969][T17725] usb 1-1: Using ep0 maxpacket: 32 [ 1055.172574][T24135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1055.173596][T17725] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1056.164866][T17725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.178529][T17725] usb 1-1: Product: syz [ 1056.191743][T17725] usb 1-1: Manufacturer: syz [ 1056.199485][T17725] usb 1-1: SerialNumber: syz [ 1056.208717][T17725] usb 1-1: config 0 descriptor?? [ 1056.634048][T17725] airspy 1-1:0.0: Board ID: 00 [ 1056.638934][T17725] airspy 1-1:0.0: Firmware version: [ 1056.842524][T17725] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 1056.852336][T17725] airspy 1-1:0.0: Registered as swradio24 [ 1056.858118][T17725] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1056.871785][T17725] usb 1-1: USB disconnect, device number 81 [ 1057.413321][T24172] kAFS: No cell specified [ 1059.459449][T24223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5266'. [ 1059.666083][T24228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1059.762733][ T96] block nbd3: Possible stuck request ffff888026f6e8c0: control (read@0,2048B). Runtime 120 seconds [ 1061.235532][T24252] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1064.012907][T24310] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1064.149961][ T5927] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1064.331071][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 1064.410764][ T5927] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1064.423837][ T5927] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1064.443384][ T5927] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1064.453864][ T5927] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1064.479211][ T5927] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1064.489488][ T5927] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1064.503907][ T5927] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1064.513741][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.526336][ T5927] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 1066.835378][T24355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1066.939717][ T5927] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1067.010424][ T5927] usb 5-1: USB disconnect, device number 67 [ 1068.776204][T24345] delete_channel: no stack [ 1068.873463][T24389] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5311'. [ 1069.155271][T24397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.305294][T24401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1069.920783][T24416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1070.146391][T24424] overlayfs: failed to clone upperpath [ 1070.801215][T24436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1072.167171][T24462] netlink: 'syz.7.5334': attribute type 1 has an invalid length. [ 1072.774337][T24462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1073.677997][T24465] bond1: (slave geneve2): making interface the new active one [ 1073.697207][T24465] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1074.185556][T24496] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1075.403389][ T30] audit: type=1326 audit(1755701923.093:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24502 comm="syz.7.5348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f473dd8ebe9 code=0x0 [ 1076.775173][T24539] lo speed is unknown, defaulting to 1000 [ 1077.230267][T24537] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1077.566750][T24557] tipc: Enabling of bearer rejected, failed to enable media [ 1078.814813][T24586] lo speed is unknown, defaulting to 1000 [ 1079.062895][T24592] tipc: Enabled bearer , priority 0 [ 1079.070597][T24592] syzkaller0: entered promiscuous mode [ 1079.082440][T24592] syzkaller0: entered allmulticast mode [ 1079.104962][T24594] program syz.0.5373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1079.125033][T24594] lo speed is unknown, defaulting to 1000 [ 1079.146904][T24592] tipc: Resetting bearer [ 1079.232768][T24591] tipc: Resetting bearer [ 1079.246733][T24591] tipc: Disabling bearer [ 1081.620027][ T5856] Bluetooth: hci5: command 0x0406 tx timeout [ 1082.024059][T24650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1085.116337][T24689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1085.879950][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1086.030021][ T10] usb 1-1: device descriptor read/64, error -71 [ 1086.259018][T24717] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.5405'. [ 1086.329927][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1086.360218][ T43] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1086.460501][ T10] usb 1-1: device descriptor read/64, error -71 [ 1086.519943][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1086.527760][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1086.537050][ T43] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1086.590174][ T10] usb usb1-port1: attempt power cycle [ 1086.633950][ T5832] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1086.641837][ T43] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1086.652108][ T43] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1086.662725][ T43] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1086.672719][ T43] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1086.679422][ T43] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1086.688632][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.698159][ T43] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1086.809901][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 1086.820852][ T5832] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1086.829949][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.839957][ T5832] usb 5-1: Product: syz [ 1086.844126][ T5832] usb 5-1: Manufacturer: syz [ 1086.895958][ T5832] usb 5-1: SerialNumber: syz [ 1086.928254][ T5832] usb 5-1: config 0 descriptor?? [ 1086.980118][ T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1087.000457][ T10] usb 1-1: device descriptor read/8, error -71 [ 1087.159961][ T43] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1087.175542][ T43] usb 3-1: USB disconnect, device number 79 [ 1087.279921][ T10] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1087.311032][ T10] usb 1-1: device descriptor read/8, error -71 [ 1087.391385][ T5832] airspy 5-1:0.0: Board ID: 00 [ 1087.396175][ T5832] airspy 5-1:0.0: Firmware version: [ 1087.430120][ T10] usb usb1-port1: unable to enumerate USB device [ 1087.662514][ T5832] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 1087.670307][ T5832] airspy 5-1:0.0: Registered as swradio24 [ 1087.676122][ T5832] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1087.688531][ T5832] usb 5-1: USB disconnect, device number 68 [ 1088.298379][T24747] netlink: 'syz.4.5414': attribute type 1 has an invalid length. [ 1088.459308][T24752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1089.170447][ T31] INFO: task udevd:5217 blocked for more than 143 seconds. [ 1089.234086][ T31] Not tainted syzkaller #0 [ 1089.239976][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1089.258396][ T31] task:udevd state:D stack:24840 pid:5217 tgid:5217 ppid:1 task_flags:0x400140 flags:0x00004002 [ 1089.279057][ T31] Call Trace: [ 1089.284430][ T31] [ 1089.289394][ T31] __schedule+0x1190/0x5de0 [ 1089.296637][ T31] ? __pfx___schedule+0x10/0x10 [ 1089.309082][ T31] ? rcu_is_watching+0x12/0xc0 [ 1089.315259][ T31] ? schedule+0x2d7/0x3a0 [ 1089.324562][ T31] ? rcu_is_watching+0x12/0xc0 [ 1089.331963][ T31] ? lock_release+0x201/0x2f0 [ 1089.338542][ T31] ? bdev_open+0x41a/0xe40 [ 1089.345111][ T31] schedule+0xe7/0x3a0 [ 1089.349373][ T31] schedule_preempt_disabled+0x13/0x30 [ 1089.354933][ T31] __mutex_lock+0x81b/0x1060 [ 1089.359633][ T31] ? lock_release+0x201/0x2f0 [ 1089.364407][ T31] ? bdev_open+0x41a/0xe40 [ 1089.369139][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1089.374295][ T31] ? __pfx_ilookup+0x10/0x10 [ 1089.379439][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 1089.385476][ T31] ? bdev_open+0x41a/0xe40 [ 1089.391193][ T31] bdev_open+0x41a/0xe40 [ 1089.396925][ T31] blkdev_open+0x277/0x3f0 [ 1089.402062][ T31] do_dentry_open+0x982/0x1530 [ 1089.407719][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1089.412834][ T31] vfs_open+0x82/0x3f0 [ 1089.418444][ T31] path_openat+0x1de4/0x2cb0 [ 1089.423600][ T31] ? __pfx_path_openat+0x10/0x10 [ 1089.429596][ T31] do_filp_open+0x20b/0x470 [ 1089.435029][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1089.443543][ T31] ? alloc_fd+0x471/0x7d0 [ 1089.513282][ T31] do_sys_openat2+0x11b/0x1d0 [ 1089.518072][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1089.523499][ T31] ? __fput+0x68d/0xb70 [ 1089.528482][ T31] __x64_sys_openat+0x174/0x210 [ 1089.533543][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1089.539096][ T31] do_syscall_64+0xcd/0x4c0 [ 1089.546780][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.553560][ T31] RIP: 0033:0x7f23384a7407 [ 1089.558003][ T31] RSP: 002b:00007ffdaef4e570 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1089.570532][ T31] RAX: ffffffffffffffda RBX: 00007f2338b4b880 RCX: 00007f23384a7407 [ 1089.578698][ T31] RDX: 00000000000a0800 RSI: 000055afc2458df0 RDI: ffffffffffffff9c [ 1089.587504][ T31] RBP: 000055afc2453c40 R08: 0000000000000000 R09: 0000000000000000 [ 1089.595743][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1089.604400][ T31] R13: 000055af8a64a100 R14: 0000000000000000 R15: 00007ffdaef4e800 [ 1089.612517][ T31] [ 1089.615738][ T31] INFO: task syz.3.4376:21275 blocked for more than 143 seconds. [ 1089.624251][ T31] Not tainted syzkaller #0 [ 1089.629238][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1089.638056][ T31] task:syz.3.4376 state:D stack:28672 pid:21275 tgid:21274 ppid:17475 task_flags:0x400140 flags:0x00004006 [ 1089.652555][ T31] Call Trace: [ 1089.656114][ T31] [ 1089.659074][ T31] __schedule+0x1190/0x5de0 [ 1089.664561][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1089.671124][ T31] ? kill_fasync+0x21/0x510 [ 1089.675862][ T31] ? __pfx___schedule+0x10/0x10 [ 1089.681638][ T31] ? fsnotify+0x107a/0x1dc0 [ 1089.686234][ T31] ? rcu_is_watching+0x12/0xc0 [ 1089.691248][ T31] ? lock_release+0x201/0x2f0 [ 1089.695964][ T31] ? schedule+0x2d7/0x3a0 [ 1089.700565][ T31] ? rcu_is_watching+0x12/0xc0 [ 1089.706081][ T31] ? lock_release+0x201/0x2f0 [ 1089.710934][ T31] ? bdev_release+0x15a/0x6d0 [ 1089.715650][ T31] schedule+0xe7/0x3a0 [ 1089.719995][ T31] schedule_preempt_disabled+0x13/0x30 [ 1089.725600][ T31] __mutex_lock+0x81b/0x1060 [ 1089.730280][ T31] ? bdev_release+0x15a/0x6d0 [ 1089.735187][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1089.740404][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1089.747100][ T31] ? bdev_release+0x15a/0x6d0 [ 1089.751992][ T31] bdev_release+0x15a/0x6d0 [ 1089.756584][ T31] ? fput+0xb8/0xd0 [ 1089.761590][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 1089.767296][ T31] blkdev_release+0x15/0x20 [ 1089.773355][ T31] __fput+0x3ff/0xb70 [ 1089.777495][ T31] task_work_run+0x14d/0x240 [ 1089.783147][T24657] block nbd3: Possible stuck request ffff888026f6e8c0: control (read@0,2048B). Runtime 150 seconds [ 1089.794950][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1089.800146][ T31] get_signal+0x1d1/0x26d0 [ 1089.804830][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1089.811041][ T31] ? __pfx_get_signal+0x10/0x10 [ 1089.816039][ T31] ? task_work_add+0x1d5/0x360 [ 1089.820873][ T31] ? __pfx_task_work_add+0x10/0x10 [ 1089.826097][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1089.832255][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 1089.839902][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1089.846153][ T31] exit_to_user_mode_loop+0x84/0x110 [ 1089.851628][ T31] do_syscall_64+0x3f6/0x4c0 [ 1089.856335][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.862506][ T31] RIP: 0033:0x7f1958f8ebe9 [ 1089.868030][ T31] RSP: 002b:00007f1959d8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1089.876762][ T31] RAX: 0000000000000000 RBX: 00007f19591b5fa0 RCX: 00007f1958f8ebe9 [ 1089.884978][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 1089.893685][ T31] RBP: 00007f1959011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1089.901794][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.909955][ T31] R13: 00007f19591b6038 R14: 00007f19591b5fa0 R15: 00007ffca25150b8 [ 1089.917989][ T31] [ 1089.921118][ T31] INFO: task syz.3.4376:21278 blocked for more than 144 seconds. [ 1089.930091][ T31] Not tainted syzkaller #0 [ 1089.935516][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1089.944539][ T31] task:syz.3.4376 state:D stack:29096 pid:21278 tgid:21274 ppid:17475 task_flags:0x400040 flags:0x00004004 [ 1089.956651][ T31] Call Trace: [ 1089.959956][ T31] [ 1089.963311][ T31] __schedule+0x1190/0x5de0 [ 1089.969283][ T31] ? __pfx___schedule+0x10/0x10 [ 1089.974224][ T31] ? rcu_is_watching+0x12/0xc0 [ 1089.979537][ T31] ? schedule+0x2d7/0x3a0 [ 1089.986390][ T31] ? rcu_is_watching+0x12/0xc0 [ 1089.992249][ T31] ? lock_release+0x201/0x2f0 [ 1089.997705][ T31] ? bdev_open+0x41a/0xe40 [ 1090.009044][ T31] schedule+0xe7/0x3a0 [ 1090.013211][ T31] schedule_preempt_disabled+0x13/0x30 [ 1090.018750][ T31] __mutex_lock+0x81b/0x1060 [ 1090.023514][ T31] ? lock_release+0x201/0x2f0 [ 1090.028568][ T31] ? bdev_open+0x41a/0xe40 [ 1090.033161][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1090.038409][ T31] ? __pfx_ilookup+0x10/0x10 [ 1090.043049][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 1090.048538][ T31] ? bdev_open+0x41a/0xe40 [ 1090.052994][ T31] bdev_open+0x41a/0xe40 [ 1090.058403][ T31] blkdev_open+0x277/0x3f0 [ 1090.063020][ T31] do_dentry_open+0x982/0x1530 [ 1090.067895][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1090.072971][ T31] vfs_open+0x82/0x3f0 [ 1090.077090][ T31] path_openat+0x1de4/0x2cb0 [ 1090.081936][ T31] ? __pfx_path_openat+0x10/0x10 [ 1090.088018][ T31] do_filp_open+0x20b/0x470 [ 1090.092752][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1090.097906][ T31] ? alloc_fd+0x471/0x7d0 [ 1090.102278][ T31] do_sys_openat2+0x11b/0x1d0 [ 1090.109922][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1090.115988][ T31] ? lock_release+0x201/0x2f0 [ 1090.120800][ T31] __x64_sys_openat+0x174/0x210 [ 1090.126158][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1090.131720][ T31] ? do_user_addr_fault+0x843/0x1370 [ 1090.138437][ T31] do_syscall_64+0xcd/0x4c0 [ 1090.143043][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.149006][ T31] RIP: 0033:0x7f1958f8d550 [ 1090.153624][ T31] RSP: 002b:00007f1959d68b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1090.162067][ T31] RAX: ffffffffffffffda RBX: 0000000000000840 RCX: 00007f1958f8d550 [ 1090.170393][ T31] RDX: 0000000000000840 RSI: 00007f1959d68c10 RDI: 00000000ffffff9c [ 1090.179830][ T31] RBP: 00007f1959d68c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 1090.188026][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1090.196523][ T31] R13: 00007f19591b6128 R14: 00007f19591b6090 R15: 00007ffca25150b8 [ 1090.204791][ T31] [ 1090.208578][ T31] INFO: lockdep is turned off. [ 1090.216570][ T31] NMI backtrace for cpu 0 [ 1090.216582][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1090.216602][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1090.216612][ T31] Call Trace: [ 1090.216617][ T31] [ 1090.216627][ T31] dump_stack_lvl+0x116/0x1f0 [ 1090.216650][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1090.216673][ T31] ? watchdog+0xd17/0x1260 [ 1090.216693][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1090.216721][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1090.216746][ T31] watchdog+0xf0e/0x1260 [ 1090.216765][ T31] ? __pfx_watchdog+0x10/0x10 [ 1090.216784][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1090.216802][ T31] ? __kthread_parkme+0x19e/0x250 [ 1090.216827][ T31] ? __pfx_watchdog+0x10/0x10 [ 1090.216846][ T31] kthread+0x3c2/0x780 [ 1090.216862][ T31] ? __pfx_kthread+0x10/0x10 [ 1090.216879][ T31] ? rcu_is_watching+0x12/0xc0 [ 1090.216901][ T31] ? __pfx_kthread+0x10/0x10 [ 1090.216918][ T31] ret_from_fork+0x5d7/0x6f0 [ 1090.216934][ T31] ? __pfx_kthread+0x10/0x10 [ 1090.216951][ T31] ret_from_fork_asm+0x1a/0x30 [ 1090.216976][ T31] [ 1090.216983][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1090.336272][ C1] NMI backtrace for cpu 1 [ 1090.336285][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1090.336301][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1090.336308][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1090.336327][ C1] Code: 5c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 72 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1090.336339][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 1090.336351][ C1] RAX: 00000000035339ec RBX: 0000000000000001 RCX: ffffffff8b939c29 [ 1090.336359][ C1] RDX: ffffed10170a6656 RSI: ffffffff8c162880 RDI: ffffffff81913321 [ 1090.336367][ C1] RBP: ffffed1003c5d488 R08: 0000000000000000 R09: ffffed10170a6655 [ 1090.336375][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 1090.336383][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab4090 R15: 0000000000000000 [ 1090.336392][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 1090.336405][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1090.336414][ C1] CR2: 000020000004a000 CR3: 000000006a80e000 CR4: 00000000003526f0 [ 1090.336422][ C1] Call Trace: [ 1090.336427][ C1] [ 1090.336432][ C1] default_idle+0x13/0x20 [ 1090.336446][ C1] default_idle_call+0x6d/0xb0 [ 1090.336461][ C1] do_idle+0x391/0x510 [ 1090.336479][ C1] ? __pfx_do_idle+0x10/0x10 [ 1090.336494][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1090.336510][ C1] cpu_startup_entry+0x4f/0x60 [ 1090.336525][ C1] start_secondary+0x21d/0x2b0 [ 1090.336543][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1090.336562][ C1] common_startup_64+0x13e/0x148 [ 1090.336580][ C1] [ 1090.509264][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1090.516111][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1090.525199][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1090.535231][ T31] Call Trace: [ 1090.538486][ T31] [ 1090.541397][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1090.545972][ T31] vpanic+0x6e8/0x7a0 [ 1090.549939][ T31] ? __pfx_vpanic+0x10/0x10 [ 1090.554428][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1090.560302][ T31] panic+0xca/0xd0 [ 1090.564006][ T31] ? __pfx_panic+0x10/0x10 [ 1090.568405][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1090.573760][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1090.579899][ T31] ? watchdog+0xd78/0x1260 [ 1090.584294][ T31] ? watchdog+0xd6b/0x1260 [ 1090.588687][ T31] watchdog+0xd89/0x1260 [ 1090.592909][ T31] ? __pfx_watchdog+0x10/0x10 [ 1090.597565][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1090.602740][ T31] ? __kthread_parkme+0x19e/0x250 [ 1090.607748][ T31] ? __pfx_watchdog+0x10/0x10 [ 1090.612406][ T31] kthread+0x3c2/0x780 [ 1090.616470][ T31] ? __pfx_kthread+0x10/0x10 [ 1090.621040][ T31] ? rcu_is_watching+0x12/0xc0 [ 1090.625786][ T31] ? __pfx_kthread+0x10/0x10 [ 1090.630355][ T31] ret_from_fork+0x5d7/0x6f0 [ 1090.634922][ T31] ? __pfx_kthread+0x10/0x10 [ 1090.639490][ T31] ret_from_fork_asm+0x1a/0x30 [ 1090.644243][ T31] [ 1090.647414][ T31] Kernel Offset: disabled [ 1090.651709][ T31] Rebooting in 86400 seconds..