last executing test programs: 5m7.980038712s ago: executing program 32 (id=566): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010008506000000000000240000000000", @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 2m46.70955527s ago: executing program 3 (id=1197): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYBLOB="0200"/15, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x4}}], 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m46.599435697s ago: executing program 3 (id=1198): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "38c51b41a7e3a4"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001180)={r1, 0x0, "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", "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"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000280)={0x6, {0x1, 0xffffffffffffd7c9, 0x7b, 0x7, 0x1}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) get_robust_list(r2, 0x0, &(0x7f0000000240)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r4, 0x1) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/address_bits', 0x0, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setitimer(0x1, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) (fail_nth: 2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2m46.071286504s ago: executing program 3 (id=1200): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000040c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = getpid() r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf25250000000e000164657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, r6, 0x8, 0x3, 'syz0\x00', &(0x7f0000000300)=['/dev/vim2m\x00', '-\x14[&$\x00', '%@\x00', '{-[+-\x00', '\x00', '*\x00', '/dev/vim2m\x00', '/dev/comedi0\x00'], 0x35}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r8 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r8, 0x1000) r9 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r9, &(0x7f0000000000)={0x2020}, 0x96) close(r8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) 2m46.070807524s ago: executing program 1 (id=1201): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020202000900030073797a31000000000900010073797a30000000"], 0x54}, 0x1, 0x40030000000000}, 0x0) 2m45.880583023s ago: executing program 1 (id=1202): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) r2 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r3, &(0x7f00000001c0), 0x8) madvise(&(0x7f0000119000/0x11000)=nil, 0x11000, 0x9) 2m45.755657934s ago: executing program 1 (id=1204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x388, 0x40004) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x388, 0x40004) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe2$9p(0x0, 0x84880) syz_open_dev$sndctrl(0x0, 0x1, 0x0) (async) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) chroot(0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) 2m43.792957928s ago: executing program 3 (id=1205): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002340)={&(0x7f0000002300)=[{0x1000, 0x2000, 0xa6, &(0x7f0000002180)="712dd5fe8db13a64a5fd51a5420a5b6534230188f4875d3133dbb66b4ab3746934ee6c82967a6254cec840363ec2f8269d92e9980762acbd09334c5070679004caff536fa1dc0cc8fb22e0af380365d22dc8ca12a7b56c3d219e623cc0b96e77cddb2374c83faf6a3d05dfe3e2ab7f9a192da2ecb6078681d8842c2db174a428d2a1e8664ca942329ac26a2f809183e269ec40fb87ddc43b1c2c2f48e9f27bfb0419e365dd58"}, {0xc0fe, 0x1000, 0x5b, &(0x7f00000000c0)="f00bbdf28dc9c6d9ade1bf058d3c7fcb79c7b99958f27e93629ffc0a5194c5d4ac765680a29983b76725fb4a6842e75bb3bbd1b51a42cb41decbdc5082c85c4f8a503ec2315b5385137399b0b07314984880ec716f9893596840a1"}, {0x4, 0x1000, 0xa0, &(0x7f0000002240)="aade606da9dc2650c0b4a105758dadc1848ca0a14156ee58d49e4d2e9ff0b75043976a956ea01d4efe76172438dd0fae8583654ed9701efa387d4194be5f6f564c8f90e236e10c3271880d0410cbc87201cf008ba2df613feb19046593e55cdb232ac850b5b98b7f21b125af14e7353d01cda3e1a752e237c03642a570766f1c780f89ab325e2c7268359862c9003138f6ec4fd4a7380314661e318cc6223bf7"}], 0x3}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x4e3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "38c51b41a7e3a4"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001180)={r2, 0x0, "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", "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"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000280)={0x6, {0x1, 0xffffffffffffd7c9, 0x7b, 0x7, 0x1}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r5, 0x107, 0x12, 0x0, &(0x7f0000000200)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r6, 0x0, 0x20000000) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r7 = getpid() sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 2m43.508106888s ago: executing program 1 (id=1207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xd, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) 2m42.59257917s ago: executing program 1 (id=1209): ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000000040)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000019080)=0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}], {0x95, 0x0, 0x60}}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) 2m41.595600633s ago: executing program 3 (id=1212): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x1000000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 2m41.359399012s ago: executing program 3 (id=1215): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) rename(0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) 2m39.556689583s ago: executing program 1 (id=1218): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) 2m35.676042636s ago: executing program 33 (id=1168): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) rename(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 2m25.628973629s ago: executing program 34 (id=1215): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) rename(0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) 2m24.188303734s ago: executing program 35 (id=1218): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) 2m5.52396303s ago: executing program 6 (id=1315): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x2c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x86}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x4, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000840000008400000002000000010006000085010400001000000003000000000000000100000000000000050000000d00000000000000080000000900000002000000030000000d0000000100000004000000020000000000000003000000000000000000000c0500000000000000d400000900000000000000000000000900000000000000000000000a0200000000007a09abab7bc2b466a4169a5ac5ad54291d39dba7aea2e43cf8616e2d5f5f09ba69d7ea9d91dbff5c6cb9074eed1397d0ccc3642d3dc7118c5dda54428ca292804ce30c758f5cafaa14e744b999b7846ac3bceca2b6c29996f8a3f343570d9493a54400600e572b50aa0a94d948a30c070d775ba9b9"], 0x0, 0x9e, 0x0, 0x3}, 0x28) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x2c020400) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x2, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xcc09, 0x400, 0x3, 0x285}, &(0x7f00000000c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) read$qrtrtun(r5, 0x0, 0x0) io_uring_enter(r7, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x0, 0x1}) io_uring_enter(r2, 0x351e, 0x483, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x103980, 0x80, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m2.121531259s ago: executing program 6 (id=1331): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000080)={@private, @local}, &(0x7f00000000c0)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x21, 0x1, 0x6) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r2, @ANYBLOB="00000000001f0000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m0.995411432s ago: executing program 6 (id=1336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="dbffffff00000000"]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000140)={0xd5, 0x0, 0x21}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1m59.32578342s ago: executing program 6 (id=1342): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, 0x0, 0x40, 0x0) unshare(0x2c020400) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100000000000020000800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, 0x0, 0x48810) r7 = socket(0x2, 0x2, 0x1) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e20, 0xde, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd55b}, 0x1c) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 1m58.343932476s ago: executing program 6 (id=1347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3000000}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x10c}}, 0x0) 1m58.214537254s ago: executing program 6 (id=1349): socket$rxrpc(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m42.840901552s ago: executing program 36 (id=1349): socket$rxrpc(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m27.086618415s ago: executing program 5 (id=1477): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000120005ff00000400040000000000044a", @ANYRES32=0x0, @ANYBLOB="452000000021040008002e0003000000"], 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/bus/input/handlers\x00', 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) ptrace$getenv(0x4201, r0, 0x4, &(0x7f00000000c0)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x10) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000180)={{0x4, 0x7, 0x97, 0x4}, 'syz1\x00', 0x2b}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f00000007c0)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) syz_open_procfs$namespace(r7, &(0x7f0000000280)='ns/time\x00') 1m24.564675869s ago: executing program 5 (id=1487): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000030400088058010c8054000b80080009000000fffe"], 0x184}}, 0x0) 1m24.257183805s ago: executing program 5 (id=1490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000500)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x84) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x20, 0x0) read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000008400)="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", 0x2000, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000040000000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a0000000000fff500000000", 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000000)) unshare(0x400) 1m23.08889725s ago: executing program 5 (id=1493): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020202000900030073797a31000000000900"], 0x54}, 0x1, 0x40030000000000}, 0x0) 1m22.873175651s ago: executing program 5 (id=1496): syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) socket$igmp(0x2, 0x3, 0x2) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r2, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) 1m20.659648581s ago: executing program 5 (id=1507): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c, 0xf4}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4fa7, 0x102, 0x2, 0x10000421, 0x1, 0xcc7, 0x7ffffffe, 0xa, 0x5, 0x3ff, 0x0, 0x300, 0x81, 0x1, 0x9, 0x1, 0x40400, 0x8, 0x4, 0x1fe, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3f, 0x8, 0x4, 0x7ffffff]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWALK(r7, &(0x7f0000000400)={0x16, 0x6f, 0x1, {0x1, [{0xa2, 0x3, 0x3}]}}, 0x16) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000ff7f000000000000000900001822010000062064251af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x82300, 0x2}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m9.710844994s ago: executing program 7 (id=1529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(r2, 0x0, &(0x7f0000000300)=""/131, 0x83) syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000801, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000000c0)={0x9, {{0x2, 0x4e22, @local}}, 0x0, 0x38}, 0x90) 1m8.679549713s ago: executing program 7 (id=1534): setregid(0xee01, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x7, 0x408, 0x6, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc01, 0x8) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x5e1, 0x8c1}) socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) setsockopt$inet6_int(r4, 0x29, 0x4, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f0000000340)={0x2, "c5c2a91e002b1b80000006e8ff0010ff0c00000400", 0x3, 0x5, 0x2, 0x10003, 0x88504, 0x4}) 1m8.439373764s ago: executing program 7 (id=1535): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000040c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = getpid() r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf25250000000e000164657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, r6, 0x8, 0x3, 'syz0\x00', &(0x7f0000000300)=['/dev/vim2m\x00', '-\x14[&$\x00', '%@\x00', '{-[+-\x00', '\x00', '*\x00', '/dev/vim2m\x00', '/dev/comedi0\x00'], 0x35}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r8 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r8, 0x1000) r9 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r9, &(0x7f0000000000)={0x2020}, 0x96) close(r8) read$FUSE(r9, &(0x7f0000002080)={0x2020}, 0x2020) 1m6.943258072s ago: executing program 7 (id=1537): syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={0x0, 0x0, 0x8}, 0x18) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r2, 0x708, 0x2) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x7, &(0x7f0000000000)={0x17, "90f5000000f3c9f1bd0d000000000000000000000000000000000700"}}) syz_clone3(&(0x7f00000195c0)={0x2000000, &(0x7f0000019400), &(0x7f0000019440), &(0x7f0000019480), {0x1c}, &(0x7f00000194c0)=""/189, 0xbd, &(0x7f0000032680)=""/4096, &(0x7f0000019580)=[0x0, 0x0, 0x0], 0x3}, 0x58) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth0_macvtap\x00'}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000019180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x20000080) 1m6.406023445s ago: executing program 7 (id=1539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x22003, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x510}, 0x1, 0x0, 0x0, 0x5}, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) mount$overlay(0x0, 0x0, 0x0, 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x401}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f00000002c0)=0x108005, 0x4) lsetxattr$security_selinux(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000280)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c, 0x3) openat$cgroup_pressure(r1, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1, 0x0, 0x0, 0xff9e}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi5\x00', 0x642840, 0x0) 1m6.145373705s ago: executing program 7 (id=1541): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2f, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m5.607753628s ago: executing program 37 (id=1507): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c, 0xf4}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4fa7, 0x102, 0x2, 0x10000421, 0x1, 0xcc7, 0x7ffffffe, 0xa, 0x5, 0x3ff, 0x0, 0x300, 0x81, 0x1, 0x9, 0x1, 0x40400, 0x8, 0x4, 0x1fe, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3f, 0x8, 0x4, 0x7ffffff]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWALK(r7, &(0x7f0000000400)={0x16, 0x6f, 0x1, {0x1, [{0xa2, 0x3, 0x3}]}}, 0x16) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000ff7f000000000000000900001822010000062064251af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x82300, 0x2}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 50.472930905s ago: executing program 38 (id=1541): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2f, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 14.39925142s ago: executing program 8 (id=1735): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000003c0)={0x20, 0x0, 0x3, "358249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYRES8], 0x3c}}, 0x4004041) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100003040000ae85d95c000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x4000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r7) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fcdbdf25150000000c0014002b2c5d2da5212d4006001400246e000008000100", @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40058) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 12.799092444s ago: executing program 0 (id=1747): chdir(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x4, r2, 0x10, 0x1, @in={0x2, 0x4e23, @loopback}}}, 0xa0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x1}, 0x1c) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x3, 0x12) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x50, r4, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44800) r6 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r6, &(0x7f0000000280), 0xff9d) fcntl$addseals(r6, 0x409, 0x8) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff) r8 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x7, r8, 0x0, 0x0, 'syz1\x00', 0x0}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 10.114736889s ago: executing program 0 (id=1749): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9da, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xe9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x40, 0x23, 0x79, {0x79, 0x21, "1f23296a1d3e5dbc2ba6e65fb82e92c12c9fd79f8704524987d58180b2908fda6816a0d42da7725e7d66b5e59721f539358337249977df77e7ecb27cff1f7f7a574ccd3c0899cccf07d3e0b7ac66d3858de3ba6672725767c81df74353121cf62dadc94e71d363a316a989e808bccd9c63f1c9f012d4b2"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000200)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x5, "eb36fd81"}, @global=@item_012={0x0, 0x1, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "8912c7cf"}, @global=@item_012={0x1, 0x1, 0x4, "d8"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0x622}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0x15, 0xef, "b55924a7825a66161f13fe0d2a4af8f21cfac717efcf097a9d1ade4283b8ae35ac43e00b5747ecba83578e80567de369c4e0c08ecc6834b1052033adb2fb90db2f6202865b70a7a3424be0b4a7dd449ab7ef3760bfa52e183ef19832278648baef44bfb9cd028edf7b2c951b1a1f5d279f4c4df1784e4cfeec7d97b46f18bdc82d17ee172ebcac86bfc7863d9ea60263cb867b1b6c965e2b3d8bc685dc0c9edfa0a50ed729a49fb3ed5bdb00e460a3a0bde36c0c04e602f1b76f7d7b14454fabe9d39df18dbab4924b22088424a82fbe98c98c836f3fde1791a4b9d6691db79c74c19da41f0ffc9c09d7df26345a9c"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x98}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0x7f, "b094783a69f5759df293f83021b1d38fc7d63580cc897dca1f88ea36e66d328d7f1b25687d799c5ebdd21460d6fde72a96b9867abd0c41cabd00b4c08db88b962cab93b835609b4c2c3e79324b67331edcb5e875d76f7a9429e87768ee995c967456a1316e23756fe25ba5a498bbf1eea0eca2239737134efa568a0a5f7c8b"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0xf8}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x40, 0x23, 0x79, {0x79, 0x21, "1f23296a1d3e5dbc2ba6e65fb82e92c12c9fd79f8704524987d58180b2908fda6816a0d42da7725e7d66b5e59721f539358337249977df77e7ecb27cff1f7f7a574ccd3c0899cccf07d3e0b7ac66d3858de3ba6672725767c81df74353121cf62dadc94e71d363a316a989e808bccd9c63f1c9f012d4b2"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000200)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x5, "eb36fd81"}, @global=@item_012={0x0, 0x1, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "8912c7cf"}, @global=@item_012={0x1, 0x1, 0x4, "d8"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0x622}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0x15, 0xef, "b55924a7825a66161f13fe0d2a4af8f21cfac717efcf097a9d1ade4283b8ae35ac43e00b5747ecba83578e80567de369c4e0c08ecc6834b1052033adb2fb90db2f6202865b70a7a3424be0b4a7dd449ab7ef3760bfa52e183ef19832278648baef44bfb9cd028edf7b2c951b1a1f5d279f4c4df1784e4cfeec7d97b46f18bdc82d17ee172ebcac86bfc7863d9ea60263cb867b1b6c965e2b3d8bc685dc0c9edfa0a50ed729a49fb3ed5bdb00e460a3a0bde36c0c04e602f1b76f7d7b14454fabe9d39df18dbab4924b22088424a82fbe98c98c836f3fde1791a4b9d6691db79c74c19da41f0ffc9c09d7df26345a9c"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x98}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0x7f, "b094783a69f5759df293f83021b1d38fc7d63580cc897dca1f88ea36e66d328d7f1b25687d799c5ebdd21460d6fde72a96b9867abd0c41cabd00b4c08db88b962cab93b835609b4c2c3e79324b67331edcb5e875d76f7a9429e87768ee995c967456a1316e23756fe25ba5a498bbf1eea0eca2239737134efa568a0a5f7c8b"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0xf8}}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0x400, 0x0) 9.949586393s ago: executing program 8 (id=1751): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10}, 0x18) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) 7.005161402s ago: executing program 8 (id=1756): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x40000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 6.787025204s ago: executing program 0 (id=1757): r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x40080, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000004200400140014007465616d5f736c6176655f300000000008"], 0x3c}, 0x1, 0x0, 0x0, 0x200048c0}, 0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (rerun: 64) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000100)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000280)={&(0x7f0000ca9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x2}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000640)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}, 0x4008080) (rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010403010902240001000000000904ed0002ff5d810009050303000000050009058a03", @ANYBLOB="a4"], 0x0) 6.707607026s ago: executing program 2 (id=1758): r0 = gettid() r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0xf7fffff9, 0x25dfdbfb, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x35004}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000050) (fail_nth: 4) 6.310610002s ago: executing program 8 (id=1759): chdir(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x4, r2, 0x10, 0x1, @in={0x2, 0x4e23, @loopback}}}, 0xa0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x1}, 0x1c) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x3, 0x12) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x50, r4, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44800) r6 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r6, &(0x7f0000000280), 0xff9d) fcntl$addseals(r6, 0x409, 0x8) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff) r8 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x7, r8, 0x0, 0x0, 'syz1\x00', 0x0}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 5.976155253s ago: executing program 2 (id=1760): socket(0x6, 0x800, 0x3) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x48, {0x4, 0x0, 0x3, 0x0, 0x8, 0x1}}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e24, @rand_addr=0xdffefc13}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0x0, 0x6, 0xa}}) capset(0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64=r4], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), 0x0}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a310000000044030000090a030000000000000009000700000008000a40000000000900020073797a32000000030900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8e8020980a00002"], 0x38c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r8, &(0x7f00000001c0)=""/180, 0xb4) 4.579406812s ago: executing program 0 (id=1765): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xb0ff}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 3.633468651s ago: executing program 0 (id=1769): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) (rerun: 32) syz_open_dev$vbi(&(0x7f00000006c0), 0x3, 0x2) (async) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) (async) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async, rerun: 64) r1 = syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) syz_open_procfs(r1, &(0x7f0000000040)='numa_maps\x00') 3.495839723s ago: executing program 0 (id=1770): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd87, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000)=0x700000000000000, 0x2}], 0x1, 0x0, 0x0, 0x1) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003002a0009000900060084800300020002000500020000000000cf5bf9d6e41448fdbc36d361aceaf4"], 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) setgroups(0x0, 0x0) mkdir(0x0, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd2c, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 2.952558409s ago: executing program 9 (id=1772): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e000000200000000f0ffffffffffff00fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000100000144000500200106"], 0xf8}}, 0x4000800) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000300)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000193c0)={0x0, r1}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2.831852316s ago: executing program 4 (id=1773): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221f00000083090000000b11200000b37488dffc"], 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) r1 = socket(0x400000010, 0x3, 0x0) write(r1, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f78617474722c756e616d653d5e2c6e6f657874656e642c64656275671d3078303030303030303030303030303030362c6163636573733d757365722c63616368653d6c6f6f7365"]) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') (async) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000003000000a64200000c000000000000", @ANYRES16], 0x50) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) (async) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) write$char_usb(r5, &(0x7f0000000040)="e2", 0xff0f) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3}) (async, rerun: 32) sendto$inet(r3, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f0000000140)}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x3625, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x0, 0xa0002f5}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x4a, "ba6fe7915b1018d1f27f1a46c42a4dd2601d922db4e762372254451601504aa68db3c741e5c478d3834b86739d098176fc4205ee16d76ac1c884e085311df9f04b9abf48c03c7d706689"}, &(0x7f00000003c0)=0x52) (async) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) 2.825542193s ago: executing program 2 (id=1774): socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0xfffffffffffffffd) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=0x1, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5, 0x31, &(0x7f0000000100)=""/49, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0xe, 0xb}, {0x3, 0x4, 0x0, 0x3}], 0x10, 0x2}, 0x94) socket$key(0xf, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f00003d3000/0x4000)=nil, 0x4000, 0x2, 0x12, r6, 0x95b53000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.591476923s ago: executing program 8 (id=1775): syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r1, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) 2.591042842s ago: executing program 4 (id=1776): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xc40) prlimit64(0x0, 0x7, &(0x7f0000000200)={0xae6d, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400003000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x4dad8083416c68b7}, 0x8814) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESHEX=r1, @ANYRESOCT=r3], 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x8061) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(r5, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, 0x0, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf}}) 2.283853252s ago: executing program 9 (id=1777): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) read(r0, 0x0, 0xfffffea1) ioctl(0xffffffffffffffff, 0xfffff000, &(0x7f0000000000)) 2.19521508s ago: executing program 9 (id=1778): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0xf500, 0x5e, 0x200000000000, 0x100000000000006}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x2c}}, 0x0) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000000)={[{@upperdir, 0x5c}]}) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x1a1003) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0xfffff001, 0x1, 0x2019, 0x5, 0x6, 0x4, 0x2, 0x3}}) chdir(&(0x7f0000000280)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1e, 0x4, 0x4, 0x2, 0x920a, 0xffffffffffffffff, 0x5}, 0x50) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r4, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0) 2.151620861s ago: executing program 4 (id=1779): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xb0ff}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 2.036316589s ago: executing program 4 (id=1780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x4) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3cdde400f93b6aec, 0xc}, {0xc, 0x6}, {0xf, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x2004c050) (async) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{&(0x7f0000000340)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="c3d9e87d001320405887b81db678e8bbc73e9de8d24b0a393fe789b369d1dffccbf71703bd638e666d5c0678c67857d1832544ae319a58348ca357bd3c5b2e708a129cd57ded30d40fa220affd5ea1d6677866d3de8c9f0587c1d21ee2708c01deab74d8092d49b7b2488cfaa0d3e00fe5649097fe9f31658a5fbbe95d55a34c55a7470572011cfa8f997f4348f5dd1ea820ae401e4b5dc599d57af264ae0b9f8bfa34bc74eac6e95b7deea2e1a549fd19ccd3fdc88ec9eefa5c3ab1f7763ce94028044f", 0xc4}, {&(0x7f0000000480)="b28346fda43b797b4b5e9c44bd8a03c4f75f55369b57034739a58f9b86ad8acb0e9b9f65de3e94be5a9fa6adcb943ef0fcf4ad9434e777234f86615f557106f3407abff2881bfc4b4988562631a11229185ce996117492169adca95642e9def386e1b55195eb119ddfdcda91ba75b62aa743fdcf8837957d98367be38bd078e2cbdb623994aa54a3560e68213491ad1792ba5bef4b0b31b981742ea28288ac2b580adfdc1571bd97d72299e49e784ad719476fee4014065dc7bc01db0531a6af1d81dfaeb47c7c4a92e0f4de009f410afa56b4cb", 0xd4}, {&(0x7f0000000580)="ed469dee87608c05bd48be30ff62672426d45a78909cfb558415282ab718f11693faad103f4599878f02492734eb956ec70f2c2bac14da84097847c44a880b2960729d1e3be32024ce857f96c61cbb08abd7e356d1c6d55bff5abd569b9da797239b149dc91cfc06d5d6ccf0cecc028e69c9f6d4a7366e3988a55c28c103db4bed25daab949d94870064ffa4de3c0424cd92c2ec15a664bb217af3b9847034b64f31d43e05765eaa9cf6a9b6a6eeed905c38be82f9dff831ed32642f771b1c1a19672ff7e52247b1ee6f197378a5c4f4ed80c0111774ce93e56b3f949246e651ba62cf399ca10206b045754de7b5b86bd7e0ed00b00d9f8adb", 0xf9}, {&(0x7f0000000780)="9deb10aaecd5a47cca5ceed015199d7764c94379d055be03c165ec2b0a440a914fe2d2f326057fcf5099ca450c365db52457ecd225785e3da83ee5cbed19610510924038bb1db774311e16f77f9812c708927ee94708924c5f5a2e7dea675bfa882acbc7a837d2181346b09b445ad7abf97c43f1953c67e89b91aac6f4d03306a1c6433e77a9f1fb23777d43ec0cec5accfd7d56974cc11f681fa1587f5fb93640363f4c5e72215d72c33130cabc1a5898c304f310efd8810999b54ea790a43eeb8d6511dfe29a1dd86ae6eb7168f257b892176764a2be56", 0xd8}], 0x4, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x63}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x48}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000b40)=[{0xfffffffffffffffe}, {&(0x7f0000000900)="adf44245d51e4a35040e5cd08b80858256b69ff96d473fb401fa3dc6b15b090562d0748cc370fafcfa448461", 0x2c}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000000940)="0aad4348113d706a39cbf14cbebac12a9e9cb07ce775c0beade2241cf287563cba65a8f69052c27b817e71695104fc0f91843af9d7111e45d703daaba993b9f085460832c3ec718310a54e6f61e9f931aa4034f280", 0x55}, {&(0x7f00000009c0)="7cf4da6f43654e6326a69077535da03cacbd92a8388c6c9904fc8a86c41012d63cd551bf9c4cec6d67abcd14b13e45a787b04d3f0a58a3de5686d2381356236689a059080be375ff6c0a3ed261de9881865cd89234696bd9091c84b276e7b1c1fc9596911616b0d8a1a2ebe090803610638524a8428551eadc04349a4b67cc5d7780ced7d7602b9f9e9f4bb2d25d9ac97dc6690a73736d5c369364e77da381c22c9b2485a86845ae84b80337dcbd6e550f00eb175c9d6a6fbc6cf420ec8734793f472975868fd3379c0212f78b19e1344bb2c7b1584f273b41b12602daf4e2fff6651efcc47e9a04", 0xe8}, {&(0x7f0000000ac0)="d81788b7ec046eefa70205cec18a7d26e9835d0041a2d0089324741f36f415040ab764d62d79cb57b5bdaac4cb4c6c32cee595", 0x33}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000000b00)="6f156fd035e093f75db608b38f403bddd45e274a7b67fef624b665bb4beddcd2c25123cb", 0x24}], 0x8, &(0x7f0000001380)=[@ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x24, 0x0, [{0x6, 0x8, "2620dd7c6870"}, {0x7, 0x6, "6c3d14ab"}, {0x1, 0x10, "c7cf29af3d0e3d91d560d1bc3788"}]}, @timestamp={0x44, 0x1c, 0xeb, 0x0, 0x8, [0x60, 0xfff, 0x9, 0xd11, 0x74bf, 0x7]}, @ssrr={0x89, 0xb, 0x1b, [@remote, @empty]}, @rr={0x7, 0xb, 0xff, [@broadcast, @private=0xa010101]}, @ssrr={0x89, 0xb, 0xa8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @local}}}], 0x98}}, {{&(0x7f0000000c80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000cc0)="bc6ee6e46ba72247c0b26572caf9e3146d6bec0e742afb95678c349306092130ccf957c49cb7240dbd33bfa674b28b2a57c5e766e20cb2048c9d375c2ec1f2e81da457706e87fdbd7c9781018d7ed16b14c6d99dc169801fd3199bec6b067ee4b89d27f587524eb293bb06824fe722a82268502decd2b24aa11ec1c929f8c55d0ac2a51cfab8db52b024ecfb68d1b04780fb3c235abbdc28bf952e5580d135afee", 0xa1}, {&(0x7f0000000d80)="cf16edcd53448b8fbd944162dca169d8c658a9cbdeb98b5bafc56693debc1fbf24e59556f392d7aeff4654740a57299ba12955dfac1bee917545c5aebdfcd45b28df272a0931f26936fad1542571144ace7c08983efb94a552d67093659391b186", 0x61}, {&(0x7f0000000e00)="a1161f2287fe7d41422d57616507adaca9426ee9b0aca701ee9381714e00aa91021c3edab5b103d833fa4d1281fd03bbf30068899f8dcb3cd848d5871528073b33072270574d57aabad89d370c1e71542d3c92552f541fc0fcc0a4de446fa8428a382ea5f779445725a292bae3b87f590af2edeadce92dfa316164538064f6424460ac73d2b274968b2f32ba8bcbeebce5a881a3031c61f1835ecf9b4aa4374427b5b9e5ba3b1c228bc1b131859afc879bda2f52aba19f8d722c2b6c6d51dd26f1ff9608c3206270f4ad332d409022a9012a1fd60d59f3a13bda80d9d9b066e7b50cedaac8fed9", 0xe7}, {&(0x7f0000000f00)="4e66648c4b3d548d80f6acdf29f0795f5e963aa7fe06abefca5cae5828aa824e0be8da3b16947d1819034bc6dd90c3c4f00cabafdc726141630a86fc3a2d2c4e6f87338ec49e46", 0x47}, {&(0x7f0000000f80)="0e96f771a70f1cf3b332f367ec4b656cc506cd8d1f49c84c65c285f3913ddd2fef1318a0bd08de2f65310792ae5d4f12698d2ce8cf180940050fcebecb34ae18aa11517c672e7107c53c8cc998629c681384c019c7465f336983df7cbdda34c59b923ae29fa14278886b5367aa0f21d58875b85cfc9104cbc40a5dc3a224ec3820d5c0b3b63884d34c9043a25d7e39ce4ac1f5c25a173f209c7f45b3c8c000897d6dab6f3d78e5059e6a398e00"/183, 0xb7}, {&(0x7f0000001040)="d8267ce3626d7bfeadc70deaa91e7d51599f82df1c3e8aed420692e23825efe472dcc0374a7a2114eb0666a20e2fce6f91092655c619499f3ae8e8ec5f9236008f888e4fd2d94f4baaf72a01a998675ab8ced038d8cfb2dfeb1de3bc5aeb420e65cb1bde6dd2745b42b7099b23de4ca53406d9a415183c5a703141700223108bdc0e74767b5e09f7145720ad5a1d19b3d1072c0d9981e6b2f1de0b9e8ee92c74c2b83cf55338ef68a4ebcd95a1dc6e676e9d8b02ec14", 0xb6}, {&(0x7f0000001100)="556ad71aacbfb3ddb6a7e6bcd963419584365c3a4000ad0d4e428b68999e31904577526d99f0032d5782308c396766c97c225916db7c3562e0dff1269b72751f099d665455f9d4d8c87c4f912aa409b023d26c134980ccfaffdc36c91ca997213988be1c2eb97ad9f57ab131c8e029", 0x6f}, {&(0x7f0000003840)="bd4ea576cc0b64dc563f0d9a8484e0b39acf4fbff1199334462bd4723d4175c368c539429de845957bf99bd72969b43f79680d24b2980d5b502f85afdbd0657c41529593401411bae53a1c2b9c05c5061483fd196239b11ff2a761df19eb33f5317dadd2edfe3d50d780015a442440a590348dabde521876c6c4a718dd2399ed286494b6b9940c81bc923ee742ddae5d253bca29d329f4901c40c94417a088f628e0f8dc25e5e54855430ceccccec16d0675448006bcdc0d0ec017b24942e1c1df81dfa0b640b9211b9228a17beb8995eaa0760ee6b8425d9dcc5b610e0759ec3c0897de823f2c2f265eb2ff2c7f687fcefe171445d658c37e5bb555c96ce1ed3ff7a002060a1c97d7306b972aeb70778dd58dc6124c5017a416409718f2b87a7dc8b56ba2c5e7815bced49312b1dfedc1445bef1ac46528f8e9759a85f1779ee897e55f7d521aec788eba72f1e16347b4674179051dd449055f5c3017a26c671544526dab6c6006e50cf1001902d32055c3b3ae62768c8c23b1d04c043b4f424f289be764ac22504f95778704fa07554714a6a21c85afebef8f069a2afae7498103876f5dda0398a6357c24b549e2f9f94bf184b834595bc3b34d030024ee6fc7238ef8520ee9e9a68fa6caa3274d8050c9ae53636f7caf745382914567b81f36c60fdd7d83434549b2f4e7d063723106e9c74abb38e613ecffc2f395b1b6c4ba0fffc4219319e32b18f9e6e50fe4345bd8e8a42f5d8d4c231198d160a60dca8e6852c329f32c423d4089b5b6218f1eced2c289446b4137128572de4336844b010ac427ea1aa09bf214920dbbbf7a35ba17515f3872cccc1e406fe3eda61421965add0e846af92b8913fae0b5f7560636640343863ea0a732ba7e2f428fc53be68e065196a70b0786be89f9b6b87bc8aa5d4c4e807107727fd4445358697748a7dca7e7b72e4095250bbaa3a0ef00fbcd7e1de9a90ff9f5400714960fe93f1376a61dde82f68431dcc40e912840c97ea355cf6c4a6a84afae4ea883ee3c1576e4e47f67e770f03942b33bc46ff3c5de5a00f0e2077114608513f60c88595a9a11ffc6ed30a1803b57f9eb8fc1571ebc3aff900581fea128a443ca4228c7d1c4b63a799ee4e97ea8df4cb214bdea3cf76a0476387c6b50c90e99a197bc100ecb2766b144c9709b6796c5849f5dabb6534a191e09fd42dd1ff7a76a5c7a9dacb92c5b1a576a540aa4fd89d799cf5e1da1f72321f05ad5819e42c9aa12d26d71d3cfecd0a6086ec0fb75064d91e1217d877f417e2015fbd003f0fb590eea2d57645f8fbccaa09a5e7f0139473634bcb02bb0e956ad048c7845f5813bd1450c57163f1febc8550a16df0132082e98e20995d72a557f540e82a7e3ac1113cd778219a73f3c34186cbbd44525d6ac7ef5915d8a8b879ced975be0c8494d65bf563d46e2e2704ebd0a0aba960137ac556a5253e502837e218afc44efa4fdebb3b0c6e5e0c8f7e3136be748b84a0d6d6a7647218d648edc0d6098f3fc62ddf87b750972be7ae1f4bbbfb09a7c038172fb2e4115b5eeb16d7daf84886658b81a501470716349de409d17260937f08d506b5ed1089114ff49b5f7a12db5955b3840dc28ac0a49e74ae48717bfdecb7e6133618c40a69176141249a5d380e7e590c8666d7e924468683bb697c218830914ce6463127bb0eff53d6c677dc0701d34dc49dd46868df8da17feb80158ef62f1c99b138e7a43637207f6b1499980614bbd5e1eef24dd7ceb27601609666ca6c7cc483f2d76f48ebda520df3ba98a792f15f53e393931723fcb2d2c80eb83ecee55c0520ac5ffcc1a5db7ff4ac2aa974795957ec9fa03e00675a5bcd808fe36252c7d2f6a3ab035414d981a969760cefcaa7fed2b060dcc764cfe9adaa637274cec40546373af5de865cf2035ad730f09cc56c953147bdce10efeebdb8152e77a716ed1aa70f44f5f3f3f3fca4c0133b6173d2387420ab3e33233a0817a67aa18227cd493b0818163b53450265880633b71422db3a657d63f85aeb13b980586433b7eb9b897b04d66aa19d58e6983df83b17b1d906d96085a4947106407980aed92faead46aa87e53af989dfaca0301355e3a6fe27a4aea6ce0c7f22650e711426c3ae69e31a2fe91e7f7640705bf7b91f523ad9fbd33be2e5704a0e174f0c0adebc521ee2390de77cc43732102275431faacd6922ab1c822247496017dcad830299e2a55f34f833514f74c9f851911049daf96d6aa77e44eae086c60bc6e0c4cf13bdd77b68eaab90da7de6223f49ce6a329873646e3fd1af2708ab637e51f65731ea9ae5698fafd6b0a42db807e3e9a2b3854b17367d763ca2787f7145a6e9e2d5e5eb0ecd0e7c144cb269ce35860258e2bee930d91753d2366cecd29d9f25e6ab357e3a257c453ef093618945120d757abef1d0175f1eb7ed0220c7ff7d34be18383afa56cdfbd52eb75c6fa62d04bc9bba6f41d51f262dac6587cc649643596eb7b1674f05ffdb6869b730e3577d9a8dab878e29a0a39487fb97d8a0ed449f658352950ad28fc9bbe82605292259cf6c90ca87c1c6af6758444cc1164181ecd0e3a50d58d23d018d6bd3081de15968f488e4e336f3baa952b01b30b2ce1dd4ddddc0ccb38358a6f8d4316ea359d21422f7517a929cd75e73a28c9e60fe2f1a6f5344c3612fd5bd1f2bb4c61ce2cb4faf2e8a4b2379e6fa327e34bd9b6a46a185aa38f61a8a924fce5bd1f58e356191e1a8a65beb84633bfdea6cdd30aa54c66e38f62436a7adb0d439b7c4039e3beb433076c5e7f39d351dbe5b86a7ccb91452856601151d5302abd9a6f0db3aeea88050bc5b9585012f1f26cf02da47bf2c79e4f56769fb4a8972bedb1fc2984d677c49f216e4a2fe4ab67c233789578b358629250293000b5531d0e23006a9186c414e8a3bf59077243ac2389f85c7fb897e19e7650fa701a8e127f0fcf129a77583df1b49bc0fa04980afc0d17932182d075e6c0f1320123a1f932077287bdd600fa7d9a3f89678c8e0f6eb806abe389e7631e98a788a09ab85a5c2bf13b41dc9d7c875efdff3422cf68f3381739ff56532548dbf4356cb367f0c76964eaba421aae314d0745f7572d6945798d64304854fb9241f3687254db9d41c9c16ff14875ed19d54540856d4b97f9d2615f9e57dd5ee25d05587da5dd94b66537a917f6ca9adac9c7e8b5a058b2b5afc97c52db49e7b5f796a11994de178e50488dca091eb6325ce8ebdcd80e66f8168aef87ee89cfa74279339e1feee17f5684996ccf5f477f94c51a1c7e8675298e1ad4b5730947c38e109f16595db9721debc9a849733dd6bcc8435d4ae1e78e455833483063d45465a5fbbdb08a337d0b428f6cca5c88edc95afc6c49a35b76bd1546d1b42e3623ce476886024b116fc14b2b48da53f30c9ab5117e161ffc276d900a590febd8cd5dec21cf4cf88d9875172ccf8e9ee2747b4b30df02de68a3d39546c80820f6bbfc863ccf66e4717f30af2b867277ca123b6ac1dd598e046727d9a361973da93a50e7439c565f06e35ba18e149949c5039494a4c820ccc1df901cdb132f516d293c71700db18515d20e93209570f6d34c74afdcd5d97384e4625aedda30ecae1875c763c6ea1ba9e339506eae3c22903c06c1b206f0fad39aead2502bb2f8b5a891e59b4b463c20e43641c9be3e78140d7de760b2074bc9a9a0c267bc6fe8c2944c5b7cebf576ce988b6fdc09c0f502f6c2b0d5e069184c66f6a1bb42c42defd916fa5ab1bf66b17e7727a7cd96c817d9e2274edac9af6e9a681dcbe4dfbbf1695c95252c0d289e0bf6802a81b24cdc8d691de6256757f59bb00839afa00385a265ae4c5381fb1170165a521cc8029d91fb86edc95e75532a85db92b56dd69563b9c30b5b95b4ea2f59621b80ff14c50837501c656cbf533ffb95a0e468be91a1f7c901582f11942a447bd71e2edd82bb318168c73b1acb8f6072c368ea6c881540dc2130b077b44ea6d24b364f1e06835eb64cd01281157c4599eec58c9a04ee425e3e57e485b039d193e946f54dd27e6f799a3ba3f9f2d0aeb394a508252e0ca31e01f5901fda1af22e8c70da261b1f7d383855f95c6ee5237af7cb93909c456ff54ff4ce4a98a3eb8f0e8aa20cad839f3117d937349040994bdc1bd7de8ca5e9823da73783218c8631c515571c92ad319ff36f0df4b7e4632ac85ae486a0423264db97b09bd500de3f75040c29f14ffc611a96f7dd72ce855d2b074bff256bd8630cf0146fe51476b1236c0861e23018cb41217a92db57c063bb2a6bd7e222f4591f685df958c95628642f834a320ded27a9033798b567bf8a43df3e25997f426d51cfacac99fb3e8bf936e0b47ec37f01b97bbfb5dedc274933e373f958576ba152a3301965701ed3ad880f529e9983e6275f24a5644155ada7189863760ef0e0864cc0b9cb0063cf49049bdc72a3bb80f3da6815043d74df08bd5d883f90e6e1ff2270a33fa735912933ee24cca20622fb40eea2e582753bbbc08358b43e693a7c5e165819c782620a1a94ebeb098c493445f3012dc14eeded35fd1ab1df09ae8be8e6db8c425340348850e77c63f2074444affc02cca199823a31fb02074a5713d9fca95be9f62d2ac2cf62d80892263dd69f830a4e3242950228faca3fc53df84e49199ed1d7eae46d7747644b40db7f87c0529408d290d7053309ec97bb397b2bff4808ccc112a60ce1dbb694062f36b04400d71fd6d141660d761838868a5c4f2fa9e5383f42c933f8380190a78706bf6284586005bfb81646a1f39563843f5671b8d0a8bc2ccbd5f61b1ea89059a8c1668c482b732738337024f1b27fddb1a4511d63aa0fc01657db640c9d4732b111a4862084402457b5cef2120f01457adfc59fdbb6165f82b00d56d724b7047520570929c77a16071240c3f78f288e3fc565cd1b1fefda5ec85c19392f174203854554c0b0bd4a0cc718ec2cec5842fc138f479fed5caf242547de7fa13961304b0e8de9f534d34801a05b08c28ad0cd755ac010907ff857ed1fbaa8fcdfb8ad054201fe02fca045c9f4188997af1c722f23955273484794e32e2458e9f9d6d0720872178e29ed19f10b07478ef8121f4b202a144dd0fa3d4ac8f0a73004c8abd7e10a00a59bfb6d340ada5bf6eac7f063b8ba4daf886aee3b6079afe0bd0c8876ef26208f32000c0afa909a6015e228546e008787b76c5e19e8efe771b33958705a30fa8af443a4895134bb773e9ad6e22a09f63f58eeac67076c8c95f628a59f8529e13163bd781a138465c7053e5036d9230a8d97c31aa3eeb266b30f1c68a7da6a0a90fff897bb519baa20101664742984fcf641e67efaebe58f320f5482eab574ca15291770a77dfc1ce8dbb6bf47a427546b583feedded8c65950cbf15c17687825e7d6d2e5507d199b1ab6ba193e1cf445142302895b1707b7c9ef361212c2561f40ccb82c5df302ca3400dafcd1b645c0dbb54b0e954e40fd9b436e9bfcf2a78478f66fc6644922f6c6efc16f5f080dcd88f8068e57c6f259bd1694fb0b54dc31f3f606f21444d116b1a393888bff8f2e1a2d90dede5b025a1904c936d55451f5e58f9d36b8f00286efb10888719406839cdbd769cc253c563ff44593866836afcfe1004f308fb02ef1a357f165855d29d5e2f936e36322cf621adffb6c2224f7db4cff78bc7e065e590c0c1bac53d141a51155073205d38f153c22809fa4a093d1a999c4dedfef491788a33478a912be075acc77efe5420d4ec", 0x1000}], 0x8, &(0x7f0000001200)=[@ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0x2, [{@loopback, 0x40}]}, @lsrr={0x83, 0xb, 0x25, [@loopback, @private=0xa010102]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x70}}], 0x3, 0x1) (async) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (rerun: 64) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) r8 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@void, @val={0x3, 0x4, 0x1, 0x6, 0x9, 0x1a}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={0xfe, 0x80, '\x00', 0x2e}, @random="82f694faf567", @ipv4={'\x00', '\xff\xff', @local}}}, 0x3e) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000080)='syz1\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r8, 0x5422, 0x0) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) accept$inet(0xffffffffffffffff, 0x0, 0x0) (async) unshare(0x24020400) (async) bpf$MAP_CREATE_CONST_STR(0x200000000000000, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1f, 0x80, 0x1, 0x0, '\x00', 0x0, r9, 0x0, 0x1}, 0x48) (async) read(r7, &(0x7f0000000180)=""/183, 0xb7) 1.578026417s ago: executing program 8 (id=1781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x1, 0x0) getpid() r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000580)={0x8, @pix={0x0, 0x5, 0x4f424752, 0x8, 0x1, 0xcb, 0xb, 0x1000, 0x1, 0x8, 0x2, 0x4}}) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x1) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000100), 0x9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x5b39, &(0x7f0000000140)={0x0, 0xec5c, 0x10000, 0x3, 0x89}, &(0x7f0000000400), &(0x7f0000000200)) (async) syz_io_uring_setup(0x5b39, &(0x7f0000000140)={0x0, 0xec5c, 0x10000, 0x3, 0x89}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000240)=0xfffffffc, 0x0, 0x4) setrlimit(0xd, &(0x7f00000000c0)={0x1, 0x4}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/cpu_byteorder', 0x0, 0x1a2) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/cpu_byteorder', 0x0, 0x1a2) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000000000)={'fscrypt:', @auto=[0x3a, 0x66, 0x63, 0x35, 0x66, 0x39, 0x62, 0x36, 0x31, 0x31, 0x61, 0x36, 0x62, 0x61, 0x38, 0x32]}, 0x0, 0x0, 0xfffffffffffffffe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r7, 0x89f0, &(0x7f0000000100)={0x3, 0xfbc, 0x0, 0x401, 0x7, "bb40af0000f800004000"}) r8 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001600)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x1d, 0x1c, "fee8a2ab78fc600d9683dda1af1ea09de2b7fb0a0300000018000000caffe4e2000300", "2809e8dbe10871bd3c6d53060000000000b420a9c8d80c00000300000000000000003b0000008099907f4b00000000000000d92d9c2f00", "90be8b1c551240000031852b172300", [0x1000000000000001, 0x40000000000000]}}) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x1000, 0x6, 0x13, 0x0, "0c449f9069584bd7896acc94537bb3d1e1ce3cda422f8ef8d863bc3a8a03e9a61cdbdfdda13e4328ceeda87aa3ec552d3160b65c097552749cc74fd2aff66adc", "c9dc81b7e58abb1b5c50a539c87c778099ca9cbe6bcbbf3b12ff0c6f6e424e7d", [0x7, 0x401]}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44003}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a0104dc2c0000000000000a0000030900010073797a3100000000080005400000000d0c00104000000000000000050800074000000029540000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000280003802400008061ff03400000000218000b8014000180090001006c6173740000000004000280140000001100010000000000000000000300000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a0104dc2c0000000000000a0000030900010073797a3100000000080005400000000d0c00104000000000000000050800074000000029540000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000280003802400008061ff03400000000218000b8014000180090001006c6173740000000004000280140000001100010000000000000000000300000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.076238606s ago: executing program 2 (id=1782): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50881fc31100010800"/20, @ANYBLOB="4d2f7acb03222229dcbf8fb1d62423fa43ed13ef3c388a1f7761cca0b8639c8dcf68c0cae5feb943572f86579bef826c0ea06805898d7b8de95987b9635ec41ee8c0358aba9e99b23a2a3648b0bd7bc86e0cd6cd1917503499487119db732bb87c4734881bb9d451c844ce43e58bbc4ae121eb6613138ce840a6614c12f597a3de4be8c0dcb4d4474612d75993ab9d451241daa450be3f", @ANYBLOB="000000000000000018041680140001801000020004000000d60e00000300009cc6bf63a71971ef3e"], 0x40}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400b00, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400b00, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x9801, 0x4e8dc768) (async) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x9801, 0x4e8dc768) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, r4, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) write$tun(r3, &(0x7f0000000500)={@val={0x0, 0x18}, @void, @mpls={[{0x9}, {0xffffe}, {0x7f, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8}, {0x6, 0x0, 0x1}], @ipv4=@tcp={{0x2d, 0x4, 0x2, 0x6, 0xf0, 0x66, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010100, @loopback, {[@timestamp_addr={0x44, 0x24, 0x98, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x8}, {@broadcast, 0x4}, {@private=0xa010102, 0x1}, {@multicast2, 0x2}]}, @cipso={0x86, 0x5c, 0x0, [{0x5, 0x8, "5b6f9f94f915"}, {0x8f511eeb8eb43410, 0x5, "8186c5"}, {0x2, 0xa, "e8807de846149093"}, {0x0, 0x5, "6236ed"}, {0x1, 0x12, "0da75d245eae7c80f650fc66b2acb83b"}, {0x0, 0x4, "28b5"}, {0x7, 0x9, "9a1abbf81b27ea"}, {0x0, 0x11, "09f9d54ffb974c3574b9149fae36d3"}, {0x5, 0x3, "e2"}, {0x2, 0x7, "225fc7080a"}]}, @ssrr={0x89, 0x1f, 0x4e, [@dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010102, @empty, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}, {{0x4e22, 0x4e21, r4, 0x41424344, 0x0, 0x0, 0xf, 0x2, 0x3, 0x0, 0x4, {[@sack={0x5, 0x22, [0xfff, 0xfff, 0x8001, 0x28f0, 0x80000001, 0xda, 0x8, 0x549]}, @generic={0x4, 0x4, "d7ed"}]}}}}}}, 0x10c) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000440)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) (async) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x1f}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r10, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf038}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3e000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fb}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8004) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x97, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x97, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) 731.175664ms ago: executing program 4 (id=1783): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) connect$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async, rerun: 32) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000004000000040000001200000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000004aa3386d1ec9a36722630a8375cca88e7baac446dcba0b0e622c0d1927c32c1e36d7b2260372698528634b1705f081d881aabb79b9f0e6d04ee4e388523382fc2bfae90e848190067f6a4cf3e5b08c291ca5acc55ee94048320b0f978ef6c077094dfb2b9cf23a857c9a6b5d72cbe474ae4dbedd341b451fce24eddd700da2cec6b7bc931eda96cdd40100008029d92f00"/188], 0x50) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) (async) set_mempolicy(0x4000, &(0x7f0000000300)=0x8, 0x1e7) (async, rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async, rerun: 64) capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x3ea, 0xffffffff, 0x40}) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) (async) mknod$loop(&(0x7f0000000140)='./bus\x00', 0x2000, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2000, 0x103) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) (async) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0xfffffffd) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0xfff) (async) listen(r4, 0x1) 491.572077ms ago: executing program 4 (id=1784): r0 = socket(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x7ff, 0x683) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x1b8, 0x24, 0x800, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xf}, {0x0, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xe83}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x4, 0xfff7, 0x2, 0x2, 0x5, 0x7, 0x5}}, {0xe, 0x2, [0x81, 0x6, 0x2, 0x1, 0x5e]}}, {{0x1c, 0x1, {0xa, 0x0, 0xfffc, 0xf8a, 0x2, 0x101, 0x8, 0x6}}, {0x10, 0x2, [0x6, 0x3, 0x8, 0xddc, 0xa2e, 0x7928]}}]}, @qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x1, 0x401, 0x2, 0x1, 0x3, 0x0, 0x3}}, {0xa, 0x2, [0x8, 0x4, 0x9]}}, {{0x1c, 0x1, {0x4, 0xfd, 0x1, 0xcf, 0x2, 0x522a, 0x1, 0x5}}, {0xe, 0x2, [0xf98a, 0x2, 0x2, 0x9, 0x4]}}, {{0x1c, 0x1, {0xff, 0x7, 0x7, 0xfff, 0x1, 0x9e7a, 0x6, 0x2}}, {0x8, 0x2, [0x10, 0x401]}}, {{0x1c, 0x1, {0x9, 0x8, 0x5, 0xcc39, 0x0, 0x9, 0x0, 0x4}}, {0xc, 0x2, [0x3, 0x227, 0x9, 0x55d]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xe, 0x5, 0xc70, 0x1, 0x8, 0x3, 0x2}}, {0x8, 0x2, [0x2, 0xfffa]}}]}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x8, 0x0, 0x7}}}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x9}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x5}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xa65}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES64=r3], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x800004, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0x7, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x80000009]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'vxcan1\x00', 0x2000}) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f00000001c0)) ioctl$KVM_RUN(r11, 0xae80, 0x0) 404.755388ms ago: executing program 2 (id=1785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0xff030000}, 0x0) 244.874588ms ago: executing program 9 (id=1786): memfd_secret(0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) r0 = socket$l2tp6(0xa, 0x2, 0x73) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="e2ffffffffff00000000000086dd6fd3b6af00001100fe800000000000000000000000000010ff020000000000000000000000000001eb0cf361b17f704fc3fb91a6bc7b74c2e3bdb3a4b1396286370b2a5441a344391c574076adb2493f0df2d46b01a126"], 0x0) (async) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="ec", 0x1}], 0x1, &(0x7f0000000300)=ANY=[], 0xb0}, 0x0, 0x8400, 0x1}) (async) r4 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbe15, 0x10, 0x3, 0x30e}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r4, 0x47bc, 0x0, 0x21, 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={r7, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast1}, 0xc) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9d", 0xb}], 0x1}}], 0x1, 0x20008000) (async) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) (async) shutdown(r1, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400003, 0x0, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 187.696382ms ago: executing program 2 (id=1787): openat$nullb(0xffffffffffffff9c, 0x0, 0x200200, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) capset(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) close_range(r0, r5, 0x0) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vcsn(&(0x7f0000000140), 0x8, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x80, 0x4e, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0xa, 0x1a}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x1, 0xb, {0xa, 0x25, 0x25, 0xfffffff7, 0xd, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xa9, 0x81, 0x2, {0xa, 0x25, 0x25, 0x3, 0x1, 0x9}}}}}}}}]}}, 0x0) 49.908002ms ago: executing program 9 (id=1788): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c8010000100001000000000000000000fc02000000000000000000000000000080fffdff0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1c8}}, 0x0) 0s ago: executing program 9 (id=1789): r0 = socket$key(0xf, 0x3, 0x2) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) (async, rerun: 32) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x281}, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) io_uring_enter(0xffffffffffffffff, 0x6b0, 0x4c1, 0x2, 0x0, 0x41) r7 = timerfd_create(0x0, 0x0) (async) syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) (async) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000240)={0x0, 0x6109, 0x400, 0x0, 0xe3}, &(0x7f0000000100), &(0x7f00000000c0)) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x8, 0x0, @fd=r7, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) (async) timerfd_settime(r7, 0x2, &(0x7f00000005c0), 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x2004002c}, 0x20000000) (async) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) kernel console output (not intermixed with test programs): _bulk_msg() failed=-22 [ 382.854473][ T9] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 382.894506][ T9] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 382.914603][ T9] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 383.021112][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'. [ 383.518759][T10588] overlayfs: empty lowerdir [ 384.277340][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 385.318319][ T9] usb 6-1: USB disconnect, device number 10 [ 385.501379][T10607] loop2: detected capacity change from 0 to 7 [ 385.564233][ T9638] Dev loop2: unable to read RDB block 7 [ 385.588041][ T9638] loop2: unable to read partition table [ 385.610936][ T9638] loop2: partition table beyond EOD, truncated [ 385.631735][T10607] Dev loop2: unable to read RDB block 7 [ 385.689455][T10607] loop2: unable to read partition table [ 385.863733][T10607] loop2: partition table beyond EOD, truncated [ 385.884510][T10607] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 387.545090][T10625] overlayfs: empty lowerdir [ 388.001429][T10613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 388.007797][T10613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 388.013788][T10613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 388.020762][T10613] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 388.026947][T10613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 388.239006][T10632] overlayfs: empty lowerdir [ 388.452852][ T5130] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.475699][ T5130] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.484097][ T5130] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.492980][ T5130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.500654][ T5130] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.581016][T10637] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1234'. [ 389.421413][T10631] chnl_net:caif_netlink_parms(): no params data found [ 389.504838][T10631] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.512344][T10631] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.519890][T10631] bridge_slave_0: entered allmulticast mode [ 389.527557][T10631] bridge_slave_0: entered promiscuous mode [ 389.535943][T10631] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.543116][T10631] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.550937][T10631] bridge_slave_1: entered allmulticast mode [ 389.558554][T10631] bridge_slave_1: entered promiscuous mode [ 389.589544][T10631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.601385][T10631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.635718][T10631] team0: Port device team_slave_0 added [ 389.643837][T10631] team0: Port device team_slave_1 added [ 389.670462][T10631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.679614][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.707365][T10631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.721045][T10631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.728649][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.755147][T10631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.886016][T10631] hsr_slave_0: entered promiscuous mode [ 389.893511][T10631] hsr_slave_1: entered promiscuous mode [ 389.902260][T10631] debugfs: 'hsr0' already exists in 'hsr' [ 389.908831][T10631] Cannot create hsr debugfs directory [ 390.084637][ T5810] Bluetooth: hci3: command 0x0405 tx timeout [ 390.090701][ T5130] Bluetooth: hci4: command 0x0405 tx timeout [ 390.096776][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 390.103987][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 390.345295][T10631] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 390.355489][T10631] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 390.366027][T10631] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 390.375063][T10631] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 390.425639][T10631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.442014][T10631] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.453949][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.461077][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.477116][ T6920] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.484246][ T6920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.565554][ T5810] Bluetooth: hci5: command tx timeout [ 390.612454][T10631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.737225][T10663] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 390.747133][T10663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 390.755923][T10663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 390.757419][T10631] veth0_vlan: entered promiscuous mode [ 390.764648][T10663] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 390.773567][T10663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 390.780828][T10663] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 390.786968][T10663] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 390.787515][T10631] veth1_vlan: entered promiscuous mode [ 390.800671][T10663] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 390.823363][T10631] veth0_macvtap: entered promiscuous mode [ 390.838112][T10631] veth1_macvtap: entered promiscuous mode [ 390.858030][T10631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.870184][T10631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.913989][ T86] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.935934][ T86] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.950718][ T86] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.992342][ T86] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.015182][T10683] overlayfs: empty lowerdir [ 391.189762][T10684] loop8: detected capacity change from 0 to 7 [ 391.223585][T10684] Dev loop8: unable to read RDB block 7 [ 391.229856][T10684] loop8: unable to read partition table [ 391.241968][T10684] loop8: partition table beyond EOD, truncated [ 391.317147][T10684] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 391.403828][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.425188][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.440030][T10687] rdma_rxe: rxe_newlink: failed to add syz_tun [ 391.454252][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.463538][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.197668][ T29] audit: type=1326 audit(1773890897.961:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10686 comm="syz.0.1244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bb179c799 code=0x0 [ 392.443158][T10701] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1247'. [ 392.651138][T10706] misc userio: Invalid payload size [ 392.804771][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 392.808462][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 392.811302][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 392.822840][ T5130] Bluetooth: hci3: command 0x0405 tx timeout [ 392.846578][ T5810] Bluetooth: hci5: command 0x040f tx timeout [ 394.629746][T10732] overlayfs: empty lowerdir [ 395.033166][ T5810] Bluetooth: hci5: command 0x040f tx timeout [ 395.503886][T10740] binder: binder_mmap: 10736 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 395.578127][ T29] audit: type=1400 audit(1773890901.191:693): avc: denied { write } for pid=10738 comm="syz.5.1258" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 395.865443][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1259'. [ 396.016261][T10749] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1259'. [ 397.124487][ T5810] Bluetooth: hci5: command 0x040f tx timeout [ 397.295370][T10783] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 397.724401][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 397.874430][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 397.881674][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.927331][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 397.985474][ T10] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 398.002485][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.019842][ T10] usb 6-1: Product: syz [ 398.024040][ T10] usb 6-1: Manufacturer: syz [ 398.049062][ T10] usb 6-1: SerialNumber: syz [ 398.058502][ T10] usb 6-1: config 0 descriptor?? [ 398.318935][ T5130] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 398.350439][ T5130] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 398.359315][ T5130] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 398.359376][ T5864] usb 6-1: USB disconnect, device number 11 [ 398.377351][ T5130] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 398.388540][T10808] tipc: Started in network mode [ 398.394116][T10808] tipc: Node identity 0e000000000000000000000001, cluster identity 4711 [ 398.403156][ T5130] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 399.508847][ T5130] Bluetooth: hci5: command 0x040f tx timeout [ 399.889117][ T5810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 399.900381][ T5810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 399.915041][ T5810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 399.923733][ T5810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 399.932935][ T5810] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 400.081846][T10803] chnl_net:caif_netlink_parms(): no params data found [ 400.499920][ T5810] Bluetooth: hci6: command tx timeout [ 400.812166][T10803] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.832825][T10803] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.853715][T10803] bridge_slave_0: entered allmulticast mode [ 400.875476][T10803] bridge_slave_0: entered promiscuous mode [ 400.901970][T10803] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.042424][T10803] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.057567][T10803] bridge_slave_1: entered allmulticast mode [ 401.086032][T10803] bridge_slave_1: entered promiscuous mode [ 401.094999][ T29] audit: type=1400 audit(1773890906.861:694): avc: denied { audit_write } for pid=10846 comm="syz.0.1278" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 401.538567][ T5810] Bluetooth: hci5: command 0x040f tx timeout [ 402.005732][ T5810] Bluetooth: hci7: command tx timeout [ 402.564549][ T5810] Bluetooth: hci6: command tx timeout [ 402.957684][ T5810] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 403.108961][T10803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.120921][T10803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.185528][T10855] rdma_rxe: rxe_newlink: failed to add syz_tun [ 403.268344][T10803] team0: Port device team_slave_0 added [ 403.300421][T10803] team0: Port device team_slave_1 added [ 403.347596][T10803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.354680][T10803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.803340][T10803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.817442][T10803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.824775][T10803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.851654][T10803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.084853][ T5810] Bluetooth: hci7: command tx timeout [ 404.315152][T10803] hsr_slave_0: entered promiscuous mode [ 404.321737][T10803] hsr_slave_1: entered promiscuous mode [ 404.333505][T10803] debugfs: 'hsr0' already exists in 'hsr' [ 404.394455][T10803] Cannot create hsr debugfs directory [ 404.476976][ T29] audit: type=1326 audit(1773890910.241:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10854 comm="syz.0.1281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bb179c799 code=0x0 [ 404.556845][T10824] chnl_net:caif_netlink_parms(): no params data found [ 404.645526][ T5810] Bluetooth: hci6: command tx timeout [ 404.761426][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.776689][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.794029][T10824] bridge_slave_0: entered allmulticast mode [ 404.803038][T10824] bridge_slave_0: entered promiscuous mode [ 404.832290][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.840341][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.848605][T10824] bridge_slave_1: entered allmulticast mode [ 404.856397][T10824] bridge_slave_1: entered promiscuous mode [ 404.985835][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.213434][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.223366][T10883] : renamed from lo (while UP) [ 405.292387][T10803] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 405.339593][T10803] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 405.451644][T10824] team0: Port device team_slave_0 added [ 405.474491][T10803] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 405.484554][ T42] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 405.794645][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 406.205618][ T5810] Bluetooth: hci7: command tx timeout [ 406.573208][T10824] team0: Port device team_slave_1 added [ 406.590197][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.615275][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 406.634275][ T42] usb 1-1: New USB device found, idVendor=07c0, idProduct=1504, bcdDevice=30.22 [ 406.643677][T10803] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 406.687873][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.698773][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.725576][ T5810] Bluetooth: hci6: command tx timeout [ 406.731664][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.760745][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.774791][ T42] usb 1-1: config 0 descriptor?? [ 406.798623][ T42] iowarrior 1-1:0.0: no interrupt-out endpoint found [ 406.800298][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.814114][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.840548][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.040657][T10890] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 407.213894][T10824] hsr_slave_0: entered promiscuous mode [ 407.227702][T10824] hsr_slave_1: entered promiscuous mode [ 407.238215][T10824] debugfs: 'hsr0' already exists in 'hsr' [ 407.250414][T10824] Cannot create hsr debugfs directory [ 407.804473][T10894] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 407.815796][T10894] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 407.831311][T10894] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 407.851348][T10894] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 407.868847][T10894] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 407.882575][T10894] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 407.897809][T10894] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 407.911223][T10894] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 407.928636][T10894] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 407.949928][T10894] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 407.966715][T10894] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 407.990239][T10894] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 408.108132][ T5864] usb 1-1: USB disconnect, device number 29 [ 408.349250][T10803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.413827][T10803] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.425367][T10824] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 408.439665][T10824] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 408.455648][T10824] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 408.472624][T10824] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 408.483930][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.491141][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.506673][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.513828][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.586997][T10916] loop5: detected capacity change from 0 to 7 [ 408.618157][T10916] Dev loop5: unable to read RDB block 7 [ 408.624271][ T29] audit: type=1326 audit(1773890914.341:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e83d9c799 code=0x7ffc0000 [ 408.649095][T10916] loop5: AHDI p1 [ 408.655298][ T29] audit: type=1326 audit(1773890914.341:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9e83d9c799 code=0x7ffc0000 [ 408.678919][ T42] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 408.694838][T10916] loop5: partition table partially beyond EOD, truncated [ 408.763029][ T29] audit: type=1326 audit(1773890914.341:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e83d9c799 code=0x7ffc0000 [ 409.020612][T10923] binder: binder_mmap: 10920 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 409.288976][ T29] audit: type=1326 audit(1773890914.341:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e83d9c799 code=0x7ffc0000 [ 409.293929][ T42] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 409.312590][ T29] audit: type=1326 audit(1773890914.341:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e83d9c799 code=0x7ffc0000 [ 409.347102][ T42] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 409.374431][ T42] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 409.388892][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.403142][T10907] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 409.437243][ T42] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 409.454052][ T29] audit: type=1326 audit(1773890914.341:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9e83d9c799 code=0x7ffc0000 [ 409.486260][T10824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.548003][ T29] audit: type=1326 audit(1773890914.341:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e83d9c799 code=0x7ffc0000 [ 409.601498][T10824] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.624509][ T29] audit: type=1326 audit(1773890914.341:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f9e83d9c799 code=0x7ffc0000 [ 409.665368][ T6920] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.672498][ T6920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.716148][ T29] audit: type=1326 audit(1773890914.341:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e83d9c799 code=0x7ffc0000 [ 409.740294][ T29] audit: type=1326 audit(1773890914.341:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e83d9c799 code=0x7ffc0000 [ 409.789882][ T9] usb 1-1: USB disconnect, device number 30 [ 409.803594][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.810721][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.925776][ T5130] Bluetooth: hci2: command 0x0406 tx timeout [ 409.926169][ T5810] Bluetooth: hci1: command 0x0406 tx timeout [ 409.933216][ T5130] Bluetooth: hci6: command 0x0c1a tx timeout [ 409.949349][ T5818] Bluetooth: hci5: command 0x040f tx timeout [ 409.949725][ T5130] Bluetooth: hci3: command 0x0405 tx timeout [ 409.956654][ T5810] Bluetooth: hci4: command 0x0405 tx timeout [ 410.225588][ T5810] Bluetooth: hci7: command 0x0c1a tx timeout [ 411.139698][T10824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.162023][T10824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.272692][T10935] misc userio: Invalid payload size [ 411.580685][T10803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.688606][T10940] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 412.004942][ T5810] Bluetooth: hci6: command 0x0c1a tx timeout [ 412.244506][ T5810] Bluetooth: hci7: command 0x0c1a tx timeout [ 413.032761][T10824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.307264][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 413.476976][T10803] veth0_vlan: entered promiscuous mode [ 413.482639][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 413.498667][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 413.534738][T10803] veth1_vlan: entered promiscuous mode [ 413.543704][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 413.579733][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 413.589393][T10803] veth0_macvtap: entered promiscuous mode [ 413.599050][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.608914][T10803] veth1_macvtap: entered promiscuous mode [ 413.624631][ T24] usb 1-1: Product: syz [ 413.636481][ T24] usb 1-1: Manufacturer: syz [ 413.652999][ T24] usb 1-1: SerialNumber: syz [ 413.672956][T10803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.716277][T10976] overlayfs: empty lowerdir [ 413.730325][ T24] usb 1-1: config 0 descriptor?? [ 413.908645][T10803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.938725][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 414.026954][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 414.060841][ T1339] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.084403][ T5810] Bluetooth: hci6: command 0x0c1a tx timeout [ 414.125725][ T1339] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.139707][ T1339] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.154051][ T1339] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.251930][T10824] veth0_vlan: entered promiscuous mode [ 414.259241][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.270616][T10824] veth1_vlan: entered promiscuous mode [ 414.279964][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.326547][ T5810] Bluetooth: hci7: command 0x0c1a tx timeout [ 414.342694][T10824] veth0_macvtap: entered promiscuous mode [ 414.355653][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.365437][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.373408][T10824] veth1_macvtap: entered promiscuous mode [ 414.400118][T10824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.416654][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 414.416669][ T29] audit: type=1326 audit(1773890920.181:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410599c799 code=0x7ffc0000 [ 414.500955][T10824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.538236][ T1339] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.547330][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (6) [ 414.617808][ T29] audit: type=1326 audit(1773890920.181:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10966 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410599c799 code=0x7ffc0000 [ 414.692263][ T1339] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.709296][T10983] : entered promiscuous mode [ 414.782915][ T24] em28xx 1-1:0.0: Config register raw data: 0x21 [ 414.799924][ T24] em28xx 1-1:0.0: I2S Audio (1 sample rate(s)) [ 414.801596][ T1339] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.814390][ T24] em28xx 1-1:0.0: No AC97 audio processor [ 414.822122][ T29] audit: type=1400 audit(1773890920.441:747): avc: denied { mount } for pid=10982 comm="syz.6.1304" name="/" dev="rpc_pipefs" ino=31005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 414.868882][ T1339] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.036816][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.081372][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.541609][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.564401][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.528771][ T5864] usb 1-1: USB disconnect, device number 31 [ 417.981756][T10999] delete_channel: no stack [ 418.660611][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1316'. [ 418.952876][T11042] loop2: detected capacity change from 0 to 7 [ 418.963998][T11042] Dev loop2: unable to read RDB block 7 [ 419.065082][T11042] loop2: unable to read partition table [ 419.099371][T11042] loop2: partition table beyond EOD, truncated [ 419.221125][T11049] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 419.238765][T11042] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 419.972088][T11056] FAULT_INJECTION: forcing a failure. [ 419.972088][T11056] name failslab, interval 1, probability 0, space 0, times 0 [ 420.011034][T11049] bond1: entered promiscuous mode [ 420.034747][T11056] CPU: 1 UID: 0 PID: 11056 Comm: syz.7.1322 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.034769][T11056] Tainted: [L]=SOFTLOCKUP [ 420.034773][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 420.034779][T11056] Call Trace: [ 420.034783][T11056] [ 420.034787][T11056] dump_stack_lvl+0x100/0x190 [ 420.034809][T11056] should_fail_ex.cold+0x5/0xa [ 420.034823][T11056] should_failslab+0xc2/0x120 [ 420.034835][T11056] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 420.034851][T11056] ? __alloc_skb+0x140/0x710 [ 420.034867][T11056] __alloc_skb+0x140/0x710 [ 420.034878][T11056] ? __alloc_skb+0x5b7/0x710 [ 420.034890][T11056] ? __pfx___alloc_skb+0x10/0x10 [ 420.034907][T11056] netlink_alloc_large_skb+0x69/0x150 [ 420.034924][T11056] netlink_sendmsg+0x680/0xda0 [ 420.034942][T11056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.034957][T11056] ? PageHuge+0x170/0x180 [ 420.034976][T11056] ____sys_sendmsg+0x9e1/0xb70 [ 420.034992][T11056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.035010][T11056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.035033][T11056] ___sys_sendmsg+0x190/0x1e0 [ 420.035052][T11056] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.035085][T11056] __sys_sendmsg+0x170/0x220 [ 420.035099][T11056] ? __pfx___sys_sendmsg+0x10/0x10 [ 420.035121][T11056] do_syscall_64+0x106/0xf80 [ 420.035136][T11056] ? clear_bhb_loop+0x40/0x90 [ 420.035149][T11056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.035160][T11056] RIP: 0033:0x7f28f079c799 [ 420.035170][T11056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.035180][T11056] RSP: 002b:00007f28ee9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.035191][T11056] RAX: ffffffffffffffda RBX: 00007f28f0a15fa0 RCX: 00007f28f079c799 [ 420.035198][T11056] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 420.035205][T11056] RBP: 00007f28ee9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.035211][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.035217][T11056] R13: 00007f28f0a16038 R14: 00007f28f0a15fa0 R15: 00007ffe4eb56c48 [ 420.035231][T11056] [ 420.036698][T11049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.425469][T11066] overlayfs: empty lowerdir [ 420.723614][T11054] bond1: (slave bridge3): making interface the new active one [ 420.761350][T11054] bridge3: entered promiscuous mode [ 420.788836][T11054] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 420.929654][T11075] netlink: 'syz.7.1327': attribute type 1 has an invalid length. [ 421.234112][T11075] bond1: entered promiscuous mode [ 421.257508][T11075] bond1: entered allmulticast mode [ 421.277575][T11075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.963520][T11095] netlink: 'syz.8.1334': attribute type 3 has an invalid length. [ 422.073165][T11096] binder: binder_mmap: 11088 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 422.606019][T11084] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 422.612945][T11084] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 422.676874][T11084] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 422.725162][T11084] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 422.731235][T11084] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 422.758899][T11084] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 422.796324][T11084] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 423.400812][T11084] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 424.301146][T11108] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 424.345120][T11109] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 424.351302][T11109] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 424.358196][T11109] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 424.364262][T11109] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 424.370392][T11109] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 424.376929][T11109] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 424.383009][T11109] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 424.389477][T11109] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 424.611083][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1345'. [ 424.654614][ T5864] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 424.701285][T11130] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 425.067453][T11127] misc userio: Invalid payload size [ 425.375538][ T5864] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.403900][ T5864] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 425.434801][ T5864] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 425.450356][T11136] rdma_rxe: rxe_newlink: failed to add syz_tun [ 425.469994][ T5864] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 425.503990][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.553509][ T5864] hub 1-1:1.0: bad descriptor, ignoring hub [ 425.570148][ T5864] hub 1-1:1.0: probe with driver hub failed with error -5 [ 426.024178][T11154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.034389][T11154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.732467][ T5818] Bluetooth: hci7: command 0x0c1a tx timeout [ 426.732521][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 426.738538][ T5130] Bluetooth: hci3: command 0x0405 tx timeout [ 426.744541][ T5817] Bluetooth: hci4: command 0x0405 tx timeout [ 426.750593][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 426.756570][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 426.781199][ T5810] Bluetooth: hci6: command 0x0c1a tx timeout [ 426.951898][T11156] netlink: 'syz.8.1351': attribute type 6 has an invalid length. [ 426.963237][T10990] usb 1-1: USB disconnect, device number 32 [ 427.545521][T11168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11168 comm=syz.7.1356 [ 427.568008][ T29] audit: type=1400 audit(1773890933.301:748): avc: denied { name_bind } for pid=11167 comm="syz.7.1356" src=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 427.619024][ T29] audit: type=1400 audit(1773890933.301:749): avc: denied { getopt } for pid=11167 comm="syz.7.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 427.708624][ T29] audit: type=1400 audit(1773890933.431:750): avc: denied { getopt } for pid=11167 comm="syz.7.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 427.801774][ T29] audit: type=1326 audit(1773890933.561:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11135 comm="syz.5.1346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e83d9c799 code=0x0 [ 428.034057][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 428.050493][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 429.505196][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1366'. [ 429.875513][ T5931] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 430.146608][ T29] audit: type=1400 audit(1773890935.901:752): avc: denied { getopt } for pid=11210 comm="syz.7.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 430.187958][ T5931] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 430.235028][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 430.240034][ T29] audit: type=1400 audit(1773890936.001:753): avc: denied { shutdown } for pid=11214 comm="syz.7.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 430.283018][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 430.287345][T11206] syzkaller0: entered promiscuous mode [ 430.302655][T11206] syzkaller0: entered allmulticast mode [ 430.321197][ T5931] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 430.335451][T11206] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1369'. [ 430.336460][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.351031][T11206] snd_dummy snd_dummy.0: control 0:0:1073741824:syz0:-4 is already present [ 430.391428][ T5931] usb 6-1: Product: syz [ 430.494422][ T5931] usb 6-1: Manufacturer: syz [ 430.500019][ T5931] usb 6-1: SerialNumber: syz [ 430.512104][ T5931] usb 6-1: config 0 descriptor?? [ 430.521472][ T5931] iguanair 6-1:0.0: probe with driver iguanair failed with error -12 [ 431.364684][ T51] Bluetooth: hci7: command 0x0c1a tx timeout [ 431.734081][ T29] audit: type=1400 audit(1773890937.491:754): avc: denied { execute } for pid=11228 comm="syz.7.1377" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 431.827401][T11238] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1380'. [ 431.918473][T11240] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 431.937591][T11240] bond2: entered promiscuous mode [ 431.942875][T11240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.959002][T11240] bond2: (slave bridge4): making interface the new active one [ 431.968753][T11240] bridge4: entered promiscuous mode [ 431.982815][T11240] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 432.104422][ T5864] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 432.380613][ T5864] usb 9-1: Using ep0 maxpacket: 16 [ 432.384018][ T5931] usb 6-1: USB disconnect, device number 12 [ 432.434383][ T5921] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 432.545415][ T5864] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.566805][ T5864] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.595449][ T5864] usb 9-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 432.614414][ T5864] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.652377][ T5864] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 432.661713][ T5864] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 432.671772][ T5864] usb 9-1: Manufacturer: syz [ 432.697769][ T5864] usb 9-1: config 0 descriptor?? [ 432.714379][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 432.724532][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 432.768517][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 432.917243][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1380'. [ 432.978583][ T5921] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 433.000794][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.010955][ T5921] usb 1-1: Product: syz [ 433.015338][ T5921] usb 1-1: Manufacturer: syz [ 433.020686][ T5921] usb 1-1: SerialNumber: syz [ 433.043968][ T5864] usb 9-1: USB disconnect, device number 2 [ 433.044861][ T5921] usb 1-1: config 0 descriptor?? [ 433.077884][ T5921] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 433.087699][ T5921] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 433.234443][T10990] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 433.481173][T10990] usb 6-1: Using ep0 maxpacket: 16 [ 433.488081][T10990] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 433.500504][T10990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 433.513151][T10990] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 433.522750][T10990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.530860][T10990] usb 6-1: Product: syz [ 433.535268][T10990] usb 6-1: Manufacturer: syz [ 433.539858][T10990] usb 6-1: SerialNumber: syz [ 433.547057][T10990] usb 6-1: config 0 descriptor?? [ 433.891612][T10990] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 433.902366][ T5921] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 433.906097][T10990] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 433.908961][ T5921] em28xx 1-1:0.0: Config register raw data: 0xe2 [ 433.922858][ T5921] em28xx 1-1:0.0: I2S Audio (1 sample rate(s)) [ 433.930209][ T5921] em28xx 1-1:0.0: No AC97 audio processor [ 434.271577][ T5864] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 434.424449][ T5864] usb 9-1: Using ep0 maxpacket: 16 [ 434.432619][ T5864] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 434.447694][ T5864] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.460418][ T5864] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 434.469811][ T5864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.477925][ T5864] usb 9-1: Product: syz [ 434.482101][ T5864] usb 9-1: Manufacturer: syz [ 434.487588][ T5864] usb 9-1: SerialNumber: syz [ 434.495093][ T5864] usb 9-1: config 0 descriptor?? [ 434.504474][ T5864] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 434.513810][T10990] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 434.519846][ T5864] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 434.527926][T10990] em28xx 6-1:0.0: Config register raw data: 0xe2 [ 434.534251][T10990] em28xx 6-1:0.0: I2S Audio (1 sample rate(s)) [ 434.541240][T10990] em28xx 6-1:0.0: No AC97 audio processor [ 434.744075][ T10] usb 1-1: USB disconnect, device number 33 [ 435.105665][ T5864] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 435.112188][ T5864] em28xx 9-1:0.0: Config register raw data: 0xe2 [ 435.119279][ T5864] em28xx 9-1:0.0: I2S Audio (1 sample rate(s)) [ 435.126459][ T5864] em28xx 9-1:0.0: No AC97 audio processor [ 435.498297][T11274] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.507539][T11274] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.688808][T10990] usb 6-1: USB disconnect, device number 13 [ 435.893168][T11270] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 436.364870][ T42] usb 9-1: USB disconnect, device number 3 [ 436.510638][T11286] overlayfs: empty lowerdir [ 438.166660][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1403'. [ 438.175631][T11304] netlink: 580 bytes leftover after parsing attributes in process `syz.8.1403'. [ 438.360179][T11307] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1405'. [ 438.405227][T11309] rdma_rxe: rxe_newlink: failed to add syz_tun [ 438.668344][ T5864] IPVS: starting estimator thread 0... [ 438.728011][ T29] audit: type=1326 audit(1773890944.481:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.7.1404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28f079c799 code=0x0 [ 438.774912][T11315] IPVS: using max 55 ests per chain, 132000 per kthread [ 438.775405][T11317] comedi comedi3: comedi_config --init_data is deprecated [ 439.535007][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.541471][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.492893][ T42] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 440.493930][T11344] overlayfs: empty lowerdir [ 440.759353][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 440.839592][ T42] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 440.854692][ T42] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.869081][ T42] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.878632][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.889501][ T42] usb 1-1: Product: syz [ 440.893749][ T42] usb 1-1: Manufacturer: syz [ 440.914822][ T42] usb 1-1: SerialNumber: syz [ 441.079085][T11356] overlayfs: empty lowerdir [ 441.295871][T11334] smc: net device bond0 applied user defined pnetid SYZ2 [ 441.363222][T11358] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1412'. [ 441.405979][T11358] smc: removing net device bond0 with user defined pnetid SYZ2 [ 441.437119][T11334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.451076][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 441.467215][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 441.477115][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 441.486097][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 441.493635][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 441.626446][T11334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.626768][T11358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.647890][T11358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.657880][T11358] bond0 (unregistering): Released all slaves [ 442.131854][ T42] usb 1-1: 0:2 : does not exist [ 442.149792][ T42] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 442.168513][ T42] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 442.191072][ T42] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 442.217500][ T42] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 442.268625][ T42] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 443.000714][ T42] usb 1-1: USB disconnect, device number 34 [ 443.088933][T11366] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 443.088933][T11366] program syz.7.1422 not setting count and/or reply_len properly [ 443.414264][ T9638] udevd[9638]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.674715][ T42] IPVS: starting estimator thread 0... [ 443.704508][ T51] Bluetooth: hci8: command tx timeout [ 443.727172][ T29] audit: type=1326 audit(1773890949.491:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11374 comm="syz.8.1424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb81fd9c799 code=0x0 [ 443.757155][T11384] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 443.818822][T11392] IPVS: using max 47 ests per chain, 112800 per kthread [ 444.230711][T11375] rdma_rxe: rxe_newlink: failed to add syz_tun [ 444.341827][T11389] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 444.351522][T11389] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 444.358057][T11389] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 444.364299][T11389] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 444.374893][T11389] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 444.380911][T11389] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 444.412010][T11389] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 444.474773][T11389] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 444.520557][T11389] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 444.527552][T11389] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 444.571532][T11389] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 445.259491][T11359] chnl_net:caif_netlink_parms(): no params data found [ 445.543493][T11359] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.561842][T11359] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.582417][T11359] bridge_slave_0: entered allmulticast mode [ 445.598564][T11359] bridge_slave_0: entered promiscuous mode [ 445.614881][T11359] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.630997][T11359] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.647217][T11359] bridge_slave_1: entered allmulticast mode [ 445.663462][T11359] bridge_slave_1: entered promiscuous mode [ 445.836747][T11359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.851570][T11359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.916296][T11359] team0: Port device team_slave_0 added [ 445.935249][T11359] team0: Port device team_slave_1 added [ 445.995427][T11359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.012547][T11359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.079259][T11359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.105461][T11359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.123144][T11359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.149935][ T5864] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 446.187920][T11359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.287153][T11359] hsr_slave_0: entered promiscuous mode [ 446.295469][T11359] hsr_slave_1: entered promiscuous mode [ 446.301617][T11359] debugfs: 'hsr0' already exists in 'hsr' [ 446.329111][ T5864] usb 1-1: config 120 has an invalid interface number: 125 but max is 0 [ 446.348729][T11359] Cannot create hsr debugfs directory [ 446.354381][ T5864] usb 1-1: config 120 has no interface number 0 [ 446.374462][ T5864] usb 1-1: config 120 interface 125 altsetting 8 endpoint 0x3 has invalid maxpacket 33206, setting to 64 [ 446.406305][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 446.406509][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 446.412326][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 446.412351][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 446.412373][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 446.454465][ T5864] usb 1-1: config 120 interface 125 has no altsetting 0 [ 446.484470][ T5810] Bluetooth: hci7: command 0x0c1a tx timeout [ 446.484509][ T5821] Bluetooth: hci6: command 0x0c1a tx timeout [ 446.512750][ T5864] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 446.553727][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.561864][ T5864] usb 1-1: Product: syz [ 446.576157][ T5821] Bluetooth: hci8: command 0x040f tx timeout [ 446.582526][ T5864] usb 1-1: Manufacturer: syz [ 446.597566][ T5864] usb 1-1: SerialNumber: syz [ 446.625965][T11432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 446.743569][T11443] rdma_rxe: rxe_newlink: failed to add syz_tun [ 447.878263][ T5864] ums-usbat 1-1:120.125: USB Mass Storage device detected [ 447.972500][T11359] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 448.017242][T11359] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 448.025963][ T5864] usb 1-1: USB disconnect, device number 35 [ 448.037581][T11359] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 448.066626][T11359] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 448.115901][T11452] netlink: 'syz.8.1441': attribute type 15 has an invalid length. [ 448.123776][T11452] netlink: 666 bytes leftover after parsing attributes in process `syz.8.1441'. [ 448.230037][ T29] audit: type=1326 audit(1773890953.991:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11442 comm="syz.7.1439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28f079c799 code=0x0 [ 448.277376][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1442'. [ 448.341467][T11359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.417247][T11359] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.429176][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.436321][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.677283][ T5821] Bluetooth: hci8: command 0x040f tx timeout [ 448.775733][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.783060][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.927554][T11359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.979809][ T5921] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 448.990931][T11477] FAULT_INJECTION: forcing a failure. [ 448.990931][T11477] name failslab, interval 1, probability 0, space 0, times 0 [ 449.045697][ T5921] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 449.055384][T11477] CPU: 0 UID: 0 PID: 11477 Comm: syz.7.1447 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.055412][T11477] Tainted: [L]=SOFTLOCKUP [ 449.055417][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.055425][T11477] Call Trace: [ 449.055430][T11477] [ 449.055436][T11477] dump_stack_lvl+0x100/0x190 [ 449.055468][T11477] should_fail_ex.cold+0x5/0xa [ 449.055488][T11477] ? bpf_test_init.isra.0+0x88/0x100 [ 449.055507][T11477] should_failslab+0xc2/0x120 [ 449.055523][T11477] __kmalloc_noprof+0xe0/0x850 [ 449.055546][T11477] ? __lock_acquire+0x4a5/0x2630 [ 449.055565][T11477] bpf_test_init.isra.0+0x88/0x100 [ 449.055588][T11477] bpf_prog_test_run_xdp+0x57e/0x1670 [ 449.055618][T11477] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 449.055646][T11477] ? fput+0x79/0x100 [ 449.055665][T11477] ? __bpf_prog_get+0x97/0x2a0 [ 449.055695][T11477] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 449.055717][T11477] __sys_bpf+0x1725/0x4b90 [ 449.055740][T11477] ? __pfx___sys_bpf+0x10/0x10 [ 449.055755][T11477] ? proc_fail_nth_write+0x9f/0x220 [ 449.055780][T11477] ? find_held_lock+0x2b/0x80 [ 449.055806][T11477] ? find_held_lock+0x2b/0x80 [ 449.055827][T11477] ? ksys_write+0x190/0x250 [ 449.055858][T11477] ? __mutex_unlock_slowpath+0x15c/0x790 [ 449.055883][T11477] ? __fget_files+0x215/0x3d0 [ 449.055913][T11477] ? fput+0x79/0x100 [ 449.055932][T11477] ? ksys_write+0x1ac/0x250 [ 449.055955][T11477] ? __pfx_ksys_write+0x10/0x10 [ 449.055984][T11477] __x64_sys_bpf+0x7b/0xc0 [ 449.056000][T11477] ? lockdep_hardirqs_on+0x78/0x100 [ 449.056021][T11477] do_syscall_64+0x106/0xf80 [ 449.056041][T11477] ? clear_bhb_loop+0x40/0x90 [ 449.056062][T11477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.056079][T11477] RIP: 0033:0x7f28f079c799 [ 449.056094][T11477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.056109][T11477] RSP: 002b:00007f28ee9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 449.056124][T11477] RAX: ffffffffffffffda RBX: 00007f28f0a15fa0 RCX: 00007f28f079c799 [ 449.056135][T11477] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 449.056144][T11477] RBP: 00007f28ee9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 449.056154][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.056163][T11477] R13: 00007f28f0a16038 R14: 00007f28f0a15fa0 R15: 00007ffe4eb56c48 [ 449.056186][T11477] [ 450.160880][T11359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.452246][T11505] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1454'. [ 450.774728][ T5821] Bluetooth: hci8: command 0x040f tx timeout [ 451.385412][T11359] veth0_vlan: entered promiscuous mode [ 451.410777][T11359] veth1_vlan: entered promiscuous mode [ 451.483325][T11359] veth0_macvtap: entered promiscuous mode [ 451.506580][T11359] veth1_macvtap: entered promiscuous mode [ 451.548460][T11359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.886333][T11359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.181437][ T7024] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.191126][ T7024] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.204747][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.251793][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.401839][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.419326][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.450991][T11535] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1460'. [ 452.644827][T11542] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1462'. [ 452.654768][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1462'. [ 452.899810][ T5821] Bluetooth: hci8: command 0x040f tx timeout [ 452.999632][ T29] audit: type=1400 audit(1773890958.741:758): avc: denied { setopt } for pid=11536 comm="syz.0.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 453.151942][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.254634][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.261107][T11547] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1463'. [ 453.274587][ T29] audit: type=1400 audit(1773890959.021:759): avc: denied { mount } for pid=11545 comm="syz.5.1463" name="/" dev="hugetlbfs" ino=33997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 453.304675][T11543] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 453.713358][T11546] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 453.788108][ T29] audit: type=1400 audit(1773890959.551:760): avc: denied { unmount } for pid=8136 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 453.911409][T11553] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 453.975006][T11559] rdma_rxe: rxe_newlink: failed to add syz_tun [ 454.536018][T11554] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 454.551644][T11554] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 454.560150][T11568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1467'. [ 454.571052][T11554] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 454.579112][T11554] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 454.596563][T11554] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 454.645493][T11554] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 454.660158][T11554] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 454.666568][T11554] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 454.672650][T11554] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 454.833939][T11574] overlayfs: empty lowerdir [ 455.596156][T11583] misc userio: Invalid payload size [ 456.287326][ T29] audit: type=1326 audit(1773890961.811:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.1466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e83d9c799 code=0x0 [ 456.433032][T11596] loop5: detected capacity change from 0 to 7 [ 456.441518][ T9638] Dev loop5: unable to read RDB block 7 [ 456.447508][ T9638] loop5: AHDI p1 p2 p3 [ 456.451891][ T9638] loop5: partition table partially beyond EOD, truncated [ 456.461454][ T9638] loop5: p1 start 1818582900 is beyond EOD, truncated [ 456.468617][ T9638] loop5: p3 start 335544320 is beyond EOD, truncated [ 456.476709][T11596] Dev loop5: unable to read RDB block 7 [ 456.485714][T11596] loop5: AHDI p1 p2 p3 [ 456.495382][T11596] loop5: partition table partially beyond EOD, truncated [ 456.511027][T11596] loop5: p1 start 1818582900 is beyond EOD, truncated [ 456.530387][T11596] loop5: p3 start 335544320 is beyond EOD, truncated [ 456.565626][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 456.645229][ T5821] Bluetooth: hci3: command 0x0405 tx timeout [ 456.649654][ T5810] Bluetooth: hci4: command 0x0405 tx timeout [ 456.651317][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 456.745062][ T5821] Bluetooth: hci8: command 0x040f tx timeout [ 456.751080][ T5821] Bluetooth: hci7: command 0x0c1a tx timeout [ 456.754338][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 456.757435][ T5821] Bluetooth: hci5: command 0x040f tx timeout [ 457.876016][T11623] loop3: detected capacity change from 0 to 7 [ 458.014441][T11623] buffer_io_error: 28 callbacks suppressed [ 458.014456][T11623] Buffer I/O error on dev loop3, logical block 0, async page read [ 458.201917][T11623] Buffer I/O error on dev loop3, logical block 0, async page read [ 458.297842][T11623] Buffer I/O error on dev loop3, logical block 0, async page read [ 458.394489][T11623] Buffer I/O error on dev loop3, logical block 0, async page read [ 458.444520][T11623] Buffer I/O error on dev loop3, logical block 0, async page read [ 458.554423][T11623] Buffer I/O error on dev loop3, logical block 0, async page read [ 458.594906][T11623] Buffer I/O error on dev loop3, logical block 0, async page read [ 458.638551][T11623] ldm_validate_partition_table(): Disk read failed. [ 458.654943][T11623] Buffer I/O error on dev loop3, logical block 0, async page read [ 458.714785][T11623] Buffer I/O error on dev loop3, logical block 0, async page read [ 458.722651][T11623] Buffer I/O error on dev loop3, logical block 0, async page read [ 458.974779][T11623] Dev loop3: unable to read RDB block 0 [ 458.980423][T11623] loop3: unable to read partition table [ 458.986552][T11623] loop3: partition table beyond EOD, truncated [ 459.004152][T11623] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 459.255109][T11634] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1487'. [ 459.264215][T11634] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1487'. [ 459.264417][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 459.463025][T11641] rdma_rxe: rxe_newlink: failed to add syz_tun [ 459.513163][T11642] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 459.744374][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 459.751437][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 459.764964][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 459.784640][ T29] audit: type=1326 audit(1773890965.541:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.7.1488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28f079c799 code=0x0 [ 459.849583][ T5810] Bluetooth: hci8: command 0x040f tx timeout [ 459.886070][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 460.335131][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.343157][ T9] usb 1-1: Product: syz [ 460.348243][ T9] usb 1-1: Manufacturer: syz [ 460.352835][ T9] usb 1-1: SerialNumber: syz [ 460.365847][ T9] usb 1-1: config 0 descriptor?? [ 460.373420][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 460.391283][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 460.767543][T11655] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1493'. [ 461.076786][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 461.085281][ T9] em28xx 1-1:0.0: Config register raw data: 0xe2 [ 461.106722][ T9] em28xx 1-1:0.0: I2S Audio (1 sample rate(s)) [ 461.125622][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 462.041902][ T9] usb 1-1: USB disconnect, device number 36 [ 462.287638][T11685] misc userio: Invalid payload size [ 463.023900][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1504'. [ 463.070337][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1505'. [ 463.154476][T11700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1506'. [ 464.676863][T11714] overlayfs: empty lowerdir [ 465.887214][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'. [ 465.959173][T11729] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1514'. [ 466.054571][ T793] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 466.146021][T11734] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.1515'. [ 466.195062][ T793] usb 8-1: device descriptor read/64, error -71 [ 466.910915][T11734] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96 [ 467.003814][T11733] veth1: entered promiscuous mode [ 467.009267][T11733] macsec1: entered allmulticast mode [ 467.014596][T11733] veth1: entered allmulticast mode [ 467.045959][ T793] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 467.198549][T11749] misc userio: Invalid payload size [ 467.313460][ T793] usb 8-1: device descriptor read/64, error -71 [ 467.481825][ T793] usb usb8-port1: attempt power cycle [ 467.541837][T11758] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1519'. [ 467.762644][ T29] audit: type=1800 audit(1773890973.521:763): pid=11768 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.8.1521" name="/newroot/52/pids.events" dev="tmpfs" ino=287 res=0 errno=0 [ 467.883712][ T793] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 467.891349][ T5931] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 467.917264][ T793] usb 8-1: device descriptor read/8, error -71 [ 468.075952][ T5931] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 468.106457][ T5931] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 468.126609][ T5931] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 468.136496][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.154761][T11759] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 468.174409][ T793] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 468.190389][ T5931] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 468.198591][ T793] usb 8-1: device descriptor read/8, error -71 [ 468.331174][ T793] usb usb8-port1: unable to enumerate USB device [ 468.514196][ T9] usb 1-1: USB disconnect, device number 37 [ 468.756862][T11790] overlayfs: empty lowerdir [ 471.511797][T11803] loop2: detected capacity change from 0 to 7 [ 471.552723][T11803] Dev loop2: unable to read RDB block 7 [ 471.563094][T11803] loop2: AHDI p1 p2 p3 [ 471.571345][T11803] loop2: partition table partially beyond EOD, truncated [ 471.929915][T11814] sp0: Synchronizing with TNC [ 472.257048][ T29] audit: type=1400 audit(1773890977.521:764): avc: denied { create } for pid=11804 comm="syz.0.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 472.751886][ T29] audit: type=1400 audit(1773890977.521:765): avc: denied { bind } for pid=11804 comm="syz.0.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 473.729949][ T29] audit: type=1400 audit(1773890977.571:766): avc: denied { read } for pid=11804 comm="syz.0.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 473.810759][T11803] loop2: p1 start 1601398130 is beyond EOD, truncated [ 473.999204][T11803] loop2: p2 start 1702059890 is beyond EOD, truncated [ 474.694682][ T793] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 475.074134][ T5821] Bluetooth: hci7: unexpected event for opcode 0x2060 [ 475.123356][T11836] fuse: Bad value for 'fd' [ 475.149130][ T29] audit: type=1400 audit(1773890980.901:767): avc: denied { bind } for pid=11832 comm="syz.8.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 475.197055][ T793] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 475.211197][ T793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.245087][ T793] usb 1-1: config 0 has no interface number 0 [ 475.269972][ T793] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 475.394524][ T793] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 475.407566][ T793] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 475.419970][ T793] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 475.431420][ T793] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 475.443670][ T793] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 475.467000][ T793] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 475.476329][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.491201][ T793] usb 1-1: Product: syz [ 475.498930][ T793] usb 1-1: Manufacturer: syz [ 476.471406][ T793] usb 1-1: SerialNumber: syz [ 476.488419][ T793] usb 1-1: config 0 descriptor?? [ 476.504298][T11827] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 476.516074][ T793] microtek usb (rev 0.4.3): will this work? Command EP is not usually 12 [ 476.822305][ T793] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 476.833262][ T793] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 476.852610][ T793] scsi host1: microtekX6 [ 477.198990][ T1148] microtek usb (rev 0.4.3): error -90 submitting URB [ 477.244530][ T5165] microtek usb (rev 0.4.3): error -90 submitting URB [ 477.274428][ T5165] microtek usb (rev 0.4.3): error -90 submitting URB [ 477.319620][ T5165] microtek usb (rev 0.4.3): error -90 submitting URB [ 477.378396][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1539'. [ 477.472682][T11865] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1539'. [ 477.545851][ T5921] usb 1-1: USB disconnect, device number 38 [ 478.231999][T11888] hub 9-0:1.0: USB hub found [ 478.242234][T11888] hub 9-0:1.0: 1 port detected [ 478.314446][ T29] audit: type=1400 audit(1773890984.051:768): avc: denied { bind } for pid=11883 comm="syz.9.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 478.675987][ T29] audit: type=1400 audit(1773890984.071:769): avc: denied { listen } for pid=11883 comm="syz.9.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 478.834085][T11898] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 478.834085][T11898] program syz.0.1544 not setting count and/or reply_len properly [ 479.055166][T11898] netlink: 'syz.0.1544': attribute type 39 has an invalid length. [ 479.335471][T11905] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1547'. [ 479.461568][ T5810] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 479.479280][ T5810] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 479.489048][ T5810] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 479.498675][ T5810] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 479.506450][ T5810] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 479.816482][T11922] overlayfs: empty lowerdir [ 480.700093][ T29] audit: type=1400 audit(1773891242.458:770): avc: denied { bind } for pid=11931 comm="syz.8.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 480.748832][ T29] audit: type=1400 audit(1773891242.458:771): avc: denied { listen } for pid=11931 comm="syz.8.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 481.325252][T11943] sit1: entered allmulticast mode [ 481.348447][T11943] team0: Device sit1 is of different type [ 481.674670][ T5821] Bluetooth: hci9: command tx timeout [ 481.890610][T11950] bond0: entered allmulticast mode [ 481.896031][T11950] bond_slave_0: entered allmulticast mode [ 481.901768][T11950] bond_slave_1: entered allmulticast mode [ 481.983130][T11909] chnl_net:caif_netlink_parms(): no params data found [ 482.140745][ T29] audit: type=1400 audit(1773891243.899:772): avc: denied { create } for pid=11953 comm="syz.0.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 482.293441][ T29] audit: type=1400 audit(1773891243.899:773): avc: denied { setopt } for pid=11953 comm="syz.0.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 482.335540][ T5864] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 482.503048][ T5864] usb 9-1: Using ep0 maxpacket: 16 [ 482.551403][ T5864] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 482.575298][ T5864] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 482.588594][ T5864] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 482.599847][ T5864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.608499][ T5864] usb 9-1: Product: syz [ 482.618832][T11967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.634292][ T5864] usb 9-1: Manufacturer: syz [ 482.638877][ T5864] usb 9-1: SerialNumber: syz [ 482.651515][T11909] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.652118][ T5864] usb 9-1: config 0 descriptor?? [ 482.674028][T11909] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.675803][ T5864] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 482.681240][T11909] bridge_slave_0: entered allmulticast mode [ 482.690775][ T5864] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 482.744039][T11909] bridge_slave_0: entered promiscuous mode [ 482.767518][T11909] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.783083][T11909] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.790304][T11909] bridge_slave_1: entered allmulticast mode [ 482.808042][T11909] bridge_slave_1: entered promiscuous mode [ 483.170490][T11909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.211255][T11909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.311213][T11909] team0: Port device team_slave_0 added [ 483.333988][T11909] team0: Port device team_slave_1 added [ 483.366982][T11909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.374182][T11909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.400660][ T5864] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 483.422548][T11909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.424505][ T5864] em28xx 9-1:0.0: Config register raw data: 0xe2 [ 483.497355][T11978] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1561'. [ 483.639503][ T5864] em28xx 9-1:0.0: I2S Audio (1 sample rate(s)) [ 483.645804][ T5864] em28xx 9-1:0.0: No AC97 audio processor [ 483.667372][T11909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.702896][ T5821] Bluetooth: hci9: command tx timeout [ 483.712988][T11909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.868995][T11909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.999554][T11909] hsr_slave_0: entered promiscuous mode [ 484.018188][T11909] hsr_slave_1: entered promiscuous mode [ 484.036942][T11909] debugfs: 'hsr0' already exists in 'hsr' [ 484.049737][T11909] Cannot create hsr debugfs directory [ 484.459061][ T5921] usb 9-1: USB disconnect, device number 4 [ 484.664817][ T29] audit: type=1400 audit(1773891246.420:774): avc: denied { write } for pid=11995 comm="syz.0.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 485.260593][T12007] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1569'. [ 486.234533][ T5810] Bluetooth: hci9: command tx timeout [ 486.560745][T12021] rdma_rxe: rxe_newlink: failed to add syz_tun [ 486.959144][T11909] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 487.009016][T11909] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 487.034158][T11909] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 487.091913][T11909] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 487.331912][ T29] audit: type=1326 audit(1773891249.092:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.0.1573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bb179c799 code=0x0 [ 487.362527][T11909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.404148][T11909] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.418104][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.425266][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.861223][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.868328][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.243239][ T5810] Bluetooth: hci9: command tx timeout [ 488.637089][T11909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.826840][T12075] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1577'. [ 489.887475][T11909] veth0_vlan: entered promiscuous mode [ 489.910623][T11909] veth1_vlan: entered promiscuous mode [ 489.972442][T11909] veth0_macvtap: entered promiscuous mode [ 489.996556][T11909] veth1_macvtap: entered promiscuous mode [ 490.026504][T11909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.031005][T12103] netlink: 'syz.9.1582': attribute type 10 has an invalid length. [ 490.055685][T11909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.104338][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.142625][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.188645][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.190396][ T29] audit: type=1800 audit(1773891251.963:776): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1583" name="/newroot/318/pids.events" dev="tmpfs" ino=1709 res=0 errno=0 [ 490.209305][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.347826][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.364438][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.429123][ T793] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 490.460610][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.474894][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.599004][ T793] usb 10-1: device descriptor read/64, error -71 [ 490.723075][T12131] rdma_rxe: rxe_newlink: failed to add syz_tun [ 490.941997][ T793] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 491.108868][ T793] usb 10-1: device descriptor read/64, error -71 [ 491.216644][ T29] audit: type=1326 audit(1773891252.984:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.8.1586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb81fd9c799 code=0x0 [ 491.249448][ T793] usb usb10-port1: attempt power cycle [ 491.662142][ T793] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 491.709776][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1588'. [ 491.742365][ T793] usb 10-1: device descriptor read/8, error -71 [ 491.801938][T12169] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 492.030491][ T793] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 492.138689][ T5921] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 492.234095][ T793] usb 10-1: device descriptor read/8, error -71 [ 492.348266][ T793] usb usb10-port1: unable to enumerate USB device [ 492.358423][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 492.365177][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 492.377300][ T5921] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 492.398186][ T5921] usb 5-1: config 4 has an invalid descriptor of length 210, skipping remainder of the config [ 492.424747][ T5921] usb 5-1: config 4 has no interface number 0 [ 492.440650][ T5921] usb 5-1: language id specifier not provided by device, defaulting to English [ 492.465531][ T5921] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.00 [ 492.480664][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.781526][T12169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.793979][T12169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.163303][ T5921] uvcvideo 5-1:4.147: probe with driver uvcvideo failed with error -22 [ 493.185070][ T5921] usb 5-1: USB disconnect, device number 12 [ 493.543796][ T5821] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 493.556480][ T5821] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 493.565398][ T5821] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 493.576083][ T29] audit: type=1400 audit(1773891255.345:778): avc: denied { read } for pid=12193 comm="syz.0.1595" laddr=::ffff:172.20.20.170 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 493.604716][ T5821] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 493.620333][ T5821] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 493.656572][ T29] audit: type=1400 audit(1773891255.345:779): avc: denied { read } for pid=12193 comm="syz.0.1595" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 493.682755][T12200] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 493.697857][ T29] audit: type=1400 audit(1773891255.345:780): avc: denied { open } for pid=12193 comm="syz.0.1595" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 493.758018][ T29] audit: type=1400 audit(1773891255.375:781): avc: denied { ioctl } for pid=12193 comm="syz.0.1595" path="pid:[4026532797]" dev="nsfs" ino=4026532797 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 494.041012][ T29] audit: type=1800 audit(1773891255.815:782): pid=12211 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.1598" name="/newroot/4/pids.events" dev="tmpfs" ino=38 res=0 errno=0 [ 494.467255][T12202] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 494.477247][T12202] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 494.483376][T12202] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 494.495727][T12202] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 494.508121][T12202] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 494.514626][T12202] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 494.522959][T12202] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 494.531704][T12202] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 494.538387][T12202] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 494.561080][T12202] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 494.567733][T12202] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 494.581309][T12202] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 494.599168][T12202] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 494.605286][T12202] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 494.760589][T12202] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 495.563335][T12237] rdma_rxe: rxe_newlink: failed to add syz_tun [ 495.911638][T12196] chnl_net:caif_netlink_parms(): no params data found [ 496.397842][T12249] overlayfs: empty lowerdir [ 496.558222][T12196] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.560042][ T5810] Bluetooth: hci8: command 0x040f tx timeout [ 496.565435][ T5821] Bluetooth: hci7: command 0x0c1a tx timeout [ 496.573421][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 496.577446][ T5821] Bluetooth: hci5: command 0x040f tx timeout [ 496.583382][ T5810] Bluetooth: hci3: command 0x0405 tx timeout [ 496.590426][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 496.601847][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 496.609332][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 496.653797][ T5817] Bluetooth: hci9: command 0x0c1a tx timeout [ 496.717838][T12196] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.728835][T12196] bridge_slave_0: entered allmulticast mode [ 496.752710][ T793] IPVS: starting estimator thread 0... [ 496.753240][T12196] bridge_slave_0: entered promiscuous mode [ 496.798726][ T5818] Bluetooth: hci10: command 0x041b tx timeout [ 496.799626][T12196] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.854722][ T29] audit: type=1326 audit(1773891258.617:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.9.1600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd660d9c799 code=0x0 [ 496.905255][T12196] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.916203][T12258] IPVS: using max 36 ests per chain, 86400 per kthread [ 496.918520][T12196] bridge_slave_1: entered allmulticast mode [ 497.064214][T12196] bridge_slave_1: entered promiscuous mode [ 497.157974][T12196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.184308][T12196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.332807][T12196] team0: Port device team_slave_0 added [ 497.366914][T12196] team0: Port device team_slave_1 added [ 497.492050][T12281] netlink: 'syz.4.1607': attribute type 11 has an invalid length. [ 497.594156][T12196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.781014][T12196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.905678][T12196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.074399][T12196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.093122][T12301] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1611'. [ 498.126460][T12196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.177351][T12196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.521025][ T5818] Bluetooth: hci9: command 0x0c1a tx timeout [ 499.527130][ T5818] Bluetooth: hci10: command 0x041b tx timeout [ 500.025520][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1613'. [ 500.035398][ T29] audit: type=1800 audit(1773891261.798:784): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1610" name="/newroot/324/pids.events" dev="tmpfs" ino=1741 res=0 errno=0 [ 500.079350][T12196] hsr_slave_0: entered promiscuous mode [ 500.257177][T12196] hsr_slave_1: entered promiscuous mode [ 500.266271][T12196] debugfs: 'hsr0' already exists in 'hsr' [ 500.272446][T12196] Cannot create hsr debugfs directory [ 500.327179][T12326] rdma_rxe: rxe_newlink: failed to add syz_tun [ 500.519431][T12333] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1615'. [ 500.960954][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.967343][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.047403][T12196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.263820][ T29] audit: type=1326 audit(1773891263.039:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12325 comm="syz.9.1614" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd660d9c799 code=0x0 [ 501.365334][T12196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.435803][T12349] overlayfs: empty lowerdir [ 501.599515][ T5818] Bluetooth: hci9: command 0x0c1a tx timeout [ 501.599523][T12256] Bluetooth: hci10: command 0x041b tx timeout [ 502.060144][T12196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.551336][T12196] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.861777][T12366] loop8: detected capacity change from 0 to 7 [ 502.908923][T10824] Dev loop8: unable to read RDB block 7 [ 502.933515][T10824] loop8: unable to read partition table [ 502.947310][T10824] loop8: partition table beyond EOD, truncated [ 502.961683][T12370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1623'. [ 502.973955][T12366] Dev loop8: unable to read RDB block 7 [ 502.982454][T12366] loop8: unable to read partition table [ 503.017293][T12366] loop8: partition table beyond EOD, truncated [ 503.072803][T12366] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 503.202880][T12378] netlink: 'syz.8.1622': attribute type 1 has an invalid length. [ 503.228576][T12196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 503.337806][T12378] bond1: entered promiscuous mode [ 503.465920][T12378] bond1: entered allmulticast mode [ 503.507308][T12378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.562719][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 503.742812][ T5818] Bluetooth: hci10: command 0x041b tx timeout [ 503.769350][T12196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 503.793968][T12196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 503.864285][T12196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 503.922323][ T24] usb 5-1: device descriptor read/64, error -71 [ 504.139792][ T29] audit: type=1800 audit(1773891265.910:786): pid=12400 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.8.1627" name="/newroot/82/pids.events" dev="tmpfs" ino=447 res=0 errno=0 [ 504.478424][T12196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.481634][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 504.532412][T12196] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.573323][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.580457][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.652592][ T24] usb 5-1: device descriptor read/64, error -71 [ 504.662890][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.670014][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.784343][ T24] usb usb5-port1: attempt power cycle [ 505.018763][T12196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.173337][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 505.214312][ T24] usb 5-1: device descriptor read/8, error -71 [ 505.290259][T12430] overlayfs: empty lowerdir [ 505.515072][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 505.592102][ T24] usb 5-1: device descriptor read/8, error -71 [ 505.730156][T12196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.747718][ T24] usb usb5-port1: unable to enumerate USB device [ 505.833765][ T5818] Bluetooth: hci10: command 0x041b tx timeout [ 505.848680][T12196] veth0_vlan: entered promiscuous mode [ 505.865139][T12196] veth1_vlan: entered promiscuous mode [ 505.915960][T12196] veth0_macvtap: entered promiscuous mode [ 505.927150][T12196] veth1_macvtap: entered promiscuous mode [ 505.943454][T10990] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 505.950291][T12196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.973571][T12196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.007778][ T1148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.038709][ T1148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.051649][ T1148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.111781][T10990] usb 10-1: device descriptor read/64, error -71 [ 506.118218][ T1148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.275145][T12450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1633'. [ 506.381120][T10990] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 506.417258][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.451226][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.508759][ T7024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.518023][ T7024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.531119][T10990] usb 10-1: device descriptor read/64, error -71 [ 506.641299][T10990] usb usb10-port1: attempt power cycle [ 506.680485][ T29] audit: type=1400 audit(1773891268.451:787): avc: denied { read } for pid=12453 comm="syz.4.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 506.781955][T12462] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 507.170699][T10990] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 507.223682][T10990] usb 10-1: device descriptor read/8, error -71 [ 507.802101][T10990] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 507.887867][T10990] usb 10-1: device descriptor read/8, error -71 [ 507.920808][ T5818] Bluetooth: hci10: command 0x041b tx timeout [ 508.175889][T12486] FAULT_INJECTION: forcing a failure. [ 508.175889][T12486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.190546][T10990] usb usb10-port1: unable to enumerate USB device [ 508.210115][ T29] audit: type=1800 audit(1773891269.972:788): pid=12473 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.8.1638" name="/newroot/87/pids.events" dev="tmpfs" ino=477 res=0 errno=0 [ 508.222505][T12486] CPU: 0 UID: 0 PID: 12486 Comm: syz.2.1639 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.222531][T12486] Tainted: [L]=SOFTLOCKUP [ 508.222536][T12486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 508.222544][T12486] Call Trace: [ 508.222550][T12486] [ 508.222556][T12486] dump_stack_lvl+0x100/0x190 [ 508.222586][T12486] should_fail_ex.cold+0x5/0xa [ 508.222606][T12486] _copy_from_user+0x2e/0xd0 [ 508.222624][T12486] copy_msghdr_from_user+0x9f/0x4f0 [ 508.222649][T12486] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 508.222683][T12486] ___sys_sendmsg+0x106/0x1e0 [ 508.222708][T12486] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.222757][T12486] __sys_sendmsg+0x170/0x220 [ 508.222777][T12486] ? __pfx___sys_sendmsg+0x10/0x10 [ 508.222809][T12486] do_syscall_64+0x106/0xf80 [ 508.222828][T12486] ? clear_bhb_loop+0x40/0x90 [ 508.222847][T12486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.222862][T12486] RIP: 0033:0x7fc21b19c799 [ 508.222876][T12486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.222891][T12486] RSP: 002b:00007fc21bfc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.222908][T12486] RAX: ffffffffffffffda RBX: 00007fc21b416090 RCX: 00007fc21b19c799 [ 508.222918][T12486] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 508.222927][T12486] RBP: 00007fc21bfc6090 R08: 0000000000000000 R09: 0000000000000000 [ 508.222935][T12486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.222944][T12486] R13: 00007fc21b416128 R14: 00007fc21b416090 R15: 00007ffce5f760c8 [ 508.222964][T12486] [ 508.649928][ T29] audit: type=1400 audit(1773891270.272:789): avc: denied { append } for pid=12487 comm="syz.4.1641" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 508.721365][T12494] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1644'. [ 508.744080][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1643'. [ 508.754180][T12492] netlink: 'syz.4.1643': attribute type 10 has an invalid length. [ 508.778321][ T29] audit: type=1400 audit(1773891270.553:790): avc: denied { write } for pid=12491 comm="syz.4.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 508.780039][T10990] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 509.010307][T10990] usb 1-1: Using ep0 maxpacket: 16 [ 509.029393][T10990] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 509.040291][T10990] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 509.081933][T10990] usb 1-1: Product: syz [ 509.092570][T10990] usb 1-1: SerialNumber: syz [ 509.100456][T10990] usb 1-1: config 0 descriptor?? [ 509.162587][T10990] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 509.234927][T10990] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 509.275226][T10990] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 509.288553][T10990] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 509.440527][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1651'. [ 509.641926][T12517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1652'. [ 509.706173][T12519] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.1651'. [ 510.883207][ T9667] udevd[9667]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 510.944332][ T9638] udevd[9638]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 510.968801][ T29] audit: type=1400 audit(1773891272.744:791): avc: denied { map } for pid=12535 comm="syz.2.1656" path="socket:[37885]" dev="sockfs" ino=37885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 511.799099][T12541] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1654'. [ 511.857622][T12541] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1654'. [ 511.971847][ T9] usb 1-1: USB disconnect, device number 39 [ 512.147175][T12570] overlayfs: empty lowerdir [ 512.677246][ T29] audit: type=1800 audit(1773891274.454:792): pid=12567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1662" name="/newroot/329/pids.events" dev="tmpfs" ino=1768 res=0 errno=0 [ 514.255404][T12616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.270465][T12616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.498207][ T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 514.930559][ T5931] Process accounting resumed [ 515.054987][T12640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1676'. [ 515.328619][ T5931] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 515.697808][ T5931] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.706515][ T5931] usb 5-1: config 0 has no interface number 0 [ 515.712698][ T5931] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 515.725703][ T5931] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.760278][ T5931] usb 5-1: config 0 interface 1 has no altsetting 0 [ 515.780561][ T5931] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 515.789658][ T9] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 515.817670][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.837392][ T5931] usb 5-1: config 0 descriptor?? [ 515.937644][ T9] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 515.946274][ T9] usb 1-1: config 2 has no interface number 0 [ 515.976481][ T9] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 516.011758][ T9] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 516.056211][ T9] usb 1-1: config 2 interface 88 has no altsetting 0 [ 516.064895][ T9] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 516.075795][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.217000][T12655] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 516.270409][ T9] usb 1-1: Product: syz [ 516.288552][ T9] usb 1-1: Manufacturer: syz [ 516.411505][ T9] usb 1-1: SerialNumber: syz [ 516.438335][T12649] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 516.447858][T12649] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 516.460706][ T5931] uclogic 0003:2179:0053.000B: pen parameters not found [ 516.468098][ T5931] uclogic 0003:2179:0053.000B: interface is invalid, ignoring [ 516.680481][T12649] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 516.749903][T12649] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 517.086496][T12658] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 517.101142][T12658] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 517.208954][T12658] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 517.238749][T12658] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 517.664656][T12658] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 517.672161][T12658] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 517.701652][ T29] audit: type=1800 audit(1773891279.487:793): pid=12660 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.8.1681" name="/newroot/95/pids.events" dev="tmpfs" ino=520 res=0 errno=0 [ 517.735834][T12658] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 517.760332][T12658] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 517.767852][T12649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.781041][T12658] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 517.789628][T12658] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 517.799260][T12658] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 517.805890][T12658] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 517.930438][T12678] rdma_rxe: rxe_newlink: failed to add syz_tun [ 518.041057][ T5884] usb 5-1: USB disconnect, device number 17 [ 518.231663][ T9] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 518.459438][ T9] asix 1-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 518.486332][ T9] asix 1-1:2.88: probe with driver asix failed with error -71 [ 518.512340][ T9] usb 1-1: USB disconnect, device number 40 [ 518.705657][ T29] audit: type=1326 audit(1773891280.487:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.2.1683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc21b19c799 code=0x0 [ 518.853672][T12692] 9pnet_virtio: no channels available for device ./bus [ 519.195162][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 519.223793][ T29] audit: type=1400 audit(1773891280.998:795): avc: denied { write } for pid=12695 comm="syz.0.1689" path="socket:[40241]" dev="sockfs" ino=40241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 519.274963][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 519.354681][ T5818] Bluetooth: hci4: command 0x0405 tx timeout [ 519.768483][T12256] Bluetooth: hci5: command 0x040f tx timeout [ 519.774575][ T5818] Bluetooth: hci6: command 0x0c1a tx timeout [ 519.796193][ T5817] Bluetooth: hci3: command 0x0405 tx timeout [ 519.838715][ T5817] Bluetooth: hci10: command 0x041b tx timeout [ 519.842101][ T5818] Bluetooth: hci9: command 0x0c1a tx timeout [ 519.844915][ T5817] Bluetooth: hci8: command 0x040f tx timeout [ 519.855199][T12256] Bluetooth: hci7: command 0x0c1a tx timeout [ 519.898626][T12704] loop2: detected capacity change from 0 to 7 [ 519.905408][T12704] Dev loop2: unable to read RDB block 7 [ 519.910986][T12704] loop2: unable to read partition table [ 519.916787][T12704] loop2: partition table beyond EOD, truncated [ 519.923348][T12704] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 520.382939][T12725] overlayfs: empty lowerdir [ 521.429215][T12738] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1701'. [ 521.903270][ T5818] Bluetooth: hci10: command 0x041b tx timeout [ 523.077276][T12753] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1706'. [ 525.146845][ T5884] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 525.391580][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 525.476832][ T5884] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 525.493421][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 525.535228][ T5884] usb 5-1: Product: syz [ 525.551723][ T5884] usb 5-1: SerialNumber: syz [ 525.572488][ T5884] usb 5-1: config 0 descriptor?? [ 525.604268][ T5884] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 525.636749][ T5884] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 525.660827][ T5884] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 525.681431][ T5884] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 526.080781][T12802] xt_hashlimit: size too large, truncated to 1048576 [ 526.223099][T12803] input: syz0 as /devices/virtual/input/input15 [ 526.375387][ T29] audit: type=1400 audit(1773891288.161:796): avc: denied { setopt } for pid=12798 comm="syz.2.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 526.411228][ T29] audit: type=1400 audit(1773891288.161:797): avc: denied { read } for pid=12798 comm="syz.2.1719" path="socket:[39345]" dev="sockfs" ino=39345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 526.495871][ T29] audit: type=1400 audit(1773891288.231:798): avc: denied { map } for pid=12798 comm="syz.2.1719" path="socket:[40481]" dev="sockfs" ino=40481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 526.555656][ T29] audit: type=1400 audit(1773891288.231:799): avc: denied { mounton } for pid=12798 comm="syz.2.1719" path="/file0" dev="ramfs" ino=39348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 527.497913][T12821] loop3: detected capacity change from 0 to 7 [ 527.534715][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 527.544346][ C1] buffer_io_error: 9 callbacks suppressed [ 527.544356][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 527.562306][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 527.571905][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 527.666940][T12821] Buffer I/O error on dev loop3, logical block 0, async page read [ 527.675949][T12821] Buffer I/O error on dev loop3, logical block 0, async page read [ 527.699349][T12821] Buffer I/O error on dev loop3, logical block 0, async page read [ 527.728892][T12821] Buffer I/O error on dev loop3, logical block 0, async page read [ 527.752136][T12821] Buffer I/O error on dev loop3, logical block 0, async page read [ 527.780471][T12821] ldm_validate_partition_table(): Disk read failed. [ 527.796992][T12821] Buffer I/O error on dev loop3, logical block 0, async page read [ 527.820827][T12821] Buffer I/O error on dev loop3, logical block 0, async page read [ 527.839724][T12821] Buffer I/O error on dev loop3, logical block 0, async page read [ 527.864019][T12821] Dev loop3: unable to read RDB block 0 [ 527.880519][T12821] loop3: unable to read partition table [ 527.896115][T12821] loop3: partition table beyond EOD, truncated [ 527.914097][T12821] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 528.121459][T12829] overlayfs: empty lowerdir [ 528.385184][ T9] usb 5-1: USB disconnect, device number 18 [ 528.852430][T12836] netlink: 'syz.8.1726': attribute type 7 has an invalid length. [ 528.868374][T12836] netlink: 'syz.8.1726': attribute type 7 has an invalid length. [ 528.871779][ T1159] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.929359][ T1159] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.009160][ T1159] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.028922][ T1159] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.740133][ T5921] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 529.949278][ T5921] usb 9-1: Using ep0 maxpacket: 32 [ 529.983508][ T5921] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 529.999274][ T5921] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.021890][ T5921] usb 9-1: config 0 has no interface number 0 [ 530.027971][ T5921] usb 9-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.064394][ T5921] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 530.099298][ T5921] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.107350][ T5921] usb 9-1: Product: syz [ 530.124187][ T5921] usb 9-1: Manufacturer: syz [ 530.144362][ T5921] usb 9-1: SerialNumber: syz [ 530.219348][ T5921] usb 9-1: config 0 descriptor?? [ 530.231979][ T5921] radio-si470x 9-1:0.35: could not find interrupt in endpoint [ 530.262973][ T5921] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 530.471018][ T5921] radio-raremono 9-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 530.573242][T12878] FAULT_INJECTION: forcing a failure. [ 530.573242][T12878] name failslab, interval 1, probability 0, space 0, times 0 [ 530.605649][T12878] CPU: 0 UID: 0 PID: 12878 Comm: syz.0.1742 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.605679][T12878] Tainted: [L]=SOFTLOCKUP [ 530.605685][T12878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 530.605694][T12878] Call Trace: [ 530.605699][T12878] [ 530.605706][T12878] dump_stack_lvl+0x100/0x190 [ 530.605737][T12878] should_fail_ex.cold+0x5/0xa [ 530.605760][T12878] should_failslab+0xc2/0x120 [ 530.605778][T12878] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 530.605804][T12878] ? bpf_prog_get_info_by_fd+0x1305/0x2c50 [ 530.605836][T12878] kmemdup_noprof+0x29/0x60 [ 530.605862][T12878] bpf_prog_get_info_by_fd+0x1305/0x2c50 [ 530.605888][T12878] ? arch_stack_walk+0xa6/0xf0 [ 530.605916][T12878] ? _parse_integer_limit+0x17f/0x1d0 [ 530.605942][T12878] ? __pfx_bpf_prog_get_info_by_fd+0x10/0x10 [ 530.605968][T12878] ? __lock_acquire+0x4a5/0x2630 [ 530.605986][T12878] ? __lock_acquire+0x4a5/0x2630 [ 530.606019][T12878] ? __fget_files+0x21f/0x3d0 [ 530.606044][T12878] __sys_bpf+0x3c9b/0x4b90 [ 530.606065][T12878] ? __pfx___sys_bpf+0x10/0x10 [ 530.606080][T12878] ? proc_fail_nth_write+0x9f/0x220 [ 530.606104][T12878] ? find_held_lock+0x2b/0x80 [ 530.606131][T12878] ? find_held_lock+0x2b/0x80 [ 530.606151][T12878] ? ksys_write+0x190/0x250 [ 530.606181][T12878] ? __mutex_unlock_slowpath+0x15c/0x790 [ 530.606206][T12878] ? __fget_files+0x215/0x3d0 [ 530.606235][T12878] ? fput+0x79/0x100 [ 530.606256][T12878] ? ksys_write+0x1ac/0x250 [ 530.606281][T12878] ? __pfx_ksys_write+0x10/0x10 [ 530.606312][T12878] __x64_sys_bpf+0x7b/0xc0 [ 530.606329][T12878] ? lockdep_hardirqs_on+0x78/0x100 [ 530.606350][T12878] do_syscall_64+0x106/0xf80 [ 530.606372][T12878] ? clear_bhb_loop+0x40/0x90 [ 530.606393][T12878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.606411][T12878] RIP: 0033:0x7f9bb179c799 [ 530.606426][T12878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.606442][T12878] RSP: 002b:00007f9bb25b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 530.606459][T12878] RAX: ffffffffffffffda RBX: 00007f9bb1a15fa0 RCX: 00007f9bb179c799 [ 530.606470][T12878] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 530.606480][T12878] RBP: 00007f9bb25b5090 R08: 0000000000000000 R09: 0000000000000000 [ 530.606490][T12878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.606500][T12878] R13: 00007f9bb1a16038 R14: 00007f9bb1a15fa0 R15: 00007fff8a80a548 [ 530.606524][T12878] [ 531.165567][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1745'. [ 532.206079][T12894] rdma_rxe: rxe_newlink: failed to add syz_tun [ 532.218405][ T5864] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 532.331330][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1735'. [ 532.398611][T12856] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1735'. [ 532.438054][ T10] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 532.458980][T12887] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1735'. [ 532.609782][ T10] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 533.169783][ T5921] radio-raremono 9-1:0.35: raremono_cmd_main failed (-71) [ 533.176343][ T10] usb 3-1: config 0 has no interface number 0 [ 533.206548][ T10] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 533.218580][ T29] audit: type=1326 audit(1773891295.015:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12893 comm="syz.0.1747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bb179c799 code=0x0 [ 533.251529][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 533.265860][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.277719][ T10] usb 3-1: Product: syz [ 533.281949][ T10] usb 3-1: Manufacturer: syz [ 533.286677][ T10] usb 3-1: SerialNumber: syz [ 533.297106][ T10] usb 3-1: config 0 descriptor?? [ 533.445202][ T5921] radio-raremono 9-1:0.35: V4L2 device registered as radio48 [ 533.457685][ T5921] usb 9-1: USB disconnect, device number 5 [ 533.464250][ T5921] radio-raremono 9-1:0.35: Thanko's Raremono disconnected [ 533.573751][T12886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.592038][T12886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.660750][ T10] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 533.672142][ T10] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 533.691183][ T10] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 533.700652][ T10] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 533.714853][ T10] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 533.732087][ T10] usb 3-1: USB disconnect, device number 27 [ 533.760917][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 533.796528][T12906] FAULT_INJECTION: forcing a failure. [ 533.796528][T12906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.811961][ T10] keyspan 3-1:0.133: device disconnected [ 533.816052][T12906] CPU: 1 UID: 0 PID: 12906 Comm: syz.9.1750 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.816076][T12906] Tainted: [L]=SOFTLOCKUP [ 533.816082][T12906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.816090][T12906] Call Trace: [ 533.816095][T12906] [ 533.816101][T12906] dump_stack_lvl+0x100/0x190 [ 533.816130][T12906] should_fail_ex.cold+0x5/0xa [ 533.816151][T12906] _copy_from_iter+0x1f4/0x1690 [ 533.816172][T12906] ? __pfx__copy_from_iter+0x10/0x10 [ 533.816187][T12906] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 533.816209][T12906] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 533.816230][T12906] skb_copy_datagram_from_iter+0x11f/0x720 [ 533.816253][T12906] packet_sendmsg+0x2476/0x53c0 [ 533.816270][T12906] ? avc_has_perm+0x60/0x1e0 [ 533.816290][T12906] ? __lock_acquire+0x4a5/0x2630 [ 533.816309][T12906] ? sock_has_perm+0x258/0x2f0 [ 533.816326][T12906] ? __pfx_sock_has_perm+0x10/0x10 [ 533.816346][T12906] ? __pfx_packet_sendmsg+0x10/0x10 [ 533.816372][T12906] ____sys_sendmsg+0x9e1/0xb70 [ 533.816394][T12906] ? __pfx_packet_sendmsg+0x10/0x10 [ 533.816410][T12906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.816443][T12906] ___sys_sendmsg+0x190/0x1e0 [ 533.816467][T12906] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.816516][T12906] __sys_sendmsg+0x170/0x220 [ 533.816535][T12906] ? __pfx___sys_sendmsg+0x10/0x10 [ 533.816568][T12906] do_syscall_64+0x106/0xf80 [ 533.816586][T12906] ? clear_bhb_loop+0x40/0x90 [ 533.816605][T12906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.816621][T12906] RIP: 0033:0x7fd660d9c799 [ 533.816633][T12906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.816647][T12906] RSP: 002b:00007fd661b77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.816663][T12906] RAX: ffffffffffffffda RBX: 00007fd661015fa0 RCX: 00007fd660d9c799 [ 533.816673][T12906] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 533.816682][T12906] RBP: 00007fd661b77090 R08: 0000000000000000 R09: 0000000000000000 [ 533.816691][T12906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.816700][T12906] R13: 00007fd661016038 R14: 00007fd661015fa0 R15: 00007ffc90255f68 [ 533.816721][T12906] [ 534.154826][ T5884] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 534.765620][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 534.773562][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.272966][ T5864] usb 5-1: unable to get BOS descriptor or descriptor too short [ 535.287025][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.317195][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 535.337195][ T5864] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 535.344805][ T5864] usb 5-1: can't read configurations, error -71 [ 535.364867][ T5884] usb 1-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 535.508148][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.560949][ T5884] usb 1-1: config 0 descriptor?? [ 536.085405][ T5884] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0 [ 536.222411][ T5884] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0 [ 536.241843][ T5884] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0 [ 536.266680][ T5884] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0 [ 536.405078][ T5884] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0 [ 536.504689][ T5884] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0 [ 536.552321][ T5884] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0 [ 536.578088][ T5884] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0 [ 536.609349][ T5884] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0 [ 536.645933][ T5884] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0 [ 536.698671][ T5884] a4tech 0003:09DA:000A.000C: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.0-1/input0 [ 536.927682][ T5921] usb 1-1: USB disconnect, device number 41 [ 537.005027][T12927] fido_id[12927]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 537.428014][T12939] FAULT_INJECTION: forcing a failure. [ 537.428014][T12939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.492689][T12939] CPU: 1 UID: 0 PID: 12939 Comm: syz.2.1758 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.492717][T12939] Tainted: [L]=SOFTLOCKUP [ 537.492723][T12939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 537.492732][T12939] Call Trace: [ 537.492738][T12939] [ 537.492745][T12939] dump_stack_lvl+0x100/0x190 [ 537.492778][T12939] should_fail_ex.cold+0x5/0xa [ 537.492802][T12939] _copy_from_iter+0x1f4/0x1690 [ 537.492825][T12939] ? __asan_memset+0x23/0x50 [ 537.492849][T12939] ? __pfx__copy_from_iter+0x10/0x10 [ 537.492867][T12939] ? __pfx___alloc_skb+0x10/0x10 [ 537.492900][T12939] netlink_sendmsg+0x808/0xda0 [ 537.492930][T12939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.492953][T12939] ? PageHuge+0x170/0x180 [ 537.492985][T12939] ____sys_sendmsg+0x9e1/0xb70 [ 537.493011][T12939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.493037][T12939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.493076][T12939] ___sys_sendmsg+0x190/0x1e0 [ 537.493106][T12939] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.493166][T12939] __sys_sendmsg+0x170/0x220 [ 537.493189][T12939] ? __pfx___sys_sendmsg+0x10/0x10 [ 537.493228][T12939] do_syscall_64+0x106/0xf80 [ 537.493250][T12939] ? clear_bhb_loop+0x40/0x90 [ 537.493272][T12939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.493290][T12939] RIP: 0033:0x7fc21b19c799 [ 537.493305][T12939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.493321][T12939] RSP: 002b:00007fc21bfc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.493338][T12939] RAX: ffffffffffffffda RBX: 00007fc21b416090 RCX: 00007fc21b19c799 [ 537.493350][T12939] RDX: 0000000004000050 RSI: 0000200000000280 RDI: 0000000000000003 [ 537.493360][T12939] RBP: 00007fc21bfc6090 R08: 0000000000000000 R09: 0000000000000000 [ 537.493370][T12939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.493380][T12939] R13: 00007fc21b416128 R14: 00007fc21b416090 R15: 00007ffce5f760c8 [ 537.493407][T12939] [ 538.041695][ T29] audit: type=1400 audit(1773891299.617:801): avc: denied { create } for pid=12941 comm="syz.9.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 538.294195][ T29] audit: type=1400 audit(1773891299.617:802): avc: denied { write } for pid=12941 comm="syz.9.1754" path="socket:[41022]" dev="sockfs" ino=41022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 538.324114][ T29] audit: type=1400 audit(1773891299.657:803): avc: denied { append } for pid=12941 comm="syz.9.1754" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 538.356003][T12949] rdma_rxe: rxe_newlink: failed to add syz_tun [ 538.876930][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1760'. [ 538.886050][T12955] netlink: 580 bytes leftover after parsing attributes in process `syz.2.1760'. [ 540.278586][T12984] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 540.852042][T12993] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1773'. [ 540.937300][T12998] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1772'. [ 541.712210][T13015] overlayfs: empty lowerdir [ 542.172130][T13017] binder: binder_mmap: 13000 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 544.370158][ T30] INFO: task syz.3.1215:10584 blocked for more than 143 seconds. [ 544.403503][ T30] Tainted: G L syzkaller #0 [ 544.410378][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 544.419081][ T5864] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 544.484111][ T30] task:syz.3.1215 state:D stack:28216 pid:10584 tgid:10580 ppid:5807 task_flags:0x400140 flags:0x00080002 [ 544.520908][ T30] Call Trace: [ 544.529773][ T30] [ 544.539304][ T30] __schedule+0xfee/0x6120 [ 544.553311][ T30] ? __lock_acquire+0x4a5/0x2630 [ 544.567817][ T30] ? __pfx___schedule+0x10/0x10 [ 544.578215][ T5864] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.588455][ T5864] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 544.603592][ T30] ? find_held_lock+0x2b/0x80 [ 544.612796][ T5864] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.617135][ T30] ? schedule+0x2bf/0x390 [ 544.652947][ T5864] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 544.655142][ T30] schedule+0xdd/0x390 [ 544.673949][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.693083][ T30] schedule_preempt_disabled+0x13/0x30 [ 544.698242][ T5864] hub 3-1:1.0: bad descriptor, ignoring hub [ 544.709015][ T5864] hub 3-1:1.0: probe with driver hub failed with error -5 [ 544.726368][ T30] __mutex_lock+0xc9a/0x1b90 [ 544.731036][ T30] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 544.766158][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 544.771242][ T30] ? net_generic+0xea/0x2a0 [ 544.789926][ T30] ? net_generic+0xea/0x2a0 [ 544.795521][ T30] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 544.802482][ T30] nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 544.813668][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 544.830247][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 544.844640][ T30] ? bpf_lsm_capable+0x9/0x10 [ 544.856423][ T30] ? security_capable+0x80/0x260 [ 544.870315][ T30] genl_rcv_msg+0x560/0x800 [ 544.889769][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.904299][ T30] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 544.925079][ T30] netlink_rcv_skb+0x159/0x420 [ 544.942351][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.958488][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.970563][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 544.986276][ T30] genl_rcv+0x28/0x40 [ 544.998082][ T30] netlink_unicast+0x5aa/0x870 [ 545.011389][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 545.027506][ T30] netlink_sendmsg+0x8b0/0xda0 [ 545.038946][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.050912][ T30] ? PageHuge+0x170/0x180 [ 545.057705][ T30] ____sys_sendmsg+0x9e1/0xb70 [ 545.065004][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.073719][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.093343][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 545.109401][ T30] ___sys_sendmsg+0x190/0x1e0 [ 545.124103][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.212029][T13063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.222362][T13063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.547523][ T30] __sys_sendmsg+0x170/0x220 [ 545.552190][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 545.557415][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 545.562383][ T30] do_syscall_64+0x106/0xf80 [ 545.567049][ T30] ? clear_bhb_loop+0x40/0x90 [ 545.571738][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.577707][ T30] RIP: 0033:0x7fbf3959c799 [ 545.582142][ T30] RSP: 002b:00007fbf3a424028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.590638][ T30] RAX: ffffffffffffffda RBX: 00007fbf39815fa0 RCX: 00007fbf3959c799 [ 545.608292][ T30] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000007 [ 545.635928][ T30] RBP: 00007fbf39632c99 R08: 0000000000000000 R09: 0000000000000000 [ 545.653403][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.671286][ T30] R13: 00007fbf39816038 R14: 00007fbf39815fa0 R15: 00007ffe2f071dc8 [ 545.684385][ T793] usb 3-1: USB disconnect, device number 28 [ 545.692308][ T30] [ 545.695660][ T30] INFO: task syz.1.1218:10594 blocked for more than 145 seconds. [ 545.714186][ T30] Tainted: G L syzkaller #0 [ 545.728485][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.754086][ T30] task:syz.1.1218 state:D stack:27960 pid:10594 tgid:10593 ppid:5808 task_flags:0x400140 flags:0x00080002 [ 545.777721][ T30] Call Trace: [ 545.784293][ T30] [ 545.791419][ T30] __schedule+0xfee/0x6120 [ 545.801547][ T30] ? __lock_acquire+0x4a5/0x2630 [ 545.810954][ T30] ? __pfx___schedule+0x10/0x10 [ 545.827217][ T30] ? find_held_lock+0x2b/0x80 [ 545.838562][ T30] ? schedule+0x2bf/0x390 [ 545.848488][ T30] schedule+0xdd/0x390 [ 545.861325][ T30] schedule_preempt_disabled+0x13/0x30 [ 545.877325][ T30] __mutex_lock+0xc9a/0x1b90 [ 545.890645][ T30] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 545.921520][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 545.927844][ T30] ? net_generic+0xea/0x2a0 [ 545.932440][ T30] ? net_generic+0xea/0x2a0 [ 545.940750][ T30] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 545.946688][ T30] nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 545.952508][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 545.958285][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 545.965922][ T30] ? bpf_lsm_capable+0x9/0x10 [ 545.970671][ T30] ? security_capable+0x80/0x260 [ 545.978229][ T30] genl_rcv_msg+0x560/0x800 [ 545.982810][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 545.988078][ T30] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 545.995216][ T30] netlink_rcv_skb+0x159/0x420 [ 546.002367][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.012491][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 546.022414][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 546.034079][ T30] genl_rcv+0x28/0x40 [ 546.041403][ T30] netlink_unicast+0x5aa/0x870 [ 546.054000][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 546.105433][ T30] netlink_sendmsg+0x8b0/0xda0 [ 546.110942][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.118539][ T30] ? PageHuge+0x170/0x180 [ 546.134668][ T30] ____sys_sendmsg+0x9e1/0xb70 [ 546.139467][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.156443][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.162204][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 546.167842][ T30] ___sys_sendmsg+0x190/0x1e0 [ 546.172756][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.178540][ T30] __sys_sendmsg+0x170/0x220 [ 546.183161][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 546.191296][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 546.197635][ T30] do_syscall_64+0x106/0xf80 [ 546.203028][ T30] ? clear_bhb_loop+0x40/0x90 [ 546.207978][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.213947][ T30] RIP: 0033:0x7fb285d9c799 [ 546.218819][ T30] RSP: 002b:00007fb283ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.227629][ T30] RAX: ffffffffffffffda RBX: 00007fb286015fa0 RCX: 00007fb285d9c799 [ 546.236131][ T30] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000006 [ 546.244270][ T30] RBP: 00007fb285e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 546.252291][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.260780][ T30] R13: 00007fb286016038 R14: 00007fb286015fa0 R15: 00007ffeac589b28 [ 546.268985][ T30] [ 546.272088][ T30] [ 546.272088][ T30] Showing all locks held in the system: [ 546.292631][ T30] 1 lock held by khungtaskd/30: [ 546.301284][ T30] #0: ffffffff8e7e76a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 546.314534][ T30] 2 locks held by getty/5570: [ 546.319210][ T30] #0: ffff8880387930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 546.329184][ T30] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 546.341088][ T30] 1 lock held by syz-executor/5792: [ 546.346441][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 546.357630][ T30] 2 locks held by syz.2.1168/10441: [ 546.375443][ T30] #0: ffffffff906bda90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.383697][ T30] #1: ffffffff8ec591c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 546.394559][ T30] 2 locks held by syz.3.1215/10584: [ 546.399892][ T30] #0: ffffffff906bda90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.408503][ T30] #1: ffffffff8ec591c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 546.418838][ T30] 2 locks held by syz.1.1218/10594: [ 546.424549][ T30] #0: ffffffff906bda90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.433199][ T30] #1: ffffffff8ec591c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 546.443750][ T30] 2 locks held by syz.6.1349/11160: [ 546.449127][ T30] #0: ffffffff906bda90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.457772][ T30] #1: ffffffff8ec591c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 546.468125][ T30] 2 locks held by syz.5.1507/11707: [ 546.473959][ T30] #0: ffffffff906bda90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.482624][ T30] #1: ffffffff8ec591c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 546.496455][ T30] 2 locks held by syz.7.1541/11878: [ 546.503840][ T30] #0: ffffffff906bda90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.512520][ T30] #1: ffffffff8ec591c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 546.525135][ T30] 2 locks held by syz.0.1770/12986: [ 546.530760][ T30] #0: ffffffff906bda90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.542793][ T30] #1: ffffffff8ec591c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 546.555660][ T30] [ 546.558894][ T30] ============================================= [ 546.558894][ T30] [ 546.576370][ T30] NMI backtrace for cpu 1 [ 546.576385][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 546.576409][ T30] Tainted: [L]=SOFTLOCKUP [ 546.576415][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.576424][ T30] Call Trace: [ 546.576430][ T30] [ 546.576436][ T30] dump_stack_lvl+0x100/0x190 [ 546.576468][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 546.576487][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 546.576515][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 546.576545][ T30] sys_info+0x141/0x190 [ 546.576570][ T30] watchdog+0xd25/0x1050 [ 546.576600][ T30] ? __pfx_watchdog+0x10/0x10 [ 546.576624][ T30] ? __kthread_parkme+0x18c/0x230 [ 546.576649][ T30] ? kthread+0x13a/0x450 [ 546.576664][ T30] ? __pfx_watchdog+0x10/0x10 [ 546.576684][ T30] kthread+0x370/0x450 [ 546.576698][ T30] ? __pfx_kthread+0x10/0x10 [ 546.576715][ T30] ret_from_fork+0x754/0xd80 [ 546.576732][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 546.576752][ T30] ? __switch_to+0x7b4/0x1120 [ 546.576773][ T30] ? __pfx_kthread+0x10/0x10 [ 546.576790][ T30] ret_from_fork_asm+0x1a/0x30 [ 546.576821][ T30] [ 546.576827][ T30] Sending NMI from CPU 1 to CPUs 0: [ 546.702353][ C0] NMI backtrace for cpu 0 [ 546.702370][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.702388][ C0] Tainted: [L]=SOFTLOCKUP [ 546.702393][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.702400][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 546.702422][ C0] Code: 78 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 61 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 546.702435][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 546.702446][ C0] RAX: 000000000271f19f RBX: ffffffff8e4975c0 RCX: ffffffff8b902c75 [ 546.702456][ C0] RDX: 0000000000000000 RSI: ffffffff8de77143 RDI: ffffffff8c1b0a20 [ 546.702464][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 546.702472][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 546.702480][ C0] R13: 0000000000000000 R14: ffffffff90d99410 R15: 0000000000000000 [ 546.702489][ C0] FS: 0000000000000000(0000) GS:ffff888124342000(0000) knlGS:0000000000000000 [ 546.702502][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.702510][ C0] CR2: 00007feee5be92f8 CR3: 0000000079b53000 CR4: 00000000003526f0 [ 546.702519][ C0] Call Trace: [ 546.702526][ C0] [ 546.702531][ C0] default_idle+0x9/0x10 [ 546.702549][ C0] default_idle_call+0x6c/0xb0 [ 546.702567][ C0] do_idle+0x43a/0x550 [ 546.702586][ C0] ? __pfx_do_idle+0x10/0x10 [ 546.702604][ C0] cpu_startup_entry+0x4f/0x60 [ 546.702620][ C0] rest_init+0x251/0x260 [ 546.702638][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 546.702654][ C0] start_kernel+0x47f/0x480 [ 546.702667][ C0] x86_64_start_reservations+0x24/0x30 [ 546.702682][ C0] x86_64_start_kernel+0x12b/0x130 [ 546.702695][ C0] common_startup_64+0x13e/0x148 [ 546.702716][ C0] [ 546.909224][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 546.916121][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 546.926790][ T30] Tainted: [L]=SOFTLOCKUP [ 546.931096][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.941133][ T30] Call Trace: [ 546.944396][ T30] [ 546.947314][ T30] dump_stack_lvl+0x100/0x190 [ 546.951989][ T30] vpanic+0x552/0x970 [ 546.955953][ T30] ? __pfx_vpanic+0x10/0x10 [ 546.960441][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 546.966587][ T30] panic+0xd1/0xe0 [ 546.970294][ T30] ? __pfx_panic+0x10/0x10 [ 546.974699][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 546.980845][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 546.986991][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 546.993141][ T30] ? watchdog.cold+0x198/0x1ca [ 546.997889][ T30] ? watchdog+0xd35/0x1050 [ 547.002294][ T30] watchdog.cold+0x1a9/0x1ca [ 547.006877][ T30] ? __pfx_watchdog+0x10/0x10 [ 547.011541][ T30] ? __kthread_parkme+0x18c/0x230 [ 547.016562][ T30] ? kthread+0x13a/0x450 [ 547.020802][ T30] ? __pfx_watchdog+0x10/0x10 [ 547.025475][ T30] kthread+0x370/0x450 [ 547.029528][ T30] ? __pfx_kthread+0x10/0x10 [ 547.034100][ T30] ret_from_fork+0x754/0xd80 [ 547.038674][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 547.043798][ T30] ? __switch_to+0x7b4/0x1120 [ 547.048461][ T30] ? __pfx_kthread+0x10/0x10 [ 547.053033][ T30] ret_from_fork_asm+0x1a/0x30 [ 547.057792][ T30] [ 547.060995][ T30] Kernel Offset: disabled [ 547.065303][ T30] Rebooting in 86400 seconds..