last executing test programs: 26m16.921383244s ago: executing program 32 (id=530): socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x8d0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fcntl$getown(r2, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0xb, 0x8000, 0x0, 0x9, 0xfffffffffffffffd, 0x6, 0xfa0f, 0x2}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r6 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x2bce, 0x10100, 0x1, 0x313, 0x0, r5}, &(0x7f00000005c0)=0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r7, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r9, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r6, 0x46f3, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$kcm(r5, &(0x7f0000000640)={&(0x7f0000000340)=@llc={0x1a, 0x2, 0x7, 0x6, 0x40, 0xb4, @local}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)}], 0x1, &(0x7f0000000b00)=[{0xe0, 0x13a, 0x7, "246b22f9a520bd24b86a184470980013e522113b33c3b12b9f5e445e532c3acef46b57b6eafe7daeaf425acd920651ac34d4c5c3a499d04174d90d8d9f13c4cd439ad771efaad0e8cfde78fe251c4cedceb5816c18dcb9483c7778910764a9eff08777a45409788c5cebc8f6a47501bdb938775db972920330c735a90f4ee2a0b0148325080d15256e9d14c9d09dc1df6090bcdef6326896d92558387fe3f43cb2bbdbbe3dcd1247b6c57af57247c751fedc25b77877ae9da28b489956e648f8dabef42022ab85e559"}, {0x28, 0x10e, 0x17cc, "d20428b8464cff2136ef73f1226a0d39272cd7ba2db0"}, {0xa0, 0x6, 0x9, "95be7002025ce3f59579f0ed6861b089ec2b81322d5326f1ed441657b69670bab41b03036a7da167fab62928f463ba92698f49f53c4d975bbdc59897e07cde71b9420011344edc477897b599d16165348c05001ba0c87bd6fe23cc348fd5f2d27bb986e227c7ca9d8e7e61af424d9cb1d27a7329f32e2940ac221df371fe38e3a87e8b6e7ada982de93eae7041"}, {0x18, 0x111, 0x1, "f666da9ac2"}, {0xb8, 0x3a, 0x0, "a3894dc574b77ca36a1ce686a3d51cc32f3a36dedcc9191f3d0cb4bb9b7db8c5a7a7a1ebdf41f12a22d7dbd1900f5adfe605238f48503c06cb73835cdb56726f1d34d20f5bc20dd151ac0702b05bfac5973ad50f689b059f98c0dfd6e2507b7408fdb38b2b8c9ff6d00be73c66dceb31a0e02268b8130d81de6c5daf49af4ce70daf14f7703de5a4ed7a8e10bdb312f3aa28c1cf848f631ff2ffabbb659c911daf89d334c8"}], 0x278}, 0x0) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f00000001c0)=0x1) 19m30.377438842s ago: executing program 33 (id=1744): socket(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) unshare(0x20020000) sched_setparam(0x0, &(0x7f0000000040)=0xfffffffe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c9f010000c0005ba2de51c1e9f86e643ab7b981b0012070800de170a005aefffff80be375436288c9f25c1e4a3fc29d1891e19eb73e147fae2596e5e547e038c57d7970449a1dd3130811fe17af79c2eddfde561d02120e2a000c89199de2bfac893abc8"], 0x15) syz_usbip_server_init(0x1) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/55, 0x37, 0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x2, 0x80805, 0xffffffff) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0, 0xd}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r6 = eventfd2(0x406, 0x80801) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000100)={0x1, r6}) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) 15m49.848296638s ago: executing program 34 (id=2359): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x452b, 0x1000, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x5a00, 0xbc03, 0x6, 0x0, 0x0) 11m8.237170783s ago: executing program 0 (id=3192): socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000b40)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x6, 0x2, 0x3, 0x6, 0x73, 0x3}, &(0x7f00000001c0)=0x20) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x9, 0x80100008b}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) 11m6.927515502s ago: executing program 0 (id=3198): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) listen(r2, 0x0) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019c80)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) 11m3.473942647s ago: executing program 0 (id=3207): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(0x0, 0x9) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 7) 11m0.520774923s ago: executing program 0 (id=3212): ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="100c060a63e57fd1b96900000000", 0xe, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 10m57.791101243s ago: executing program 0 (id=3221): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) listen(r2, 0x0) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019c80)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) 10m55.700275314s ago: executing program 0 (id=3226): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000000c0)={0x0}) syz_emit_ethernet(0x71, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000300)={&(0x7f0000001500)={0x1ec, r1, 0x309, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb91}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x687}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x85}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7d5e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x33}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x89}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8fd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x48851}, 0xc000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r5 = userfaultfd(0x801) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x8005, 0x0, 0x0, 0x100, 0x27, 0xcc7, 0x8, 0x7, 0x3, 0xff, 0x0, 0x0, 0xa, 0x2, 0x7, 0x2009, 0xfffffffe, 0x40ed, 0x42, 0x40000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0x4, 0x2, 0x0, 0x4fa7f95b, 0x5, 0x5149]}) ioctl$COMEDI_CANCEL(r4, 0x6407) 10m40.584782921s ago: executing program 35 (id=3226): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000000c0)={0x0}) syz_emit_ethernet(0x71, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000300)={&(0x7f0000001500)={0x1ec, r1, 0x309, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb91}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x687}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x85}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7d5e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x33}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x89}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8fd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x48851}, 0xc000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r5 = userfaultfd(0x801) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x8005, 0x0, 0x0, 0x100, 0x27, 0xcc7, 0x8, 0x7, 0x3, 0xff, 0x0, 0x0, 0xa, 0x2, 0x7, 0x2009, 0xfffffffe, 0x40ed, 0x42, 0x40000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0x4, 0x2, 0x0, 0x4fa7f95b, 0x5, 0x5149]}) ioctl$COMEDI_CANCEL(r4, 0x6407) 3m28.224145737s ago: executing program 1 (id=4587): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x140c, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x5}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x4800) getpid() syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = syz_open_dev$usbmon(0x0, 0x7, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) readv(r2, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/34, 0x22}], 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) 3m26.560836428s ago: executing program 1 (id=4591): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)) rename(&(0x7f0000000540)='.\x00', 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000000000020010000000000000000000000000001000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000050000000000000000001f00000000000000fd0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'gre0\x00'}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1f00, 0x12) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, 0x0, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r9, 0x0, 0x0) close(0x3) 3m24.74182246s ago: executing program 1 (id=4598): syz_io_uring_setup(0x48b, &(0x7f0000000380)={0x0, 0x20059c2, 0x1, 0x1000, 0x5cc}, &(0x7f0000000100), &(0x7f0000000340)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x583, &(0x7f0000000080)={0x0, 0xc7cc, 0x42, 0x0, 0x65, 0x0, 0x0}, 0x0, &(0x7f0000000000)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x2000000, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x422000, 0x0) dup(r5) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 3m22.504456956s ago: executing program 1 (id=4607): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x90}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) memfd_secret(0x0) 3m22.006032286s ago: executing program 1 (id=4608): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000060000008500006d5ab1155dce381b8e45390c6fa665009e0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x14d, &(0x7f0000000380)={0x0, 0xc9da, 0x4000, 0x0, 0x84}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x4, 0x7, 0x2, '\x00', 0x20005}) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10002, 0xfffffffd, 0xc00, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x1, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x5, '\x00', 0x6}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x1}, {0xfe, 0x3, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0xa, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0x5}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x3}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000c40)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002614b9d265dba3bc0004"], 0x0, 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x0, 0x6d, 0x5, &(0x7f0000000240)={0x5, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5e1dee93"}}) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x800, 0xfffffffd, 0xbfe00003}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x300) 3m19.432042919s ago: executing program 1 (id=4619): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090026000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002bcc76020d11213140000010203010915a4f5c56d383f1e"], &(0x7f0000000340)={0x0, 0x0, 0x19, &(0x7f0000000000)=ANY=[@ANYBLOB="050f19008114"]}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x228}, 0x1, 0x0, 0x0, 0x85}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) socket$inet(0x2, 0x80001, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = dup3(r5, r4, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0xef70, @private0}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x4}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x76aa, &(0x7f0000000280)={0x0, 0xd112, 0x3062, 0x1, 0x200, 0x0, r3}) recvmsg(r2, &(0x7f0000000980)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/228, 0xe4}, {&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000000700)=""/182, 0xb6}, {&(0x7f00000007c0)=""/5, 0x5}], 0x5, &(0x7f0000000880)=""/253, 0xfd}, 0x3) r7 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000009c0)=0x0) ptrace$getregs(0xe, r10, 0x5, &(0x7f0000002000)=""/4082) syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_UNLINKAT={0x24, 0x21, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x200}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r7, 0x5040, 0x7ccb, 0x4c, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="42d6", 0x2}], 0x1) 3m6.096763258s ago: executing program 6 (id=4647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) accept(r2, 0x0, 0x0) listen(r0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x7d, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x15, 0x0, 0x0, '\x00', 0xffffffffffffff65}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYBLOB="814c8d", @ANYRES16], 0x13) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) shutdown(r4, 0x1) 3m4.780346893s ago: executing program 6 (id=4649): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) r1 = getpid() (async, rerun: 32) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) (rerun: 32) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={0x0, 0x0, 0x8}, 0x18) kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) (async) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}}}, 0xb) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, 0x0, &(0x7f00000009c0)=0x1e) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x30, r4, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x20004800) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r4, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x40}}, 0x24044860) 3m4.642071298s ago: executing program 6 (id=4650): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r6, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) 3m4.275697255s ago: executing program 36 (id=4619): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090026000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002bcc76020d11213140000010203010915a4f5c56d383f1e"], &(0x7f0000000340)={0x0, 0x0, 0x19, &(0x7f0000000000)=ANY=[@ANYBLOB="050f19008114"]}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x228}, 0x1, 0x0, 0x0, 0x85}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) socket$inet(0x2, 0x80001, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = dup3(r5, r4, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0xef70, @private0}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x4}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x76aa, &(0x7f0000000280)={0x0, 0xd112, 0x3062, 0x1, 0x200, 0x0, r3}) recvmsg(r2, &(0x7f0000000980)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/228, 0xe4}, {&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000000700)=""/182, 0xb6}, {&(0x7f00000007c0)=""/5, 0x5}], 0x5, &(0x7f0000000880)=""/253, 0xfd}, 0x3) r7 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000009c0)=0x0) ptrace$getregs(0xe, r10, 0x5, &(0x7f0000002000)=""/4082) syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_UNLINKAT={0x24, 0x21, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x200}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r7, 0x5040, 0x7ccb, 0x4c, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="42d6", 0x2}], 0x1) 3m3.249313364s ago: executing program 6 (id=4655): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x6e2a, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x222500, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000), 0x0, 0x24008010, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @local, 0x3}, 0x1c) shutdown(r3, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x101}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x22d2, 0x20, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) syz_fuse_handle_req(r7, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c8d000000000000000000000000000000000000000000000000000000000000000000000000e9ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00", 0x2000, &(0x7f0000000740)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x48c86100, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x1, {0x6, 0xcbff, 0x0, {0x1, 0x6, 0x10000, 0x6c, 0xb, 0x10, 0x3, 0xfffff2e1, 0x3, 0x4000, 0xfffffffe, 0xee00, 0xffffffffffffffff, 0x5, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m2.184256449s ago: executing program 6 (id=4657): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3fb, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f009, 0x4}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40000) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x841) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x100e099, 0x0, 0x3, 0x2bc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xffffff73, 0x0, 0x4) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000300)={0xf0f000, 0x282, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x3, 0x7, 0xfffffffffdfff004, 0x7fffffffffffffe, 0x9, 0x100, 0x2, 0xffffffff, [0x9, 0x100, 0x0, 0xfffffefd]}) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x47f6, 0xfffffffe, 0x2, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000640)=@IORING_OP_ASYNC_CANCEL) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'sit0\x00', @multicast}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)={0x3a, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e24, 0x1, 'lblcr\x00', 0x14, 0x80000001, 0x36}, 0x2c) syz_emit_vhci(0x0, 0x7) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) 2m58.148511151s ago: executing program 6 (id=4665): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x140c, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x5}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x4800) getpid() syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = syz_open_dev$usbmon(0x0, 0x7, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r2, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) 2m43.022756041s ago: executing program 37 (id=4665): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x140c, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x5}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x4800) getpid() syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = syz_open_dev$usbmon(0x0, 0x7, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r2, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) 1m41.616452742s ago: executing program 9 (id=4883): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac140000000000000000000000000000000004d533000000e00000010000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000180f000000000000000000000a0000ff00000000000000004c001400"], 0x13c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000450ac8798d7714b4e2384311253274", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) iopl(0x3) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10a, 0x7}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) 1m39.405349588s ago: executing program 9 (id=4891): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) pread64(r0, &(0x7f0000000200)=""/74, 0x4a, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000000c0)={0xfb, 0x43}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x8010, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r2, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) 1m38.066495445s ago: executing program 9 (id=4896): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000b00)={0x14, &(0x7f00000009c0)={0x40, 0x2, 0xea, {0xea, 0x23, "c534521ec132078d7bfbd434b3816ee930418e280042c54cff0448a756e72b6b6dcca4cb3d0cebc1be6fed71413a602e85c639cb3bbdf9d6f8d8f660f92213e08fd91ba936402df6c4110261b3a5511701eda0eb14b124241fa25dc40f5e0c2486e30738f7caeb47439f4a25c9eb966621978c2ba984e5de822c144a591486ce7ed29f77e9aeee641fb942111c860af851fdca1dec6d080be39c63a02a6bcfcb22ea0e96d04dc02d99b1e98331fe261f13deea1b0ba4622605c8d5fa64ea43b1001dbddc0f6f76007420bf26271818e38d842a008eace1e343e4183800307b7a33aef399c8344f9b"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000dc0)={0x44, &(0x7f0000000b40)={0x40, 0x14, 0xa0, "6caeec6f9a8c9b4f2f0a77e5e071345eb5452467a0987beef9fe6d6de1fe932dab47ba3a63077ec9d761a9c16214ea95c996d5e59771ddb3f679b1ffb7387a8ec604e40620966ba35547ffe564015dbfdcefaed1ceae101c9e3b63cccf485f80463f8024bc330b4455c16923136e8834abe0da49783be05d1f5f25a31ca8e33b72a225658cd91f45c6aef25dd90a6d3b72a56f4b4ce541e52b4f6f001ef4fcf9"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000c80)={0x20, 0x80, 0x1c, {0x5, 0x1, 0x6, 0x6, 0x3, 0xe815, 0x40, 0x8, 0x2, 0x8000, 0x4, 0x1}}, &(0x7f0000000cc0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000d00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000d40)={0x20, 0x87, 0x2, 0x3d82}, &(0x7f0000000d80)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000600)={0x14, &(0x7f0000000480)={0x0, 0x21, 0x8c, {0x8c, 0xc, "aff30e7092bf8b59189c2810140856571b490cd0e1cb05504376e84ad30850c35881d13c06da74282d0548927d800a0f1dad79a3ae046b407d16b80f4f55aa67b2aaafad90f83fb6450b186597da511c5477107a27eaeca7e6f54e18db8eca298316ecb27d4cb2188ad9aeee3a4289a90ccda1a617c621239305b03f828f313520811790ab9ed572c2c8"}}, &(0x7f0000000540)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "09868186c30e38273df74330fa87ce19e4037c320c11d84940c47d1c0a2efc54083d3285c11cc904092f833e1c188211343f43175d408c6a5ed9cbc4ac1427d70bf0ccf31919718b707c11efc962ed642738d530d0271cddb44ee22e78cbd5d27ad8d1668da2e1db4f9f2e5b60357f9328b582411c73149a8e4ca2b699cfb2d5355e66d7ea304200615a87ac"}}}, &(0x7f0000000980)={0x34, &(0x7f0000000640)={0x40, 0x12, 0x4d, "3f2dbf68324a1556f3c0902186c19587d088e59229365d0f4d4691ea94af50ba182347b1a9fa611be6d0609ec891841ef5d7d8f6b8af227b27823df62cb64a05128960ab30aa90af6f512126ce"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0xc8, {0xc6, "ab44a7b6dd22ec8ff97cdb178b3b427d4291edbf91c91fd1f78c17c8a0814b548510cfc3ea8524db2793eb01ed6dc8ff0c9a45f46f89cdd46218b841602131a9c8b43dee0ba339ba6146a080fb7f0baf731bb938387322847d48fd4bdb68b187b16cdc8948894d6d25f4d5cbbd0c1324c846668059712e16c68eef644d790749b7fd1572cc6baeecf2dfcfc78cdb7f39034c390329e53d1238c1342aa3c39ee306836230f6c43ab4f0aab8545ad972cf2d9461b5a06c2b5d00a2614865f6e659fffcc97532c2"}}, &(0x7f0000000900)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000940)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x20, 0x24, 0x87, {0x87, 0x8, "1cc8ddf9432f90bf76ef696883281b3977a8cccb63629593ec5df2cbd470a9843e33791a7c2fd9b6a1645b46d87179b9a4fbf1172e0f707621fc0a8f86d9f5f59f9af350ff9efdb60d84169c4c742848f513491cefdb2f8577df077886e64e4ccda12c4eced19f5ea2e16dfed4bcaa929b3baf202d255f32e81c0cc76e7d52b9332eecf317"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}, &(0x7f0000000140)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x9, "5093ce7c"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_4={0x3, 0x1, 0x8, "dbc0b041"}, @local=@item_012={0x2, 0x2, 0xa, "a013"}, @main=@item_4={0x3, 0x0, 0x9, "80e7760c"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8000, 0x7, 0x1, {0x22, 0xbfb}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x20, 0xf, 0x1a, "ee1a018bde3f92cddd5218482a0b2ec5e5b18f5f196aa36b5d18"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x1, 0xbe, "36a9f44f97f9937d86934a1c3b5077ecaae26bba2bec96f2174dce002af51f5488be1a00c49077d7a886f242f4e1a0c5d11ce9f195f2fbc1fcb4aa0bb1ca331c643823eeabe7abeb39e5db1ffa9d49c38e4bbc3bf451338f4fda5ea75dd868212540eb9cbe6d98fb5118cb785ea3c30771a38537e353a02a89cb0a8fff9efbb81ce975a8a0bb141c3a222d3c528cbd5f3c9ed7593d1d90389f75dd438779680e5ef5455cc7f8d54162cf9b3c8e323f1cc86962a9c923811ff63b603f6cf4"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m33.722697632s ago: executing program 9 (id=4909): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_open(0x0, 0x0, 0x0, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x3, &(0x7f0000000340)=0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x2d, 'cpu'}, {0x2d, 'io'}, {0x0, 'cpu'}]}, 0xe) setpriority(0x0, 0x0, 0x2a14b58) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xa8c05c84}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f6234b877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8dd35c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d4440000c801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3c89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d247c2e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x100) io_submit(r2, 0x1, &(0x7f0000002900)=[&(0x7f00000000c0)={0x300000000000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) close_range(r0, 0xffffffffffffffff, 0x0) 1m33.362127236s ago: executing program 9 (id=4914): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffd8b4}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000001900)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f00000000c0)={0xc89}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc085}, 0x40000c0) timer_create(0x4, &(0x7f00000005c0)={0x0, 0x29, 0x800000000004, @tid=r4}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioprio_get$pid(0x3, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) 1m31.953187958s ago: executing program 9 (id=4921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x148, 0x3d8, 0x3d8, 0x238, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff, 0x200, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r4, r5, 0x0) ioctl(r4, 0xfffffffc, &(0x7f0000000180)="576b80fa1d7d4e200e61ca261fde7a510bb33055d7ecc7e4bfcedda40dc34a159c4a2cc8a7dbfff679db27983b9ab92e81d8c4f37e3b5c62c3221de181a8c85a53484aa39a954496a1f2284d523c5f20a91e725d3f967aaf1d4eb38b11f5a8b1aa97d6e0b55ac9d367b0fcdeae34db991a5e0092733e26b8") ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0x0, 0x100000001, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xfffe, 0xfffffffffffffffe, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x2, 0x3, 0x20000000009, 0x2, 0x1fd, 0x80008, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x5, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000002, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xe96, 0x7, 0xfffffffffffffffc, 0xa7, 0x3, 0x0, 0x9, 0x0, 0x7, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x3, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x8fc3, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xfffd, 0x1, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 1m16.906662163s ago: executing program 38 (id=4921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x148, 0x3d8, 0x3d8, 0x238, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff, 0x200, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r4, r5, 0x0) ioctl(r4, 0xfffffffc, &(0x7f0000000180)="576b80fa1d7d4e200e61ca261fde7a510bb33055d7ecc7e4bfcedda40dc34a159c4a2cc8a7dbfff679db27983b9ab92e81d8c4f37e3b5c62c3221de181a8c85a53484aa39a954496a1f2284d523c5f20a91e725d3f967aaf1d4eb38b11f5a8b1aa97d6e0b55ac9d367b0fcdeae34db991a5e0092733e26b8") ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0x0, 0x100000001, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xfffe, 0xfffffffffffffffe, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x2, 0x3, 0x20000000009, 0x2, 0x1fd, 0x80008, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x5, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000002, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xe96, 0x7, 0xfffffffffffffffc, 0xa7, 0x3, 0x0, 0x9, 0x0, 0x7, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x3, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x8fc3, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xfffd, 0x1, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 50.160653803s ago: executing program 5 (id=5048): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) eventfd2(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x4e21, 0x6dc, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000bf878808de9a34f5835ab23cb465e51e27efce715938a25e89bc5440e2723b55f25a2798af82eea5bdebe814fc5f36788835b96c8c83e57b37f3fbb2e90bebf484d0537a947e03fdb827845803a600f1328e30953abece317ff99f428760336c80b6f3346e5ddb261dedf1cbaf08c257367653a5adf179", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) socket$kcm(0xa, 0x3, 0x3a) syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2) 49.407853568s ago: executing program 5 (id=5049): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000000)) 46.628720251s ago: executing program 5 (id=5055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) bind$isdn_base(r5, &(0x7f0000000080)={0x22, 0x6, 0xf, 0x22, 0x4}, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r7, {0xf, 0xb}, {0xfff1, 0xffff}, {0x4, 0xa}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x5, 0x81}, 0x103, 0x0, 0x7, 0x6, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x7ff, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x40004) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x305, 0xfffd, 0x0, 0xffffe, 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x2, 0x3, 0x0, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) r13 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d486100009058acf", @ANYBLOB], 0x0) syz_usb_control_io$uac1(r13, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xed, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa, 0xd0, 0x1}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xa, 0x2, 0x10, 0x10, 0x4}, 0x22, &(0x7f0000000280)=ANY=[@ANYBLOB="050f220002121003c37e7ebbe99799b78db9cc1a26ddd843ccf2e69e1a8fd09043705ffd0f"], 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc04}}]}) 43.700079732s ago: executing program 5 (id=5066): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000008b}, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000040)={0x8, 0x10001}, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', 0x0, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = socket$key(0xf, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000780)=0x1e) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x10}}, 0x24008000) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x18b, 0x2003) sendmmsg(r2, 0x0, 0xffffffffffffff58, 0x496d) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r6 = syz_io_uring_setup(0xd1, &(0x7f0000000340)={0x0, 0x5fe7, 0x1, 0x22, 0x2c9, 0x0, r5}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0x8000103, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r6, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) 42.897624669s ago: executing program 5 (id=5068): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x4d0000, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) (rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x0, 0xffffffffffffffff}) (async, rerun: 32) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) (async, rerun: 32) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x880) (async) write$cgroup_int(r0, &(0x7f0000000140)=0xffff, 0x12) (async, rerun: 32) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syz_tun\x00', 0x400}) (async) file_getattr(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x18, 0x100) (async, rerun: 32) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x80880) (rerun: 32) read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0x2020) (async, rerun: 32) fcntl$setlease(r3, 0x400, 0x2) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000002300)={r1}) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) readv(r6, &(0x7f00000036c0)=[{&(0x7f0000002340)=""/185, 0xb9}, {&(0x7f0000002400)=""/229, 0xe5}, {&(0x7f0000002500)=""/81, 0x51}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/3, 0x3}, {&(0x7f00000035c0)=""/51, 0x33}, {&(0x7f0000003600)=""/139, 0x8b}], 0x7) getpeername(r4, &(0x7f0000003740)=@tipc, &(0x7f00000037c0)=0x80) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000003800)={'batadv_slave_0\x00'}) mount$cgroup(0x0, &(0x7f0000003840)='./file1\x00', &(0x7f0000003880), 0x20, &(0x7f00000038c0)={[{@name={'name', 0x3d, '},O,*'}}, {@none}, {@noprefix}], [{@permit_directio}, {@audit}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@dont_measure}, {@fsname={'fsname', 0x3d, '/selinux/checkreqprot\x00'}}, {@obj_type={'obj_type', 0x3d, '/selinux/checkreqprot\x00'}}, {@seclabel}]}) (async) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000003980)=0x1ff) tee(r2, r0, 0x6, 0x6) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f00000039c0)) (async) recvmmsg(r4, &(0x7f0000006b40)=[{{&(0x7f0000003a00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003a80)=""/1, 0x1}, {&(0x7f0000003ac0)=""/47, 0x2f}, {&(0x7f0000003b00)=""/93, 0x5d}], 0x3}, 0x4cc0}, {{&(0x7f0000003bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003c40)=""/25, 0x19}, {&(0x7f0000003c80)=""/178, 0xb2}, {&(0x7f0000003d40)=""/180, 0xb4}, {&(0x7f0000003e00)=""/103, 0x67}, {&(0x7f0000003e80)=""/192, 0xc0}, {&(0x7f0000003f40)=""/230, 0xe6}, {&(0x7f0000004040)=""/45, 0x2d}], 0x7, &(0x7f0000004100)=""/104, 0x68}, 0x6}, {{&(0x7f0000004180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000004500)=[{&(0x7f0000004200)=""/156, 0x9c}, {&(0x7f00000042c0)=""/159, 0x9f}, {&(0x7f0000004380)=""/92, 0x5c}, {&(0x7f0000004400)=""/205, 0xcd}], 0x4, &(0x7f0000004540)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000006a40)=[{&(0x7f0000005540)=""/242, 0xf2}, {&(0x7f0000005640)=""/80, 0x50}, {&(0x7f00000056c0)=""/5, 0x5}, {&(0x7f0000005700)=""/134, 0x86}, {&(0x7f00000057c0)=""/4096, 0x1000}, {&(0x7f00000067c0)=""/16, 0x10}, {&(0x7f0000006800)=""/19, 0x13}, {&(0x7f0000006840)=""/170, 0xaa}, {&(0x7f0000006900)=""/17, 0x11}, {&(0x7f0000006940)=""/238, 0xee}], 0xa, &(0x7f0000006b00)}, 0xfffffffc}], 0x4, 0x10100, 0x0) r8 = add_key$keyring(&(0x7f0000006cc0), &(0x7f0000006d00)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000006c40), &(0x7f0000006c80)={'syz', 0x0}, 0x0, 0x0, r8) r9 = inotify_init() ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r9, 0x8008f512, &(0x7f0000006d40)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000006d80)='/proc/bus/input/devices\x00', 0x0, 0x0) (async, rerun: 64) r10 = open(&(0x7f0000006dc0)='./file0\x00', 0x80, 0xa) (rerun: 64) ioctl$BLKBSZSET(r10, 0x40081271, &(0x7f0000006e00)=0x7) 42.714050263s ago: executing program 5 (id=5069): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0xa10005, &(0x7f0000000840)=ANY=[@ANYBLOB="66643d665319e6b12241bf06418a1b137fbf90d9ff010000aa38", @ANYRESHEX=r2, @ANYRES32=r1, @ANYRESOCT=0x0, @ANYBLOB="2c67726f75a05aaa4be430c76550f5072023e0ad095f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff85010014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0908000000000055090100026200009500000000000000bc91100000000000b70200000000000085000000ba000000b7000000000000009500000080000000"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x608203, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x80000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000000)={0x645d, {"2ac78e02ff04856af9fb71f0d3fe13be", "3d684d00005fadf8524c40f97500", "ffff00ff00010000000000000000c900"}, 0x3, 0x4}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0xd, &(0x7f0000000040)=0x2, 0x4) socket(0x2b, 0x7d107ed6543017aa, 0x0) write(r4, &(0x7f00000008c0)="2e0000001a005f0302f9f40700090400020000000100000000000000080004000100000065af983a087b8af12481eb18d7fd5f9cc5d35314cac4af796bc03c032f6b06ce2712a3d01aff62ac7ff641f12b6aa020a3dfe30992d8dde0c8f414afb3db7b2d58b7db03a1556b758e383583024ba7167a125e915991109378b3ebebfdcae4bf884e35181cf54b9edea4b200ee1e219625cc2d1b013e30e719aa", 0xfffffe21) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='x'], 0x0, 0x0, 0x0, 0x0}) getdents(r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r9, 0x20, &(0x7f0000000500)={&(0x7f0000000380)=""/243, 0xf3, 0x0, &(0x7f0000000480)=""/108, 0x6c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="851000001ca800ff90b540000802000012834c9a6774d0ed09afe9d0eb234fafafa3a87a606749724bf72864b5c980ab3ec467cf543099b4570fa238fc63b7e309c752c12ea617591095209f20576781b43c7c48d24d029a0dea29b57ffcc15ba914cffed77283a6c72ec90d2ea7c9a6d24e5b1f7d7cdd94914e"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, r9, 0x8, &(0x7f0000000300)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x10001, 0xc}, 0x10, r10, r9, 0x0, &(0x7f0000000580)=[r9], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x119f, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$input_event(r12, &(0x7f0000000000)={{0x77359400}, 0x15, 0x5}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r13, 0x0, 0x30, 0x4, @void}, 0x79fe) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x23, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000001000000000000f3c5000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001834000003000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183b000002000000000000000000000085000000a4000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="000000002e5700826347c463e20cbad0de4000000000b7020000000000000300000086000000cd1b010001000000bf91000b00000000b7020000010000008500000084000000b700"], &(0x7f0000000380)='GPL\x00', 0x179, 0x7e, &(0x7f00000003c0)=""/126, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, r2, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r2, r11, r2, r2, r2, r2], 0x0, 0x10, 0x2}, 0x94) 27.706631954s ago: executing program 39 (id=5069): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0xa10005, &(0x7f0000000840)=ANY=[@ANYBLOB="66643d665319e6b12241bf06418a1b137fbf90d9ff010000aa38", @ANYRESHEX=r2, @ANYRES32=r1, @ANYRESOCT=0x0, @ANYBLOB="2c67726f75a05aaa4be430c76550f5072023e0ad095f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff85010014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0908000000000055090100026200009500000000000000bc91100000000000b70200000000000085000000ba000000b7000000000000009500000080000000"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x608203, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x80000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000000)={0x645d, {"2ac78e02ff04856af9fb71f0d3fe13be", "3d684d00005fadf8524c40f97500", "ffff00ff00010000000000000000c900"}, 0x3, 0x4}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0xd, &(0x7f0000000040)=0x2, 0x4) socket(0x2b, 0x7d107ed6543017aa, 0x0) write(r4, &(0x7f00000008c0)="2e0000001a005f0302f9f40700090400020000000100000000000000080004000100000065af983a087b8af12481eb18d7fd5f9cc5d35314cac4af796bc03c032f6b06ce2712a3d01aff62ac7ff641f12b6aa020a3dfe30992d8dde0c8f414afb3db7b2d58b7db03a1556b758e383583024ba7167a125e915991109378b3ebebfdcae4bf884e35181cf54b9edea4b200ee1e219625cc2d1b013e30e719aa", 0xfffffe21) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='x'], 0x0, 0x0, 0x0, 0x0}) getdents(r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r9, 0x20, &(0x7f0000000500)={&(0x7f0000000380)=""/243, 0xf3, 0x0, &(0x7f0000000480)=""/108, 0x6c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="851000001ca800ff90b540000802000012834c9a6774d0ed09afe9d0eb234fafafa3a87a606749724bf72864b5c980ab3ec467cf543099b4570fa238fc63b7e309c752c12ea617591095209f20576781b43c7c48d24d029a0dea29b57ffcc15ba914cffed77283a6c72ec90d2ea7c9a6d24e5b1f7d7cdd94914e"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, r9, 0x8, &(0x7f0000000300)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x10001, 0xc}, 0x10, r10, r9, 0x0, &(0x7f0000000580)=[r9], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x119f, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$input_event(r12, &(0x7f0000000000)={{0x77359400}, 0x15, 0x5}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r13, 0x0, 0x30, 0x4, @void}, 0x79fe) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x23, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000001000000000000f3c5000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001834000003000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183b000002000000000000000000000085000000a4000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="000000002e5700826347c463e20cbad0de4000000000b7020000000000000300000086000000cd1b010001000000bf91000b00000000b7020000010000008500000084000000b700"], &(0x7f0000000380)='GPL\x00', 0x179, 0x7e, &(0x7f00000003c0)=""/126, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, r2, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r2, r11, r2, r2, r2, r2], 0x0, 0x10, 0x2}, 0x94) 13.908534391s ago: executing program 4 (id=5140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xf5ff, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 13.172591512s ago: executing program 4 (id=5143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x83}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7dfb}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300f0ffff000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.672043433s ago: executing program 4 (id=5145): capset(0x0, &(0x7f0000004540)={0x4, 0x5, 0x4, 0x7, 0x1, 0x7ff}) (async) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040), 0x0) (async, rerun: 64) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000500)) (async, rerun: 64) listen(r3, 0xda90) (async, rerun: 64) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000)={0x0, 0xa6, 0xa9, 0x7, 0x9, 0x6, 0x99, 0x7, 0x0, 0x6, 0x7, 0x1, 0x0, 0x7}, 0xe) shutdown(0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x48600, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 12.436706627s ago: executing program 4 (id=5148): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001f40), 0x2, 0x0) preadv(r0, &(0x7f00000033c0)=[{&(0x7f00000021c0)=""/237, 0xed}], 0x1, 0xfffffff9, 0x8) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000003840)={0xb, 0x7f}, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000011c0)=ANY=[@ANYRES16=r9, @ANYBLOB, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x48440}, 0x4040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0xfa, 0xa296}}]}, 0x38}, 0x1, 0x0, 0x0, 0x401c4}, 0x8840) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') 12.151660534s ago: executing program 8 (id=5150): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f0000005c40)=[{{&(0x7f00000003c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000440)=""/141, 0x8d}, {&(0x7f0000000780)=""/182, 0xb6}, {&(0x7f00000031c0)=""/110, 0x6e}, {&(0x7f00000008c0)=""/154, 0x9a}, {&(0x7f0000000980)=""/134, 0x86}, {&(0x7f0000000a40)=""/120, 0x78}, {&(0x7f0000000ac0)=""/133, 0x85}, {&(0x7f0000000b80)=""/202, 0xca}], 0x8, &(0x7f0000000500)=""/45, 0x2d}}, {{&(0x7f0000003140)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d80)=""/23, 0x17}, {&(0x7f0000000dc0)=""/114, 0x72}, {&(0x7f0000000e40)=""/126, 0x7e}, {&(0x7f0000000ec0)=""/201, 0xc9}], 0x4}, 0x2}, {{&(0x7f0000001000)=@xdp, 0x80, &(0x7f0000001580)=[{&(0x7f0000001080)=""/28, 0x1c}, {&(0x7f00000010c0)=""/64, 0x40}, {&(0x7f0000001100)=""/237, 0xed}, {&(0x7f0000001200)=""/223, 0xdf}, {&(0x7f0000001300)=""/33, 0x21}, {&(0x7f0000001340)=""/186, 0xba}, {&(0x7f0000001400)=""/252, 0xfc}, {&(0x7f0000001500)=""/49, 0x31}, {&(0x7f0000001540)=""/42, 0x2a}], 0x9}, 0xfb}, {{&(0x7f0000001640)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001780)=""/241, 0xf1}, {&(0x7f0000001b80)=""/107, 0x6b}], 0x2, &(0x7f0000001700)}, 0x10000004}, {{&(0x7f0000001880)=@nfc_llcp, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/101, 0x65}, {&(0x7f0000001980)=""/248, 0xf8}, {&(0x7f0000001a80)=""/52, 0x34}, {&(0x7f0000001ac0)=""/41, 0x29}, {&(0x7f0000001b00)=""/55, 0x37}, {&(0x7f0000001b40)=""/28, 0x1c}, {&(0x7f00000030c0)=""/76, 0x4c}], 0x7, &(0x7f0000001c80)=""/255, 0xff}, 0x4}, {{&(0x7f0000001d80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000004280), 0x0, &(0x7f0000004340)=""/253, 0xfd}, 0x4}, {{&(0x7f0000004440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000005740)=[{&(0x7f00000044c0)=""/25, 0x19}, {&(0x7f0000004500)}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/214, 0xd6}, {&(0x7f0000005640)=""/107, 0x6b}, {&(0x7f00000056c0)=""/110, 0x6e}], 0x6, &(0x7f00000057c0)=""/218, 0xda}, 0x6}, {{&(0x7f00000058c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005940)=""/158, 0x9e}, {&(0x7f0000005a00)=""/225, 0xe1}], 0x2, &(0x7f0000005b40)=""/251, 0xfb}, 0x9a}], 0x8, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x66) fcntl$notify(r2, 0x402, 0x8000003d) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="42b48f658fc38f32000000000800000000000000", @ANYBLOB], 0x20}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r5, 0x0, 0x0) listen(r5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60001e90db24e66dea000000180600fe80000000000000000000000000002531e7d2bbfe8000000000000000000000000000aa00004e2232b1c80a95648027fa78556628e6ccb2952ab12afe418771b5c4f91a3e4b9a86e3b1f0da441b92df7db494a3867e664ba9e6c5bfae62895fa06757d8ccc10bbbd4dd2ee169fbda886b6516121ef4722eb68e2033bac2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078ffff03030800"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) r7 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) 12.11588401s ago: executing program 3 (id=5151): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x3142, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x5) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) 11.890616731s ago: executing program 3 (id=5153): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000001900)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f00000000c0)={0xc89}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc085}, 0x40000c0) timer_create(0x4, &(0x7f00000005c0)={0x0, 0x29, 0x800000000004, @tid=r4}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioprio_get$pid(0x3, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) 9.552905094s ago: executing program 2 (id=5154): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_io_uring_setup(0x18d7, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x30, 0x0, &(0x7f0000001000)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b07, &(0x7f0000000080)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYRESDEC, @ANYRESOCT=r2, @ANYBLOB="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", @ANYRES32=r5, @ANYRESOCT=r3, @ANYRESHEX=r1], 0x50) close(0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r6, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006115600000000000180000000000000000000000000000009500"], &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250301f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fdb617c60d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dbe816b89f7cb81bff81a8b9482565856555ee923c6597385b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078290d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be0400"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'veth1_to_hsr\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=@bridge_delvlan={0x8102, 0x71, 0xd12, 0x70bd2c, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 9.454233698s ago: executing program 8 (id=5155): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000240)={0x0, r2, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000280)={0x0, r4, r5, 0x80000001, 0x4, 0x9, 0x7c7d2876, 0x4b, 0x2, 0x0, 0xffffffff, 0x85}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000300)="f2aff00fb3369623f3adf30f2a6209baf80c66b841862b8a66efbafc0cb0b6ee366083fd01ba2100b80a00ef66b9800600000f320f01c8", 0x37}], 0x1, 0x11, 0x0, 0x0) 8.64066716s ago: executing program 7 (id=5157): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_off}, {@uuid_auto}, {@xino_on}]}) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) (async) r2 = socket(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0xfff) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (async) r8 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r8, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) (async) r9 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="650a0400001700006111640000000000180000000000000000000000000000009500000000000000a2488a67e88ed7b53c00e2fbc877bb089f0d16ca7fa2f17c66a32908c72d2f0fad30ec5ff0dbce8cfb06f0b274ae18a56ab344e9a1b6f6a0f70774fbc4ca010bed51b20687e552e8bdf3501b725e520ff4dc415dea3624b3f85e09e2fbcdddd293b9f59c484f4207000000a86a89fa65185bb6dded40aae7be0e7499000000000000000000000000000027686d3b0cca2d1b8ada36"], &(0x7f00000001c0)='syzkaller\x00', 0xef5, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) linkat(r9, &(0x7f0000000100)='./file1\x00', r9, &(0x7f0000000180)='./file0\x00', 0x1000) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) 8.434786896s ago: executing program 7 (id=5158): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06000000000400000000008000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\b\x00\x00\x00Oqw3\ar\x00'/24], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x801) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getcwd(&(0x7f0000000000)=""/93, 0x5d) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x507000, 0x0) mkdirat(r5, &(0x7f0000000300)='./file1\x00', 0x18) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x208003, 0x0) inotify_add_watch(r6, &(0x7f00000001c0)='./file1\x00', 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0d0300000000000000001300000024000980040002000000000093ff02000002000008000100000000000800020004000020"], 0x38}}, 0x0) bpf$MAP_DELETE_BATCH(0x18, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/164, 0x131, 0x131) 8.335813911s ago: executing program 8 (id=5159): mkdir(&(0x7f0000000000)='./file0\x00', 0x11a) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='omfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x100000}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0x68}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x71}) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r7 = socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x18db80, 0x0) setreuid(0x0, 0xee00) setxattr$trusted_overlay_origin(0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x2) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) fstat(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000280)=@nullb, r9, &(0x7f0000000340)) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x24000408) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'wlan1\x00', 0x103}) 8.288399115s ago: executing program 2 (id=5160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x3, 0x98, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001186360088d0e3f76239b010203010902860003a2000000090454020317987b5b0a24010a00060201020c2408050600070d0a329ce2090586100004f40804072501832f08000905000040008103ff0905091b08000c078009040201042e2b1503090509000000030004090502020002f7810609050303ff030840040705a6c6415a9f0905850340000b020b090403"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x3, 0x9, 0x3, 0xe4, 0x40, 0x2c, 0x0, 0x5a, 0x5, 0x7}, {0x2, 0x54000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xeeee0000, 0xe, 0x5, 0x6, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x85, 0x81}, {0x6000, 0xdddd0000, 0x3, 0x5d, 0x5, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x58000, 0xffffffff, 0x9, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x0, 0x83, 0xf7}, {0x1000, 0x80a0000, 0x0, 0xa0, 0x91, 0x8, 0x81, 0x2, 0x80, 0xf, 0x1, 0xfd}, {0x3000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xfec00000, 0x2d}, {0x10000, 0x486}, 0x80000031, 0x0, 0x8000000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000000, 0x3, 0xef6, 0xff]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r3, 0x932, 0x200000000005) ioctl$TCFLSH(r3, 0x540b, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) 7.636526887s ago: executing program 7 (id=5161): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r0, 0x4068aea3, &(0x7f00000000c0)) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xb6a0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x25, 0x6, 0x43) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030040000000001c0012800c0001006d6163766c616e000c0002800800010008f0ffff07000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB], 0x4c}}, 0x884) 6.815486848s ago: executing program 4 (id=5162): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0xc0542, 0x0) timer_create(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x202, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) dup2(r2, r2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) semget(0x2, 0x3, 0x20) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x109001) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000080)={&(0x7f0000000140)=[{0xc, 0x3001, 0x74, &(0x7f0000000180)="299a23b6b5b57a7f57a4bc74faa85e388aee747f6b2f9ce5d766d53cc4c326010412cdfeea08e1923786983567f333f4778fb9268cc82b45652521d83a610bb16dfba74d729661b588fd0647d5fb709c71bea0e45147f1c613eddb95266aa176e5a07f6443c8337da157e3c5972978424ae0226d"}], 0x1}) 6.809335444s ago: executing program 3 (id=5163): socket$kcm(0x10, 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000000c0)={0xfb, 0x43}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x8010, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 6.723011795s ago: executing program 7 (id=5164): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) socket(0x6, 0x80000, 0xfffffffd) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xf) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = socket(0xf, 0x3, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000)=0xfffffff8, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x8, 0x7, 0x1, 0x7, 0x4, 0xd2a1}, 0x9c) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000280)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000001000)="ec6063539ba8420eed3f9630eb82741c38bbd2d1adb49b0efeb949450c22dedc9425fc036db6cb782a357b5cd6d3b9a9dab11ce3110adbda35f71dc17aff0b0ef297119e9bdc6ba0def69d5a41caf42ca0a9e0f640c75c53acbfba9459b6f02cce21b6aa286d6f3973161981", 0x6c, 0x4010001, &(0x7f0000001080)={0xa, 0x4e20, 0x49a, @remote, 0x3}, 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8014) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x80243) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000100)={0x86b6, 0xffffffffffffffff, 0x6, 0x9, 0xa, 0xfffffff6, "16b0bc450cfc47961ed5d8167d4f7865", 0x7, 0x52, 0x1, 0x49, 0x9, 0xa, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) socket$nl_generic(0x10, 0x3, 0x10) 5.797023213s ago: executing program 7 (id=5165): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x40000, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 5.784761945s ago: executing program 8 (id=5166): mkdir(&(0x7f0000000300)='./file0\x00', 0x21) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500"], 0x70}}, 0x20014880) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_emit_ethernet(0x13b, &(0x7f0000000540)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="6c6251e1d358b43767790393e134c8594277cfba0a384e87d009b8be2c"], 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key$user(0x0, &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x1c1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x1, 0x2c, 0x2, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) futex_waitv(&(0x7f0000002040)=[{0xaea1, &(0x7f0000000280)=0x7ff, 0x2}, {0xe, 0x0, 0x2}, {0x8, &(0x7f0000000400)=0xfffffffffffffffe, 0x2}, {0x16, 0x0, 0xf160e33cb05b136b}, {0xb, 0x0, 0x2}, {0x6, &(0x7f0000000500)=0x12bd, 0x82}, {0x0, &(0x7f0000000540)=0xfffffffffffffeff}, {0xffffffffffffffff, 0x0, 0x2}, {0x10, 0x0, 0x2}, {0x5, &(0x7f0000000700)=0x81, 0x82}, {0x7, &(0x7f0000000740)=0x4, 0x2}, {0xa000000000000000, 0x0, 0x2}, {0x38, &(0x7f0000000800)=0x4, 0x82}, {0x7, &(0x7f0000000a40)=0xf, 0x2}, {0x7fffffff, 0x0, 0x82}, {0x0, &(0x7f0000000b40)=0x9, 0x82}, {0x200, &(0x7f0000000b80)=0x7, 0x82}, {0x3, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x101, &(0x7f0000000e00)=0x5, 0x2}, {0x3, 0x0, 0x82}, {0x6, &(0x7f0000000e80)=0x5, 0x2}, {0x5, &(0x7f0000000ec0)=0x7ff, 0x82}, {0x0, 0x0, 0x82}, {0x2, 0x0}, {0xbf9c, &(0x7f00000010c0)=0x3, 0x82}, {0xa, &(0x7f0000001100)=0xac, 0x82}, {0x8, &(0x7f0000001140)=0x8, 0x82}, {0x8, &(0x7f00000011c0)=0xc5, 0x82}, {0x8, &(0x7f0000001280)=0x40, 0x82}, {0x3, &(0x7f00000012c0)=0x9, 0x2}, {0x9, 0x0, 0xf5b10fde16805add}, {0x8, &(0x7f00000013c0)=0x8, 0x6d75b1f2483e83b9}, {0x5, &(0x7f0000001400)=0x4, 0x2}, {0x7f, &(0x7f0000001440)=0x3}, {0x9, &(0x7f00000014c0)=0x6, 0x82}, {0xd81, &(0x7f0000001540)=0x8, 0x82}, {0x9, &(0x7f0000001580)=0x3, 0x2}, {0x8, &(0x7f00000015c0)=0x10000, 0x82}, {0x9, &(0x7f0000001600)=0x9, 0x82}, {0x9, &(0x7f0000001640)=0x10001, 0x2}, {0x200, &(0x7f00000016c0), 0x82}, {0x5, &(0x7f0000001740)=0x5, 0x82}, {0x6, &(0x7f0000001780)=0x2, 0x2}, {0x9, &(0x7f00000017c0)=0x9, 0x2}, {0x800, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x4, &(0x7f0000001940)=0xa, 0x2}, {0xa, &(0x7f0000001980)=0xd273, 0x2}, {0x800, &(0x7f00000019c0)=0x5, 0x82}, {0x0, &(0x7f0000001a00), 0x82}], 0x33, 0x0, &(0x7f0000001a40)={0x0, 0x3938700}, 0x1) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5.756336523s ago: executing program 3 (id=5167): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) syz_usb_connect(0x0, 0x17e, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x48100) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000080)={0x9, {0x36, 0x3, 0x400, 0xfffffede}, {0xfffffff7, 0x4, 0x8bb4d08f, 0xfdfd}, {0x2, 0x8}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket$kcm(0xa, 0x922000000003, 0x11) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 5.432417106s ago: executing program 2 (id=5168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x1d, 0x2, 0x6) futex(&(0x7f0000000000)=0x2, 0xc, 0x1, 0x0, &(0x7f0000000080)=0x2, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000540)=""/135, &(0x7f0000000040)=0x87) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000dc0)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe}, 0x1c, &(0x7f0000000000)=[{0x0}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="ac6d97d4f8de2d", 0x7}], 0x1, &(0x7f0000000600)=[@rthdr={{0x38, 0x29, 0x39, {0x2b, 0x4, 0x2, 0x3, 0x0, [@private1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x0, 0x9, '\x00', [@ra={0x5, 0x2, 0x9}, @padn, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7, 0x3ff, [0x400, 0x400, 0xfffffffffffffff8, 0x7ff]}}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x63}]}}}], 0xb0}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0xffffffff}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000006c0)="098bb5de87e6865258a937686276f2811e42aa9e9f5a8af9fab72bdb742e3e2c25cb75b7f8c1251ade58d1e431ff86f7ed0f9039acda7b429a90900b0eab988240d7dfd87de3c18cb61ed1ece63d149f16900980ce28ef9fe97f25fc3dba522528dbac2d2a2fe05e5c4df55900f2fbc26de777d56876a1207015fb2077a9a2f8aba963325f7b4aa3a28a27ab3f3f24b257c2420929408a5de655122e4c3a0d0139f694fc28af12db483a5c9914ea0091915e4d55c9e66b0c", 0xb8}, {&(0x7f0000000780)="775d23040e8a47945f8a432c392e88c74086a990bbbeb4cf0cd45650c31dda61df31f3a6a2da5b12d3fd9dffb72ae2701895d12b8947134ccc2ee4fc83ea84d8a5635edfdd99ef9936e412a60ac06673a747a43984c911fbbd045027e857fe4bba345316ced6ac7b6cd601c09e8476f6e0d41d80f5ed29f595ce26c1fb20062111f695b4d017bfdce1e742feed583a8d33e7e119407383a391f05bf93b452490694fec271bac1b7f88aeaab416f2bfa07aa2b93ec4684976c4cdb86883a70ee96e18", 0xc2}, {&(0x7f0000000440)="531977a700a8b5e5182d1f19e63b50ade6963a14e2611734c16d4e98713b8aa9dc2b08198ddcb9c04b2155e2d89bcdf7df027ec4610082184c9b74fa284a9b71802ca3af19556cd00cac66d412ba823df192f402f75e3b0a6746126bd4e035b148297b70257820", 0x67}], 0x3, &(0x7f00000008c0)=[@hopopts={{0x178, 0x29, 0x36, {0x2b, 0x2b, '\x00', [@generic={0xfb, 0xbe, "7de778cb348357f04275e55b4557a74382f426e050887e729ce3605eb19c35042dddd002cd19c071e6cbadbc26c02a01257466dacbfd47c6f2fe92385a021ed3a6bfb3aa279d56ab96f480aa53f3d5a2ed670fe677809a5b8a0ba2450c1a2b224c7e83052e9922cc28622b7876ae52e57d8df3e0416d465e56ba1ee238a4aecd1d9b14a9e1e66490de006f86f2d246dc78f31b6e9f3f8976e45323827beb4f75a8382ec47fbe9185c66fb7f8a3eece52925934d685dba039e5abd7417d7c"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x81, 0x8c, "2fa9f3425fdf6542f474ec240d0858f7010b26bb75dde608ccdd7eb4b32ee654c5537d4102dd948ef251abf9928d748b32a5b0afd5074aae465e427a52256b6704e2a9ad03fcc01a16fb63cbc615b63d973eccc752052c06f95149e45e12c606fc6da38bebcabecb6e637a9388d77441f29f030deadd046205a559816dd7a2d8c5fb3037122c0143be5485d6"}, @pad1]}}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x89, 0xc, '\x00', [@hao={0xc9, 0x10, @remote}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x0, 0xe, 0x4, 0x2, [0x73, 0x2, 0x5, 0xfffffffffffffffa, 0xd, 0x9, 0x5]}}]}}}, @dstopts={{0xd0, 0x29, 0x37, {0x2e, 0x16, '\x00', [@hao={0xc9, 0x10, @private2}, @generic={0x8, 0x69, "438903db200fddbf311529575f13f2df34f2e3fba920fda187bcb96e5a82f5936e61e0ebc04bdbef283f4950fd615cc606ed4fb10dbd888b6122cf9f02b4dba18d0a0622b319cf6299c52169a8b59575c44be226638d35a36fb87ca4bf826a7021289f901ef9107131"}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x2ac}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @private0}, @pad1, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x1, [0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @rthdr={{0xb8, 0x29, 0x39, {0x67, 0x14, 0x1, 0xe, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @dev={0xfe, 0x80, '\x00', 0x2e}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast2]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x8a}}, @hopopts={{0x108, 0x29, 0x36, {0x0, 0x1d, '\x00', [@jumbo={0xc2, 0x4, 0x4f7}, @generic={0x7, 0xd6, "36f16dfceb23c2aacfe577a997cf7f826a82061e21891d8fe1b40c706030bdcbe153f50a4780ac8c900887e14ea9008b5a7754cfd6c144c5b180d6dbeb8d43ffde76d7519227a4618cfdf595a232407f0740b9d7ef34a3a27fe16a1facfc11024575f3217da02a16364334e732d761e75f34d8614ba463c856a416fce969d6dc546454e63dfe0cb09246322d48ba0643be57921fa9420b2b928ca901645407953e4265136d09157f687d715ac0bffb09a46b0e8635cebd29e00321e33cd63db95c339563c7ee2c4d343b74adeb486b61a8e53f7b0e26"}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x4d0}}], 0x4, 0x8ab628eed19a998c) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000340)) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRES32=r0]) getpriority(0x0, r3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r6, 0x0, 0x0}, 0x20) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 4.576998134s ago: executing program 2 (id=5169): mkdir(&(0x7f0000000080)='./bus\x00', 0x3) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, 0x0, 0x0, 0xa00f, 0x75, 0x7, 0x8000000c, 0x7b, 0x0}) (async) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffcf4, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000853e8ffc3dc751141cd74c50926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) recvmmsg(r3, &(0x7f0000003080)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/102, 0x66}, {&(0x7f0000000400)=""/206, 0xce}, {&(0x7f0000000340)=""/21, 0x15}], 0x3, &(0x7f0000000540)=""/171, 0xab}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000680)=""/63, 0x3f}, {&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f0000000780)=""/64, 0x40}, {&(0x7f0000002cc0)=""/233, 0xe9}, {&(0x7f0000000980)=""/220, 0xdc}, {&(0x7f00000008c0)=""/69, 0x45}, {&(0x7f0000000a80)=""/227, 0xe3}, {&(0x7f0000000b80)=""/190, 0xbe}, {&(0x7f0000000c40)=""/6, 0x6}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0xa, &(0x7f0000001d40)=""/124, 0x7c}, 0x4}, {{&(0x7f0000001dc0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001e40)=""/131, 0x83}, {&(0x7f0000001f00)=""/198, 0xc6}, {&(0x7f0000002000)=""/27, 0x1b}, {&(0x7f0000002040)=""/51, 0x33}, {&(0x7f0000002080)=""/17, 0x11}], 0x5}, 0xffff8001}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002140)=""/195, 0xc3}, {&(0x7f0000002240)=""/251, 0xfb}, {&(0x7f0000002340)=""/191, 0xbf}, {&(0x7f0000002400)=""/232, 0xe8}, {&(0x7f0000002500)=""/58, 0x3a}, {&(0x7f0000002540)=""/228, 0xe4}], 0x6, &(0x7f00000026c0)=""/42, 0x2a}, 0x2}, {{&(0x7f0000002700)=@nfc_llcp, 0x80, &(0x7f0000002900)=[{&(0x7f0000002780)=""/5, 0x5}, {&(0x7f00000027c0)=""/54, 0x36}, {&(0x7f0000002800)=""/241, 0xf1}], 0x3, &(0x7f0000002940)}}, {{&(0x7f0000002980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002a00)=""/140, 0x8c}], 0x1}, 0x1}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002b00)=""/5, 0x5}], 0x1, &(0x7f0000002b80)=""/167, 0xa7}, 0xb}, {{&(0x7f0000002c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002f00), 0x0, &(0x7f0000002f80)=""/194, 0xc2}, 0x8da}], 0x8, 0x100, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r12 = fsopen(&(0x7f0000000040)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r9, r11, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x49}}, 0x30) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 3.902981167s ago: executing program 2 (id=5170): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000b00)={0x14, &(0x7f00000009c0)={0x40, 0x2, 0xea, {0xea, 0x23, "c534521ec132078d7bfbd434b3816ee930418e280042c54cff0448a756e72b6b6dcca4cb3d0cebc1be6fed71413a602e85c639cb3bbdf9d6f8d8f660f92213e08fd91ba936402df6c4110261b3a5511701eda0eb14b124241fa25dc40f5e0c2486e30738f7caeb47439f4a25c9eb966621978c2ba984e5de822c144a591486ce7ed29f77e9aeee641fb942111c860af851fdca1dec6d080be39c63a02a6bcfcb22ea0e96d04dc02d99b1e98331fe261f13deea1b0ba4622605c8d5fa64ea43b1001dbddc0f6f76007420bf26271818e38d842a008eace1e343e4183800307b7a33aef399c8344f9b"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000dc0)={0x44, &(0x7f0000000b40)={0x40, 0x14, 0xa0, "6caeec6f9a8c9b4f2f0a77e5e071345eb5452467a0987beef9fe6d6de1fe932dab47ba3a63077ec9d761a9c16214ea95c996d5e59771ddb3f679b1ffb7387a8ec604e40620966ba35547ffe564015dbfdcefaed1ceae101c9e3b63cccf485f80463f8024bc330b4455c16923136e8834abe0da49783be05d1f5f25a31ca8e33b72a225658cd91f45c6aef25dd90a6d3b72a56f4b4ce541e52b4f6f001ef4fcf9"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000c80)={0x20, 0x80, 0x1c, {0x5, 0x1, 0x6, 0x6, 0x3, 0xe815, 0x40, 0x8, 0x2, 0x8000, 0x4, 0x1}}, &(0x7f0000000cc0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000d00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000d40)={0x20, 0x87, 0x2, 0x3d82}, &(0x7f0000000d80)={0x20, 0x89, 0x2}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000600)={0x14, &(0x7f0000000480)={0x0, 0x21, 0x8c, {0x8c, 0xc, "aff30e7092bf8b59189c2810140856571b490cd0e1cb05504376e84ad30850c35881d13c06da74282d0548927d800a0f1dad79a3ae046b407d16b80f4f55aa67b2aaafad90f83fb6450b186597da511c5477107a27eaeca7e6f54e18db8eca298316ecb27d4cb2188ad9aeee3a4289a90ccda1a617c621239305b03f828f313520811790ab9ed572c2c8"}}, &(0x7f0000000540)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "09868186c30e38273df74330fa87ce19e4037c320c11d84940c47d1c0a2efc54083d3285c11cc904092f833e1c188211343f43175d408c6a5ed9cbc4ac1427d70bf0ccf31919718b707c11efc962ed642738d530d0271cddb44ee22e78cbd5d27ad8d1668da2e1db4f9f2e5b60357f9328b582411c73149a8e4ca2b699cfb2d5355e66d7ea304200615a87ac"}}}, &(0x7f0000000980)={0x34, &(0x7f0000000640)={0x40, 0x12, 0x4d, "3f2dbf68324a1556f3c0902186c19587d088e59229365d0f4d4691ea94af50ba182347b1a9fa611be6d0609ec891841ef5d7d8f6b8af227b27823df62cb64a05128960ab30aa90af6f512126ce"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0xc8, {0xc6, "ab44a7b6dd22ec8ff97cdb178b3b427d4291edbf91c91fd1f78c17c8a0814b548510cfc3ea8524db2793eb01ed6dc8ff0c9a45f46f89cdd46218b841602131a9c8b43dee0ba339ba6146a080fb7f0baf731bb938387322847d48fd4bdb68b187b16cdc8948894d6d25f4d5cbbd0c1324c846668059712e16c68eef644d790749b7fd1572cc6baeecf2dfcfc78cdb7f39034c390329e53d1238c1342aa3c39ee306836230f6c43ab4f0aab8545ad972cf2d9461b5a06c2b5d00a2614865f6e659fffcc97532c2"}}, &(0x7f0000000900)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000940)={0x20, 0x0, 0x1, 0x4}}) 2.636464653s ago: executing program 7 (id=5171): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x6, 0x2, 0x3, 0x6, 0x73, 0x3}, &(0x7f00000001c0)=0x20) r1 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) close_range(r1, r0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x9, 0x80100008b}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x4080) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000002980)=""/4096) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000"], 0x0) r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose}, [@bcast, @bcast, @bcast, @remote, @netrom, @netrom, @bcast, @bcast]}, &(0x7f00000005c0)=0xfffffffffffffd11) accept4$ax25(r5, &(0x7f0000000080)={{}, [@netrom, @default, @rose, @netrom, @bcast, @remote, @netrom, @default]}, &(0x7f0000000100)=0x48, 0x80000) 1.971573774s ago: executing program 4 (id=5172): syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x4}, 0x48, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000039000100faff07000400000001006b89f69c36a6b9e6537531"], 0x20}, 0x1, 0x0, 0x0, 0x400c840}, 0x4008094) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000040)=0x27fc, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) 1.789637844s ago: executing program 8 (id=5173): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000001900)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f00000000c0)={0xc89}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc085}, 0x40000c0) timer_create(0x4, &(0x7f00000005c0)={0x0, 0x29, 0x800000000004, @tid=r4}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioprio_get$pid(0x3, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) 1.747023007s ago: executing program 3 (id=5174): mkdir(&(0x7f0000000000)='./file0\x00', 0x11a) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='omfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x100000}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0x68}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x71}) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r7 = socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x18db80, 0x0) setreuid(0x0, 0xee00) setxattr$trusted_overlay_origin(0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x2) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) fstat(r8, &(0x7f00000002c0)) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x24000408) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8923, &(0x7f0000000040)={'wlan1\x00', 0x103}) 755.150495ms ago: executing program 2 (id=5175): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x2, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}]}, 0x50}}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0xa4ffffff, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 319.216366ms ago: executing program 3 (id=5176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f00000001c0)) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x3}, &(0x7f0000000540)=0x8) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="0e"], 0xc) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000a00300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e27680000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r6, r5}) close(r7) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) 0s ago: executing program 8 (id=5177): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0x5, 0x1, 0x815}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'caif0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x4e9b, 0x81, 0xbb, 0x40, 0xf9, 0x8, 0x3, 0x3, 0x1, [0x200, 0x9, 0x8, 0x2, 0x5, 0x1, 0x2, 0xe]}}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x121242, 0x0) ioctl$FE_DISEQC_RESET_OVERLOAD(r2, 0x6f3e, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0xc, 0xd, 0x9, 0x5}, {0x8, 0x3, 0xe0, 0x6}, {0x3, 0x4, 0x98, 0xffffff01}]}) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000200)) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000740)={&(0x7f0000000300)={{@local, 0x3}, {@my=0x1}, 0x400, "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"}, 0x418, 0x9}) sendmsg$802154_raw(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000840)={&(0x7f00000007c0)="06798027f05d486d4e4a84d1bfc0e96091c09665bbeab2a1fc066fd90fb1d0d53f45e32373d11c3ed5f7ba474a87f156365a2224da319442d213f7a68abe3fef45b06b4c9cc9a7e7026b8c6c5d4b082c32c3f22b41a431fe5646c36440fc0b6c58c12c29db903b3208c676e81af82ff22fb2dac492e3d14e", 0x78}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) shutdown(r2, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) read$char_usb(r4, &(0x7f00000008c0)=""/151, 0x97) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x39}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000854) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000ac0)) r7 = socket$netlink(0x10, 0x3, 0x13) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000b00)={r7}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000b40)={0xc}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/power/pm_async', 0x88042, 0x20) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000bc0)) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) r10 = syz_usb_connect$midi(0x4, 0x81, &(0x7f0000000d00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x499, 0x101f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x9, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, [@midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x58, 0x4, [{0x6, 0x1}, {0x63, 0x8}, {0x1, 0xde}, {0xff, 0x6}], 0x6}, @midi_out_jack={0x17, 0x24, 0x3, 0x2, 0x5, 0x8, [{0x7c, 0x5}, {0x59}, {0x0, 0x67}, {0x30, 0xa}, {0x6, 0x8}, {0x4, 0xd}, {0x7, 0xa0}, {0xfa, 0x4}], 0x8}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x3, 0x1, 0x3, [{0x6, 0x3}, {0x6}, {0x4, 0x2}], 0x1}], [{{0x9, 0x5, 0x80, 0x0, 0x8, 0x9, 0x5, 0x5, {0x4}}}, {{0x9, 0x5, 0x56d73fd63cf8592e, 0x1, 0x200, 0xff, 0x6, 0x6, {0x6, 0x25, 0x1, 0x2, "ff06"}}}]}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x300, 0x5, 0x8, 0x8f, 0x78, 0x99}, 0xc, &(0x7f0000000e00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x4, 0x6}]}, 0x5, [{0x8b, &(0x7f0000000e40)=@string={0x8b, 0x3, "b77cbd2a80178dd3ac3ee162f0e100e8d1430c899311d00569a195c47d76354f7460e572492545a87d868324b0eff13bdafd9f3e0e41104d1c4388f972c7da8c04c2076db6863fed242e3c2cd984d9fc1f948564af5ebf9639a582147b024285ecf1059be3f0a9aff50597e6e261e532a8e9a9f420b723b25a43d16c994ec61e1ea68ea01ecd05dda5"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0xd9ebb81d7e90ed73}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x412}}, {0xf8, &(0x7f0000000f80)=@string={0xf8, 0x3, "7479245eef59bae2f13acb77cad5806c3364712d1a08465914fdcd4c126e45613d694ca19694be0359302653cf7528e5ebaaaffac5fb73c768c45854dc7f418f45d4d2e22709c9282c1638594d98f8fa18cb4a3cea4310b3343ede4cd5429fbe0848bdbaf6d86be3cabbdb3ebcbac5248919e271a621e76d719250341f2e8010bb5a73bc5df6b5bda502e20868e6894289f1911fcc5471527552436d084b3b0f75bf7e0c3bcdf1140bda1fc5e44a4ed7639c4b7ac2c8586f9e9e9d154d55118ba9dfbe4c13541c248bd463589647147c851c61b350b13d3a719cb62ff7471476e8468e3cca2021011b840067fdf615294c6c11496aaa"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x3c7b}}]}) syz_usb_disconnect(r10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xc4, r11, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x69b2}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x367}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0xc4}, 0x1, 0x0, 0x0, 0x44810}, 0x1) chroot(&(0x7f0000001340)='./file0\x00') kernel console output (not intermixed with test programs): 9176][T24632] cytherm 10-1:0.0: Cypress thermometer device now attached [ 1642.036659][ T5877] usb 5-1: Manufacturer: syz [ 1642.042888][ T29] audit: type=1400 audit(1772540186.865:1794): avc: denied { associate } for pid=25368 comm="syz.7.4722" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1642.254921][ T5877] usb 10-1: USB disconnect, device number 3 [ 1642.263792][ T5877] cytherm 10-1:0.0: Cypress thermometer now disconnected [ 1642.315233][T19731] usb 5-1: USB disconnect, device number 16 [ 1643.217076][T25404] loop6: detected capacity change from 0 to 2640 [ 1643.302859][T25404] ldm_validate_partition_table(): Disk read failed. [ 1643.303905][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1643.319217][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1643.616387][T25404] Dev loop6: unable to read RDB block 0 [ 1643.933240][T25404] loop6: unable to read partition table [ 1643.993134][T25404] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1644.056098][T24632] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1644.229955][T24632] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 1644.259614][T24632] usb 10-1: config 0 has no interface number 0 [ 1644.289692][T24632] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1644.356872][T24632] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1644.370011][T24632] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1644.381242][T24632] usb 10-1: Manufacturer: syz [ 1644.390208][T24632] usb 10-1: SerialNumber: syz [ 1644.438837][T24632] usb 10-1: config 0 descriptor?? [ 1644.732201][T16618] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1644.952307][T25431] input: syz1 as /devices/virtual/input/input73 [ 1645.226420][T25433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.239740][T25433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.327458][T16618] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1646.338343][T16618] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1646.350942][T16618] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1646.364355][T16618] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1646.373704][T16618] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.394689][T16618] usb 9-1: Product: syz [ 1646.479872][T16618] usb 9-1: Manufacturer: syz [ 1646.494304][T16618] usb 9-1: SerialNumber: syz [ 1646.510523][T16618] usb 9-1: config 0 descriptor?? [ 1646.520360][T25424] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1646.529870][T25424] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1646.540738][T16618] usb 9-1: ucan: probing device on interface #0 [ 1646.716439][T25441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1647.484260][T24632] usbtouchscreen 10-1:0.214: Failed to read FW rev: -71 [ 1647.491453][T24632] usbtouchscreen 10-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1647.516690][T16618] usb 9-1: ucan: device reported invalid tx-fifo size [ 1647.524723][T16618] usb 9-1: ucan: probe failed; try to update the device firmware [ 1647.536245][T24632] usb 10-1: USB disconnect, device number 4 [ 1647.659051][T14995] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1647.829337][T25465] mmap: syz.7.4739 (25465): VmData 37593088 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1647.865190][T14995] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1647.878795][T14995] usb 6-1: string descriptor 0 read error: -22 [ 1647.888785][T14995] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.40 [ 1647.892338][ T29] audit: type=1800 audit(1772540448.717:1795): pid=25466 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.7.4739" name="/newroot/485/pids.events" dev="tmpfs" ino=2620 res=0 errno=0 [ 1647.907989][T14995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.079873][T25479] netlink: 'syz.4.4741': attribute type 29 has an invalid length. [ 1648.101898][T24632] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1648.304986][T25479] EXT4-fs (nbd4): unable to read superblock [ 1648.337269][T25479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1648.342318][T24632] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.870958][T24632] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1648.885370][T24632] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1648.894746][T24632] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.917090][T24632] usb 10-1: config 0 descriptor?? [ 1648.928079][T24632] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1649.017549][T24632] dvb-usb: bulk message failed: -22 (3/0) [ 1649.035972][T24632] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1649.048381][T14995] usbhid 6-1:1.0: can't add hid device: -71 [ 1649.053302][T24632] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1649.062527][T24632] usb 10-1: media controller created [ 1649.069342][T24632] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1649.081614][T14995] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1650.013985][T14995] usb 6-1: USB disconnect, device number 17 [ 1650.131453][T24632] dvb-usb: bulk message failed: -22 (6/0) [ 1650.143180][T24632] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1650.157218][T24632] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input74 [ 1650.270022][T25497] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1650.591191][ T29] audit: type=1400 audit(1772540451.078:1796): avc: denied { mount } for pid=25493 comm="syz.7.4744" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1650.659044][T24632] dvb-usb: schedule remote query interval to 150 msecs. [ 1650.676865][T24632] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1650.677952][T19731] usb 9-1: USB disconnect, device number 11 [ 1650.690565][T24632] usb 10-1: USB disconnect, device number 5 [ 1650.765504][T24632] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1650.980616][ T29] audit: type=1400 audit(1772540451.809:1797): avc: denied { unmount } for pid=15719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1652.435221][T25525] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1653.477264][T25555] netlink: 'syz.9.4754': attribute type 29 has an invalid length. [ 1653.599563][T25558] EXT4-fs (nbd9): unable to read superblock [ 1653.679868][T25558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1654.672674][T25582] net_ratelimit: 10 callbacks suppressed [ 1654.672692][T25582] openvswitch: netlink: Flow actions attr not present in new flow. [ 1655.914066][ T5884] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1655.943522][T25598] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1656.101263][ T5884] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1656.124637][ T5884] usb 10-1: string descriptor 0 read error: -22 [ 1656.139333][ T5884] usb 10-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.40 [ 1656.170013][ T5884] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.520799][ T29] audit: type=1400 audit(1772540457.331:1798): avc: denied { setopt } for pid=25620 comm="syz.5.4766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1656.552738][T25629] netlink: 'syz.8.4768': attribute type 29 has an invalid length. [ 1656.647521][T25631] EXT4-fs (nbd8): unable to read superblock [ 1656.673924][T25631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1656.798912][ T5884] usbhid 10-1:1.0: can't add hid device: -71 [ 1656.814324][ T5884] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1656.849164][ T5884] usb 10-1: USB disconnect, device number 6 [ 1657.739164][T19731] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1657.909027][T19731] usb 10-1: Using ep0 maxpacket: 16 [ 1658.021612][T19731] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1658.054192][T19731] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1658.083735][T19731] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.115147][T19731] usb 10-1: Product: syz [ 1658.173087][T19731] usb 10-1: Manufacturer: syz [ 1658.240546][T19731] usb 10-1: SerialNumber: syz [ 1658.269478][T19731] usb 10-1: config 0 descriptor?? [ 1658.287277][T19731] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1658.395206][T19731] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1658.567702][T25655] fuse: Unknown parameter 'fZ' [ 1658.800826][T25661] fuse: Unknown parameter 'fZ' [ 1658.838846][ T5884] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1659.014894][T19731] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1659.034171][ T5884] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1659.068776][ T792] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1659.841715][T19731] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1659.849920][T19731] em28xx 10-1:0.0: board has no eeprom [ 1659.863603][ T5884] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 64602, setting to 64 [ 1659.896913][ T792] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1659.937999][ T5884] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1659.948198][ T792] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 64602, setting to 64 [ 1659.987753][ T792] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1659.999734][ T5884] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1660.038368][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1660.068245][ T792] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1660.083462][ T5884] usb 5-1: Product: syz [ 1660.087639][ T5884] usb 5-1: Manufacturer: syz [ 1660.095847][ T792] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1660.117900][ T5884] usb 5-1: SerialNumber: syz [ 1660.126171][ T792] usb 9-1: Product: syz [ 1660.209066][ T792] usb 9-1: Manufacturer: syz [ 1660.214880][ T5884] usb 5-1: config 0 descriptor?? [ 1660.223751][ T792] usb 9-1: SerialNumber: syz [ 1660.229275][T25655] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1660.244901][ T792] usb 9-1: config 0 descriptor?? [ 1660.250650][T25661] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1660.267535][ T5884] usb 5-1: selecting invalid altsetting 0 [ 1660.627327][ T792] usb 9-1: selecting invalid altsetting 0 [ 1661.098362][T19731] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1661.116577][T19731] em28xx 10-1:0.0: dvb set to bulk mode. [ 1661.124293][ T5877] em28xx 10-1:0.0: Binding DVB extension [ 1661.198492][ T792] usb 10-1: USB disconnect, device number 7 [ 1661.268156][ T792] em28xx 10-1:0.0: Disconnecting em28xx [ 1661.323927][ T5877] em28xx 10-1:0.0: Registering input extension [ 1661.355444][ T792] em28xx 10-1:0.0: Closing input extension [ 1661.422229][ T792] em28xx 10-1:0.0: Freeing device [ 1661.780178][ T5877] usb 5-1: USB disconnect, device number 17 [ 1661.823512][T19731] usb 9-1: USB disconnect, device number 12 [ 1662.354788][T25717] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4780'. [ 1662.790563][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1662.934455][ T5877] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1663.106456][T19731] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1663.124680][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.139512][ T5877] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1663.155170][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.166025][ T5877] usb 5-1: config 0 descriptor?? [ 1663.211548][ T5877] pwc: Askey VC010 type 2 USB webcam detected. [ 1663.296361][T19731] usb 10-1: Using ep0 maxpacket: 8 [ 1663.307490][T19731] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1663.325711][T19731] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1663.348288][T19731] usb 10-1: New USB device found, idVendor=07c0, idProduct=1504, bcdDevice=30.22 [ 1663.365534][T19731] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.398429][T19731] usb 10-1: config 0 descriptor?? [ 1663.419488][T19731] iowarrior 10-1:0.0: no interrupt-out endpoint found [ 1663.623324][T19731] usb 10-1: USB disconnect, device number 8 [ 1663.634804][T25721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.653924][T25721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.673806][ T5877] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1663.686394][ T5877] pwc: recv_control_msg error -32 req 02 val 2700 [ 1663.696393][ T5877] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1663.905062][ T5877] pwc: recv_control_msg error -32 req 04 val 1300 [ 1663.925060][ T5877] pwc: recv_control_msg error -32 req 04 val 1400 [ 1664.134117][ T5877] pwc: recv_control_msg error -32 req 02 val 2100 [ 1664.146955][T25759] FAULT_INJECTION: forcing a failure. [ 1664.146955][T25759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1664.148860][ T5877] pwc: recv_control_msg error -32 req 04 val 1500 [ 1664.222355][T25759] CPU: 1 UID: 0 PID: 25759 Comm: syz.8.4786 Tainted: G L syzkaller #0 PREEMPT(full) [ 1664.222383][T25759] Tainted: [L]=SOFTLOCKUP [ 1664.222390][T25759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1664.222400][T25759] Call Trace: [ 1664.222407][T25759] [ 1664.222414][T25759] dump_stack_lvl+0x100/0x190 [ 1664.222447][T25759] should_fail_ex.cold+0x5/0xa [ 1664.222469][T25759] _copy_from_user+0x2e/0xd0 [ 1664.222495][T25759] memdup_user+0x6b/0xe0 [ 1664.222523][T25759] strndup_user+0x78/0xe0 [ 1664.222549][T25759] __do_sys_fsconfig+0x7ec/0xcb0 [ 1664.222575][T25759] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1664.222601][T25759] ? fput+0x79/0x100 [ 1664.222629][T25759] do_syscall_64+0x106/0xf80 [ 1664.222646][T25759] ? clear_bhb_loop+0x40/0x90 [ 1664.222667][T25759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.222685][T25759] RIP: 0033:0x7fc9bab9c799 [ 1664.222699][T25759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1664.222715][T25759] RSP: 002b:00007fc9bba88028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1664.222733][T25759] RAX: ffffffffffffffda RBX: 00007fc9bae15fa0 RCX: 00007fc9bab9c799 [ 1664.222743][T25759] RDX: 0000200000000100 RSI: 0000000000000001 RDI: 0000000000000003 [ 1664.222754][T25759] RBP: 00007fc9bba88090 R08: 0000000000000000 R09: 0000000000000000 [ 1664.222764][T25759] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 1664.222775][T25759] R13: 00007fc9bae16038 R14: 00007fc9bae15fa0 R15: 00007fff2f532998 [ 1664.222800][T25759] [ 1664.431431][ T5877] pwc: recv_control_msg error -32 req 02 val 2400 [ 1664.441227][T25765] CIFS: VFS: Malformed UNC in devname [ 1664.464285][ T5877] pwc: recv_control_msg error -32 req 02 val 2600 [ 1664.486441][ T5877] pwc: recv_control_msg error -32 req 02 val 2900 [ 1664.493477][ T5877] pwc: recv_control_msg error -32 req 02 val 2800 [ 1664.514003][T25770] netlink: 'syz.8.4789': attribute type 29 has an invalid length. [ 1664.825046][ T5877] pwc: recv_control_msg error -71 req 04 val 1200 [ 1664.833988][ T5877] pwc: Registered as video103. [ 1664.965114][ T5877] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input76 [ 1665.196080][ T5877] usb 5-1: USB disconnect, device number 18 [ 1665.231251][T25770] EXT4-fs (nbd8): unable to read superblock [ 1665.241177][T25770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1665.610845][T25781] ubi31: attaching mtd0 [ 1665.981028][T25781] ubi31: scanning is finished [ 1666.024617][ T29] audit: type=1400 audit(1772540466.856:1799): avc: denied { getattr } for pid=25777 comm="syz.8.4790" name="[userfaultfd]" dev="anon_inodefs" ino=100637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1666.122601][ T29] audit: type=1400 audit(1772540466.936:1800): avc: denied { listen } for pid=25777 comm="syz.8.4790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1666.265555][T25781] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1666.273140][T25781] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1666.280451][T25781] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1666.287496][T25781] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1666.294969][T25781] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1666.301806][T25781] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1666.310134][T25781] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 715343740 [ 1666.320161][T25781] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1666.330314][T25791] ubi31: background thread "ubi_bgt31d" started, PID 25791 [ 1666.410859][T25795] netlink: 'syz.8.4793': attribute type 1 has an invalid length. [ 1667.718553][ T29] audit: type=1400 audit(1772540468.187:1801): avc: denied { mount } for pid=25800 comm="syz.5.4794" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1668.001181][ T29] audit: type=1400 audit(1772540468.837:1802): avc: denied { connect } for pid=25793 comm="syz.8.4793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1668.121149][T25815] FAULT_INJECTION: forcing a failure. [ 1668.121149][T25815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1668.145451][T25815] CPU: 0 UID: 0 PID: 25815 Comm: syz.5.4797 Tainted: G L syzkaller #0 PREEMPT(full) [ 1668.145477][T25815] Tainted: [L]=SOFTLOCKUP [ 1668.145481][T25815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1668.145488][T25815] Call Trace: [ 1668.145492][T25815] [ 1668.145496][T25815] dump_stack_lvl+0x100/0x190 [ 1668.145519][T25815] should_fail_ex.cold+0x5/0xa [ 1668.145534][T25815] _copy_from_user+0x2e/0xd0 [ 1668.145551][T25815] copy_msghdr_from_user+0x9f/0x4f0 [ 1668.145568][T25815] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1668.145586][T25815] ? rcu_is_watching+0x12/0xc0 [ 1668.145599][T25815] ? ___sys_recvmsg+0x177/0x1a0 [ 1668.145615][T25815] ? kfree+0x2ec/0x6b0 [ 1668.145632][T25815] ___sys_recvmsg+0xdd/0x1a0 [ 1668.145647][T25815] ? __pfx____sys_recvmsg+0x10/0x10 [ 1668.145670][T25815] ? __pfx___might_resched+0x10/0x10 [ 1668.145686][T25815] do_recvmmsg+0x301/0x760 [ 1668.145703][T25815] ? __pfx_do_recvmmsg+0x10/0x10 [ 1668.145717][T25815] ? ksys_write+0x190/0x250 [ 1668.145734][T25815] ? ksys_write+0x190/0x250 [ 1668.145752][T25815] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1668.145770][T25815] ? __fget_files+0x21f/0x3d0 [ 1668.145785][T25815] __x64_sys_recvmmsg+0x22a/0x280 [ 1668.145798][T25815] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1668.145814][T25815] do_syscall_64+0x106/0xf80 [ 1668.145826][T25815] ? clear_bhb_loop+0x40/0x90 [ 1668.145840][T25815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.145852][T25815] RIP: 0033:0x7fa07479c799 [ 1668.145862][T25815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1668.145873][T25815] RSP: 002b:00007fa075614028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1668.145884][T25815] RAX: ffffffffffffffda RBX: 00007fa074a16090 RCX: 00007fa07479c799 [ 1668.145891][T25815] RDX: 000000000000072a RSI: 0000200000000080 RDI: 0000000000000005 [ 1668.145898][T25815] RBP: 00007fa075614090 R08: 0000000000000000 R09: 0000000000000000 [ 1668.145904][T25815] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000002 [ 1668.145911][T25815] R13: 00007fa074a16128 R14: 00007fa074a16090 R15: 00007ffe9ebdafb8 [ 1668.145925][T25815] [ 1668.645445][T25820] netlink: 'syz.7.4798': attribute type 29 has an invalid length. [ 1669.064606][T25820] EXT4-fs (nbd7): unable to read superblock [ 1669.073100][T25820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1669.193745][T25823] netlink: 'syz.5.4799': attribute type 29 has an invalid length. [ 1669.263528][T25824] EXT4-fs (nbd5): unable to read superblock [ 1669.295138][ T29] audit: type=1400 audit(1772540470.098:1803): avc: denied { mounton } for pid=25822 comm="syz.5.4799" path="/syzcgroup/unified/syz5" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1669.321613][T25824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1670.497022][T25833] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4802'. [ 1671.242440][ T5877] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1671.516757][ T5877] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1671.537398][ T5877] usb 6-1: string descriptor 0 read error: -22 [ 1671.544755][ T5877] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.40 [ 1671.572200][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.652966][T19731] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1671.812093][T19731] usb 5-1: Using ep0 maxpacket: 16 [ 1671.823278][T19731] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1671.834601][T19731] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1671.845214][T19731] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1671.887281][T19731] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1671.910275][T19731] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1671.986948][T19731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.014603][T19731] usb 5-1: config 0 descriptor?? [ 1672.134654][T25851] netlink: 'syz.9.4808': attribute type 29 has an invalid length. [ 1672.229703][ T5877] usbhid 6-1:1.0: can't add hid device: -71 [ 1672.248777][ T5877] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1672.258373][ T5877] usb 6-1: USB disconnect, device number 18 [ 1672.265499][T25852] EXT4-fs (nbd9): unable to read superblock [ 1672.344132][T25856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1672.447502][T19731] mcp2200 0003:04D8:00DF.003F: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 1672.769505][T25849] netlink: 'syz.4.4807': attribute type 1 has an invalid length. [ 1672.880695][T19731] usb 5-1: USB disconnect, device number 19 [ 1672.959791][ T29] audit: type=1400 audit(1772540473.800:1804): avc: denied { name_bind } for pid=25860 comm="syz.5.4809" path="socket:[100879]" dev="sockfs" ino=100879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1673.878382][T25870] syz.4.4811 (25870): drop_caches: 2 [ 1674.360964][T19731] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1674.510997][T19731] usb 10-1: Using ep0 maxpacket: 16 [ 1674.517587][T19731] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.640819][ T792] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1674.671138][T19731] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.681642][T19731] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1674.691556][T19731] usb 10-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1674.701218][T19731] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.731930][T19731] usb 10-1: config 0 descriptor?? [ 1674.852220][ T792] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 1674.873139][ T792] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.883472][ T792] usb 6-1: config 8 has no interface number 0 [ 1674.890526][ T792] usb 6-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1674.903822][ T792] usb 6-1: config 8 interface 177 has no altsetting 0 [ 1674.919301][T25881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4815'. [ 1675.486778][ T792] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1675.496130][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.582309][ T792] ir_toy 6-1:8.177: required endpoints not found [ 1675.654351][T25872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.670617][T25872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.721160][T19731] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 1675.738337][T19731] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 1675.781493][T19731] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 1675.788503][T19731] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 1675.796415][T19731] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 1675.810727][T19731] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 1675.820383][T19731] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 1675.827430][T19731] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 1675.834692][T19731] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 1675.850072][T19731] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 1675.878514][T25898] tipc: Started in network mode [ 1675.883650][T25898] tipc: Node identity 7f000001, cluster identity 4711 [ 1675.895060][T25898] tipc: Enabling of bearer rejected, failed to enable media [ 1675.940001][ T29] audit: type=1326 audit(1772540476.711:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25888 comm="syz.8.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bab9c799 code=0x7ffc0000 [ 1675.945269][T25872] binder: 25871:25872 ioctl c018620c 200000000380 returned -1 [ 1676.040093][ T29] audit: type=1326 audit(1772540476.711:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25888 comm="syz.8.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9bab9c799 code=0x7ffc0000 [ 1676.078527][T19731] cougar 0003:060B:500A.0040: unexpected long global item [ 1676.097959][T19731] cougar 0003:060B:500A.0040: parse failed [ 1676.116369][T19731] cougar 0003:060B:500A.0040: probe with driver cougar failed with error -22 [ 1676.127931][ T29] audit: type=1326 audit(1772540476.711:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25888 comm="syz.8.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bab9c799 code=0x7ffc0000 [ 1676.181888][T25872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.259001][T25872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1676.378255][ T29] audit: type=1326 audit(1772540476.711:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25888 comm="syz.8.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9bab9c799 code=0x7ffc0000 [ 1676.921020][ T29] audit: type=1326 audit(1772540476.711:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25888 comm="syz.8.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bab9c799 code=0x7ffc0000 [ 1676.944873][ T29] audit: type=1326 audit(1772540476.721:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25888 comm="syz.8.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9bab9e007 code=0x7ffc0000 [ 1677.122801][ T29] audit: type=1326 audit(1772540476.721:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25888 comm="syz.8.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc9bab5cfce code=0x7ffc0000 [ 1677.187658][ T29] audit: type=1326 audit(1772540476.721:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25888 comm="syz.8.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc9bab5cfce code=0x7ffc0000 [ 1677.349346][ T29] audit: type=1326 audit(1772540476.721:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25888 comm="syz.8.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc9bab5cfce code=0x7ffc0000 [ 1677.710189][ T792] usb 6-1: USB disconnect, device number 19 [ 1678.410092][T25920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1678.419383][T25920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1678.907143][T24632] usb 10-1: USB disconnect, device number 9 [ 1679.474217][T25943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4828'. [ 1679.567479][T25946] wg1: entered promiscuous mode [ 1679.583904][T25946] wg1: entered allmulticast mode [ 1679.957839][T25949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4830'. [ 1681.847373][T24632] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1682.169213][T24632] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1682.178328][T24632] usb 5-1: string descriptor 0 read error: -22 [ 1682.184523][T24632] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.40 [ 1682.226608][T24632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.286872][T14995] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1682.446755][T14995] usb 9-1: device descriptor read/64, error -71 [ 1683.143500][T25991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4841'. [ 1683.356508][T14995] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1683.421019][T24632] usbhid 5-1:1.0: can't add hid device: -71 [ 1683.429027][T24632] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1683.448611][T24632] usb 5-1: USB disconnect, device number 20 [ 1683.498544][T14995] usb 9-1: device descriptor read/64, error -71 [ 1683.636562][T14995] usb usb9-port1: attempt power cycle [ 1683.871053][T26001] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1683.888234][T26001] overlay: Bad value for 'index' [ 1684.075952][T14995] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1684.096635][T14995] usb 9-1: device descriptor read/8, error -71 [ 1684.174895][T21431] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 1684.866013][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 1684.866029][ T29] audit: type=1400 audit(1772540485.716:1856): avc: denied { unmount } for pid=19890 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1685.814537][T26031] fuse: Unknown parameter 'fZ' [ 1686.237919][T26045] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4856'. [ 1686.465009][T14995] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1686.494735][ T792] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1686.672673][ T792] usb 9-1: config index 0 descriptor too short (expected 81, got 72) [ 1686.672941][T14995] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1686.768825][ T792] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1686.785827][ T792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.803982][ T792] usb 9-1: Product: syz [ 1686.814545][ T792] usb 9-1: Manufacturer: syz [ 1686.830531][ T792] usb 9-1: SerialNumber: syz [ 1686.842958][T14995] usb 10-1: string descriptor 0 read error: -22 [ 1686.850607][T14995] usb 10-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.40 [ 1686.861194][T14995] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.900283][ T792] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1686.973296][ T5874] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1687.554234][T26053] netlink: 'syz.5.4859': attribute type 29 has an invalid length. [ 1687.635000][T26055] EXT4-fs (nbd5): unable to read superblock [ 1687.691856][T14995] usbhid 10-1:1.0: can't add hid device: -71 [ 1687.697961][T14995] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1687.720840][T26055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1687.747856][T14995] usb 10-1: USB disconnect, device number 10 [ 1688.067457][ T5874] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1688.083777][ T5874] ath9k_htc: Failed to initialize the device [ 1688.127476][ T5874] usb 9-1: ath9k_htc: USB layer deinitialized [ 1688.582330][T26069] gfs2: gfs2 mount does not exist [ 1688.761508][T26078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4867'. [ 1688.783642][ T792] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1688.953573][ T792] usb 10-1: Using ep0 maxpacket: 16 [ 1689.067823][ T792] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1689.087301][ T792] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.100841][ T792] usb 10-1: Product: syz [ 1689.116632][ T792] usb 10-1: Manufacturer: syz [ 1689.133065][ T792] usb 10-1: SerialNumber: syz [ 1689.186501][ T29] audit: type=1400 audit(1772540490.038:1857): avc: denied { execute } for pid=26081 comm="syz.7.4868" path="/selinux/avc/cache_stats" dev="selinuxfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 1689.376557][ T792] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1689.478236][T24119] usb 9-1: USB disconnect, device number 17 [ 1689.479211][ T792] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1689.479480][ T792] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1689.481164][ T792] usb 10-1: media controller created [ 1689.570792][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1689.582890][T26092] netlink: zone id is out of range [ 1689.582901][T26092] netlink: zone id is out of range [ 1689.582907][T26092] netlink: zone id is out of range [ 1689.582912][T26092] netlink: zone id is out of range [ 1689.582917][T26092] netlink: zone id is out of range [ 1689.582921][T26092] netlink: zone id is out of range [ 1689.582926][T26092] netlink: zone id is out of range [ 1689.582930][T26092] netlink: zone id is out of range [ 1689.582935][T26092] netlink: zone id is out of range [ 1689.582939][T26092] netlink: zone id is out of range [ 1689.837394][T26092] batadv_slave_0: entered promiscuous mode [ 1689.849694][ T792] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1689.870324][T26092] batman_adv: batadv0: Adding interface: macvtap1 [ 1689.876988][T26092] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.906300][T26092] batman_adv: batadv0: Interface activated: macvtap1 [ 1689.961329][ T792] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1689.977848][ T792] usb 10-1: USB disconnect, device number 11 [ 1690.874194][T24632] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1691.064383][T24632] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1691.072699][T24632] usb 10-1: not running at top speed; connect to a high speed hub [ 1691.081606][T24632] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.091892][T26111] FAULT_INJECTION: forcing a failure. [ 1691.091892][T26111] name failslab, interval 1, probability 0, space 0, times 0 [ 1691.108628][T26111] CPU: 0 UID: 0 PID: 26111 Comm: syz.7.4876 Tainted: G L syzkaller #0 PREEMPT(full) [ 1691.108647][T26111] Tainted: [L]=SOFTLOCKUP [ 1691.108651][T26111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1691.108658][T26111] Call Trace: [ 1691.108662][T26111] [ 1691.108667][T26111] dump_stack_lvl+0x100/0x190 [ 1691.108689][T26111] should_fail_ex.cold+0x5/0xa [ 1691.108703][T26111] should_failslab+0xc2/0x120 [ 1691.108722][T26111] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1691.108738][T26111] ? ptlock_alloc+0x1f/0x70 [ 1691.108755][T26111] ptlock_alloc+0x1f/0x70 [ 1691.108768][T26111] pte_alloc_one+0x84/0x3e0 [ 1691.108784][T26111] __pte_alloc+0x6d/0x3f0 [ 1691.108802][T26111] ? __pfx___pte_alloc+0x10/0x10 [ 1691.108820][T26111] ? find_held_lock+0x2b/0x80 [ 1691.108834][T26111] ? mm_alloc_pmd+0x2c5/0x470 [ 1691.108853][T26111] move_pages+0x303f/0x5260 [ 1691.108870][T26111] ? __lock_acquire+0x4a5/0x2630 [ 1691.108889][T26111] ? __pfx_move_pages+0x10/0x10 [ 1691.108899][T26111] ? kasan_quarantine_put+0x104/0x240 [ 1691.108920][T26111] ? find_held_lock+0x2b/0x80 [ 1691.108933][T26111] ? __might_fault+0xc5/0x140 [ 1691.108948][T26111] ? __might_fault+0xc5/0x140 [ 1691.108968][T26111] userfaultfd_ioctl+0x11bc/0x3b60 [ 1691.108981][T26111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1691.108999][T26111] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1691.109010][T26111] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1691.109032][T26111] ? __fget_files+0x215/0x3d0 [ 1691.109042][T26111] ? hook_file_ioctl_common+0x146/0x410 [ 1691.109062][T26111] ? selinux_file_ioctl+0x139/0x290 [ 1691.109074][T26111] ? selinux_file_ioctl+0xb4/0x290 [ 1691.109087][T26111] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1691.109099][T26111] ? __x64_sys_ioctl+0x18e/0x210 [ 1691.109120][T26111] __x64_sys_ioctl+0x18e/0x210 [ 1691.109137][T26111] do_syscall_64+0x106/0xf80 [ 1691.109149][T26111] ? clear_bhb_loop+0x40/0x90 [ 1691.109165][T26111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.109177][T26111] RIP: 0033:0x7fd32c19c799 [ 1691.109188][T26111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1691.109198][T26111] RSP: 002b:00007fd32cf7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1691.109209][T26111] RAX: ffffffffffffffda RBX: 00007fd32c415fa0 RCX: 00007fd32c19c799 [ 1691.109216][T26111] RDX: 0000200000000040 RSI: 00000000c028aa05 RDI: 0000000000000006 [ 1691.109223][T26111] RBP: 00007fd32cf7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1691.109230][T26111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.109236][T26111] R13: 00007fd32c416038 R14: 00007fd32c415fa0 R15: 00007ffcde7b8678 [ 1691.109251][T26111] [ 1691.702091][T24632] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1691.721357][T24632] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1691.749447][T24632] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1691.783026][T24632] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1691.792356][T24632] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.806313][T24632] usb 10-1: Product: syz [ 1691.813126][T24632] usb 10-1: Manufacturer: syz [ 1691.821713][T24632] usb 10-1: SerialNumber: syz [ 1692.289856][T26122] FAT-fs (loop11): unable to read boot sector [ 1692.509135][T24632] usb 10-1: 0:2 : does not exist [ 1692.567574][T24632] usb 10-1: USB disconnect, device number 12 [ 1694.000972][T24119] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1694.259491][ T29] audit: type=1400 audit(1772540495.110:1858): avc: denied { ioctl } for pid=26134 comm="syz.5.4885" path="socket:[102787]" dev="sockfs" ino=102787 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1694.288383][ T29] audit: type=1400 audit(1772540495.140:1859): avc: denied { write } for pid=26134 comm="syz.5.4885" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1694.288613][T23169] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1694.316917][T23169] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1694.318163][T24119] usb 9-1: Using ep0 maxpacket: 8 [ 1694.337208][T24119] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1694.359123][T24119] usb 9-1: config 4 has an invalid interface number: 147 but max is 0 [ 1694.384647][T24119] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.429010][T24119] usb 9-1: config 4 has no interface number 0 [ 1694.457058][T24119] usb 9-1: language id specifier not provided by device, defaulting to English [ 1694.491720][T24119] usb 9-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1694.502040][T24119] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.752916][T24119] uvcvideo 9-1:4.147: Found multiple Units with ID 6 [ 1694.759645][T24119] uvcvideo 9-1:4.147: Found UVC 0.02 device (04f2:b746) [ 1694.779960][T24119] uvcvideo 9-1:4.147: No streaming interface found for terminal 32774. [ 1694.811098][T24119] usb 9-1: USB disconnect, device number 18 [ 1695.753583][T26152] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4889'. [ 1695.763332][ T5874] kernel read not supported for file 1155/task/1156/cgroup (pid: 5874 comm: kworker/1:3) [ 1695.796857][T26159] netlink: 'syz.9.4891': attribute type 29 has an invalid length. [ 1695.935024][T26162] EXT4-fs (nbd9): unable to read superblock [ 1695.958261][T26162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1696.831763][T26163] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4892'. [ 1698.598664][T24119] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1698.801093][T24119] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.818908][T24119] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1698.828041][T24119] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.848044][T26183] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4899'. [ 1698.861046][T24119] usb 10-1: config 0 descriptor?? [ 1698.883535][T24119] pwc: Askey VC010 type 2 USB webcam detected. [ 1698.948965][T26183] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26183 comm=syz.5.4899 [ 1699.020271][T26185] netlink: 'syz.8.4900': attribute type 29 has an invalid length. [ 1699.152503][T26187] EXT4-fs (nbd8): unable to read superblock [ 1699.250006][T26187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1699.286522][T26174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1699.304796][T26174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1699.336398][T26192] FAULT_INJECTION: forcing a failure. [ 1699.336398][T26192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.336648][T24119] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1699.357221][T24119] pwc: recv_control_msg error -32 req 02 val 2700 [ 1699.386370][T24119] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1699.390085][T26192] CPU: 1 UID: 0 PID: 26192 Comm: syz.4.4901 Tainted: G L syzkaller #0 PREEMPT(full) [ 1699.390109][T26192] Tainted: [L]=SOFTLOCKUP [ 1699.390114][T26192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1699.390123][T26192] Call Trace: [ 1699.390129][T26192] [ 1699.390135][T26192] dump_stack_lvl+0x100/0x190 [ 1699.390164][T26192] should_fail_ex.cold+0x5/0xa [ 1699.390184][T26192] _copy_to_user+0x32/0xd0 [ 1699.390208][T26192] binder_ioctl+0x49f5/0x7610 [ 1699.390241][T26192] ? __pfx_binder_ioctl+0x10/0x10 [ 1699.390262][T26192] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1699.390284][T26192] ? do_vfs_ioctl+0x226/0x13e0 [ 1699.390306][T26192] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1699.390328][T26192] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1699.390357][T26192] ? hook_file_ioctl_common+0x146/0x410 [ 1699.390384][T26192] ? selinux_file_ioctl+0x139/0x290 [ 1699.390402][T26192] ? selinux_file_ioctl+0xb4/0x290 [ 1699.390420][T26192] ? __pfx_binder_ioctl+0x10/0x10 [ 1699.390439][T26192] __x64_sys_ioctl+0x18e/0x210 [ 1699.390461][T26192] do_syscall_64+0x106/0xf80 [ 1699.390477][T26192] ? clear_bhb_loop+0x40/0x90 [ 1699.390496][T26192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.390511][T26192] RIP: 0033:0x7f27b479c799 [ 1699.390525][T26192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.390539][T26192] RSP: 002b:00007f27b5571028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1699.390554][T26192] RAX: ffffffffffffffda RBX: 00007f27b4a15fa0 RCX: 00007f27b479c799 [ 1699.390565][T26192] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1699.390574][T26192] RBP: 00007f27b5571090 R08: 0000000000000000 R09: 0000000000000000 [ 1699.390583][T26192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1699.390592][T26192] R13: 00007f27b4a16038 R14: 00007f27b4a15fa0 R15: 00007ffdd9506ce8 [ 1699.390613][T26192] [ 1699.390621][T26192] binder: 26191:26192 ioctl c0306201 200000000640 returned -14 [ 1699.628638][T24119] pwc: recv_control_msg error -32 req 04 val 1300 [ 1699.646337][T24119] pwc: recv_control_msg error -32 req 04 val 1400 [ 1699.918906][T24119] pwc: recv_control_msg error -32 req 02 val 2100 [ 1699.928678][T24119] pwc: recv_control_msg error -32 req 04 val 1500 [ 1700.127935][T19731] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1700.149404][T24119] pwc: recv_control_msg error -32 req 02 val 2400 [ 1700.157965][T24119] pwc: recv_control_msg error -32 req 02 val 2600 [ 1700.170356][T24119] pwc: recv_control_msg error -32 req 02 val 2900 [ 1700.178571][T24119] pwc: recv_control_msg error -32 req 02 val 2800 [ 1700.191804][T24119] pwc: recv_control_msg error -71 req 04 val 1100 [ 1700.199375][T24119] pwc: recv_control_msg error -71 req 04 val 1200 [ 1700.213269][T24119] pwc: Registered as video103. [ 1700.274455][T24119] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input77 [ 1700.342155][T19731] usb 5-1: Using ep0 maxpacket: 16 [ 1700.428443][T19731] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.460261][T19731] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1700.474495][T19731] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1700.489324][T24119] usb 10-1: USB disconnect, device number 13 [ 1700.499230][T19731] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1700.508753][T19731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1700.517429][T19731] usb 5-1: SerialNumber: syz [ 1700.577433][T26219] mac80211_hwsim hwsim20 : renamed from wlan1 [ 1700.599030][T19731] cdc_acm 5-1:1.0: invalid descriptor buffer length [ 1700.806078][ T5874] usb 5-1: USB disconnect, device number 21 [ 1701.781670][T26227] ubi31: detaching mtd0 [ 1702.225095][T26233] netlink: 'syz.4.4911': attribute type 1 has an invalid length. [ 1702.246746][T26233] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1702.261220][T26227] ubi31: mtd0 is detached [ 1702.360585][T26240] tmpfs: Bad value for 'mpol' [ 1702.439878][T26241] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4914'. [ 1702.527956][T26245] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4917'. [ 1702.917028][T24119] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1702.967881][ T29] audit: type=1400 audit(1772540503.815:1860): avc: denied { accept } for pid=26251 comm="syz.8.4919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1703.127857][T24119] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.138316][T24119] usb 5-1: config 0 has no interfaces? [ 1703.143785][T24119] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1703.172099][T24119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.206167][T24119] usb 5-1: config 0 descriptor?? [ 1703.426643][ T5874] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1703.492026][T26262] qnx4: unable to read the superblock [ 1703.826027][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 1703.837583][ T5874] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1703.845927][ T5874] usb 6-1: config 179 has no interface number 0 [ 1703.876344][ T5874] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1703.892941][T24119] usb 5-1: USB disconnect, device number 22 [ 1703.893611][ T5874] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1704.086102][ T5874] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1704.134592][ T5874] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1704.167228][ T5874] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1704.197519][ T5874] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1704.219970][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.242942][T26256] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1704.476203][ T5874] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input78 [ 1704.668855][ T5874] usb 6-1: USB disconnect, device number 20 [ 1704.674857][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1704.674901][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1705.876189][T26286] fuse: Unknown parameter 'fZ' [ 1706.084939][T24632] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1706.125158][ T5874] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1706.240284][T24632] usb 9-1: Using ep0 maxpacket: 32 [ 1706.256229][T24632] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1706.279162][T24632] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.296942][ T5874] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1706.310026][T24632] usb 9-1: Product: syz [ 1706.324952][T24632] usb 9-1: Manufacturer: syz [ 1706.329587][T24632] usb 9-1: SerialNumber: syz [ 1706.335061][ T5874] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 64602, setting to 64 [ 1706.347007][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1706.354551][T24632] usb 9-1: config 0 descriptor?? [ 1706.364467][T24632] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1706.374069][T24632] dvb-usb: bulk message failed: -22 (4/0) [ 1706.386135][T24632] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1706.396938][T24632] dvb-usb: bulk message failed: -22 (5/0) [ 1706.397155][ T5874] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1706.411984][T24632] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1706.422139][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1706.430373][ T5874] usb 5-1: Product: syz [ 1706.436298][ T5874] usb 5-1: Manufacturer: syz [ 1706.440897][ T5874] usb 5-1: SerialNumber: syz [ 1706.446978][T24632] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1706.458505][T24632] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1706.469236][ T5874] usb 5-1: config 0 descriptor?? [ 1706.478781][T24632] usb 9-1: media controller created [ 1706.484347][T26286] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1706.499670][ T5874] usb 5-1: selecting invalid altsetting 0 [ 1706.526161][T24632] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1706.571851][T24632] usb 9-1: selecting invalid altsetting 3 [ 1706.596208][T24632] ttusb2: set interface to alts=3 failed [ 1706.738343][T24632] DVB: Unable to find symbol tda10086_attach() [ 1706.758082][T24632] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1706.770383][T24632] dvb-usb: bulk message failed: -22 (4/0) [ 1706.788501][T24632] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1706.800015][T24632] dvb-usb: bulk message failed: -22 (5/0) [ 1706.808311][T24632] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1706.824952][T24632] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1706.844397][T24632] usb 9-1: USB disconnect, device number 19 [ 1707.061074][T24632] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1707.764215][ T29] audit: type=1326 audit(1772540508.527:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26319 comm="syz.5.4930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa07479c799 code=0x0 [ 1708.219337][T26338] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4933'. [ 1708.941168][T24632] usb 5-1: USB disconnect, device number 23 [ 1710.084147][ T29] audit: type=1400 audit(1772540510.938:1862): avc: denied { create } for pid=26344 comm="syz.8.4935" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 1710.731132][T26385] loop6: detected capacity change from 0 to 2640 [ 1710.739184][T26385] buffer_io_error: 32 callbacks suppressed [ 1710.739214][T26385] Buffer I/O error on dev loop6, logical block 0, async page read [ 1710.756935][T26385] Buffer I/O error on dev loop6, logical block 0, async page read [ 1710.985425][T26385] Buffer I/O error on dev loop6, logical block 0, async page read [ 1710.994121][T26385] Buffer I/O error on dev loop6, logical block 0, async page read [ 1711.002036][T26385] Buffer I/O error on dev loop6, logical block 0, async page read [ 1711.013748][T26385] Buffer I/O error on dev loop6, logical block 0, async page read [ 1711.021795][T26385] Buffer I/O error on dev loop6, logical block 0, async page read [ 1711.029832][T26385] Buffer I/O error on dev loop6, logical block 0, async page read [ 1711.038764][T26385] ldm_validate_partition_table(): Disk read failed. [ 1711.045753][ C1] blk_print_req_error: 6 callbacks suppressed [ 1711.045768][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1711.061499][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1711.089539][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1711.099493][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1711.109452][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1711.119174][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1711.128950][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1711.138781][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1711.153802][T26385] Buffer I/O error on dev loop6, logical block 0, async page read [ 1711.192489][T26385] Buffer I/O error on dev loop6, logical block 0, async page read [ 1711.200417][T26385] Dev loop6: unable to read RDB block 0 [ 1711.207558][T26385] loop6: unable to read partition table [ 1711.269994][T26385] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1712.058932][ T5175] ldm_validate_partition_table(): Disk read failed. [ 1712.066129][ T5175] Dev loop6: unable to read RDB block 0 [ 1712.071717][ T5175] loop6: unable to read partition table [ 1713.386117][T26418] netlink: 'syz.4.4946': attribute type 29 has an invalid length. [ 1713.464968][T26422] EXT4-fs (nbd4): unable to read superblock [ 1713.561248][T26422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1714.676430][T26439] FAULT_INJECTION: forcing a failure. [ 1714.676430][T26439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1714.721140][T26439] CPU: 1 UID: 0 PID: 26439 Comm: syz.4.4951 Tainted: G L syzkaller #0 PREEMPT(full) [ 1714.721168][T26439] Tainted: [L]=SOFTLOCKUP [ 1714.721172][T26439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1714.721179][T26439] Call Trace: [ 1714.721183][T26439] [ 1714.721188][T26439] dump_stack_lvl+0x100/0x190 [ 1714.721210][T26439] should_fail_ex.cold+0x5/0xa [ 1714.721225][T26439] _copy_from_user+0x2e/0xd0 [ 1714.721242][T26439] memdup_user+0x6b/0xe0 [ 1714.721260][T26439] strndup_user+0x78/0xe0 [ 1714.721277][T26439] __x64_sys_mount+0x136/0x310 [ 1714.721292][T26439] ? __pfx___x64_sys_mount+0x10/0x10 [ 1714.721310][T26439] do_syscall_64+0x106/0xf80 [ 1714.721321][T26439] ? clear_bhb_loop+0x40/0x90 [ 1714.721335][T26439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.721346][T26439] RIP: 0033:0x7f27b479c799 [ 1714.721356][T26439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.721367][T26439] RSP: 002b:00007f27b5571028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1714.721378][T26439] RAX: ffffffffffffffda RBX: 00007f27b4a15fa0 RCX: 00007f27b479c799 [ 1714.721385][T26439] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 1714.721392][T26439] RBP: 00007f27b5571090 R08: 0000200000000100 R09: 0000000000000000 [ 1714.721399][T26439] R10: 0000000000008800 R11: 0000000000000246 R12: 0000000000000001 [ 1714.721405][T26439] R13: 00007f27b4a16038 R14: 00007f27b4a15fa0 R15: 00007ffdd9506ce8 [ 1714.721419][T26439] [ 1715.355839][T26454] overlay: filesystem on ./file1 not supported as upperdir [ 1715.408019][ T29] audit: type=1400 audit(1772541028.267:1863): avc: denied { read append } for pid=26453 comm="syz.7.4957" name="file0" dev="tmpfs" ino=2897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1715.477403][ T29] audit: type=1400 audit(1772541028.267:1864): avc: denied { open } for pid=26453 comm="syz.7.4957" path="/534/bus/file0" dev="overlay" ino=2897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1715.590631][ T29] audit: type=1400 audit(1772541028.297:1865): avc: denied { ioctl } for pid=26453 comm="syz.7.4957" path="/534/bus/file0" dev="overlay" ino=2897 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1716.295404][T26471] fuse: Bad value for 'group_id' [ 1716.300956][T26471] fuse: Bad value for 'group_id' [ 1716.582227][T26475] netlink: 'syz.8.4961': attribute type 29 has an invalid length. [ 1716.657646][T26478] EXT4-fs (nbd8): unable to read superblock [ 1716.709000][T26478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1717.321588][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 1717.349306][T23169] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1718.966487][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1718.978058][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1718.986030][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1718.995292][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1719.003208][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1719.239567][T26514] fuse: Bad value for 'group_id' [ 1719.244672][T26514] fuse: Bad value for 'group_id' [ 1719.337442][T26520] FAULT_INJECTION: forcing a failure. [ 1719.337442][T26520] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.354337][ T29] audit: type=1400 audit(1772541032.219:1866): avc: denied { mount } for pid=26515 comm="syz.4.4974" name="/" dev="pstore" ino=3418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1719.382387][T26520] CPU: 1 UID: 0 PID: 26520 Comm: syz.5.4975 Tainted: G L syzkaller #0 PREEMPT(full) [ 1719.382413][T26520] Tainted: [L]=SOFTLOCKUP [ 1719.382420][T26520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1719.382430][T26520] Call Trace: [ 1719.382436][T26520] [ 1719.382442][T26520] dump_stack_lvl+0x100/0x190 [ 1719.382479][T26520] should_fail_ex.cold+0x5/0xa [ 1719.382502][T26520] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1719.382523][T26520] should_failslab+0xc2/0x120 [ 1719.382551][T26520] __kmalloc_noprof+0xe0/0x850 [ 1719.382580][T26520] tomoyo_realpath_from_path+0xb6/0x690 [ 1719.382606][T26520] tomoyo_path_number_perm+0x23c/0x580 [ 1719.382622][T26520] ? tomoyo_path_number_perm+0x22e/0x580 [ 1719.382641][T26520] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1719.382683][T26520] ? find_held_lock+0x2b/0x80 [ 1719.382704][T26520] ? __fget_files+0x215/0x3d0 [ 1719.382720][T26520] ? hook_file_ioctl_common+0x146/0x410 [ 1719.382749][T26520] ? __fget_files+0x21f/0x3d0 [ 1719.382770][T26520] security_file_ioctl+0xd3/0x230 [ 1719.382791][T26520] __x64_sys_ioctl+0xb7/0x210 [ 1719.382822][T26520] do_syscall_64+0x106/0xf80 [ 1719.382840][T26520] ? clear_bhb_loop+0x40/0x90 [ 1719.382861][T26520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.382878][T26520] RIP: 0033:0x7fa07479c799 [ 1719.382893][T26520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1719.382909][T26520] RSP: 002b:00007fa075635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1719.382925][T26520] RAX: ffffffffffffffda RBX: 00007fa074a15fa0 RCX: 00007fa07479c799 [ 1719.382936][T26520] RDX: 0000000000000000 RSI: 0000000080345621 RDI: 0000000000000003 [ 1719.382946][T26520] RBP: 00007fa075635090 R08: 0000000000000000 R09: 0000000000000000 [ 1719.382955][T26520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1719.382965][T26520] R13: 00007fa074a16038 R14: 00007fa074a15fa0 R15: 00007ffe9ebdafb8 [ 1719.382989][T26520] [ 1719.383088][T26520] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1719.705575][T26516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.712867][T26516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.969353][T26516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1720.000669][T26516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1720.363981][T21439] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.383616][T21439] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.401341][T21439] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.410652][T21439] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.422498][T26505] chnl_net:caif_netlink_parms(): no params data found [ 1720.539927][T26505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.557234][T26505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.568799][T26505] bridge_slave_0: entered allmulticast mode [ 1720.576141][T26505] bridge_slave_0: entered promiscuous mode [ 1720.601785][T26505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.637389][T26505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.664957][T26505] bridge_slave_1: entered allmulticast mode [ 1720.671898][T26505] bridge_slave_1: entered promiscuous mode [ 1720.763421][T26505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1721.026287][T26505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1721.103290][T23169] Bluetooth: hci2: command tx timeout [ 1721.217466][T26505] team0: Port device team_slave_0 added [ 1721.304912][T26505] team0: Port device team_slave_1 added [ 1721.911525][T26505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1721.919605][T26505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1721.946735][T26505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1721.959790][T26505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1721.966763][T26505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1721.996576][T26505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1722.055040][T26505] hsr_slave_0: entered promiscuous mode [ 1722.062923][T26505] hsr_slave_1: entered promiscuous mode [ 1722.069421][T26505] debugfs: 'hsr0' already exists in 'hsr' [ 1722.088566][T26505] Cannot create hsr debugfs directory [ 1722.347598][ T5874] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1722.529186][ T5874] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.546541][ T5874] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1722.569014][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.588463][ T5874] usb 9-1: config 0 descriptor?? [ 1722.614699][ T5874] pwc: Askey VC010 type 2 USB webcam detected. [ 1722.661815][T26561] fuse: Bad value for 'group_id' [ 1722.668625][T26561] fuse: Bad value for 'group_id' [ 1722.849666][T26505] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1722.869479][T26505] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1722.894172][T26505] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1722.909696][T26505] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1723.015750][T26548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1723.033346][T26548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.115079][ T5874] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1723.146255][ T5874] pwc: recv_control_msg error -32 req 02 val 2700 [ 1723.153857][ T5874] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1723.156449][T23169] Bluetooth: hci2: command tx timeout [ 1723.194346][T26505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1723.243059][T26505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1723.295064][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.302234][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1723.338670][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1723.345827][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1723.486519][ T5874] pwc: recv_control_msg error -32 req 04 val 1300 [ 1723.494357][ T5874] pwc: recv_control_msg error -32 req 04 val 1400 [ 1723.801378][ T5874] pwc: recv_control_msg error -32 req 02 val 2100 [ 1723.829195][ T5874] pwc: recv_control_msg error -32 req 04 val 1500 [ 1723.858519][ T5874] pwc: recv_control_msg error -71 req 02 val 2500 [ 1723.874302][ T5874] pwc: recv_control_msg error -71 req 02 val 2400 [ 1723.898389][ T5874] pwc: recv_control_msg error -71 req 02 val 2600 [ 1723.912158][ T5874] pwc: recv_control_msg error -71 req 02 val 2900 [ 1723.940524][ T5874] pwc: recv_control_msg error -71 req 02 val 2800 [ 1723.952373][ T5874] pwc: recv_control_msg error -71 req 04 val 1100 [ 1723.969269][ T5874] pwc: recv_control_msg error -71 req 04 val 1200 [ 1723.993811][T26505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1724.003441][ T5874] pwc: Registered as video103. [ 1724.023239][ T5874] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input79 [ 1724.073486][ T5874] usb 9-1: USB disconnect, device number 20 [ 1724.147560][T26505] veth0_vlan: entered promiscuous mode [ 1724.176966][T26505] veth1_vlan: entered promiscuous mode [ 1724.228104][T26505] veth0_macvtap: entered promiscuous mode [ 1724.239029][T26505] veth1_macvtap: entered promiscuous mode [ 1724.256904][T26505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1724.272137][T26505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1724.292103][T18368] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.317303][T18368] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.332773][T18368] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.341665][T18368] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.545107][T14482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1724.559986][T14482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1724.622138][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1724.643247][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1725.067686][T26647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4995'. [ 1725.109599][T26647] IPv6: NLM_F_CREATE should be specified when creating new route [ 1725.235373][T23169] Bluetooth: hci2: command tx timeout [ 1725.323800][T26658] loop6: detected capacity change from 0 to 2640 [ 1725.334999][T26658] buffer_io_error: 27 callbacks suppressed [ 1725.335023][T26658] Buffer I/O error on dev loop6, logical block 0, async page read [ 1725.353236][T26658] Buffer I/O error on dev loop6, logical block 0, async page read [ 1725.361177][T26658] Buffer I/O error on dev loop6, logical block 0, async page read [ 1725.369100][T26658] Buffer I/O error on dev loop6, logical block 0, async page read [ 1725.377030][T26658] Buffer I/O error on dev loop6, logical block 0, async page read [ 1725.393144][T26658] Buffer I/O error on dev loop6, logical block 0, async page read [ 1725.404624][T26658] Buffer I/O error on dev loop6, logical block 0, async page read [ 1725.413757][T26658] Buffer I/O error on dev loop6, logical block 0, async page read [ 1725.421628][T26658] ldm_validate_partition_table(): Disk read failed. [ 1725.428314][T26658] Buffer I/O error on dev loop6, logical block 0, async page read [ 1725.436221][T26658] Buffer I/O error on dev loop6, logical block 0, async page read [ 1725.444073][T26658] Dev loop6: unable to read RDB block 0 [ 1725.449849][T26658] loop6: unable to read partition table [ 1725.455718][T26658] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1725.877932][T26675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4998'. [ 1725.892443][T26675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4998'. [ 1726.209156][T26676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1727.527462][T23169] Bluetooth: hci2: command tx timeout [ 1729.203625][ T792] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1729.498080][ T792] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1729.533702][ T792] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1729.594674][ T792] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1729.670279][ T792] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1729.720327][ T792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.814421][ T792] usb 9-1: Product: syz [ 1729.818764][ T792] usb 9-1: Manufacturer: syz [ 1729.991482][ T792] usb 9-1: SerialNumber: syz [ 1730.050847][ T792] usb 9-1: config 0 descriptor?? [ 1730.084870][T26714] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1730.092120][T26714] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1730.117161][ T792] usb 9-1: ucan: probing device on interface #0 [ 1731.372279][ T792] usb 9-1: ucan: could not read protocol version, ret=-110 [ 1731.408083][ T792] usb 9-1: ucan: probe failed; try to update the device firmware [ 1731.525995][T26744] netlink: 'syz.7.5013': attribute type 29 has an invalid length. [ 1731.611529][T26747] EXT4-fs (nbd7): unable to read superblock [ 1731.642124][T26747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1731.846890][T26750] net_ratelimit: 10 callbacks suppressed [ 1731.846902][T26750] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1732.163896][ T5884] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1732.324606][ T5884] usb 5-1: device descriptor read/64, error -71 [ 1732.406603][ T792] usb 9-1: USB disconnect, device number 21 [ 1732.561697][ T5884] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1732.702182][ T5884] usb 5-1: device descriptor read/64, error -71 [ 1732.848701][ T5884] usb usb5-port1: attempt power cycle [ 1733.242249][ T5884] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1733.483246][ T5884] usb 5-1: device descriptor read/8, error -71 [ 1733.751399][ T5884] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1733.892399][ T5884] usb 5-1: device descriptor read/8, error -71 [ 1734.013982][T26803] ubi31: attaching mtd0 [ 1734.026592][T26803] ubi31: scanning is finished [ 1734.396212][ T5884] usb usb5-port1: unable to enumerate USB device [ 1734.516454][T26803] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1734.524294][T26803] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1734.531608][T26803] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1734.538620][T26803] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1734.546124][T26803] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1734.552983][T26803] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1734.561040][T26803] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 715343740 [ 1734.571006][T26803] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1735.308816][T26809] ubi31: background thread "ubi_bgt31d" started, PID 26809 [ 1736.065230][ T5884] hid_parser_main: 457 callbacks suppressed [ 1736.065255][ T5884] hid-generic 0000:008B:0000.0041: unknown main item tag 0x0 [ 1736.413021][ T5884] hid-generic 0000:008B:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1736.894976][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 1738.300190][T26831] fido_id[26831]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1739.388940][ T792] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1739.430696][ T29] audit: type=1400 audit(1772541308.307:1867): avc: denied { create } for pid=26847 comm="syz.4.5033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1739.477828][ T29] audit: type=1400 audit(1772541308.327:1868): avc: denied { write } for pid=26847 comm="syz.4.5033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1739.550390][ T792] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1739.660571][ T792] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1739.685175][ T792] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1739.704600][ T792] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1739.715586][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.730556][ T792] usb 3-1: Product: syz [ 1739.746594][ T792] usb 3-1: Manufacturer: syz [ 1739.761315][ T792] usb 3-1: SerialNumber: syz [ 1739.794143][ T792] usb 3-1: config 0 descriptor?? [ 1739.815824][T26845] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1739.856941][T26845] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1739.910971][ T792] usb 3-1: ucan: probing device on interface #0 [ 1740.317415][ T792] usb 3-1: ucan: device reported invalid tx-fifo size [ 1741.356457][ T792] usb 3-1: ucan: probe failed; try to update the device firmware [ 1742.486751][ T792] usb 3-1: USB disconnect, device number 44 [ 1742.538885][T26904] netlink: 'syz.2.5041': attribute type 29 has an invalid length. [ 1742.651515][T26905] EXT4-fs (nbd2): unable to read superblock [ 1742.898470][T26907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1742.944649][T26910] ip6t_srh: unknown srh match flags FF3F [ 1742.988301][T26913] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5042'. [ 1743.267402][T24119] hid-generic 0000:008B:0000.0042: unknown main item tag 0x0 [ 1743.393121][T24119] hid-generic 0000:008B:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1744.427474][T26922] fido_id[26922]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1744.510945][T26929] netlink: 'syz.5.5038': attribute type 29 has an invalid length. [ 1744.611128][T26933] EXT4-fs (nbd5): unable to read superblock [ 1744.680345][T26934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1746.086593][ T5877] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1746.279537][ T5877] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1746.294799][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1746.317010][ T5877] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1746.343959][ T5877] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1746.358834][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.405168][ T5877] usb 5-1: Product: syz [ 1746.417509][ T5877] usb 5-1: Manufacturer: syz [ 1746.424812][ T5877] usb 5-1: SerialNumber: syz [ 1746.442587][ T5877] usb 5-1: config 0 descriptor?? [ 1746.449898][T26948] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1746.458251][T26948] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1746.480279][ T5877] usb 5-1: ucan: probing device on interface #0 [ 1746.941803][ T5877] usb 5-1: ucan: device reported invalid tx-fifo size [ 1746.964808][ T5877] usb 5-1: ucan: probe failed; try to update the device firmware [ 1748.150482][T26983] loop6: detected capacity change from 0 to 2640 [ 1748.159601][T26983] buffer_io_error: 11 callbacks suppressed [ 1748.159616][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1748.173348][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1748.181256][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1748.189158][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1748.197038][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1748.207587][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1748.216030][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1748.225689][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1748.235506][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1748.245422][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1748.255364][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1748.265068][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1748.293803][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1748.303661][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1748.315316][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1748.336781][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1748.344806][T26983] ldm_validate_partition_table(): Disk read failed. [ 1748.351633][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1748.359590][T26983] Buffer I/O error on dev loop6, logical block 0, async page read [ 1748.367538][T26983] Dev loop6: unable to read RDB block 0 [ 1748.373282][T26983] loop6: unable to read partition table [ 1748.379152][T26983] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1748.530688][ T5175] ldm_validate_partition_table(): Disk read failed. [ 1748.540299][ T5175] Dev loop6: unable to read RDB block 0 [ 1748.551338][ T5175] loop6: unable to read partition table [ 1748.764481][ T5877] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1748.915189][ T5877] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 1748.923508][ T5877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.938551][ T5877] usb 6-1: config 0 has no interface number 0 [ 1748.954938][ T5877] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1748.979700][ T5877] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1748.999528][ T5877] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1749.025676][ T5877] usb 6-1: config 0 interface 52 has no altsetting 0 [ 1749.040690][ T5877] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1749.053511][ T5877] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1749.070427][ T5877] usb 6-1: Manufacturer: syz [ 1749.082878][ T5877] usb 6-1: config 0 descriptor?? [ 1749.095539][ T5877] hub 6-1:0.52: bad descriptor, ignoring hub [ 1749.101637][ T5877] hub 6-1:0.52: probe with driver hub failed with error -5 [ 1749.570730][T26999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.767415][ T5877] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1749.780894][ T5877] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1750.053239][T26999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1750.096910][ T5884] usb 5-1: USB disconnect, device number 28 [ 1750.194313][ T792] usb 6-1: USB disconnect, device number 21 [ 1750.238640][T27017] ubi31: detaching mtd0 [ 1750.254106][T27017] ubi31: mtd0 is detached [ 1750.683255][ T792] hid-generic 0000:008B:0000.0043: unknown main item tag 0x0 [ 1750.721765][ T792] hid-generic 0000:008B:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1751.268133][T27028] fido_id[27028]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1751.862735][T27042] ªªªªªª: renamed from vlan0 [ 1751.916101][T27043] Invalid source name [ 1752.154084][T27038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5065'. [ 1752.168070][T27038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5065'. [ 1752.178567][T27038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5065'. [ 1752.208462][T27038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5065'. [ 1752.217770][T27038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5065'. [ 1752.300444][ T29] audit: type=1400 audit(1772541577.180:1869): avc: denied { lock } for pid=27047 comm="syz.5.5068" path="/dev/nbd5" dev="devtmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1752.481316][T27056] fuse: Bad value for 'fd' [ 1752.503849][T27056] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1752.511872][T27056] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1752.713652][ T5884] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1752.741765][ T5877] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1752.852107][ T5884] usb 9-1: device descriptor read/64, error -71 [ 1752.893452][ T5877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.914010][ T5877] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1752.943417][ T5877] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1752.958013][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.095134][ T5877] usb 3-1: Product: syz [ 1753.101404][ T5884] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1753.110365][ T5877] usb 3-1: Manufacturer: syz [ 1753.115025][ T5877] usb 3-1: SerialNumber: syz [ 1753.120907][ T5877] usb 3-1: config 0 descriptor?? [ 1753.136962][ T5877] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1753.156270][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1753.180621][ T5877] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1753.199722][ T5877] usb 3-1: media controller created [ 1753.219445][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1753.231544][ T5884] usb 9-1: device descriptor read/64, error -71 [ 1753.485824][ T5884] usb usb9-port1: attempt power cycle [ 1753.554673][ T5877] DVB: Unable to find symbol tda10046_attach() [ 1753.565159][ T5877] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1753.584263][ T5877] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1753.811019][T27058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1753.824940][T27058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1753.841113][ T5884] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1753.862224][ T5884] usb 9-1: device descriptor read/8, error -71 [ 1754.100873][ T5884] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1754.121263][ T5884] usb 9-1: device descriptor read/8, error -71 [ 1754.231037][ T5884] usb usb9-port1: unable to enumerate USB device [ 1754.865302][ T5877] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1754.877856][ T5877] usb 3-1: USB disconnect, device number 45 [ 1755.471015][T27076] netlink: 'syz.2.5076': attribute type 1 has an invalid length. [ 1755.480422][T27076] netlink: 'syz.2.5076': attribute type 2 has an invalid length. [ 1755.627134][ T29] audit: type=1400 audit(1772541580.442:1870): avc: denied { setopt } for pid=27074 comm="syz.2.5076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1755.824617][T27080] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5078'. [ 1755.841909][T27080] @ÿÿÿ: renamed from veth0_vlan (while UP) [ 1755.874648][T27080] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5078'. [ 1755.886743][ T29] audit: type=1400 audit(1772541580.772:1871): avc: denied { map } for pid=27081 comm="syz.4.5079" path="socket:[106738]" dev="sockfs" ino=106738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1755.913185][ T29] audit: type=1400 audit(1772541580.772:1872): avc: denied { read accept } for pid=27081 comm="syz.4.5079" path="socket:[106738]" dev="sockfs" ino=106738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1756.009929][ T5884] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1756.216547][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1756.237915][ T5884] usb 9-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1756.249054][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.258469][ T5884] usb 9-1: config 0 descriptor?? [ 1756.265407][T27078] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1756.290616][ T29] audit: type=1400 audit(1772541581.182:1873): avc: denied { listen } for pid=27081 comm="syz.4.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1756.794757][ T5884] asus 0003:0B05:1ABE.0044: unknown main item tag 0x0 [ 1756.805343][ T5884] asus 0003:0B05:1ABE.0044: unknown main item tag 0x0 [ 1756.817953][ T5884] asus 0003:0B05:1ABE.0044: unknown main item tag 0x0 [ 1756.853295][ T5884] asus 0003:0B05:1ABE.0044: unknown main item tag 0x0 [ 1756.933780][ T5884] asus 0003:0B05:1ABE.0044: unknown main item tag 0x0 [ 1756.951989][ T5884] asus 0003:0B05:1ABE.0044: unknown main item tag 0x0 [ 1756.961117][ T5884] asus 0003:0B05:1ABE.0044: unknown main item tag 0x0 [ 1756.972062][ T5884] asus 0003:0B05:1ABE.0044: unexpected long global item [ 1756.983110][ T5884] asus 0003:0B05:1ABE.0044: Asus hid parse failed: -22 [ 1756.991135][ T29] audit: type=1400 audit(1772541581.882:1874): avc: denied { setopt } for pid=27077 comm="syz.8.5077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1757.039018][ T5884] asus 0003:0B05:1ABE.0044: probe with driver asus failed with error -22 [ 1757.060411][ T5884] usb 9-1: USB disconnect, device number 26 [ 1757.861974][T27106] SET target dimension over the limit! [ 1759.409047][ T5884] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1759.720511][ T5884] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 1759.749471][ T5884] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.773422][ T5884] usb 5-1: config 8 has no interface number 0 [ 1759.802796][ T5884] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1759.840608][ T5884] usb 5-1: config 8 interface 177 has no altsetting 0 [ 1759.890938][ T792] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1759.923126][ T5884] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1759.974816][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.025400][ T5884] ir_toy 5-1:8.177: required endpoints not found [ 1760.054032][ T792] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1760.071702][ T792] usb 9-1: not running at top speed; connect to a high speed hub [ 1760.183394][ T792] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 1760.423718][ T792] usb 9-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40 [ 1760.671049][ T792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.730136][ T792] usb 9-1: Product: syz [ 1760.740817][ T792] usb 9-1: Manufacturer: syz [ 1760.752753][ T792] usb 9-1: SerialNumber: syz [ 1761.488505][T27105] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5086'. [ 1761.652075][T27103] delete_channel: no stack [ 1761.686201][ T792] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1761.800241][ T792] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1761.820164][ T792] usb 9-1: USB disconnect, device number 27 [ 1761.860525][ T9971] udevd[9971]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1762.341690][T27143] ubi31: attaching mtd0 [ 1762.353932][T27143] ubi31: scanning is finished [ 1763.021070][T27146] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5098'. [ 1763.560753][T27143] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1763.568347][T27143] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1763.575616][T27143] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1763.583101][T27143] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1763.590596][T27143] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1763.597449][T27143] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1763.605486][T27143] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 715343740 [ 1763.615516][T27143] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1763.625783][T27149] ubi31: background thread "ubi_bgt31d" started, PID 27149 [ 1765.314789][T27162] netlink: 'syz.4.5102': attribute type 2 has an invalid length. [ 1765.807398][T27174] ubi: mtd0 is already attached to ubi31 [ 1766.935218][ T792] usb 5-1: USB disconnect, device number 29 [ 1767.455144][ T5877] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 1767.561916][ T5809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1767.573453][ T5809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1767.582438][ T5809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1767.593115][ T5809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1767.601969][ T5809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1767.628317][ T5877] usb 9-1: config 8 has an invalid interface number: 177 but max is 0 [ 1767.642360][ T29] audit: type=1400 audit(1772541592.528:1875): avc: denied { create } for pid=27183 comm="syz.7.5108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1767.693453][ T5877] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.773719][ T5877] usb 9-1: config 8 has no interface number 0 [ 1767.808265][ T5877] usb 9-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1767.844153][ T5877] usb 9-1: config 8 interface 177 has no altsetting 0 [ 1767.851254][ T5877] usb 9-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1767.887536][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.949974][ T5877] ir_toy 9-1:8.177: required endpoints not found [ 1768.115363][T27184] chnl_net:caif_netlink_parms(): no params data found [ 1768.283243][T27184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.292880][T27184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.307599][T27184] bridge_slave_0: entered allmulticast mode [ 1768.368207][T27184] bridge_slave_0: entered promiscuous mode [ 1768.395466][T27184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.422566][T27184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.441466][T27184] bridge_slave_1: entered allmulticast mode [ 1768.526415][T27201] loop6: detected capacity change from 0 to 2640 [ 1768.533222][T27201] buffer_io_error: 27 callbacks suppressed [ 1768.533235][T27201] Buffer I/O error on dev loop6, logical block 0, async page read [ 1768.547065][T27201] Buffer I/O error on dev loop6, logical block 0, async page read [ 1768.563281][T27201] Buffer I/O error on dev loop6, logical block 0, async page read [ 1768.571396][T27201] Buffer I/O error on dev loop6, logical block 0, async page read [ 1768.703347][T27184] bridge_slave_1: entered promiscuous mode [ 1768.743616][T27201] Buffer I/O error on dev loop6, logical block 0, async page read [ 1768.791248][T27201] Buffer I/O error on dev loop6, logical block 0, async page read [ 1768.831397][T27201] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.266387][T27201] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.327781][T27207] FAULT_INJECTION: forcing a failure. [ 1769.327781][T27207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1769.341026][T27207] CPU: 0 UID: 0 PID: 27207 Comm: syz.4.5111 Tainted: G L syzkaller #0 PREEMPT(full) [ 1769.341051][T27207] Tainted: [L]=SOFTLOCKUP [ 1769.341058][T27207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1769.341066][T27207] Call Trace: [ 1769.341070][T27207] [ 1769.341075][T27207] dump_stack_lvl+0x100/0x190 [ 1769.341100][T27207] should_fail_ex.cold+0x5/0xa [ 1769.341122][T27207] _copy_to_user+0x32/0xd0 [ 1769.341148][T27207] simple_read_from_buffer+0xcb/0x170 [ 1769.341175][T27207] proc_fail_nth_read+0x1af/0x230 [ 1769.341193][T27207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1769.341209][T27207] ? rw_verify_area+0xce/0x6d0 [ 1769.341229][T27207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1769.341244][T27207] vfs_read+0x1e4/0xb30 [ 1769.341263][T27207] ? __pfx_vfs_read+0x10/0x10 [ 1769.341283][T27207] ? __fget_files+0x21f/0x3d0 [ 1769.341298][T27207] ksys_read+0x12a/0x250 [ 1769.341315][T27207] ? __pfx_ksys_read+0x10/0x10 [ 1769.341336][T27207] do_syscall_64+0x106/0xf80 [ 1769.341347][T27207] ? clear_bhb_loop+0x40/0x90 [ 1769.341361][T27207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.341373][T27207] RIP: 0033:0x7f27b475cfce [ 1769.341382][T27207] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1769.341393][T27207] RSP: 002b:00007f27b29f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1769.341404][T27207] RAX: ffffffffffffffda RBX: 00007f27b29f66c0 RCX: 00007f27b475cfce [ 1769.341411][T27207] RDX: 000000000000000f RSI: 00007f27b29f60a0 RDI: 0000000000000006 [ 1769.341418][T27207] RBP: 00007f27b29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1769.341424][T27207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1769.341430][T27207] R13: 00007f27b4a16128 R14: 00007f27b4a16090 R15: 00007ffdd9506ce8 [ 1769.341445][T27207] [ 1769.533292][T27201] ldm_validate_partition_table(): Disk read failed. [ 1769.540028][T27201] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.548030][T27201] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.647067][T27184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1769.695689][ T5809] Bluetooth: hci6: command tx timeout [ 1769.697238][T27184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1769.739231][T27201] Dev loop6: unable to read RDB block 0 [ 1769.745647][T27201] loop6: unable to read partition table [ 1769.752350][T27201] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1769.828255][T27184] team0: Port device team_slave_0 added [ 1769.852654][T27184] team0: Port device team_slave_1 added [ 1769.863092][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1769.872729][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1769.881340][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1769.882430][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1769.892101][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1769.911670][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1769.921696][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1769.931519][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1769.977888][T27184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1769.987450][T27184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.020543][T27184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1770.244543][T27184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1770.281877][T27184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.362851][T27184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.683424][T27184] hsr_slave_0: entered promiscuous mode [ 1770.693487][T27184] hsr_slave_1: entered promiscuous mode [ 1770.713476][T27184] debugfs: 'hsr0' already exists in 'hsr' [ 1770.726769][T27184] Cannot create hsr debugfs directory [ 1771.862083][ T5809] Bluetooth: hci6: command tx timeout [ 1771.927468][T27227] netlink: 'syz.4.5117': attribute type 29 has an invalid length. [ 1772.319736][T27234] EXT4-fs (nbd4): unable to read superblock [ 1772.336043][ T29] audit: type=1400 audit(1772541853.210:1876): avc: denied { mounton } for pid=27226 comm="syz.4.5117" path="/syzcgroup/unified/syz4" dev="pstore" ino=3418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 1772.433624][T27237] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5119'. [ 1772.475052][T27237] overlayfs: failed to resolve './file1': -2 [ 1772.882458][T19731] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1773.006383][ T5877] usb 9-1: USB disconnect, device number 28 [ 1773.042851][T19731] usb 3-1: Using ep0 maxpacket: 16 [ 1773.052993][T19731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1773.133005][T19731] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1773.152976][T19731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.160982][T19731] usb 3-1: Product: syz [ 1773.339800][ T792] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1773.442989][T19731] usb 3-1: Manufacturer: syz [ 1773.466789][T19731] usb 3-1: SerialNumber: syz [ 1773.485524][T27184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1773.512790][ T792] usb 5-1: device descriptor read/64, error -71 [ 1773.519665][T19731] usb 3-1: config 0 descriptor?? [ 1773.536354][T27184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1773.537526][T19731] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1773.576729][T27184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1773.597831][T19731] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1773.609327][T27184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1773.737361][T27184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1773.761947][ T792] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1773.800436][T27184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1773.822481][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.829601][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1773.863704][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.870821][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1773.911278][ T792] usb 5-1: device descriptor read/64, error -71 [ 1773.932727][ T5809] Bluetooth: hci6: command tx timeout [ 1774.021330][ T5884] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 1774.041775][ T792] usb usb5-port1: attempt power cycle [ 1774.279691][T19731] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1774.471784][ T792] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1774.652378][ T5884] usb 9-1: config 8 has an invalid interface number: 177 but max is 0 [ 1774.755204][T19731] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1774.770900][T27279] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5124'. [ 1774.802860][T19731] em28xx 3-1:0.0: board has no eeprom [ 1775.652994][ T5884] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.665438][ T5884] usb 9-1: config 8 has no interface number 0 [ 1775.674482][ T5884] usb 9-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1775.688597][ T5884] usb 9-1: config 8 interface 177 has no altsetting 0 [ 1775.695927][ T792] usb 5-1: device descriptor read/8, error -71 [ 1775.703046][ T5884] usb 9-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1775.712964][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.741485][ T5884] ir_toy 9-1:8.177: required endpoints not found [ 1775.882347][T27184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1775.978315][ T29] audit: type=1400 audit(1772541856.872:1877): avc: denied { accept } for pid=27290 comm="syz.4.5125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1776.010582][ T5809] Bluetooth: hci6: command tx timeout [ 1776.111896][T27184] veth0_vlan: entered promiscuous mode [ 1776.178852][T27293] hfs: unable to load iocharset "io#harset" [ 1776.239919][T19731] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1776.258736][T19731] em28xx 3-1:0.0: dvb set to bulk mode. [ 1776.283052][T24119] em28xx 3-1:0.0: Binding DVB extension [ 1776.497213][T24119] em28xx 3-1:0.0: Registering input extension [ 1776.607651][T27184] veth1_vlan: entered promiscuous mode [ 1776.738088][T19731] usb 3-1: USB disconnect, device number 46 [ 1776.739006][T27184] veth0_macvtap: entered promiscuous mode [ 1777.088642][T19731] em28xx 3-1:0.0: Disconnecting em28xx [ 1777.109421][T19731] em28xx 3-1:0.0: Closing input extension [ 1777.141801][T27184] veth1_macvtap: entered promiscuous mode [ 1777.211264][T19731] em28xx 3-1:0.0: Freeing device [ 1777.218903][T27184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1777.268049][T27184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1777.315191][T18368] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.371746][T18368] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.393497][T18368] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.412051][ T29] audit: type=1400 audit(1772541858.313:1878): avc: denied { call } for pid=27321 comm="syz.4.5131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1777.455369][T18368] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.652978][T21435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1777.694915][T21435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1777.704202][T27338] comedi comedi3: s526: I/O port conflict (0x5c22,64) [ 1777.853684][T19731] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1777.906269][T21428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1777.916897][T21428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.090904][T19731] usb 5-1: Using ep0 maxpacket: 32 [ 1778.105669][T27351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.127832][T27351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.138602][T19731] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1778.147794][T19731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.160609][T19731] usb 5-1: Product: syz [ 1778.164784][T19731] usb 5-1: Manufacturer: syz [ 1778.195112][T19731] usb 5-1: SerialNumber: syz [ 1778.209677][T19731] usb 5-1: config 0 descriptor?? [ 1778.792330][T27357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.818966][T27357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.018433][T24119] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1779.128698][ T792] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1779.178371][T24119] usb 4-1: Using ep0 maxpacket: 32 [ 1779.200687][T24119] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1779.259794][T24119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.306821][T24119] usb 4-1: config 0 descriptor?? [ 1779.319135][ T792] usb 3-1: Using ep0 maxpacket: 16 [ 1779.338484][ T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1779.383110][ T792] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1779.429975][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.472891][ T792] usb 3-1: Product: syz [ 1779.789806][T24119] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1779.790703][ T792] usb 3-1: Manufacturer: syz [ 1779.814379][ T5877] usb 9-1: USB disconnect, device number 29 [ 1779.829467][ T792] usb 3-1: SerialNumber: syz [ 1779.847859][ T792] usb 3-1: config 0 descriptor?? [ 1779.868735][T24119] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1779.880230][ T792] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1779.886973][T24119] dib0700: firmware download failed at 7 with -22 [ 1779.900185][ T792] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1779.911707][T24119] usb 4-1: USB disconnect, device number 93 [ 1780.866187][ T792] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1781.098742][T19731] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1781.768133][T19731] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1781.829243][T19731] usb 5-1: USB disconnect, device number 34 [ 1781.845362][ T792] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1781.864756][ T792] em28xx 3-1:0.0: board has no eeprom [ 1783.026974][ T792] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1783.035806][ T792] em28xx 3-1:0.0: dvb set to bulk mode. [ 1783.045913][T16618] em28xx 3-1:0.0: Binding DVB extension [ 1783.103958][T27455] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5152'. [ 1783.105739][ T792] usb 3-1: USB disconnect, device number 47 [ 1783.153463][T27453] netdevsim netdevsim8: Direct firmware load for / [ 1783.153463][T27453] failed with error -2 [ 1783.166127][T27453] netdevsim netdevsim8: Falling back to sysfs fallback for: / [ 1783.166127][T27453] [ 1783.195227][ T792] em28xx 3-1:0.0: Disconnecting em28xx [ 1783.220458][ T29] audit: type=1400 audit(1772541864.115:1879): avc: denied { accept } for pid=27450 comm="syz.2.5152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1783.346554][T16618] em28xx 3-1:0.0: Registering input extension [ 1783.388023][ T792] em28xx 3-1:0.0: Closing input extension [ 1785.708719][ T792] em28xx 3-1:0.0: Freeing device [ 1785.723102][ T29] audit: type=1400 audit(1772541866.365:1880): avc: denied { read write } for pid=26505 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1785.846694][T27469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5153'. [ 1786.574671][T27487] overlayfs: missing 'workdir' [ 1786.615212][T27471] netlink: 'syz.2.5154': attribute type 1 has an invalid length. [ 1786.623083][T27471] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5154'. [ 1786.746984][ T29] audit: type=1400 audit(1772541866.365:1881): avc: denied { open } for pid=26505 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1787.009775][T27502] netlink: 'syz.7.5158': attribute type 2 has an invalid length. [ 1787.178803][ T29] audit: type=1400 audit(1772541866.365:1882): avc: denied { ioctl } for pid=26505 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1787.409556][ T29] audit: type=1400 audit(1772541866.565:1883): avc: denied { search } for pid=27464 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1787.491835][ T29] audit: type=1400 audit(1772541866.565:1884): avc: denied { search } for pid=27464 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1787.560813][ T29] audit: type=1400 audit(1772541866.565:1885): avc: denied { search } for pid=27464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1787.584086][T16618] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1787.631916][ T29] audit: type=1400 audit(1772541866.565:1886): avc: denied { read open } for pid=27464 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1787.800265][ T29] audit: type=1400 audit(1772541866.565:1887): avc: denied { getattr } for pid=27464 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1787.857205][T16618] usb 3-1: Using ep0 maxpacket: 8 [ 1787.863602][T16618] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 1787.876074][T16618] usb 3-1: config 162 has an invalid interface number: 3 but max is 2 [ 1787.897078][ T29] audit: type=1400 audit(1772541866.565:1888): avc: denied { getattr } for pid=27464 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1882 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1787.925778][T16618] usb 3-1: config 162 has no interface number 0 [ 1787.991870][T27515] netlink: 'syz.7.5161': attribute type 1 has an invalid length. [ 1788.111841][T16618] usb 3-1: config 162 has no interface number 1 [ 1788.135985][T27516] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1788.147521][T27516] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1788.150443][T27515] netlink: 'syz.7.5161': attribute type 5 has an invalid length. [ 1788.168559][T16618] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1788.182777][T16618] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1788.193673][T16618] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1788.207609][T16618] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1788.227036][T16618] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1788.238387][T16618] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1788.251978][T16618] usb 3-1: config 162 interface 84 has no altsetting 0 [ 1788.261110][T16618] usb 3-1: config 162 interface 2 has no altsetting 0 [ 1788.272398][T16618] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 1788.281518][T16618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.289672][T16618] usb 3-1: Product: syz [ 1788.294933][T16618] usb 3-1: Manufacturer: syz [ 1788.351542][T16618] usb 3-1: SerialNumber: syz [ 1788.673315][T27528] EXT4-fs (nbd3): unable to read superblock [ 1788.730277][T27529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1788.898997][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 1788.899033][ T29] audit: type=1400 audit(1772541869.565:1941): avc: denied { mounton } for pid=27521 comm="syz.3.5163" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1789.037083][T24632] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1789.037613][ T29] audit: type=1400 audit(1772541869.845:1942): avc: denied { create } for pid=27520 comm="syz.7.5164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1789.131026][ T29] audit: type=1400 audit(1772541869.865:1943): avc: denied { create } for pid=27520 comm="syz.7.5164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1789.194049][ T5809] Bluetooth: hci7: Opcode 0x0c03 failed: -71 [ 1789.236558][T16618] usb 3-1: USB disconnect, device number 48 [ 1789.258269][T24632] usb 5-1: Using ep0 maxpacket: 16 [ 1789.268260][T24632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1789.315078][T24632] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1789.362943][T24632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.417945][T24632] usb 5-1: Product: syz [ 1789.422135][T24632] usb 5-1: Manufacturer: syz [ 1789.426718][T24632] usb 5-1: SerialNumber: syz [ 1789.450489][T24632] usb 5-1: config 0 descriptor?? [ 1789.461867][T24632] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1789.474882][T24632] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1789.483368][ T29] audit: type=1400 audit(1772541870.375:1944): avc: denied { append } for pid=27541 comm="syz.8.5166" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1789.590486][ T29] audit: type=1400 audit(1772541870.375:1945): avc: denied { read write } for pid=27541 comm="syz.8.5166" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1789.774192][ T29] audit: type=1400 audit(1772541870.375:1946): avc: denied { open } for pid=27541 comm="syz.8.5166" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1790.296838][T16618] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 1790.313983][ T29] audit: type=1400 audit(1772541870.375:1947): avc: denied { create } for pid=27541 comm="syz.8.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1790.356372][ T29] audit: type=1400 audit(1772541870.375:1948): avc: denied { connect } for pid=27541 comm="syz.8.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1790.437240][ T29] audit: type=1400 audit(1772541870.375:1949): avc: denied { read } for pid=27541 comm="syz.8.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1790.457073][ T29] audit: type=1400 audit(1772541870.375:1950): avc: denied { write } for pid=27541 comm="syz.8.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1790.495462][T16618] usb 9-1: config 8 has an invalid interface number: 177 but max is 0 [ 1790.570055][T16618] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.586762][T16618] usb 9-1: config 8 has no interface number 0 [ 1790.600073][T27555] usb usb8: usbfs: process 27555 (syz.2.5169) did not claim interface 0 before use [ 1790.628944][T16618] usb 9-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1790.647705][T27555] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1790.718256][T24632] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1790.869287][T16618] usb 9-1: config 8 interface 177 has no altsetting 0 [ 1790.918917][T16618] usb 9-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1790.954190][T16618] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.108682][T16618] ir_toy 9-1:8.177: required endpoints not found [ 1791.147324][T24632] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1791.166629][T24632] em28xx 5-1:0.0: board has no eeprom [ 1792.408755][T24632] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1792.422667][T24632] em28xx 5-1:0.0: dvb set to bulk mode. [ 1792.433622][T16618] em28xx 5-1:0.0: Binding DVB extension [ 1792.456985][ T5874] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1792.565445][T16618] em28xx 5-1:0.0: Registering input extension [ 1792.729451][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.745612][ T5874] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1792.766729][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.810613][ T5874] usb 3-1: config 0 descriptor?? [ 1792.829335][ T5874] pwc: Askey VC010 type 2 USB webcam detected. [ 1793.163820][ T5877] usb 5-1: USB disconnect, device number 35 [ 1793.189920][ T5877] em28xx 5-1:0.0: Disconnecting em28xx [ 1793.213512][ T5877] em28xx 5-1:0.0: Closing input extension [ 1793.237946][ T5877] em28xx 5-1:0.0: Freeing device [ 1793.253472][T27565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.272855][T27565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.294340][ T5874] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1793.311215][ T5874] pwc: recv_control_msg error -32 req 02 val 2700 [ 1793.321861][ T5874] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1793.633268][ T5874] pwc: recv_control_msg error -32 req 04 val 1300 [ 1793.707111][ T5877] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1793.845801][ T5874] pwc: recv_control_msg error -71 req 02 val 2000 [ 1793.854874][ T5874] pwc: recv_control_msg error -71 req 02 val 2100 [ 1793.860017][ T5877] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1793.874946][ T5874] pwc: recv_control_msg error -71 req 04 val 1500 [ 1793.892597][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1793.914214][ T5874] pwc: recv_control_msg error -71 req 02 val 2500 [ 1793.924454][ T5877] usb 5-1: Product: syz [ 1793.924761][ T5874] pwc: recv_control_msg error -71 req 02 val 2400 [ 1793.940271][ T5877] usb 5-1: Manufacturer: syz [ 1793.955416][ T5877] usb 5-1: SerialNumber: syz [ 1793.955829][ T5874] pwc: recv_control_msg error -71 req 02 val 2600 [ 1793.990146][ T5877] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1794.027945][ T5874] pwc: recv_control_msg error -71 req 02 val 2900 [ 1794.038030][ T5874] pwc: recv_control_msg error -71 req 02 val 2800 [ 1794.085117][ T5874] pwc: recv_control_msg error -71 req 04 val 1100 [ 1794.132090][ T5874] pwc: recv_control_msg error -71 req 04 val 1200 [ 1794.185370][ T5874] pwc: Registered as video103. [ 1794.230289][ T5874] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input84 [ 1794.283191][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1794.283206][ T29] audit: type=1400 audit(1772541875.175:1976): avc: denied { read } for pid=5160 comm="acpid" name="event4" dev="devtmpfs" ino=7245 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1794.341362][ T5874] usb 3-1: USB disconnect, device number 49 [ 1794.376535][ T29] audit: type=1400 audit(1772541875.175:1977): avc: denied { open } for pid=5160 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=7245 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1794.474407][ T29] audit: type=1400 audit(1772541875.175:1978): avc: denied { ioctl } for pid=5160 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=7245 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1794.617200][ T29] audit: type=1400 audit(1772541875.515:1979): avc: denied { setopt } for pid=27618 comm="syz.2.5175" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1794.637810][T27619] syz_tun: entered allmulticast mode [ 1794.699127][ T29] audit: type=1400 audit(1772541875.585:1980): avc: denied { write } for pid=27618 comm="syz.2.5175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1795.117175][ T5874] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1795.199095][ T29] audit: type=1400 audit(1772541876.095:1981): avc: denied { read write } for pid=27623 comm="syz.3.5176" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1795.259634][T24632] hid-generic 0000:008B:0000.0045: unknown main item tag 0x0 [ 1795.292641][ T5874] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1795.357376][T24632] hid-generic 0000:008B:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1795.377199][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.437120][ T29] audit: type=1400 audit(1772541876.095:1982): avc: denied { open } for pid=27623 comm="syz.3.5176" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1795.543145][ T5874] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1795.597363][ T5874] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1795.664165][ T5874] usb 3-1: Manufacturer: syz [ 1795.733853][ T5874] usb 3-1: config 0 descriptor?? [ 1795.747000][ T29] audit: type=1400 audit(1772541876.625:1983): avc: denied { read write } for pid=27629 comm="syz.8.5177" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1795.923531][ T30] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 1795.996990][ T30] Tainted: G L syzkaller #0 [ 1796.008165][ T29] audit: type=1400 audit(1772541876.625:1984): avc: denied { open } for pid=27629 comm="syz.8.5177" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1796.088648][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1796.206080][ T30] task:kworker/1:0 state:D stack:21208 pid:24 tgid:24 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1796.223146][T27619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1796.327654][ T29] audit: type=1400 audit(1772541876.635:1985): avc: denied { ioctl } for pid=27629 comm="syz.8.5177" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x55ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1796.390583][T27619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1796.450912][ T30] Workqueue: usb_hub_wq hub_event [ 1796.540503][ T30] Call Trace: [ 1796.541092][ T5877] vp7045: USB control message 'out' went wrong. [ 1796.612719][ T30] [ 1796.654043][ T30] __schedule+0xfee/0x6120 [ 1796.688880][T27619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5175'. [ 1796.722626][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1796.800087][ T30] ? __pfx___schedule+0x10/0x10 [ 1796.866143][ T30] ? find_held_lock+0x2b/0x80 [ 1796.917120][ T5874] rc_core: IR keymap rc-hauppauge not found [ 1796.984872][ T30] ? schedule+0x2bf/0x390 [ 1797.030916][ T5874] Registered IR keymap rc-empty [ 1797.087803][ T30] schedule+0xdd/0x390 [ 1797.145534][ T30] schedule_timeout+0x1b2/0x280 [ 1797.200488][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1797.249684][ T30] ? mark_held_locks+0x40/0x70 [ 1797.278185][ T30] __wait_for_common+0x2e7/0x4c0 [ 1797.290621][ T5874] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1797.311558][T24632] usb 9-1: USB disconnect, device number 30 [ 1797.326963][ T5877] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1797.357063][ T5877] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1797.362750][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1797.388851][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1797.394331][ T30] ? __pfx_device_del+0x10/0x10 [ 1797.399403][ T30] ? kobject_put+0xb9/0x640 [ 1797.403912][ T30] i2c_del_adapter+0x62d/0x820 [ 1797.408751][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1797.414049][ T30] ? dvb_usb_device_exit+0x29a/0x520 [ 1797.416347][ T5877] usb 5-1: USB disconnect, device number 36 [ 1797.419415][ T30] dvb_usb_i2c_exit+0x9f/0xf0 [ 1797.430038][ T30] dvb_usb_device_exit+0x313/0x520 [ 1797.435167][ T30] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1797.440875][ T30] ? find_held_lock+0x2b/0x80 [ 1797.445601][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1797.451486][ T30] ? usb_disable_interface+0x211/0x4c0 [ 1797.457133][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1797.463035][ T30] usb_unbind_interface+0x1dd/0x9e0 [ 1797.468377][ T30] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 1797.473937][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1797.479728][ T30] device_remove+0x12a/0x180 [ 1797.484331][ T30] device_release_driver_internal+0x42e/0x600 [ 1797.490406][ T30] bus_remove_device+0x22f/0x440 [ 1797.495322][ T30] device_del+0x376/0x9b0 [ 1797.499672][ T30] ? __pfx_device_del+0x10/0x10 [ 1797.504528][ T30] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 1797.510289][ T30] usb_disable_device+0x367/0x810 [ 1797.515304][ T30] ? mark_held_locks+0x40/0x70 [ 1797.520087][ T30] usb_disconnect+0x2e2/0x9a0 [ 1797.524757][ T30] hub_event+0x1d0c/0x4af0 [ 1797.529226][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1797.534152][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 1797.539375][ T30] ? __pfx_hub_event+0x10/0x10 [ 1797.544117][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 1797.549758][ T30] ? rcu_is_watching+0x12/0xc0 [ 1797.554504][ T30] process_one_work+0x9d7/0x1920 [ 1797.559435][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1797.564789][ T30] ? __pfx_hub_event+0x10/0x10 [ 1797.569868][ T30] worker_thread+0x5da/0xe40 [ 1797.574683][ T30] ? kthread+0x13a/0x450 [ 1797.579194][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1797.585180][ T30] kthread+0x370/0x450 [ 1797.589465][ T5874] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input86 [ 1797.607788][ T30] ? __pfx_kthread+0x10/0x10 [ 1797.625556][ T30] ret_from_fork+0x754/0xd80 [ 1797.637802][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1797.644117][ T30] ? __switch_to+0x7b4/0x1120 [ 1797.649067][ T30] ? __pfx_kthread+0x10/0x10 [ 1797.663858][ T30] ret_from_fork_asm+0x1a/0x30 [ 1797.670381][ T30] [ 1797.673809][ T30] INFO: task syz.6.4665:24971 blocked for more than 145 seconds. [ 1797.682347][ T30] Tainted: G L syzkaller #0 [ 1797.690606][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1797.699375][ T30] task:syz.6.4665 state:D stack:25752 pid:24971 tgid:24971 ppid:12922 task_flags:0x400040 flags:0x00080002 [ 1797.717765][ T30] Call Trace: [ 1797.721071][ T30] [ 1797.724081][ T30] __schedule+0xfee/0x6120 [ 1797.728554][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1797.733529][ T30] ? __pfx___schedule+0x10/0x10 [ 1797.738484][ T30] ? find_held_lock+0x2b/0x80 [ 1797.743187][ T30] ? schedule+0x2bf/0x390 [ 1797.747767][ T30] schedule+0xdd/0x390 [ 1797.751912][ T30] schedule_preempt_disabled+0x13/0x30 [ 1797.757439][ T30] __mutex_lock+0xc9a/0x1b90 [ 1797.762111][ T30] ? task_work_add+0x201/0x3b0 [ 1797.766892][ T30] ? usbdev_release+0x81/0x470 [ 1797.771822][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1797.777208][ T30] ? __fsnotify_parent+0x2b4/0xca0 [ 1797.782353][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 1797.794923][ T30] ? locks_remove_file+0xd1/0x610 [ 1797.806964][ T30] ? usbdev_release+0x81/0x470 [ 1797.817028][ T30] usbdev_release+0x81/0x470 [ 1797.821652][ T30] ? __pfx_usbdev_release+0x10/0x10 [ 1797.826970][ T30] __fput+0x3ff/0xb40 [ 1797.830998][ T30] task_work_run+0x150/0x240 [ 1797.835604][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1797.840907][ T30] exit_to_user_mode_loop+0x100/0x4a0 [ 1797.846310][ T30] do_syscall_64+0x67c/0xf80 [ 1797.851076][ T30] ? clear_bhb_loop+0x40/0x90 [ 1797.855780][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.876950][ T30] RIP: 0033:0x7ff33719c799 [ 1797.883115][ T30] RSP: 002b:00007ffe492a0898 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1797.916942][ T30] RAX: 0000000000000000 RBX: 00007ff337417da0 RCX: 00007ff33719c799 [ 1797.924942][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1797.938666][ T30] RBP: 00007ff337417da0 R08: 00007ff337416128 R09: 0000000000000000 [ 1797.949094][ T30] R10: 00000000003fcb30 R11: 0000000000000246 R12: 000000000018be01 [ 1797.957389][ T30] R13: 00007ff33741627c R14: 000000000018b27b R15: 00007ff337416270 [ 1797.965464][ T30] [ 1798.055929][T27619] syz_tun (unregistering): left allmulticast mode [ 1798.088970][ T30] [ 1798.088970][ T30] Showing all locks held in the system: [ 1798.127018][ T30] 5 locks held by kworker/1:0/24: [ 1798.141853][ T30] #0: ffff888020e90d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1798.173416][ T30] #1: ffffc900001e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1798.202596][ T30] #2: ffff88802a95f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1798.230511][ T30] #3: ffff888029708198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 1798.253480][ T30] #4: ffff88805947f160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 1798.295795][ T30] 1 lock held by khungtaskd/30: [ 1798.310460][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1798.336705][ T30] 2 locks held by getty/5567: [ 1798.352765][ T30] #0: ffff8880385f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1798.384067][ T30] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1798.405870][ T30] 1 lock held by syz.6.4665/24971: [ 1798.463774][ T30] #0: ffff88802a95f198 (&dev->mutex){....}-{4:4}, at: usbdev_release+0x81/0x470 [ 1798.487282][ T30] 1 lock held by syz.9.4921/26260: [ 1798.492636][ T30] #0: ffff88802a95f198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 1798.516985][ T30] 1 lock held by syz.5.5069/27053: [ 1798.522125][ T30] #0: ffff88802a95f198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 1798.546983][ T30] 1 lock held by syz.2.5175/27619: [ 1798.552110][ T30] #0: ffffffff8e7f4ec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1798.562094][ T30] [ 1798.565318][ T30] ============================================= [ 1798.565318][ T30] [ 1798.587045][ T30] NMI backtrace for cpu 1 [ 1798.587062][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1798.587090][ T30] Tainted: [L]=SOFTLOCKUP [ 1798.587096][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1798.587107][ T30] Call Trace: [ 1798.587113][ T30] [ 1798.587120][ T30] dump_stack_lvl+0x100/0x190 [ 1798.587151][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1798.587170][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1798.587199][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1798.587226][ T30] sys_info+0x141/0x190 [ 1798.587248][ T30] watchdog+0xd25/0x1050 [ 1798.587277][ T30] ? __pfx_watchdog+0x10/0x10 [ 1798.587300][ T30] ? __kthread_parkme+0x18c/0x230 [ 1798.587327][ T30] ? kthread+0x13a/0x450 [ 1798.587342][ T30] ? __pfx_watchdog+0x10/0x10 [ 1798.587361][ T30] kthread+0x370/0x450 [ 1798.587375][ T30] ? __pfx_kthread+0x10/0x10 [ 1798.587391][ T30] ret_from_fork+0x754/0xd80 [ 1798.587409][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1798.587429][ T30] ? __switch_to+0x7b4/0x1120 [ 1798.587451][ T30] ? __pfx_kthread+0x10/0x10 [ 1798.587469][ T30] ret_from_fork_asm+0x1a/0x30 [ 1798.587501][ T30] [ 1798.587525][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1798.659820][ T5877] usb 3-1: USB disconnect, device number 50 [ 1798.664595][ C0] NMI backtrace for cpu 0 [ 1798.664610][ C0] CPU: 0 UID: 0 PID: 5877 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1798.664628][ C0] Tainted: [L]=SOFTLOCKUP [ 1798.664633][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1798.664642][ C0] Workqueue: usb_hub_wq hub_event [ 1798.664659][ C0] RIP: 0010:lock_is_held_type+0xd7/0x140 [ 1798.664675][ C0] Code: 03 0f 95 c0 44 39 e0 0f 94 c0 0f b6 c0 48 c7 c7 0f ce e4 8d 89 44 24 04 e8 26 16 00 00 ba ff ff ff ff 65 0f c1 15 91 18 7e 08 <83> fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 [ 1798.664688][ C0] RSP: 0018:ffffc90000007bd0 EFLAGS: 00000057 [ 1798.664699][ C0] RAX: 0000000000000000 RBX: ffffffff8e6d44c8 RCX: 0000000000000001 [ 1798.664708][ C0] RDX: 0000000000000001 RSI: ffffffff8de4ce0f RDI: ffffffff8c1af6a0 [ 1798.664716][ C0] RBP: ffff888058414980 R08: 000000007acdbe04 R09: 0000000000000007 [ 1798.664724][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000ffffffff [ 1798.664732][ C0] R13: 0000000000000046 R14: ffff8880584155a0 R15: 0000000000000005 [ 1798.664741][ C0] FS: 0000000000000000(0000) GS:ffff888124345000(0000) knlGS:0000000000000000 [ 1798.664755][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1798.664765][ C0] CR2: 00007ffdc2362cf4 CR3: 000000000e598000 CR4: 00000000003526f0 [ 1798.664774][ C0] Call Trace: [ 1798.664779][ C0] [ 1798.664786][ C0] select_task_rq_fair+0x7ec/0x5330 [ 1798.664806][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1798.664821][ C0] ? __pfx_select_task_rq_fair+0x10/0x10 [ 1798.664834][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1798.664848][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1798.664868][ C0] try_to_wake_up+0x9f3/0x1a80 [ 1798.664886][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 1798.664902][ C0] ? find_held_lock+0x2b/0x80 [ 1798.664916][ C0] ? __hrtimer_run_queues+0x42b/0xa70 [ 1798.664930][ C0] ? __hrtimer_run_queues+0x42b/0xa70 [ 1798.664945][ C0] hrtimer_wakeup+0x47/0x60 [ 1798.664958][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1798.664970][ C0] __hrtimer_run_queues+0x50e/0xa70 [ 1798.664986][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1798.664999][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 1798.665021][ C0] hrtimer_interrupt+0x397/0x8c0 [ 1798.665039][ C0] __sysvec_apic_timer_interrupt+0x109/0x490 [ 1798.665055][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1798.665068][ C0] [ 1798.665073][ C0] [ 1798.665078][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1798.665092][ C0] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 1798.665108][ C0] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 68 10 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 36 0b 21 00 48 85 ed 0f 85 27 01 00 00 48 10 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 1798.665120][ C0] RSP: 0018:ffffc900044bf5c8 EFLAGS: 00000283 [ 1798.665130][ C0] RAX: 000000000002de26 RBX: 0000000000000029 RCX: ffffc9001aa9b000 [ 1798.665138][ C0] RDX: 0000000000100000 RSI: ffffffff81e7a3d4 RDI: ffff888058414980 [ 1798.665147][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1798.665155][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000897ebb [ 1798.665163][ C0] R13: 0000000000000200 R14: ffff8880202ac980 R15: ffffc900044bf790 [ 1798.665175][ C0] ? vprintk_emit+0x674/0x6b0 [ 1798.665191][ C0] ? vprintk_emit+0x674/0x6b0 [ 1798.665207][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1798.665225][ C0] dev_vprintk_emit+0x394/0x3e0 [ 1798.665242][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1798.665264][ C0] ? lock_acquire+0x1cf/0x380 [ 1798.665283][ C0] ? find_held_lock+0x2b/0x80 [ 1798.665299][ C0] dev_printk_emit+0xd2/0x10d [ 1798.665313][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 1798.665329][ C0] ? find_held_lock+0x2b/0x80 [ 1798.665344][ C0] ? find_held_lock+0x2b/0x80 [ 1798.665359][ C0] ? __queue_work+0x436/0x1150 [ 1798.665373][ C0] ? __queue_work+0x436/0x1150 [ 1798.665389][ C0] __dev_printk+0xcb/0x100 [ 1798.665405][ C0] _dev_info+0xef/0x127 [ 1798.665419][ C0] ? __pfx__dev_info+0x10/0x10 [ 1798.665436][ C0] ? find_held_lock+0x2b/0x80 [ 1798.665453][ C0] ? mark_held_locks+0x40/0x70 [ 1798.665473][ C0] usb_disconnect+0xec/0x9a0 [ 1798.665489][ C0] hub_event+0x1d0c/0x4af0 [ 1798.665508][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1798.665527][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1798.665542][ C0] ? __pfx_hub_event+0x10/0x10 [ 1798.665554][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1798.665573][ C0] ? rcu_is_watching+0x12/0xc0 [ 1798.665590][ C0] process_one_work+0x9d7/0x1920 [ 1798.665607][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1798.665623][ C0] ? __pfx_hub_event+0x10/0x10 [ 1798.665637][ C0] worker_thread+0x5da/0xe40 [ 1798.665653][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1798.665667][ C0] ? kthread+0x13a/0x450 [ 1798.665679][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1798.665691][ C0] kthread+0x370/0x450 [ 1798.665703][ C0] ? __pfx_kthread+0x10/0x10 [ 1798.665715][ C0] ret_from_fork+0x754/0xd80 [ 1798.665729][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1798.665742][ C0] ? __switch_to+0x7b4/0x1120 [ 1798.665758][ C0] ? __pfx_kthread+0x10/0x10 [ 1798.665770][ C0] ret_from_fork_asm+0x1a/0x30 [ 1798.665791][ C0] [ 1798.670160][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1798.670176][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1798.670198][ T30] Tainted: [L]=SOFTLOCKUP [ 1798.670204][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1798.670213][ T30] Call Trace: [ 1798.670219][ T30] [ 1798.670226][ T30] dump_stack_lvl+0x100/0x190 [ 1798.670254][ T30] vpanic+0x552/0x970 [ 1798.670270][ T30] ? __pfx_vpanic+0x10/0x10 [ 1798.670287][ T30] ? rcu_is_watching+0x12/0xc0 [ 1798.670309][ T30] panic+0xd1/0xe0 [ 1798.670323][ T30] ? __pfx_panic+0x10/0x10 [ 1798.670341][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1798.670363][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1798.670384][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1798.670405][ T30] ? watchdog.cold+0x198/0x1ca [ 1798.670422][ T30] ? watchdog+0xd35/0x1050 [ 1798.670444][ T30] watchdog.cold+0x1a9/0x1ca [ 1798.670467][ T30] ? __pfx_watchdog+0x10/0x10 [ 1798.670488][ T30] ? __kthread_parkme+0x18c/0x230 [ 1798.670512][ T30] ? kthread+0x13a/0x450 [ 1798.670526][ T30] ? __pfx_watchdog+0x10/0x10 [ 1798.670545][ T30] kthread+0x370/0x450 [ 1798.670559][ T30] ? __pfx_kthread+0x10/0x10 [ 1798.670575][ T30] ret_from_fork+0x754/0xd80 [ 1798.670592][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1798.670610][ T30] ? __switch_to+0x7b4/0x1120 [ 1798.670628][ T30] ? __pfx_kthread+0x10/0x10 [ 1798.670644][ T30] ret_from_fork_asm+0x1a/0x30 [ 1798.670673][ T30] [ 1798.675012][ T30] Kernel Offset: disabled