last executing test programs: 28m12.199472073s ago: executing program 2 (id=2079): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '\x95\\4\x150x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002080)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2, &(0x7f00000020c0)=""/162, 0xa2}, 0xffff28c6}, {{&(0x7f0000002180)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/118, 0x76}, {&(0x7f0000003280)=""/109, 0x6d}], 0x3}, 0x10000}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003340)=""/114, 0x72}], 0x1, &(0x7f0000003400)}, 0x4}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003440)=""/206, 0xce}], 0x1, &(0x7f0000003580)=""/23, 0x17}, 0x2}], 0x4, 0x20, &(0x7f0000003700)={r1, r2+10000000}) sendto(r0, &(0x7f0000003740)="ff", 0x1, 0x2, 0x0, 0x0) clock_getres(0x5, &(0x7f0000003780)) sendmsg$NFT_BATCH(r0, &(0x7f0000003900)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000038c0)={&(0x7f0000003800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x6}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3ff}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x37}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xac}, 0x1, 0x0, 0x0, 0x4011}, 0x8004) pipe2(&(0x7f0000003940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) recvmsg$unix(r4, &(0x7f0000003c40)={&(0x7f0000003980)=@abs, 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/142, 0x8e}], 0x1, &(0x7f0000003b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x2100) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000003cc0), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000003d80)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x14, r13, 0x100, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r7, 0xe9dc1000) timer_create(0x4, &(0x7f0000003dc0)={0x0, 0x9, 0x1, @tid=r9}, &(0x7f0000003e00)=0x0) timer_settime(r14, 0x1, &(0x7f0000003e40)={{}, {0x0, 0x3938700}}, &(0x7f0000003e80)) setsockopt$MRT_DEL_MFC_PROXY(r12, 0x0, 0xd3, &(0x7f0000003ec0)={@multicast2, @rand_addr=0x64010102, 0xffffffffffffffff, "74cf08c80d12125fb1f4cd262d5b9e3c5fa47e8154c7362b6f6ba0fbc9c69818", 0xffffffff, 0x3, 0x80, 0x3ac7}, 0x3c) rt_sigtimedwait(&(0x7f0000003f00)={[0x7fffffffffffffff]}, &(0x7f0000003f40), &(0x7f0000003fc0), 0x8) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f0000004000)) close_range(r0, r3, 0x2) setsockopt$MRT6_DEL_MFC(r8, 0x29, 0xcd, &(0x7f0000004040)={{0xa, 0x4e23, 0xfffffffd, @empty, 0x7}, {0xa, 0x4e22, 0x72, @empty, 0x3}, 0x1, {[0x80000000, 0xe, 0x9a, 0x5, 0x619, 0x4, 0x8, 0x4]}}, 0x5c) syz_usb_connect$uac1(0x6, 0x10e, &(0x7f00000040c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfc, 0x3, 0x1, 0x7, 0xe0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xff}, [@feature_unit={0x11, 0x24, 0x6, 0x5, 0x4, 0x5, [0x5, 0x6, 0x7, 0x9, 0x4], 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x3, 0x6, 0x8, 0x3, 0xf7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x1, 0x61, 0x4, "c3195fc07d"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x3, 0x2, 0x5, "ad00e595db74a1bd"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xf, 0x4, 0x4, 0x5, 'I'}, @as_header={0x7, 0x24, 0x1, 0x9, 0x9}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x7, 0x5, "d4"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3f, 0x4, 0x2, 0x2, "", "1c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x6, 0x3, {0x7, 0x25, 0x1, 0x80, 0x6, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x2, 0x9, "d98e26ffe9a4"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x3, 0xd, 0x3, '*', '%'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x2, 0x2, 0x12, "", "6aa5"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1, 0x4, 0x4, "0f4c78bca3"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x8, 0x81, "71d3b9aa1522"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5d, 0xff, 0x0, {0x7, 0x25, 0x1, 0x2, 0xf}}}}}}}]}}, &(0x7f0000004400)={0xa, &(0x7f0000004200)={0xa, 0x6, 0x310, 0xc, 0x3, 0x1, 0x10, 0xb}, 0x64, &(0x7f0000004240)={0x5, 0xf, 0x64, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "4f1d997e7db8e5cd14ba483a86e020bb"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "162ce28dd689ed843baf6b055bf0e939"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "428380aafb065911cfe519a38f0f8109"}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x9, 0xf0f, 0x80, [0x3f00, 0x3f00, 0x0, 0xff0000, 0xffff00]}]}, 0x4, [{0x4, &(0x7f00000042c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000004300)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000004340)=@lang_id={0x4, 0x3, 0x50}}, {0x5c, &(0x7f0000004380)=@string={0x5c, 0x3, "7900a7da511e5775096d379d7fccac810bd3434c54e94b01a17f7aac1fcec4d1b3eafea6579af9d3b65fd8ffe478304c30fcd377552d98c142ab93ecbcdc7e7f0f914d64a8359a4aa181b7a641a26b77b2ec4e3913a557d69771"}}]}) r15 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000004480), 0x4) r16 = socket$caif_stream(0x25, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r15, 0xc0385868, &(0x7f00000045c0)={r16, &(0x7f00000044c0)='devlink\x00', 0x6102c0, &(0x7f0000004500)={@align=0x7fffffffffffffff, {0x8, 0x3ff, 0x5, 0x5}}, 0x9, &(0x7f0000004540)={@_ha_fsid}, &(0x7f0000004580)=0x6c}) bind$inet6(r5, &(0x7f0000004600)={0xa, 0x4e23, 0x3, @private2, 0x3736}, 0x1c) ioctl$EVIOCRMFF(r11, 0x40044581, &(0x7f0000004640)) getsockopt$netlink(r11, 0x10e, 0xa, &(0x7f0000004680)=""/221, &(0x7f0000004780)=0xdd) accept4(r3, &(0x7f00000047c0)=@hci, &(0x7f0000004840)=0x80, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000004880)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x40182103, &(0x7f0000004900)={r17, 0x1, r6, 0x1}) openat$cgroup_int(r10, &(0x7f0000004940)='memory.oom.group\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 28m11.206421426s ago: executing program 2 (id=2084): r0 = fsopen(&(0x7f0000000580)='qnx4\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r1, @ANYRES64=r4, @ANYRESDEC=r3], 0x110) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) r8 = dup(0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r11 = syz_open_pts(r10, 0x141601) fcntl$setstatus(r11, 0x4, 0x102800) write(r11, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000100)=0x19) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1820000000000000000a00000010000018110000", @ANYRES32, @ANYBLOB="0000020000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28m10.074813227s ago: executing program 2 (id=2094): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000002f00)=[{{&(0x7f0000000300)=@nl, 0x80, &(0x7f0000000940)=[{&(0x7f0000000700)=""/42, 0x2a}, {&(0x7f0000000740)=""/180, 0xb4}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/183, 0xb7}, {&(0x7f0000000900)=""/13, 0xd}], 0x5, &(0x7f00000009c0)=""/14, 0xe}, 0x6}, {{&(0x7f0000000a00)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/68, 0x44}, {&(0x7f0000000b00)=""/162, 0xa2}], 0x2, &(0x7f0000000c00)=""/236, 0xec}, 0x75}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d00)=""/155, 0x9b}, {&(0x7f0000000dc0)=""/98, 0x62}, {&(0x7f0000000e40)=""/129, 0x81}, {&(0x7f0000000f00)=""/78, 0x4e}, {&(0x7f0000000f80)=""/205, 0xcd}], 0x5, &(0x7f0000001100)=""/11, 0xb}, 0x2}, {{&(0x7f0000001140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f0000001680)=[{&(0x7f00000011c0)=""/50, 0x32}, {&(0x7f0000001200)=""/37, 0x25}, {&(0x7f0000001240)=""/205, 0xcd}, {&(0x7f00000014c0)=""/180, 0xb4}, {&(0x7f0000001340)=""/40, 0x28}, {&(0x7f0000001580)=""/210, 0xd2}], 0x6, &(0x7f0000001380)=""/2, 0x2}, 0x8000}, {{&(0x7f0000001700)=@xdp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001780)=""/55, 0x37}], 0x1, &(0x7f0000001800)=""/124, 0x7c}, 0x10001}, {{&(0x7f0000001880), 0x80, &(0x7f0000002d80)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/196, 0xc4}, {&(0x7f0000002a00)=""/11, 0xb}, {&(0x7f0000002a40)=""/150, 0x96}, {&(0x7f0000002b00)=""/255, 0xff}, {&(0x7f0000002c00)=""/99, 0x63}, {&(0x7f0000002c80)=""/43, 0x2b}, {&(0x7f0000002cc0)=""/110, 0x6e}, {&(0x7f0000002d40)=""/9, 0x9}], 0x9, &(0x7f0000002e40)=""/159, 0x9f}, 0xe83}], 0x6, 0x40010102, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000004f00290000000000000000000000000014b2b0a0ac011b957af7aab3a8cbd83b188d4589b46bdcb9e6b826c1d6c5a026dd1710ec4288896b8e6f1159732c8c98a81d9020990051ba9e6fc190ccf8f294d39abcf2e5d98399af69d3d19597b1027c7c4e95b177fd6106f32f1e7b423853a04c9dc01dc40566dd672a417c38db199aa4c460bae07217bad65f6f5e72122cb4a532c92a4002cfbcb531940589558d95e8fe223feb59c46083f99b16c854692def02dacf748105a085d17a0364b33348d208a144d8037c731b9175e656cbb7e5c9f3ebf256", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000200100000000000000000000000000010000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="d6840000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000fdffffffc3fffffffffbffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db96b5731f3d0096798649df9cdebbf453a7acb6fcbcc809e6769baa5358ecc6b9b6589c226017c1c88ad068e815a6854da484f1f0e88855419cadcc771c8c4b5760f8bbe1dbb8d148d3c49141688e79d33e4371bee345da0000000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e000000200000000000000000000000000000000000003"], 0xb8}}, 0x0) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000380)=ANY=[@ANYRES8=r6]}]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) 28m6.908560041s ago: executing program 2 (id=2113): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r0, &(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x800, &(0x7f0000000140)={@_ha_fsid={[0x7, 0x4]}, {0x0, 0x3, 0x8, 0x100}}, 0x2, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x2031b000) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000440)={0x9, 0x9, 0x3a5c8e31, 0xa, 0x850c, 0x1, 0x6, 0xcd}, &(0x7f0000000480)={0x101, 0x1, 0x0, 0x9, 0x401, 0x800, 0xfffffffffffffff8, 0x40}, &(0x7f00000004c0)={0x7fffffffffffffff, 0x8, 0x8000000000000001, 0x80000000, 0x5, 0xb9, 0x573ae1a5, 0x7}, &(0x7f0000000540)={r2, r3+60000000}, &(0x7f00000005c0)={&(0x7f0000000580), 0x8}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000000c0)=0x7, 0x4) r4 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x80, 0x80, 0x4, 0x80, {{0x32, 0x4, 0x0, 0xe, 0xc8, 0x68, 0x0, 0x50, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@generic={0x44, 0xc, "81d991ea5ebee2a723fd"}, @lsrr={0x83, 0xb, 0x30, [@rand_addr=0x64010100, @multicast2]}, @timestamp={0x44, 0x24, 0xdb, 0x0, 0xc, [0x9, 0x7, 0x10, 0x8, 0x7, 0xffffff01, 0x8, 0x35440000]}, @timestamp_addr={0x44, 0x3c, 0xf4, 0x1, 0x2, [{@private=0xa010100}, {@empty}, {@private=0xa010100, 0x9}, {@local, 0x6}, {@multicast1, 0x3ff}, {@multicast2, 0x5}, {@private=0xa010100, 0x40}]}, @timestamp_prespec={0x44, 0x14, 0x9a, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @noop, @timestamp={0x44, 0xc, 0x64, 0x0, 0x4, [0x9, 0xfffffff7]}, @end, @ssrr={0x89, 0x17, 0x64, [@empty, @private=0xa010102, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x1f}]}, @noop]}}}}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000003c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, 0xd1, 0x2, 0x2, 0x400, 0x7000, 0x40, r5}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa660000001190780a010101e000000100004e2000089078"], 0x0) r6 = gettid() pause() r7 = syz_open_procfs(r6, &(0x7f0000000180)='wchan\x00') pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) recvmmsg(0xffffffffffffffff, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000062, 0x0) 28m6.20912539s ago: executing program 2 (id=2116): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000040)) (async) ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, &(0x7f00000000c0)) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) (async) fcntl$setstatus(r0, 0x4, 0x0) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000180)={0x10, 0x0, "915ce6ef2a03274ce5931e02cf730e6b"}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000001c0)) (async, rerun: 32) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f0000000fc0)={0x1, [{0x0, 0x588, 0x3, &(0x7f00000005c0)="2b42053c0f53293c63e21ec753d4275dc406e71338f71f12109d1603ac8a1d66b9c4991dcab77c7e9c65613522bc176a394cf7941cb631224afee6737c1656a756bf35eec780bed0e05cf799a89daaa170d46c11e9bbfd5d1a1061ef69f8aee9d9813652f835c8a073fc3e349d31e76bf1b75d2fc4ea1cd0ea3010f64403e5e804ad0602de1c7a77a2ea29a6e94201286aefab251cf7e03393c954ff2e2a1a82aa1ae4c15be5a746fc16886b48c36d8754"}, {0x1, 0x6e8, 0x6, &(0x7f0000000680)="e5674b7120f4eeee4acd7b2bd5c64a1d08e2bd7e97b27c19446ac752f95aacb4d72a47d60238e003eb1b76d45017e44ea9e9c940a2b74220cc831f7fb77dbd01003f1d40f1c366f97dbc2109b08eea829b19c1aa8dc4cee94984ce7bb900e37325ff95b14267d05bcfbb604aae44522f766c3fc8873b493117b7caa0a049fcdc72156f8590d8494abe07bbde8eb3305d50a3240a1e9494495851dbf102b2b9f65cc595ab3f19b206d0ae4dbef2631ebf55f03f4f807890388c05e4ffd3134ab181e94ae3a822e29649d3867c3285cf6f44386aae28510382eb630d7f02"}, {0x2, 0x20, 0xffffff1d, &(0x7f0000000780)="a5b868a3"}, {0x2, 0x6e0, 0x9, &(0x7f00000007c0)="fc94f6c02e8290e4d00fb054316c5435089e72163318edb2d53c13ab7bc1d1f518c8102d96b9ce03e8dcdb72d87ee07cf7d745df59b5e57a672af991707d431c43126b6ca4c3a582b5395e6dddfc7d3d66958ae0d91549716a4b24fd350aa6f8b56801ce506b67ff90f2973291d3821ba0f469b113c63ee164052cb0029079e046a25e42e40ef03f45efdd7da5b7ce955bb1380394670e7ce52a462de7bd85bb33f9b85586e15321cb7cbe7811d218e14b64c29fed3b260eb4d86d4a300cb6286a4634f5cf621bbb364278c5d813b894d16cf0ae9c26169af7a09cf0"}, {0x7, 0x588, 0x7, &(0x7f00000008c0)="9d6b063c98b6638e4582bb217e83b9b05218b2af0d0c8a3ac3136a9591d6118e71ace4f72031455b59354157a1816130a35bf464be6dc83e58b03b781dcc9e365880c4dd927f438ea3c73d390aeb7888d26dd65b24eeaa394a892af0f4d62d4c5c27c9f8693c5bd5fee1f707ef01fea11679746d4aafc3ad832796afd5932a78357deef9f0f00c4d00bcaf082206bd6ed1ce149960fe1f1b44e54d0d8036b344762274ef9e0c4022853080cf2673ee1516"}, {0x2, 0x70, 0x8, &(0x7f0000000980)="e48ed4e08d792bfaa815ce63a865"}, {0x2, 0x690, 0x8, &(0x7f00000009c0)="42778b40c61bc10f971b74726020200bedc93ba5153430392a142ebec2b8d1a00b237e68bfbb38cce94964ab639a386134ed8baa3eb388e92a70ea3b6bc9ad40c76c060527a59b479ceb382c3f925aa9084bd544ba2715115d10f1762244f8a3a5e076cb7ddeffe975bdcb8ef75316a1d9ed401ed635419b221b3c0c8394deded38d63c3f753746a974ad2f01aaed8bbda6efaffa42b5fb8b05dd297db528fedeb93cd4302ad7963e86f8d365bdd5966512b7e8bb10503f716f9e6d136d06503e53617331b972eeb14eb57accb6bc4dfe967"}, {0x0, 0x420, 0x5, &(0x7f0000000ac0)="28ec1938cfa2eb1a4b70231fbc28f7bc38bb4a0730ac71db6a40766256fc2e6d94acbbdc0d450c6b04ed1647f5270a24274c743fc382bc7a1e43c079de2c7625aa63b5871a69af65eb431ceebfe6472876173fb2f32ceffa2638cc0ae5ca95c86d0288748742a2631788e394a053da317061990f5b82a2487dec7eaf0030bda51cee2f80"}, {0x2, 0x798, 0x40, &(0x7f0000000b80)="568c6260185043f79a01612e03a8993113ed34ab7b1687d3aca15eb3f36f12d9619af50ce67ca8a58d1d4757df7b5572ec267000d111329d0c9ca77d04dd37acc42f43354fa53351d5574c2efbfe9a350aa2ca494b29e75e83bbf38b6615c4742c401f4102aba46a9bc2700f455604b54e09d95cd9742a00b90aedc916e0feebfa2fd691ed19ec879d942a73a77fe63e719ddf820405e376f35150ed1e7ae2ac788b1567132873bee55c8f8709444291598dd102f32e63bae2edcecb8266cde8e508e98f2254015a4c30131d352212e0eb93dcfffddeb50cad985ff6907083d1eb1ced1ade77cf042a58221ce5c0a233dc87e6"}, {0x3, 0x7e0, 0x9, &(0x7f0000000c80)="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"}, {0x3, 0x1a0, 0x4, &(0x7f0000000d80)="bb5eaaee13602b6905f157a093f5ab792e7a94265482a8a2dcf77212321150f7bd0b80562cae236fe978200ac7ef7136fb8f85a1"}, {0x0, 0x428, 0x7e9, &(0x7f0000000dc0)="ad6c3b2d67b405be5ff6253f1e27c12684bf80272943a35efea6531725df53eb6f22d4543d3dc78b60e0fbad2c493d74db7f661be700bcd5ea32a2e0805894e162db15341b1ac34cbfc7ec68a7bc3b1d5f69b9e4f05ae667951a698c9680789e37e8630c26b2efa5f42815f32043e0f9915729562b531d6a8c0b9778af9b0cde33f25b7a35"}, {0x2, 0xd0, 0x0, &(0x7f0000000e80)="09bd4eb54869b396e5476de9a4ebf4983c81928a737389d96b8b"}, {0x3, 0xd0, 0x9, &(0x7f0000000ec0)="6961cdfe151cb635f71330b62969dd718bdaa63c2b67e4a6634d"}, {0x2, 0x1a0, 0x7, &(0x7f0000000f00)="6ddd7eadb332b395e6d74db71c2092641453c2cc7fbea1bb66d51ca74a18ec3b0c7f350dd83ba7727f2591e8070623833453c565"}, {0x1, 0x3c8, 0x2, &(0x7f0000000f40)="d03d2782bcd4e6b17ee053e3b577ce11769dfc0f77342a38b767dac129767b64e5b2fbcb98616b73a5c8dcd34305e8ff9ee92c8f8088992a8babc6cb9528fb143717d9b5a40aedc018b912302b1d6f61ef488f8c20b148a3de320833a9ad7cb0178b22d6a2b853298ac07bd45c4d14c5294234a1d5bad42653"}]}) (rerun: 32) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20026c03}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r1, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x40800) writev(r0, &(0x7f00000023c0)=[{&(0x7f0000001280)="9193449a1d9b72e3a6ed2420f66b2a232139671178707c317bfcb29db2afe7ebb93d8fca7f1a00a0cf2aa12b6e85f3ffb8239890c8b11b2141c0ae5d7e", 0x3d}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="b71c92219ee652f5b2749409f01ffa5d705127dd6351b9d6800b04827cbb53fefa65474b6edb3f80cb1910f98613589528dc5b3959124038f68556e08e4ab474d64ee3240f1a602dfd76486724edafcd6f4f0350ebece92e7e0f57243eb914c0c57eab2a2a0e7a147a792470f40a8b78425052579fa3e2895e1285682ff9af60ed9094c9602453aebeda68f78bcc51326400cb1a9491e9a07dbc83bb7e4d6a407d9e81c9bbdffac0823af6fd9bd032b02c07912df595ed718b789df74017bd76e9eee22747648916a63b6db6cf06ebd8969b3e717de90130906cf8f7a2d0844427", 0xe1}], 0x3) (async, rerun: 32) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000002400)='veth0_to_hsr\x00') (async, rerun: 32) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000002440)='macvlan1\x00') ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000002480)) (async) bind$alg(r0, &(0x7f00000024c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ecb-camellia-asm,nhpoly1305-sse2)\x00'}, 0x58) (async) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000002540)=0x6) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000027c0)={0x1, 0x1, &(0x7f0000002580)=""/218, &(0x7f0000002680)=""/204, &(0x7f0000002780)=""/50, 0x100000}) (async) r2 = openat$cgroup_ro(r0, &(0x7f0000002800)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000002840)={0x3}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) (rerun: 64) r3 = getpgid(0x0) r4 = syz_open_procfs(r3, &(0x7f0000002880)='environ\x00') ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000002d00)={&(0x7f00000028c0)=0x28, 0xa, &(0x7f0000002900)=[{}, {}, {}, {}, {}], &(0x7f0000002cc0)}) (async, rerun: 32) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000002d40)={{r0}, {@val, @actul_num={@void, 0xb1, 0x54}}}) (async, rerun: 32) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x8010, r2, 0x9c9d6000) (async, rerun: 32) wait4(r3, &(0x7f0000002d80), 0x0, &(0x7f0000002dc0)) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002ec0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000002e80), 0x106, 0x3}}, 0x20) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000002f00)={0x18000000, 0x70000000, {r3}, {0xffffffffffffffff}, 0x1, 0x5}) fcntl$setown(r4, 0x8, r5) 28m5.487332863s ago: executing program 32 (id=2116): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000040)) (async) ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, &(0x7f00000000c0)) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) (async) fcntl$setstatus(r0, 0x4, 0x0) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000180)={0x10, 0x0, "915ce6ef2a03274ce5931e02cf730e6b"}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000001c0)) (async, rerun: 32) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f0000000fc0)={0x1, [{0x0, 0x588, 0x3, &(0x7f00000005c0)="2b42053c0f53293c63e21ec753d4275dc406e71338f71f12109d1603ac8a1d66b9c4991dcab77c7e9c65613522bc176a394cf7941cb631224afee6737c1656a756bf35eec780bed0e05cf799a89daaa170d46c11e9bbfd5d1a1061ef69f8aee9d9813652f835c8a073fc3e349d31e76bf1b75d2fc4ea1cd0ea3010f64403e5e804ad0602de1c7a77a2ea29a6e94201286aefab251cf7e03393c954ff2e2a1a82aa1ae4c15be5a746fc16886b48c36d8754"}, {0x1, 0x6e8, 0x6, &(0x7f0000000680)="e5674b7120f4eeee4acd7b2bd5c64a1d08e2bd7e97b27c19446ac752f95aacb4d72a47d60238e003eb1b76d45017e44ea9e9c940a2b74220cc831f7fb77dbd01003f1d40f1c366f97dbc2109b08eea829b19c1aa8dc4cee94984ce7bb900e37325ff95b14267d05bcfbb604aae44522f766c3fc8873b493117b7caa0a049fcdc72156f8590d8494abe07bbde8eb3305d50a3240a1e9494495851dbf102b2b9f65cc595ab3f19b206d0ae4dbef2631ebf55f03f4f807890388c05e4ffd3134ab181e94ae3a822e29649d3867c3285cf6f44386aae28510382eb630d7f02"}, {0x2, 0x20, 0xffffff1d, &(0x7f0000000780)="a5b868a3"}, {0x2, 0x6e0, 0x9, &(0x7f00000007c0)="fc94f6c02e8290e4d00fb054316c5435089e72163318edb2d53c13ab7bc1d1f518c8102d96b9ce03e8dcdb72d87ee07cf7d745df59b5e57a672af991707d431c43126b6ca4c3a582b5395e6dddfc7d3d66958ae0d91549716a4b24fd350aa6f8b56801ce506b67ff90f2973291d3821ba0f469b113c63ee164052cb0029079e046a25e42e40ef03f45efdd7da5b7ce955bb1380394670e7ce52a462de7bd85bb33f9b85586e15321cb7cbe7811d218e14b64c29fed3b260eb4d86d4a300cb6286a4634f5cf621bbb364278c5d813b894d16cf0ae9c26169af7a09cf0"}, {0x7, 0x588, 0x7, &(0x7f00000008c0)="9d6b063c98b6638e4582bb217e83b9b05218b2af0d0c8a3ac3136a9591d6118e71ace4f72031455b59354157a1816130a35bf464be6dc83e58b03b781dcc9e365880c4dd927f438ea3c73d390aeb7888d26dd65b24eeaa394a892af0f4d62d4c5c27c9f8693c5bd5fee1f707ef01fea11679746d4aafc3ad832796afd5932a78357deef9f0f00c4d00bcaf082206bd6ed1ce149960fe1f1b44e54d0d8036b344762274ef9e0c4022853080cf2673ee1516"}, {0x2, 0x70, 0x8, &(0x7f0000000980)="e48ed4e08d792bfaa815ce63a865"}, {0x2, 0x690, 0x8, &(0x7f00000009c0)="42778b40c61bc10f971b74726020200bedc93ba5153430392a142ebec2b8d1a00b237e68bfbb38cce94964ab639a386134ed8baa3eb388e92a70ea3b6bc9ad40c76c060527a59b479ceb382c3f925aa9084bd544ba2715115d10f1762244f8a3a5e076cb7ddeffe975bdcb8ef75316a1d9ed401ed635419b221b3c0c8394deded38d63c3f753746a974ad2f01aaed8bbda6efaffa42b5fb8b05dd297db528fedeb93cd4302ad7963e86f8d365bdd5966512b7e8bb10503f716f9e6d136d06503e53617331b972eeb14eb57accb6bc4dfe967"}, {0x0, 0x420, 0x5, &(0x7f0000000ac0)="28ec1938cfa2eb1a4b70231fbc28f7bc38bb4a0730ac71db6a40766256fc2e6d94acbbdc0d450c6b04ed1647f5270a24274c743fc382bc7a1e43c079de2c7625aa63b5871a69af65eb431ceebfe6472876173fb2f32ceffa2638cc0ae5ca95c86d0288748742a2631788e394a053da317061990f5b82a2487dec7eaf0030bda51cee2f80"}, {0x2, 0x798, 0x40, &(0x7f0000000b80)="568c6260185043f79a01612e03a8993113ed34ab7b1687d3aca15eb3f36f12d9619af50ce67ca8a58d1d4757df7b5572ec267000d111329d0c9ca77d04dd37acc42f43354fa53351d5574c2efbfe9a350aa2ca494b29e75e83bbf38b6615c4742c401f4102aba46a9bc2700f455604b54e09d95cd9742a00b90aedc916e0feebfa2fd691ed19ec879d942a73a77fe63e719ddf820405e376f35150ed1e7ae2ac788b1567132873bee55c8f8709444291598dd102f32e63bae2edcecb8266cde8e508e98f2254015a4c30131d352212e0eb93dcfffddeb50cad985ff6907083d1eb1ced1ade77cf042a58221ce5c0a233dc87e6"}, {0x3, 0x7e0, 0x9, &(0x7f0000000c80)="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"}, {0x3, 0x1a0, 0x4, &(0x7f0000000d80)="bb5eaaee13602b6905f157a093f5ab792e7a94265482a8a2dcf77212321150f7bd0b80562cae236fe978200ac7ef7136fb8f85a1"}, {0x0, 0x428, 0x7e9, &(0x7f0000000dc0)="ad6c3b2d67b405be5ff6253f1e27c12684bf80272943a35efea6531725df53eb6f22d4543d3dc78b60e0fbad2c493d74db7f661be700bcd5ea32a2e0805894e162db15341b1ac34cbfc7ec68a7bc3b1d5f69b9e4f05ae667951a698c9680789e37e8630c26b2efa5f42815f32043e0f9915729562b531d6a8c0b9778af9b0cde33f25b7a35"}, {0x2, 0xd0, 0x0, &(0x7f0000000e80)="09bd4eb54869b396e5476de9a4ebf4983c81928a737389d96b8b"}, {0x3, 0xd0, 0x9, &(0x7f0000000ec0)="6961cdfe151cb635f71330b62969dd718bdaa63c2b67e4a6634d"}, {0x2, 0x1a0, 0x7, &(0x7f0000000f00)="6ddd7eadb332b395e6d74db71c2092641453c2cc7fbea1bb66d51ca74a18ec3b0c7f350dd83ba7727f2591e8070623833453c565"}, {0x1, 0x3c8, 0x2, &(0x7f0000000f40)="d03d2782bcd4e6b17ee053e3b577ce11769dfc0f77342a38b767dac129767b64e5b2fbcb98616b73a5c8dcd34305e8ff9ee92c8f8088992a8babc6cb9528fb143717d9b5a40aedc018b912302b1d6f61ef488f8c20b148a3de320833a9ad7cb0178b22d6a2b853298ac07bd45c4d14c5294234a1d5bad42653"}]}) (rerun: 32) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20026c03}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r1, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x40800) writev(r0, &(0x7f00000023c0)=[{&(0x7f0000001280)="9193449a1d9b72e3a6ed2420f66b2a232139671178707c317bfcb29db2afe7ebb93d8fca7f1a00a0cf2aa12b6e85f3ffb8239890c8b11b2141c0ae5d7e", 0x3d}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="b71c92219ee652f5b2749409f01ffa5d705127dd6351b9d6800b04827cbb53fefa65474b6edb3f80cb1910f98613589528dc5b3959124038f68556e08e4ab474d64ee3240f1a602dfd76486724edafcd6f4f0350ebece92e7e0f57243eb914c0c57eab2a2a0e7a147a792470f40a8b78425052579fa3e2895e1285682ff9af60ed9094c9602453aebeda68f78bcc51326400cb1a9491e9a07dbc83bb7e4d6a407d9e81c9bbdffac0823af6fd9bd032b02c07912df595ed718b789df74017bd76e9eee22747648916a63b6db6cf06ebd8969b3e717de90130906cf8f7a2d0844427", 0xe1}], 0x3) (async, rerun: 32) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000002400)='veth0_to_hsr\x00') (async, rerun: 32) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000002440)='macvlan1\x00') ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000002480)) (async) bind$alg(r0, &(0x7f00000024c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ecb-camellia-asm,nhpoly1305-sse2)\x00'}, 0x58) (async) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000002540)=0x6) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000027c0)={0x1, 0x1, &(0x7f0000002580)=""/218, &(0x7f0000002680)=""/204, &(0x7f0000002780)=""/50, 0x100000}) (async) r2 = openat$cgroup_ro(r0, &(0x7f0000002800)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000002840)={0x3}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) (rerun: 64) r3 = getpgid(0x0) r4 = syz_open_procfs(r3, &(0x7f0000002880)='environ\x00') ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000002d00)={&(0x7f00000028c0)=0x28, 0xa, &(0x7f0000002900)=[{}, {}, {}, {}, {}], &(0x7f0000002cc0)}) (async, rerun: 32) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000002d40)={{r0}, {@val, @actul_num={@void, 0xb1, 0x54}}}) (async, rerun: 32) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x8010, r2, 0x9c9d6000) (async, rerun: 32) wait4(r3, &(0x7f0000002d80), 0x0, &(0x7f0000002dc0)) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002ec0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000002e80), 0x106, 0x3}}, 0x20) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000002f00)={0x18000000, 0x70000000, {r3}, {0xffffffffffffffff}, 0x1, 0x5}) fcntl$setown(r4, 0x8, r5) 16m19.665486221s ago: executing program 1 (id=5372): r0 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\'<'}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x71, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x0, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "0f7d26"}, {0x5, 0x24, 0x0, 0x2d3}, {0xd, 0x24, 0xf, 0x1, 0xc8f, 0x8, 0x0, 0xfb}, {0x6, 0x24, 0x1a, 0x7a, 0x46}}, {{0x9, 0x5, 0x81, 0x3, 0x1f7, 0x3, 0xf2, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x3, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xff, 0xf6, 0x0, 0x10, 0x86}, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000009240dd306c646101"]}) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x26, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x93, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x6, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0xf8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x3, 0x3}}}}}]}}]}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1481) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\'<'}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) (async) syz_usb_connect$cdc_ncm(0x2, 0x71, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x0, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "0f7d26"}, {0x5, 0x24, 0x0, 0x2d3}, {0xd, 0x24, 0xf, 0x1, 0xc8f, 0x8, 0x0, 0xfb}, {0x6, 0x24, 0x1a, 0x7a, 0x46}}, {{0x9, 0x5, 0x81, 0x3, 0x1f7, 0x3, 0xf2, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x3, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xff, 0xf6, 0x0, 0x10, 0x86}, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000009240dd306c646101"]}) (async) syz_usb_disconnect(r0) (async) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x26, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x93, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x6, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0xf8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x3, 0x3}}}}}]}}]}}, 0x0) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1481) (async) 16m16.445037944s ago: executing program 1 (id=5389): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000540)={&(0x7f0000000380)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000600)=""/97, 0x61}], 0x4, &(0x7f0000000680)=""/178, 0xb2}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x12, 0x1, 0x127}, 0x0, &(0x7f0000001880)) 16m14.877547666s ago: executing program 1 (id=5396): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '\x95\\4\x15q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) writev(r1, &(0x7f0000002a00)=[{&(0x7f0000002840)="d8bf69db0becdfeeb1c0c547e1fb6386b08c57fa3faf098e3fb752056f1355c1a96083a7d85d2751904e02e1e5f623fffc71dc0c26de94b9761ca31c2949ae6019d23b451d42be01268065f690a3787937cf5743f35be19dcea3c8ca413ad12cb53336fb936481b620c1e4db3b9e23a2fa3e55200e90241fa8c21e5f4350d6a7eba8d71ccc8c6bc34483ff5c66a1c200dfdd06c7964346a72190c80d756613fd3f447ee5ecbd254c107b88904b1fc7fb95350fd6712891feba7b0774a0b6fe8da887a93f36f53fd04faf5b912567e6ff34caace632de299bc16173", 0xdb}, {&(0x7f0000000580)="b4ccdc24e4d66b52c84118b56f98df6ac6e56e5662ef82b4a7e8ecbbc43cc8e39f259668d30405866a6e6a18ffd87d8211a53ddec0ba0195ca7602e5dd2aa3f7ba5263248f4445763b32cd953b26704db7f77b26641f49fbf4aafb757f280db63b6a9d39ca6fa440ae3074c7c8355b41b805217a761abf7389cba28e10ac73d3339573f7804b75d0e0a2ecee4decf162f6aeefd5ab1d6ed1191263e6d8fc1da4e76cc26a", 0xa4}, {&(0x7f00000000c0)="2ed16bcb5f550dd7981dcaf6685880d986c568d565d067c837d26964f5eec0561499866d836d7c944762dfa163589f08fc8a8ed656", 0x35}, {&(0x7f0000000640)="d40a34cd8a98267a592166c6bb023bbba1fbc5a6e9a5d1a9b5a719e1d104c6ecf5f9b86baa83c8724898d6addce223138c62b5f0c9ece9dcfb93a8d54f70dddd741d74c59caae4067049550b", 0x4c}], 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0/file0\x00', 0x8) dup(r2) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) 16m13.66044347s ago: executing program 1 (id=5404): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '\x95\\4\x150xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100697036677265000040000280060003009e000000080005000000600006000f0004000000080004000200000006000200ff01000004001200060002"], 0x70}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x8800) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 13m4.986180805s ago: executing program 5 (id=5805): unshare(0x2000400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x24) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x1000, 0x14, 0x151}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 13m4.048281253s ago: executing program 5 (id=5808): r0 = socket$kcm(0xa, 0x2, 0x88) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x68}, 0x8000) close(r0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) 13m3.496795938s ago: executing program 5 (id=5810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="819050000000000095000000000000000ab6e543fbe3bbd76c5212a829abb1"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x25}, 0x94) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) (async) r4 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r7 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$HIDIOCSUSAGES(r4, 0x501c4814, &(0x7f00000022c0)={{0x2, 0x100, 0x2, 0xf, 0xb59, 0x9}, 0xc0, [0x80000000, 0x7, 0x0, 0x3, 0x6, 0x8, 0x2, 0x8, 0x0, 0x1000, 0x8001, 0x9155, 0x3, 0xff, 0xac80, 0x3, 0x1, 0xfffffffb, 0x3, 0x8, 0x5, 0xd, 0x7, 0x10000, 0xfffffffa, 0xfffffff9, 0x7, 0xc16, 0xa, 0x7, 0x8001, 0x9, 0x7b, 0x5, 0x0, 0x8, 0x3, 0x0, 0x55a, 0xfffff001, 0x0, 0x5, 0x41a, 0x5, 0xfffffff8, 0x5, 0x4, 0x4, 0x7, 0xb, 0x8, 0x9, 0x7fffffff, 0x40, 0x2, 0x0, 0x9, 0x8000, 0x9, 0xfffffffc, 0x2, 0xfffffc01, 0x8, 0xffff0000, 0xe6, 0x347, 0x40, 0x86, 0x5, 0x200, 0xfffffffd, 0x4, 0x5, 0x1, 0x1ed, 0x80000001, 0xebd, 0x8, 0x200, 0x3, 0x8, 0x9, 0x7, 0xfffffff9, 0x7, 0x1, 0x6, 0x0, 0x6, 0x63, 0x7f, 0x0, 0xe40, 0x8, 0x3, 0xff, 0x10, 0x8, 0xbe, 0x2, 0x3, 0x9, 0x1, 0x20, 0x1, 0x0, 0x7, 0x6, 0xc, 0x4, 0x101, 0x3, 0x6, 0x1, 0x40, 0x6, 0x80000001, 0x4d3, 0x8, 0x3, 0x10001, 0x6e, 0x6, 0xa, 0x3, 0x8, 0x5, 0x6, 0x98, 0x0, 0x2, 0xb9, 0x7, 0x2, 0x1000000, 0x0, 0x5, 0x7f, 0x200, 0x4d7, 0x4, 0x8, 0x7, 0x2, 0x8, 0x6, 0x8ac1, 0x81, 0x6, 0x8, 0xffffff8a, 0xfffffff7, 0xffffffff, 0x6, 0xfffff787, 0xf, 0x6, 0x7fffffff, 0x6, 0x1, 0x8, 0x6c26, 0x9, 0x3, 0x0, 0x52d, 0x9, 0x9, 0x6, 0x2, 0x800, 0x8, 0x88, 0x800, 0x9, 0x0, 0x8d, 0x0, 0x0, 0x200, 0xfa, 0x6, 0xd51, 0x1, 0xfca, 0xfffffff2, 0x427, 0x1, 0x781e, 0x2599, 0x9, 0x7, 0x426c, 0x1, 0x6, 0x2, 0x800, 0x3, 0x4, 0xe, 0x0, 0x1, 0x1, 0x7, 0x1, 0x9, 0x200, 0x2, 0x72, 0x7fff, 0x9, 0xe29, 0x8, 0x0, 0x4, 0x3ff, 0xfffffff7, 0x9, 0x5, 0x2, 0x7, 0xc61, 0x9, 0x6, 0x5, 0x9, 0xffffffff, 0x8, 0x8, 0xfffff3cf, 0x58, 0x0, 0x9, 0x7, 0x1a5e, 0xe, 0x1000, 0x7, 0xc, 0xb, 0x4, 0x1ec, 0x8, 0x2, 0x7, 0x0, 0xff, 0x200, 0x10, 0x35d, 0x80, 0x2, 0x9, 0x8000, 0x4, 0x0, 0x3, 0xfffffffc, 0xff3b, 0x0, 0x8, 0x1, 0x7ff, 0x8, 0xef52, 0x9d6a, 0x2, 0x8c6, 0x8000, 0x8, 0x4, 0x6, 0x7, 0x7, 0xe, 0x3, 0xa, 0x63d, 0x3, 0xffffff80, 0x10001, 0x3, 0x9, 0xa7, 0x5, 0x8000, 0x3, 0xd, 0x9, 0x80000000, 0x3, 0x4, 0x2, 0x8, 0xffff, 0x7ff, 0x4, 0x7a600000, 0x8, 0x6, 0x3ff, 0x2, 0x1000, 0xfffffff7, 0x0, 0x3, 0x7, 0x9, 0x0, 0x399, 0x9, 0x40e3, 0x9, 0x80, 0x80000000, 0x7ff2, 0x6, 0x6, 0x8, 0xf, 0x7, 0x13, 0x3, 0x7fff, 0x8, 0x3, 0x140a98c1, 0x0, 0x0, 0x8, 0x7, 0xff, 0x0, 0x6b, 0x2, 0x9, 0x80000000, 0xffff, 0x100, 0xc6, 0x2, 0xa89, 0x5, 0x80, 0x400, 0x6, 0x9, 0x0, 0x7f, 0x6, 0x4, 0xf3, 0x9, 0xd, 0x7df, 0x9, 0x5, 0xe58f, 0xa, 0x10001, 0x2, 0x2, 0xfffffffc, 0x7fffffff, 0x5, 0x0, 0x8, 0x2, 0x7, 0x7, 0xfffeffff, 0x621, 0xa, 0x9, 0x107d, 0x7, 0x9fd, 0x83d, 0x4, 0x7, 0x101, 0x1, 0x8, 0x4, 0x6, 0x7fff, 0xb, 0x0, 0x35, 0x8001, 0x3, 0x3, 0x4, 0x4, 0x7, 0x1, 0x9, 0x6, 0x0, 0x7, 0x9, 0x59f, 0x6, 0x9, 0x1c, 0x7874, 0x1, 0x477, 0x401, 0x0, 0x1, 0x6, 0x1, 0x0, 0x2, 0x800, 0xbe, 0x0, 0xe781, 0x1, 0xfffffffb, 0x7c8, 0x7, 0x8, 0x3, 0xe, 0x25, 0x8, 0x200, 0x70, 0xffffffff, 0x7, 0x4, 0x0, 0xffffff9c, 0xfffffffd, 0x5, 0xcf8, 0x3, 0x2, 0x1, 0x2, 0xb, 0x58, 0x93d6, 0x7, 0x400040, 0x1, 0x2, 0x5, 0x5, 0x5a, 0x80000001, 0x3, 0x3, 0x8, 0xffffffff, 0x8, 0x3, 0x4, 0x6, 0x7d, 0x0, 0x7bb, 0xfffffffc, 0x1, 0x8, 0x0, 0x5, 0x1, 0x24, 0x7, 0x3, 0x7, 0xffffffff, 0x7, 0x3ff, 0x8000, 0x8, 0x0, 0x3ff, 0x7, 0xf, 0x21, 0x3, 0x10000, 0x81, 0x7, 0x6, 0x7, 0x4, 0x80, 0x1, 0x6, 0x2, 0x6, 0x3b, 0x7bf, 0x0, 0x4, 0x3, 0xfff, 0x4, 0x7ff, 0xc, 0xfff, 0x8, 0x2, 0xd, 0x3, 0x8, 0x1fbdfd7a, 0x3, 0x4, 0x1, 0xe, 0x5, 0x7f, 0x5, 0xc, 0xe, 0x800, 0x1, 0x10001, 0x2, 0x1, 0x7, 0x7, 0x80, 0x3, 0x8, 0x6, 0x0, 0xff, 0x21, 0xffff, 0xc28, 0x4, 0x0, 0xffff0000, 0x7, 0x1, 0x0, 0x9, 0x1, 0xf4d4, 0x3, 0x6, 0x888, 0xdf, 0xffff3202, 0xb51, 0x0, 0x13c, 0x2, 0x3ff, 0x6, 0x5, 0x80000000, 0x831, 0x6, 0x40000, 0x7, 0x8, 0x9, 0x5, 0x8, 0x5740bf72, 0xf10, 0x2, 0x6, 0xfffffffd, 0xfffffff8, 0xffffffff, 0xfff, 0x7f, 0x0, 0x8, 0x49d3, 0x5, 0x6096, 0xd, 0x3, 0xe015, 0x5a, 0x20, 0x2, 0x6, 0x10001, 0xffffff7f, 0x3, 0x2, 0x6, 0xaff, 0x1, 0x6, 0x788, 0x4, 0x101, 0x3, 0x8, 0x5, 0x2, 0x2, 0x3, 0x9, 0x7d0, 0x2, 0x9, 0xfa, 0x40, 0x7ff, 0x5, 0x9, 0x2, 0xe2, 0x7, 0x5, 0x2, 0x1, 0x100, 0xffffffcc, 0x8000, 0x3, 0x800, 0x3, 0x5, 0x92, 0xa, 0x9, 0xfffffffe, 0x800, 0x8, 0x8, 0x480000, 0x5, 0x80000000, 0x40, 0x3, 0x6c, 0xa997, 0x8, 0x2, 0x101, 0x4, 0x5, 0xe, 0xb, 0x7fff, 0x3, 0x2, 0x2, 0x8001, 0xfffffffb, 0xffffffff, 0x7, 0x2, 0x1, 0x9, 0x2, 0x9, 0x3, 0x2, 0xfffffff9, 0x1da2, 0x6, 0x4, 0x7fffffff, 0x0, 0x1, 0x0, 0x1, 0xe, 0x9, 0x3, 0x9, 0x8, 0xfffff1e4, 0x6, 0xfffffe64, 0x5, 0x5, 0x3, 0x3, 0x8, 0x3ff, 0xb339, 0x7ff, 0x80, 0x4a, 0xfffffffc, 0xfda, 0x1, 0xc, 0x1000, 0x9, 0x200000, 0x6000000, 0x5, 0x7, 0x8d0, 0x2, 0xc8, 0x938, 0xfffffffa, 0x2, 0xfffff936, 0x6, 0x1, 0x0, 0x5, 0x6, 0xfffffff9, 0xfffffffd, 0xfffffffa, 0x6, 0x2, 0x80000001, 0x9, 0xd, 0x7, 0x4, 0x9d, 0x1, 0x8c, 0x8, 0x4, 0x8, 0x2, 0x401, 0x7f, 0x9, 0x0, 0x7fff, 0x3, 0x0, 0x0, 0x0, 0x1a8f, 0x1, 0x7, 0x3, 0x0, 0xfff, 0x0, 0x5, 0x5, 0x8, 0x7, 0xffffff80, 0x3, 0xa9d, 0x800, 0x3, 0x7, 0x6, 0xc, 0x8, 0x4, 0x6, 0x5, 0xc8, 0x300, 0xf, 0x2, 0x7fffffff, 0xb, 0x3, 0x80000000, 0x7, 0xfffffffc, 0x300, 0x7, 0x800, 0x4, 0x6, 0x7, 0x0, 0x2, 0x3, 0xffffffff, 0x1, 0x6, 0x0, 0x4, 0x1, 0xab, 0x1, 0xa68ab827, 0x4, 0x1, 0x4, 0xd, 0x8, 0x8, 0x8, 0x8001, 0x2b, 0x10, 0x7, 0xffffff01, 0x2c, 0x80000001, 0x5, 0x194, 0x8, 0x8, 0x3, 0x1, 0xfffeffff, 0x0, 0x3, 0x6, 0x8, 0x0, 0x0, 0xfffffff7, 0x38c, 0x7bdc, 0xea5, 0x3, 0x3, 0x5, 0x0, 0x0, 0x0, 0xb9, 0x3, 0x3ff, 0x20, 0x224, 0x5, 0x8, 0xb3b, 0x7, 0x7, 0x0, 0x8, 0xe, 0x7, 0x3, 0x3, 0x5, 0x2, 0x2464, 0xffffff81, 0x0, 0xb, 0xffff7f15, 0x0, 0xffffff01, 0x0, 0x8, 0xffffffff, 0x8, 0xd7, 0x10, 0x1000, 0x4, 0xfff, 0xff, 0x8, 0x20f1, 0x8, 0x10001, 0xffff, 0x80000001, 0x3, 0x9, 0x1, 0x7, 0x4, 0xfffeffff, 0x5, 0x8, 0x7ff, 0x4, 0x8000, 0x1, 0x9, 0x0, 0x6, 0x8, 0x40, 0x10, 0x0, 0xee7d, 0x7, 0x18, 0x4, 0x1, 0x1, 0x3, 0x0, 0x3, 0x81, 0x0, 0xfffffffb, 0x3, 0x5, 0x9, 0x2, 0x800, 0x7, 0xb8e4, 0x40, 0x400, 0x304828cc, 0x5, 0x1000, 0xfffffffa, 0x80000000, 0x0, 0x0, 0x8, 0x7ff, 0x3, 0xffff, 0x63, 0x9, 0x77, 0x7fff, 0x200, 0x1, 0x19, 0xc, 0x80, 0x401, 0x5, 0x1, 0xd, 0x5, 0x6, 0x101, 0x0, 0x4, 0x496, 0xfb, 0x7b, 0x3, 0x6, 0xac0, 0xcd, 0x0, 0x0, 0x9, 0x10001, 0x3, 0x8, 0x21a7, 0x72, 0x10, 0x0, 0x5, 0x6, 0x80, 0x2, 0x8, 0x8, 0x7, 0x0, 0x4, 0x6, 0x9834, 0x2, 0x3782, 0x1, 0x3, 0xfffffffa, 0x9a3, 0xe, 0x3ba, 0x1475, 0x5, 0x9, 0x8f5, 0xcea4, 0x8, 0x4, 0x80000001, 0x3, 0x7, 0x8862, 0x45, 0xd68, 0x0, 0x8, 0x400, 0x6, 0x8, 0x0, 0x89b, 0x2, 0xb, 0x76, 0x2, 0x762cfb77, 0xdf8d, 0x5, 0x6, 0x200, 0x8000, 0x6, 0x6, 0x2, 0x0, 0x6, 0x6, 0x1fcc, 0x80000000, 0xfffffc00, 0x4, 0x7, 0x6, 0x401, 0x4, 0x6, 0x81, 0x3, 0x7, 0x8, 0xd21, 0xf99c]}) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff1, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3cb}, {0x2, 0x49a, 0x9, 0x4, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r12, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) syz_usb_control_io$hid(r12, &(0x7f0000000780)={0x24, &(0x7f0000000480)={0x40, 0x31, 0xfe, {0xfe, 0x6, "5f7c18ee8e4d8c9859abc0083615438f6a03917fe3f0b057ee1282a4dff67b6028dce6a92d725ebfee4f8e71dbd8ce0eb74abaa44d458e14e3e58fbb3423acead5b78e9f714ec30b4cfa5f1e655fa991d252a164496edd3cdc49a7d4d192024263fb2efabd5f591b8f9ed9aa175c93a49804ff1516e4bbf387583c057d60248d6959de30ec9ba8d67ffda13389cd85df92d71b1c7b0418546b614c37e90e914e9e59ac043a5b760499f39ec68a4189c7244d64a6bdbc75ed3b1fe8581dc21a9a9f8646994df23f2dc3f1459584235311e06a24e8dbb846e1d288f49c90613af6184b07e5d679ebab5da4fdc993f97ce2f626f658f2e96a004f77928f"}}, &(0x7f0000000680)={0x0, 0x3, 0x86, @string={0x86, 0x3, "c1b97ac2cdd62f1de828b162cde946049fe11e7a34d3582f8bcb7c9c14afa33a790f07250c997aadc9c47624d9c6e95ad6bc036e1909081c67d37f7440e6126e1c119474b08d030f350d911dd0f32cedd4f965d97d68b0aaf909f66f1a4bc2aab77bf98b986af15920a6bfc72e4a8664289dd1282dda2206976466a497e716595eef0227"}}, &(0x7f0000000600)={0x0, 0x22, 0xa, {[@global=@item_012={0x1, 0x1, 0xa09cc7a3d038964e, "c9"}, @global=@item_012={0x2, 0x1, 0x9, "fe36"}, @main=@item_4={0x3, 0x0, 0xa, "1876d9a3"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0x8d1}}}}, &(0x7f00000009c0)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x1c, "7d0a8d1331f686adf0df9ac85d495eb348f02cf8602c8743e559682b"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000880)={0x20, 0x1, 0xee, "7dd8a7e048e945d86f538ca753a39433fac30acac5c6a715dd993ff8f067e141d61353b380f452effac1627f0517c15191da03a15ee07b37b8c8f19c3c427f1afafda5f6507561578b7546d430049a0bc3c16675d8aa6973f4c3f588484b9ceb36359ddbff886c1aefe3bb3ba00e769b53a806c288b26615c25b6a01400cb2aab6c63b365fea3cf05803dcc485b6438e73634ad1ca4386ecc9729508403e72a69e6113023d48b6362cd03a57d8aa5d3f8d81f38d6bb9da2854a08f1c9c36ec5208e1c12b1dc0f5b3b5ed31219b00b718287779838e2e3be9077a999c802577c2ed23c7ae6eef2a7192e5503773e7"}, &(0x7f0000000980)={0x20, 0x3, 0x1, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000340)=@xdp={0x2c, 0x7, r6, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="7cb17231ccff07000000000000", 0xd}], 0x1}, 0x4) 13m3.235043349s ago: executing program 5 (id=5812): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e, 0x80000) sendmsg$unix(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)="10c7daec1599ebcdc839575b15481af71bb22d0757259a979dfaffa1f42689cb869a84e7c0491968853eaffe32bb2f097aa66f01df00b4ea00d6164389421d30f95e2bacb8b32534a8a1f6f6411d5e18975454a043d1fa3e29c934e439386e7b9e4e79ff00fe41abf10fb4f7079975c865224de7d5b7e1a9dfe085facbb16e1f37f942291e1b8c342640c6b50cebfcf27e542c5b3eface7631f8efbe7c1fb37052fb3e531ab9d7dd1c4f000000806670646670bbf03c0820f558b24940914ab3643c9a7d3b5d5224d01c07a86df5b83db893242d9a6d27e5a9394656e99b2a0a98dce4992b75fb1978c86f893a1400000000000000", 0xf5}, {&(0x7f0000000280)="9d1a859e8a9287cb71f6363e5ee6544c9f2eb7e3190001f5978e737a876322ddba2a0384e466f8cb56fa103cd97e337f12a039e0d25beffeb43ac1d7ab3af65a4126a5346ddee445f442213872db559ffa637fdad325c869b81c880df86e8cd95220b6cf4f32e3c0fa1b5917a118864f8ade51a90f5583d55851b62f3843b23b450f56ea2adf3d197664b38f9e921d4250e161f3a3be4b84d78486d94b97bdd1461499a4ef851dbd627375c04d3b4695cb9ff6112e49bb806ec9e1e60b674f586bdc831af73511e01c41acf31122fd60e98944778cdf77", 0xd7}, {&(0x7f0000000480)="4f7a966cb2b2a0b05ac800f1211c972608525da9844877e35d6336579059479f777d55e987c67b01848b3161e43ee6dd58546bfc5cb68d4d0b67f0a4d7b8ad930e08beb5183e54f69ec7fce312919156b31267850534f987dd20bc368c7628b45ac621577cdc34c7b9eea16492ef35754ce998929e7951f23cd064c9add99229150b58ddd71d280c51ec927b1bd93192099da7e33c5412a97ccb176929ff722823b03c3baf234a897f46d099ac29a36f28675b03ca4cbf2ccf9f0492647bc974976fbea80cc4b152c162a78dbe219a1b0dc9f67b901bfdf3cd4cc9232dbeb3", 0xdf}, {&(0x7f0000000380)="1e65d39aea6be2c70b6c7284b452031a5586069dd16add815ba227209414484669da8720adcd5efb5836be58e896aa01e8b6a3abf5c9cf7654351861e34d33f44e4f27d875d2215732ad888948061b9730c63b8304cf1c3d630e7e34f56e7042badb60c326493d476f109a2f6bf7d39f52711954d8d232fc1a20b32f983ac3a8caa43e995926224b48a2e0c5bd7f9ef6f02c", 0x92}, {&(0x7f0000000580)="cef32feabbdc5b5ebeaf61da4e6a3b93d790c763eb941ed0c96773f1ad29774cdff06bed9370b268a40d9101cac1f67f162e60310f3580f98364fd2e70bbc2c4836a52a2c09861646447d3a2525e0c7365613d7ee8d759beeaac0a4a14470728312c958870f7773d232905388254e33cb3c21c7eace328da0c6f56aba5b55d783b15f21d8e41cad66b823c5e08c24bad2855076098bb9d8448a3e7d9861cd8010fc102baa3bb95dd6f70f699a587e9c08f6dbefb72f27bd5580d802f94e5f278", 0xc0}, {&(0x7f0000000640)="a0ed2df6532aec26ff801ea66088e9137375ef9b75a2628264b83b4a4c6bc0ca26e773360ebb716a0b0524b905339a33ee3b3d4a55a18c21514fedb57db68a59a2d9fc276435fcf4df78f26b5a4459", 0x4f}, {&(0x7f00000006c0)="fac338b7131a5e3704f7899e3e816c3aa442b2ded125280aeb7e6deaa7ed4eff2502091bb6741607febb7d5d37eb97be865d3554498554aa4cef897e710cb634afcdd7b14ee06640ccaffeaf35c5062bc26a83d3f605e721326f147a1dbe10a449280946c1d0e974d7678cb87fda86a8ab5650fdbdac915bc8ffe7f882e58cc9b8e43afed3de3f285582787cc7599ac51484121cb7628fe54bce2ac271689079c455b1eb38677229c184dc8ddb36e12831a5d38beb2ce6032ecf5e5b32efbc1372e249564441ad051ef0113d0a45b5", 0xcf}, {&(0x7f00000007c0)="afbee9cb5cecd8e917ab661800e5405bcdb9bd5920aeb01a83d4a9ef68079d21988895db70782862889f0ebc062a63442e7fcc2dba1bfbf73a7682bd331003f031a9facef6befa2b40c6e6ad92066a1039867e2497425fc450a0e7c10e012ebe3dcdc4811954a157e1a0a87f8d778444dcd34a3ab244030dbd7dad5bc8938f0e8c871228", 0x84}], 0x8, 0x0, 0x0, 0x8000}, 0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x9082}, {r3, 0x800}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000940)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'sit0\x00', 0x0, 0x7800, 0x8, 0x2, 0x7, {{0xb, 0x4, 0x0, 0x20, 0x2c, 0x68, 0x0, 0xb, 0xffded36fbefb9d78, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0x17, 0x3a, [@multicast1, @broadcast, @multicast1, @rand_addr=0x64010101, @rand_addr=0x64010102]}]}}}}}) sendto$packet(r4, &(0x7f0000000980)="4ecc92a24a6f51cb1866456bde70391acc53a5c25279c4d9f8d9ad21bcbb7b1dca3db056ffa89871a9f093a5615a827379a608c570556ba0cd6befafaa3321b66f1aa6ccadd9c15c7f", 0x49, 0x8004, &(0x7f0000000ac0)={0x11, 0xd, r5, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f00000000c0)) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0x400000b6}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e, 0x80000) (async) sendmsg$unix(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)="10c7daec1599ebcdc839575b15481af71bb22d0757259a979dfaffa1f42689cb869a84e7c0491968853eaffe32bb2f097aa66f01df00b4ea00d6164389421d30f95e2bacb8b32534a8a1f6f6411d5e18975454a043d1fa3e29c934e439386e7b9e4e79ff00fe41abf10fb4f7079975c865224de7d5b7e1a9dfe085facbb16e1f37f942291e1b8c342640c6b50cebfcf27e542c5b3eface7631f8efbe7c1fb37052fb3e531ab9d7dd1c4f000000806670646670bbf03c0820f558b24940914ab3643c9a7d3b5d5224d01c07a86df5b83db893242d9a6d27e5a9394656e99b2a0a98dce4992b75fb1978c86f893a1400000000000000", 0xf5}, {&(0x7f0000000280)="9d1a859e8a9287cb71f6363e5ee6544c9f2eb7e3190001f5978e737a876322ddba2a0384e466f8cb56fa103cd97e337f12a039e0d25beffeb43ac1d7ab3af65a4126a5346ddee445f442213872db559ffa637fdad325c869b81c880df86e8cd95220b6cf4f32e3c0fa1b5917a118864f8ade51a90f5583d55851b62f3843b23b450f56ea2adf3d197664b38f9e921d4250e161f3a3be4b84d78486d94b97bdd1461499a4ef851dbd627375c04d3b4695cb9ff6112e49bb806ec9e1e60b674f586bdc831af73511e01c41acf31122fd60e98944778cdf77", 0xd7}, {&(0x7f0000000480)="4f7a966cb2b2a0b05ac800f1211c972608525da9844877e35d6336579059479f777d55e987c67b01848b3161e43ee6dd58546bfc5cb68d4d0b67f0a4d7b8ad930e08beb5183e54f69ec7fce312919156b31267850534f987dd20bc368c7628b45ac621577cdc34c7b9eea16492ef35754ce998929e7951f23cd064c9add99229150b58ddd71d280c51ec927b1bd93192099da7e33c5412a97ccb176929ff722823b03c3baf234a897f46d099ac29a36f28675b03ca4cbf2ccf9f0492647bc974976fbea80cc4b152c162a78dbe219a1b0dc9f67b901bfdf3cd4cc9232dbeb3", 0xdf}, {&(0x7f0000000380)="1e65d39aea6be2c70b6c7284b452031a5586069dd16add815ba227209414484669da8720adcd5efb5836be58e896aa01e8b6a3abf5c9cf7654351861e34d33f44e4f27d875d2215732ad888948061b9730c63b8304cf1c3d630e7e34f56e7042badb60c326493d476f109a2f6bf7d39f52711954d8d232fc1a20b32f983ac3a8caa43e995926224b48a2e0c5bd7f9ef6f02c", 0x92}, {&(0x7f0000000580)="cef32feabbdc5b5ebeaf61da4e6a3b93d790c763eb941ed0c96773f1ad29774cdff06bed9370b268a40d9101cac1f67f162e60310f3580f98364fd2e70bbc2c4836a52a2c09861646447d3a2525e0c7365613d7ee8d759beeaac0a4a14470728312c958870f7773d232905388254e33cb3c21c7eace328da0c6f56aba5b55d783b15f21d8e41cad66b823c5e08c24bad2855076098bb9d8448a3e7d9861cd8010fc102baa3bb95dd6f70f699a587e9c08f6dbefb72f27bd5580d802f94e5f278", 0xc0}, {&(0x7f0000000640)="a0ed2df6532aec26ff801ea66088e9137375ef9b75a2628264b83b4a4c6bc0ca26e773360ebb716a0b0524b905339a33ee3b3d4a55a18c21514fedb57db68a59a2d9fc276435fcf4df78f26b5a4459", 0x4f}, {&(0x7f00000006c0)="fac338b7131a5e3704f7899e3e816c3aa442b2ded125280aeb7e6deaa7ed4eff2502091bb6741607febb7d5d37eb97be865d3554498554aa4cef897e710cb634afcdd7b14ee06640ccaffeaf35c5062bc26a83d3f605e721326f147a1dbe10a449280946c1d0e974d7678cb87fda86a8ab5650fdbdac915bc8ffe7f882e58cc9b8e43afed3de3f285582787cc7599ac51484121cb7628fe54bce2ac271689079c455b1eb38677229c184dc8ddb36e12831a5d38beb2ce6032ecf5e5b32efbc1372e249564441ad051ef0113d0a45b5", 0xcf}, {&(0x7f00000007c0)="afbee9cb5cecd8e917ab661800e5405bcdb9bd5920aeb01a83d4a9ef68079d21988895db70782862889f0ebc062a63442e7fcc2dba1bfbf73a7682bd331003f031a9facef6befa2b40c6e6ad92066a1039867e2497425fc450a0e7c10e012ebe3dcdc4811954a157e1a0a87f8d778444dcd34a3ab244030dbd7dad5bc8938f0e8c871228", 0x84}], 0x8, 0x0, 0x0, 0x8000}, 0x1) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) (async) ppoll(&(0x7f0000000100)=[{r3, 0x9082}, {r3, 0x800}], 0x2, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000940)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'sit0\x00', 0x0, 0x7800, 0x8, 0x2, 0x7, {{0xb, 0x4, 0x0, 0x20, 0x2c, 0x68, 0x0, 0xb, 0xffded36fbefb9d78, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0x17, 0x3a, [@multicast1, @broadcast, @multicast1, @rand_addr=0x64010101, @rand_addr=0x64010102]}]}}}}}) (async) sendto$packet(r4, &(0x7f0000000980)="4ecc92a24a6f51cb1866456bde70391acc53a5c25279c4d9f8d9ad21bcbb7b1dca3db056ffa89871a9f093a5615a827379a608c570556ba0cd6befafaa3321b66f1aa6ccadd9c15c7f", 0x49, 0x8004, &(0x7f0000000ac0)={0x11, 0xd, r5, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f00000000c0)) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0x400000b6}]}) (async) 13m2.952833205s ago: executing program 5 (id=5814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000440), 0xd5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000c00), &(0x7f0000000100)=""/87}, 0x20) 13m2.595763591s ago: executing program 34 (id=5814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000440), 0xd5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000c00), &(0x7f0000000100)=""/87}, 0x20) 10m3.704498676s ago: executing program 4 (id=6513): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x50b441) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x44cc750b5a831e98) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000180)={0x7f, 0x3ff, 0x7, 0x9, 0x1b, "03f37f0ce56ca288"}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0x1, 0x70bd2b, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0xd}, {0x0, 0xe}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0x7}}]}}]}, 0x40}}, 0x24040084) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='rxrpc\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000240)='\xd3\xae\xf6:\xbd\xc0\f\x86\t\x9b\xa7\xc4\x00', 0x0) close_range(0xffffffffffffffff, r0, 0x0) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, r7) 10m2.785454711s ago: executing program 4 (id=6524): syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla', 0xff6b) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) 10m2.649261732s ago: executing program 4 (id=6526): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x22080, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0x0, 0x989680}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xe0, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6d23}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x44800}, 0xc0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) 10m2.578589874s ago: executing program 7 (id=6527): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r1, &(0x7f0000000740), 0xff67) r2 = socket(0x3, 0x80000, 0x8d) sendfile(r0, r2, &(0x7f0000000000), 0xfffb) 10m2.465273664s ago: executing program 7 (id=6528): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x800, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208004500002000000000002f907800000001880b000c907875d00021000000000000"], 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000300)) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000380)=""/102383, &(0x7f0000000040)=0x18fef) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000140)={0x15, 0xffffffffffffffc7, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in={0x2, 0x4e23, @broadcast}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8fa50f638facd57de499163"}, 0x8000000000000001, 0xfffffffffffffffe, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) 10m1.535008262s ago: executing program 7 (id=6529): pipe(&(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012"], 0x3}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e23, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0x6c2) msgsnd(r5, &(0x7f0000000340)={0x3}, 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000005"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000004540)="a2", 0x1}], 0x1, 0x0, 0x0, 0xa6820000}, 0xafe6) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0xd3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x20008815}, 0x4040000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48082) ioctl$SCSI_IOCTL_GET_PCI(r10, 0x5393, &(0x7f0000000000)) 10m0.539329461s ago: executing program 7 (id=6532): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c05, r3) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x1ba8, 0xd9, 0x3, 0x1000c, 0x3f91}, 0x18, 0x1000) dup2(r2, r0) 10m0.237630567s ago: executing program 7 (id=6533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r1, &(0x7f0000000040), 0x4) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fb", 0x42}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001009d2743af1ad9d86b629f4567", @ANYRES32=r5, @ANYBLOB="240404000300000034001280110001006272696467655f736c617665000000001c000580080022"], 0x54}, 0x1, 0x0, 0x0, 0x200444c1}, 0x2404c884) 9m59.968914113s ago: executing program 7 (id=6536): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '\x95\\4\x150xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{0x0}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00005288c541248f0000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r3, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r8, 0x80, 0x7e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x9237, 0x149441) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000001cc0)='1', 0x1, 0x0}) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r11, 0xc00464be, &(0x7f0000000180)={r10}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x45f, 0x4, 0x1, {0xd, @pix={0x7, 0xb05, 0x4745504a, 0x0, 0x5, 0x1, 0xa, 0x7fff, 0x1, 0x8, 0x2, 0x3}}, 0x80000001}) 9m58.151837788s ago: executing program 4 (id=6545): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) userfaultfd(0x80001) (async) userfaultfd(0x80001) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') 9m57.341081833s ago: executing program 4 (id=6547): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000580)={0x0, 0x8000000000000001, 0x0, [0x9, 0x6, 0x200, 0xa58a, 0x4], [0x2, 0xaef, 0x8, 0x2, 0x80000000, 0x4, 0x10000, 0x100, 0x7fffffffffffffff, 0x5, 0x7fffffff, 0x3, 0xfffffffffffffff8, 0x4, 0x101, 0x9283, 0xcc, 0xfffffffe0000, 0x8001, 0x1, 0x3, 0x1, 0x1, 0x3ef0, 0x4, 0x5, 0xfff, 0x7, 0xdb, 0x2, 0x9, 0xfffffffffffffffa, 0x47, 0x12bd879d, 0xb0, 0xb32, 0x7ff, 0xc37, 0x80000001, 0x9, 0xa9, 0x7, 0x69e9, 0xd, 0x9, 0x1, 0x2cf, 0x4c1, 0x66f9, 0xd, 0xffffffff, 0xb, 0x3ff, 0x401, 0x3ff, 0x1, 0x5, 0x1000, 0x7ff, 0x1, 0x2, 0x100, 0x4, 0x7, 0x80000000, 0x80000001, 0x7fffffffffffffff, 0x10000, 0x2, 0x1, 0x2, 0x3, 0x7, 0x1, 0x51, 0x40, 0xdc, 0x9, 0x1, 0x5, 0x5fe8, 0x8000000000000000, 0x6, 0x2, 0x3, 0x0, 0x7, 0x0, 0x5, 0xb4, 0x0, 0x9, 0xffffffffffffffff, 0xffffffffffffff80, 0x2, 0x7, 0x1000, 0x1, 0xffffffffffffff4b, 0x22c, 0xbd, 0xf272, 0x800000000000, 0xffff, 0x8, 0xa, 0x80, 0x0, 0x2, 0x941c, 0x9, 0x6, 0x8, 0x2, 0x0, 0xcc6a, 0x7, 0x800, 0x5, 0x46bb, 0x2]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000009c0)={r1, 0x7, 0x1, [0x81, 0x4e, 0x0, 0x6, 0x8], [0x8, 0x3, 0x5, 0x7, 0x5, 0x10000, 0x2, 0x2, 0x569c, 0xfffffffffffffffb, 0x8, 0x7, 0x81, 0xfffffffffffffffa, 0x1000, 0x5, 0xe20, 0x9, 0xf, 0x9, 0x7ff, 0x4, 0xe, 0x1, 0x5eb2, 0x7, 0x3, 0x7fff, 0x7, 0x2, 0x4, 0x58c67a29, 0x297abb6f, 0x100000000, 0xe557, 0x7f, 0x4, 0xfed, 0x401, 0x6, 0x7, 0xac6, 0xcf, 0x3, 0x7, 0x8, 0x3, 0x6000000, 0x7ff, 0x81, 0x1, 0x8, 0x0, 0x7, 0x6, 0xb8, 0x5, 0xffff, 0x7, 0x8, 0x3, 0x6, 0x800, 0x7, 0x7, 0x2, 0x6, 0xfffffffffffffffe, 0x3, 0x10001, 0x3, 0x9, 0x3, 0x8001, 0x6, 0x0, 0xf0d7, 0x1, 0x9, 0x2, 0x8, 0x97, 0x1, 0x1, 0x8, 0x5, 0x9, 0x6, 0x0, 0x1, 0x2, 0x0, 0x5, 0x20f22c63, 0x6, 0x76b3, 0xf, 0x2, 0x4, 0x9, 0x3, 0xfff, 0x10000, 0xa, 0x7, 0x6, 0x7, 0xc0, 0x2, 0x3, 0x3, 0x0, 0xf, 0x3, 0x9, 0x64cc, 0x3, 0x7fffffff, 0x8000000000000000, 0xf90, 0x8]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ppoll(&(0x7f0000000280)=[{r3, 0x1021}, {r3, 0x2452}], 0x2, 0x0, 0x0, 0x0) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000500)={0x1, 0x0, [{0x40000070, 0x0, 0x1}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x24048044) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000180)={0x1, 0x0, [{0x7, 0x0, 0x3, 0xfaa, 0xffffffff, 0x4, 0x4}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x1, @empty, 0x3}], 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1d480, 0x0, 0x44a}) io_uring_enter(r8, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m42.153796468s ago: executing program 36 (id=6547): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000580)={0x0, 0x8000000000000001, 0x0, [0x9, 0x6, 0x200, 0xa58a, 0x4], [0x2, 0xaef, 0x8, 0x2, 0x80000000, 0x4, 0x10000, 0x100, 0x7fffffffffffffff, 0x5, 0x7fffffff, 0x3, 0xfffffffffffffff8, 0x4, 0x101, 0x9283, 0xcc, 0xfffffffe0000, 0x8001, 0x1, 0x3, 0x1, 0x1, 0x3ef0, 0x4, 0x5, 0xfff, 0x7, 0xdb, 0x2, 0x9, 0xfffffffffffffffa, 0x47, 0x12bd879d, 0xb0, 0xb32, 0x7ff, 0xc37, 0x80000001, 0x9, 0xa9, 0x7, 0x69e9, 0xd, 0x9, 0x1, 0x2cf, 0x4c1, 0x66f9, 0xd, 0xffffffff, 0xb, 0x3ff, 0x401, 0x3ff, 0x1, 0x5, 0x1000, 0x7ff, 0x1, 0x2, 0x100, 0x4, 0x7, 0x80000000, 0x80000001, 0x7fffffffffffffff, 0x10000, 0x2, 0x1, 0x2, 0x3, 0x7, 0x1, 0x51, 0x40, 0xdc, 0x9, 0x1, 0x5, 0x5fe8, 0x8000000000000000, 0x6, 0x2, 0x3, 0x0, 0x7, 0x0, 0x5, 0xb4, 0x0, 0x9, 0xffffffffffffffff, 0xffffffffffffff80, 0x2, 0x7, 0x1000, 0x1, 0xffffffffffffff4b, 0x22c, 0xbd, 0xf272, 0x800000000000, 0xffff, 0x8, 0xa, 0x80, 0x0, 0x2, 0x941c, 0x9, 0x6, 0x8, 0x2, 0x0, 0xcc6a, 0x7, 0x800, 0x5, 0x46bb, 0x2]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000009c0)={r1, 0x7, 0x1, [0x81, 0x4e, 0x0, 0x6, 0x8], [0x8, 0x3, 0x5, 0x7, 0x5, 0x10000, 0x2, 0x2, 0x569c, 0xfffffffffffffffb, 0x8, 0x7, 0x81, 0xfffffffffffffffa, 0x1000, 0x5, 0xe20, 0x9, 0xf, 0x9, 0x7ff, 0x4, 0xe, 0x1, 0x5eb2, 0x7, 0x3, 0x7fff, 0x7, 0x2, 0x4, 0x58c67a29, 0x297abb6f, 0x100000000, 0xe557, 0x7f, 0x4, 0xfed, 0x401, 0x6, 0x7, 0xac6, 0xcf, 0x3, 0x7, 0x8, 0x3, 0x6000000, 0x7ff, 0x81, 0x1, 0x8, 0x0, 0x7, 0x6, 0xb8, 0x5, 0xffff, 0x7, 0x8, 0x3, 0x6, 0x800, 0x7, 0x7, 0x2, 0x6, 0xfffffffffffffffe, 0x3, 0x10001, 0x3, 0x9, 0x3, 0x8001, 0x6, 0x0, 0xf0d7, 0x1, 0x9, 0x2, 0x8, 0x97, 0x1, 0x1, 0x8, 0x5, 0x9, 0x6, 0x0, 0x1, 0x2, 0x0, 0x5, 0x20f22c63, 0x6, 0x76b3, 0xf, 0x2, 0x4, 0x9, 0x3, 0xfff, 0x10000, 0xa, 0x7, 0x6, 0x7, 0xc0, 0x2, 0x3, 0x3, 0x0, 0xf, 0x3, 0x9, 0x64cc, 0x3, 0x7fffffff, 0x8000000000000000, 0xf90, 0x8]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ppoll(&(0x7f0000000280)=[{r3, 0x1021}, {r3, 0x2452}], 0x2, 0x0, 0x0, 0x0) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000500)={0x1, 0x0, [{0x40000070, 0x0, 0x1}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x24048044) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000180)={0x1, 0x0, [{0x7, 0x0, 0x3, 0xfaa, 0xffffffff, 0x4, 0x4}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x1, @empty, 0x3}], 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1d480, 0x0, 0x44a}) io_uring_enter(r8, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.664190872s ago: executing program 8 (id=8581): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) (async) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7f}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000440)="88", 0x1}], 0x1}, 0x4048043) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffffffffffc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12"], 0x48) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="a4000000d5a065b43752344824d750193ca3538cfbec92fb79efd738502c68ea2cb0e3982c545e60566c58e5ca5d92426bfc927d029d30f97074e4afcac1d1f8049757f57159839e2d2570e9bd46f3e16da3a33412223c0a45", @ANYRES16=0x0, @ANYBLOB="040028bd7000fedbdf250900000044000280060002004e20000006000e004e2000000800080003000000080006000700000005000d00010000000800070006000000080007000500000006000b000a00000014000180080008003d15c377ac42647f01800600020008000000090006006e6f6e65000000000800050004000000060004004e24000008000400810900000800050000100000"], 0xa4}, 0x1, 0x0, 0x0, 0x8041}, 0x20000000) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x10003, 0x1, 0x2, 0x1000, &(0x7f0000d57000/0x1000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xc000000, 0xfffffffb, 0xaaf, 0x0, [{0x4, 0x6, 0x2, '\x00', 0xfe}, {0x4, 0xe7, 0x9, '\x00', 0x7}, {0xd7, 0x8, 0x0, '\x00', 0x1}, {0x1, 0xa, 0x2, '\x00', 0x1}, {0xd2, 0x2, 0x5, '\x00', 0x6}, {0xe, 0x50, 0x0, '\x00', 0x9}, {0x7, 0x6, 0x7c, '\x00', 0x3}, {0x81, 0x8, 0x8, '\x00', 0x2}, {0xb, 0x80, 0xa, '\x00', 0x7}, {0x2, 0x9, 0x6, '\x00', 0x7}, {0xe, 0x80, 0x0, '\x00', 0x3}, {0x6, 0x42, 0x3, '\x00', 0x8}, {0x81, 0x81, 0x6, '\x00', 0x6}, {0xff, 0x2, 0x6, '\x00', 0x8}, {0x4, 0x2, 0x81}, {0x5, 0x0, 0x9, '\x00', 0x4}, {0x2, 0xf, 0xc1, '\x00', 0x3}, {0x5, 0x7, 0x5, '\x00', 0x4}, {0x23, 0x6, 0xb6, '\x00', 0x2}, {0x88, 0x3, 0x3f, '\x00', 0x4}, {0x5, 0xc, 0x3, '\x00', 0x3}, {0x0, 0x8, 0x6, '\x00', 0x5}, {0x6, 0x0, 0x8, '\x00', 0x10}, {0x40, 0x5, 0x81, '\x00', 0x5}]}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x7, 0x2, 0x182, 0x0, 0x0, 0x7fff, 0x9, 0x8, 0x1, 0x0, 0x9, 0x1, 0x8, 0x400000000000000, 0xbd5], 0x1, 0x1c4212}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12faff00ad6e86202f070022bf3f010203010902120001000000000904000000b4afd700"], 0x0) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f00000000c0)) (async) shutdown(r1, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x1}}, 0x0, 0x7ffe}, 0x90) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x12012, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x83e, &(0x7f00000000c0)={0x0, 0x811b, 0x400, 0x8, 0x3c4}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r10 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x30, 0x0, r10, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r7, 0x4ce1, 0x0, 0x0, 0x0, 0x0) 8.086900382s ago: executing program 8 (id=8584): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x1e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(0x0, r4) wait4(r4, 0x0, 0x2, 0x0) migrate_pages(r4, 0x1ff, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000000000000005000000000000000000000000bbff0200000000"], 0x0) 8.040575253s ago: executing program 6 (id=8585): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000003080)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001c80)={0x200, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0xfd, 0x4, "133c7fdf316a6f793b48440f53d5eecf04da7bbde922d789188b0f45a3666d7596d46f42cb885612807e6567f64441d60f52f0222297819c726cbfd1b2fd7e7fb4de1cbe8c85722ecd0ae2bfcc5b060a5cf1e0673820c0a18d0b3f82cfcad5a2dd97df6eb1b87888580304cfdee867c2cf78da52773865739f2a7b4422203514b4a5aebeca78ada418ffbbbb757bdee21bdaca688047b1f726f1a68d5916667caae5659110f7d2f103d744a38dece187212aaa70ed48ea4ccc232dd8f9feab11fe50cca1b97dab9a7be8d46f5bf121b1266dff2f3ef58117e455507e063dbf28d3c7eb72a27bf3b6116d37e04b7db05c0e0b0862c93b59e6c2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x38, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x31, 0x5, "81713307a3f54ec79ed5a5160a260d21c817fbea8ebc6ed788ef46501c402248dfe3d0b8047373cd4418d6c3c1"}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x44801}, 0x40) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000002200)={0x8, 0x0, [{0xc0000008, 0x3, 0x3, 0x80000001, 0xe, 0x9, 0x8}, {0x80000000, 0x2, 0x4, 0xe, 0x0, 0x258, 0x9}, {0x80000019, 0x5, 0x5, 0x7, 0xffffffa8, 0xfff, 0x4}, {0xb, 0x7, 0x6, 0x3, 0xed8, 0x2, 0x6}, {0x2, 0x8, 0x2, 0x5, 0x5, 0x1, 0x89}, {0x0, 0x7, 0x2, 0x1, 0x4, 0x3, 0x1c5}, {0x40000000, 0x8ae, 0x2, 0x0, 0x9, 0x8, 0xb}, {0x80000001, 0x8000, 0x4, 0x7, 0xa, 0x2, 0xd}]}) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) tgkill(r4, r4, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6b}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0xfffffffffffffe66}, 0x48) 6.589502997s ago: executing program 6 (id=8586): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '\x95\\4\x150xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x7f, 0xffffffff, 0xfff, 0x1, 0xf, 0x1, 0x3, 0xfffffffffffffffd, 0x61, 0xfff, 0x100000001, 0x1, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0xfffffffffffffff7, 0x8, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x800003, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e692ff, 0x5, 0x2, 0x2, 0x2, 0x1, 0x9, 0x1, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ffe, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x7, 0xcc, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x3, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0xa, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000"], &(0x7f0000001500), 0x200) unshare(0x2c020400) socket(0x15, 0x5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = msgget$private(0x0, 0x3ac) msgsnd(r4, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgsnd(r4, &(0x7f0000000280)={0x2}, 0x8, 0x0) msgrcv(r4, 0x0, 0x0, 0x2, 0x2800) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$fuse(0x0, 0x0, 0x0, 0x80000, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) socket$kcm(0x2, 0xa, 0x2) 5.997159462s ago: executing program 3 (id=8589): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00', @ANYBLOB="0000000000000000500012800b000100697036677265000040000280060003009e000000080005000000600006000f000400000008000400020000000600"], 0x70}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x8800) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 5.708683724s ago: executing program 8 (id=8591): openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r0, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5.477250098s ago: executing program 8 (id=8592): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x12, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'batadv_slave_0\x00', &(0x7f0000000180)=@ethtool_pauseparam={0x13, 0x7, 0x6, 0x5}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a63", 0xac) (async) sendto$inet(r3, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000640)=0x8, 0x4) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) unshare(0x40000000) (async) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x9, 0x0, 0x1000, 0x19, 0x0, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000300)=@udp6, 0x2}, 0x20) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000080)={0xa, @capture={0x0, 0x1, {0x2, 0x10000}, 0x402b2771, 0x80}}) (async) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20010, r5, 0x0) 4.777499337s ago: executing program 8 (id=8595): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x1006, 0x0, 0x0, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x288c2, 0x1bc) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x459, 0x10, r2, 0x0) r4 = socket(0x9, 0x5, 0x100) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r5, 0x4000000007, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) r6 = socket(0x200000000000011, 0x2, 0xd) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x3, 0x6, @random="f2c7e86bf831"}, 0x14) 4.776149409s ago: executing program 9 (id=8597): modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x20000000, 0xffffffffffffffff}, 0x10) modify_ldt$read(0x0, &(0x7f0000001840)=""/4105, 0x1009) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2a282) memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3f, 0x0, &(0x7f0000000100)="e30080670000ec67202c150365838717bd86dde148f0630962bb87dd5159fd2ee534a4e9b4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacb9", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x129100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) fsopen(0x0, 0x0) socket(0x2b, 0xa, 0x7) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000004c0)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @initial, {0x3, 0x40}}, 0x18, 0x5, @random=0xa9, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x6f, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x0, 0xc0}}}, 0x3a) 4.289288606s ago: executing program 0 (id=8598): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x30401, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000080)={0x35, &(0x7f0000000140)=[{0x29, '\x00', @st={0x4, [{0x1, @uvalue=0x7}, {0x1, @svalue=0xd91}, {0x1, @uvalue=0xff}, {0x1, @svalue=0x4}]}, 0x7f}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff, 0x82100) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 3.987647188s ago: executing program 6 (id=8599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = timerfd_create(0x0, 0x80000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x80, 0x3}, {0x4, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x9}, {}, {0x0, 0x85, 0xbe}, {0x0, 0x5, 0x3, '\x00', 0xfc}, {0x1, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x42}, {0x0, 0x2}, {0x0, 0x50}, {0x4, 0x0, 0x24, '\x00', 0x3}, {0x1, 0x4e}, {0x2, 0x2, 0x4}, {}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x81, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x7}, {0x0, 0xfd, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x5, 0xe}]}}) (async) socket$netlink(0x10, 0x3, 0x0) (async) dup(r3) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000380)={0x6, [0x8, 0x1, 0x8, 0xc6, 0x7, 0xfff7]}, &(0x7f0000000600)=0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0xc, 0x34424752, 0x2, @discrete={0x10000, 0x3}}) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r8, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) fcntl$setstatus(r9, 0x4, 0x40000) (async) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$XFS_IOC_FSINUMBERS(r10, 0xc0205867, &(0x7f0000000180)={&(0x7f0000000100)=0x2, 0xc, &(0x7f0000000240)=[{}], &(0x7f00000000c0)}) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000540)={0xfffffffffffffffc, 0x608000, 0x800, 0x0, 0x2}, 0x5d) 3.881615873s ago: executing program 0 (id=8600): mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x7, 0x44, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0xfff, 0x8, 0x0) 3.711518602s ago: executing program 0 (id=8601): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000003c0), &(0x7f00000002c0)=0x8) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) utimensat(r2, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{}, {0x0, 0xea60}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x10000) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140d, 0xd2b5594142800135}, 0x10}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100), 0x0, 0x2, 0x7, 0x0, r9}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) 3.637164533s ago: executing program 3 (id=8602): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a580)=[{{&(0x7f00000011c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001240)}, {&(0x7f0000001280)="dde3e8296a78e7c41ed7cec439c6b441c7a2ba3545b9b38920b26aff2dec19d1c7778389cc079d490eaba6dac349f258d085085ae73f97ecc9be1f25a560c08adcbfd679cf54313a8b48e10465268029fd3e8d62acf0de669b47c54994a3cd127c6819cb0a5f8626d8e2124e16152ccb824e4d9de6d128994a55bc7f1f8415f02987516fb3af1b5fd190599da0b0e3b632c50267cb42d70be1d82a3ddbbb9e26766997b3c0bf6fbfd70456719d770d25be481e2fe89dae416cb35d5398fda38e299128da809fa97209c1a978", 0xcc}], 0x2, &(0x7f0000001600)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, r3, r0, r2, r3]}}, @cred={{0x1c}}], 0x128, 0x20000040}}, {{&(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001a40)="258af9d1ffd9a3cdc856f88a9487bdc74131dc71b3e53c15c98facd7153a1b32cbe7d5c64973f039bad843eb4491d0ec27c67787ad20d3cad24d6d12b38ae5997a1cd78407f0b14745381cf2854860d8dc617ffede93c0b364b4536e001f88ea4858d634984334f544bdffdaeac8519d189fa71dcdc40dd157d99fe397d2449581b6db63133022d68e9085264dc76404a388", 0x92}, {&(0x7f0000001b00)="af2b3fc65035cba468e8b56b9988bddf199c0fee32d75e06b8f842e95750a10cba9671b48c52087f70889c583dc38b7e269fc0ca558ed673abad7deb11e20add00408e6ef45630214178635c1afc6f4ff9bbc8d1d2f09614c5aa93f3728f081ea33b79524d5043def689e0e3cef41d1d048ef5509badc0e6b21dfe6dff56067cacf9d9e558c9e71c883ffea367aa0df02e50cdfcca6fb616176546252a4f7be1a711f32bcb9fdde49de2b119898e857caa74d37b02cb270f27ed81cb2a840c7ef7cf", 0xc2}, {&(0x7f0000001800)="cf2681639b352c84654d945350fa528d9304b092eac61228d0163cc3688284158ddf", 0x22}, {&(0x7f0000001c00)="9ddbba62eda3e6f8cf7ffca00a3442155d616b14679a9e5110c0d0446803b36373b62e6d4df3dbb8c03ddbcb202ce891d5472f9e131b8e5f3e9330710285a04e45d3767e1be506cd069c776ca89722892474b6250a34ec3cf4e9a33e16f8f74f8f53a8ba59f1be7b44448fcf594f0faaaa", 0x71}, {&(0x7f0000001c80)="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", 0xff}, {&(0x7f0000001d80)="1dfe42947a5b73c237", 0x9}, {&(0x7f0000001dc0)="98a3de6dbc9a84e068af768438898688302a65b553c276199c9c1311aa5ba414567783cda23dcfbad8991118e9facfa65a54933bde18fb21903ec06f39c9b537964283", 0x43}], 0x7, &(0x7f0000001ec0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}], 0x38, 0x20000000}}, {{&(0x7f0000001f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007e80)=[{&(0x7f0000001f80)="2d4b9ab9c33a83c29f30aee1aa0995fa5e2a7be401fe34a0fbc0d208b98971f87c3c74192147683732d8c257207f468f4790391976efb8b4d78c67839bc9d7cd3f40d0b2", 0x44}, {&(0x7f0000002000)="5658c1de3c1e609b885c530d0c45e2acbe6cccfb2db5516a3517d37e5dfc074c0f6c82595eee864533369acfd05b3961ac6f0a962772f8ee910867794e7860b34652b7225d8bf1e98dcf1ae4d99b36ea620efb1661d92b67a5039ce9aa7ae33ee7ce923ed97b8984fcb455ad3cd723", 0x6f}], 0x2, &(0x7f0000007f80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80, 0xc0}}, {{&(0x7f000000a380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000a540)=[{&(0x7f000000a400)="13feabd0e627c04cde058f6f64aaf13240b1990008209e5845ac078f32ccd2e847ed8b274500075cbd00295d91f660bcca1ccc45bc80bee5429abd1f42bcb6d0929ef747a4b0e0432da666bcfc9a38db7c9c2cf9d403ef4f605aee870c9f05ebd7c84f9cb64c2fb8f2150c8e8e69009aadfbc30f715941ee", 0x78}, {&(0x7f000000a480)="1146dc85704acf78507c3f01b7ea3bca734426c4de8216becd3986daa2ebc2d8bd4288a4cfccaca4cde71f1139d0f09299f7ee9621689e7bd32bd1359df4bf0d2a5370c772f35cadbf48068addbd441fa7d13181f4d59c1bc77f723f7d0f1d49eec0c4b80755eec229d03e2a6bcf7c1de48a496d333e1d126b23f226c648b7b3356f3f718b0dec9b065fa0007d03570610dc38f9390f22979ad6d2453cc6d434e15f5eff43deb9e0", 0xa8}], 0x2, 0x0, 0x0, 0x20000080}}], 0x4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0xffffffffffffff30) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e28, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) recvfrom$inet(r4, &(0x7f0000000500)=""/165, 0xa5, 0x120, &(0x7f0000000400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 3.569505796s ago: executing program 6 (id=8603): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r1, 0xb) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0xb, 0x2, @generic=0x9, 0x10, 0x7, 0x8b}) syz_usb_connect$cdc_ncm(0x5, 0x75, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a4400001020301090263000201a160010904000001020d000005240600010524000c000d90e55ea1b5c2be26e77499d3240f0103000000020004f90406241a01000007240a91e381010905810320000103090904010000020d00000904010102020d000009058202ff03060906090503020002058309ba785feac114e1bdc3d214f84de75bc842a8f1eff6e1ae76052c2cd2d8fbf2213634d9c8f95d01aa95b6078d92746ad8d2639de707818d5dafe7c4ae822472a24ba8df280d2c3c1b629fa3cf98ba264e25bee0b1dbb0004662253af638b91ac09b73dd1a75f2e0c3a6d4bb88f20a4fec5e3704628b83ef315a173d6040580876594995c71d7dcb30766c7893a90a93f27bc65022d20cd9d573721beae3e5409362aa895ea3"], &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x5, 0x5, 0x8, 0xff, 0x7f}, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="0524f60f1000010b10fd0344000f0306"], 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x425}}]}) 3.037111424s ago: executing program 8 (id=8604): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x67, 0xe6, 0xa4, 0x20, 0xfe6, 0x9700, 0x5537, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3e, 0x1, 0x0, 0x1f, 0x1f, 0xc9}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x28000, 0x0) preadv(r3, &(0x7f0000002400)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x7fff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) unshare(0x62040200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x5e) 2.870246691s ago: executing program 9 (id=8605): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f00000001c0)=0x9, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a006da800000000100000001c00004b"], 0x24}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0094000000000000140012800400010076657468000000040400028808000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x42}, @TCA_CAKE_MPU={0x8, 0xe, 0x9e}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x240, 0x25018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @rand_addr=0x64010102}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) r9 = fanotify_init(0x40, 0x800) fanotify_mark(r9, 0x80, 0x4000000a, r0, &(0x7f0000000140)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYRESOCT=r9, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.632033838s ago: executing program 9 (id=8606): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x3, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{0xff}, {0x0, 0x4}, {0x0, 0xfc, 0x10}, {0xff, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0xd7}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x0, 0x0, 0x80, '\x00', 0x1}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {0x7}, {}, {0x2}, {0x5, 0x0, 0xfe}, {}, {0x20, 0x0, 0x0, '\x00', 0x2}, {}, {0x0, 0x0, 0x5}, {}, {0x7f}, {0x0, 0xfd, 0x6}]}}) (fail_nth: 2) 2.312702437s ago: executing program 3 (id=8607): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '\x95\\4\x150xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x114) (rerun: 32) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="f8000000000000000b01000003000000b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3496137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5e900000000000028000000000000000000000000080000c133a12a91872b3730467c92a3a5050f02b82b7e452f3e6b500000000000000012010000ff030000ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f5167332a0000000038000000000000000a010000630a0000fa08ab919987305c8ad63785f4a4bc84cb79f70a5d7698a3f59e1f0dbbe9b9f8ed970000001000000000000000130100000900000010000000000000001001000004000000000000000000000000000000000077874cf6e18bde0f1a4f9cd71371465fa0f4f73d8d253601dad8e0a53409cf897ab7626a1fdfcc35dd98"], 0x1c8}, 0x4000c010) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000000700000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x2) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000000), 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r4}) (async, rerun: 32) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r6 = signalfd(r5, &(0x7f0000000680)={[0x200]}, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, 0x0) shutdown(r6, 0x1) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r8, 0x0, &(0x7f0000000880)={'U+', 0x3}, 0x16, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r9, 0xe18}, 0x8) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000780)=@mmap={0xed, 0x0, 0x4, 0x10000, 0x0, {0x77359400}, {0x1, 0xc, 0x1, 0x3, 0x4, 0x10, "4297eb98"}, 0x1, 0x1, {}, 0x8}) (async) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) (async, rerun: 32) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) 1.956812602s ago: executing program 3 (id=8610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 1.952567942s ago: executing program 3 (id=8611): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x4a7) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0x12, 0x3, 0x80, 0x2, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x1, 0x1}}) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x302, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0x9}, {0xd, 0xf}, {0x1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x6c355cf6f71e45d9}, 0x6004c084) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000140)='-', 0x1}]) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r8, &(0x7f0000000180)={0xd2, 0x20, 0x0, 0x20, 0x6}, 0x1c) r9 = socket$kcm(0x2d, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e3, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) eventfd(0x833) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x57, {"400fc769c366ba410066ed0f2055c7442400c1000000c744240200000000ff2c24266466460f3834f166baa000b873000000ef470f484ef4b9cd0000000f32660f38822b14ce"}}, @nested_amd_invlpga={0x17d, 0x20, {0x70000, 0x2d59}}, @nested_create_vm={0x12d, 0x0, 0x800}, @wr_drn={0x68, 0xffffffffffffff2e, {0x0, 0xfffffffffffffff8}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x5, 0x7}}, @set_irq_handler={0xc8, 0x20, {0x43, 0x2}}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x0, {0x3, 0xfe, 0x7, 0x100, 0x1}}, @wr_drn={0x68, 0x20, {0x2, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0xae, 0x2}}, @code={0xa, 0x6e, {"0fc73d00000000f031af0b000000420f7854a0f6440f005887b9800000c00f3235000800000f300fc759bfc403754691060000000066baf80cb8886d2a8aef66bafc0cedb8010000000f01d9b95e020000b8577f7480ba000000000f30"}}, @rdmsr={0x66, 0x18, {0x4000040c}}, @wr_crn={0x67, 0x20, {0x8, 0x4}}, @nested_amd_vmsave={0x183, 0x18, 0x1}], 0x2fe}) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xd5986570d19de2b1, 0x3000}) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.87756293s ago: executing program 0 (id=8612): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00', @ANYBLOB="0000000000000000500012800b000100697036677265000040000280060003009e000000080005000000600006000f000400000008000400020000000600"], 0x70}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x8800) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.009499462s ago: executing program 3 (id=8613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r5, &(0x7f0000000180)="b97d", &(0x7f00000004c0)=""/178, 0x4}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350180696d367265673000000020000000001400400076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d61449311d070000000140035006772e530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x20040014) shutdown(r1, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x40, r10, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r12}, @val={0xffffffffffffff2f, 0x99, {0x9, 0x71}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @NL80211_ATTR_OFFCHANNEL_TX_OK]}, 0x40}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000180001002dbd"], 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x24040880) r13 = socket$unix(0x1, 0x1, 0x0) bind$unix(r13, 0x0, 0x0) 871.756546ms ago: executing program 9 (id=8614): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x1006, 0x0, 0x0, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x288c2, 0x1bc) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x200, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = socket(0x9, 0x5, 0x100) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r4, 0x4000000007, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) r5 = socket(0x200000000000011, 0x2, 0xd) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x3, 0x6, @random="f2c7e86bf831"}, 0x14) 869.043484ms ago: executing program 0 (id=8615): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000002c0)={0x88, 0x0, 'client0\x00', 0x0, "974e3f25dd592b44", "c3eb4b6872ff7e0909c2292e9a14aa57565a48894700", 0xf8fc, 0x9}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14d556a62676ae36e1d1656806"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xe2bf268aaf6847d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x8, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201510329fbf04038074045cec60102030109023d0002020610780907d40901786d3d400905010000020904020904e20002b22618bb0905010000027c9e09070585e3"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$cgroup_int(r5, &(0x7f0000000100)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) 332.996073ms ago: executing program 6 (id=8616): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1003ae6977f1f0787de342df58a8fe1c"]}]}) syz_usb_control_io(r2, &(0x7f0000000800)={0x2c, &(0x7f0000000000)={0x40, 0x23, 0xa5, {0xa5, 0x10, "7aaaa2857ec2044664df5aca4e076c5455a30094eec72d7e34fb347da8a9285304c3b83aad1e65ee009f480d6bc26acf86104a555dc96a42320361dea173f4bf512d810537b3a0e0c24f5c5080f4892685217a5895bd09adf3141c6846ec8352ef5a1ea525b52f76f0acc73c5ea71a3d2da417f1de1999b6cf737554609c18c93be1302ba75ebd6c0acf684b7f44d934bde38b8f7d298c847d02327a7747109253b685"}}, &(0x7f0000000180)={0x0, 0x3, 0x42, @string={0x42, 0x3, "548410340d20c56b1c76373173d6476c8d09b249619263c0e30ed8d85c7961d41e970955dc913d3802ed26e04298399d5e13c06352b056b9927713edc67fe6d8"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="000f31000000050f3100040bf4010280000305010003141004076786832f183b67f0ba401e64e5abb94503100b0a100302000001080100"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa4, 0x81, 0x5, 0x5, "cda5772f", "1ce5f82d"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x4, 0x9, 0x5, 0x1, 0x50}}}, &(0x7f0000000900)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="2014db000000a0f385424ba0838608d16e8f6b8823fb9965738bc0d9ad10a162f88d84011f7ed3df4f908292ffffffffffffff7fa866a0902b43e01401fe33f854abcf6b75f6fa14dc9a854f7dfd1b2d038b0612564baedd13592972df5afb445a193a3f549e01010000efac2d76feee98871bb32bd7539d75cc78de4cc99b2699e8b7510819d0e9be315a6ad60ee803818b877adc976a29b1713eacdf11ea949ee9f3656e54467f18cd167dd3f9419a6297731b2a97c459783febfd7749905882e2b1aba486b39a32bb46f8dbd4f5672791b762933f00"/225], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xbe}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1e0, 0x8}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000000580)={0x40, 0xb, 0x2, "de3d"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xb}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, "2804"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000400)=0x9, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f00000001c0)={0x0, [[0xffffffff, 0x0, 0xfffffff9, 0x8, 0x7, 0x6804, 0x0, 0xffffffff], [0x1, 0x20000ea, 0x0, 0x2], [0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000]], '\x00', [{0xfffffffc, 0xfffffffe}, {}, {}, {0x9, 0x4}, {0x4, 0x1}, {}, {}, {0x0, 0x100}, {}, {0x0, 0x4}, {0x200}], '\x00', 0x301}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0x0, 0x5800, 0x4e, &(0x7f0000000100)="53ec6252b7148220a6adad7f309abdbdc2c189d44ebbb2e92251152103a2db41a47023614f4f4f37d1e80d9fa47c2943f25c60bad96ab61461536e230902ed29baf71b66c4d868e62a43b8caebae"}], 0x1}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6d2d00, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x76, &(0x7f0000000100)=ANY=[], 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$XFS_IOC_FSGROWFSRT(r4, 0x40105870, &(0x7f00000007c0)={0xa, 0x6}) 0s ago: executing program 9 (id=8617): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x28011, r2, 0x0) preadv(r1, &(0x7f0000000380), 0x0, 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_complete(0x0) bind$unix(r4, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x200, 0x2f5}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001000000"], 0x18}, 0x0, 0x20048064}) io_uring_enter(r8, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r6, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r6, 0x3) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r5, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r5, 0x3) kernel console output (not intermixed with test programs): lid length. [ 2023.936234][T28285] loop5: detected capacity change from 0 to 4096 [ 2024.112053][T29444] usb 10-1: new full-speed USB device number 60 using dummy_hcd [ 2024.132654][T19852] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 2024.277916][T29444] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2024.301288][T29444] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2024.322063][T29444] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 2024.336094][T29444] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2024.349942][T19852] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2024.365309][T19852] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.374011][T19852] usb 9-1: Product: syz [ 2024.378775][T19852] usb 9-1: Manufacturer: syz [ 2024.386099][T29444] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2024.395715][T19852] usb 9-1: SerialNumber: syz [ 2024.400352][T29444] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.419200][T29444] usb 10-1: Product: syz [ 2024.424994][T29444] usb 10-1: Manufacturer: syz [ 2024.436787][T29444] usb 10-1: SerialNumber: syz [ 2024.548231][T28311] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2024.574368][T29444] cdc_mbim 10-1:1.0: skipping garbage [ 2024.592239][T19851] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 2024.715821][T28339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.727423][T28339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.753860][T19851] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2024.767027][T19851] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 2024.776676][T19851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.778469][T28286] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2024.792725][T28286] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2024.803309][T19851] usb 4-1: config 0 descriptor?? [ 2024.843926][T19852] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2024.856148][T19852] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2024.941781][T10494] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2025.095936][T10494] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2025.106512][T10494] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2025.115736][T10494] usb 1-1: config 220 interface 0 has no altsetting 0 [ 2025.126537][T10494] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2025.140160][T10494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.148259][T10494] usb 1-1: Product: syz [ 2025.152551][T10494] usb 1-1: Manufacturer: syz [ 2025.157178][T10494] usb 1-1: SerialNumber: syz [ 2025.226561][T19851] aquacomputer_d5next 0003:0C70:F00B.0086: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.3-1/input0 [ 2025.382659][T10494] uvcvideo 1-1:220.0: Found Unit with invalid ID 0 [ 2025.390327][T10494] uvcvideo 1-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 2025.397909][T10494] uvcvideo 1-1:220.0: No valid video chain found. [ 2025.411541][T10494] usb 1-1: USB disconnect, device number 35 [ 2025.432597][T19851] usb 4-1: USB disconnect, device number 125 [ 2025.537395][T28375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2025.548114][T28375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.085949][T28393] kAFS: unable to lookup cell 'ÿ' [ 2026.091126][T19852] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2026.112382][T28393] FAULT_INJECTION: forcing a failure. [ 2026.112382][T28393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2026.125762][T28393] CPU: 1 UID: 0 PID: 28393 Comm: syz.3.8125 Tainted: G L syzkaller #0 PREEMPT(full) [ 2026.125789][T28393] Tainted: [L]=SOFTLOCKUP [ 2026.125796][T28393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2026.125808][T28393] Call Trace: [ 2026.125815][T28393] [ 2026.125823][T28393] dump_stack_lvl+0xe8/0x150 [ 2026.125852][T28393] should_fail_ex+0x412/0x560 [ 2026.125872][T28393] _copy_to_user+0x31/0xb0 [ 2026.125910][T28393] simple_read_from_buffer+0xe1/0x170 [ 2026.125941][T28393] proc_fail_nth_read+0x1bb/0x230 [ 2026.125968][T28393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2026.125998][T28393] ? rw_verify_area+0x2a6/0x4d0 [ 2026.126012][T28393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2026.126032][T28393] vfs_read+0x20c/0xa70 [ 2026.126058][T28393] ? fdget_pos+0x246/0x320 [ 2026.126089][T28393] ? __pfx___mutex_lock+0x10/0x10 [ 2026.126107][T28393] ? __pfx_vfs_read+0x10/0x10 [ 2026.126126][T28393] ? __fget_files+0x2a/0x420 [ 2026.126155][T28393] ? __fget_files+0x3a0/0x420 [ 2026.126172][T28393] ? __fget_files+0x2a/0x420 [ 2026.126209][T28393] ksys_read+0x150/0x270 [ 2026.126231][T28393] ? __pfx_ksys_read+0x10/0x10 [ 2026.126264][T28393] do_syscall_64+0x14d/0xf80 [ 2026.126293][T28393] ? trace_irq_disable+0x3b/0x150 [ 2026.126313][T28393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2026.126327][T28393] ? clear_bhb_loop+0x40/0x90 [ 2026.126356][T28393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2026.126376][T28393] RIP: 0033:0x7f8abf35cfce [ 2026.126394][T28393] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2026.126410][T28393] RSP: 002b:00007f8ac0203fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2026.126428][T28393] RAX: ffffffffffffffda RBX: 00007f8ac02046c0 RCX: 00007f8abf35cfce [ 2026.126446][T28393] RDX: 000000000000000f RSI: 00007f8ac02040a0 RDI: 000000000000000c [ 2026.126455][T28393] RBP: 00007f8ac0204090 R08: 0000000000000000 R09: 0000000000000000 [ 2026.126463][T28393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2026.126471][T28393] R13: 00007f8abf616128 R14: 00007f8abf616090 R15: 00007f8abf73fa48 [ 2026.126492][T28393] [ 2026.481753][T10494] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2026.612393][T10494] usb 1-1: device descriptor read/64, error -71 [ 2026.818081][T29444] cdc_mbim 10-1:1.0: bind() failure [ 2026.901396][T10494] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2026.974901][T29444] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 2027.018454][T29444] cdc_ncm 10-1:1.1: bind() failure [ 2027.043287][T28412] FAULT_INJECTION: forcing a failure. [ 2027.043287][T28412] name failslab, interval 1, probability 0, space 0, times 0 [ 2027.057913][T28412] CPU: 1 UID: 0 PID: 28412 Comm: syz.9.8128 Tainted: G L syzkaller #0 PREEMPT(full) [ 2027.057943][T28412] Tainted: [L]=SOFTLOCKUP [ 2027.057951][T28412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2027.057962][T28412] Call Trace: [ 2027.057971][T28412] [ 2027.057979][T28412] dump_stack_lvl+0xe8/0x150 [ 2027.058011][T28412] should_fail_ex+0x412/0x560 [ 2027.058039][T28412] should_failslab+0xa8/0x100 [ 2027.058062][T28412] ? skb_clone+0x212/0x3a0 [ 2027.058089][T28412] kmem_cache_alloc_noprof+0x87/0x650 [ 2027.058117][T28412] ? __netlink_lookup+0xc6/0x8b0 [ 2027.058147][T28412] skb_clone+0x212/0x3a0 [ 2027.058178][T28412] __netlink_deliver_tap+0x404/0x850 [ 2027.058211][T28412] ? netlink_deliver_tap+0x2e/0x1b0 [ 2027.058234][T28412] netlink_deliver_tap+0x19c/0x1b0 [ 2027.058257][T28412] netlink_unicast+0x7e3/0x9b0 [ 2027.058284][T28412] ? __pfx_netlink_unicast+0x10/0x10 [ 2027.058306][T28412] ? netlink_sendmsg+0x650/0xb40 [ 2027.058325][T28412] ? skb_put+0x11b/0x210 [ 2027.058352][T28412] netlink_sendmsg+0x813/0xb40 [ 2027.058380][T28412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2027.058403][T28412] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2027.058426][T28412] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2027.058448][T28412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2027.058468][T28412] ____sys_sendmsg+0xa68/0xad0 [ 2027.058502][T28412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2027.058535][T28412] ? import_iovec+0x73/0xa0 [ 2027.058565][T28412] ___sys_sendmsg+0x2a5/0x360 [ 2027.058595][T28412] ? __pfx____sys_sendmsg+0x10/0x10 [ 2027.058651][T28412] ? __fget_files+0x2a/0x420 [ 2027.058676][T28412] ? __fget_files+0x3a0/0x420 [ 2027.058711][T28412] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2027.058740][T28412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2027.058792][T28412] ? __pfx_ksys_write+0x10/0x10 [ 2027.058820][T28412] do_syscall_64+0x14d/0xf80 [ 2027.058850][T28412] ? trace_irq_disable+0x3b/0x150 [ 2027.058877][T28412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2027.058905][T28412] ? clear_bhb_loop+0x40/0x90 [ 2027.058929][T28412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2027.058948][T28412] RIP: 0033:0x7fd0b739c799 [ 2027.058966][T28412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2027.058983][T28412] RSP: 002b:00007fd0b81b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2027.059004][T28412] RAX: ffffffffffffffda RBX: 00007fd0b7615fa0 RCX: 00007fd0b739c799 [ 2027.059019][T28412] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2027.059032][T28412] RBP: 00007fd0b81b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2027.059045][T28412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2027.059057][T28412] R13: 00007fd0b7616038 R14: 00007fd0b7615fa0 R15: 00007fd0b773fa48 [ 2027.059088][T28412] [ 2027.059164][T28412] netlink: zone id is out of range [ 2027.110321][T29444] usb 10-1: USB disconnect, device number 60 [ 2027.193028][T10494] usb 1-1: device descriptor read/64, error -71 [ 2027.198363][T28412] netlink: set zone limit has 8 unknown bytes [ 2027.506223][T19852] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -EPROTO [ 2027.529105][T10494] usb usb1-port1: attempt power cycle [ 2027.543973][T28417] loop8: detected capacity change from 0 to 8 [ 2027.585208][T19852] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2027.609339][T28417] Dev loop8: unable to read RDB block 8 [ 2027.615935][T19852] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2027.625622][T28417] loop8: unable to read partition table [ 2027.633008][T28417] loop8: partition table beyond EOD, truncated [ 2027.639972][T19852] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2027.650350][T28417] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2027.675248][T19852] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 2027.723878][T19852] usb 9-1: USB disconnect, device number 81 [ 2027.888954][T28444] netlink: 'syz.9.8132': attribute type 4 has an invalid length. [ 2027.901791][T10494] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2027.955393][T10494] usb 1-1: device descriptor read/8, error -71 [ 2028.062778][T19852] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 2028.201773][T10494] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2028.211863][T19852] usb 9-1: Using ep0 maxpacket: 32 [ 2028.218731][T19852] usb 9-1: config 0 has an invalid interface number: 47 but max is 0 [ 2028.226942][T19852] usb 9-1: config 0 has no interface number 0 [ 2028.233191][T10494] usb 1-1: device descriptor read/8, error -71 [ 2028.233255][T19852] usb 9-1: too many endpoints for config 0 interface 47 altsetting 24: 59, using maximum allowed: 30 [ 2028.241962][ T24] usb 10-1: new low-speed USB device number 61 using dummy_hcd [ 2028.250492][T19852] usb 9-1: config 0 interface 47 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 2028.278785][T19852] usb 9-1: config 0 interface 47 has no altsetting 0 [ 2028.288154][T19852] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2028.298544][T19852] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.307267][T19852] usb 9-1: Product: syz [ 2028.311514][T19852] usb 9-1: Manufacturer: syz [ 2028.316237][T19852] usb 9-1: SerialNumber: syz [ 2028.323590][T19852] usb 9-1: config 0 descriptor?? [ 2028.331792][T19851] usb 4-1: new low-speed USB device number 126 using dummy_hcd [ 2028.342287][T10494] usb usb1-port1: unable to enumerate USB device [ 2028.401784][ T24] usb 10-1: device descriptor read/64, error -71 [ 2028.461748][T19851] usb 4-1: device descriptor read/64, error -71 [ 2028.535896][T19852] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2028.544606][T19852] dvb-usb: bulk message failed: -22 (2/0) [ 2028.555157][T19852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2028.567039][T19852] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2028.576415][T19852] usb 9-1: media controller created [ 2028.594825][T19852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2028.619386][T19852] cxusb: set interface failed [ 2028.624462][T19852] dvb-usb: bulk message failed: -22 (1/0) [ 2028.644061][ T24] usb 10-1: new low-speed USB device number 62 using dummy_hcd [ 2028.664842][T19852] DVB: Unable to find symbol lgdt330x_attach() [ 2028.671198][T19852] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2028.702645][T19851] usb 4-1: new low-speed USB device number 127 using dummy_hcd [ 2028.741774][T19852] rc_core: IR keymap rc-dvico-portable not found [ 2028.748283][T19852] Registered IR keymap rc-empty [ 2028.754507][T19852] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 2028.767345][T19852] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input133 [ 2028.779690][T19852] dvb-usb: schedule remote query interval to 100 msecs. [ 2028.787383][T19852] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2028.799081][T19852] usb 9-1: USB disconnect, device number 82 [ 2028.802147][ T24] usb 10-1: device descriptor read/64, error -71 [ 2028.832005][T19851] usb 4-1: device descriptor read/64, error -71 [ 2028.839788][T19852] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2028.922160][ T24] usb usb10-port1: attempt power cycle [ 2028.952530][T19851] usb usb4-port1: attempt power cycle [ 2029.141779][T19852] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 2029.204087][T28514] ªªªªªª5gæ¹Q[Ô: renamed from bridge_slave_1 [ 2029.291948][T19851] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 2029.356808][ T24] usb 10-1: new low-speed USB device number 63 using dummy_hcd [ 2029.364914][T19851] usb 4-1: device descriptor read/8, error -71 [ 2029.377255][T19852] usb 9-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 2029.391077][T19852] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2029.400276][T19852] usb 9-1: config 1 has no interface number 0 [ 2029.408696][T19852] usb 9-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2029.426110][ T24] usb 10-1: device descriptor read/8, error -71 [ 2029.436172][T19852] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2029.457167][T19852] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.465578][T19852] usb 9-1: Product: syz [ 2029.469880][T19852] usb 9-1: Manufacturer: syz [ 2029.475549][T19852] usb 9-1: SerialNumber: syz [ 2029.510148][T19852] usb 9-1: selecting invalid altsetting 1 [ 2029.602053][T19851] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 2029.622731][T19851] usb 4-1: device descriptor read/8, error -71 [ 2029.671775][T10494] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2029.721832][ T24] usb 10-1: new low-speed USB device number 64 using dummy_hcd [ 2029.742849][T19851] usb usb4-port1: unable to enumerate USB device [ 2029.752257][ T24] usb 10-1: device descriptor read/8, error -71 [ 2029.826880][T10494] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2029.846450][T10494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2029.857599][T10494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2029.870461][T10494] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2029.883909][ T24] usb usb10-port1: unable to enumerate USB device [ 2029.899952][T10494] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2029.916433][T10494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.945928][T10494] usb 1-1: config 0 descriptor?? [ 2030.263871][T19852] cdc_ncm 9-1:1.1: bind() failure [ 2030.305262][T19852] usb 9-1: USB disconnect, device number 83 [ 2030.699036][T28545] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8137'. [ 2030.712239][T28545] netlink: 'syz.8.8137': attribute type 3 has an invalid length. [ 2030.950092][ T29] audit: type=1800 audit(1772151234.009:8276): pid=28550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.8138" name="bus" dev="tmpfs" ino=1596 res=0 errno=0 [ 2031.590730][T28562] FAULT_INJECTION: forcing a failure. [ 2031.590730][T28562] name failslab, interval 1, probability 0, space 0, times 0 [ 2031.609094][T28562] CPU: 1 UID: 0 PID: 28562 Comm: syz.3.8140 Tainted: G L syzkaller #0 PREEMPT(full) [ 2031.609119][T28562] Tainted: [L]=SOFTLOCKUP [ 2031.609124][T28562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2031.609133][T28562] Call Trace: [ 2031.609139][T28562] [ 2031.609146][T28562] dump_stack_lvl+0xe8/0x150 [ 2031.609169][T28562] should_fail_ex+0x412/0x560 [ 2031.609187][T28562] should_failslab+0xa8/0x100 [ 2031.609205][T28562] __kmalloc_noprof+0xe8/0x760 [ 2031.609219][T28562] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2031.609244][T28562] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2031.609269][T28562] genl_family_rcv_msg_doit+0xd9/0x330 [ 2031.609293][T28562] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2031.609318][T28562] ? apparmor_capable+0x126/0x170 [ 2031.609338][T28562] ? bpf_lsm_capable+0x9/0x20 [ 2031.609356][T28562] ? security_capable+0x7e/0x2c0 [ 2031.609375][T28562] genl_rcv_msg+0x61c/0x7a0 [ 2031.609398][T28562] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2031.609417][T28562] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 2031.609451][T28562] ? __lock_acquire+0x6b5/0x2cf0 [ 2031.609476][T28562] netlink_rcv_skb+0x232/0x4b0 [ 2031.609494][T28562] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2031.609516][T28562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2031.609543][T28562] ? down_read+0x272/0x2e0 [ 2031.609568][T28562] ? genl_rcv+0xd/0x40 [ 2031.609587][T28562] genl_rcv+0x28/0x40 [ 2031.609604][T28562] netlink_unicast+0x80f/0x9b0 [ 2031.609623][T28562] ? __pfx_netlink_unicast+0x10/0x10 [ 2031.609638][T28562] ? netlink_sendmsg+0x650/0xb40 [ 2031.609652][T28562] ? skb_put+0x11b/0x210 [ 2031.609672][T28562] netlink_sendmsg+0x813/0xb40 [ 2031.609693][T28562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2031.609734][T28562] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2031.609753][T28562] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2031.609769][T28562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2031.609785][T28562] ____sys_sendmsg+0xa68/0xad0 [ 2031.609812][T28562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2031.609837][T28562] ? import_iovec+0x73/0xa0 [ 2031.609860][T28562] ___sys_sendmsg+0x2a5/0x360 [ 2031.609883][T28562] ? __pfx____sys_sendmsg+0x10/0x10 [ 2031.609926][T28562] ? __fget_files+0x2a/0x420 [ 2031.609945][T28562] ? __fget_files+0x3a0/0x420 [ 2031.609970][T28562] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2031.609992][T28562] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2031.610019][T28562] ? __pfx_ksys_write+0x10/0x10 [ 2031.610041][T28562] do_syscall_64+0x14d/0xf80 [ 2031.610062][T28562] ? trace_irq_disable+0x3b/0x150 [ 2031.610082][T28562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2031.610097][T28562] ? clear_bhb_loop+0x40/0x90 [ 2031.610125][T28562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2031.610139][T28562] RIP: 0033:0x7f8abf39c799 [ 2031.610151][T28562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2031.610163][T28562] RSP: 002b:00007f8ac0225028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2031.610178][T28562] RAX: ffffffffffffffda RBX: 00007f8abf615fa0 RCX: 00007f8abf39c799 [ 2031.610188][T28562] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2031.610197][T28562] RBP: 00007f8ac0225090 R08: 0000000000000000 R09: 0000000000000000 [ 2031.610205][T28562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2031.610213][T28562] R13: 00007f8abf616038 R14: 00007f8abf615fa0 R15: 00007f8abf73fa48 [ 2031.610233][T28562] [ 2032.232573][T10494] usbhid 1-1:0.0: can't add hid device: -71 [ 2032.238714][T10494] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2032.281427][T10494] usb 1-1: USB disconnect, device number 40 [ 2032.463691][T28589] kAFS: unable to lookup cell 'ÿ' [ 2032.779480][T28594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8146'. [ 2032.837322][T28597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8146'. [ 2033.324457][T28608] loop8: detected capacity change from 0 to 8 [ 2033.342566][T28608] Dev loop8: unable to read RDB block 8 [ 2033.388758][T28608] loop8: unable to read partition table [ 2033.427649][T28608] loop8: partition table beyond EOD, truncated [ 2033.464958][T28608] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2033.720903][T28619] loop8: detected capacity change from 0 to 8 [ 2033.743331][T28619] Dev loop8: unable to read RDB block 8 [ 2033.770833][T28619] loop8: unable to read partition table [ 2033.813511][T28619] loop8: partition table beyond EOD, truncated [ 2033.860379][T28619] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2034.609215][ T29] audit: type=1326 audit(1772151237.689:8277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28566 comm="syz.9.8142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b739c799 code=0x7ffc0000 [ 2034.908946][T28639] loop2: detected capacity change from 0 to 7 [ 2034.931888][T28639] Dev loop2: unable to read RDB block 7 [ 2034.937593][T28639] loop2: AHDI p2 p3 [ 2034.942353][T28639] loop2: partition table partially beyond EOD, truncated [ 2035.141854][ T29] audit: type=1326 audit(1772151237.739:8278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28566 comm="syz.9.8142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b739c799 code=0x7ffc0000 [ 2035.491984][T19852] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2035.641748][T19852] usb 9-1: device descriptor read/64, error -71 [ 2035.871729][T10494] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 2035.979059][T19852] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2036.098092][T10494] usb 10-1: Using ep0 maxpacket: 8 [ 2036.121758][T10494] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2036.142752][T19852] usb 9-1: device descriptor read/64, error -71 [ 2036.426742][T19852] usb usb9-port1: attempt power cycle [ 2036.444078][T10494] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2036.494150][T10494] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2036.530042][T10494] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14129, setting to 64 [ 2036.632525][T10494] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2036.691199][T10494] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.730667][T10494] usb 10-1: config 0 descriptor?? [ 2036.759690][T28676] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8160'. [ 2036.781847][T19852] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 2036.812624][T19852] usb 9-1: device descriptor read/8, error -71 [ 2036.914677][T28682] loop8: detected capacity change from 0 to 8 [ 2036.933174][T28682] Dev loop8: unable to read RDB block 8 [ 2036.938848][T28682] loop8: unable to read partition table [ 2036.955401][T28682] loop8: partition table beyond EOD, truncated [ 2036.985924][T28682] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2037.051934][T19852] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 2037.077561][T19852] usb 9-1: device descriptor read/8, error -71 [ 2037.192261][T19852] usb usb9-port1: unable to enumerate USB device [ 2037.348955][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.355492][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.388989][T28702] netlink: zone id is out of range [ 2037.399876][T28702] netlink: set zone limit has 8 unknown bytes [ 2037.423037][T19852] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2037.591755][T19852] usb 4-1: Using ep0 maxpacket: 16 [ 2037.599278][T19852] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 2037.608180][T19852] usb 4-1: config 0 has no interface number 0 [ 2037.618868][T19852] usb 4-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= 0.01 [ 2037.630578][T19852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.639023][T19852] usb 4-1: Product: syz [ 2037.643539][T19852] usb 4-1: Manufacturer: syz [ 2037.648232][T19852] usb 4-1: SerialNumber: syz [ 2037.656170][T19852] usb 4-1: config 0 descriptor?? [ 2037.674309][T19852] ums-usbat 4-1:0.151: USB Mass Storage device detected [ 2037.742716][T19851] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2037.875315][T15066] usb 4-1: USB disconnect, device number 4 [ 2037.903929][T19851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 2037.916971][T19851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2037.927055][T19851] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2037.940097][T19851] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 2037.949779][T19851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.961596][T19851] usb 1-1: config 0 descriptor?? [ 2038.174813][T28705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8165'. [ 2038.302955][T28731] FAULT_INJECTION: forcing a failure. [ 2038.302955][T28731] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.315866][T28731] CPU: 0 UID: 0 PID: 28731 Comm: syz.8.8166 Tainted: G L syzkaller #0 PREEMPT(full) [ 2038.315895][T28731] Tainted: [L]=SOFTLOCKUP [ 2038.315901][T28731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2038.315909][T28731] Call Trace: [ 2038.315915][T28731] [ 2038.315921][T28731] dump_stack_lvl+0xe8/0x150 [ 2038.315944][T28731] should_fail_ex+0x412/0x560 [ 2038.315963][T28731] should_failslab+0xa8/0x100 [ 2038.315984][T28731] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 2038.316007][T28731] ? __alloc_skb+0x186/0x7d0 [ 2038.316024][T28731] ? __alloc_skb+0x1d0/0x7d0 [ 2038.316040][T28731] ? __local_bh_enable_ip+0xd0/0x130 [ 2038.316060][T28731] __alloc_skb+0x1d0/0x7d0 [ 2038.316076][T28731] ? netlink_ack_tlv_len+0x6c/0x210 [ 2038.316094][T28731] netlink_ack+0x146/0xa50 [ 2038.316108][T28731] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2038.316129][T28731] ? ref_tracker_free+0x693/0x840 [ 2038.316145][T28731] ? __copy_skb_header+0xa3/0x4a0 [ 2038.316165][T28731] ? __pfx_ref_tracker_free+0x10/0x10 [ 2038.316181][T28731] ? __skb_clone+0x63/0x7a0 [ 2038.316205][T28731] netlink_rcv_skb+0x2b6/0x4b0 [ 2038.316221][T28731] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2038.316239][T28731] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2038.316260][T28731] ? netlink_deliver_tap+0x2e/0x1b0 [ 2038.316281][T28731] netlink_unicast+0x80f/0x9b0 [ 2038.316299][T28731] ? __pfx_netlink_unicast+0x10/0x10 [ 2038.316314][T28731] ? netlink_sendmsg+0x650/0xb40 [ 2038.316329][T28731] ? skb_put+0x11b/0x210 [ 2038.316348][T28731] netlink_sendmsg+0x813/0xb40 [ 2038.316369][T28731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2038.316387][T28731] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2038.316404][T28731] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2038.316419][T28731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2038.316434][T28731] ____sys_sendmsg+0xa68/0xad0 [ 2038.316459][T28731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2038.316483][T28731] ? import_iovec+0x73/0xa0 [ 2038.316505][T28731] ___sys_sendmsg+0x2a5/0x360 [ 2038.316527][T28731] ? __pfx____sys_sendmsg+0x10/0x10 [ 2038.316566][T28731] ? __fget_files+0x2a/0x420 [ 2038.316584][T28731] ? __fget_files+0x3a0/0x420 [ 2038.316608][T28731] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2038.316629][T28731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2038.316655][T28731] ? __pfx_ksys_write+0x10/0x10 [ 2038.316674][T28731] do_syscall_64+0x14d/0xf80 [ 2038.316694][T28731] ? trace_irq_disable+0x3b/0x150 [ 2038.316714][T28731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2038.316727][T28731] ? clear_bhb_loop+0x40/0x90 [ 2038.316743][T28731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2038.316756][T28731] RIP: 0033:0x7fa2ecd9c799 [ 2038.316769][T28731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2038.316781][T28731] RSP: 002b:00007fa2eaff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2038.316795][T28731] RAX: ffffffffffffffda RBX: 00007fa2ed015fa0 RCX: 00007fa2ecd9c799 [ 2038.316805][T28731] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 2038.316814][T28731] RBP: 00007fa2eaff6090 R08: 0000000000000000 R09: 0000000000000000 [ 2038.316822][T28731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2038.316830][T28731] R13: 00007fa2ed016038 R14: 00007fa2ed015fa0 R15: 00007fa2ed13fa48 [ 2038.316849][T28731] [ 2038.654047][T19851] kye 0003:0458:501A.0087: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 2038.664854][T19851] hid_parser_main: 7 callbacks suppressed [ 2038.664868][T19851] kye 0003:0458:501A.0087: unknown main item tag 0x0 [ 2038.692189][T19851] kye 0003:0458:501A.0087: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0 [ 2038.703127][T19851] kye 0003:0458:501A.0087: tablet-enabling feature report not found [ 2038.711146][T19851] kye 0003:0458:501A.0087: tablet enabling failed [ 2038.917701][T10494] usb 1-1: USB disconnect, device number 41 [ 2039.026863][T19852] usb 10-1: USB disconnect, device number 65 [ 2039.051765][T19851] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2039.485007][T19851] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2039.501770][T19851] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 2039.563104][T19851] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2039.605631][T19851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.625834][T19851] usb 4-1: Product: syz [ 2039.630011][T19851] usb 4-1: Manufacturer: syz [ 2039.653247][T19851] usb 4-1: SerialNumber: syz [ 2039.865817][T28779] fuse: Bad value for 'fd' [ 2039.912248][T19851] cdc_ncm 4-1:1.0: bind() failure [ 2039.931188][T28780] loop8: detected capacity change from 0 to 8 [ 2039.952439][T19851] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2039.958623][T28780] Dev loop8: unable to read RDB block 8 [ 2039.959329][T19851] cdc_ncm 4-1:1.1: bind() failure [ 2039.975627][T28780] loop8: unable to read partition table [ 2039.992483][T19851] usb 4-1: USB disconnect, device number 5 [ 2040.002223][T28780] loop8: partition table beyond EOD, truncated [ 2040.041740][T28780] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2040.196334][T28807] FAULT_INJECTION: forcing a failure. [ 2040.196334][T28807] name failslab, interval 1, probability 0, space 0, times 0 [ 2040.209493][T28807] CPU: 0 UID: 0 PID: 28807 Comm: syz.9.8178 Tainted: G L syzkaller #0 PREEMPT(full) [ 2040.209525][T28807] Tainted: [L]=SOFTLOCKUP [ 2040.209535][T28807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2040.209548][T28807] Call Trace: [ 2040.209557][T28807] [ 2040.209566][T28807] dump_stack_lvl+0xe8/0x150 [ 2040.209602][T28807] should_fail_ex+0x412/0x560 [ 2040.209632][T28807] should_failslab+0xa8/0x100 [ 2040.209660][T28807] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 2040.209694][T28807] ? __alloc_skb+0x186/0x7d0 [ 2040.209722][T28807] ? __alloc_skb+0x1d0/0x7d0 [ 2040.209747][T28807] ? __local_bh_enable_ip+0xd0/0x130 [ 2040.209779][T28807] __alloc_skb+0x1d0/0x7d0 [ 2040.209806][T28807] ? netlink_ack_tlv_len+0x6c/0x210 [ 2040.209835][T28807] netlink_ack+0x146/0xa50 [ 2040.209857][T28807] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2040.209882][T28807] ? ref_tracker_free+0x693/0x840 [ 2040.209907][T28807] ? __copy_skb_header+0xa3/0x4a0 [ 2040.209947][T28807] ? __pfx_ref_tracker_free+0x10/0x10 [ 2040.209971][T28807] ? __skb_clone+0x63/0x7a0 [ 2040.210011][T28807] netlink_rcv_skb+0x2b6/0x4b0 [ 2040.210037][T28807] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2040.210066][T28807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2040.210102][T28807] ? netlink_deliver_tap+0x2e/0x1b0 [ 2040.210136][T28807] netlink_unicast+0x80f/0x9b0 [ 2040.210167][T28807] ? __pfx_netlink_unicast+0x10/0x10 [ 2040.210210][T28807] ? netlink_sendmsg+0x650/0xb40 [ 2040.210235][T28807] ? skb_put+0x11b/0x210 [ 2040.210267][T28807] netlink_sendmsg+0x813/0xb40 [ 2040.210303][T28807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2040.210335][T28807] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2040.210362][T28807] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2040.210388][T28807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2040.210418][T28807] ____sys_sendmsg+0xa68/0xad0 [ 2040.210460][T28807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2040.210513][T28807] ? import_iovec+0x73/0xa0 [ 2040.210547][T28807] ___sys_sendmsg+0x2a5/0x360 [ 2040.210583][T28807] ? __pfx____sys_sendmsg+0x10/0x10 [ 2040.210648][T28807] ? __fget_files+0x2a/0x420 [ 2040.210677][T28807] ? __fget_files+0x3a0/0x420 [ 2040.210717][T28807] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2040.210751][T28807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2040.210792][T28807] ? __pfx_ksys_write+0x10/0x10 [ 2040.210825][T28807] do_syscall_64+0x14d/0xf80 [ 2040.210857][T28807] ? trace_irq_disable+0x3b/0x150 [ 2040.210887][T28807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2040.210909][T28807] ? clear_bhb_loop+0x40/0x90 [ 2040.210935][T28807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2040.210963][T28807] RIP: 0033:0x7fd0b739c799 [ 2040.210983][T28807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2040.211001][T28807] RSP: 002b:00007fd0b81b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2040.211024][T28807] RAX: ffffffffffffffda RBX: 00007fd0b7615fa0 RCX: 00007fd0b739c799 [ 2040.211041][T28807] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 2040.211055][T28807] RBP: 00007fd0b81b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2040.211069][T28807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2040.211082][T28807] R13: 00007fd0b7616038 R14: 00007fd0b7615fa0 R15: 00007fd0b773fa48 [ 2040.211114][T28807] [ 2040.603879][T28815] sctp: [Deprecated]: syz.0.8175 (pid 28815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2040.603879][T28815] Use struct sctp_sack_info instead [ 2040.882285][T28831] netlink: 'syz.3.8183': attribute type 10 has an invalid length. [ 2040.947778][T28831] team0: Device veth1_macvtap failed to register rx_handler [ 2040.997128][T28838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2041.456409][T28853] loop8: detected capacity change from 0 to 8 [ 2041.501981][ T5028] Dev loop8: unable to read RDB block 8 [ 2041.507609][ T5028] loop8: unable to read partition table [ 2041.520380][ T5028] loop8: partition table beyond EOD, truncated [ 2041.529916][T28853] Dev loop8: unable to read RDB block 8 [ 2041.536206][T28853] loop8: unable to read partition table [ 2041.547396][T28853] loop8: partition table beyond EOD, truncated [ 2041.565455][T28853] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2041.673258][T28856] usb usb8: usbfs: process 28856 (syz.9.8181) did not claim interface 0 before use [ 2042.387535][T28878] loop3: detected capacity change from 0 to 7 [ 2042.433220][T28878] Dev loop3: unable to read RDB block 7 [ 2042.463241][T28878] loop3: unable to read partition table [ 2042.469665][T28878] loop3: partition table beyond EOD, truncated [ 2042.476168][T28878] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2043.159873][ T29] audit: type=1326 audit(1772151246.239:8279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28890 comm="syz.6.8191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbffe39c799 code=0x0 [ 2043.575640][T28907] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8193'. [ 2043.694597][T28904] input: syz0 as /devices/virtual/input/input135 [ 2043.861804][T19851] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2043.903242][T28922] sctp: [Deprecated]: syz.8.8194 (pid 28922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2043.903242][T28922] Use struct sctp_sack_info instead [ 2044.075314][T19851] usb 4-1: Using ep0 maxpacket: 32 [ 2044.113982][T19851] usb 4-1: config 8 has an invalid interface number: 203 but max is 0 [ 2044.123514][T19851] usb 4-1: config 8 has no interface number 0 [ 2044.129776][T19851] usb 4-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 2044.153730][T19851] usb 4-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2044.364044][T19851] usb 4-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 2044.411786][T19851] usb 4-1: config 8 interface 203 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2044.428489][T19851] usb 4-1: config 8 interface 203 has no altsetting 0 [ 2044.550823][T19851] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 2044.601974][T19851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.610022][T19851] usb 4-1: Product: syz [ 2044.614290][T19851] usb 4-1: Manufacturer: syz [ 2044.620462][T19851] usb 4-1: SerialNumber: syz [ 2044.663810][T28907] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2044.671101][T28907] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2044.901881][T28907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8193'. [ 2044.911045][T28907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8193'. [ 2044.920242][T28907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8193'. [ 2044.952781][T19698] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2044.984781][T28907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8193'. [ 2044.996017][T19698] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2045.014284][T19698] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2045.033328][T28907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8193'. [ 2045.083533][T19698] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2045.125917][T28907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8193'. [ 2045.205393][ C0] port100 4-1:8.203: NFC: Urb failure (status -71) [ 2045.409869][ C0] port100 4-1:8.203: NFC: Urb failure (status -71) [ 2045.490438][T19851] port100 4-1:8.203: NFC: Could not get supported command types [ 2045.530291][T28955] loop8: detected capacity change from 0 to 8 [ 2045.541605][T19851] usb 4-1: USB disconnect, device number 6 [ 2045.555290][T28955] Dev loop8: unable to read RDB block 8 [ 2045.561423][T28955] loop8: unable to read partition table [ 2045.576682][T28955] loop8: partition table beyond EOD, truncated [ 2045.601780][T28955] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2046.090361][T28978] netlink: zone id is out of range [ 2046.111816][T28978] netlink: set zone limit has 8 unknown bytes [ 2046.143718][T28978] FAULT_INJECTION: forcing a failure. [ 2046.143718][T28978] name failslab, interval 1, probability 0, space 0, times 0 [ 2046.214996][T28978] CPU: 0 UID: 0 PID: 28978 Comm: syz.3.8202 Tainted: G L syzkaller #0 PREEMPT(full) [ 2046.215029][T28978] Tainted: [L]=SOFTLOCKUP [ 2046.215043][T28978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2046.215052][T28978] Call Trace: [ 2046.215058][T28978] [ 2046.215065][T28978] dump_stack_lvl+0xe8/0x150 [ 2046.215089][T28978] should_fail_ex+0x412/0x560 [ 2046.215110][T28978] should_failslab+0xa8/0x100 [ 2046.215129][T28978] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 2046.215154][T28978] ? __alloc_skb+0x1d0/0x7d0 [ 2046.215172][T28978] ? __local_bh_enable_ip+0xd0/0x130 [ 2046.215199][T28978] __alloc_skb+0x1d0/0x7d0 [ 2046.215217][T28978] ? netlink_ack_tlv_len+0x6c/0x210 [ 2046.215236][T28978] netlink_ack+0x146/0xa50 [ 2046.215251][T28978] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2046.215274][T28978] ? __lock_acquire+0x6b5/0x2cf0 [ 2046.215299][T28978] netlink_rcv_skb+0x2b6/0x4b0 [ 2046.215317][T28978] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2046.215339][T28978] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2046.215367][T28978] ? down_read+0x272/0x2e0 [ 2046.215381][T28978] ? genl_rcv+0xd/0x40 [ 2046.215402][T28978] genl_rcv+0x28/0x40 [ 2046.215421][T28978] netlink_unicast+0x80f/0x9b0 [ 2046.215442][T28978] ? __pfx_netlink_unicast+0x10/0x10 [ 2046.215460][T28978] ? netlink_sendmsg+0x650/0xb40 [ 2046.215487][T28978] ? skb_put+0x11b/0x210 [ 2046.215506][T28978] netlink_sendmsg+0x813/0xb40 [ 2046.215529][T28978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2046.215547][T28978] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2046.215564][T28978] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2046.215579][T28978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2046.215594][T28978] ____sys_sendmsg+0xa68/0xad0 [ 2046.215620][T28978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2046.215645][T28978] ? import_iovec+0x73/0xa0 [ 2046.215666][T28978] ___sys_sendmsg+0x2a5/0x360 [ 2046.215689][T28978] ? __pfx____sys_sendmsg+0x10/0x10 [ 2046.215730][T28978] ? __fget_files+0x2a/0x420 [ 2046.215748][T28978] ? __fget_files+0x3a0/0x420 [ 2046.215772][T28978] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2046.215793][T28978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2046.215818][T28978] ? __pfx_ksys_write+0x10/0x10 [ 2046.215839][T28978] do_syscall_64+0x14d/0xf80 [ 2046.215858][T28978] ? trace_irq_disable+0x3b/0x150 [ 2046.215878][T28978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.215891][T28978] ? clear_bhb_loop+0x40/0x90 [ 2046.215907][T28978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.215921][T28978] RIP: 0033:0x7f8abf39c799 [ 2046.215933][T28978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2046.215944][T28978] RSP: 002b:00007f8ac0225028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2046.215959][T28978] RAX: ffffffffffffffda RBX: 00007f8abf615fa0 RCX: 00007f8abf39c799 [ 2046.215969][T28978] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2046.215978][T28978] RBP: 00007f8ac0225090 R08: 0000000000000000 R09: 0000000000000000 [ 2046.215986][T28978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2046.215994][T28978] R13: 00007f8abf616038 R14: 00007f8abf615fa0 R15: 00007f8abf73fa48 [ 2046.216015][T28978] [ 2046.814452][T28988] kAFS: unable to lookup cell 'ÿ' [ 2047.232705][T29019] fuse: Bad value for 'fd' [ 2047.488641][T29013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2047.496027][T29013] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2047.502331][T29013] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2047.508592][T29013] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2047.514963][T29013] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2048.239169][T29037] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8210'. [ 2048.934274][T29046] loop8: detected capacity change from 0 to 8 [ 2048.982981][ T5028] Dev loop8: unable to read RDB block 8 [ 2048.997017][ T5028] loop8: unable to read partition table [ 2049.037195][ T5028] loop8: partition table beyond EOD, truncated [ 2049.062633][T29049] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8214'. [ 2049.082787][T29046] Dev loop8: unable to read RDB block 8 [ 2049.151909][T29046] loop8: unable to read partition table [ 2049.238162][T29046] loop8: partition table beyond EOD, truncated [ 2049.275008][T29046] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2049.501819][ T9851] Bluetooth: hci1: command 0x0c1a tx timeout [ 2049.581722][ T9851] Bluetooth: hci4: command 0x0406 tx timeout [ 2049.581809][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 2049.587783][ T9851] Bluetooth: hci2: command 0x0406 tx timeout [ 2049.594105][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 2049.675087][T29072] netlink: zone id is out of range [ 2049.680356][T29072] netlink: set zone limit has 8 unknown bytes [ 2050.413700][ T29] audit: type=1326 audit(1772151253.499:8280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29095 comm="syz.0.8222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c039c799 code=0x7ffc0000 [ 2050.690225][T29117] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8223'. [ 2050.729958][T29119] syzkaller0: entered promiscuous mode [ 2050.737268][T29119] syzkaller0: entered allmulticast mode [ 2051.220805][T29144] openvswitch: netlink: Flow key attr not present in new flow. [ 2051.237446][T29144] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2051.854918][T29151] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8229'. [ 2051.901332][T29153] loop8: detected capacity change from 0 to 8 [ 2051.911164][T29153] Dev loop8: unable to read RDB block 8 [ 2051.927346][T29155] netlink: 'syz.6.8229': attribute type 13 has an invalid length. [ 2051.940633][T29153] loop8: unable to read partition table [ 2051.957926][T29153] loop8: partition table beyond EOD, truncated [ 2052.085361][T29153] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2052.211831][T29155] gretap0: refused to change device tx_queue_len [ 2052.352990][T29155] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2052.370126][T29159] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8231'. [ 2052.661728][T10494] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 2052.729207][T29166] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8233'. [ 2052.826880][T29172] kAFS: unable to lookup cell 'ÿ' [ 2052.837030][T10494] usb 9-1: Using ep0 maxpacket: 8 [ 2052.885936][T10494] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 2052.898911][T10494] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2052.926860][T10494] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2052.948549][T29166] pimreg: tun_chr_ioctl cmd 1074025677 [ 2052.954344][T29166] pimreg: linktype set to 270 [ 2052.989911][T10494] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2053.015673][T10494] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2053.051523][T10494] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2053.101521][T10494] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.159627][T29176] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8235'. [ 2053.356049][T10494] usb 9-1: usb_control_msg returned -32 [ 2053.371320][T10494] usbtmc 9-1:16.0: can't read capabilities [ 2054.168446][T29195] xt_hashlimit: size too large, truncated to 1048576 [ 2054.344608][T29201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2054.354615][T29201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2054.807930][T29211] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8241'. [ 2055.200128][T29215] loop8: detected capacity change from 0 to 8 [ 2055.253246][ T5028] Dev loop8: unable to read RDB block 8 [ 2055.263382][ T5028] loop8: unable to read partition table [ 2055.329391][ T5028] loop8: partition table beyond EOD, truncated [ 2055.362133][T29215] Dev loop8: unable to read RDB block 8 [ 2055.367832][T29215] loop8: unable to read partition table [ 2055.374214][T29215] loop8: partition table beyond EOD, truncated [ 2055.380455][T29215] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2055.559546][T29222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8243'. [ 2055.817339][T29235] loop2: detected capacity change from 0 to 14 [ 2055.828570][T29235] Dev loop2: unable to read RDB block 14 [ 2055.850299][T29235] loop2: unable to read partition table [ 2055.866744][T29235] loop2: partition table beyond EOD, truncated [ 2055.885044][T29235] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2056.033206][T29233] bond_slave_1: entered promiscuous mode [ 2056.058282][T29233] bond_slave_1: left promiscuous mode [ 2056.153430][T29250] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2056.327733][T29261] netlink: 576 bytes leftover after parsing attributes in process `syz.9.8250'. [ 2056.452074][T10494] usb 9-1: USB disconnect, device number 88 [ 2056.464617][T29272] netlink: zone id is out of range [ 2056.490005][T29272] netlink: zone id is out of range [ 2056.504235][T29281] loop8: detected capacity change from 0 to 8 [ 2056.531750][T29272] netlink: zone id is out of range [ 2056.536900][T29272] netlink: zone id is out of range [ 2056.551549][T29281] Dev loop8: unable to read RDB block 8 [ 2056.567886][T29281] loop8: unable to read partition table [ 2056.578382][T29272] netlink: zone id is out of range [ 2056.584210][T29290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8252'. [ 2056.596915][T29289] veth0_to_hsr: mtu less than device minimum [ 2056.603795][T29281] loop8: partition table beyond EOD, truncated [ 2056.604904][T29272] netlink: zone id is out of range [ 2056.616797][T29288] overlayfs: missing 'lowerdir' [ 2056.642281][T29272] netlink: zone id is out of range [ 2056.651942][T29272] netlink: zone id is out of range [ 2056.662263][T29272] netlink: zone id is out of range [ 2056.681771][T29281] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2057.079089][T29319] binder: BINDER_SET_CONTEXT_MGR already set [ 2057.097060][T29319] binder: 29318:29319 ioctl 4018620d 200000000100 returned -16 [ 2057.598578][T29343] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8264'. [ 2057.611030][T29343] netlink: 188 bytes leftover after parsing attributes in process `syz.8.8264'. [ 2057.735482][T29349] kAFS: unable to lookup cell 'ÿ' [ 2059.321773][T29402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8274'. [ 2059.673613][T29421] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8276'. [ 2098.784939][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.791718][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2150.099663][T29063] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 2150.112340][T29063] Bluetooth: hci1: connection err: -111 [ 2150.211769][T19855] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 2150.320598][T29506] net_ratelimit: 21 callbacks suppressed [ 2150.320616][T29506] netlink: zone id is out of range [ 2150.360766][T29506] netlink: zone id is out of range [ 2150.370895][T29506] netlink: zone id is out of range [ 2150.391112][T29506] netlink: zone id is out of range [ 2150.419897][T29506] netlink: zone id is out of range [ 2150.441199][T19855] usb 10-1: Using ep0 maxpacket: 16 [ 2150.447492][T29506] netlink: zone id is out of range [ 2150.453436][T29506] netlink: zone id is out of range [ 2150.458962][T29506] netlink: zone id is out of range [ 2150.471192][T29506] netlink: zone id is out of range [ 2150.477061][T29506] netlink: set zone limit has 8 unknown bytes [ 2150.483484][T19855] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2150.491509][T19855] usb 10-1: can't read configurations, error -61 [ 2150.622689][T19855] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 2150.663738][T29518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8293'. [ 2150.822144][T19855] usb 10-1: Using ep0 maxpacket: 16 [ 2150.829882][T19855] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2150.839147][T19855] usb 10-1: can't read configurations, error -61 [ 2150.873113][T19855] usb usb10-port1: attempt power cycle [ 2151.228567][T19855] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 2151.289278][T19855] usb 10-1: Using ep0 maxpacket: 16 [ 2151.294648][T19851] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2151.307355][T19855] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2151.339807][T19855] usb 10-1: can't read configurations, error -61 [ 2151.454179][T19851] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2151.477579][T19855] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 2151.485368][T19851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.513171][T19851] usb 4-1: config 0 descriptor?? [ 2151.531068][T19855] usb 10-1: Using ep0 maxpacket: 16 [ 2151.539365][T19851] cp210x 4-1:0.0: cp210x converter detected [ 2151.547890][T19855] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2151.557158][T19855] usb 10-1: can't read configurations, error -61 [ 2151.564750][T19855] usb usb10-port1: unable to enumerate USB device [ 2151.881462][T19852] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2151.941512][T19851] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2152.000596][T19851] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2152.037646][T19852] usb 1-1: Using ep0 maxpacket: 32 [ 2152.045685][T19852] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 2152.061532][T19852] usb 1-1: config 0 has no interface number 0 [ 2152.068134][T19852] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2152.090626][T19852] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2152.100095][T19852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.124424][T19852] usb 1-1: Product: syz [ 2152.128621][T19852] usb 1-1: Manufacturer: syz [ 2152.154850][T19852] usb 1-1: SerialNumber: syz [ 2152.174232][T19852] usb 1-1: config 0 descriptor?? [ 2152.180339][T29555] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 2152.197963][T15066] usb 4-1: USB disconnect, device number 7 [ 2152.252242][T15066] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2152.301292][T15066] cp210x 4-1:0.0: device disconnected [ 2152.400249][T29555] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 2152.856840][T19852] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2152.896147][T19852] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 2152.944908][T19852] asix 1-1:0.188: probe with driver asix failed with error -71 [ 2152.980998][T19852] usb 1-1: USB disconnect, device number 43 [ 2153.146067][T29617] netlink: 112 bytes leftover after parsing attributes in process `syz.9.8306'. [ 2153.495323][T29642] input: syz0 as /devices/virtual/input/input136 [ 2153.552172][ T29] audit: type=1326 audit(1772151356.629:8281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29639 comm="syz.0.8309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76c039c799 code=0x0 [ 2154.376822][T29681] netlink: 'syz.6.8312': attribute type 12 has an invalid length. [ 2155.509892][T29698] net_ratelimit: 10 callbacks suppressed [ 2155.509912][T29698] netlink: zone id is out of range [ 2155.734040][T29698] netlink: zone id is out of range [ 2155.739225][T29698] netlink: zone id is out of range [ 2155.819075][T29698] netlink: zone id is out of range [ 2155.851686][T29698] netlink: zone id is out of range [ 2155.891500][T29698] netlink: zone id is out of range [ 2155.930870][T29698] netlink: zone id is out of range [ 2155.970385][T29698] netlink: zone id is out of range [ 2156.009861][T29698] netlink: zone id is out of range [ 2156.039121][T29698] netlink: set zone limit has 8 unknown bytes [ 2156.340775][T29702] loop8: detected capacity change from 0 to 8 [ 2156.379591][T29578] Dev loop8: unable to read RDB block 8 [ 2156.397540][T29578] loop8: unable to read partition table [ 2156.433249][T29578] loop8: partition table beyond EOD, truncated [ 2156.465489][T29702] Dev loop8: unable to read RDB block 8 [ 2156.502140][T29702] loop8: unable to read partition table [ 2156.542246][T29702] loop8: partition table beyond EOD, truncated [ 2156.551777][T29702] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2156.911514][T29717] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8322'. [ 2156.957131][T29717] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8322'. [ 2156.995013][T29717] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8322'. [ 2157.531964][T19855] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2157.682100][T29759] loop8: detected capacity change from 0 to 8 [ 2157.882501][T29759] Dev loop8: unable to read RDB block 8 [ 2157.929470][T19855] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2157.949038][T19855] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2157.959733][T19855] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2157.970915][T19855] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2157.991736][T29759] loop8: unable to read partition table [ 2158.008189][T29759] loop8: partition table beyond EOD, truncated [ 2158.047031][T29759] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2158.095123][T19855] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2158.378734][T19855] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2158.437570][T19855] usb 1-1: config 1 interface 1 has no altsetting 0 [ 2158.488049][T19855] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2158.501939][T19855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.539541][T19855] usb 1-1: Product: syz [ 2158.550717][T19855] usb 1-1: Manufacturer: syz [ 2158.558597][T19855] usb 1-1: SerialNumber: syz [ 2158.591873][T19855] cdc_ncm 1-1:1.0: skipping garbage [ 2158.617535][T19855] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 2158.648978][T19855] cdc_ncm 1-1:1.0: bind() failure [ 2158.790451][T29740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2158.810507][T29740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2159.042534][T19855] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 2159.092587][T29812] [U]  [ 2159.095476][T29812] [U] K{‘ [ 2159.105150][T29812] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 2159.114732][T29812] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 2159.133472][T29812] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 2159.155701][T29812] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 2159.312636][T15066] usb 1-1: USB disconnect, device number 44 [ 2159.331753][T19855] usb 10-1: Using ep0 maxpacket: 8 [ 2159.347947][T19855] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 2159.360922][T29812] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 2159.384913][T19855] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2159.399320][T19855] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2159.409939][T19855] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2159.426068][T19855] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2159.443112][T29812] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 2159.455690][T19855] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2159.466086][T19855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.474921][T29812] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 2159.505801][T29812] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 2159.734052][T19855] usb 10-1: GET_CAPABILITIES returned 0 [ 2159.746405][T19855] usbtmc 10-1:16.0: can't read capabilities [ 2159.763354][T29812] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 2159.804278][T29812] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 2159.850353][T29812] [U] 22½“Æ©ÐÛ©X?0;3U± [ 2159.863003][T29812] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 2159.914454][T29812] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 2159.973943][T29812] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 2159.988579][T19855] usb 10-1: USB disconnect, device number 70 [ 2160.003250][T29794] usbtmc 10-1:16.0: usb_control_msg returned -71 [ 2160.020962][T29812] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 2160.034868][T29812] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 2160.054247][T29812] [U] ¹ EC [ 2160.059249][T29812] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 2160.103529][T29812] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 2160.230269][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.236895][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.861275][T29865] net_ratelimit: 20 callbacks suppressed [ 2160.861289][T29865] netlink: zone id is out of range [ 2160.877545][T29865] netlink: zone id is out of range [ 2160.886741][T29865] netlink: zone id is out of range [ 2160.893632][T29865] netlink: zone id is out of range [ 2160.898854][T29865] netlink: zone id is out of range [ 2160.908745][T29868] PKCS7: Unknown OID: [4] 0.0 [ 2160.942175][T29868] PKCS7: Only support pkcs7_signedData type [ 2160.944311][T29865] netlink: zone id is out of range [ 2160.993970][T29865] netlink: zone id is out of range [ 2161.005917][T29865] netlink: zone id is out of range [ 2161.028797][T29865] netlink: zone id is out of range [ 2161.050435][T29865] netlink: set zone limit has 8 unknown bytes [ 2161.276524][T29872] fuse: Unknown parameter 'fä9d<ô Í%A™ÊÅVÉú'¾ñ é‘òêÎ70cºf00000000000000000000004' [ 2161.657566][T29901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8360'. [ 2161.712109][T19855] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2161.742055][T10494] usb 9-1: new low-speed USB device number 89 using dummy_hcd [ 2161.790279][T29903] xt_l2tp: unknown flags: 1f [ 2161.801741][T19852] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 2161.871702][T19855] usb 1-1: Using ep0 maxpacket: 16 [ 2161.880478][T19855] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17408, setting to 1024 [ 2161.891901][T10494] usb 9-1: device descriptor read/64, error -71 [ 2161.898424][T19855] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 2161.908453][T19855] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2161.918564][T19855] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2161.928271][T19855] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2161.938069][T19852] usb 10-1: device descriptor read/64, error -71 [ 2161.945693][T19855] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2161.954850][T19855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2161.963012][T19855] usb 1-1: SerialNumber: syz [ 2161.980082][T29872] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2161.990050][T29872] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2162.131691][T10494] usb 9-1: new low-speed USB device number 90 using dummy_hcd [ 2162.181748][T19852] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 2162.261828][T10494] usb 9-1: device descriptor read/64, error -71 [ 2162.311884][T19852] usb 10-1: device descriptor read/64, error -71 [ 2162.372001][T10494] usb usb9-port1: attempt power cycle [ 2162.422092][T19852] usb usb10-port1: attempt power cycle [ 2162.713030][T10494] usb 9-1: new low-speed USB device number 91 using dummy_hcd [ 2162.731502][T19855] usb 1-1: USB disconnect, device number 45 [ 2162.746077][T10494] usb 9-1: device descriptor read/8, error -71 [ 2162.761767][T19852] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 2162.794013][T19852] usb 10-1: device descriptor read/8, error -71 [ 2163.011722][T10494] usb 9-1: new low-speed USB device number 92 using dummy_hcd [ 2163.031784][T19852] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 2163.042356][T10494] usb 9-1: device descriptor read/8, error -71 [ 2163.052587][T19852] usb 10-1: device descriptor read/8, error -71 [ 2163.154424][T10494] usb usb9-port1: unable to enumerate USB device [ 2163.171994][T19852] usb usb10-port1: unable to enumerate USB device [ 2164.161688][T19851] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 2164.314664][T19851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2164.326554][T19851] usb 1-1: config 0 has no interfaces? [ 2164.344619][T19851] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2164.362937][T19851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.381264][T19851] usb 1-1: Product: syz [ 2164.391417][T19851] usb 1-1: Manufacturer: syz [ 2164.397824][T19851] usb 1-1: SerialNumber: syz [ 2164.414596][T19851] usb 1-1: config 0 descriptor?? [ 2164.971754][T15066] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 2165.186688][T15066] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2165.214237][T15066] usb 9-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 2165.242634][T15066] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2165.255406][T15066] usb 9-1: config 0 descriptor?? [ 2165.280494][T15066] smsusb:smsusb_probe: board id=8, interface number 0 [ 2165.302148][T15066] smsusb:smsusb_probe: Device initialized with return code -19 [ 2165.402931][T19851] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2165.564180][T19851] usb 4-1: device descriptor read/64, error -71 [ 2165.598120][T29974] tipc: Enabling of bearer rejected, failed to enable media [ 2165.618103][T29974] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2165.627317][T29974] tipc: Enabled bearer , priority 10 [ 2165.656179][ T29] audit: type=1326 audit(1772151368.669:8282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29944 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2165.751746][ T29] audit: type=1326 audit(1772151368.679:8283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29944 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2165.818620][ T29] audit: type=1326 audit(1772151368.679:8284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29944 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2165.881919][T19851] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2165.896704][ T29] audit: type=1326 audit(1772151368.679:8285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29944 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2165.977059][ T29] audit: type=1326 audit(1772151368.679:8286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29944 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2166.024215][T19851] usb 4-1: device descriptor read/64, error -71 [ 2166.048084][ T29] audit: type=1326 audit(1772151368.679:8287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29944 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2ecd9e007 code=0x7ffc0000 [ 2166.116765][ T29] audit: type=1326 audit(1772151368.679:8288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29944 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa2ecd5cfce code=0x7ffc0000 [ 2166.160370][T19851] usb usb4-port1: attempt power cycle [ 2166.185305][ T29] audit: type=1326 audit(1772151368.679:8289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29944 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa2ecd5cfce code=0x7ffc0000 [ 2166.243218][ T29] audit: type=1326 audit(1772151368.679:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29944 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa2ecd5cfce code=0x7ffc0000 [ 2166.284907][ T29] audit: type=1326 audit(1772151368.679:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29944 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa2ecd5cfce code=0x7ffc0000 [ 2166.551740][T19851] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2166.582377][T19851] usb 4-1: device descriptor read/8, error -71 [ 2166.741980][T19855] tipc: Node number set to 594618844 [ 2166.764757][T15066] usb 1-1: USB disconnect, device number 46 [ 2166.840997][T19851] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2166.916070][T19851] usb 4-1: device descriptor read/8, error -71 [ 2167.032075][T19851] usb usb4-port1: unable to enumerate USB device [ 2167.419196][T19851] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2167.581826][T19851] usb 1-1: Using ep0 maxpacket: 16 [ 2167.590694][T19851] usb 1-1: config 0 has no interfaces? [ 2167.597798][T19851] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2167.606929][T19851] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2167.615069][T19851] usb 1-1: Manufacturer: syz [ 2167.630222][T19851] usb 1-1: config 0 descriptor?? [ 2167.730531][T30033] net_ratelimit: 10 callbacks suppressed [ 2167.730552][T30033] netlink: zone id is out of range [ 2167.761921][T30033] netlink: zone id is out of range [ 2167.778814][T30033] netlink: zone id is out of range [ 2167.785698][T30033] netlink: zone id is out of range [ 2167.791061][T30033] netlink: zone id is out of range [ 2167.807926][T30033] netlink: zone id is out of range [ 2167.818197][T30033] netlink: zone id is out of range [ 2167.831872][T30033] netlink: zone id is out of range [ 2167.841276][T30033] netlink: zone id is out of range [ 2167.898621][T30033] netlink: set zone limit has 8 unknown bytes [ 2167.957234][T15066] usb 9-1: USB disconnect, device number 93 [ 2167.967433][T30036] fuse: Unknown parameter 'rootmR54펳 [ 2167.967433][T30036] $0000000000000140000' [ 2170.036198][T30087] loop8: detected capacity change from 0 to 8 [ 2170.065085][T30087] Dev loop8: unable to read RDB block 8 [ 2170.070809][T30087] loop8: unable to read partition table [ 2170.139491][T30087] loop8: partition table beyond EOD, truncated [ 2170.204289][T30087] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2170.295353][T15066] usb 1-1: USB disconnect, device number 47 [ 2170.553857][T30106] input: syz0 as /devices/virtual/input/input137 [ 2170.581129][T30106] input: failed to attach handler leds to device input137, error: -6 [ 2170.783053][T15066] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2170.945360][T15066] usb 1-1: Using ep0 maxpacket: 8 [ 2170.955570][T15066] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2170.967304][T15066] usb 1-1: can't read configurations, error -61 [ 2171.001771][T19855] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2171.112710][T15066] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2171.161412][T30136] delete_channel: no stack [ 2171.284313][T19855] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2171.293821][T19855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.302058][T19855] usb 4-1: Product: syz [ 2171.306428][T19855] usb 4-1: Manufacturer: syz [ 2171.316001][T19855] usb 4-1: SerialNumber: syz [ 2171.369758][T19855] usb 4-1: config 0 descriptor?? [ 2171.385298][T19855] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2171.405242][T15066] usb 1-1: Using ep0 maxpacket: 8 [ 2171.416254][T15066] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2171.429727][T15066] usb 1-1: can't read configurations, error -61 [ 2171.439600][T15066] usb usb1-port1: attempt power cycle [ 2171.546694][T30147] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8394'. [ 2171.823433][T19855] gspca_sunplus: reg_r err -71 [ 2171.875034][T30155] netlink: 'syz.8.8395': attribute type 10 has an invalid length. [ 2171.883012][T30155] netlink: 152 bytes leftover after parsing attributes in process `syz.8.8395'. [ 2172.022174][T30170] fuse: Bad value for 'fd' [ 2172.082052][T15066] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2172.332078][T30125] delete_channel: no stack [ 2172.392998][T15066] usb 1-1: Using ep0 maxpacket: 8 [ 2172.400579][T15066] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2172.408834][T15066] usb 1-1: can't read configurations, error -61 [ 2172.436377][T30175] loop8: detected capacity change from 0 to 8 [ 2172.444923][T29578] Dev loop8: unable to read RDB block 8 [ 2172.450577][T29578] loop8: unable to read partition table [ 2172.456888][T29578] loop8: partition table beyond EOD, truncated [ 2172.482378][T30175] Dev loop8: unable to read RDB block 8 [ 2172.488042][T30175] loop8: unable to read partition table [ 2172.514158][T30175] loop8: partition table beyond EOD, truncated [ 2172.520560][T30175] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2172.541763][T15066] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2172.572728][T15066] usb 1-1: Using ep0 maxpacket: 8 [ 2172.585254][T15066] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2172.593325][T15066] usb 1-1: can't read configurations, error -61 [ 2172.599941][T15066] usb usb1-port1: unable to enumerate USB device [ 2172.771155][T30187] xt_TCPMSS: Only works on TCP SYN packets [ 2173.201879][T19851] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 2173.368620][T19851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2173.383634][T19851] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 2173.397846][T19851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2173.412084][T19851] usb 9-1: config 0 descriptor?? [ 2173.636548][T30208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8406'. [ 2173.772276][T30214] loop8: detected capacity change from 0 to 8 [ 2173.780591][T29578] Dev loop8: unable to read RDB block 8 [ 2173.787647][T29578] loop8: unable to read partition table [ 2173.796681][T29578] loop8: partition table beyond EOD, truncated [ 2173.806174][T30214] Dev loop8: unable to read RDB block 8 [ 2173.821690][T30214] loop8: unable to read partition table [ 2173.828191][T30214] loop8: partition table beyond EOD, truncated [ 2173.848908][T19851] cmedia_hs100b 0003:0D8C:0014.0088: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.8-1/input0 [ 2173.862754][T30214] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2174.047224][T29444] usb 9-1: USB disconnect, device number 94 [ 2174.630936][T30282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8417'. [ 2174.662074][T30282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8417'. [ 2174.698470][T30282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8417'. [ 2174.735941][T30282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8417'. [ 2174.840999][T15066] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 2175.001890][T15066] usb 10-1: device descriptor read/64, error -71 [ 2175.252131][T15066] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 2175.401760][T16422] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 2175.411712][T15066] usb 10-1: device descriptor read/64, error -71 [ 2175.522390][T15066] usb usb10-port1: attempt power cycle [ 2175.612238][T16422] usb 9-1: Using ep0 maxpacket: 16 [ 2175.635944][T16422] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2175.645283][T16422] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2175.654533][T16422] usb 9-1: Product: syz [ 2175.659567][T16422] usb 9-1: Manufacturer: syz [ 2175.667759][T16422] usb 9-1: SerialNumber: syz [ 2175.675768][T16422] usb 9-1: config 0 descriptor?? [ 2175.951684][T15066] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 2176.005539][T15066] usb 10-1: device descriptor read/8, error -71 [ 2176.016744][T29444] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2176.161920][T29444] usb 1-1: device descriptor read/64, error -71 [ 2176.255145][T15066] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 2176.261616][T30325] netlink: 'syz.6.8424': attribute type 9 has an invalid length. [ 2176.270756][T30325] netlink: 'syz.6.8424': attribute type 7 has an invalid length. [ 2176.279358][T30325] netlink: 'syz.6.8424': attribute type 8 has an invalid length. [ 2176.283254][T15066] usb 10-1: device descriptor read/8, error -71 [ 2176.371840][T19855] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 2176.390486][T19855] usb 4-1: USB disconnect, device number 12 [ 2176.402544][T15066] usb usb10-port1: unable to enumerate USB device [ 2176.424980][T29444] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2176.572458][T29444] usb 1-1: device descriptor read/64, error -71 [ 2176.709508][T29444] usb usb1-port1: attempt power cycle [ 2177.062469][T29444] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2177.103128][T29444] usb 1-1: device descriptor read/8, error -71 [ 2177.341797][T29444] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2177.372521][T29444] usb 1-1: device descriptor read/8, error -71 [ 2177.482939][T29444] usb usb1-port1: unable to enumerate USB device [ 2177.902966][T29444] usb 9-1: USB disconnect, device number 95 [ 2178.417280][T30384] netlink: 'syz.8.8430': attribute type 10 has an invalid length. [ 2178.490394][T30384] team0: Port device netdevsim0 added [ 2178.517873][T30389] netlink: 'syz.8.8430': attribute type 10 has an invalid length. [ 2178.694452][T30389] team0: Port device netdevsim0 removed [ 2178.757079][T30389] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2179.362180][T30408] fuse: Unknown parameter 'dont_measure' [ 2179.369570][T30408] netlink: 'syz.6.8435': attribute type 1 has an invalid length. [ 2179.550326][T30408] bond4: entered promiscuous mode [ 2179.614918][T30408] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2179.700545][T30444] bond4: (slave bridge2): making interface the new active one [ 2179.746259][T30444] bridge2: entered promiscuous mode [ 2179.783621][T30444] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 2180.203318][T30465] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 2180.243276][T30465] bond1: left allmulticast mode [ 2180.403312][T30474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2180.528422][T16422] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 2180.558906][T16422] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2180.721047][T30502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8443'. [ 2180.804467][T30496] fido_id[30496]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2180.830603][T30507] usb usb8: usbfs: process 30507 (syz.9.8445) did not claim interface 0 before use [ 2180.888580][T30508] netlink: 'syz.3.8443': attribute type 2 has an invalid length. [ 2181.552000][T15066] usb 10-1: new full-speed USB device number 79 using dummy_hcd [ 2181.734962][T15066] usb 10-1: config 0 has an invalid interface number: 30 but max is 0 [ 2181.744088][T15066] usb 10-1: config 0 has no interface number 0 [ 2181.773018][T15066] usb 10-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 2181.818819][T15066] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.192232][T15066] usb 10-1: config 0 descriptor?? [ 2182.235828][T15066] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 2182.250687][T15066] usb 10-1: setting power ON [ 2182.271294][T15066] dvb-usb: bulk message failed: -22 (2/0) [ 2182.457705][T15066] dvb-usb: bulk message failed: -22 (1/0) [ 2182.624568][T15066] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2182.669875][T15066] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 2182.693526][T15066] dvb_usb_cxusb 10-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 2184.507865][T19855] usb 10-1: USB disconnect, device number 79 [ 2184.555995][T30570] sctp: [Deprecated]: syz.0.8456 (pid 30570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2184.555995][T30570] Use struct sctp_sack_info instead [ 2184.991859][T15066] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 2185.070772][T30597] fuse: Unknown parameter 'rootmod»' [ 2185.129763][T30606] random: crng reseeded on system resumption [ 2185.231690][T15066] usb 9-1: Using ep0 maxpacket: 16 [ 2185.267663][T15066] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 2185.279800][T15066] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2185.290298][T15066] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 2185.301317][T15066] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2185.317043][T15066] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2185.335319][T15066] usb 9-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 2185.356433][T15066] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2185.402160][T15066] usb 9-1: Product: syz [ 2185.406431][T15066] usb 9-1: Manufacturer: syz [ 2185.498661][T15066] usb 9-1: SerialNumber: syz [ 2185.554423][T15066] usb 9-1: config 0 descriptor?? [ 2185.585342][T15066] port100 9-1:0.0: NFC: Could not get supported command types [ 2185.617969][T30617] netlink: 'syz.6.8465': attribute type 16 has an invalid length. [ 2185.650289][T30617] netlink: 'syz.6.8465': attribute type 2 has an invalid length. [ 2185.700448][T30617] netlink: 64102 bytes leftover after parsing attributes in process `syz.6.8465'. [ 2185.796080][T29444] usb 9-1: USB disconnect, device number 96 [ 2186.666040][T30649] sctp: [Deprecated]: syz.8.8470 (pid 30649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2186.666040][T30649] Use struct sctp_sack_info instead [ 2187.581776][T16422] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2187.751932][T16422] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2187.851989][T19852] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 2187.859921][T16422] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 2187.879287][T16422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.910429][T16422] usb 4-1: config 0 descriptor?? [ 2188.011788][T19852] usb 10-1: device descriptor read/64, error -71 [ 2188.251661][T19852] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 2188.407702][T16422] cmedia_hs100b 0003:0D8C:0014.008A: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.3-1/input0 [ 2188.788405][T16422] usb 4-1: USB disconnect, device number 13 [ 2188.901685][T19852] usb 10-1: device descriptor read/64, error -71 [ 2189.031946][T19852] usb usb10-port1: attempt power cycle [ 2189.162057][T30722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8483'. [ 2189.333443][T30742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8483'. [ 2189.382194][T19852] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 2189.504177][T19852] usb 10-1: device descriptor read/8, error -71 [ 2190.000049][T19852] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 2190.042410][T19852] usb 10-1: device descriptor read/8, error -71 [ 2190.159484][T19852] usb usb10-port1: unable to enumerate USB device [ 2191.572837][T15066] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2191.776031][T15066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2191.801727][T16422] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 2191.809395][T15066] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 2191.832238][T15066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.864739][T15066] usb 4-1: config 0 descriptor?? [ 2191.981903][T16422] usb 9-1: Using ep0 maxpacket: 8 [ 2191.991396][T16422] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 2191.999882][T16422] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2192.019568][T16422] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2192.039964][T16422] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2192.062212][T16422] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2192.109116][T16422] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2192.128666][T16422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.192311][T19852] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 2192.363450][T19852] usb 10-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2192.380350][T19852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.403675][T19852] usb 10-1: Product: syz [ 2192.404542][T15066] cmedia_hs100b 0003:0D8C:0014.008B: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.3-1/input0 [ 2192.413344][T19852] usb 10-1: Manufacturer: syz [ 2192.426441][T19852] usb 10-1: SerialNumber: syz [ 2192.454288][T19852] usb 10-1: config 0 descriptor?? [ 2192.474958][T19852] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2192.483819][T30818] netlink: 183436 bytes leftover after parsing attributes in process `syz.0.8497'. [ 2192.534058][T30818] bond3: option lp_interval: invalid value (18446744073709551610) [ 2192.542635][T30818] bond3: option lp_interval: allowed values 1 - 2147483647 [ 2192.556690][T30818] bond3 (unregistering): Released all slaves [ 2192.567065][T19851] usb 4-1: USB disconnect, device number 14 [ 2192.678688][T30807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2192.689744][T30807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2192.902876][T29063] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 2192.935654][T30924] usbtmc 9-1:16.0: simple control status returned 0 [ 2192.962036][T19852] usb 9-1: USB disconnect, device number 97 [ 2193.012104][T15066] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 2193.173162][T15066] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 2193.181386][T15066] usb 1-1: config 0 has no interface number 0 [ 2193.188308][T15066] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2193.199615][T15066] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2193.218144][T15066] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2193.229180][T15066] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2193.242393][T15066] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2193.251468][T15066] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.263905][T15066] usb 1-1: config 0 descriptor?? [ 2193.269846][T30916] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 2193.281102][T15066] ldusb 1-1:0.55: Interrupt in endpoint not found [ 2194.601726][T16422] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2194.763636][T16422] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2194.773014][T16422] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2194.783563][T16422] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2194.796395][T16422] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2194.809931][T16422] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2194.826142][T16422] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2194.835573][T16422] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2194.843736][T16422] usb 4-1: Product: syz [ 2194.848048][T16422] usb 4-1: Manufacturer: syz [ 2194.861642][T16422] cdc_wdm 4-1:1.0: skipping garbage [ 2194.869295][T16422] cdc_wdm 4-1:1.0: skipping garbage [ 2194.877217][T16422] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2194.883454][T16422] cdc_wdm 4-1:1.0: Unknown control protocol [ 2194.977949][T19855] usb 10-1: USB disconnect, device number 84 [ 2195.062767][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2195.069445][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2195.075863][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2195.082455][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2195.088709][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2195.095329][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2195.101776][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2195.108396][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2195.114662][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2195.121251][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2195.126710][T30978] netlink: 64 bytes leftover after parsing attributes in process `syz.9.8503'. [ 2195.132267][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2195.142925][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2195.149375][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2195.156001][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2195.162351][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2195.168969][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2195.175102][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 2195.175116][ T29] audit: type=1326 audit(1772151398.229:8312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.3.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abf39c799 code=0x7ffc0000 [ 2195.181222][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2195.181236][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2195.203838][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2195.203856][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2195.229634][ T29] audit: type=1326 audit(1772151398.229:8313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.3.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8abf39c799 code=0x7ffc0000 [ 2195.258165][ T29] audit: type=1326 audit(1772151398.229:8314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.3.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abf39c799 code=0x7ffc0000 [ 2195.439250][ T29] audit: type=1326 audit(1772151398.229:8315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.3.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f8abf39c799 code=0x7ffc0000 [ 2195.479131][ T29] audit: type=1326 audit(1772151398.229:8316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.3.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abf39c799 code=0x7ffc0000 [ 2195.510409][ T29] audit: type=1326 audit(1772151398.229:8317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.3.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abf39c799 code=0x7ffc0000 [ 2195.583957][ T29] audit: type=1326 audit(1772151398.229:8318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.3.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8abf39c799 code=0x7ffc0000 [ 2195.644266][T30952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2195.661975][ T29] audit: type=1326 audit(1772151398.229:8319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.3.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abf39c799 code=0x7ffc0000 [ 2195.703029][T30952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2195.731797][ T29] audit: type=1326 audit(1772151398.229:8320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.3.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abf39c799 code=0x7ffc0000 [ 2195.874267][T19852] usb 1-1: USB disconnect, device number 56 [ 2195.928497][ T29] audit: type=1326 audit(1772151398.229:8321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30951 comm="syz.3.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8abf39c799 code=0x7ffc0000 [ 2196.242173][T19855] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 2196.433644][T19855] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 2196.442372][T19855] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2196.459672][T19855] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2196.491120][T19855] usb 9-1: config 220 has no interface number 2 [ 2196.523535][T19855] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2196.559445][T19855] usb 9-1: config 220 interface 0 has no altsetting 0 [ 2196.578069][T19855] usb 9-1: config 220 interface 76 has no altsetting 0 [ 2196.592989][T19855] usb 9-1: config 220 interface 1 has no altsetting 0 [ 2196.616935][T19855] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2196.629580][T19855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.665424][T19855] usb 9-1: Product: syz [ 2196.676630][T19855] usb 9-1: Manufacturer: syz [ 2196.689224][T19855] usb 9-1: SerialNumber: syz [ 2196.979809][T19855] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2196.987585][T19855] uvcvideo 9-1:220.0: No valid video chain found. [ 2196.995621][T19855] usb 9-1: selecting invalid altsetting 0 [ 2197.111920][T19855] usb 9-1: selecting invalid altsetting 0 [ 2197.129068][T19855] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 2197.177919][T19855] usb 9-1: USB disconnect, device number 98 [ 2197.571696][T16422] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 2197.602354][T15066] usb 4-1: USB disconnect, device number 15 [ 2197.667565][T31054] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2197.686717][T31055] fuse: Bad value for 'fd' [ 2197.778802][T16422] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2197.796830][T16422] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 2197.827646][T31065] ipip1: entered promiscuous mode [ 2197.841746][T31065] ipip1: entered allmulticast mode [ 2197.881490][T31060] ipvlan2: entered allmulticast mode [ 2197.896121][T16422] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2197.898125][T31060] batadv_slave_1: entered allmulticast mode [ 2197.921428][T16422] usb 10-1: config 0 descriptor?? [ 2197.928859][T31060] batman_adv: batadv0: Adding interface: ipvlan2 [ 2197.935436][T31060] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2198.139223][T31060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2198.161313][T31060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.187224][T31060] batman_adv: batadv0: Interface activated: ipvlan2 [ 2198.208203][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8514'. [ 2198.217276][T15066] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2198.244216][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8514'. [ 2198.271724][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8514'. [ 2198.291098][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8514'. [ 2198.341511][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8514'. [ 2198.387993][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8514'. [ 2198.402590][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8514'. [ 2198.484373][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8514'. [ 2198.493585][T15066] usb 4-1: Using ep0 maxpacket: 16 [ 2198.513027][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8514'. [ 2198.554478][T31079] syz_tun: left promiscuous mode [ 2198.563352][T31079] bridge0: port 2(bridge_slave_1) entered blocking state [ 2198.570557][T31079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2198.579756][T31079] bridge0: port 1(bridge_slave_0) entered blocking state [ 2198.586912][T31079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2199.055768][T15066] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2199.070460][T15066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.090325][T31079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2199.113034][T15066] usb 4-1: Product: syz [ 2199.117202][T15066] usb 4-1: Manufacturer: syz [ 2199.127243][T16422] cmedia_hs100b 0003:0D8C:0014.008C: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.9-1/input0 [ 2199.146994][T15066] usb 4-1: SerialNumber: syz [ 2199.309127][ T24] usb 10-1: USB disconnect, device number 85 [ 2199.632033][T15066] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2199.749504][T15066] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 2199.771246][T29578] udevd[29578]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2199.790061][T15066] usb 4-1: USB disconnect, device number 16 [ 2200.230326][T31136] tipc: Started in network mode [ 2200.235687][T31136] tipc: Node identity b29a6363cb1b, cluster identity 4711 [ 2200.248372][T31136] tipc: Enabled bearer , priority 0 [ 2200.257227][T31136] syzkaller0: entered promiscuous mode [ 2200.263415][T31136] syzkaller0: entered allmulticast mode [ 2200.286606][T31136] __nla_validate_parse: 8 callbacks suppressed [ 2200.286621][T31136] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8519'. [ 2200.311771][T31136] tipc: Resetting bearer [ 2200.531672][T19852] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2200.768388][T31140] tipc: Resetting bearer [ 2200.819691][T31140] tipc: Disabling bearer [ 2200.831763][T19852] usb 1-1: Using ep0 maxpacket: 16 [ 2200.845877][T19852] usb 1-1: config 5 has an invalid interface number: 168 but max is 0 [ 2200.854905][T19852] usb 1-1: config 5 has no interface number 0 [ 2201.225584][T19852] usb 1-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 2201.238054][T19852] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2201.252621][T19852] usb 1-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 2201.264470][T19852] usb 1-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2201.274576][T19852] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 2201.304673][T19852] usb 1-1: config 5 interface 168 has no altsetting 0 [ 2201.334082][T19852] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 2201.346599][T19852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.363935][T19852] usb 1-1: Product: syz [ 2201.370119][T19852] usb 1-1: Manufacturer: syz [ 2201.382499][T19852] usb 1-1: SerialNumber: syz [ 2201.411372][T31130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2201.681761][T29444] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 2201.939477][T19852] usb 1-1: NFC: Unable to get FW version [ 2201.966550][T19852] pn533_usb 1-1:5.168: probe with driver pn533_usb failed with error -90 [ 2202.119354][T19852] usb 1-1: USB disconnect, device number 57 [ 2202.151799][T29444] usb 9-1: Using ep0 maxpacket: 16 [ 2202.160014][T29444] usb 9-1: config 8 has an invalid interface number: 159 but max is 0 [ 2202.168580][T29444] usb 9-1: config 8 has no interface number 0 [ 2202.196391][T29444] usb 9-1: config 8 interface 159 has no altsetting 0 [ 2202.285015][T29444] usb 9-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 2202.311749][T29444] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.319953][T29444] usb 9-1: Product: syz [ 2202.324729][T29444] usb 9-1: Manufacturer: syz [ 2202.329350][T29444] usb 9-1: SerialNumber: syz [ 2202.591914][T29444] gspca_main: sonixj-2.14.0 probing 0c45:612a [ 2202.612415][T29444] gspca_sonixj: reg_w1 err -71 [ 2202.617282][T29444] sonixj 9-1:8.159: probe with driver sonixj failed with error -71 [ 2202.666956][T29444] usb 9-1: USB disconnect, device number 99 [ 2202.774723][T31197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8527'. [ 2202.851724][T19851] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 2203.024180][T19851] usb 4-1: config 0 has an invalid interface number: 228 but max is 0 [ 2203.041657][T19851] usb 4-1: config 0 has no interface number 0 [ 2203.060300][T19851] usb 4-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=ee.a2 [ 2203.072716][T19851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.101648][T19851] usb 4-1: Product: syz [ 2203.106582][T19851] usb 4-1: Manufacturer: syz [ 2203.112504][T19851] usb 4-1: SerialNumber: syz [ 2203.135060][T19851] usb 4-1: config 0 descriptor?? [ 2203.394017][T19851] mct_u232 4-1:0.228: MCT U232 converter detected [ 2203.405855][T19851] mct_u232 ttyUSB0: expected endpoint missing [ 2203.424800][T19851] usb 4-1: USB disconnect, device number 17 [ 2203.437187][T19851] mct_u232 4-1:0.228: device disconnected [ 2203.552803][T29444] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 2203.722102][T29444] usb 10-1: config 0 has an invalid interface number: 147 but max is 0 [ 2203.731957][T29444] usb 10-1: config 0 has no interface number 0 [ 2203.749053][T29444] usb 10-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 2203.775930][T31264] netlink: 7 bytes leftover after parsing attributes in process `syz.0.8536'. [ 2203.887628][T29444] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 2203.905289][T29444] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.906129][T31264] netlink: 'syz.0.8536': attribute type 21 has an invalid length. [ 2203.913790][T29444] usb 10-1: Product: syz [ 2203.931506][T29444] usb 10-1: Manufacturer: syz [ 2203.933586][T31264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8536'. [ 2203.938048][T29444] usb 10-1: SerialNumber: syz [ 2204.092680][T29444] usb 10-1: config 0 descriptor?? [ 2204.156590][T29444] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2204.312650][T22345] usb 10-1: Failed to submit usb control message: -71 [ 2204.331469][T29444] usb 10-1: USB disconnect, device number 86 [ 2204.337672][T22345] usb 10-1: unable to send the bmi data to the device: -71 [ 2204.392082][T22345] usb 10-1: unable to get target info from device [ 2204.428938][T22345] usb 10-1: could not get target info (-71) [ 2204.481626][T22345] usb 10-1: could not probe fw (-71) [ 2204.514649][T31283] netlink: 'syz.0.8538': attribute type 1 has an invalid length. [ 2204.554764][T31283] netlink: 'syz.0.8538': attribute type 1 has an invalid length. [ 2205.369028][T15066] usb 10-1: new full-speed USB device number 87 using dummy_hcd [ 2205.544104][T15066] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 2205.552879][T15066] usb 10-1: config 0 has no interface number 0 [ 2205.561397][T15066] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 2205.592423][T15066] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2205.624789][T15066] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 2205.634396][T15066] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2205.642933][T15066] usb 10-1: Product: syz [ 2205.647321][T15066] usb 10-1: Manufacturer: syz [ 2205.663415][T15066] usb 10-1: SerialNumber: syz [ 2205.727352][T15066] usb 10-1: config 0 descriptor?? [ 2205.997131][T15066] usbtouchscreen 10-1:0.214: Failed to read FW rev: -71 [ 2206.014771][T15066] usbtouchscreen 10-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 2206.064618][T15066] usb 10-1: USB disconnect, device number 87 [ 2206.116320][T19852] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 2206.272152][T19852] usb 9-1: device descriptor read/64, error -71 [ 2206.552983][T19852] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 2206.712715][T19852] usb 9-1: device descriptor read/64, error -71 [ 2206.954939][T19852] usb usb9-port1: attempt power cycle [ 2207.131892][T15066] usb 10-1: new full-speed USB device number 88 using dummy_hcd [ 2207.381625][T19852] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 2207.603660][T15066] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2207.621952][T19852] usb 9-1: device descriptor read/8, error -71 [ 2207.636111][T15066] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2207.791735][T15066] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2207.841538][T15066] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2207.863196][T15066] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2207.873188][T15066] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2207.934991][T15066] usb 10-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 2207.951750][T19852] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 2207.959703][T15066] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.982368][T19852] usb 9-1: device descriptor read/8, error -71 [ 2208.011628][T15066] usb 10-1: Product: syz [ 2208.017513][T15066] usb 10-1: Manufacturer: syz [ 2208.032535][T15066] usb 10-1: SerialNumber: syz [ 2208.075087][T15066] usb 10-1: config 0 descriptor?? [ 2208.092260][T19852] usb usb9-port1: unable to enumerate USB device [ 2208.102934][T15066] ti_usb_3410_5052 10-1:0.0: TI USB 5052 2 port adapter converter detected [ 2208.152154][T15066] ti_usb_3410_5052 10-1:0.0: missing endpoints [ 2208.921889][T15066] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2209.098085][T31407] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8556'. [ 2209.176212][T15066] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2209.188301][T15066] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2209.202003][T15066] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2209.278681][T15066] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2209.294009][T15066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.304934][T15066] usb 4-1: Product: syz [ 2209.309286][T15066] usb 4-1: Manufacturer: syz [ 2209.316881][T15066] usb 4-1: SerialNumber: syz [ 2209.658408][T15066] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2210.129812][T15066] usb 4-1: USB disconnect, device number 19 [ 2210.141517][T15066] usblp0: removed [ 2210.867017][T15066] usb 10-1: USB disconnect, device number 88 [ 2211.096630][T31464] binder: 31463:31464 unknown command 0 [ 2211.102424][T31464] binder: 31463:31464 ioctl c0306201 200000000080 returned -22 [ 2211.164790][T31473] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8560'. [ 2211.650702][T31489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8567'. [ 2211.828505][T31493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8567'. [ 2212.302020][T31502] loop8: detected capacity change from 0 to 8 [ 2212.316461][T14669] Dev loop8: unable to read RDB block 8 [ 2212.322207][T15066] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2212.341867][T14669] loop8: unable to read partition table [ 2212.347861][T14669] loop8: partition table beyond EOD, truncated [ 2212.358495][T31502] Dev loop8: unable to read RDB block 8 [ 2212.368041][T31502] loop8: unable to read partition table [ 2212.379744][T31502] loop8: partition table beyond EOD, truncated [ 2212.387415][T31502] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2212.462011][T15066] usb 4-1: device descriptor read/64, error -71 [ 2212.713606][T15066] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2212.866076][T15066] usb 4-1: device descriptor read/64, error -71 [ 2212.982935][T15066] usb usb4-port1: attempt power cycle [ 2213.223458][T31530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8574'. [ 2213.296255][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 2213.296274][ T29] audit: type=1326 audit(1772151416.329:8361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31525 comm="syz.8.8573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2213.416454][T15066] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2213.455677][ T29] audit: type=1326 audit(1772151416.329:8362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31525 comm="syz.8.8573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2213.532541][T31530] bond3: option broadcast_neighbor: invalid value (30) [ 2213.608769][T15066] usb 4-1: device descriptor read/8, error -71 [ 2213.629872][ T29] audit: type=1326 audit(1772151416.329:8363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31525 comm="syz.8.8573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2213.658037][T31530] bond3 (unregistering): Released all slaves [ 2213.734594][ T29] audit: type=1326 audit(1772151416.329:8364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31525 comm="syz.8.8573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2213.842094][ T29] audit: type=1326 audit(1772151416.329:8365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31525 comm="syz.8.8573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2213.921654][T15066] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2214.003370][ T29] audit: type=1326 audit(1772151416.329:8366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31525 comm="syz.8.8573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2214.028837][T15066] usb 4-1: device descriptor read/8, error -71 [ 2214.128479][ T29] audit: type=1326 audit(1772151416.329:8367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31525 comm="syz.8.8573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2214.183485][T15066] usb usb4-port1: unable to enumerate USB device [ 2214.271814][ T29] audit: type=1326 audit(1772151416.329:8368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31525 comm="syz.8.8573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2214.347820][ T29] audit: type=1326 audit(1772151416.329:8369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31525 comm="syz.8.8573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2214.401471][ T29] audit: type=1326 audit(1772151416.329:8370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31525 comm="syz.8.8573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecd9c799 code=0x7ffc0000 [ 2214.773579][T31617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2214.989286][T31624] loop8: detected capacity change from 0 to 8 [ 2215.024603][T31624] Dev loop8: unable to read RDB block 8 [ 2215.030246][T31624] loop8: unable to read partition table [ 2215.046641][T31624] loop8: partition table beyond EOD, truncated [ 2215.066980][T31624] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2215.081775][T19852] usb 10-1: new full-speed USB device number 89 using dummy_hcd [ 2215.103093][ T5194] Dev loop8: unable to read RDB block 8 [ 2215.108677][ T5194] loop8: unable to read partition table [ 2215.145256][ T5194] loop8: partition table beyond EOD, truncated [ 2215.555142][T19852] usb 10-1: config 0 has an invalid interface number: 113 but max is 0 [ 2215.564776][T19852] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2215.575261][T19852] usb 10-1: config 0 has no interface number 0 [ 2215.581815][T19852] usb 10-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 2215.595245][T19852] usb 10-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2215.627481][T19852] usb 10-1: config 0 interface 113 has no altsetting 0 [ 2215.707703][T19852] usb 10-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2215.732581][T19852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.756972][T19852] usb 10-1: Product: syz [ 2215.761267][T19852] usb 10-1: Manufacturer: syz [ 2215.839162][T31645] dvmrp9: entered allmulticast mode [ 2216.015231][T19852] usb 10-1: SerialNumber: syz [ 2216.073650][T19852] usb 10-1: config 0 descriptor?? [ 2216.113766][T19852] pn533_usb 10-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 2217.340314][T31662] loop8: detected capacity change from 0 to 8 [ 2217.354654][T31662] Dev loop8: unable to read RDB block 8 [ 2217.360687][T31662] loop8: unable to read partition table [ 2217.401479][T31662] loop8: partition table beyond EOD, truncated [ 2217.419224][T31662] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2217.985906][T31679] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2218.488135][ T24] usb 10-1: USB disconnect, device number 89 [ 2218.542910][T31700] loop8: detected capacity change from 0 to 8 [ 2218.558797][T29578] Dev loop8: unable to read RDB block 8 [ 2218.566996][T29578] loop8: unable to read partition table [ 2218.580556][T29578] loop8: partition table beyond EOD, truncated [ 2218.610470][T31700] Dev loop8: unable to read RDB block 8 [ 2218.682599][T31700] loop8: unable to read partition table [ 2218.706201][T31700] loop8: partition table beyond EOD, truncated [ 2218.750944][T31700] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2219.747434][T31738] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8597'. [ 2219.966124][T31738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2220.958951][T31772] fuse: Bad value for 'fd' [ 2221.012501][T19855] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 2221.116329][T31778] FAULT_INJECTION: forcing a failure. [ 2221.116329][T31778] name failslab, interval 1, probability 0, space 0, times 0 [ 2221.166255][T31778] CPU: 1 UID: 0 PID: 31778 Comm: syz.9.8606 Tainted: G L syzkaller #0 PREEMPT(full) [ 2221.166282][T31778] Tainted: [L]=SOFTLOCKUP [ 2221.166287][T31778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2221.166297][T31778] Call Trace: [ 2221.166304][T31778] [ 2221.166310][T31778] dump_stack_lvl+0xe8/0x150 [ 2221.166335][T31778] should_fail_ex+0x412/0x560 [ 2221.166357][T31778] should_failslab+0xa8/0x100 [ 2221.166382][T31778] __kmalloc_noprof+0xe8/0x760 [ 2221.166405][T31778] ? tomoyo_encode+0x28b/0x550 [ 2221.166446][T31778] tomoyo_encode+0x28b/0x550 [ 2221.166469][T31778] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2221.166496][T31778] ? tomoyo_path_number_perm+0x219/0x630 [ 2221.166512][T31778] tomoyo_path_number_perm+0x246/0x630 [ 2221.166532][T31778] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2221.166550][T31778] ? __lock_acquire+0x6b5/0x2cf0 [ 2221.166577][T31778] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2221.166617][T31778] ? __fget_files+0x2a/0x420 [ 2221.166638][T31778] ? __fget_files+0x2a/0x420 [ 2221.166659][T31778] ? __fget_files+0x3a0/0x420 [ 2221.166677][T31778] ? __fget_files+0x2a/0x420 [ 2221.166699][T31778] security_file_ioctl+0xc3/0x2a0 [ 2221.166724][T31778] __se_sys_ioctl+0x47/0x170 [ 2221.166741][T31778] do_syscall_64+0x14d/0xf80 [ 2221.166762][T31778] ? trace_irq_disable+0x3b/0x150 [ 2221.166782][T31778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2221.166797][T31778] ? clear_bhb_loop+0x40/0x90 [ 2221.166814][T31778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2221.166828][T31778] RIP: 0033:0x7fd0b739c799 [ 2221.166842][T31778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2221.166855][T31778] RSP: 002b:00007fd0b81b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2221.166871][T31778] RAX: ffffffffffffffda RBX: 00007fd0b7615fa0 RCX: 00007fd0b739c799 [ 2221.166881][T31778] RDX: 0000200000000740 RSI: 000000004048aec9 RDI: 0000000000000004 [ 2221.166891][T31778] RBP: 00007fd0b81b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2221.166900][T31778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2221.166908][T31778] R13: 00007fd0b7616038 R14: 00007fd0b7615fa0 R15: 00007fd0b773fa48 [ 2221.166930][T31778] [ 2221.168218][T31778] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2221.212651][T19855] usb 9-1: Using ep0 maxpacket: 32 [ 2221.437534][T19855] usb 9-1: config 255 has an invalid interface number: 62 but max is 0 [ 2221.446207][T19855] usb 9-1: config 255 has no interface number 0 [ 2221.491824][T19855] usb 9-1: config 255 interface 62 has no altsetting 0 [ 2221.524557][T19855] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=55.37 [ 2221.543874][T19855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2221.573201][T19855] usb 9-1: Product: syz [ 2221.574503][T31783] loop8: detected capacity change from 0 to 8 [ 2221.582818][T19855] usb 9-1: Manufacturer: syz [ 2221.592108][T19855] usb 9-1: SerialNumber: syz [ 2221.601943][T29578] Dev loop8: unable to read RDB block 8 [ 2221.607548][T29578] loop8: unable to read partition table [ 2221.641343][T19855] sr9700 9-1:255.62: probe with driver sr9700 failed with error -22 [ 2221.662621][T29578] loop8: partition table beyond EOD, truncated [ 2221.672214][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.679193][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.694906][T31783] Dev loop8: unable to read RDB block 8 [ 2221.705768][T31783] loop8: unable to read partition table [ 2221.716974][T31783] loop8: partition table beyond EOD, truncated [ 2221.723739][T31783] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2222.032056][T31810] netlink: 2048 bytes leftover after parsing attributes in process `syz.8.8604'. [ 2222.045664][T31810] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8604'. [ 2222.481028][T31805] syzkaller0: entered promiscuous mode [ 2222.486935][T31805] syzkaller0: entered allmulticast mode [ 2223.101923][T31855] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8613'. [ 2223.271714][T19855] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 2223.435299][T19855] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2223.443895][T19855] usb 1-1: not running at top speed; connect to a high speed hub [ 2223.458520][T19855] usb 1-1: config 2 has an invalid interface number: 226 but max is 1 [ 2223.469105][T19855] usb 1-1: config 2 has an invalid descriptor of length 200, skipping remainder of the config [ 2223.481470][T19855] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 2223.495116][T19855] usb 1-1: config 2 has no interface number 0 [ 2223.505965][T19855] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2223.530440][T19855] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 2223.590282][T19855] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37376, setting to 64 [ 2223.604801][T19855] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 2223.614264][T19855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.632355][T19855] usb 1-1: Product: syz [ 2223.642984][T19855] usb 1-1: Manufacturer: syz [ 2223.654664][T19855] usb 1-1: SerialNumber: syz [ 2223.750088][T31844] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2223.953182][T22341] [ 2223.955576][T22341] ============================================ [ 2223.961779][T22341] WARNING: possible recursive locking detected [ 2223.967946][T22341] syzkaller #0 Tainted: G L [ 2223.973929][T22341] -------------------------------------------- [ 2223.980065][T22341] kworker/u8:3/22341 is trying to acquire lock: [ 2223.986299][T22341] ffff888059b9b760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 2223.995615][T22341] [ 2223.995615][T22341] but task is already holding lock: [ 2224.002977][T22341] ffff888059b9b760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 2224.012568][T22341] [ 2224.012568][T22341] other info that might help us debug this: [ 2224.020737][T22341] Possible unsafe locking scenario: [ 2224.020737][T22341] [ 2224.028195][T22341] CPU0 [ 2224.031465][T22341] ---- [ 2224.034737][T22341] lock(k-sk_lock-AF_INET6); [ 2224.039434][T22341] lock(k-sk_lock-AF_INET6); [ 2224.044131][T22341] [ 2224.044131][T22341] *** DEADLOCK *** [ 2224.044131][T22341] [ 2224.052298][T22341] May be due to missing lock nesting notation [ 2224.052298][T22341] [ 2224.060614][T22341] 4 locks held by kworker/u8:3/22341: [ 2224.065976][T22341] #0: ffff888033808948 ((wq_completion)krds_cp_wq#6/0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 2224.077641][T22341] #1: ffffc900034b7c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 2224.090432][T22341] #2: ffff888059b9b760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 2224.100431][T22341] #3: ffff888059b9b908 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 2224.110438][T22341] [ 2224.110438][T22341] stack backtrace: [ 2224.116333][T22341] CPU: 0 UID: 0 PID: 22341 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 2224.116359][T22341] Tainted: [L]=SOFTLOCKUP [ 2224.116365][T22341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2224.116388][T22341] Workqueue: krds_cp_wq#6/0 rds_send_worker [ 2224.116416][T22341] Call Trace: [ 2224.116423][T22341] [ 2224.116431][T22341] dump_stack_lvl+0xe8/0x150 [ 2224.116457][T22341] print_deadlock_bug+0x279/0x290 [ 2224.116485][T22341] __lock_acquire+0x253f/0x2cf0 [ 2224.116510][T22341] ? __bfs+0x153/0x290 [ 2224.116532][T22341] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 2224.116563][T22341] ? check_path+0x21/0x40 [ 2224.116587][T22341] ? check_noncircular+0xda/0x150 [ 2224.116612][T22341] ? __bfs+0x153/0x290 [ 2224.116634][T22341] ? __pfx_usage_match+0x10/0x10 [ 2224.116659][T22341] lock_acquire+0xf0/0x2e0 [ 2224.116681][T22341] ? inet6_getname+0x15d/0x650 [ 2224.116703][T22341] lock_sock_nested+0x48/0x100 [ 2224.116723][T22341] ? inet6_getname+0x15d/0x650 [ 2224.116742][T22341] inet6_getname+0x15d/0x650 [ 2224.116760][T22341] ? do_raw_spin_lock+0x12b/0x2f0 [ 2224.116781][T22341] rds_tcp_conn_slots_available+0x288/0x470 [ 2224.116803][T22341] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2224.116829][T22341] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2224.116854][T22341] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2224.116875][T22341] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 2224.116897][T22341] ? rds_send_worker+0x7d/0x2e0 [ 2224.116921][T22341] ? process_scheduled_works+0xb02/0x1830 [ 2224.116944][T22341] ? worker_thread+0xa50/0xfc0 [ 2224.116972][T22341] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 2224.117010][T22341] rds_recv_incoming+0x9f6/0x12d0 [ 2224.117054][T22341] ? __pfx_rds_recv_incoming+0x10/0x10 [ 2224.117081][T22341] ? skb_copy_bits+0x7e5/0x8f0 [ 2224.117115][T22341] rds_tcp_data_recv+0x7f1/0xa40 [ 2224.117147][T22341] __tcp_read_sock+0x196/0x970 [ 2224.117173][T22341] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 2224.117198][T22341] rds_tcp_data_ready+0x369/0x9a0 [ 2224.117222][T22341] ? __pfx_sock_def_readable+0x10/0x10 [ 2224.117246][T22341] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 2224.117277][T22341] tcp_data_queue+0x1e2e/0x5e50 [ 2224.117318][T22341] ? tcp_urg+0x106/0x410 [ 2224.117348][T22341] ? __pfx_tcp_data_queue+0x10/0x10 [ 2224.117390][T22341] ? __pfx_tcp_urg+0x10/0x10 [ 2224.117420][T22341] ? ktime_get+0x45/0x200 [ 2224.117439][T22341] ? seqcount_lockdep_reader_access+0x10/0x100 [ 2224.117461][T22341] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 2224.117496][T22341] tcp_rcv_established+0xf45/0x2740 [ 2224.117534][T22341] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2224.117564][T22341] ? ip6_dst_check+0x60/0x7e0 [ 2224.117589][T22341] ? ip6_dst_check+0xe2/0x7e0 [ 2224.117612][T22341] ? ip6_dst_check+0x5e3/0x7e0 [ 2224.117636][T22341] ? __pfx_ip6_dst_check+0x10/0x10 [ 2224.117661][T22341] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 2224.117686][T22341] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 2224.117705][T22341] __release_sock+0x1b8/0x3a0 [ 2224.117730][T22341] release_sock+0x5f/0x1f0 [ 2224.117754][T22341] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 2224.117780][T22341] rds_send_xmit+0x207e/0x28d0 [ 2224.117826][T22341] ? __pfx_rds_send_xmit+0x10/0x10 [ 2224.117856][T22341] rds_send_worker+0x7d/0x2e0 [ 2224.117884][T22341] ? process_scheduled_works+0xa25/0x1830 [ 2224.117911][T22341] process_scheduled_works+0xb02/0x1830 [ 2224.117952][T22341] ? __pfx_process_scheduled_works+0x10/0x10 [ 2224.117982][T22341] ? assign_work+0x3d5/0x5e0 [ 2224.118010][T22341] worker_thread+0xa50/0xfc0 [ 2224.118050][T22341] kthread+0x388/0x470 [ 2224.118070][T22341] ? __pfx_worker_thread+0x10/0x10 [ 2224.118097][T22341] ? __pfx_kthread+0x10/0x10 [ 2224.118117][T22341] ret_from_fork+0x51e/0xb90 [ 2224.118146][T22341] ? __pfx_ret_from_fork+0x10/0x10 [ 2224.118173][T22341] ? __switch_to+0xc7d/0x1450 [ 2224.118198][T22341] ? __pfx_kthread+0x10/0x10 [ 2224.118218][T22341] ret_from_fork_asm+0x1a/0x30 [ 2224.118262][T22341] [ 2224.495267][T22341] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 2224.504034][T22341] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 22341, name: kworker/u8:3 [ 2224.513319][T22341] preempt_count: 201, expected: 0 [ 2224.518327][T22341] RCU nest depth: 0, expected: 0 [ 2224.523269][T22341] INFO: lockdep is turned off. [ 2224.528010][T22341] Preemption disabled at: [ 2224.528017][T22341] [<0000000000000000>] 0x0 [ 2224.536762][T22341] CPU: 0 UID: 0 PID: 22341 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 2224.536782][T22341] Tainted: [L]=SOFTLOCKUP [ 2224.536788][T22341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2224.536798][T22341] Workqueue: krds_cp_wq#6/0 rds_send_worker [ 2224.536821][T22341] Call Trace: [ 2224.536828][T22341] [ 2224.536834][T22341] dump_stack_lvl+0xe8/0x150 [ 2224.536854][T22341] __might_resched+0x378/0x4d0 [ 2224.536876][T22341] lock_sock_nested+0x5d/0x100 [ 2224.536892][T22341] inet6_getname+0x15d/0x650 [ 2224.536907][T22341] ? do_raw_spin_lock+0x12b/0x2f0 [ 2224.536923][T22341] rds_tcp_conn_slots_available+0x288/0x470 [ 2224.536940][T22341] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2224.536970][T22341] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2224.536990][T22341] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2224.537024][T22341] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 2224.537042][T22341] ? rds_send_worker+0x7d/0x2e0 [ 2224.537062][T22341] ? process_scheduled_works+0xb02/0x1830 [ 2224.537082][T22341] ? worker_thread+0xa50/0xfc0 [ 2224.537105][T22341] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 2224.537128][T22341] rds_recv_incoming+0x9f6/0x12d0 [ 2224.537149][T22341] ? __pfx_rds_recv_incoming+0x10/0x10 [ 2224.537168][T22341] ? skb_copy_bits+0x7e5/0x8f0 [ 2224.537191][T22341] rds_tcp_data_recv+0x7f1/0xa40 [ 2224.537215][T22341] __tcp_read_sock+0x196/0x970 [ 2224.537232][T22341] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 2224.537250][T22341] rds_tcp_data_ready+0x369/0x9a0 [ 2224.537267][T22341] ? __pfx_sock_def_readable+0x10/0x10 [ 2224.537283][T22341] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 2224.537305][T22341] tcp_data_queue+0x1e2e/0x5e50 [ 2224.537340][T22341] ? tcp_urg+0x106/0x410 [ 2224.537362][T22341] ? __pfx_tcp_data_queue+0x10/0x10 [ 2224.537385][T22341] ? __pfx_tcp_urg+0x10/0x10 [ 2224.537406][T22341] ? ktime_get+0x45/0x200 [ 2224.537419][T22341] ? seqcount_lockdep_reader_access+0x10/0x100 [ 2224.537434][T22341] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 2224.537460][T22341] tcp_rcv_established+0xf45/0x2740 [ 2224.537488][T22341] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2224.537510][T22341] ? ip6_dst_check+0x60/0x7e0 [ 2224.537528][T22341] ? ip6_dst_check+0xe2/0x7e0 [ 2224.537546][T22341] ? ip6_dst_check+0x5e3/0x7e0 [ 2224.537563][T22341] ? __pfx_ip6_dst_check+0x10/0x10 [ 2224.537581][T22341] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 2224.537600][T22341] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 2224.537613][T22341] __release_sock+0x1b8/0x3a0 [ 2224.537630][T22341] release_sock+0x5f/0x1f0 [ 2224.537648][T22341] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 2224.537667][T22341] rds_send_xmit+0x207e/0x28d0 [ 2224.537699][T22341] ? __pfx_rds_send_xmit+0x10/0x10 [ 2224.537722][T22341] rds_send_worker+0x7d/0x2e0 [ 2224.537742][T22341] ? process_scheduled_works+0xa25/0x1830 [ 2224.537762][T22341] process_scheduled_works+0xb02/0x1830 [ 2224.537790][T22341] ? __pfx_process_scheduled_works+0x10/0x10 [ 2224.537811][T22341] ? assign_work+0x3d5/0x5e0 [ 2224.537831][T22341] worker_thread+0xa50/0xfc0 [ 2224.537860][T22341] kthread+0x388/0x470 [ 2224.537874][T22341] ? __pfx_worker_thread+0x10/0x10 [ 2224.537893][T22341] ? __pfx_kthread+0x10/0x10 [ 2224.537907][T22341] ret_from_fork+0x51e/0xb90 [ 2224.537928][T22341] ? __pfx_ret_from_fork+0x10/0x10 [ 2224.537946][T22341] ? __switch_to+0xc7d/0x1450 [ 2224.537964][T22341] ? __pfx_kthread+0x10/0x10 [ 2224.537978][T22341] ret_from_fork_asm+0x1a/0x30 [ 2224.538006][T22341] [ 2224.538014][T22341] BUG: scheduling while atomic: kworker/u8:3/22341/0x00000202 [ 2224.875386][T22341] INFO: lockdep is turned off. [ 2224.880146][T22341] Modules linked in: [ 2224.884045][T22341] Preemption disabled at: [ 2224.884053][T22341] [<0000000000000000>] 0x0 [ 2224.892802][T22341] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 2224.901603][T22341] CPU: 0 UID: 0 PID: 22341 Comm: kworker/u8:3 Tainted: G W L syzkaller #0 PREEMPT(full) [ 2224.912748][T22341] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2224.917958][T22341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2224.928026][T22341] Workqueue: krds_cp_wq#6/0 rds_send_worker [ 2224.933932][T22341] Call Trace: [ 2224.937231][T22341] [ 2224.940164][T22341] vpanic+0x56c/0xa60 [ 2224.944154][T22341] ? __pfx_vpanic+0x10/0x10 [ 2224.948656][T22341] ? rcu_is_watching+0x15/0xb0 [ 2224.953425][T22341] panic+0xc5/0xd0 [ 2224.957155][T22341] ? __pfx_panic+0x10/0x10 [ 2224.961581][T22341] ? __pfx__printk+0x10/0x10 [ 2224.966174][T22341] ? vprintk_emit+0x4eb/0x560 [ 2224.970884][T22341] ? __pfx_vprintk_emit+0x10/0x10 [ 2224.975912][T22341] check_panic_on_warn+0x89/0xb0 [ 2224.980847][T22341] __schedule_bug+0xf6/0x150 [ 2224.985437][T22341] __schedule+0x16a9/0x5340 [ 2224.989936][T22341] ? __wake_up_klogd+0xe6/0x120 [ 2224.994784][T22341] ? vprintk_emit+0x4eb/0x560 [ 2224.999488][T22341] ? rcu_is_watching+0x15/0xb0 [ 2225.004267][T22341] ? __pfx_vprintk_emit+0x10/0x10 [ 2225.009288][T22341] ? unwind_next_frame+0xa5/0x23c0 [ 2225.014405][T22341] ? do_raw_spin_lock+0x12b/0x2f0 [ 2225.019432][T22341] ? __pfx___schedule+0x10/0x10 [ 2225.024280][T22341] ? rcu_is_watching+0x15/0xb0 [ 2225.029050][T22341] ? rcu_is_watching+0x15/0xb0 [ 2225.033819][T22341] ? lock_release+0x4b/0x3d0 [ 2225.038426][T22341] ? schedule+0x90/0x360 [ 2225.042688][T22341] ? wq_worker_sleeping+0x63/0x250 [ 2225.047806][T22341] schedule+0x164/0x360 [ 2225.051975][T22341] __lock_sock+0x161/0x2c0 [ 2225.056415][T22341] ? __pfx___lock_sock+0x10/0x10 [ 2225.061351][T22341] ? do_raw_spin_lock+0x12b/0x2f0 [ 2225.066375][T22341] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2225.072448][T22341] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2225.077841][T22341] ? lock_acquire+0x57/0x2e0 [ 2225.082437][T22341] ? dump_stack_lvl+0x135/0x150 [ 2225.087294][T22341] ? lock_sock_nested+0x6a/0x100 [ 2225.092236][T22341] lock_sock_nested+0x9f/0x100 [ 2225.097003][T22341] inet6_getname+0x15d/0x650 [ 2225.101608][T22341] ? do_raw_spin_lock+0x12b/0x2f0 [ 2225.106654][T22341] rds_tcp_conn_slots_available+0x288/0x470 [ 2225.112547][T22341] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2225.118969][T22341] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2225.124776][T22341] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2225.131204][T22341] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 2225.136342][T22341] ? rds_send_worker+0x7d/0x2e0 [ 2225.141198][T22341] ? process_scheduled_works+0xb02/0x1830 [ 2225.146923][T22341] ? worker_thread+0xa50/0xfc0 [ 2225.151702][T22341] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 2225.157384][T22341] rds_recv_incoming+0x9f6/0x12d0 [ 2225.162418][T22341] ? __pfx_rds_recv_incoming+0x10/0x10 [ 2225.167882][T22341] ? skb_copy_bits+0x7e5/0x8f0 [ 2225.172657][T22341] rds_tcp_data_recv+0x7f1/0xa40 [ 2225.177605][T22341] __tcp_read_sock+0x196/0x970 [ 2225.182370][T22341] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 2225.187833][T22341] rds_tcp_data_ready+0x369/0x9a0 [ 2225.192850][T22341] ? __pfx_sock_def_readable+0x10/0x10 [ 2225.198316][T22341] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 2225.203861][T22341] tcp_data_queue+0x1e2e/0x5e50 [ 2225.208722][T22341] ? tcp_urg+0x106/0x410 [ 2225.212961][T22341] ? __pfx_tcp_data_queue+0x10/0x10 [ 2225.218166][T22341] ? __pfx_tcp_urg+0x10/0x10 [ 2225.222758][T22341] ? ktime_get+0x45/0x200 [ 2225.227098][T22341] ? seqcount_lockdep_reader_access+0x10/0x100 [ 2225.233242][T22341] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 2225.239047][T22341] tcp_rcv_established+0xf45/0x2740 [ 2225.244247][T22341] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2225.249875][T22341] ? ip6_dst_check+0x60/0x7e0 [ 2225.254555][T22341] ? ip6_dst_check+0xe2/0x7e0 [ 2225.259233][T22341] ? ip6_dst_check+0x5e3/0x7e0 [ 2225.264009][T22341] ? __pfx_ip6_dst_check+0x10/0x10 [ 2225.269135][T22341] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 2225.273810][T22341] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 2225.278920][T22341] __release_sock+0x1b8/0x3a0 [ 2225.283595][T22341] release_sock+0x5f/0x1f0 [ 2225.288003][T22341] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 2225.294234][T22341] rds_send_xmit+0x207e/0x28d0 [ 2225.299018][T22341] ? __pfx_rds_send_xmit+0x10/0x10 [ 2225.304130][T22341] rds_send_worker+0x7d/0x2e0 [ 2225.308806][T22341] ? process_scheduled_works+0xa25/0x1830 [ 2225.314516][T22341] process_scheduled_works+0xb02/0x1830 [ 2225.320057][T22341] ? __pfx_process_scheduled_works+0x10/0x10 [ 2225.326031][T22341] ? assign_work+0x3d5/0x5e0 [ 2225.330614][T22341] worker_thread+0xa50/0xfc0 [ 2225.335225][T22341] kthread+0x388/0x470 [ 2225.339286][T22341] ? __pfx_worker_thread+0x10/0x10 [ 2225.344405][T22341] ? __pfx_kthread+0x10/0x10 [ 2225.348984][T22341] ret_from_fork+0x51e/0xb90 [ 2225.353577][T22341] ? __pfx_ret_from_fork+0x10/0x10 [ 2225.358681][T22341] ? __switch_to+0xc7d/0x1450 [ 2225.363362][T22341] ? __pfx_kthread+0x10/0x10 [ 2225.367951][T22341] ret_from_fork_asm+0x1a/0x30 [ 2225.372731][T22341] [ 2225.376352][T22341] Kernel Offset: disabled [ 2225.380675][T22341] Rebooting in 86400 seconds..